python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203 >  A fXW^^fϺ]u lcCiD-=/V^;HN@1LQ"9QS>c9M 1DǠTrg(61_&ؘQ iH^~+$4@;F}%x=^2˕A!=%rب70Qo&'RƽG~w.2K΋ =3-Nz4>p=?d  4 _@DUjp       4\S(o8xf9f:`fFGH4ITX\Yd\]^bcdefltu8vXz  &hlCpython3-perf-debuginfo5.10.060.139.0.166.oe2203Debug information for package python3-perfThis package provides debug information for package python3-perf. Debug information is useful when developing applications that use this package or when debugging this package.fVpobs-worker1640081563-aarch64-0005.novalocalPHuawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgDevelopment/Debughttp://www.kernel.org/linuxaarch640`AAAAA$fVpfVpfVpfVpfVpfVpfVpfVpf0ee95ba1dd404af7da3f90ff3725bfd03167ba46f8df17e2e78d9e8c23f3fbdea357605481a59510438ad3c8705167edf2fab4adc3f8358ca5884d6cd03f65ca7664f49d14f41f55031351de5f0bf0188c7c94b0f57d6d971f6ef129e734984rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkernel-5.10.0-60.139.0.166.oe2203.src.rpmpython3-perf-debuginfopython3-perf-debuginfo(aarch-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.17.0fWfM@fDf;i@f(@ff@f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@Jialin Zhang - 5.10.0-60.139.0.166Jialin Zhang - 5.10.0-60.138.0.165Jialin Zhang - 5.10.0-60.137.0.164Jialin Zhang - 5.10.0-60.136.0.163Jialin Zhang - 5.10.0-60.135.0.162Jialin Zhang - 5.10.0-60.134.0.161Jialin Zhang - 5.10.0-60.133.0.160Jialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65- !8173 netfilter: ebtables: fix memory leak when blob is malformed - !8166 net/sched: taprio: avoid disabling offload when it was never enabled - !8124 [sync] PR-8042: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !8172 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !8147 pinctrl: single: fix potential NULL dereference - !8156 [sync] PR-8017: perf/core: Bail out early if the request AUX area is out of bound - !8113 [sync] PR-8023: fs/ntfs3: Fixed overflow check in mi_enum_attr() - !8092 [sync] PR-7980: Fix CVE-2021-47455 - !8116 [sync] PR-8060: soc: fsl: qbman: Always disable interrupts when taking cgr_lock - !7798 net-memcg: Fix scope of sockmem pressure indicators - !8086 [sync] PR-8019: pstore/zone: Add a null pointer check to the psz_kmsg_read - netfilter: ebtables: fix memory leak when blob is malformed - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !7146 [sync] PR-7092: Squashfs: check the inode number is not the invalid value of zero - net/sched: taprio: avoid disabling offload when it was never enabled - perf/core: Bail out early if the request AUX area is out of bound - pinctrl: single: fix potential NULL dereference - !8082 [sync] PR-6808: CVE-2024-26923 - !8002 [sync] PR-7970: fbmon: prevent division by zero in fb_videomode_from_videomode() - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !6874 [sync] PR-6756: vfio/fsl-mc: Block calling interrupt handler without trigger - soc: fsl: qbman: Always disable interrupts when taking cgr_lock - fs/ntfs3: Fixed overflow check in mi_enum_attr() - !7878 [sync] PR-7684: dm snapshot: fix lockup in dm_exception_table_exit - !8071 [sync] PR-8030: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - !7994 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !8006 [sync] PR-7903: virtio_ring : keep used_wrap_counter in - ptp: fix code indentation issues - ptp: Fix possible memory leak in ptp_clock_register() - !8021 media: bttv: fix use after free error due to btv->timeout timer - pstore/zone: Add a null pointer check to the psz_kmsg_read - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - af_unix: Fix garbage collector racing against connect() - !8024 [sync] PR-7961: net: atlantic: eliminate double free in error handling logic - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - net: atlantic: eliminate double free in error handling logic - media: bttv: fix use after free error due to btv->timeout timer - virtio_ring : keep used_wrap_counter in vq->last_used_idx - fbmon: prevent division by zero in fb_videomode_from_videomode() - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !7952 media: vidtv: psi: Add check for kstrdup - !7972 [sync] PR-7949: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - !7967 [sync] PR-7943: v2 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - !7935 [sync] PR-7911: ACPI: LPIT: Avoid u32 multiplication overflow - !7849 [sync] PR-7576: f2fs: compress: fix reserve_cblocks counting error when out of space - !7842 [sync] PR-7757: Fix CVE-2023-52656 - media: vidtv: psi: Add check for kstrdup - !7913 [sync] PR-7853: net/mlx5e: fix a double-free in arfs_create_groups - ACPI: LPIT: Avoid u32 multiplication overflow - !7785 [sync] PR-7655: v3 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - net/mlx5e: fix a double-free in arfs_create_groups - !7795 [sync] PR-7743: netrom: Fix data-races around sysctl_net_busy_read - !7883 [sync] PR-7773: Fix CVE-2023-52698 - calipso: fix memory leak in netlbl_calipso_add_pass() - netlabel: remove unused parameter in netlbl_netlink_auditinfo() - net: netlabel: Fix kerneldoc warnings - dm snapshot: fix lockup in dm_exception_table_exit - !7858 [sync] PR-7846: netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_timeout - f2fs: compress: fix reserve_cblocks counting error when out of space - !7828 [sync] PR-7779: LoongArch: Define the __io_aw() hook as mmiowb() - !7825 [sync] PR-7714: CVE-2024-35936 - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket - !7836 [sync] PR-7681: xfs: three bug fix recently - xfs: update dir3 leaf block metadata after swap - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real - iomap: fix warning in xfs_iomap_write_delalloc_release() - !7818 [sync] PR-7734: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - LoongArch: Define the __io_aw() hook as mmiowb() - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - net-memcg: Fix scope of sockmem pressure indicators - netrom: Fix data-races around sysctl_net_busy_read - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - !7735 [sync] PR-7674: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - !7760 [sync] PR-7749: v2 wifi: iwlwifi: dbg-tlv: ensure NUL termination - !7710 [sync] PR-7579: powerpc/powernv: Add a null pointer check to scom_debug_init_one() - !7754 wifi: ath11k: decrease MHI channel buffer length to 8KB - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: ath11k: decrease MHI channel buffer length to 8KB - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - powerpc/powernv: Add a null pointer check to scom_debug_init_one() - Squashfs: check the inode number is not the invalid value of zero - vfio/fsl-mc: Block calling interrupt handler without trigger- !7633 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - !7641 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !7561 mm/slub: fix to return errno if kmalloc() fails - !7717 CVE-2023-52655 - !7646 [sync] PR-7385: CVE-2024-27002 - !7625 [sync] PR-5930: RDMA/srpt: Support specifying the srpt_service_guid parameter - !6242 [sync] PR-6082: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6151 [sync] PR-6020: net/sched: act_mirred: use the backlog for mirred ingress - !7620 [sync] PR-6259: arp: Prevent overflow in arp_req_get(). - !7615 [sync] PR-5993: ipv6: sr: fix possible use-after-free and null-ptr-deref - !7612 [sync] PR-5996: mptcp: fix double-free on socket dismantle - !6222 [sync] PR-6074: Fix CVE-2024-26787 - !7609 [sync] PR-6279: Bluetooth: Avoid potential use-after-free in hci_error_reset - !7379 [sync] PR-6085: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - !7605 [sync] PR-6086: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - !5983 [sync] PR-5852: CVE-2024-26809 - !7707 bpf: Guard stack limits against 32bit overflow - !7636 dm-crypt: don't modify the data when using authenticated encryption - !7660 [sync] PR-6033: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7627 [sync] PR-5950: RDMA/qedr: Fix qedr_create_user_qp error flow - !7695 ext4: fix corruption during on-line resize - !7679 [sync] PR-7574: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7558 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - !6531 [sync] PR-6486: devlink: fix possible use-after-free and memory leaks in devlink_init() - !7553 [sync] PR-5530: net: Fix CVE-2024-26641 - !7550 [sync] PR-7006: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - usb: aqc111: check packet for fixup for true limit - !7666 [sync] PR-7586: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7662 [sync] PR-7590: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - bpf: Guard stack limits against 32bit overflow - ext4: fix corruption during on-line resize - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7602 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7506 [sync] PR-7402: scsi: lpfc: Fix possible file string name overflow when updating firmware - !7502 [sync] PR-7403: scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - !7522 [sync] PR-7401: nvme-core: check for too small lba shift - !7495 [sync] PR-7397: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - !7492 [sync] PR-7398: drm/amd/display: Fix memory leak in dm_sw_fini() - !7489 [sync] PR-7399: drm/amd/pm: fix a double-free in si_dpm_init - !7505 [sync] PR-7404: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7498 [sync] PR-7396: drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7596 [sync] PR-7548: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7566 net: hns3: fix kernel crash when 1588 is received on HIP08 devices - clk: mediatek: Do a runtime PM get on controllers during probe - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - dm-crypt: don't modify the data when using authenticated encryption - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - RDMA/qedr: Fix qedr_create_user_qp error flow - RDMA/srpt: Support specifying the srpt_service_guid parameter - arp: Prevent overflow in arp_req_get(). - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - ipv6: sr: fix possible use-after-free and null-ptr-deref - RDMA/srpt: Support specifying the srpt_service_guid parameter - mptcp: fix double-free on socket dismantle - Bluetooth: Avoid potential use-after-free in hci_error_reset - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7569 [sync] PR-7535: v2 CVE-2024-26907 - !7362 [sync] PR-5491: CVE-2024-26640 - !6569 openEuler-22.03-LTS CVE-2024-26908 - kernel-doc: fix struct_group_tagged() parsing - uapi: propagate __struct_group() attributes to the container union - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - stddef: Introduce DECLARE_FLEX_ARRAY() helper - uapi/linux/stddef.h: Add include guards - stddef: Introduce struct_group() helper macro - net: hns3: fix kernel crash when 1588 is received on HIP08 devices - mm/slub: fix to return errno if kmalloc() fails - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - ip6_tunnel: use dev_sw_netstats_rx_add() - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - !7517 [sync] PR-7484: fix CVE-2024-26661 - !7354 blk-iocost: Fix an UBSAN shift-out-of-bounds warning - !7345 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !7359 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !7442 [sync] PR-6037: fix-CVE-2024-26706 - nvme-core: check for too small lba shift - drm/amd/display: Fix && vs || typos - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' - !7485 [sync] PR-7476: firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7406 drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7408 backport important fix for broadcom net card - !7407 nvme-fc: do not wait in vain when unloading module - scsi: lpfc: Fix possible file string name overflow when updating firmware - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - drm/amd/display: Fix memory leak in dm_sw_fini() - drm/amd/pm: fix a double-free in si_dpm_init - !7293 KVM: s390: vsie: fix race during shadow creation - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7256 netfilter: nf_tables: disallow anonymous set with timeout flag - !7335 inet: read sk->sk_family once in inet_recv_error() - !7331 tunnels: fix out of bounds access when building IPv6 PMTU error - !7323 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - !7309 btrfs: don't drop extent_map for free space inode on write error - !7448 [sync] PR-5998: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - !7445 [sync] PR-6031: nilfs2: fix potential bug in end_buffer_async_write - !7280 llc: Drop support for ETH_P_TR_802_2. - !7277 llc: make llc_ui_sendmsg() more robust against bonding changes - !7458 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7265 Bluetooth: Fix atomicity violation in {min,max}_key_size_set - !7478 [sync] PR-7424: net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - !7342 ppp_async: limit MRU to 64K - !5866 [sync] PR-5794: um: time-travel: fix time corruption - !7389 [sync] PR-5469: wifi: iwlwifi: fix a memory corruption - !7312 CVE-2024-26686 - !7303 nilfs2: fix data corruption in dsync block recovery for small block sizes - !7296 powerpc/kasan: Fix addr error caused by page alignment - !7273 binder: fix race between mmput() and do_exit() - !7259 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5622 [sync] PR-5566: tracing: Ensure visibility when inserting an element into tracing_map - !7237 SUNRPC: Fix a suspicious RCU usage warning - !7230 [sync] PR-5460: v2 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - !7233 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - !7320 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !7466 [sync] PR-7394: v2 scsi: sr: Do not leak information in ioctl - scsi: sr: Do not leak information in ioctl - !7019 [sync] PR-6855: KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7306 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7429 net: gtp: Fix Use-After-Free in gtp_dellink - !7430 [sync] PR-3972: arm64: make cma=0 as default for openeuler - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - nilfs2: fix potential bug in end_buffer_async_write - parisc/unaligned: Fix emulate_ldw() breakage - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd() - parisc: Fix random data corruption from exception handler - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth() - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd() - parisc/unaligned: Rewrite inline assembly of emulate_ldw() - parisc: Mark ex_table entries 32-bit aligned in uaccess.h - parisc: Fix some apparent put_user() failures - parisc: Implement __get/put_kernel_nofault() - parisc: Drop strnlen_user() in favour of generic version - parisc: Switch user access functions to signal errors in r29 instead of r8 - parisc/unaligned: Rewrite inline assembly of emulate_ldh() - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers - !7435 [sync] PR-7414: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - arm64: make cma=0 as default for openeuler - net: gtp: Fix Use-After-Free in gtp_dellink - !7382 [sync] PR-6428: net/sched: flower: Fix unable to handle page fault bug in fl_init - net/tg3: fix race condition in tg3_reset_task() - net/tg3: resolve deadlock in tg3_reset_task() during EEH - net: bnxt: fix a potential use-after-free in bnxt_init_tc - net/bnx2x: Prevent access to a freed page in page_pool - nvme-fc: do not wait in vain when unloading module - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7266 block/rnbd-srv: Check for unlikely string overflow - wifi: iwlwifi: fix a memory corruption - net/sched: flower: Fix unable to handle page fault bug in fl_init - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - tcp: add sanity checks to rx zerocopy - net-zerocopy: Refactor frag-is-remappable test. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - tunnels: fix out of bounds access when building IPv6 PMTU error - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: use __for_each_thread() - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - exit: Use the correct exit_code in /proc//stat - btrfs: don't drop extent_map for free space inode on write error - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - nilfs2: fix data corruption in dsync block recovery for small block sizes - powerpc/kasan: Fix addr error caused by page alignment - KVM: s390: vsie: fix race during shadow creation - llc: Drop support for ETH_P_TR_802_2. - llc: make llc_ui_sendmsg() more robust against bonding changes - binder: fix race between mmput() and do_exit() - block/rnbd-srv: Check for unlikely string overflow - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - netfilter: nf_tables: disallow anonymous set with timeout flag - SUNRPC: Fix a suspicious RCU usage warning - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - KVM: Always flush async #PF workqueue when vCPU is being destroyed - x86/xen: Add some null pointer checking to smp.c - devlink: fix possible use-after-free and memory leaks in devlink_init() - mmc: mmci: stm32: fix DMA API overlapping mappings warning - mmc: mmci: stm32: use a buffer for unaligned DMA requests - net/sched: act_mirred: use the backlog for mirred ingress - netfilter: nft_set_pipapo: release elements in clone only from destroy path - netfilter: nft_set_pipapo: remove scratch_aligned pointer - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: store index in scratch maps - um: time-travel: fix time corruption - tracing: Ensure visibility when inserting an element into tracing_map- !6038 [sync] PR-6006: fix CVE-2024-26669 - !5881 [sync] PR-5751: net: atlantic: Fix DMA mapping for PTP hwts ring - !7337 netfilter: nft_limit: reject configurations that cause integer overflow - !7254 netfilter: nf_tables: disallow timeout for anonymous sets - !6748 amdkfd: use calloc instead of kzalloc to avoid integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nf_tables: disallow timeout for anonymous sets - !7160 [sync] PR-6809: memcg: fix possible use-after-free in memcg_write_event_control() - !7117 [sync] PR-7086: media: ttpci: fix two memleaks in budget_av_attach - !7118 [sync] PR-7080: drm: nv04: Fix out of bounds access - !7132 [sync] PR-7044: v2 nfs: fix UAF in direct writes - !7154 [sync] PR-7148: scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7176 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - !6980 ksmbd: validate payload size in ipc response - !7097 [sync] PR-6818: mm: memcg: fix stale protection of reclaim target memcg - memcg: fix possible use-after-free in memcg_write_event_control() - scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !6763 [sync] PR-6680: cifs: fix underflow in parse_server_interfaces() - drm: nv04: Fix out of bounds access - media: ttpci: fix two memleaks in budget_av_attach - !7101 [sync] PR-7039: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7083 [sync] PR-7013: media: edia: dvbdev: fix a use-after-free - !6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - !7023 [sync] PR-6988: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7008 [sync] PR-6959: mac802154: fix llsec key resources release in mac802154_llsec_key_del - !7063 [sync] PR-7056: scsi: qla2xxx: Fix command flush on cable pull - mm: memcg: fix stale protection of reclaim target memcg - !6945 [sync] PR-6840: CVE-2023-52650 - media: edia: dvbdev: fix a use-after-free - scsi: qla2xxx: Fix command flush on cable pull - !6092 [sync] PR-5921: ext4: fix double-free of blocks due to wrong extents moved_len - !6089 [sync] PR-5977: btrfs: dev-replace: properly validate device names - !6095 [sync] PR-6029: ceph: prevent use-after-free in encode_cap_msg() - !7028 [sync] PR-6977: wireguard: netlink: access device through ctx instead of peer - wireguard: netlink: access device through ctx instead of peer - !6985 [sync] PR-6964: v2 CVE-2024-27000 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6212 [sync] PR-6178: CVE-2024-26812 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - !6693 quota: Fix potential NULL pointer dereference - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6884 [sync] PR-6740: V2 cpuset: fix race between rebuild scheduler domains and hotplug work - !6960 [sync] PR-6861: media: dvb-frontends: avoid stack overflow warnings with clang - ksmbd: validate payload size in ipc response - !6911 pstore: inode: Only d_invalidate() is needed - !6935 [sync] PR-6826: fat: fix uninitialized field in nostale filehandles - !6933 [sync] PR-6838: fs: sysfs: Fix reference leak in sysfs_break_active_protection() - media: dvb-frontends: avoid stack overflow warnings with clang - drm/tegra: dsi: Add missing check for of_find_device_by_node - fat: fix uninitialized field in nostale filehandles - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - pstore: inode: Only d_invalidate() is needed - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - cpuset: fix race between rebuild scheduler domains and hotplug work - cifs: fix underflow in parse_server_interfaces() - amdkfd: use calloc instead of kzalloc to avoid integer overflow - quota: Fix potential NULL pointer dereference - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - ceph: prevent use-after-free in encode_cap_msg() - ext4: fix double-free of blocks due to wrong extents moved_len - btrfs: dev-replace: properly validate device names - net/sched: flower: Fix kabi change - net/sched: flower: Fix chain template offload - net: atlantic: Fix DMA mapping for PTP hwts ring- !6425 [sync] PR-6291: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6901 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - !6931 bpf: Fix hashtab overflow check on 32-bit arches - !6925 firmware: arm_scmi: Harden accesses to the reset domains - !6921 bpf: Fix stackmap overflow check on 32-bit arches - !6865 [sync] PR-6835: kprobes: Fix check for probe enabled in kill_kprobe() - !6897 [sync] PR-6592: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - bpf: Fix hashtab overflow check on 32-bit arches - firmware: arm_scmi: Harden accesses to the reset domains - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6643 [sync] PR-6623: amdkfd: use calloc instead of kzalloc to avoid integer overflow - kprobes: Fix check for probe enabled in kill_kprobe() - !6387 [sync] PR-6202: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6627 [sync] PR-6485: CVE-2024-26843 - !6751 [sync] PR-6677: v3 olk-5.10: bugfix for mm - mm/madvise: fix potential pte_unmap_unlock pte error - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - !6509 cachefiles: fix memory leak in cachefiles_add_cache() - !6686 [sync] PR-6580: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6636 [sync] PR-6561: md: fix kmemleak of rdev->serial - amdkfd: use calloc instead of kzalloc to avoid integer overflow - !6599 [sync] PR-6584: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6605 [sync] PR-6579: media: rc: bpf attach/detach requires write permission - !6604 [sync] PR-6568: IB/hfi1: Fix a memleak in init_credit_return - !6613 [sync] PR-6543: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6602 [sync] PR-6520: firmware: arm_scmi: Fix double free in SMC transport cleanup path - md: fix kmemleak of rdev->serial - efi: runtime: Fix potential overflow of soft-reserved region size - !6248 ubi: Check for too small LEB size in VTBL code - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6448 [sync] PR-6281: v2 net/mlx5: Update error handler for UCTX and UMEM - media: rc: bpf attach/detach requires write permission - IB/hfi1: Fix a memleak in init_credit_return - firmware: arm_scmi: Fix double free in SMC transport cleanup path - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6475 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6574 [sync] PR-6417: media: pvrusb2: fix uaf in pvr2_context_set_notify - media: pvrusb2: fix uaf in pvr2_context_set_notify - !6499 v2 Add hugetlb MADV_DONTNEED support - cachefiles: fix memory leak in cachefiles_add_cache() - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - madvise: use zap_page_range_single for madvise dontneed - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm: enable MADV_DONTNEED for hugetlb mappings - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - net/mlx5: Update error handler for UCTX and UMEM - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - ubi: Check for too small LEB size in VTBL code- !6413 [sync] PR-5510: bus: mhi: host: Drop chan lock before queuing buffers - !6264 [sync] PR-6103: riscv: Sparse-Memory/vmemmap out-of-bounds fix - !6537 [sync] PR-5273: net/smc: fix illegal rmb_desc access in SMC-D connection dump - !6528 [sync] PR-5468: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - !6545 v2 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !6496 [sync] PR-6407: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5802 [sync] PR-5773: patches for CVE-2023-52617 - !5801 [sync] PR-5772: firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6516 fixe CVE-2023-52498 - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - PM: sleep: Fix error handling in dpm_prepare() - PM: sleep: Fix possible deadlocks in core system-wide PM code - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: sleep: Use dev_printk() when possible - async: Introduce async_schedule_dev_nocall() - async: Split async_schedule_node_domain() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6487 [sync] PR-6455: CVE-2021-47182 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6440 [sync] PR-6312: fix CVE-2024-24861 for 5.10 - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6410 [sync] PR-5195: dmaengine: fix NULL pointer in channel unregistration function - bus: mhi: host: Drop chan lock before queuing buffers - dmaengine: fix NULL pointer in channel unregistration function - !6080 Fix CVE-2024-26764 - !5966 Fix CVE-2023-52441 and integrate the pre-patch - riscv: Sparse-Memory/vmemmap out-of-bounds fix - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - ksmbd: fix out of bounds in init_smb2_rsp_hdr() - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ksmbd: return unsupported error on smb1 mount - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect- !6180 [sync] PR-5093: wifi: mac80211: fix potential key use-after-free - !6218 RDMA/siw: Fix connection failure handling - !6236 [sync] PR-6193: uio_hv_generic: Fix another memory leak in error handling paths - !6232 [sync] PR-6192: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6186 Fixed CVE-2023-52504 - uio_hv_generic: Fix another memory leak in error handling paths - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6196 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - !6188 [sync] PR-5466: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - RDMA/siw: Fix connection failure handling - !6113 cifs: Fix UAF in cifs_demultiplex_thread() - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !6172 [sync] PR-6137: vfio/pci: Lock external INTx masking ops - x86/alternatives: Disable KASAN in apply_alternatives() - wifi: mac80211: fix potential key use-after-free - !6125 fix-CVE-2021-47101 - vfio/pci: Lock external INTx masking ops - !6135 [sync] PR-5717: v2 fix CVE-2023-52587 - !6148 [sync] PR-6101: vfio/pci: Disable auto-enable of exclusive INTx IRQ - !6141 [sync] PR-6047: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6131 [sync] PR-4923: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - !5419 [sync] PR-5317: KVM: s390: fix setting of fpc register - vfio/pci: Disable auto-enable of exclusive INTx IRQ - !5129 [sync] PR-5113: fix CVE-2023-52578 - !5120 [sync] PR-5062: team: fix null-ptr-deref when team device type is changed - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6117 wifi: rt2x00: restart beacon queue when hardware reset - !6054 [sync] PR-6017: drm/amdgpu: fix use-after-free bug - !6122 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - wifi: rt2x00: restart beacon queue when hardware reset - cifs: Fix UAF in cifs_demultiplex_thread() - !6077 [sync] PR-5973: EDAC/thunderx: Fix possible out-of-bounds string access - !6046 mm/swap: fix race when skipping swapcache - !6022 [sync] PR-5970: fixup CVE-2024-26751 - !6034 [sync] PR-5969: fbdev: savage: Error out if pixclock equals zero - EDAC/thunderx: Fix possible out-of-bounds string access - !5848 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - !6057 fs/ntfs3: fix CVE-2023-52640 - fs/ntfs3: Fix oob in ntfs_listxattr - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() - drm/amdgpu: fix use-after-free bug - mm/swap: fix race when skipping swapcache - !5987 [sync] PR-5901: CVE-2024-26695 - !5980 [sync] PR-5812: afs: Increase buffer size in afs_update_volume_status() - fbdev: savage: Error out if pixclock equals zero - ARM: ep93xx: Add terminator to gpiod_lookup_table - !5947 [sync] PR-5831: fbdev: sis: Error out if pixclock equals zero - !5958 [sync] PR-5884: KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - !5842 [sync] PR-5348: s390/ptrace: handle setting of fpc register correctly - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - !5856 dmaengine: ti: edma: Add some null pointer checks to the edma_probe - afs: Increase buffer size in afs_update_volume_status() - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - fbdev: sis: Error out if pixclock equals zero - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - s390/ptrace: handle setting of fpc register correctly - KVM: s390: fix setting of fpc register - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - team: fix null-ptr-deref when team device type is changed- !5942 CVE-2021-46926 - !5944 [sync] PR-5861: ksmbd: fix uaf in smb20_oplock_break_ack - !5936 [sync] PR-5911: CVE-2023-52484 - !5932 [sync] PR-5895: i2c: i801: Fix block process call transactions - !5927 [sync] PR-5863: CVE-2024-26788 - !5908 [sync] PR-4928: drm/bridge: sii902x: Fix probing race issue - !5782 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - !5918 [sync] PR-5870: drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !5903 [sync] PR-4931: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - ksmbd: fix uaf in smb20_oplock_break_ack - ALSA: hda: intel-sdw-acpi: harden detection of controller - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() - !5907 [sync] PR-5811: Fixed CVE-2021-47037 - !5871 [sync] PR-4794: serial: imx: fix tx statemachine deadlock - !4907 [sync] PR-4865: Input: powermate - fix use-after-free in powermate_config_complete - i2c: i801: Fix block process call transactions - dmaengine: fsl-qdma: init irq after reg initialization - !5896 [sync] PR-5808: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5888 [sync] PR-5832: CVE-2023-52467 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/bridge: sii902x: Fix probing race issue - ASoC: q6afe-clocks: fix reprobing of the driver - ASoC: q6afe-clocks: fix warning on symbol scope - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5748 ksmbd: fix global oob in ksmbd_nl_policy - mfd: syscon: Fix null pointer dereference in of_syscon_register() - serial: imx: fix tx statemachine deadlock - !5826 [sync] PR-5785: net: qualcomm: rmnet: fix global oob in rmnet_policy - !5817 [sync] PR-5780: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !4799 [sync] PR-4764: binder: signal epoll threads of self-work - !5790 usb: hub: Guard against accesses to uninitialized BOS descriptors - !5797 [sync] PR-5788: v2 Patches to Fix CVE-2023-52454 - !5820 [sync] PR-5789: perf/x86/lbr: Filter vsyscall addresses - net: qualcomm: rmnet: fix global oob in rmnet_policy - !5775 [sync] PR-5724: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - perf/x86/lbr: Filter vsyscall addresses - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !5764 [sync] PR-5642: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - nvmet-tcp: Fix the H2C expected PDU len calculation - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length - usb: hub: Guard against accesses to uninitialized BOS descriptors - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - ksmbd: fix global oob in ksmbd_nl_policy - !5704 [sync] PR-5507: ext4: Validate inode pa before using preallocation blocks - !5708 ext4: dio: Put endio under - ext4: Optimize endio process for DIO overwrites - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag - iomap: pass a flags argument to iomap_dio_rw - iomap: rename the flags variable in __iomap_dio_rw - iomap: add IOMAP_DIO_INLINE_COMP - iomap: use an unsigned type for IOMAP_DIO_* defines - iomap: cleanup up iomap_dio_bio_end_io() - ext4: Validate inode pa before using preallocation blocks - Input: powermate - fix use-after-free in powermate_config_complete - binder: signal epoll threads of self-work- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 coresobs-worker1640081563-aarch64-0005.novalocal 17169408005.10.0-60.139.0.166.oe22035.10.0-60.139.0.166.oe22030-metadata_list-compact_tlv-python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203.aarch640-metadata_list-compact-python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203.aarch64debugusrlib64python3.9site-packagesperf.cpython-39-aarch64-linux-gnu.so-5.10.0-60.139.0.166.oe2203.aarch64.debug/etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/lib//usr/lib/debug//usr/lib/debug/usr//usr/lib/debug/usr/lib64//usr/lib/debug/usr/lib64/python3.9//usr/lib/debug/usr/lib64/python3.9/site-packages/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protectionobs://private/openEuler:22.03:LTS/standard_aarch64/42b9b04cdcef3b4828cd5d31d1a07923-kernelcpioxz2aarch64-openEuler-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df93701a2b66c3467d666dbffe02a8106941e929, with debug_info, not strippedug@a3 2v'utf-8703f98dc5335429decf8523c9f1738cda940fb70485fe766604bbd571df2a0ed339285f70c09e0e13def9eb0673c4e326171f74136283f25ec22caad9e1ba310?07zXZ !#,:] b2u Q{LY2ꚴ!ѣ=X2!SR}"\8=g_r/ T :J :gET@˂/ND'hS:c)'Z.`_f!8ީlyQx{j5-w̼N趕${ ن w^^Jqngv%Lg\6md\/#(nK$~f j ơ突3Y{`m$9-*{|(Ѱv4Az!$u|FG4($T(j CfxȌGcrji.R1@`1lݬm@*V~e#2'-X@ȘVnQ,UlTp U[Uۙj1Zޣ=9Y!Tǩ*5咪N>fk܇}UDNV8ze|=mO6+:+Izi*8f|уi mDN>*OcdXwɖ{":e֎y:7oi7]T}]{"EVvu/ԓd#ƫM x]kaۗyCEh1:`? ?'PyBdɟb:D&ZX?\ 1 T ̐Ҝ-f yFQd?#p1y/E,n& *Lwj^6^>@] `SR-ƌ.Xh3gR('>bަT)ߧ@jEՐjq\BS!\Wz2J7M`~ ;e|gC !ezW`Rurx_׌ϬR@A/Y(><2v\3&(^"0L<Tx`]=A߬%_{>T0O%; Ǔc:B #eCY0]i7M.r~,7>'FByQJ@Drq :$e5$f-]<~8_~2C훭TVB'CV]+}ln: 73琪 vBNT䵀MWqM(cyDt44XM+ݮ&V8yod!a5/z_¦JUu!X׬'X90zq mo]4*oEP3NݖʼKw? τ'zzHޕGr3>Qh^a\uӓ\X@A%@vho}-Ɣ\D>A=r˪,0iR,'taE6Yo3Qnq\ ^ZLn~>林t+(]K3XLχx4^}ҽҹRDVu]%l "!mZE$ڲgXZuOi7[;+deÊ}!Py!Ŏ:KA&tREy 8p!\̷r$g*(NJUpp%j uAI4mǒ =`h_,l.,#*y8K^auUo 246lA.(p0LͭmoOjqT%3͔v|Bjx r6Rt`o$`Ld7U]-aDF~B, (+>b$Tk_ pfٖuRbgRUwy^/O3\wԦy͟&`r\@Ręxr"Ӫ'` !Qaw  A!uIT DVCe q>H Z5VmٲZa)QhBG/֊]#P9']>ʙ"y>?Jtng/::j^/D8Nxt7UجDWmy`DѸaz+߿mMg-.̖G ɕ'^NuHԴp@ @%>'=ZE RX뜢S"N9Jji$m6B^%àۃM>qi·{ja QMA}w`+ L^K{%XoD{a]%*X蔵^/¾{DpLޠ~]ibQL5dƋGoSbAK! ާg$P A:xaNF_JXP T[d=)&oDݪF=GM1im1눛xMy7bhR7X"ܶ.urRTVD~b#='4,槃ʪ70]QVVkq"UzxQd {D EÜ МT⚖gΌnez{Ka_g[)% >Dl3e 描 u 7lV/ÏUzr6m;HqizE |:&$-Ԫ/6&j V)Hџ(+"bUZ]f.i].@Vp 0)) (OɘbNoI.&|uЌ?"y {ٞw!yCJQ`$v~}_*0Z1_NE Lb ݄<e`e`Jh+<46i@`Em*(9^_rC&\|˧{Vw!Ndjp2~5?Q{*%ԁ 簌ĺ0_:y4e=5㔤.8XΓ:2JEcznP 0(ACLYrf(axe+}Xb6ւW0~ťA ;up|Y+B# ~Y[ԫCLw@W򗓘-gL{3޽ xB"_*YcMx;eĢTaV=='"Wʊ4;'tySmgNFZ7 WLŲ0Eg:F[ʷXozlirM!H N12WF%XD0[\qNWJ`Uimw3v%`:*_Nہj>7ĂM|MYY8ұӺU>3ȟ! ,k_ *a'SIBVmS 2ݝd Ȉ2 Ձ 1 cvyHp]u^/*Z9p/e( 怦%C?9ʻؽu +Ϳd֭}fu@@̾`bOu'j2X 84NS5i%(_O`lб]ZR4 "[(j!& \Ҩ@ C&;ҽ}@V .8\-Ă$@WLU  DV]ot% - 9J3KD?M%:Y1D &$v(-JM^+w4a cC=(Œ.H&;@&~v2L&d:&!\J6~xؚKUg ƕ5;MZM̝o):X 4鐛53b`Ɇˡ]ye: 1fM!* v [OmVI@Y倰 '6 kt >.A"e1K͵Θ:{j 'Г1@B4/U̷}s:LqSnGLel@rOEο= X%7E>r|ȗ$ {q_G(į*֬F|F+SmK<4G59gM۬17~uShn7vk"*Gp&Ef5)턣i_&KÇj(8"x! a 6)g(}W.c}.yB$fmmQvrkmpȢ-N> >Q W RJS]S@UZJc\<"M1g4gl*d$ai~ie0L1e~퍏Yc{18"cXýJ0  iy+FV2Cq`gHeOˇ~[(ǔ=eb 8m9To~D*&Jh1sYaVo]fuUpq |95 Q%.f<*Bŏ]W E%/H&RSU G@HWmJil꼬m5Iq\=G l;>r@ Ѩk@j԰ ~`î4x/ջ=(ѐW3{Fa X C 8mMi=2{5|$_qrB5T%#Rg608 Er;)("?_QxD+żcXK")֝dɹ'9wb;q{$@аE@ͼdn2ҡ*[24LK28N/ZoUgUL.Z%Z{vM`,-=r̠/60:Yb"14iqʉ?p<>r-) `]f_ح Μ+f9q{AHU0 eX ? 5|[uIx5Ї_Ij\]- 呎aw#|ݐ)*y8-]MK6ECZCn͍R!,H:M pTץY%;Uj*aZ?SMM0&) e!Rf сI -ߣ >@`tEY .=~qH%ca%WlV8UzF^ni#AI״7[RcORm(&6I[ $΄թ8 ѹ7DDhUqCeK$AX% >_K>s7悜ڢlK^#e! Nj4(]tfE`6P18S Q.ic,疝0c]?4La%sqBSTЫ k5dn5Q2svFǸ=.4xcMc62]'-m`Űzǀ(LyPHJRݨrE?GF=Q9 =UX4n&~V!4Oo(0ZPaR1f [. ,:Á%,fuʶX=c'd&$!*alI) v+o&h1n6ST" a9ipqʸ`MSǛE֔.+"N alN!ȧ 9'=xpeiY+rg1j@uh ^]bl#Oa/&ܥZl7{4tk9x1?3m6d5 zuw`L&Hb~L;jotDw*3P/[R)&7/P8BLy^63@/Fs^LtG^wa'L/H`|OցMi#R4H2 `V/ǬʱVFmQ ʳ􁯦lh1dPphzCh o#'n?*/.d>9Mh}#?u0'5. 0iNQA㮤ďh:؎k$\&{9q?`:thH=tNq-fU*7IZdn6;bCO_vTm]A P+޵PR[UK[sӚJ`Bn2smc hn]6E/jml;W\ lN?FC7wD[#P*2  ~9DV3G4B:~zX^4s@ܭ~=k}Qۋ)W5  IqSƉmT ʳpPDŽL/6$H ύ?Wx7W"5jL|؞_H#Dr\A%P^fkT Һ\#.{BxUMҘTX=خ}YUBz9^Fj{΀l|fw-m_a Κ)<2;pX)Ӏ@"Cc],ØIç3 w* LOr9̀ xcxWNھhV]FEAhEʿ@"͌G\ M=74J될T|ʒWC4OoK9!  sF2@*y,Z5GI5Ӷ}J]_Ivh \Hl q>[ErFwC7)1l#hZh8@U%3#4tQwE!Q8uH4;l"d^$p۵92Fum}0<ރ ]rJ U"BSY/궣 Z+ﮤʂ&fPkM0SOE2 /߭dmYH@q;!óPR<%_Hjh{6ᴊLIɟq]!yArtC%  ~@_ɑ3 xv)A ]\'7Xi.9ylw˚) aB!7SD!^P D?$s^oŪ-Xtr2*0#w"8wFq՚BPl?V֤Vmя`bIy^S\{km히ex۾fDdGHɔh5@a{=8Ɋk荜Eo AɕU9mx"}\wTkY;v6 ;V"q8Ǜ ~Cc`c]gcg~w 3t<{HytEpcwg?G"{lcq47 zഖw,Y12>ѨhU2%N*?HOr ,ibڡcxOb& zq&2\ -V/p{ۍ!u$)aV@O453{ V(g,W&Go yTB%Ě^X1Z~xr(5 B(}["BJV[t6X;?g՚b6`;DZ;IiAɌ6o̰#^w"c}iZ'y0g8=DǺI#KFsJP/yZզ i&n!$3{ S0XUC"px,Tq3]+G+lP 6$waߔr>0<=z6ő +ːY?YQ|W;# - #8ʍS3{7W 6Xeŀ$y|/OZY`C,KMT4{j{1 ؊ gZДthqم^3[SUbm MX-; Ǭ;|2UJtg6~MqGRo؆nAkUS"od # '.g(۫7_M- &+: pN5^ b$4#]I4=l% ڳ~\i H)MO25G`L K{E─==e%_ NI}y_٪ BD<Ů N23^}\tʏM1F+jǚC?/L3`(Dmؐ?bY^d g&kl"ifmcɖW7p'Y~R2E³EݢHt~z}L)EG<}y9lYz;{M۟Q0J%qD(i煀d%&~* \.Q'-Nޛ|Ԟ!˲[,C˯CZ]Z@P7?H_BeWǺB8p@ψבخn43WO(<ZG™fr.p[ ;BTLw->ޒIhgйQ {(cS g<.Q}\;0tU -zC+yjմ.S9 Lrs3hwfcŀBÊ@`)*ԉۅ=t,m[\[Jj/AMi j~ޟڤY ji!,Q Qҷ;U2U㖂 G>+ r5C:z^џ&zY*:jԊ]k-:旭&eT,ȵuELjO0ӛ/@ kUm{st6Ol_϶ƧAs6ۚ<y Z1[SEԫK~6rIUC$Ն*fI#8H79/n7(mTQ#o<dF3ؓTYF*d/י?&c$6t;JZ.C vQ6AJXBܬ͎pŏ!R O,@b0E]?M*"w$Adᩀ'/k|Oj<8(gYo}T=B<^73y{y(vï GQ(R|d0QB [393c8ߩ<*e';G[7an2#;X诳Of^N[9uTψH^-(^.M، 5 |N*\#G`^nnZN١'W߮Qc%3!ں~co3Z: 2 ,?tqc]vg]ch 86ɱ^]Ɯ*pVſf=f4| [nYi+5-sͩm/c!G,]Wn=3|WkP5)x³ ;@zX Z}ՙqZಈ9Z7C1,Y >ի9.O&x tk{ZI|;X@&!_?dephɮE/~:۰sve"ā^y/ %oY`4+-CMP¿+Mи5wW%LaR{hQom\7Ʌd#ݵ |ם]C'i JhT 3vE~[w~Tv_m[ 20(l2KTcU*ag&Qs_JE82GFm*;X?+9TJVO_a?7(wz06 Xy0 nxf̓;Tt̊珨B9蠴_%F$_)}]85rqr%<%BbqB:">`d:h<=Wr}nUSY@ ܍(p.aJ)fA ŕqܵVH &,dR*6/'mx\I@(;q}c=NɃl8qob\vxllf}j2 6;s IЄ;^eϥ/͞;T|܄;4oZh7ЛCFkk# xr m Q1dW9~>V{ԜuiRVEί-LW:Ę@=po>\Ͼ{}*0#7*CQOtO40wg!DY4ʕ> @K;-<$am%N6q#fGrs7HgcR$>h|$TMef-m73%c (/tJ_ NOk̶}_9#6%p0[w?KQg\CkN=A!ㅩ-pfmEj;1a4w:c@`.88hijx@f&~grU; 8 C]5qVA~Hy `ޱ]vYԒeibٓ~g.CqpOL) b2M9!E c +.F GIȳ~=D[ Msɤ$2K VLʯԝUq͐P;WY<",+JFO k5u}dwFpB+?zvkh:4l=HQZ *n&ɇ["U匌Q;T79Er[F7`Ue)-aSl|eyGҢ9RHCA7U^8k&rlf"v51 EKyH4k,ZMe%2. @1:4-"ԮWWË J`|̯SOTOṟ:\Fyor2*muj\[T:Ae@ 6ÅVr*tvJuy3u tDzY',̽GeTJX,x!}rn/]ZsJT*"kzf(^˽ g7)H; v7EyPJ`P,[I w7F  OMR˦œ;FW)q@ZM'EZ7W =Waok FZ [117>:`OE:-Z =R,(ij빿uGŁЗWnoʿm 8+W,YXX(σQ_cQM(˨϶+`Q$#WR9qiA:tuc wxi}9S6f) RJ-V{[V̏ZT4d{^[me^+xPwhOW´J{t|Et&|25©,D*K-{{9:LuҴs/{^{0DƟMǴ])xvkSbt3)2tۦzhMM:Ne& N73꘡i,@7 }>C mu,D>ZLJY"bҶ+Z+#?_.\zpRП% ^QJֶ\Ra; *yP7M7>Y>;X _~}o$fut&ܹv@d D<ᠻǍAB&+ⷛq U$)+85aCYd9\}rʯȊaAD|;8R0>2 zkX/E 6&3(7{uL+_\e0r:(#<8:X;_O&vo'ꝐQ3,Υ$_p{$dx$^_N0嗇8H Wp"+\) +7{[5BAmPԙK7s^ڼ,td(`S7u>MTKFǐ]w_zhJ >~Mm_`\9[ 逩"#eM$!fs0g6MƼ?nn)*~P2"G`31|8 9eF ӏ䱐7-eA-dG3`9%ԭؗ@]|h󁸿ˡZ*t0U s{.PELZK8kfl{r+O@W.Ki2) ;WQ r'=5=(z"3I}tHJ ={ʠ-a[ Zq2G n(G+A¯h2lqH0P8'ދ6e3]pBj>:t?dgچOŗ߿2V;81qP V:ûtblMWe4~AmÀG|vT`ғ|F]&o羈" ztTq"+fs&)?ڀ{S_'Aޅ󍌓,֘Ɩ$V#|*jЀ"DֿohUJMW='w*i 3u=gdm^i>f9P!v9_]{y8pfD _jfBmMGa %y0;eMN3*U0yxOjQ_O0[T˭;lWI1݃@MO"8KONˬ$ht,tMکjG /.:#z^%F^\M1lKOX͏4KsmP1ߪ0s"ɢWO *VQc"QoRPW\5!Z$t F%fp${/+];#ɸb?CWڼ"sN羛_ia7T_Kh7V=̑e 7h+ q֩9™ *_qS*JXhOuiYo&XC:|3WR, ?[;nZ*傰KQ,VR=:_1:NXbARIq|#O! ަCы̘a~6wk]#PϴyTcւ~:WD.3lף=CWCRЎ~o [^ Sv5"7^]+YL"ٽomGZ?RA!iHٽP.4A[fUiNSeE f^|s00Uz+ĺR}\ HUͯ-D|tn)PFvB#/khmꃐ8oEMgv8 r?+- )޻X:K6r66&ߺ5`QIOEMt0x6\/uH-s+۞xew׋|h%gJ 9yH{~|;>1oU)~@MĺG2 HtZc"\*8S\]waDLC &s"<6XR* .5vO<"7mZgI'C<3ϰ)^lId.w ީ]U8w*"jgp!9ԆD{*Z/dBrs`* l wgм%2jVX=[#ZT˝[CO?MѝUi$XdZ>**2O7 G;.h|'Ճ0fR?Z{j:Vw|2Y >>F1z?WӚƩ(iOnˈCH,XgHpΚ().L-t>n`kF:`y< RhݬYU)H T{?ijmᯡXhÃHmœCE¸ @|:[з,ji\Yt+MyYF  /Uaɑ/uxLF99[ FFga Qm<`uZˡ"(}HþB(M'_tf|taL1ǡjX|Hv1xl]|z6 Rd,ݏ-̩* d䦯)<:li& MP5} -և#M\⪾':d Yd7h0$,\=,6yc!Oᘧrts.U;Y\OOEXB8Бj>wM1]`;N־0Җ\@7?J<8%m;qQYۓW'n;'8yYhD5b";@+!WΗ?L. c^~Ǽ & \pdOQW4a@!{Hs` ]v8lw݆>f< ٙ*Y>YPWG0~ cQCB>k [_K_8_d) ?S3ˤS<%8bmj{n̨c?!m(蛼[B=T?J=TM.GntYäOYot捌A>(til=]qѨ+PZl+U?&+Y6ɼ?S0%> )W-l>.Yn>@ UqEjֆWfL p_UnsWY{ M%")B(I揖ĥ+BTg[udj$S`Sf}$L-tv@4fx-h],T2J oP XןESQ k%EHZPEye ìx:d1}VT]0+GRfv'Ƅ*EL=?o-<E&N_Ԃ"&P8j{=l#d&VZ@|8siCpƒ~kDk  4|7_f!N Mߚܡp[uEbL9# Z_A:/w eyX:1lIpq#!][ЛVΥ_WxtIr|S"@tg*-Sb!u|)`ʤ]|vg{'[`/߼w$kiS3/ctr(9Xo@āI俴"aSH-ƺ "R]{5fV|q=-xUMa'u]ǓYNFj E\1jɀ Iݸig*~ܠ<,_]t"),@,ɛ~D B.%lFbԳ⭥oOL)|on?\7jRND K_g% U .n pm o#맃`ShfF\)wI; K"/rZ-kI6Fs6PYBfj?? ީaxF,K)]uCwO+Zߙ0v++]v Z!hq9C=ZFD ENCVcƭ à=Ѓ]]2;P˨=pŝA|?H;G!C/nɌrFu.u L‹ h2SBݯLΉa)$$徂 3޻Yu0 CwQ|5אcn^7JYFFWF0bWN7!uӆ.AIaaڵCa J[Nl`fӾ$3gAfb=D2mw;=]a\#]w**Z0DqBa&1\ AAbt=GMZs~I56NJpƭӑ~P{K"٠uMR{7#0)p*| ;P_ǒ{p:|;p m9Pn)hY ֛Q#zL= zɠJ-|NmCoxnd @'(h8`)] 'G{NiۑDž]J ڐ X'-ʢ! 2W:q=: L*I&ٽqnTބI\C]2lsaD'O' xny*wǣ?ʔ˄ԦD qVNuGPMXֳ>MX -ҦQg+m%ۙNg!VAȎ!6}Iub 2+%) n-5ho0c.qD =X\xRln,|RWOKҐ7jۿ iV]#4-%un\j^M 24&PZ}ڠq$O{b5k/1WkʚJ+Y-󖠟$i W+xl:WFb% 2.gSBx~MO!7`Q#\%|\N5nmo Qz}LEWJҙfĹ?%Z+E;T匦.3oޯp1*,i;j1~`*n & \~uNb47qx|uRѴ;gn7\260WYChnKd~mb-Ҳ)鉜YEC*@?eqUi6Ԍ'1̂c< M+&O͟ue q% bj"Fyq3%DӀ*?S8U aݘ)_SelJސx, өSCң߂`fܦ731X px3?zsi@_֨znjU%{9X&8NM#Arf)ӯ\e7LUPt;fT=co AAbMͯ0Au7tzKY{=#GLҗĩtޕ֬,k./q my#E$HfK1棰T@F3zt_V07E* 8nsL NRTT~7ZlDsC^Fo3 7A]j[ɺx$%۳W%<}@Y7 gӈ7_PqyH nﵚٷ.ؘ:#*`cU1wgpn#s9g2`\: $Jȝ?0Yci``/~Y<;Rԛ~/qiySj&؟өHnub͂V6M̜T`o?zd c`>gj}ukP汍y?Ie*VTq߯k1MÅѲ@qk S`چ3" j)k.ʄ*O+^zsK=e >(b[8)!#hN|"qL* Wx*kԓg3Y41e(_5PxbAVg&)i}QT)r\{dɭWHgDn9N\ljd c9{`* j}%(vT5h%F#5s‡lj蒇^Nz0҉u\H|DBk kxYNVK!}{S]ix1Tᮙ1wΒ!#bNn3 hmf*¾~Nx`wyOx޿?V{J7L>!8K~mYFziql]*j sQ5PmBo=x0CDNfGM .&>&g[Ux'1R Mh؈pA0VmF%āWtߧa TCta@oRh t z&;!<:Z))=04(nmlYgQ\u8qRE'b z͍c4n x76=Ibȵ3\%'Y%?6O{$-l?XVo-"JUF|H^]$ّKoxI0h䇜,O-3pCBYσU:dpӿ=^DU!\̺·eQcݵ-偟"Gl%"bv9h~7T1g^$l;Q+IY<x9qc`'j&eBQ7~1-2)weЋ&ylv|}?! d&ᕶ8ډΌm/7' IyVG|qyTQ M2d[FmxӻI;r/ē>@fRJT^u=5U.L_8O ܑoaoH+yz/T׍M4ntkx>U]X0$d˦P$L8î8]\:%_+=9qC"Z4_T,Z^0 PAY墕toCnSctw`|5@ NnG*D14Ak(RnLFQ9(Ӭ>}-uz2d2cm+yft# |9[+B?rDbYSg_wKx .VWp|X?0Ñ0Q{KLDv6I{QodD6#@sR*6-qImK hB!X ::CoDOHv+:řox! dzKY ml7U *ƕ,gsYKWX L/i$ܡIG@[tŵ4a.P.E`酎 : z)_[g Ϳ] >Xp˄^RŖX)}]830ۖ5Ilz, -ܤqNN+5BTR]"{!-T%". [W`akI(Q5S #(2dmfxX?9/}B?{w"we|NN:_.d?r,E.@PK5lxB(4F[k.(6s.C/Wo$/C+7aDyzFdcu]`$+B'_8`/B|UީZSwvv=uFRP1R?yH9wQVgy P5.n..X&G"+9BD*؁!`pU H~/̲/L"dqܘ7rEtFы% 7?(zg"jkk)iDyLLֶ^]Z!ƴ&u,YyrN1z9Ga 4{+'E OoC˛0bb^f>䋄;;Բ%ޣ8)YNbo;HJ;=^G3ȩS8>5 >`gQ*˙x+HЦ7-}+Řk9* r#^N) !`G;Ƞn%f&W1C X*ьQ$_TXpb%Qlh[0g!!b> *sCB-4` Ni&U+.-EB } Lʲ _=2TXTt!'*1AoY@YΎSw.a5݀¿ ܜ?Ŧk~i3homxp]pg^Yb  G䢂6 #~oK\G|[Gr!SgJlhX49 dZN 2]-2tTtjogeY:h2ui^H{E $B&V@H*SxswyWYKC[ΊRx g`8eb:vиVYV1e#X$fR]/1JNR !#OQM nV*'X0r@4BĩʼnxAO ,,qZf~r'a"455 l}/TȊ5#9B@ ٶֶࠋWLG;Vq$ k!fU)+Tdćf\/9hV]Mաݓy,m<ڹ|:⊟Z~*, tz` S- nL*(-xpΥލ}//5Kcx1B!җ)t=N]b I77=.Vu,uɅӕ/K fW,J;J^+A.lwD ]ZK<*$Cbq|Q(:>[OHm˃0DG_@\zyv_1,•vslEեG@_Nɴ+B o`s+S]`N|g&6:~8^h%#E9yyVXv~(}asW1Og'2x@K B;!)%s-VǒNXɴZᇾՏj/dpVzo{ ke.WM!^.Vи.: 4*@A`AD$.3K"8Il"-Դ#+5[Zq_OjGԔ}Q7hQ:<3u. D;ѥlZ{+X kCdK{x˭Ⱥ_fwYhwbZa%pTw.̏G:iRv2suHٰ0}L7I^N_^:oFp 0P *#YzhQFF1ru㍇ee-0;%4d^#D7GՏ[%{*SMcCe@BoN2׈ ~U!+A1̷@Je\nY*w)U(V ׵[j50tS_Hs@@Q8u| `"[bhۥDhڋ.]knG)Yx؊>-MK(+EL]}WJ́J̊_ stFߓZ|l/{hTZxsK{_'eI+>.1 "G?4k&z38(OnIÎuv.w-rޫzs)YCHU: F ҅{mJk|겐By HT<ъh ИDqԑ̽TW:|9uw+j䑘Wb#_17Ei XcKG_nvU05sCJJ pQ-}Bv"'87_1&DGRxsBEbidnv򛏛wDWU"ݎ3%T`hYwr?&̧aG$C*q)|y@Ov 9R~W,W:L*.,%ZRڠxMM~:F%4 CQ¨_+Υ6;Q4 PW-^{3EǦH?!}we2&HC\J4! g \zXK:G* b%}re`zU y%3e7% -Bu|qD=D#Sm C]Y!̡p Z_)WFa(4?O'C0\v݃q.#V%L1{@ Nq.Vrj;yAA3.fZPhtM~A ܁M"%0B v"tYd]Rx+Jl4F\pX]x1C >T&0s 52ئ! Jч#ZwnM4Dߝ\+NzwS/6n#(KoZîn=3c ʕspG`;hOƓz`v ~d'1ր_CRk ЊCz+%>` "}?5 >X:QeGhUh,=aAbp}l#i"n%YG=-`0UGJ+{GEOh%3[3$pɁXtԷqE&di{|o|)!,n. 8$0?YNfXfw&XBe8xRB)?_XNT8Nmv,z/c={SY|zu1&UYI @TV 8O?ᖤq_Y ^xauy^8)v &)c\+k%o(r#U! DVm1Þ8PYt65btryīň P"OGRoBL93~~j](33Q5J1Dve&w',ˤS]=mvM'fokm :EZ[`K:WUs#\bf;}Ý4KP:9 t%H"ү!'BEDqc/z)?oMA9_l11jvs;ootvw*kXG[sm-s:QAB䅰ԭ4̲?^pcmZ:v{:~օ/״f *'6x 1f+L I o0`޾;xƿV;hd'jWZav]BqiUrxJmOwNceUEZ^9tcC7%`/gĿ3OBr{D{u#3}%||߷TɑV_^ԃ.#B ʈk@(\2d]Q I~:K6vgץZ͋^af'RvpIM8/iz=芛HD([G.zKGCÕ"F(÷t¬VE棲@F#hV(&O !@ Ŷu#&g\j ^:i0 Uk'C mQSm vKcQjdzp0j5.kΠ`^RxQ,I/jz,q{ j,D&:x엃}tPKQ B"*}sfHfL/H&3;,s<]X-+bd6^QL(1?|68X(^xo{3SF&iY}sP]f=*bC/V)< a t{b5ߍo5 T*|~c]XPa[IqptunrpNJKKzjOYw1q9MV31:`jS;LRV V:rmo*v۟ P:-tE`׌ J mϐugӬI/5u+VAĥ5 YfbI pA>0^=tmGO`\5.\-bۮ9]!79VY#.zujM1dG*4Z\*m͟/3$PCEW1@owL T*<22oT]=p0RC.r));j-2gcMYQysԱ:9 u?RT$u K7GEǹw.SΟF2qoo WH̶joHЁ! .qY4SYJbGP_deLvf6YGgL>U7NG]@g] a\Au4% >YjAaw o/$ ?i̅|<%lG2/R K `UKVBxmv6fΟfPQ>&-qtنheq c¶>Um[Ŋ] ѳҘSw^Yu)x>qhAǡGSU V1+^!Bm||ڄ_Xj-EPJoơ6}xr$I=_Dd~vƒyP㌩KOlWa,3mB!rX('7; A[Vܟ3D3/! ζ Fk<Ǝ,Z1|~%ӧmZTq(2L{ǩQ]`8,!tmm '1< R }wx_L+qĞc_Rv8AY ȄQSY*pF?vHD,gѱ8pZML=Gy Uu.ιu*ׇFP0d(M[bxKvg{ȿ=KWt!a$l-<6<,pi+:3At*q{NLI9|8ע|Nsr'vܠ?܉56yT( 1p.\C2pOd r$횺cfޢ{9O.}.R@--}on.9u~@=Vm,&*/̧>岖׽-_,KbpLM&(װ `_VaaD%+|q#v,QwmEQPK=P_< lM70>p+QۂkҨhp+QVG +w({vK|},_XͬJgXx}N|mכlݦv. Yh䮠to/kv"De.qGÆgN2?h Xuom.I,w]@#v3VB9uny2!~mA@w3̝A?ړ>F7i\$Uٕ]lp=xw\Cz0eA4rg<N IQ%W..Be5n |ޟ˨m.ozl c75U\!B L)ey4j? {gK(9γוӱblHϾ!:5`9ϴÓ 9Kl劈Eie#)G eh X'݋k\PEw*6S? ֎2l~NGA杤StI1k6B,`#O@=~+-ΒIX ުźu|F?ZM؍vSI&QduDcPfsYi'v1_=Fj+p *M);G~I qDW#{ˈ9yzd` ȈJw4= y4ޱWBB)ح\>YǗLi[$}i}AHfz={PcTSk)NEGDr3UiObvpa.US7`Xd<ֳQ_QřYl\.kFCצیEUUW@~2[0rTm4cˈDBM m5.]$a 52wsD]᚜awNF#BX11E}x|< m4hΉE1[Mt:slˁ}n_-KLoLͱ3xwtk\ĩ[k 1&;eBSIo2> H|k$[iCv=eLd_ !eey QOu%GK.];nǦapBV\qs/̨x5#dVSI2X8_b5z%tdh!"vӺ \%Κa^BdPq !Ҋ8fmq(bcQm$QUs%RE2ع1s?XsWJwD-T'<pepmov!ǙtǽCi Oա.?:Dz:e]@>惑אU$#XD,4ɦْsX`m>!ڽ`8&He.ytY4%#IL<2)i1 P9PE=紹KLw4&/xl)E7#V;ECs\W =Sv'DԜ%»Dm\R8]}?PNCCB$8n^ }UbBt_>(nd\K8+Wa+Ypϒ>"?/y9շS]0OȖ^7f$o˺{uU@9mS!!_g[:HL fZ.!wZ<ܓiy*KM{E/,1l #`.G8‡;!E(MYkM&h;dR M :Hp).ۯ=@a翖Ŷ+G0Q)4G)D`߇3lo,9i yX(9sm Plhg@ƞ{,NB!z,X|a&Ȣ}`I[]SPB+Vx# %1~} Sv@T6W=4bIss/eiwU*22)#(0| ܌:[$Uyr+O`0nsAd嗯l6>D']Lg=B VJʓ֊3q(F>:tI꜎J0𙮄Ӽ`=ƚmrP 1])v*ڳ ue*jOF4Lwh5Y=+/K`'_,107əTB ڪi<{gX0yoJ9+Z`+r@f2rP5!u%s{:+k.4COCxaxb s XۧiGovdo`FkX>UK*G`ci`nRl~\U~a\EyompOJ}ܝUme:Gu s_\f 8bްb֥qh5E^ӡ)rH,mVN{}WNZ9Q=;רӣX4TXq31A!6*M6tuPY@3-x\;i;au+609\7 N{P0F oGv?\bKޡT?Tpm &39:= sO =a@$ozH j.:nk ӧ#Ǔ8L?:nj1'XfwXhos%лܥap*|5R"WiOOFIr=׶e=yA+D Ѻ}g OGlWxϬ7?h2^C;>>)oJKS`]Х)%ƾM,2F݅wH±wMk1>&PCO_Y>p mM-)[?o@2-q`/KD|XA|Cܷ(~2o&ж QD>P#ڪJpnHپ_9Jh4#K  =L T9$ac5?s,MrpN B#A v(Xnf|0BlB: i ñl\}viꀼ8:S],1g %WjY!b/v qb~6K[.TНCqy#˘SI=仹\a?*L=L5 ?0$NF^d̄;,ؿ'X.6b[g+ss<3܍^ʾZ[yeDjfA5 ͣ*J&gFӨb|:0zXu}Mq4k,pI\Od6q\+"$6{.F~; ;'lvzŇkp sPF,F3]\sЭh!އtMweu /C~ۼcsi'~"$/܆u]* ot22Np ÿ+x9d+\2'ѠlY^.=qd<I5~rڪM;9n\$n[} 9℺iCɶ,nb9\zĺ3k*@=k~96境U&_$Ke|uS Z7`S7ѵsmv4W uc퓀uD39 zeՅOvUSL03g7)үԈ땗 DUv)~VzFأ&'Q1l;g~aZUPJ;jM MpRh s6ٗlg8&^ç|+R(3n4w[rbod`$\N!XV!L R _oE(taUJFZlJS]i&ctR6-,\}\ׁF7Drt#C_s#tưryRr@iCEq>\(  rXF MjN,qV3ԁ3SZS4tYÁcɒIX;/@`E!g/v4һ`q]jܐ c&ڝuƪ-H9MlCT۪FoN} Y=O IiFC& 4N`}+e "'2^5& =04>4QY#ɻ4 ?YD`'/pb:y |fӕD&;JU?NGn!H}Be)RjȌ{aZ}6m~\aq#.xм Z{-Tqy/2wУ9$+Wr.AEݲ*a *cWjgG|(70a8y!(p1q\1VA7|\)ÑkpIhN1 +dT}r[]#=(LR:wL-ZWVo gDPGJbWzÝYsA2>̹x6yb â4`\&:дx/x \j;&V;ptP̀,:.K$ @י 8 @/jlwQBGےBOiN}wCC; Z!3n˕NJ3 P )Yk/͠z"s 'mTC }K1d8[UT}ŅdT(U3\}`r*-낑7U3 _ec[r.SM"8$% "7~¥jvp-z)g̐b^@l X6e@1I/DmCOtCX~Vo0޽"(AR-778e_EJ8N=L *ATQ%*9 od"A| qpjɞ2B(MJg2[!_nlYt tA!qz#j+爓n#S "n. b|!+rCK>*U輽:v~LfPc,"oW;z-IrSbJ)âOzyc0^g)R00G3SuB EHO K[XK5P6{ᘀNmC"uѠ hL;t0xG3^lU83bH<ڸEaPtjvB 'T }a~u\ۻrVQBbk8{sOV<<" B͑_O-mP5l C#%Uʤj۟NoL5.i`a@[)iE&W+SV)oL;Ћy^6C"Bԃ 1 4)4+ e$urMP&e> grZXg/E@,xXldWSQd'vVtb ګ%hͪ;õ7}!|@K4QdV+ PG,ĮAR_1od`(:Fc9982d|r\ftxe]7q?Y-S%L "D9eP sa Z }0m>u{ 14vwԾ[g福AON2@S\㲠£a;^ 4T. D|>9مܠljɔs t n^İ]H{?<Ͳy,TΆoheIDW '_WUՌعӂPK3vzkqL'_[e8UƼoSRḱEu x!ӗ(8M2ǣ5j9'9 baĴd< 07b8wMt2E/Yb8xPEJXT%yNY+?ޥ3R*BI [ߣ'و~7jTC淄=Bd*,ʜ]%-h6J0 v}y`IbGHd$Omh%˱ @ofʞ N }X%Ks@3_Q//b\ #HY+ߑH& G+f[ev4W^.\; ϟpr>5,J7,@$Uyd8$g+ᭀ`͘b)RcW($` >-?'1Bxks]ϬsUغy2#ʮN7D7A0\F׺t4u?(iBz- 8rؘyw*VƲ ij@g}U:p9 R c@^Q`ZQQ`JOxxtmxl@[!Cl 7\K o?k5/n`gr܁׍oϞN`{gqs CcIZҍas~d;xy  U>m,KspVoJѴC!7#4ۙ0kMPpXƈO_&GkF|[`p v%nF"MdEZ/Y oc_:` -VMmq ǯ)]0;+Jzv w<ƒ8fԭb7qRe@;1ؚ-rRŀdNH z`l^[?eqOnj1u NMjQBOTy6`jny̐{h&8{TGQ;:Xa/oz6+\ AU>~=;5Vd=릠bgئI [4 ^8jcH[qނ աl\3 J.l[-f,4pH<~A .qSy*{L%Tq-=S*lKU0_өE/FQ .:x ѡJa:<69;m{;)}͑} @"BA.[6[0ׁ_ 0OpҊl$SV[s `b%7h}tnF uhw]}\_>g< U2'aQ"d}C2#Qy";2c(y5" Ais:*ijc<÷ty*\a䩥n4kGbo:&-]I)ptnPSj(Ѓp왎dphuɋbv ^fxwUFI5'}M`U_bu}xN vtV1僘[\TLH˥@=B J2ReH+&QA0·eX Jx>+l52`&a\ˈ5uxi`n1E𾅧⁉]{M0Xy+ DPŅkφaIMI`K/*\;Wl7`y5MTz{Oiovt:vH&buҼI]~%F̝@ƠհHEGN`gL2ׇ%{CQv\.dY\R36X['j#Y%mq.`xK 2\l4 K2od|u0l喬AKO݈i"T~9(Ofux)h &;L6˒cl.ҷ(.5/O *YpEM+'nso[*E:{!cFd"0,0$v'k?$͐KO\"sTSۚB:GKG[OMj# JxfIV)35W F2nN+\wAܹ (^9|2  ڬR'rekRnZŤK5E9{M#7(H3FFk 愚:&`/4c  _+ LN22}鍂8m^IȐ;1o*|a +UJMŒf2ha3A=-ħxfjh\1hL~hͻ ΀=˿RIK֛+k(%0KMFڍ=6վL?[EE9:i3}弿¤rG<=.qդie :Ӓ=˄:9tHZ [6Hl$m<G&XVG^V _HsÍMC6U7Iݸ0Sao*h1#T!'u>z¸oLZj3TtA͎Mb,鈟V햯R.lQJzA;Tm.8# aĀjS Sk^Vد: @?h8RDP?q)N(*~2nj;pb%b@PDtfMIqGr~Uv(ңRjHܲPC6物T'hYSxh_3[.s<]LPʮ6vfRx*.^@}}|yhqcT5i"UnղM^\v3Zy"4]4JE~i8QAvcۉpMo>iyx+V ykFpH+쪴&%99"ֵ*YQoX<(.GǟjRfx~P”Ѕ?9mc512Bw01(v ާWh\gְW}%qi@1upڸOC(:hxݦ Ơ xran} 5DߥQ {N%7Wdng{ކ%dZC띇. a~w{cѬh ۭ9({#= Gلtm{*A8DU&_ΖH(;d_ߥdEM^U!-j/EzQv/nK3 Ў37\{-(3}wm{ >.L4egqd%H)LX=ٯ 7|Nj(Luwkdt[p%;Y?uu睹iƠNIDO==x ?<%S kyoW9f9 zjF%P{&g~ox+]?o'U^lٰkAZS2Q7'bn"04zlm^ij榾^4i{xSCzJ2jY DZ䗑?_bGU_%kū7*#Rv"W[ 8U ϧ'gyI`!O˗R@ +Qo3\A6ON/ *)B/uM4̱NH_(T <ӢE#!jZQ=zQXL[41=QjICZ )Aݞ<cFӤ[9H޻S<0R@y:=/,ࣴ~:7r2m|>ċ[g=JLqspڀ8  #8sugb⒝}&{Yag+\|sȧǔY&8nw,{B \ńZ'o.H7iVјrY?EV"0A/-~T;R&MK%x(,FoiܤxFuj^Ien8UH]0 ͱ ~@5)7ʜyġǠM"zadFeMv~X2vUڿy DpƁXK5VQv MkܨˏxU>1̽3 q OJ\jM.Bݠ<GYܻ[ZV0 tF}!w/rWT r|#^Tl_lKK. UNhb`Lz۴ 38 o@%et \nPA 7v= B}'׍,K!(4g#sDwTxVE'Ol{qF':S܋:ȸ8a"s"Y $7N`>P_N"E :d&t9ؗ"\#L/#AOl O %(@p IځS4UvS(KIyz2ÐIf:BS0tH3G f lr ;LqFVS5+Ӳ8;sty9}:̓ 3笯tQT' <1``Y^xJrbEaudOն WU3Yr毇H@48㇮^L"oI#}z8 P{݅(ۤL/kY d KSi+'_9^!= ؗmH("%}V{*Ko7{9 tÙvH\Q#x`WJK BżhTYn S U DMe(<3l]veVoiv>7v,+=YFBkLjjέ@=5H|!]o6OEe"M 3|)h&;SʶZq |ԏ-[gy͉8mDm;1>_,Lʪ-!M|uEr8>'Ll5%d[XZ.%f6Qrf}[voFc!2i|X]vu=SYt Y«B[OuъB O&lV"V(ৼ)\|L+Ryy$OS؏F-̸,_`%'Z)` ȟ# .)AОhıAmNzv(lքTa+MؐAe,hy[BfH'JkkHLs@מ}"Ü۹vX\8(~ E}mN$[RLt~\GGҗ6\B`6Ҥgi=B(ߞH?lU /L7wţߜ~xq<ۘ,OoJOvJܩ;>߿2G {8EO26 k wyJִ0͗$wKE:ZkyC S?ml [^w3-+1z^^]t+rF_/`SbBE"ڤ-JX2]3Bys6we/+֊$trzg'aWY1T+!+ظ/b^ΞXܞ>j>pC (yt(+%[1ZhxDyxTgrX}R g~_L;%k6("o.fj0_B'Jl*ط(6PKWmb2h{B62N U`Mb9^Vis{vOcZ.ajWFË\Cei f ,cԛw^]%!9 P{%NOi! X;&:"KZK7LKfzd >h)$ةz5k#d+jMo^0 mINxۊgP2ƶΒnr([/U,}lL[;6?tyx/D\ Эr!pcz~m"SIyB2^&@?w4 ^%e[~kVknD% G{>ĆQ5 34W(./E;{|O}3gš3|{4xY]LoTDWh~7 H@i@\>_1 ;~SgEZE~V^%A`d<s>]cݗD j Q [;W? xJd}\.x$tV!(M(K[˭JɃUPz{ܿaOh5qcsQuqf% .7֤, ;F[`_=q8W^gElфdgHLQ "Иq/sJ=/1G˘8:sW`!49PU+`^IB?ݰ/D,ӥ80$MF3W %M-bu רEJ p%p#ap0`re}h0:q~hE?:N96D}@\0y pLLsyDۿ1'7w/ʿ@w@TL#KnkRraf? 84Z>-fD2[il (-*uw-'5휏Ъ *=M|ܛi)^s5P4Gڞ_S[>%!Ծ,yaK*]1x/PWD i[Z_eWSf݋r`+2 vXIvs\/'QlMViq\NY%@ p@7 &U+<$Ș\bˁOnGQkoL㬇 [KZQt E,i*O,n[F2oiĺ@Ysw6)J^;f~cO~jTPMm\Ija.B i'|lk O5 hjLr 7="Pw%?{ ur %KM̧z/6_4&W\1g7xo<}$vI/N;+*p(h7EU^#vT"~Ȑa/4r>$ z(N@ 4osJB&IL gj"Eo,DH}Z94(q4z<>3Z4h |{㄀|QFwEedq-%faddΠFoG7p0>1s|-GX4byٿ)0h.҄՟Nyr(~>~11L[6M:'{4^k# [PZ>"j@AˉC& Ѭ|^Ra0&5Gp_؎/&n,)A#Q7o{+d1[RzY!֋x &b_g xIKz0Za79yw1di*ȯ5]15+W +]-f?O#*²LNO8N`{]ƗbDCp{+׋P^%WH23y s 8WtlDAbmk׺mC(syz.]YPQ ,Q=cwiw?ѬJ/)Ջ;N(`**ˊ'lмH`|Q7B+KwW/?RD*.نlM@M!e7xK?mSXCB.Bx,F03hqb?/;^YwU^gJrȚ~gv2r|b|)%hى7qQp싞QqxK̺Q ΪGG*i+OO$>jLEl =S lo}9%gR3:Z?Rmڦt5Ѹ8;Q">?jUBs6U/ RƊSSQ9rwgIo'{N.𢡄Ci 0Ę`8j]k5~FZ8u">=N *Aӻ-]DA-;L4h2_93 I!*IYwvZ`P'l&#CYH\҄VJ'4--Oך*Q$ Pg 6&v"făiIuػܩ \ĬWA3gV  H^:^x_%j)ESFJ&F*Eq3o'sArT)拐W?ؽ4lzZ! 3d'{F;mz bCvTɴ$4mՊPB^>'玧YIś~-v+W|Tg=cr.S7ߥcT\=RyoV*sX=0!MtT_OTȃZƧ5F&m7@ԎQ[k_Xv[9g9';.n?AyQd lIAA.iɰy3z,Gl|Hܤ"MZ%{bh[i #z"Wgbddf0iBɷm-ۺp5ֱ3Tf\ TPz= {l~<.gZoCDd,0"݂7֜Mo&fc2&yNGvt@<8d tXƍ1\3Hq^%_Ree#>ִu7) F; wTVՑ$\:^>)N;Oiϙdz# ZLɟm?#9yӂBPלaȟ^mvYEs!IPz,o !Z緟KoN0|}o`@O ʗdf4OϬ(CAŮ$ZX.{N(k蓫;~Tsnd楖y vWhoR`ēm^ A BV{\Zx]4_ɺD=lޡFG3e0NY.Aw ӅЍidqǤ~n:Spiƪe4^т-'lN~zﮡޘnuIj3~{偭q䱨ѿP=68}9؈&C}!:yNeWj7WmyVtkh¸B&#|Qݣ9Knt' ܚܼuCn4b$kv Bu r',HS=3oUm`{L10q*NU2ό2{b1L )\w 0ș3R90*R5RhtKG.܂l6?\niC Rf7C,~ (<9\Lhvh0k,BQUq;+ tM3;rš|X_HYlЀ8-(2a-}V@-adU0JӪ%(}J#52=8ldʍv-S%bu팷*COlt15%S`ೊD >M@D8Xd=fx#9 u;t,Wz'h!l 5L.[]-VS#;ݮE=ۯN2lZLwEK=zoTSt Æ /keaHwBL9:* #M"l#.ާ'ǭ\@§P`h҉L} 6W!NLT_>%Ye T5UV}wqW>U "C ܟBBD7'twY৳>̏8Gd1po˞rnE iRqS wfޭD1'[[Fd`+_"!˭:"bd0HjZp=xFcˮ+Oɶ](Yyw8Ys n_J$6">Ӝ%Je)3?Ym,Enz"`$!d9ܩ$-lu/@֧e1$ Jݎ+Bj[LQ!T}+s{\ h 5%ZiA=sEm[vNAƨ~f2g bxCHHa8MO>R]pV!\]Pz1c@5ǶS"=?^ 4eg&s>cqʫ=M^#-^ 8 =3j(Z8綏q'%yӛ"!HPH]t٧ XW5̹ 6װ@4g"AN b \w}zb5Rಈ&h_6kڗ_)">~%5Q),FR4ţhC3h"Ibe~ lOA)/e>vAwx\hc7CIET=G*S7!6+P (Hfx[~gj){ʄP&xCpczLYLr1rˢ`Q' :/+Qub6pɫ+LxF%3x*m8ggT|+)Y;A_Z4|M'TK{ V_Z6HF)O@oL*"X9MI&=gQxk걪k++e疶~Y}PYPJXxS j8NRZ2d_椬?b~] Is< CR ۛMTeM'&,"7莜p$Oe Fi ] K };[ìAiNр4˓ר1owpC /tԉ&7pK9д?bxxbhcC&̸A?c[؆h)g}>6) HLr:Kuof|;l{qIzvNFʾ" Yd \I62FkZ#}A]wϰTqFz%$K$D-M+mffwfZ a!NPW4 w`6W:w=ig&ծzlFٔ@ u2gԂpFTd1k_Ұԛzt˧ԜնIIz >OQ)9Sh shR|߫m⏕t+LjHEy8ə26*y,'ԅpt+b!w,ZѧnՎAUxvC!9DŒ<7ey;;K`!=p FUIfN[>#Y}0H{9Y$F4?RB+hYO$gQ*$@z9 hiװnDo]M{ *oeQcؾeLgf[ϭ-\:L~@ĝHz{pl 0/uQ>mRC6U67 S k FBN0 r:TdȻ~&m ߸@[c87"B?g_i%<,^:O7։j'^N*'H>@MEG y=78+,vcвR#IlHRޓf^h zwD3b!g>prbT ih%\ނĆdwUWEmrr[-onSؽfOileP+f=nD(tˌ&#G} ϋb !Ś҇&|Yz':ZVyv(Uo~3[.?*~/)qڨDPLp8`5w @|? v ayg"B}2x\%ErGHF[ew1 q E|:DE!.X7ŕ#'9ڪف4eeH`/T]y53:+ᱷeéN巷Ix =C.[wor)&R|xOmAerURΟ`.7ӸS+24ʼAoW8)ma<82s QڱR7+_ Z%ų:!3 =DENgr50)]kXh#'C؝3sq " yw+`FAȽ®u4GkR/̅,;A0.&az0- l a#_Iκh2ɴ^_Xr&eS5/}xuqM?;ZC=-·? @_y AI!7$LsK-{Hb|;Cb)av98Do(hk$I^*FekW:qs9]U0qKE!.=N47zv jd~,hi^ᖶ#d\7rC9R \~b0WX, :- }S&HBnEܕeKthM A.q^o5mܡ"Ղ#[w*|Zܹ%:=_Rq>mG4a% B!~pشwVm1XL{VL̬6ZCMhYAϾIY-c[s ![v L-Ng3zW5ԙ;$7Lp\Kc>)œLSd,?F99S|ZrL)"nc# J ;הc?ґF}X (oܔ}d|@isa"8K[ގ̳;.T@1հO:2`2rZ-Guc#X7 R=]~ *X@$\oT\*5 6C̮"D*%Z5^vϸ{^MI]kz{gr \vO3]:XGB*ug) Ҷ?,W'1FǶ =ʐ灅2v8lRR*Ul s gy^ݕz?SN]lJ h `':-y~Z>*1)&nɄ'#Hr<1Hxv%4B:zm/?{]mLYٷ NLqlyIr 6tHn[ς-:8hЁK&[=29oc JR;l]ܕ0Eh+*ƬaGf@& at;p&$X99o.x'T%Ɂ6 l[G%mnȌ ;QeOy_#5_cޱϪԘ1T?&MN`l7Zo*kB"^K5ழ@BR rm J # ^d8((raICFw}7;ds3HG84a#Vke,"srп2x%w_b!u.xGq>{}ySR\ww`Lq=JOf"TX<ڷn#2(ǻmo 1ġ)h6ddڡ+FO3W97Rf .'c:_&"DzO/3߈~u E٤PmO J>VQG@]-JiM.n+tN!qJqԛLç!cͭ ebMZ.:SU)/4V š"W:O)dM`e# {/Ru/ U (DxU8|xXԜp7 H14WY>T<3xo 1f0s=v 11v|/I% avs@b3VlIhɕ#4&&. s'8T{F"\Kwfp$ ʼn,:٥s&謓 ] PI&:Uyi^wEF4)3N PʈrX̱(yȻSgxvQUDgH'h6*\B̕:`U&[|G{51Dx(lxH;17 pDS 4lUx| &γk)q|gomw|fgu:"89.J~wj7 ]c8^ 9JJMt]wrJyv5roX7՛)ꏯQmc,TPxY_`՞BZkރ?XXa^XɡYo졝xuիBRUTHoDpZk9h qwt[p+b8t5fm9Ѡ0l_9=r!֍A=vA݃QNzx412Xj͡)cBiGN|:7 |0$MCxKcV%E-GKNTf{tcB[=B~r֨*RHȪh-k zSJ<Qߏ|A^̹s&;g= fN! A||#mTtw>S&ѧ/a8Yeq2fF0q*f6J[>xQt1\o?hMiNϵ]nz;n`wd=\ϐ˫؟>y5*+y~lȧ9LQp*zY2U )B}U2AijvQ/Mg_6M_d#+OF/zosdͧPwrw-"fUGf+zm;Z/H#хH_%c5ˇ. V98"xq*t: y5՗4IcP+tplHWJ{ ŲI$naIİ[?d.5H5Et_Ep|+f)˳`'d`=DNnUVc%.M\X- sgl,>XF`Mu]Osz&_pZ? ^³D8CdyU( y+t \4bd.Bϩ$!%bwU^h Z%48Zqy\ٓߨzp݅` _J'qWƇ7!9gC2A x\m\ŐEfn,X[RGKcCJt̅""?|VV(13Mj}(G1t#o_X0Yb"f``T*e<Z /u9(fRNM0P^垱9S%.nSݎdȯh/“\[T@T}Qm> ;mْj F515A!+fsb 4H7}Q?{aa#%xV!PXc=>սeļ!L1Y Uhm6N'Vc12!ۭB:"6V/{'3itxg@St.S*F@`!L^h5z4~$޹ ԶM]Tdg} %r)4)Cv_e8ia}l*V~餗4hݮWGʁl6Ya0P<@N"_ܜ-KZI@S YK2.H  DRR}pJJNt0&'mZ"hhc A֘W4{v]ė|-,{k/?zy"^&<$wk8"JɄp8QO6ɖxEa"N$2pj J:=޼ xw&zn /isCF<"(*@paY8mx=2\!N@cX)Sw&EI92*:(VECmL"Eh_ !28aź/џS5`ͺ.1W '1 ߻V!c$巪lMo P czR!j6>Ƽ@{_v[=9p1;zdS('h zx[G}nU s}hsȵPT#c Uދ8jf#(krDf)oѺݑvkh;gLcʀlk6g1mebH3R R\@BJv&ݐۑ:x3,7ЧLh-w WV=Y"zXB&#OZ=2yRhP,Qh~-ǚW+|ا+5S^[.nԐOk u˕c:t/g͗TYM=+Fxk^ט+WD4C#Й}d;KtFQbgɻ> NퟓaJL45{ 9͕$'t=$Kjm{um1JQ0hڍ?yt#NJu%JSxR*uLE)GVL4zpgmi)v#"eJ:ĥVAf#g3Txq#UM&ON?Ϩ$Kvw"f e'IcyAh(tR ϝk[B=d}Mys;b:L=f(h<2 ) ;mVSjiY[A5R̼^Rʥ=r(HMWh$:mCa9:WknUg訉A_[W*eA"}ׁ-On+8g` ^a/1=޸y! &dIᏀ7Dy\IPsz`hq@VJJK f1q/ :Sq Q 9:;"pVЕ.q꧄{hÇ2UD1t]BZU&J>}YEH򾕛;}RЮ5ۼrc0wH 轹E_`z})Z$X"=W"E I)Vol2Hj\jg9M8za-SUq"a–JAlu&~\tG uS2HVQZB;XULJQڈ #n$%T~|VTDs{{^`uD@ ĵPT1s?ҲV0CqɹKbOzKI[A!ұVb-F]{$1ՄU@gVZbx#iusN:I=%Kd:rJ\1ȝ$мauLnHѲZ8[M^2p7 ?QU$F'& f{qE%ǜ… b+%a\:* (J/^}=ԲሀƇ|g> ׺hxIyVZ׳'!`Gy}~jZ *JA6hL 1cUf ?c_44OIEʲ׆ }Y)o-OƂ_ yw<x|q?QdNN4BT1= [V B4?_K}"[%Z^zPh @OKܾ168o ^]{o*+t?(N7# pHyyD nrdFP#ì(G4_BB#,R;d#½sr]~] >a\w׉=ydMM w!D8z92Uфz8Bhǹ 6ȻWq~/H[](|*, 7qCy(6qGVTq1WY_9P(,噖lf9j"B 'YZj%uM WذtguWoz^`!P:m'k%D>ځ~v;P?Lߧj!D5ҳfI qITL'||z. ϫsv2i,eT'tPw^s o$AQg#lǧCkQKĬ/_9ADB9_H\U]eg\mVkf9G=/ }@ٍ=Dlp&?tz]܇$+Z DqFȽ5[`;X-w>QXԎkk(Yvd(ڜ߿97u~;4 iZ_-O|i{·gȗ;iNsM1m_?a"CgyPDtQ1+R{ho*#= vbG2LhQN.Vmh 1W"0;z?b4PC[uMfnL:teRQy qvP]}UߵuȀ8Q=; poNbI%o2Sb?SY^c:p xEF~h I2nί\|8h91y2UNüZ=< )^K]Aҏ43lug|Pnc3%]0 Rɂ,-\|a=qf-uB枟Y-5jӜ .NlҖ3+Ʃǂ97:uF pDmF <FW#TvzUW-4{9p{Eg7k'zq.|fkqǾW/F ZFލ6X{F,sT9[zLaԨa"jAs?;66e;F+Q WJVc2/MFڏFg)Kʭ cv=`5Gxpkt%:6'y[)^` aw+ͲIY/2t!m N^,{jJIP̙:-ficD5eI)oj Yi8o6=8 ~֞ aϰoUcF׊ߧPhk!(3ڥHti˕B2Ηn=k]GL]Oh v"Ͽ \m ,rU#X2/FsEpw[+yw;^ dbvbYP <7; Uh?K{O.?TfXI Lu=>DW~-М}i8~ST3"kLjHmW`[Q?6Ug rf3zGtS@[.Kz1<1zؒՋԇ hC̖1B~ǃܲAJ =:EN:iٳ?yb~ .~#(aۭV h%z-P ! !Q 3ї;t*=qdKd*Pt'[cBcA U R*:DX>tf0*4HhPvkpR%uؠK^`g-ǙsG .ׅfyPcP GK rkc=[D0- ]dAȦ IwW/d渧oot 4I[4x:,4Bx[xw, Ȍ*M7ӾHA=5 p7`S2֮Ҧ;'#8fO;?v6T4QK ~jYl䥪pJ=H+/X;3 .&hzIzQn ǔUs)9h&\S;O{=z1<(Yc]}˔{Z3øƾ<RӗgHNB`E DcR`Usz#r"Moh|bbbiz.-R5{|1te>cwcWhx0V0i**2gϣV 5A5չぽrtGѸaõgmPfeN{3Й9XkssU閘ybq4%XqR'M{#C"򲄇7JK_+Dݲs![ORJ'{~߅"+ml3sQpOӅKp - <Ϯ ^=T~CSQ@Y.2 Q'+gIMfeK_U#󍊶t.=/)70"V_]^ʺP=qVΤU ɫ. ּ^2!-@!9k xSɻI@tj:xb$O4?dZLk ?)*0u+=,~uu+^xh)xXF0`%ܪгSȕ K{q=&$9D\]>q_F=/3 ]lj_t RL<寶NA 'iM=5\~C A N̹@o%#w q>*O[Z݊s%;J{qT3ܝ+s(at#~қW|}$!GZχ&xxm'1NWiӡ,Zcݬ#@wݱtTs*r]EgQ+mMN"^uZBza%u#2M_Jw,=}#ioiCB(w5a(7lcɐ`8836 n;VR ܳTADd t )>rغg. I힀%A6t+5L%WH]a6 E4i̒zOɄlDU.h`Zaznyvyޢ^So=u̚%oIGG(U |nc9)h" O%#9ҫ;!slE9Y YUQ>"d[:gna푠>J䝵`d7fkE8~a |4 B6Ir~̉8!Z&wE­XTfa xnU#n)+R%] (SDŽȧᮿؽ֋^^:|Hpe/ҐďS1c iYwO}妡U[[mhT(RHmY$cۡmZcAӹ2L%t-,*!g|;2y0{ !+mlB9\jb9-3}'ᰔhгߤp Nn!="3mX+o*e:蓬sn=!2B@ƘHtLsy61G-.zmf\P{",2V-ө7GCWt mm!jD#f`O 5x>Lˎ!an䷂ M 2~\QUXV[>Ǥ@Qx(7DZ՟!~`k~i$_ MlY*pT]g9u2[~-0Z Tyn$X޵&KØc7yL>[)NB?l,ɈRhz["nΉozP59)B.Sybh 6ة_J.qﶢ bIIi/Psx&ƔS9 lF(:ݐ*{\Dp-l(zʻ GS?1G"nWFʠ/:5W{! *Jb)fȽ t޷UoW> 9d't$+8L^l!Ua)FKϞ(-VE+)"PL!o ؆cQu3hfԡ%WKe N jZBWE׺%NɈ T2X1hAʐ-"IhQ g46QheP\\b{1(v]n@UΌѾe 83۝ٽy+y-.9nko]/kMUvn E%Pϡ@c6Pً#  \Aa +f>%JwN,f9'@7(avۏ& )6/MWجνHo> NZ`{C )#̛u֣Z E‹ʦb3U{ c>c.4QIXW ZgѢǒI|fUKRKJclU-pm*CÁ̀`yT4R&|Q݆bݱ*ܞ5Oϕd$ᭂ}A p+lMֺZEh%a:[dXcN6BdR†m2"\Z!HeiilŐGꇉMbP0 FE, )FI]r|o=#* X"Ȯʬͻ>ވV9QK|4g2skdPX@{bt'L nGHPcr#ŒπaqI$ p "fCge4}`&R|]iЏS =ݛiKɪff ӞtbLMe ߠR:Ttx\{nENQ6"ulO#MBN]L1ՅG-{y߬%\̾߼G7}ˉilƝCBL&K}}ev0"+*\o{cZ:)r\;>22,Rc Wʷ'LSu05Ne4Rc+Npyʠ$o*Qk\ j,(TUe%qS> 8A\ =!$Ҳ1ns+U6MLvg jA+SGiKpːi-ފĞWS"oQAct+Ǚ^QR;:ni3(X(\ (<pZe 8v7xrQJF?/ R;Dd|˕l#= +k!#dQ2x{}R,}ҵ|ev,2]z. / $On(W2~olve{*'~FI4⥱uuUDJ3bUٺRI FH+Qm4#p깮,\ǵXWS$wC R*ne$>]+{pUV 0t*sT3!>*ʞ#׶%l7CZНk_Důc?#zB=q/\iy .˜)|",n0\/'T=mY9 O 𶁻f j匢X;E~1 ^!'V;X l~7`No!'t?QE`pՙvnJ A 5Vw^$oB]N s 3ևgz, Бkj1~ݞ+l]P{@9Ѩj!աy M;ܸ{hz$Q2F*Ӳ~!Ki=_?a N#.HFa5/>RIPJJ!Lũ'kVWQѡOvޖ-lq?M@@cb E`5H mq;׳q_CMmdzC-X/XJQĬBQ/dQe5c&4jBU͉%rъSc$+f*WȉcEq^ ݷ x;6 (;{ڵ~!G>&d5I8s5kI2*nS-igBz"5u&Vb_{YCWn/)\rY 4FPh *"9by }NB;ݝ<"n{6t4(DX^#`uX$cLLjR~= :Nj ӧ_s.KѡCxOPJh)&bz&/qlW6*z/pV,kox8A#~B>5P.[څAlG j6TO:5viLtcK mBR<0LQ*f-CJoL0&HUH(66*om 4_? pAiY\׈ۍiwʚɗxl@8o/]lUnǁ"s$V< ?u=N /D?{A[ux^9h'(Qͫ1:d#ĵv8cw{/f/'d 4 +֮>TK&/z#\8j#(vaD Q ѓ }vŘ]HEc#*ƅ#0M:;n~M>&1:&sg;M JqbJ:v|ԧX?J$u 8<U;?4ǁ{AysT4:Ow5E]G!u׊}l¯P>sWը.P"=AMєux۪k\*k_\pꝘj[,fk hkZ% YlXvU GQ-vcuA|8Hq!?L,,|$vZ w Ecɹ-b=X=sAaɷp ( A#C7 dgUl!9AA) ?y>!^ƆY6iI-7M`D&0tNuU^*yVoyt," =K;zjKB49_K?BힳhbشyWgQ{n.Msq0E}=;G,}ΐͨuW>ZVe<+2^$U𛉻AI '$C cx'/_ Nj6-C~WD1 v4%ʐ4zrlpD05,`}v!^(S{Wc|ta贫Qbg 7wQ?XM aW'w#Kʮ5~|Bu̦d6_)plS8"0+luY8 U#^H%j%SnduɆɤ*B<*k F'h_%^.ƭr܇\2H\yl; Mn~ nAA堎4˶סK#QJt?/ 3}Loc&-?+,[2T {"4/9bkmC(ԏ X9?RޏP*ڣJ;Bq4;Boi#0+em3X03B(l nV&='碷:ӏy 9pjdJ]?W c1!Pf-+2DɴI}w)7J5)إ̃C3RӑJnlG\֮xy$# ꌤL) òSfgv3~]Gi: Z͛=. yBGHUͽsSI*[ o(.eK:x-έKѫFQͶcaij@EIC,B\^uDʸ`U9L~P2ʮ;wUb>{Hun2.)Əys`w9"K!1HB2ړ1!Ms3܍JPlwě > V5-2jځO LK6}Ҽ'}EzݾAdɛRرW|h-R;ʭ!Ķ2.ے!$՘ c!IE#LjSuu)2kfXƿqZ8`.fs}hggy묷$0+5)ϫ\tTUC>ӾP@IT$? 87q D9ܤLrѡ"^]}&40zOW J?2W"9$<%WIon4w$I:"Bw ܢ)ѯh͒łWHNAP}?OCȃdzG1yFb+,9*Cm[;]mXUq/:_@dАdpҳ2:k܉)h;ue] ^J?p\S1>ENs2Y}yB壑KP tqwUsgdi>Y =H6-̦6XaʟV|lo<*>Am!k<=C4X*Y=o[COB{Yů%G}(,Cik^\ Uj1,,UxQO( JbȚJ\-KԪVÙR?DV@Pb!1 G(%9S_\mG2:BX1K`z:l^ԟF$<,ߡ F[ <I$Znrvn$y `%j,lY\.!r 5HjnWuxw‡ T|GRJP P*q&jZ"c#уcՊlB!w%Y5|&;BD\ 蠀M.Y~գH0U̝5 u&̗=k̎4ݟP@\֟ APLrpz؅gj}AdplU,ߏb˂!N,s#A#PO8Mgf64F)6лj8WMb2U8EҼRNruIP)@2Q*!^iL{ܥl]AX^Z= +!]/=S\oIВ pD=Scqd6%:7bs wRժʪd~i`d^1o;ɱw=X3:œ)Ugiչ_;k gёڕCWT ] ~]QŽO*!*DA[h=+QdbOHTŐؘhCwryC7W"p 4,:aNk3ȁ^kxknUG X0G`٩n JBxNTp#x; _YIJ/x5wa_ `’v29cpqlJ_K^fIcۆ\>r_RpH#c`4Q×%P7Cx1UuD7sFP&ީ_%, !az>LBUl@b\@mUzqPz솘aZiO)ҏ[f|  {1#G5KY;):.{@?Ʃ?jβb*VSəbʹNR(F_`یT>o۠=s̡|l{d=˿0B 'FUS j` KELGF)OQ8P/V"OŽx+&UBYjÃ3NJ[:0S,Ǖ8zÛj$՞^,;rJ=B|T!KA?7<4} # Rk5JpXnNT= /竔r9)[8O#R7}kpE{E;x ;jO5PX~ b9{dVWr'GJaW=kښjYeTF_ - wģgL[%C[?]:P6i:%عblLآ?ڲBс+qLj3谣9徐ȵڼe!4(Bg_ˋ[K*mu()];N-??~< /T􀁸@љ}>z(+X 7?i("GKvj W_'2НH*jW=g1ϩDz \CC C  `7+lRlk+k[zh{p;*Kڟ \QZҘڎ<'VE;K r.=z"jOqʉEJ8Vʥ+bw5hGNo~2M#Zpll ;6ms(" PY= L!7ms|,)Oi݀Sq*G[Hpp yZk$֋˹g;kwҐ<K}L\-Ka%rWhѮ+Dk$)$VN.cec̖nwsu FWJZE7!NV7#Few+'CXZ .'?"fX gS>LѽhWĴt2ͬ/V/G86USu+#]^wsMTT`Al{ ko#Py㔀d|!hcS.!y#<"ր}|uol`S_G5JJ>*i_5 _rUf+Z؇rϚ;ŀ"bRoO.%;^b _liuRTd- wZ E79T s`?w}S](I)f]O(9% ODd2ңCGqf|oBpA7~4F4,17t&͂Au9zQPIZ.qWr& wNᑻ.߄HDD&-y,S)M.r{ocdQF'zr9F Wg?UU:)9JmAe`EŦ<^^3n94U,ҐI]A}`~$m)+vdd>T37p*uzDHKinH;g&A5y9Qb0)j+R r1P/&D*m`pK<{F![?KvW}g:#G/p~uhi6 0nT6_F[WkY|feAF.ȥ*лV! <X'15A@uc ׷'i#1 ·d&돨l(m^mrM:б%pZ3˒\L;}z{=/}dZoIџ4=Jl)FP~Ǣc /-W5Ʈ+1~cڭ[ѮJqἨE5P\i׊ )No*vS \l9SxSΩb"o6ӹ'5C X r^2?>0#K8F+0Jӏh "䇗EiMj/^-"`"e=0'yVHoS;::2KAs6o!+Sb}BɰuHҠ5Ie'+P&] d丶{QtUnŜѝԆ{wjN@5Y ‰K60rz27<ܤzԭӰmPZNIYppLk?TmwRп:% =M&spy=`./H,~"cYڌߌOh,d[JB>Pec@~^7z>kab@?ΐ% (6D\ E@^ خ"Z;&k2~x>_z烻:i -±)GG'1hFu'u9`Z X<>ޯTjꞀ\j=B1vnO3X|X4|`QQm@i[;аh4"MX zjehb'Ҷ-7)^{g^y= {cdjCT41HSW*GA9Y@ԥꅱvVp\+/,JqA ho[𒷮֛ͥ@Юǩf밍hsL{zn.t6mf)i'{ ؆Jq1h#Pg ~Ȃ38ITaӄRErXɋ7y>25*kNꅪ)fIlLe-h06R:u$!E~f?zVIvy`yguhAjℤs$@*o$*Šy6¼U)hy" lrN&(&lqz7zWkP2{/DzixT6n^yrk>x:'/ !W5] zוi_+#fBcymKhK"hTKXA.55ҼYFI~-d >r_"A!8Xn5줩8ƢQZB\Yj_%ˉMQZ4|;&L 'mXtO#EKQB[Nms_qeŮx&w1eH5D|j229k1C 6b_Ѻwˢ-U}5 E|(\, ]yU.;1:G# =֚Y!4］F .m*yƦ@ÝճT&FR>3 #\pS}MzW3MN6nf֕ɩWƻrDTXe9(2Eu 1+.,mҪtIGbnZ)2p8伙PFg7}땤)nZp)w( l:B=c=:n.?Nb_]^BYHšC$ ܑ~%Xrc{ӣAw(:8W'Z!3P`;נEFYᕟ;.ިM6*0o}#~<9%~En{Ɔ:ݶx6Rjp1=NfqÄL{=7Vd@9 [KWၔ)EօNPضTI(yȰ3Va0:ux?-3`EqQ*b.-+V@f/&>x\绒B.qQ q[^jMjL|]l^ٚŊ=6e0cѠCw,x$a?tZiPes͠ɟNZ paWL4eF]J+!&mMcI˅ihMDF'"z(}VNM,w> Pk}.]j觢(Qzꀗ- 5SaPv\I$6y*flDgW[<ٔ~+1G)OrUMR {;֟E3O=* .B f(b>9!MVq`pKIk6,?*_u͡,QӷOaCVs]?"%\ y(W^EY[ΈlMnŠ_Q9$`Kw|JQp)I fȢNԦF_I j6$a^ jK\ +煝_cp>)n'k۩>uM? ̺wS,-JS'SP-p.ϽډF ["U8E͏!oY UaT}06Lv;68D׭`Xl1CI'ǚ}N$"',ߍ ~' >b>CSCUq8qTbִc4֥qSt>롾F%{Μ;?N_ԽH W%{[2伬gO"uG1UAE 9<%H|cJfuӽR͓1=]ΰsJmV, yQeDk4%Pbuoң'-A_B6tJL%AMչ9+)|#-oo`aKH`SAG}I1j9 aTm1ssπ~rƪk9 ဴz#u,<ΕˑƦd>aHb>`UU^TJ6ZBozĉo2x&|Gʗ9x,){ HT p?ʏ*қգي@R\(7mBNA/YO 7ŷ@Vwpω {#:U!dT@R_QpQWh}օN&  cY4F!j)|#lR$N5;TENsl{fvv9/<LCo:{Ƅeux{Y]؟⼘i2eMX 3yQ4.5+MjGkkٝ{g ;c֒3HK$Fpf]Fl <㚴h^`e IP@ks؃)#JUCBL!c7y (1:';i(8=u dBhXLn1DP6DW [UIJ K:ȓ![%&pP#⣻5)Rzz/qvKz;| Z٠"/υ싵"q8)(4jB0=ɿm~W'!XZʝ:D/H՛;w_61HۛE[iIut@xfz9#B]2{]>e8;{}Z>4L|W_\m*r'ӋhR8Y}>nd|A~"XwRUPERu@DPd\ye[f S S[[!fiϔ=C;&<Wg}⍠T}DB<̐x|*M u;IcW;jHnG7:ZCR|쟒Mͬ Zu#FGH ['xuEgtچ;^y\ʄnJogK([Np{7>pO:]4=&Ä$+Ĵ썯^g PM@N"Ra0sl\VjԕŦ\$;_nC^K-э}WsRVpTqT^US(7w)FA(X]UO<2^J|^_d? *臮/K8_ȡ!\Aq 2$dAAԅ-'V؄;'MAs%~]=D&lF;3]ǀj3:n5c]=W@Mqt]%U,p?Bon цJueG AA#0| *㊳Ҷr +`q}}?0iZMrwc3O(Wrb(/+R0ӿvxX/ٮ̖ :> _ P %cA.\sQ^"Ld$u1Kjt[\$P/E  <%p5wI%7nUdkh3!yN e!~XBiI<`N يZ6 Zy{'baa[!ϯ<ڮ#弩7𦮚sc/K=iXm)8J]0"%tn_Hև:ӷf ]ȈX5ђޢaj;Z Cj:g :12: J=2iBp_v~֨Udž$gRFivuZıAy hop 2(ذenN!{ Zw!|sG_u>G~.  qfE*dl,> ˼#vz6%D+7u  T"7SÒb6j0kcߖH{#+ϦPE~B8='c:Ԟ+)$Qi\sN! l0:ITܮy71Z2EOyqvOt+%5r8ɎpIKuZ@8e,% I\G`rw$D 43]^Y>mf!-;,}M>4k=}hZF f[}f*grCԹmBh$wz VYbDt;_&|\vቧ|5i}:3||5McmߴWL)A oSk?;IT|OFSV}pWl LDL!mcKB_/%k Գacuyde'ʛ^Jra|E{皨 8f fwi$x &"g*ų8ºBIbUtf y r!S?IQWlBf0o|$k-m%/t+ZA.5N"Qڶ<8b#NXk⎑fLi6AQZ[n7/%0qD`V=$L>ҏ0#ub̸{zwu.Sa?AjjoZ:O(Hk؍V~S|k6PQqU*WOC3(Efѹ[ w&FE%e"ک52jaG.ͥ8Z$AQSJD;yH_ifG,= rBl'͢t@5W#ǁNZU5X̓oDO!";4Nz*V}~m Aay#kM0 s9M ౔&ٷoZ(EW%g;NB Ò*GTܠ2 2l'I)K=6Swk'ϵMAB˪ P g,w = +Cn˄h C_ƳU`= j25XEoO=YvL5fIf)uupLˑ4ˆ+e$"}MgG_CxCz+Vry \`ӽ5((F2S)X_[\|nUрMjLbTX -oqLnZU(UhP Fc]~Ə+]*VG C AR?/ T|[k;^jRZ҄sQi>l7x7>/Jo𽝋n[H]rͮ`̿.GC2@jRfa]Wr<ċd4/955;[c%srI^VL[IkjCYι~GF(}'CI 71ҵi3B_J+#QX~l P&<}, 3hW욅L5zeѶh 5#՚_CA ^pHՌjˋR __wjŽX$'*ft[9Z` L> -'QɖX;5,ZKPߙ: ȥ6^dJsvt}uYS7 TJMD΂k 9Pd A4eSk_{n=amB"KFj$QxKe"EOSR:#诱%4Mog`,sGgKRu^(rS[¼ZVyҽa7mQq!48FZZHCA8׸:Ge1ZW5Dg8鶠O!Hޑ*3o Z' a'^Dn=ߢE:PR0%ʢ5L}:GW zqVj`}DS-gH*ɮ|ˣY 9>,a+ RyЃe?nPJ* 8Xc'9d% Ux}M9L`Sh7$`#V;PAb¼נy:rv=]a% ﳪNU꫺*!'y&2%@`)'JvsR%_#8KoP@׆-<Ns܍irO2,3/ v<&1⨉{F(>JBuGl|;792ڊ7ig@1eD{Q9YwՇ`aX˵k :? TOx;\}@bzO0a)(n VxX-UvC$6_Ckt$&c2"˘onBt2U:vI"Gc{nl@qxutK4H>f}T,[&/?H/Mk@#9hM@:=bmCuTP5LJp)>SQelb w#A[!;2{>@YZ2f}KSk bhRKOHkk4?\PbfZs-Wɻ.MMUNR񆗤QfO"c 9]dMuaOz `IUx9P3V&W9@GaY E0\t^Xtq oR8g b# .YڋB_u/Ks+"H!=Br}JWWff:f𤿯,ۀ=g% Cdt8-QO8%~/ 08A~2 t8Dz [ x {?np_SUSNўmݓk5*ki-݇Y-YXJ 8y<{Mz3l>}8\p 3':e5&@PS:j~hU? `J3cHwV24Ѭ`\ m-d!kl>뢧R#Qev0ː@<[MG`fg7i=TZN?I<i/tF38*[$PW+h<_D[k&M>Y鿋z`aI# %q]94sDdW_I+RfV!MakB:!<*DR ,I~e[nXǫ]cM9z*$PsQoQ'v5mg_٩75y$y$1H"Y+9 !%!):=5LZE(u6*jxG?92ۛ:9+ϋ@HΨe&v!on6MF6]QĞߡR"㜉vcW1ʥtD$ i(׿ȵ`t 4A`'f soQE$/_JZ!I/R,M+)\ؓ ]'l((`as!@Ϲf_ ~ls;±TČFa]NYE,]gC$hZ]J;YOR>$2_WX i_c_P^GFHVMIo,Ko9,qAJ&Dl-|gE}N72ힹFfaA8dkAQHfjCK D?LbnCy'mê+Jߝ3f$_Q 5}c(ji)?w;V٤J]e)3c8ʶӍbf6D3* NT뿢t^)8YO-~sP,ebΠ |nĝQ[܄^5I<(V5*ilyɄH]Ȅnr:ig]q& 'fM /\w:r/vـ(a (34RuǣV8Q$F/ޘ:+ɿ:վN[@k=SE um*Er.8i0|nԅL)ܥ%K!688=# ﻛHaQ|#f7~. 6 h%#fRZr ^I39 Ož#&`('?\Ew"Al z^U6x ~w1QA}L@Ġڄ= i6" k3:]lF;nIv<jĞfXo.n&=[f{if[6@ l6'bni!bV(zԨZuW[K-2kB] .tų#ayd(5L$A'p YBja7䫾/pdWb5e;]Xܕ$B:4)4isuه䀘xKHC®@!NQ #gBVgt5@I,l-)$ehw>@⩽U'6 I'5L#U"F<4WUd&YW.ЬEUimq)M*Px lBTDCn J>yv$6wM,Ri68# a;G@ Aybٷt9C~|Z3shs i>gbY׻f{],=aC* iN&wTD ւ r`0caV I++@Qwt}lT&][ I1֦Uupw$YI/~s_ݔAkв ꚺΝWp8C~vI9[¥fZIf\9K>Jӭ?"Wvau~vXv܍3|C|r[n|*Ф8Fgnz߸4ڡuLd=dٟ]FG6 fiw k@s'HED -\svEKGWMߝo):qX 8M й~1 Zz{f$3f}üR,M,vJQ^""y2HA?2WÉ>:0ᓽ.t 2^(FJ:&heToJ8.7s5PJ ~ˢC[kp~_W |V@)ɗKg R~Lg1@DĴ&(I;(7+ݫ7 #.!Ϥ^E[I:I (5U}e~lqDڔP@: bLu4SoBL}rBPdX/Hg#o+lMzX5EPr5/j6뙧/MGk7t U ⩚MzB_؀v͕`E@evlxl} ;_ N D >jǓݐGM[C}1,7suhOEtfVF!K..~4 P4`. JǶ {\GC+G<8YDo υ'lf5=UK@憻|5P]ia^Z}zRnLNgG8;r$V2VwS]g'N%;/nFtհ,S $IvjKT8oy+Bp쯤UQN߈׈/=Ws!E9 z㟰H㞰쑫Q*sU1~z`7=9Bub!p 6(oZ˹'g Vʫ/lФ5eGS׮AwcGÍ 2ޮ:eJyQvf2Ʊy|.'^8SsT(B&}y%'Ev!/vi(-4kϙs6;Q'SKP˾'} PoH=Lr_a i EחlRۛ59gwY/&=whY<vUz 4EgUjͳW wU8XZ@ HE. laLAj@Ҧ,Nm%ɕل:SӍB'b&:ENjUl(wA 3 T ~t83bڡS}|(;4=J4@+Eo,tWޭ&8R%wGJW]w/N:'2)\G_OywM ΑczGzq:УO &擄y P\~$$\x .:3[Yc1RgP)ЃKs JZPh>uR9|nՉѱ[;؋ś̽*A#74B׋ w=}# gEf{5!db+kBo<_So|O b Iv >O3h)دP>C 1-&v0­f/3 @ ɵ()me׺ W.^YˌWU> U]e3-^fla`\ryb O~?f;޻Sӥ ݳRbNZq}%:,CRv̘ o@jG+mqҮXC{$S`IN݋lvc^ ->Yt^A+FEg Xò< ~g$;Sy2㷖$1ѧ'9f>\ iNM>a$|bWo]0%\ԉa -߽QE{ϟʼSRŗ=̿*{~%KM;]&˱UbqW-t lV+ ʧq8qzW=0=C@@Bu+ب+YC0!r,h&u]Kfp.Dh9FĶ3۞/bx x4k:i:hZ{!!Y՘ݎHIQPCa\7ZSX?pFy.4zQ?Ruv{0#d|x/TrJnM7T`0v 3h;FI~+M8[K̪® d:sV~k5aD`+xs.p;:ziCȓXYbMUx!wv_N{{R b9ܕlbg qu!rfanR*@-. "Z Z.B_0Kޥִ(Ǝv$dVta A&lTi0;u)z=Ʀi^( -ırEi=nZ5r&|x{2bc5xs 9|*,;f}(2 _?!@٨-]{sÞlC ~$P}K5'ti?6#R=p?,@6LZN~BilmMZtXi$ae5ɰ@UįC9CoP?6L8) Í: (Ҿ7%9ɉ<7/;sLٵ"I$0Tge-ZCun-.=؊OBe(4ݲ^&܁Pp%2\yf+l+JHIp$͍suO':UrKu T5`+"(!+-@dcGjl#24 $Y9=4 {( A21܌E_ r7NNVU#$t-BϻPNM@Tpj*lKIyo\ziLU8AG^g`A)fDuT4-]rEf9ok`}pˋ ci V,TwY8b-vCּM.tAlJO\s"`=Y5R/Bjm%N r8>T$y7QA rJxa$!!\*t-JΏ8p5פ8ZJje )ǁ]8݁qqZjo ]aKU&#I +b ^B2EApcl0yƉxg|<~$YlKx#DXsfqpJ\C^fSSod˯2Ԏ@xaD!ԠuAd."xȭI 6uV^H;G c 5W5I]Px٢ԡ%'3Rˑ}  tSyM:qD:6<#pᙒfEl^jtȻ&L[moH{ *lA|n Hz*P+dzeB}"z*Uj]d9?KF3$ءiMcYJgQCfs4.[aCSlmpl+eOx -6@9"!F/RW lDGYd2Jۭ$v67oTzӐ`Շnϧx Jz횇Vg s?0&S9ZcFh)![72sԄ{oe K#Q'[]#љLF=.F,13ZxnC 3~Bd?K+Cf "7ߍf+/=Gc<Ҋ_Q7[Srg}0us^BR55t8=(*W[g&-ȵѧ04`x5shi%\آs;3 V8LaL}e=\Jl% #>ySOκ;JY(_ʊmU ]64TX0vM<1~/b>QA=푬^/V/,Lfl$7UYnfnM.A*\`|>V na/zڡ2m+z)GWђmY18arORRFɫLHo$%fIq@UZnB6A;fЇB\76P*gP[^H.-NbatOO= ^< =[.FK[ ,rzpl :Z؆3>/`t[zb!R]j6(`6LTkՆ"HeE#; {mdRq7ͦ?`] cTdTd)M\ (4rBÚdJzL=[8%Yi(m$mi(EN`P$Afa_qTTzAϸo v3 El2⓬:^:j2|RP48LKP(͌Guq%} ]ёh"y =Ga(tXłj[` Tq CWU8E)'@JJVfO5Ie˽hVqF"dw+b u"J5&@qӠْUIu>kɛ Ǜ@ҲD@xEd^7!7 A[n^>Ƥm)X^Ou()Ù N~ƭ^n.RT>چJvɲ Zڈ^A)T9rx@ц$r\BRT@PZ(P x"g-"?MR7y5%f}yLDž/p &'^z&ʿi;2gs/ԞoSɽm:W}F,h*RZ{xE mm5N$ybW.vғR-~ 4AkS:/;U^ex}̮o.<3>*Y.mчbtD'` j dn;:m☏YrC} VpX7yVv!v-j3Ovp2駀qW9( 9{>b8IgEA ƻSnٿ: 8跱0q࿳]^yUZO'dBdqۻ^eRɡ#GfX%J~ܢ[c寻62ǓL R80j;kIAՀ7&;?-,3B~׎\"Y3MjԜ! \XO?(J, B-D/mz /74/M06Ah\)ņ^YHce˳N2nHkU ׁՌJV1;1؆ "(NԔ I}9<! :x8㛡G[24@BTМ*xb&ث_IOϾ|EQCsH2ɝr0Y 1NʕHzMj^$&-!r{o[zwWwj(*u"KH9B Fgm~de-, i]ɐ]V=k%(FNz =6^ȾĚI=w1nQA 5ÏE)o IrOƣoex\c+O=|r. G›brсQ1ޠ网kݲom7=C@/].wDf+Ռ1pr)S8ehЬS+vV= L_xȍᣲśTD@Ha"]vLuԾ]2+ "d`JxTqb_b6=_P4XѲqE\q ::Z3k#d_(:~ q"ITRwwSq9241 +ebj=)ܜYIAVv*#Hi){.N)pD @TxWZb bTS>h=$C>84@Xҁ.%Z_îے&Hc۰t<8 @\u7ͣpm5j ',`KzQa}kiUQB;iIn `˹aDh-HHz@2RW.9 tU{vYRD OЌ2zIY؛ ˇ= jcvf%mHHpt$ɴʼnغԶ ;xGϜ_ j?mQ~/}ʺG}ZwD eq')j݋YJ !w Q@K# ʚA%(<2̲DODh˝)jj1ǞPQDGV)4Yi^[ -w#$4\p0 W)I>cn?x/Jt9kWBU=OPT;"BK\w9+vu[쳌0o:S߻Wb`C+?Ofj3wa(hNO0|st)UJQQ`6wNx+}MpzQnr["[ zv35nf.ՏV~}\݅e^qOf>G4=?ÂԱ-mFw۫sԤ33+;o0%2 Q7D;2dP m(Bu8% ! lg`dj0 Ak=FJ)uH w^E[g׭_^I_1ʧ9HZ:"`g~+Cﱀit.B!-Q!b\a\mOI>0Bx-?3K: չ6Q^=K} NUZ7bF]4jfŗ=j 01r=VtよVT]"?> XGd7 ZK$&SjmUk1`f' ޚ+5<SiN{=FB Ȍ=em7Jٸ`]IgLWqxMzc4;$WSI>"s5(0|̎ 񵀨9eB]º3(#XpΤe=Hrt5C 3+0+n&G0 j`" .ߕqm.:3kE|˞s}'륻C31ںwZp2&\̇WL}Wp`g!%Q"mX`9:/4}p؞9/9󦠮vG25Ae~ {L0IA ȣJ=LQ_}8+rv҃m|B7_*( Ք ԉkHd;N͸e~/QCtDN>%"SWD(6#86td7[:{@]j]T]P*G쪝+XH{?_In|wpgw,hKji q!.;KǮt|ԹG 'SBԠt^s#/6ժc!/J2rsTkAKߙbl-ڣ`ֈEYuHS\;N4\Q4|c1RXt9y"C89J:AgrR`ZWࡣ I1*;DhGC -щNwI^WFjhB(?@<8oѧO4Jam $-QRw H)idx: ;(A:4JG(0thI¡۰=`IdPG8 wd o˿=NH!ǿf]|=L {o5 LxdqkG B |aѷ Q-2 iyO߃K\&!+tk+Y/<@>'g`BhӼ($qzm3:icLH?KFr+~ĝҀMOcj1xhȳD<n?oGVsIpfǃ[Z!x^!P,΂5@R?ڧW^Y\8O>R¸Ƣ_Hʵ=06nĦ6_`T?%&@UʽP|N6`{z苁:] ho?Q z oѽ(^ 4KY' ,7aNђY:A~x-0&PJy0."7;_54aחDlpoT=HS[ΉE[+%;T`kzu=VdfnRRT$X[XʛACLuv8&^l޼neM2Pb~ ¯z_%q`:XEUukjILtZ=7FVe'ΚK~\J-ڠPe]I`:ӲuZnfUGw5U_ʛnVuD8wJ lEi? #* uK\ UIp}hߋV]K/ٖbOTs3($lҢ0"LMA=,ˈ4kWP^o#}n&FBZHGݎeBPj=_rryj4f}E4SX Su"Y݁L¥}rLW&! .p#:M]av0|K Ңٰ2z}Q<1{wJe띬b d)TgBm mo\eűw<l լ a#zfQbk7`m󪅧C Q+.aGlœP LM6+c:Z@a':`_ԮPK8qӟZ&k4d*Ȼ2-'2iPĻ68V۬3&wvhrzݞ2R |77r %XYFՐhn Szr\c ?5zs {h} X 2T_CV<-B=\K |>X7{`3bպs4rVœD"ߕo/=D"_%G/пm8#eWmЗL1V4_N'2Rf QԷ]oL% _1`^~%%qo9:lJp?Sٱ9hJnSl)-*@ Q_ґ2/?G<{pw`$*'9.!Tf݃\ώ",vCeQќͫB$a8r\Üfbj]Lxp\)s c 'K,rv'R) O(\cms)FD_!ݛ&Rmqy$"U'Stu ;5͇kP|}+m1M\=ٛTvWACO®"_G}ZKJ:CXJkj{ښKK8λ*UBAqR4 uwK{^JD>V:c;3*]̯$/*:A%~@X1kl>{=tmfl,B$ez:Zh۽f_SK/H!xOg(Bp@ͪNӞE/nma%aՌq{/yHEk !`ϲ, …A]X4,@`s64Add?í4P>|Ԣ^\noo\ۘR~RKo&jQiRLAlwjS|YByx,kfL? giy'$QNH~Hݖ01PYQٌG4WuUSTJs~!`)|]u70oȷ+D'^BτLWPn[.EJ*nb=I('׫ Eƞ+II j7m?4}`]@Ĕ!M:eqEXcX~ b%(`j/0F8da i맑 r<ѼRb{ XZ>΋HV ԭۏ$ڻ‚PcUWs);ƪw3s&ۃAp|M D2{QsFGajXsB%.vz A0(b F!bN\x{Npi5(6+*czԝ-J]J$#a4U1!Ԋ$4+zΙnk -JŅS ٥X. xf{fD 4;+J(UT9(5 $$vh-޺V"k/#*¡.w&ԴeF%G^b`L.jGJPgbiO1WKfp;ёRXU)Z[ޝ$69nDOv./>`c3YDW1y;g+%"*,* 4f VyVta^X[53U[a 3x@AILF&܎2*!}X FAh aNI&@O`)B~E6c` U=aO::lJ)&Y FɴJ`6oD)m #qpș2gXp`k6|A&q/4(Zх S |l}Ĵ^͐jӦ#ڳich5$$ ?em"XBa=t66뾿o9P{8NR ɣսL5d^z]'jL8/ۣ>_)}S U&aKW:0GHa5(([Ry5f4e&ȥoT-H+gdqgecE!7hjo>Rst5keop>'h8)ףQv֗!k5?fG' }٭ _VXccTDAl1h:`\xu}Bq$pi"*?v`AȀVQJZ)e0HdtĆ1Z {',8.?yJ"`Pv5S? >ֽ! ߧ-SD~qau87[2WQ>7zHL\ְb=y)IMzZ-Ԯrqsꑱh̏(g\S`;aΎ6m)!vQEھjF^ftC ЗPZṒ=C[~aND|F[%ϵI\&lG\?2j NM Sufgр]Kj vh(yhTZצW%jze *JP}Vi-:ѹuF71i ,Ac`K? jgڛ.SȘ°(&F>HvZrJI 5_b xS\K,'+<.@"J5 nA>+<R-Gs{"4\9OkL(d!BC EDQ*ۙhGqF#0)gM!̤8kW>f8ʞ(z !Vm{ K5u{V5ܑa ӧkz (dīC:Ť6h&ˏǻ \4߰) 9/075AQ #H{) [MV4sZ³a"\〪 \GEm؈qG~Jy-OrOr \;~WtvcߧyB*"h:H;Y,Drxļ@Ѕ>?ܑ( j˞C+Y)9o0b?79031H/fػMf$`1glILUbo 񊾵 aa/5*d,D;HPWQϣllݛLՋu o>h {'6{C 'ămN[+_=^XԱGu];;LdC 3a7MKɪNʼrV7 6H fMvHq'b-sA0Z&7Fh x> Z>Ns#mڋ[&(X?%QHfyDX0EN̻Z_,vgeH%̽8Wbw :]N]|FR~Ou|CA3yEuŏ T%-?%)71hFb~$q9`b+zLק*[;3mH Lcf[gJm\&R7\Q䈓z<HCWH5.SfG%N' &@p%ZWЇE/u8n?r\ɶ㭱ڨ)3Pڬߢ*ͩUp,6o}QG(JFo+;'ڙl/`efebQ1clr7-`?%9oGu;PI`H껥Hfc6u_Hm~P5Xg/; F.}q8P)R-R=xx[͛s&~NLc!=^xXq^sO+-O|{1e) نZ죝EIxn{'^ ӆ;$(45o+ղ6FlB-v%F~‹ uJfl/2qq˻[F@ZiW%?Qa 3ȹ1/}#3{Y4hc+9}aQ,#&ͭU #]3Y=GF̙`݌ N٭]xͳ˖95?F)< <9ZޡSM[v_dD3ŧ&ܵ_ͱXil2GDM#ԶeF|;͜d 8?;K7Œc,e%RLi 1noz`r{';L(PbRBFY_FrtPT8R.6ސuMhRB H~+v*'fmp $qp\Q*ѰU@GG}Y1/rҴ::ɞu | O5 w 064};׾eS5;\Q=qw@oXֹj]'#Ku;j#m8R-mxf(4C++{j#GGE^ozEiv-a2~4ti/Gekю\2[6,VWw4L͓_U$ !tN܎>eSLgy^*D^gI}8;D{'+93|C`x\2$pyԫ`Uz(r| ;QPBd{8r 7C1ҥ,p7~bW_> ƝbɴT:nn|oxPw_tsdrDN0˼oI :PˡMܑ2ȧLHyF˃"c#xST44^x'TÔ=H ӳ31W%2a_C{ K8: 'ga>i<[k nG<63AC8IJ ].x 凌;SkL"^)}d 񫮫C اͽAūx!:!]2SƖ9860Pa7 -2{o_>ud\Q; a"vy Hn?!+gw˛|PPfN>-Sf8s:k9Ṽ"hN> ŬFeR2G~fVN$2vǚp*'Y=/SO@Q.xF"r]x킡dizt[[ #[$w1OfAms_~Or94~`fS0c2Ʊ@L\ \#TC |fa5?0wcluܓ`%<6e'4.-?ȷEPֽWtzv-<3 aw) ly2(,9cL5CbLX])krI8֖Xt4ݲ& rpN6؈6R*6W47Sٺܬg@s k?*y(Exv]0<ܚID)Ѳfg$̜x5rH,<a|e.O$iZo;c87FkJV4]ւ8GB,r)g4s*NkʤW>:,\.5j}2&geK"E~UA#ffςUj zMg-F?Λh[\VH10 kB%p;ҡ<>~|CrzÝa1Gm\lCokF~Ű@qo' ST%NoCmsg}Y; }Qy<:"}8+ZZOfͿ{J:b TٴB9&z"J9$G̥{c(MB)uS}-lH3r3,g>m]JU >`I6 z(ٿ Khq-Ω;IA*tsG}D ?T!?a٨;"K)4[E˜I[3k8&5[eE,iv;!$ǠB衾[ AjdđVBdCYuMۄL,φu:$`fpDW]^;TYE"iȑ[ON[!YZl:NwB]be,iکĕSn|q[,^[>j0ڊwd'-F@oǗ)ok[^efd(b2vT4J.@ӬOH35v}h31FmUS&[̮=B&ĺڇEdwH^Ts"z;n rd"R4X{3nz3)2d{kΛ8u\ɲ( V>(Ѭ蜃ʹ<)n6GvOTlk*jGU];(NVX %RMN1X7[3E ew>PG\2k8$*ٵub+G?Ez߬~ljJ`bzry 8bIe˦mFEK蹛7 Ƈ;o~Vœ?Sw}ۦOAZ=ֿ4_1S^ձ.؀6C܃* a[! 2mÍzm쏇I{7DXcdF [-;|O27$"/F yO"$+h3yt1lA g41Po\ ]=}frKq*/et6b/h`3eo~47bN?q `nG~Y d6dB0?~u. TX/[7yo󦟉F~R:00՛{1?sBȀqu/X&= ³2T>2K -_ տhO+_e6,} NFQ>V:f'kiȫm~Kفp;F@'Mc997E1’y/W6(>$6Y`&DgmF;gy (099\,zvz{!YD볆e|&nGS{$E@ƬKQ?~̛n"ߘ!zC줶COi *`0Q_tEns1HdG`q7Xe~D}F纚WNVu|.Zr+ #2y\~b_l+q5e$c-qzk{S<>wM+b X_eڕ|m˜ZXQ26hY }Y#?TݹdŽnAkdl8 9}X|cX2_ʶ'U^mtTdavunotfD{6POZO6!RTzvB*ܛ*z+_6QE_-6Er@~pT?H(O+BV;hZ-JǓͷSM6T$y?~4$ <]`v!4Oo,ŜԁNd:h3??WA*V+9 KxoP^䛦Q c5[6.%%{mU$2;Q;At!TkC<$B5%O`c!7@7<0C%l~+?\]{„2 [vY- ﲾIbLE.Ǹ]IcXRV,cW:B@Mس;dR!QXxq:팱̓oI<*e$X jLs4]:,of,:EP ΑXύ%5.ԞnmPzyUk[ENױ;iklĞp`N!k2PZ\, R?~hAУ'Q"`u1wC/'B23W5g֬9erq Q#P(xh⨕ h0,e]z`x\ 3bY, ֽ4]o誇ț9D,EouI46<:i?})Uh:!@߿X@܁;-67rYRRRŶB{N[ 6ݒ Z|"ק:wQCg67!+vfؙax4;NA⾏ᲂpq=u_LJjHpmmx\hlJyw{U4۝Y õ+E (Sia?V?Y/%B>]p3RqGY mtL&D4ܣI§Q AQc# !)2GRm?xߛ2udrjk خ1[|Iz9`]'@5<9/Td̾]^_!\)ۍGNk#Jm !lk1f_I&Yt(gW{(uڭmiRsŵ sg"X#uI|ie\)"VqB U'϶[dX[@ðG#^E&6a2^.2z%`Tj EwN{8TH #ۍ҅.iTro+LtIHfGaO4bYQMA[6[־< nXHdߌ;^.j> LZܿ /l#ء>//5)"o:m_q 1Zp, hL[H"-t[ kq0{йG)iDUtt,ٌKm.O+qL!KB,ʅ%:iY7tK dJ:$-'z^:AX!q[Ǡ a̮x^H0yY m 0-_?ϜΞ|)SCm C,Ll{]ՠQ(2"`U剚C6 )S }ja;qC錵mkQ {d&1YR5LuUb!a}ާQY{kN { x/%Nn%2kFpz8"1*6VmLI7[g&DXt&Ç;?jm{Gn|D%|$"',% Ro@闼IeO!JE?:R[[Qluo;_I`:V9cOz*|KwQF:0)|nw0`~Ye<*䶞f)L=Zq¥E{O%l7*Bls R I[k0ÃI(/[{|-#zv|a9B.'=b,vhi),ۺΕ'6[7\"A'u,3NkP!SG2>ޯ'؉G +^^-wE .T.ElqBXIr/`a. ]s^$ d^5TOwK'k3%axAOmJ{BX)TfT>pJh\)mNBaq?쨿 C̚LI9Ch{ CUg-4}\z]EH]jۨd3T*ȉOFψ]gi\NGCr!d/澞簵ZH+[ܭ_ W `0(i]q5՛ݣg)Dl.50R,ze0#DL?NU YLC%m-z7z5i`֞Ru@}/ s/؋\Ɨt,?WZXIrꃃ!06w.9M Ru3"kMڳ(9QbHLO} R!땩iNVq|͢ QPn|mQB-AW.;"egYdo1`اC]EX¿?w4oًވ.[>>6Ιs ] -/5s '~(!:!?\yjjZQtHX]|},KMlIK G߱*B0;!WA_~{[GzZ KY&wS7[MS`Uӈ>MPooW94ߐs \awf(:y!Mqr4BJͰ06gun4 Ceg4iPY{mvrC4f\3 kz!YA0rc;unelf~6jj5"ҮY[C Ps&&Wg""%5FR{x6T׶e,U*W7+huVLbE"5I=W#uW.)rxs 6! Ǖv^66)+~bz&owH&!UX1)f}K=҅Y: S0*b:\(?HYfrx>\4~8:_@&G*V|Rb~H |I1^2:\+A4o :q;z79 Qx%OZ"G)[JR~i-a7TW/ܕQ-ɿ01`cۮ$2_Z`gfSB;$ٟM4Z6:@n3Mns{Ϝބ,)k ' r<56/G8s^ܜA^W\8N1-gH3`lLtoPSk:nd鮲u6:EF5Ā[)43 .65HǻՒRI+K+ĻjK,*+VM?# F]VL^c3 4^^"rxuoU6л`'tp]ï-S~|dOt`g.(b)Cn/0Tl瘮ʰLMK*1aHFDI1iqk L,xӋKu {Yb?˗$ڐ!TwI @eEXP>C66Xl5}8aBvFaW#]D\lh+{eŽ,1y( 9@b1\"zš)6c-z`x!Bd_:ɐ !ƫE/l{'گ"O^_VHY]kdT7vv4G|tJ ڎB,,DnlI)"̕)qѺ^Sxnܫ'㝈-0:m;ReSz>X𴩴Ru\~Pgk(˟?W脙'dZ=^ѫcsZHLM1-ݎ9~e]:ߨ( Dr!j jqcj9>iN^8*7y^.++!u1+:GK`3;ۧ;CgE,_۪mol.G=gU_K7(Mc|F6}ve w93; iV+aWAA~Nc]Zts[{In>t 9>'%VqAiysН|Nfzp=Dg^^eK{KxӶV]G-. ɨ@9.hDTfuӻlJuSX&|CgzEOr5N඙Mm|ٚ_yp,9<7y&L fY٬uy oೋ 9-G:k {S GCsl@7E5ÿ_9 0p Npy0ޚ/XI~!|XZhg=n|lkĂ[(ڬz^5ڬHw[3A*u`yЈ櫙TK02OZE`ct`V#xFcSaQ+{- V/)} ys{%YsoAD1`A*1$s܈f|{{Sv2N?xc-S<ѹM"e% /?,hɁ6FYorQ3śȫ昖D$!sK:Mp̴ȍ1xgC50i{ӓ$@vi6鬈| k=%ȒJ\R7LD%S_:4O(ӧ$^q 4/\*^0r@v#r25\| - G\K߹x(jqO!%-]XɃJZt S&7`/1ni)\[,pF":-#F>>֝;|XN] iPCkcO8{c|m<ʌT-BMg)s[%\F=LP`반Jw^7gˆqvo4շ]k:{ޝ ϱe;qUЖ![ 0,羕|W( (g AˁM}kr|͈mhHWb 4Q%̰QkJӲJҋ$!ymgv/u>ui(~2T;5<Gֿwi0,W7OTša!s4:ihB"=ZQK u=\lR9iԼ#޴L1$QCObR,wT{cc7ڢ$3.+tt7A*CX4$WBkKk&vÇc˷0A>=C^#RqFf<%HJGXHҦ>uLXL;f>y2*+[/V\Υ@Dܺ POMhBʭ"|ṤFhנ2d\>Q)Sdu)Sg#EL\ YQFr];;s^'] T{.jk% r%0f?Rt;|RIxBLk!1X;4ݶ0&@H8"?WK yO2!3yp@Վsn{@.ee8(|%q!i%x93A:&Ft#,txqر[j2f+GGjlHv if Bbc4B_)"T%zHmkRu=T\>AԒN>"H](ìNzҩ-# jUI vY2tqZ(&uXWUMw&RD H_nv;W[ugHNg}0JEBʾo3_:T#vM;ʛЮ*)K @Yyԑe'ONJ u*|p! פ.6DX}[*ՃTdSLOkBEe_-/hmSOvaoI҉N2[& "gz^ $cAE1Kq:~&d-WJvFuֽ@iVWxR- ء&ۢ_l3l5l9gcb.?Q-f:#=CݡON"_fKPӏh}½pdNfi@[ clTcYF:Lz5#@6Z]+=𝫋i1Y`Z"E]a aֶgYpDQ<8x$`NǮw; 7"$5VH SXS 3Ӧ2sJ`]aގ@o] ,vIۢ'*58:sbeM |DoXzJwS::N?CE=ZígO+m-QJ~ܰ\G" YU TB/)JN~uX.X.mB.-\W8[aG+@w豁p4j _fsL"6 GB1vclwlcE"~m2䧬Ơ6'ΐ># BM jZu*+lE"l&t[{jWX `O!Є]{S) X!{ m-yQøx_? D`hܸk:~-.+>_! 4 eo S,S.lυ~v &}IC.wE6)7'@+G IVWohal?8,)A,і5oSu~-=" <"XcZf%Ka1)X+4;Ob"0G"#?Npc C걅d7UnsuTII$N1~پŗK>CbiY6ͽ\d *̵}UbSh7uyQ2(-ҹ르eI,yk,~tQx^OttMRfU#hʪNƀIć+nAoz[6f5Fl,Y$7 2^{a;CZ"Z2قM vGdD8®*b˧O@l \N}W;{/u|#w$ PImfS:[ )ꎩTV<:<9^`yQTgpE)#+ǔˑ{L X&Rwu;ȓ_9ԽzfROVe#%@Wm:\.'ќdb՜r 6̉H LIHĨa8I#RV3@63h" )-̌mJFz/%-ڔemh!ָ#] L3>0͚ܧ䜔QKUU YpPJf_,8(ðtYLk#Ք!|iq7?'=4CGdHYe)sg3jiA3y"9|Arr4r$4F\3qvXfDzȆխآrΙMJ@u@7XEV;B@.8 wJvc E5f1/8a ZÖLݢܞ=Q2?= YP$͹ʺb|5FS5 DacB(p\X1w 򧂴p #Y~ZWB}J}PU=7vF~zqkrj>Îp9++&La 6{t&`zO֭dAjN7I916DVIT^ݒp!>o*uԫeq1 F2Y6 ڪg3G/ɾs z=U#LۉѧZmRD$ ea^+ %NDm]'VpE,a ūCP_^r9lX6!$~Pg!+ WX+6(pN' H_K^SBG/C? pE%5[v6l]H T$Ik6,KΏ^hbsf**wăɘ:rUժ÷Mm:d I܈,Xhwg M19!6΂-Et^ '`rԎ Vl={Fx\) !x;%IG'‘bN*=@׬2NZLJEHFwlҔ!_̏*iF{9w~L 6I>PaF˽rTb ! !,&XJw _7,``*YC:&qSRmU$&Ss'*I%_V \ G=C"oS4vHHSn GXق$ٜظzzО~ wHB~ʗ߇+g% 0{%8]Cƴ` R؟Wkq;RzL)!Ri7M x@k!k鲿V$Gs`VE4wh+'3"1[`= \1" Nݺ|nNOڄV(QfĮ'=jldPסKO`X"ڳy;Ebqޮ7{.?KּFo#b9#H.#ʏ3%uar 塏0Ot #® ,vmљn 5v0j R͹UЄDRu.9išpd& ƅ$_F蚇Lu)RW\ۿ \-ϑSZ-5&1*nq " $DݷALФ +fJklm[ ̀oAJ\/z*09mF=eԅ5^5wc0A* GGjaҌ6,Uyն'KuVqoo5!9fL6h Nr(D{onXT,A7"-^kULV\^5 q({rnܨl$uѡƢɥ6 FH=e%CvY-u$wXnomHܗŖ971H^S ہe_pk)ƬfeIvTD@W9R y\xL٣ezFCIUܠ~EZ5kiWB~f2[_^.pX2*QR6;v99?:+t Z?`q#Nܪ6},5LꎿHxs8"n9=׿|= qIN^ҫBr~N{{/ojhݞt|YICk,$H1jWf\ْ>D\zN?`{(rМb:ڽta!<ߎR-D ձp}`cK@n!jDˤK uJō1mdH39Q_ryJv=%-Sؒph'۰;q=.j3a\\oOY,e ?W0{d~_͍ LP#$e=!F\usaaYpܧ}ƘOp]Ql:`g.f"Adqjf:@Ƨ<ɗe.ܫx$Aro?}Hh>/ƝX"djj#|o;u-_ ۥ_q_sf  Vo@s`joRy*O|v.*UQ)ks`2]3Ä,qfUЖnO d &6ۄ9]5h|%E>{M T꫏k"MΆ66=pYvjHЅ1f4coFS2qv}5*qQUW+hGN<ґ9a4)SD᦮ʯBפ(QS{Ÿ]E|r orVe|8j}ãb@_eC)F fր6@6^!o݌^UO顺g-XiT|{[A`r`I]dPr`@~Q= <+.@[^oZ^swQ:y i,/|C$Wp+7)t\J`?O5%.ё BX[L!}<1dAe1Kk6gv,bW@)wbсuY$qa]ѥoD- A |M7izc$N࣎c<$ДJ)*5eyG#M} ztZGbŊJ5jS/c)'Wj['lױ+;J) "vVo3SqʿR.ڶ.[*I˻IN<_y6ˏ91-_Tũ?쾗в֌j~u߬Xd /W5nmUȰԂTh-ԥX!:<7?!}]oxۑ{ʃ]*Ms`4͋PJ#{M yIsl(bEݦKO|}rՇGF-&wBWٛ j3΢R;p:P9@\\p& JW~)e@bٯ'&FY9pEU)[Ǵlٍm=.WRC⚚.]߾9 d2tnF4yxA8ZXڔmק鍲$¨|MzygoCчx X~K [%=ӕ؊1%20t')m"~66{O4۩^Lq\y#~p*i[Q}U; ;pg-kŸc^+xjV:Z,xeTrO~RWsZvCvGd-oޗ]Q_{16X^gF<3n^ ܸ#mziLG摖*h\,T:[7e%F&sr^utP5foA'~9$  hzxmՉοG }E>038K-bYD9=DCJcWX>2w).cC)[SZ0ֵ~N,",z*"0}ݰ'D{ėn/2u`lP6RLXw*Xd %zM2K~D`&lYIBLHc{{XA֞6͟foۈLBvd?H'4Ŷ Y,Ye(Wk" 3{jI@tDt_ǩ57izৣg2Tj>^пhj$8f[@ T?4EEdiC6C
b],;%>n<,ilIC`r#, i#t™Ju[8ZXx0{gOS Y!%B!qbjaMAv,=)m^_{F@'RkxOg&¨fcOBn;oNƌؗCО;ЁèR,8ei?!RیT+A;\c7ňSTQ[ W_\ALX^bH͖U;Vx j1 S Ma;U6ε!KE 2lMHDӟ ENs\|mmE>\r@#s/UGNrYq i/Mt[O_)H$Q/&O-8Jxɻw]B' l|i?04p㊓W4}cH^ت>N54_Ʃg>$Up,_f8l#IqO|pp~#0֞ ?\k'QVc .BSDujZˊD9[b=#H=D!-P DovMRΦs-@6pO1$fW瘲p-o8c-ҫEy!P OeU~d X)orI؍Jp\#T9"{3n_녊@Y3s25BIykU;꛻ ѫCċ ,R1e3S=Qn5!mbs".5՘@J@0ѧV \ xd yW0&B0>jÁoTF!518m 6ԟwҡt<̅6.~n?tga855Og<" ^?V'C,G'r C6mU({8_$v+&Y8N<糺lSOM҅aV^ |^aqzp]Z0vȎ|xYs@ t5 (qџ BGniaV[:9,/a:|C7<3?^'ڪHAMY_Wp"ÉGU@=Ld̿d-E w塉Δj 4vT`(ӿqXfEǺyû藺s\^VoJCO{s*c|E;=-r;XCL& qV@O!drD&`}F(~rwW@d|hxb擋8>_մ^ SpxwTW $l^bMYq ,[5KЛ%(@uQ]pड़g.]9P>0PLfgf2,(̭y,[J7L&v2ȣ^](r}5!Qz)(Y Yu,S?ר//~6B"+oѷ=ta!ku|Smul2I񴥹XWhgFV`7ϫlzog,NDέEpf%$\$LzH4nh\W.7M.!^:O$F0#+ϣG䌃k}98:=x-~0kb+gD_t !CTKi c3a Ef7Ƶ> |hR:IMTqvP6>C/t!M:Ѥ㷟.aE?K]KadCuN&~> $Uzo0 ukp#2VrFr/:9HCM}U0?֍U'þ3T[B[ GF=ܰF/+HV]*,QrL$w61*+ww ̢]è=t1lqIJhX@5_|7\9BӻGj }~ ;eu+da:>8ܜ^\ R/,R^XnN&[p"ϯ?C"c^w~cs({5{V5Fi4O}ej~keaXCe1\hh0 ;oݲ~Cs3U5N`U\+BVy"58и9q/7FC%:{~7vS O1\)-o4K\>O]/Yۆ+X{k;d .)S$LčvevzieRHSWA`C3lNucsTvp6(%<#WwobAg$IXM#&X(Px1O N*kT;r=N 8X*ZfEJZ!.?^18;]F%B! ֡> vu8q& |>A3]oXqO[1LbBn,07 `[$HX ӫ*!:D-ɶekt8ie,nvD1ݶzQ Bg7G|=Y#K9_&Z:įW+&riԐf@HE_;A ߡpSNY|.3P?=nӾ_YOxK6-J,S90p=s`u4kBLW9 iZ4|[cgcߏ]Fuz _Ǎ%Vzb|VxoR/oLslz xP]=nڗPw0}:X WKJ̏域ɨ7L @D~ٿhYrdRIO0Ezʴ-x<1VGFT7Z*82LLࣱE]n<_5^,O4Z( ԋ,x7H@aWًy4yǕ}tS˅\Ox'%u50I@R6ժCxrbKcaR ff0gcJvYyTdR}>"g+>]H8 V촆~G|"^Ewl&u6t\*YV_֢˛PW1Ln\0o Ęx+dW8Y[)5KaJrm?/,]~u{N/ nF320;Yo-1RLwMfTtRT҅c#\t#ַXv[ pL{c^]\HD8].O1g`[7^vSG.ɮ`&*KV"iD 2l#%-BUʲ zq#Z-=aSBc--y`W vTNAunXEwe>1'YW.sH[KdӺEE,P^tLƠ &f 28/*Z*̛1!*5_ L 7v-^}+ !.N _TtĮH@Ȃ'FuWI( }ja6Tͫ'鿁yi ڻ8>F߆,H'uK ~^ċan%\Ȣ4ٖXV:YI'/_λv|/oe*1o*@LQadcu'nl rUU Y*ፇ"fLwP!đU y]c*~B%G]BZ %#N,Sr~B/qu]v˵&Ͷ0 r4LZ{$h3z. R"js`01zvxuN|m݊4}_.l!@LKDhVfzOyȽdkJ?;^~U~M;Oɤktt(&N-Ww3Xt}5hV `^_Vey NsE~&+ lZoM90!JǼ3iXD;|8o;Ha8g;iL-iNpT {D)#ZyN ŰQO `l 5Ǘ= {_B;:&~$-"G4u;]>]@_HF6lp{X^7?3X0t||6>? b+1?*W9W%cR(eOf)VFg: GٖᦒZYE% xleB{PɨB\< `H!{.=g| *R=zkus'@N瘸t܆բ- "n>$0'&v.o.=%mޭuΆ,6k1PDj~pWAU5ω;~)_̾F9λh-r#7_oSH(q ee3yȖ>{!;&QxtFq2V U #wVىk%KT%"pEqWrҨT1>}T6q8X'LՐʨJ;ޫ^lQ4E Y7Bhv/O1Jd=6FW@T dÏ)`7SC(ƨSe9+qMb~~ٲko|#pҴv]%#H G Y^zM j.cB!D=؝.X 6x\l6Bz;K6oq׫*'K2؅[t>_]39xffk 7$@1״-Nr5V(݋G9f}07Ȝo#h8c\+HC=05B46t ~meF]1._懵٥{HoSfژPPxEU57OTo-;3ۻbN%`#b[B?zJiclVIi!'wi4֓.d/3+օ8;ו 9T  >HhP s16_&u^gjaAzГRhLXlLd83a5l~=Ag9 #lyV0M'b{os29YN{WG3L6Gmc+׃I86C;h23iK/d/\-=zI/z+?Z^7Td7mhWV |.xzGu=x̋OgD ث dw w鈜GZ1~j_%?%"Y=ӹJzہ/+Z(j_%ѹ!oihni:1 H_)"Vo[ʄ>m]5َCľ@'GȼA9aS!3)5l\^](dLJ &9}vSb=N{y$lΙ- a>`7 D;W>M|o0yZ L1;lz]Y 1j+|^ bҷ4"#(& XU-^ar9+S/z_A̰[m%XקTgHr穨/"@_$#]E6w YܭaBs{F󣳄 wf1k'÷'4 6=Q&k6o%0Y1#peȇ`џ|xW `}peM}-J%b3~<`Xu{{, J(9 uՂQ$q`G'v*-h^YE+dpff^Ei. oĚpRB<}3|n@mݼGA∣ 4opɾJv҉ {{ۢ>r_Vk b!ʲ@ΉSSQT= xC=l@|-Id*|z\"Įl^ȼ[lC|#rmBʽbtHsAN{M魽O(8j9+T!0<yϛyCEqs"^mg&H7 ݥGهiy~ um0\;ibs37=R%pgզ,SCrsgʇF["+b@Lw\ sSį/s;,2,l1F&oq Vp#a;h.ެ`7;aس8{ +/Z_m]nUdI"s Ar?A6fq_Z 6\i&xd]u}j%If]@ݠAY "jVԂ{wB^i :a斾qA-q7W!g2o]c6k}UwCjwPMN8롃]Ӵ[5hA4a6ęܠ&S_"zcQ*_j!>V=3ޮ$iDq\fa ,g:)9H 9 kIl:9CVwJ"fNoh3'IIn49h⫧+P[:RIZOג/Q}#EU6}Hm)v(T/i!#0w}V sFKe1G*wQpNs1<-b9TV;ΨqGPӼ5Bpl;r䳹cWSgІ ]ۑzC0|0?TNg1H6|>D YejwŠEUz74 ]W]\e"1CRԕh$sHKr{$k..þAzw'@z:pw\ JjCՌ'jCQE$?a:ˬmm%8.}@PQ*u|V6h֤M { j>e'u~}7/I@{MaʜLӕcW2Ad7H%fð`,SҞb, .Uz\q- wءhd`?H\)$6W`]ݹǝvJsiBn-d6h *V[~;8LEuc̆Nq2J'̸#.L,Oʜ/j};JgUתސՔ9nae2V'eoTiZV=Ĉ1ĵ%Vo6 n&?!c2m2yHJX.eT.77P`A% k4Cc,Ƒ@t ]Djj)Ō|C;W\ ,eۊԏB߉t(-ڲB,5/[SZ|t}F`b #)\`#IߒD?sc ǫ3sHW?3Vq0M,>/`9 3[ p} +ʅ4 N\c' Nz VZQzEjKV,rZhIJ=WWO1 '6ĹD#2uy`%{)M[KЍkIJCXaxmzh&n6'u`6es}lk%]'OvyVa3ܕ[,_;-G0Ǚ!ēh{rPϊY ֲ,4`\Q}ޑ7{px_T1g(J9B%eYB!Fa^๓G.{ _9U&Qb g.{6ӺFbDE#RegW_7|9&)F,jR\dծ%dSn,P-~Uژ@0IEeP23Tqg#8Fݸ\_U TKZL\5oH[C䖚$ZI8=Lmūqj5L}RCcSgHqe%ͅ/Î}T>)\̙#A,F怢=~ E;zmg%p4ʐEk- s< V]TCo?\:Mՙ'@VK߆,*g [V$WeɄoAR!2=]w^M'WÔ8Z(AUPi^AlnڿDli&_%ƿ9p'{t;2Bj\:fXgؤQy(vy5A-'c[^-fm~5!+KH#*ò_HQ^j̈́WUܬ عZ8!X/ZȅxBo0HHw.}z9NmIO>?4,QL^~^ dpjr{1Y't:q񫂜;eO5.# t rڏ/zLZ(~\Ud{NplNc2x2K8r^ϝislƦV]֖5.\(\^H^dEGEzJI)]1,i{: [ztDVW7)'WкdyB(qEJӎN!NC !PV6M~/$&pv0:5GgonB$Avqu}gB`g̑UALtz3U]U1KsLT٘]t*ڴYNCR 8ig߽st]4Wm,xbg_{ Hr嗗: Z|+>җBU+K] 8ޙlJD vjY:*4OzT)b1K3,wPed3o~yR7AM JC8|\9 }[)6H P9z=@q"_6ؖ@0R5<4oeCjBMkFv\Dv{?"~RZn8⒗Khxgz&/'{lAiQm6s =m,7咭˗?Pٜ]Yk gc^F7-uH3U>Y>glC4$J}_Ru]ş&8Jji2n<=V*a:C)>/Dku¢>5#p/EĪD4mI^zu7[x!%` " k]xKxco琾+c=㘑'YHZ]0pQJCE  ѐ hLc9W"L1;^x5B##;߄"+BP|f='XzAi=q<:pIW&ʌkbZx«"$S8Xs d(N1 pPG k ΪϭTEgP]Iv4ā$]`|KIvB*4j~´BV{*j|3 ?Ъ9tCh҃GN\}fi~AKl73O. _xԖ+u$gK(E>VnOYv29.yA֞pIl`BB)ܬY^ 1/ 07*reёE{fWMO__б'ٚRVS׎=IRC<#C} @~B_qb=[+va?㛄75b\c5/1z0F qS}x̼x>:6T JLN אbe$J p?o"ԘKϞIFjٙ73d D8tĿXГ=ͣ#ОG_sWd^L{u}^1_{-qT; 6 ;jTL¼50Um6ZJ=ꎺU#Ϊ4l8=ݓQx@iSx?$ݜQ;pg0"xd)12/PǾ['jz:n5x/% 5' gmja&7Lh儝`c`-U{[ڇp =PLs` ˮ&t{^l/`b oU`lYNJA c=#Sj's,JI2>n$5i ]Ą1Auۖ{:4Է ܯIG؊+J ʣK.i7H뱲PͽVDtTļg5/!8rjSr\gjvzvhNw=WL4tsPehMePH{>̊Y(Sh$sDƕ9 N4A'Tf[nS d u'*=52)t4V2avcX@4EƄNl+Q>X6U$O)zdNEHX2Ibʊnز[:9ܱKdD"Bb}wN3oT8MpQ_==v&MN o:Ԑ n&&A0$T fs`-J˩+ YGNM;93{H7^ p:=O~MӉc1}ZbkE5-l]R m¨ áKM⠤ VŁ'. <3B+_Cx5zS0aγw>ESb#/ӧwf#^b滚b7ƆW< Lx;0etU}IĢWOkǗzqjNT,n XzA]XY0hczi6"ƍORrCce[c@eP-E>Wp20:!edV>L:!y']!Wh` TK׳e[,Rkd7%Knc{oúK埜r@.m@IJhS9|j3| :w̖OUoLMVčȧ;ŋa&'1ǖn %)ma0 S W?1MD%!l )hBhƒci}RˋkV'532#N BOjXO+X9VQ&­lg菎-NGI؜ɎHi )in}ж|6Ѡ}t /1a\N|Xd K1Y/鉓5T ثd YCF N V/npP ýVJP %nKOqE;Fl Тh:MQ9cOr?&|ɟȕ)rC_DryzxgdXձwe!(#8f۞FR%J @lbA]`5!}'\)^3Bȱwo)yma\t<ѰpnÝNlgiMAh$d|X"!u9|=pŕK\3~WU\(jBn]W2hj7XOii#c5`+ڷ SX )jpY~ 7~i+ ]ۡ된k_nr[`J_ 70[(*Q!`dg;$X #ci210EʕX$`9"̯2e#oK+Bo>.uen͗dv/ @aStJ`p0 &־% "+}q=K6Z3S3gS+yFw GȆRK2Nh(H/KMsNԘnQ%ĚjޱX  6L7>աvi}C!K QF 7) {$gۥ1`л-uo+ }Į<G#̖H=rW*mE҂O'kz|)- j YjpP$~z2@=jemJد`fvQY ujp?,}*+e '5 3cq+d㹡u3QQ=-D(v\ ݿs2ƀ UI9 / ӿer> jyT ?JmٰˤXDb5wsOda;,m% -ha$-<0z6H҃]7 |Byp.( ;L .~ H<{u'5Q5>̅GjwҎ롧Ҳڕ LNwMS[,@_A;O,Ql?VGj)20CaFV_ >"ڽ.zOD#!S}x4[lۖ6@~ e+6=(+uSyɠ$A)'#[egiWXo*}14跘thD1HeulB*n`+wW9 ΦS'ydV}n'4·B ?}-߾Opr5Ϻ J9=W&x(K(~{MC7'6  |=|֓MrQi Ο|*gL: ~=ӕ M: ;[b&`Rebj"lV273vOu>LeRB&2;v!@iv\Gg3t4">+L+@j^5#6~^Ж"-&" ^e^^SOv)C|̈́|8hZuo+ p-w"rF0&~yl&+&Gu._ڮ 0i<=~ ?p[>YrD ݱ] FG.y6QF-ǓS9`]k*֜ucGҹ/)hYQgq$sBB {F2p|3Soi~ 8UW.rwE$;$f0]FƽߌvACWڂYzҨ5_( 5w>vt0{Lù]8]x!/_/ dtuoVLtC;\-JzcJ62/pq;N~`<BZf/ߋ=~~Mo&!8(ÍQ=+];ج~͔y'Y-.qsU8=fy+xhH/U8l8vPSy"C!W5d#W!bcN/*!{-aعAKz9/YM#ͭ)G~N_lbY5 !3ԘtK[|t]2-ޡ{G~^¾4\-ʹ߉RB.J?&Oqj%/Sylzyj3m!ʻ[Bu_㭯`iècZY{QIZL;g 8gP%+?Hl4P 5Pi i!,僪Ly]`ϞtX@Tkyږ\1 kI~Uh#<!dg&9om?df%cntR$}AI6#vfS_f9"xlf-'I7N|ʭ\ܷOUʞ*|E8\k>,o:yIKFu<",K9p!s)o m?[m9u8Z>좒 o@|G-k*MZHKhHITswv,#.=3.m}Q4!%u;|zzM ' zW{Eg <+3`[%کT(Gp[*Cl,0 A9e-7\@G7%TL7ݶ'[FgJ$FQ2@&Oi/^s(7n|s)a ^H]_ˉ ExAHvާ:<3іN";_@=Rzn)@D3@ss?::% tDUS]@]k)R9^L oC&Ph֌^ZQဗuqK))H]ݯ-޴("nvjɧ8%$PV,q)v@MdSC*cٞm؁6s3>>[dvn;|KK,-A>THBfCaDvxL%Po]>2 RQM (Tٰ$l6y|F9}4-}Ooh0ɲr 5NO.D㩤>.6DHQd~{q~$G4B ׀Ssn`;M\nIR[@4Y%* 冨+Mύ b 0/3П3$m'Q%E$k N;*f5af^_k KU$['no0%,Q@ˏ³>~OGC02(K}o-%]klGIM + V8z5}Ƭ4/ls}YP+lѻV= ϥc&Q;jLsD@|[?eQFh[$TńpM!/M\4kֶ a{Z`wXg"1d\ #(IR*S+8wdʨA>T.YAy$/ \ehI0y"0".F9.xvĬw4lb/÷^#PӪV. l%[0uxz$* \l&̓> ~Hiϻ 쥼YXnj!l^Gs.`\_,W)EcmL^܃}+Pv[.HGI[iRѝI<Wr `q *#4Qk62 XƇL(}5Mlh2f2k%ڷ됴 D׶uLDR1CRM|ovٸ=æ$ #|^^*мykS`VܕRBTY""RE$XhWװвO\*t&f/"I|d-.8YaN4^0=>m}pk(θ N,רnƴQ'8;1=ń8OKK?fY8F&|O "dQ='᳓?g,тT&^a:t* Aٲh!DLA  ɔ o+jIIWպ"[,M|y0[nQr@2t/IG-F^گ uKho-R!VgMq!8P}ך:2u0qȑp&-1g'QT20iYrD1;=P IPmiiTISE#ר [$vz' ꁍš3+ 1crMq$n .jL:t3Pd{ny!@&km~d޺)CAk sͽYA0wf m$c1*;|HL׿˂GsAA`la[͖%qĵеF%2dH6C.Y^i0(7c{Ȇ8^cHYr5PA7Z'ӣږ`7#[ZS m=X 他N M"B{;tn !a9Q)rޝn`7'Zό0]\T1mHeo]"udw0L,,*ah <ûüdufTk.>ihW_& ^k,od ]!jbVy-s1J[ݤt ؕ)r (Uc,bThi#_U1#QV-J#/:yb=YQ4(=?!]!Y! _=oj(UY˽m-pF+("'}!?O2ͷ#:cBضf9GwީRL1P^slgt370&Jsj++ {bG\"Mb܂AM` [I"[lSUڒ2sKhĽi(ꀫy|zYm=z7[fEXZRZhwN{Ffzx@u^;m5iTCCu`tcO"15hF.4p<'Rcp|l){bv9 /u9wZ 2Ac{#qp3]N!K]Q{߰6 ))'8Bƹ:Z|^G5wlQٝN%U)Pw?)iptb1GF";S禵7!<8eU3p5)ol Xbay<8G+՗|,P:=(ǣ)]@N!aYs Ԅ{WE݅3l:A1~H ,cƴ_ ClQ,TͬD<*6ݾCW~>Lr(mܲzfF).p`)-HE ҏy&1 3$>0Nd;g`UoH 2Ec5 ih7Z#8>5YNy0jh.Xtw#Ap}j7ڥ>A؂$ǒt;AN1Ay17tl獎2ȃ.ͯUZ0+5Hc~'u=7{\qd+;)7;=K/,?YoEҟr"A4$*?.b;@YOܓ-̬]pYdP,̽qʻle;qpݺ,T=8"άo79~2m[,r+])KqAI4'T6Ht 83 CF{k?:UrO=:.dA >܏:@"M}akV0elw>7 O\lOVw<12iMMta,12Bm%n F1e47 +9JtpaCܜ`8qWԈ<]U/ >M:A o͡|sʜ:w Dkn[Z q;(Xj꫱`k2(:׮[:;⺟*4AR@gUk4ʼn(%%Gl+:1,Nnrz컬9<FA>܈@B_ LAqxȾޱ n9*#; =gM̠,PC $Z)}kϷIЕؠP7VnmRRF||/Qn6l,hݟ"z,V45M^B,`H*0ӶUja؀CLu[‹U-ylo;vF/i/!:fLУԵa[xMH3YA+o5/櫜\ >5 Pqt|L"ǧ9n3 -xä#d!5i*8O&jd-TF ^|ho٘_DFVڔY߭wNtKp_kI7y@Hgs.dh;Mh߈oy;⦀@iwN\􈳸 cD-i*`2j3`gdw+A~Fc٧ =#$/] SbyYř6Ҽܒ 1EnlrAac[C +9񒜉vHmI) ̎l_#ylZTQV˖&ր<3 ;aζ8A+[v`32FBbsRVw=q|0#2SHlH9"цp msGwH} yqgP6^ 7G9ͻvd~fUL`%F@9IC]vgZٲ)&VHj)̬DId{ɟA!4rulc%KJp>wd3/?f}ڭ(%ͽEJP4ٙ8q0B-{Ε҉8NVX*O4)d_%:Q(Z=0pPwQ,a#%czgVtZge@[T(ݥDf̤PqmIY Ѡ69{hoTSVڌe‰j4*+']B?[-%*O M:~Vj0h>~$(=oZ0T3w/M{į͐G>a@&B=[RE[A*$ ^cB#ACyxD{@L5oOEBXE [@*XhQ}cCi mlV.ȹ$;8Z-KF1dX9 }d C'1S5)un@pX:(p֨3`N^'bE7u1FׇGihOj~ dt89뷫KϤ׉UY^A(9޿#*2f#ls]>ܵ;?FƂ/QW%%b~Zf<QPGޜ)hhY 9Ҭ%;zcRaauy,Y9,*xl-JR%Է |#8]MµIoTH^[d| ́8\UW r80:/ ;ޓ_1Cq/ &{-{2yiaV|8I s \z!O+n\|x]kq4pLqoFIw*6{969rd `;GH[0TGwCb2x+|^-*:nZQ͋%;SdPD ̵=0#F\C2ai$]FO s;lNHkSœf#U4|}@EeL0tc#n2iǙ>Xw(yw֟r2f%ۆLS㸼,`gf3Ts[YeSB(6.z\xalpU ^[FA\mI2N,jur6KIW(cCf+vC?zy|cO&OUPm5wLp*?R6wk`Džs:z;UIE0ὣáa[LvyvU-DŢ+iu~Q|{-Rr'a0qT#٬0ix<%v8\ }gjߓw~(?7kf5F(!q؁ZM[U#8ӲtLAP + &mfAЪI˽VPҜ/+y/\ )|gKVFQ@g-o-;V%Yo+Q r75=lVs Yk?Wɘɏ4Y8}AYvU& ZnCNyYb(Tja;`l|\2)'u#~em Ej+![j>9s3ޜ0v~[eAA ۽(c؎ =Քg8hha:t+(=xF|\vj#ẓe$|UZQ01$ =⢱r$QR|X0EXnNfEgx'ԉ]A@< ,tF Mx9OQwRpg)\^c Zg6BYJq$GQSoqMMfwSB.pAr_fEmcbmWj9͵^?NVGpVIj>B8 L:Bic`3ҭz ȼ om՛-&&k2 zP׃-?g(8pG5n3ߠ?:V]y#^M? WP-0SYl-oGmV|M .ooBv k` ~,<(sOfũáhA'\w֖/}kF2?'t?<۬{LƶVcEjn=[e=99H:Kw+%ZaW2k֞げ*ޮA-Xiq$U/:b^g#R3HH,5ojD{QV hbl 3؃ϋEpt;EC! 5U%<*w  uU ;Y*.\:Tzr#"9gpp| ˓bh3xdu;NklŻyT‘LP?d$‰)_6ʈZj>s~@tL7H0P؆(2镞\2!#UWU]_;G Pu(n#Z'kی%&lrXMn[eԺj>FTieٮue;FvXqg2͒"&k*)Fk5'Ƚ'{Pmn=5 HgwUW`4ʼns3dϲ "ޑ:={։-H ,ߏR qFkiUUwJYEofDxIm`XV}Fen  μy)h|rtC5b]o6J^>sݸuYi(}ݟpEpZ넩 ~; s%s7Un'r6Tx۪(02Bо>,85=7DQB5fQn{^h'M%Ĵ:뒙:gM@92K,*;D1/gn\6T6(JQԆӜ>DZChр$mDcGQTs$OیllMp Ȱ{wZFaf :%B:U 9y0>/%|ytN,曄YWg0)_fϩVAS~k)pm.73P:c$A`N r-()JX'0z! _OYq/e,Eys U4b)9Ɣ,]2]{ъBi"'|5GtQ31S&KhLWYPz4W+iJ1JjY.4tj3j"OI5s7y4S3kȹnڦI9SxOqO`x ͥ`Ǔ,Q]߅h3B-Jؑ19iIo#N83s KSz8o9 ITsș׹| Ζd_a#T<\1E}x%!ȢzbX7N7xV gˋC6tGW]h;W|76' .ݣXF Eudv ֘_";zތ]C9 J4<bͦW)WlA*"GV0x JnKbt4dcY(͒5i^F'P1\keE9ay֫urU:!>/j h$~JFcțr^S̶`HcUkb6ua8ϧo5* kþg bHF&! 9biAF,1-N kJ<:PoԯT"xuW򟸱Jv#Z@ X>dk g2ؾF2ҷ(!UzWJHR@՝UN1":?W8iD1gƼg+2>Bٲ7WJ]ǪiO4mUvG HDs??/ƞތ(F/c.j -Uɦ2Qp!g(Bm5)УY"X6YKe#:+_i wd": F(Mq&/|ev-6ccjV"#+hi>R&|ǝ&x2qVj5'#րt },t .CkNv4&`SJ-b _@ ƙ QV3V7{<_xMQs}=`ӪW`r^q2eǯirJ/8Fc8z{$6`<`k :=EXH@#뀹`UF m G;$r>%Y.gMghl"o'y;;+bZxnqd Bynڇ5|[U3+"_l@^ f\VTmN{zgv@3"Pw+WOzU C)-:m z@us+3)l6: ML02G}糓u[x"$L;,nŮ%_a\H`nt(΄S۔N\sϏ'FJ?CWo5)oaJ BXm%YR&Z#j` dӽ#xn9^ g@AJK67z/xL`.ų< @l ON)d}V߸sc+eloeɞՕG"i#_^38 cHgM DPGH:~7T%l# 5inXnEu%GUxCk6}OlPGj쫻C-4 bT[!@0a ,IX}Zl]w[vUzK~2+,9ƧxOkAo"숺 Zuَ|I H?+oOv#أgJt3cW 44{Ȱ w(ŜҬtz6.#+q ?uz}P w`JԉF|;1|p2d', u6TiJlGhy5tUKjCTwmwQ{7 ¯<1bdX"zcu !{6ߦaC8͖4l `yST0T3޴V̫4ľ.i<Ár7l]z]܌F@6`hoi$LwC xuza}Dfr]9Z҂9 #bQCü/"7u?bnKZsj5O ™<$ a4uHU/^K({,ۏ+At(L&}ꋰir.~*Fbئ=\[vHy3+g;v|㯃Y!q&uOjA?cGp2aIaݪgU^7 Jf (U{6Ż_gcODi_);N@w1|9ޯv+qJA:2'DdWɠ4ْon3zP(qJ t5A&*]ҒNN0%qi<^ ak,ٕ' +TޅTI¸b]PUs3rDΝj,H+ ?;, =3G?$滩em Lə8 ӻpĪ|db~m6 KO%D2. fPNs6ԇT/(I<|dbߧ$kքoeTrvtc'=c#YqjltʌśXK֚9+8蛎21XIBT0'7X _U/Kl[ VWg4d_`wx$@-ۜ:In[Z;X9)~qW?ond )G|$(ִrY싓cZFcһ%]xblh҄yRmUʄQ;h,uBL\/==:;կ;,0fgsK2L;8A;zP1]NE:"McԏeJ}dEp K~{责: ;="xy٦~%v>[SWgn 3R`d@0nU3r5{=L>S~{ɔy ިr]`͠ôΛABhDߤ8c#ر/1KWވNF7~w.*]|B/0F߸L7HÏo kS_ "ƒBN_3_IO~`؏Rct;>QNXi7 y@ >뺼{EB(bcۅMwby:s,Sm|R?k88)-c~V[WIT\K_Tt9E '6皸3|ߠmޮxbP} F^oH5 u\*iz RW@}rJ[8Dei$ E]0`.0d1l* ,!8ZT us8bg?U-F(R'V-S:zx3);q~iW#v^o^ -ҫ xO6{h"C׸@k;ŶE gl+~%HFx\'\4.Umcդ;e[ǏnRw/L^S3hM)ɲ0!T")N/KPVaT0 H@S& Q8_ь۴6 .*1PϏV0C'< b$$OĩJ[ziu* nMp*C-\nNZav?“0.;R%sZMo㊃n"δ"Gga KswSMڰi~ 5b5vq;P~FNh,Wix,kqIf@VըRձhTt,cq ;vXh>nr(l:j2!u:XI bCtOPSqugcj4A&jXl#',+^u+S,Ln7@eiYRk$üB(ʹfJ(0&qOJ-dr02lf:( >Pݰ-W7{ /Yҧ?;[L/WYWM . ?U&l̀!c]t%2m!'d9y< W˔,eZ- - rNZ>&!^]{R| y!`809 ٕjZg0po/훑~8݂:G+ڪ\x%hiOM~ƣD˱TPiVFBy&7;3a/JJ;ZDNXFw)(A5>|'o;fLA ӑ1^Y{Gv"`+]r(f{;bܜ]JH&FO58#` ]JqgޞSc}4vS;~*Ki2蚬-tT#Yћz, 9Q_[n$DUSωu9 H/qjX[H4ajjEn yw]hJneL*18X-Ojdw%gw S,8oG3 T8is9,*Ś`|?!Dx‚`3ΰ{W4+!'\. Mf6sApʻREx>Cw&-)7&^pܜ r^?{Fи$<*%В`F#STcƯxi3l %}!qԕ J㉍V}V1u 9 <c8ם7# Z9]U]-IgPK !|)_+>ཱྀvЪV]J- { e(/'߉뗛L^2#k,V}pOx)DR7XΥp`%g0C(o՞*#0KF{ !](֨xPIpImNX8U6F?Q+~)jRNQsćo[1oE֮ j/I,)!f.{``aBd|cϤywpa$RQ܍8dIY#][Iv彛bU}LjbTgOl-`tؒk|ʜǾ*F>^{ϨZmw;"H5$IaD[Vtpطʦ<?F/ tTucx>E['kQBs rWc8}Mm̻7_ϾۑxnH+}ޫFZ1u'sp\wR*]rJ_X۷v@QyO@K#{J_VVlfMKjFHI L-hTnD9Y>ąǮ_= ;l;0/cX2"ӘTRPPq)AvCwWK}C|Wх暛-uٸנXXudxUwsE[v[,{!ed@:5r=Fg5a\:(?S;Zޣ2;dEHCZ) Ve/n,5o7hٔZnܓ 5v Epb-@FB ,6hڑ.'TG$h@T_BF2\fuUxa#y)Pth'[||'yv,R|0zz(٘ܦ;kÓՄ[$sAWfآ.g3\H߿m҃JTZajyͮ 8h=I?= FAY Q`vWbj^IǼQݟ{(4 deQt7OYHF5.&sE[3mK"RL7ފ3)[otwLl⭏ TOohYT&rDbP@]A0ݍ n]Qa9tQ2H1˱yK]stA.$W z8y& G)o^k5T:΃I:rfij|(xnX{J:I8T'P;h~gR`gտ$!9ΤqYT?1i둓!T `޳~.fC1PSlkȀ/pŽfܕv&9=V' FGz:Τ=DV/W3J:A.>"+D{Si_3)<"*%}$5,1Ǵ|5[t*+yq8&>80=b1r1rR[pԆj}+:C[wEj'Pxol˧xa,m*n2T]Mym 2e>1]J)]yQpX3SA}n{EFds!6$F#Uvuw^{t {T/FQ SuH,9Y KmCw o~c*Jug`VP@F>,rU_s ~.*e&u6R,8[^ AHn V862 7(W!ܗpSNCSv5npvvi,M":խ+j`xahfW9]Q mTڴۛݩguU61 lsN>Pp`Zߴ}] [k 6J_PT8pW-njN̸.kGbM*+Pɶ9̟6"HX/f5QVT*?_.YAOLg?v6_sEԞ~|˺;^f?h5#X9- lrxXk).1/#TW4-O܁'TgA`}qR /D]|oJ|yKƟ[-P;Qu(hYQ߬u['aM9X?kƑcBH)-Fof>U ;>*(n2lfMI2^98!iOmjo㕨AIPz4EH%Ra$j \8҅1*PB:y#lm6U %`]?gti6nMlfKo {c*X ck8. %LZvK,7= ߕBVkk@Xױ@D0Ƈ޼>`k IzݻĭAc7 'Q5Ő2EyGlQjv\&a0f:uEFMn6л5A `nArì|>oa,.=[RZZ^:Psޛ^V0B2ʶ:~4".1$>h9&K,Xnͅq&&bz8H8k%9 lyse:B*X2?آ<[Z5@̚ ^:0 %! dDC!i}?Q.vbI +Z_HB\tLw갘8F'I <<?ZQ47qe~\&ioѰY,*YmdIpTr'm6"ͣJ|wRe![$^ԥ;1!@דl,k;I&єMvYS9-xM$ɖX0/v}ɮF5T?S1Ԩ&Q:BZ,:kyzyh\oRּI9]sTǡk_y@hùӭ8&e, z7E^*nJDI%|/I~s6v!ތd?BMޭ+wJT }hdA}:s ,:wZ~S_Y)<4-ƥCcՊkMg3nBQhJvF'(Lew m׽^;kYX8չgd&B6i>vB#l5}5N'@Zdb6:BhΆ5qz6M,/߶lP5؟@& +b߉+kNQPsP#"(Q!GE O]"G35З>~HK I,@f{-h:%8ag#ަ cb'tznWTRIfl%̂zw]i_OS]R/5)-TcE3R!tMl\X%U&Ri{{p@/*BQwibx  #A<3ϫcx?wShmفaFK{o٩Y:Ю,QO`/5H0b tHciΛA;77k42\ ߷X"зah|~JqH_<騣pkNX掂srq='j~n{Rt } ^u KiU~\_ h4]T *MKЇɩg~n|u2 ߢ@~R߾9n`RTX$d35.@FYoړZVұJGӐOX]ɠVI>4s_<*nDũTzTi0 γ&>)chH!&<ɠQR>ƫlֶaPYMEoja 0$HWR d-7X,qc"HZ(؋n%{D(t">sXo.4e(Qg &3SDUֆFaԖSb"܂+쌛*5lж(q]ȸCRms_NVRK ["Oӳ ڼjz˅ƹ#>y.ڊC:M?--p\w?J 3GKg܏4݊5Bߨ@&s`FX$,!fWZjCde!w~< [Y[^hL{' BhDz=o;qO[JtZ\ At+xl){ ^fr!975J"XKSV.* j*Ͻ?[hYn3fzHqsP!=VKs^F"BZM!{Rlo vTxrKƛ,TǪ3VK42ZgYp5nI51Hs_a 2/9$Iƹ/I*i/79D}A T!(|րA aD!;v1vme˳|!/LKr̽j;bXMԈY%]aK~zIXBXtQlHRk4`}*G0:遮?s*'iTj, 1tt9\oR#QSY@k V~Az@?2Bgw[`"j] քfh}ٸ]D8V~Ar< !RO齥E35y_߈IPX^.,/*뽛 DDՄf’DC[ksw]%< %yL4jɎ;敞QlEV36ODMk[='q #h7Q ]zG,bɁsxzks\n_*OR%F6o:hK (7(AzUKvAqrD{1X `g&Nda J]cĨ8?y{RGG߉Vp!֊"^]7w\oԉw6F1g B.#5D8<ÊJ5}/Yg?,'N}(zۺxhM iCh>1U +*}s(Q m}If< vAj٩ڈ:֌U/oP N 5Ս+j%:͟C"œN7ل/` nis5žJe1hwWZԍy@-s֛<7e ݂ɺC1~>Gxֈ9s[ [{>m#;;4 mh)oAZ2t|0U^z=ίJS6ʼ5>6"~ԉ X0`f0U.J O qߓʩkn5sY _?zʴ| ee.%&*"\U2quTXV}E93.i|v GTSN3`3sʞ;0˂p {MaǑPޭL5"ct,F-:`xh;pJ +}&+K^hW!"!&6?;1WPQ:HJ'˽uM S$s/@ Ʊ=vcW1>D6-92?eۋ-LN feeLsVj*߫[_`Rzm돲M 6c2NdIIxpyAI\*.K6\!uf4[ <cN qzG8C1AR@ޮ:nSՌ XC$&i]=.1?IVinpm/.!%x. ^j;I{r\U&M̳TMeNJ9$D֐} WXwn|תe)+ֻXk·b/vlq3/QLH|I;{9dfF6os}XQ(M*>A765oAJ]zᤸ؎`A n^"_LS7xA,J;|%U/:sNԸ}޴O,R9+X !yBb/u`]ic}±j*g-NpzUB7;Uv5gY>{b3w͔*ỳX>u l VS!Zޖ7;gd5np*h 뽱71s<"*vZr]ƘUIo+ݨb1o1 p,6ZˆnʲV:&(m|X 2,C?jb,@WuS׈+JkT]zxo( ("U )!u A8e &pW./Uji:J,?|dHr#S/T3njems޽yj4Gb32ĕseCb)C3=[bkn;xJ;*/M|b O:|2Rg]ʟ:Ar=)eCYP)#@tE^@.W9\0ϬqƶSt?h~ /1Q*,%eeKh̗Fw?6B_ՠL \WҢeUqi|Ǔ?F&Ά,5mQȮt;yA)XV%\ϲ|grRNls(3\3fD A '>SU.k;3f.;~<"!^AgɝC'L^D1*"8pi, q š D.ˆ7#>v_wHU_YrX]n-癠` &#o%W,Cx!Y~l3뫖!)9%6 |оhcluӽ_0.=?]~v/ϙjp.PӁU8Odّ/,N ]3S簸{0#s)Y F ʗ9^)19}1;2{&Ƥ1xrs7$hu>TS+!h1mlE67jW/Be_$Wac)I:Bq+%JIG/rsCJi_\E4 *驝lL0 JP؋]hdY@E».rp`S }Dכ6[pO@up􇚡JAEfhcuFqp_ Ax$" ,Fu,o) .cvĽ?TeUNWdE"[<.d@m736;;ULqQ*ېk?rZ)m5&QaɛқYv B gN-e xO^e;?|u.6fے:1];=uP-'<#EJ6jL Hܲ{d$ꊫmbfx6FlMx1@e#] w'hOsrbn{0 P Y}A Suzs(**~wq4F.h>Gu-mAɬvYx ިl$()"-ӳ/AD^a|+` ŧATl-NL;ۦK[w'( M5^RFvkvI'g-LNt܈/k`Ӣ ^.9Zӧh{u}%P_g8gv ;9BNN,v3UuMnW{U 7Pei;gh*8Tup".u orah8tQ @H noʈjt>/@riƈeTs+- Abz`?p^=Т53-Zj zQvz2ݘumN!÷&%: cM^`dKĔ^:/>]n-$ƎxhFA򈅡 M#0KЇ㞽3=M lsύ@ 8_w'nx5M>. _u֠ OZ}cu֛=\l3 cͬzkX3.hkl|:m 6Ć,Nz?Z`UZ9Cb4A@ĭ;_!GO5sɉL*=?aW-NvR`onWdSu;uADc1 Sֲ.AO_P/.uQfDvG b*`VJJ^ҩv_h1k2 oikb^oU:|u񠖗SMVϋzM E"S ,t>9O=t!TOr[>jdx[xFT#`X2/ v4i-Xi+\xLfFOjegpR>qNΨzպ\ѝLx/GJm0ܑk>7+$zμ/8cҾIE[=rQdH2 4L3ODYE(jSzej3aq*-;rc^²"N65IvE:JЎHf,t\,ިf dyց6RM R} L ]=s!&6Oe sWkKGOZ[~~^nz o3ak9g&[eiYW$nwk!dNRE{cثoD @2Ug fƶ,ϖbR#6K~Wy`ȉɯ(?׏ ϭ6-|;/Ń$w=bm56fa#-Sf]V]c;I>l !ƿ1_Pu,RfoQf <%5M0Ȉݬ ZV/jy&^8HhMR4gQD93 rlKObd?Uư5odh7 0I8ұ9}vaG ^%B=a߭uwdq MzDZ!Z_WN9֭ NNIr57S'Xyc5UMx&էu1en!E"\mW T{P>!x^5 -/*#L B"D׉lk| I+76q,쾤g$gpE\[7΀k tx~ƅ@&^R-HzE5|6( ׳pF:* Z~[/70If=PUWp~5^.7{}.;(gy [$(5pɁ6EIBnkCw{PYd;Nf0A3aW9X@x~DfުFa"U]X "qhj1\qi[@Ww5mЩzvVd3h?qByA N}lDZA: Tضq Me pW[i}ՈCo0$O Ɲ~ͩDTj;ۏF֟#sکI@[YT6}Y8U#sDE"=p";A!I&\J#0bX&7N2tC3-ԛL&2nwgDZS~*)mAq@or?4Oא/mEmFi f|֞Kߘ8W*`Ɲ:=dVWxZbJN0R;+HX3xuiHU'ةa":(piiku5?JQr (P~M%ca(hP䐤rȀ&U(-SfoUECꒃ S vLF+c59NWJzb]}+Tx . j8&`4mzƁsQqJ(_n/  k dk(ک:VnP۱@S7VT'Pr"VZUU7H&}WM_AL CHdCq)Etj}ۍ$@C;^F+%<e&%+vFD :g GG0_sPΩk?uHda9zb~Ag7yd**/>0g1Y-OlgATt"U%R9/?Q\g_؍C kNk>ĩNay>YHqߴ7C][!zZ [ґGD{@lԶ֍yW%"Y_g56z) Ȩ|V،?Yj @ ö@A5C(o?~dcT'8ꓶ#Є]c̈́ܫ!h2i^y*WlIjVy~p8 % ?]77 !pcCzObl ,HQ#FT`)N"lZ"9Aۿ3M4?i"uϰxY?@ I &en^W&!13NY ͼPcNhAϫI݁^兮>]KRUUom!bS6 ?џ.|*K`f9{;NUn "0栜,Z?QgZOr>8|ˈ/&b =/cn+/h kHyݽ&0{Ywz1E±gTM7(IgkY¥Xhu=An Nk`CRLvIVY|CN^$]ş{c6+#[qwxpƅѲ~[pLq /3䰵zXWɅ\xLJ_N&;,8NVs< &gI '`N=DS6Һh@1D ɠN:8Ff 8,a(Q<2FkY+y` R&pBw# 2YjGExKd逇Ŷ6h})ʵjG1.FwzNZssޕtZێrvotf2fZVf /OZ{i1x?{Mraw苐tgZiduX%R-gut( б-f!φ 0Rz&Χvi@KBdks˥3j=r9b MB"dm{3?xvEYK?ƷFIᕪ@dbRZ™+؎ղf)?EJz"/Gx ifrQs9fv K >M=bݹp{wЏ9MoMhs[qź[440"QP֪R!{ 0[UU7s͑-7Kc({)jHpyFY@ݷʓm3>ȪR@:bպ8n1rN8Ne@|:g 61Y^MR,pVr85 9^Ntٕl;Kh/ڝfH=׷a.!XF - !^\o,. :ztPHhdR{jL6CN4=uPV=E5\e?ɔ ==RRFP.$%Ԅ{10P>pmutjUu# 1i[ s>#{)C'= &lixҲ Erf*Sd6(X'?n,9ֺ04jK48 ⟾sR`~6}3?"$* @:mfIesqf=ȁ'T4$hǚ5(']R & y!ھ}+RMsV/d $4 a.] /jwvUrI #4 p7p A)jl $!>3HlRq۠r9K[w h3eLhZ~X6)`i>sH$|{VKR6)9%sǬ\-G_Jx׳CW.$ך݈JpOd{珤2/ļcj|ZKT)a; Y88|tUg %JujC'! 8% o~RKFQ5*>v=cKN=H98fTE$4|sY\;Y3L-~CyM. BUKy6\Mp ͈XnHp9-j |INH; ׈\a+  Mn#@cSd1ݲFkd+́+) N8L8W@\3#B}xOu-KC|9iyiKXr3N+u2RPT&AP|cǺ: FQEأKOW*zbO5A**n5@M20fyR&)68O bsCBW!żj2,2q".=M qwu9U/%A1ME2r!J mǘ-,zO2ٷ-]5@06nV١j|z:ZY}Υ":+@%uH p+SĨCCp\V(ˋ睅6_WIs͔u[aMU:npݿ.,́n/j,V3ފ|ܬ[Ib=RCD6ԵNz("_1 cTs1rLuvVL[uZ^Lu5XJ@qR=#sCދtWہY#~;3q=< X%NkY}oon'JnvX/AC7BO'dנ\ SER9M|Ri V]y{;ΣJm\\# a"([[Yk.ӽ<4S'`oI|}50 ]GW 39 ql^q]d)luPyv@y=&J於kWms ]=bwEŕ3Gf"7jEUf$007(TP`(Om&0h$7jz %~5rA*C?c±#M^%էKOsϽ}bdB3}6|pY,̋ U+ Sxta@΄Xr.P13v[$eFIkg;cMfŸfͦ`#qLT[E zK\SъXY{^g_bRQscDƯɱ%}՞vԺ4KcǸᴂ@NhUc-kie%dq&qoX:e ~\h/e{_/A f.;pS&}3qR'c F,Xp= M$0g'>(z~heyU1 wfHZgٹ֑;]HXd]\F 3A{Lo> cS ,奁GC&S3|Ôv KhSi} i:я*[ j>Eв !\ƨ0augN;NoCU{"#>Lm cබ?&쏟]܉GZ£:7TnrѢ'?l0@CmCEc\í*%A&0%,]02@R}Duk+_KU"=X?;7X2 BC ',,$@yf<3ӱ) (Cyw3maB軗I*q%h` _KJ r:9tA֫R`$%Dvkצ&'$ #/5>ft!T~r"= ê|M̟,$+/Ɉi M'}^hڵ u"! Etu-7X XOE"yQ3E X'By4~؂b~,~\Wy.vX#,T8I/I|/u+>4ް{Uv عks>cQl.b%{li} r"j#ߏI {=E>#i4[k-~ 'RbUdX?̠< "9M|oDQyW^ϿZ '@iD^ҥDJ=wp1!;[o֔N\̄`[p<@E2cM_>U(U(_uRm0,=r7a`a OfV.U\1EIf fQ*&y߰G;x#a{WYt-ޠuj,y88ËG8amvcf`/2O3Eu}x :^`_2;4jӷhMܷlj3t~lj3(۬x*a&j,ЊW 0(OQ%Om3h֌DTuSLƚeG <7/YZY@TycTB8dms pon}'hZ:1,2}q=agq#W2Iʠ4GLxYQ8Fo[$!Y-րb!8 tXZ`1>Bc{(C>{b4i OJGtA,v.\F⇈ƽ |_v*iŽ`LAhR(2Qglܨ߼GN8LPKwYik*XvаH]LS 1Mr\֌ 1PtMg68hwGqi ݌㘭q"m˺tILOtx=el0.m+*XV#~7wlbau=fs/J!XNj:fDG~D| !h{~ߚD'&T1B704R`SB {rl)c\Ww((ttk D㳌}K1D oV- f+Oy!`{>T @B^*uw / dM +V[dDR)+4tk]{ JoS[Vՙ.X j)n^݈2הۘ#[EPZ,_rN~ |a1ڌ4/Ӧfݯ1&T8v0')tţ SmxOSقfs^O:·]Z {D8!+wSo;i%'+H6OEq8j>B{OF$,$mFȄMSGIoml,mзz~ҏj& j&7،lkP_FǑ H@BYq#D/Uq߸9 җYxfmabO/@˴Hs4/:JBV2VUuOfe=(Z?^(B)_aÍ?[KMg1,Ed frz]1G_Nu4Jr*dXy_$HW#[Dl)v@b8)?~Ey'ք=$;Qn;cWSg՞>_ ’ti(`Pw$^w~@h座 UEtһ'%.o͏7K; .W[\qhvl3'*v. ɔ4wsHx]V^g1' "ۚw)P͍MWM䮊8+q ǔyC@ ʪC[]ʶ=1YJHFu1׵.;Vޮ5޼Db~OB1T/G-'i)drepע!)6݂SHyR%v7|P]x{R{?~̈́K' BYZ>(T5YH-|CKP7:<8ZKRxr&bK'TRx &:c'lmC)(),SrVXoNin꽞0eT(D@aX*ꇞ]l(k-͘'aM]8T7ҺwH fњٴG QAa]zJ[ h!=.h3deDf.X/ TPyKb+ʍ$3!SbceOPd :TFPꁫ̨.5$͙dV>O&6$ (xm[75)'1(*Uk*"Ƒł˿!;-Yf]$Z[y" 5]+t%9-h9`yR0KXw|_? 2YU4<&}E;%yh% ՌӘ%]|<%c4I} *kefwk_/!O`JZ p0z$AB #!ԠmMobZK7~[ͭ4\;㵋 2 HЧ;aلy͊(j9RYfU @eՃ¸ox0C{IZe@gqY 4>u/R6hgTKlBLO:!q'7K6(DqkA*0a5y aoz:6Bz*0%PIwZ6XKRT ^6)iVo*9{НLi\?͞;zgЯ6Er1/sˮ^#IltP0׼X*N``S{`7+ %їO2Hf\-bYOqh7]!ME*g~F#q}>Ba]4Ru_RXco9$tﲆ8H I7#H+A k=bЛFʥw5.QVNքTr6QdӀi_^M\#uB۹=b<ӦG"DVKhJGƢ$`qPImBZ`T68̩ĉ,-5$=BFwk0ׂ`%^`fx)rQ>ah^H2)sd5PY<{(֡s~\|ĵY) XuPS,k&eLY R@+?$p쳴HVV!Q8@zBře=\j^HcXD(\AeH ~ߠ6߻1hrW9ScM-k6sUVSЭTW~lFI풕#ڄ8;mZW\Hwyn*ӵ; gZ(XTV8ZNa0^yuB뚒y`?7`|w8to}E@gRCA610#sb.D^e? $Rը̯@H=B#h#Eޠ^ 1 Rt 9U7[,%Txӡ͕a]V?Me}7IV0))koټaP ݒI}ތPeǫ: u[)^9GIV#[L+´meBINgBIUGeRPW& Ĉ|O!TV&'͵8{PS{x:' QP̺"OMxQS{@(*jc{a)vbm{ԧX L.or5FH*OJONugîʥ:#[;窋@hH?{{)ޝ{ՎogI4Hy) s|9$һ5I+4*čsEp~i X\o>S#!t4}TnjEnʔGZjwA푲rv ĪFgwwU\mE #\%3r:;ſ 2g2p}ʎT-;S>4z!-d{D%v~̨巹]|&Db?z>o ߫&b.;GX w?~|I+FW"GVgn~ux&R,ZM]6CU uH[1$;K a8r=Uq))rG#7˼sD;W1)]O{޺tٓK=!,ao=,L,&6N>ţvԴu%7իxo|\Tʏ?;CO{*nqcLuE8)1΂Yg;m) P7NqXce@{?d2*4 2J{sX[οu:Y#e~(Ai9Q񬘼q#@46FT+K‘(6oƴyuz0re]3`rlEäOi A$L'rˢQYIόs"vӝ7 ]}ŬՋ*L_oHWͥ2z>MkC p/! _aZ`֒ KuC 4*~'HVfp@oزFyk&z !E!PC DيA 3 uue/ SP8d%MjC :\8U?/ovsśʦiDOg: ~4J\"anGY4ew5v2I 4Hd7D ĞNtcqq9cb8l>_Fޱ|%4wv뷉 'X*n׭HPZ_)"Uo#ĭc!Vi (g}~64H' d9\t@]y?U$/73f`%BpX͡U"nCN@=/f:-OǃqCE29r,M"D48BHqM\*ѿ 1u=9؍tqYg|4 N?,9E]謓Aن'T|IS~lL%s4@K>BBh%t@;_-ĉ ёԙ{Ea:3S|{s'yQȝՐDmm:@y"V#T\ mn9#isf ߭+EfFє/ znl3VvY^ghfsÇ9Ih߫m=dʊF!j%{d߽$or9'6(IǹJ^u; mVmo$*RCĀF0dErlq+Kz r #y-$_&*dߥ#cP0s/U{[e_@SYԘӮ,1W[+u>n5SwRh"pTM}ɠٖ*;Ȥg!&Q:V ~q[oI-M ɬ)q .7H]ml VBe+ ']GZ3-i}O"M`┤ʂY f [g:w%abC˻}Tud$Wlr䀔XpJ@4U;x3\8|KEʝh=Buyݝ{O=XO~4R:,pn_VyظJqzS>igA.3O8 5 p@g*኶.ß6Gp-3*bCe(}ʚ{:jMm5ڋ,,Ϣe 7N4tQvzWrqwSh]WEyy-j,Ѿ! $MX04Bm;j HF(XN%wɮ=Ab|yQ[ML^<8 (fu S®jfJ ۍ `"Wn˸/Aۄ5z / ]_HͲ;Crep J0@/86y_ 5r@FpAjuA,QhX?ÏЊ+>nA\,ZL+rZHxRJm4Z2jB+VivLSZ4{:D<{ѿM)2|Ҏ@vgiSV8H,<ꤾyS!v,V+u,yugWT`~@-:2h4%1&qcyŵM[NakHq dӤrY"讁m2isHp8>D}p?7}3b)ߤxpU2 ːiTqh@|+|ϯRynO&~AC/tQuvO_~[DQDyMP9#" 98O]"ilCL1 ,z@9_+ã"7BJI\׾e6!Fh U^REE+8gXͿ4<~P"duHh3뤼ط;#P3gZfR(QT5JUyN/lM撶fJyu$0x6cj#쥃,.wgץҘ=#AJ@WڗD\x=Tv08}fCȵn(6`y⭺QZ*5CF-<3.Qa3kcIr ~A ުQ`+ B8OZr )Z${,`5*]j7rw3fJYqk:06fjj_+h<)|!L(2̽FI>ojZzMKarPW(s̗4G d2$rM!2ͧAZDd7-MRBӈ:!(Gïmu(zmQwHx/XJr!&##BÞek`Q8yHls^O뵾Qߍ%m2W{oZ>ڑqDtx\9@Vgc+V~H1zkLFEf8?HkNjp۴ &0"UмJtO⻛TQg&c uί1 PhD!d,#AK¤WXٯ Up˩-]#>@Yޘ6bb˷Иi*ijC5`S+?Fxכ4kc6𿋍ռdXNy֧sԖ_H6[xQτ:A7"W7[jO9OI5B=zM NU6o(O[C*SJ840[x)@L'E*`,Ggϻ6jâ6y 21ؚ3Wh|eRcS%C$9G^-:O_B#MqH7iARYC)u{xi(KCBbR,!}c' '|D.ݎ%[H! @ڇ]Vd5O;k㵡wë|†KH5æqdp`_)ڇg*WXXHpuXot)JKZ<ab9$s9V@[tE&˴rllb9~8_j.?R(JelMxۂ{U'h,vj{3 %:YPC|r"0m &^7GïJF|N ;ފ _rAm|v8n:#tNI:g(;lu۠0077P>h5oЫf&En{9785ZoɔGIp9-9d>U r5fyO]$3",f].+<8c o ImYoiw:[- fWPVE=>"T8!?"Ѻí2u8\q0WguUh̬?ZάtBGtҧUXeBzѺ^OG<;mB"2B:vlzݰw6蜠,GlOIUl:| q5;e/={An>t3lt#cryk5˯G;]?9@y /yEkb翑@VHd0kp~넢ܔ* Xa"1.̖pCt3 + )l\'@fH!WJ.ZxN#|*9PTp=|u4!b6&lHҵEJdivp0WPh.{b;Fr8gE'}~>c=oJo_p̗Uy_We@&m!p1LEAWC,# tRZ޴Q]6.:S%WubtwH2y.([_)D!\Ѝu90{08'}NyOSB3DVN}xr9#V*UOs_7윑咆oP~Ukh{&8^}/آR3rS %~azΎ`(ă@~umYlxYNsRcUp#TYwX!@\\%wj 2c!ͥH1xa Fɇ.t-L4M~|:h!&L?!z$:Y!o򠳐ob~bT Mt ?-JPE{eIWз]s^(mݱiwwU%B']biEe l6M3CH3ўBLP a[:䅂j~*<ʁs,]~~31fnMD= N3XDtpjh{J dža+3PU'5{$'7 xV7+ ME&LN|ñ"VB3#+l ࠲nUcz eKf`i2䨂r\n/֍gG_RA%f=P=/f<\7hfoaJ)A[=&_:u+NcAՂmзڌ{|!&j*f4%aNlWwn{"Yڿ13TԌ?Czʗz)3U&Wp-s7?!#TE_)PAN߷T e(UhtaQΆl88^I6ОJM'ʳ3d[8ՍMy ek`!Hnlm導F O6nK:X1ZxB!zЄ?*Jg C]n@bZ ,)tq.b+W9N3 R:۪ /E w;@Ts Axl.*s;b!f@=Kσ Q|!mZc!2'4bub9Ŏg}jY3v] F=[|sgJ㕎Ʃg=+2RR). VV׳_W W@ӛ~LW #"O̹ϧn/ݎ+!]* ` D쏇;.Sѡ1 Nv~~\ (K+#L)&<JG\gP]H9K GSA-HRr3\ː ՘rͅXT[B#Z~!KXF#+qǀQF,7nC(c+PyCƼ5}SY`3 `c.(D9k4)w6\L9K841pa"_ivEѡ𠪭T2ʝhp:`Q! #1J% 9(d]:(7 NCXỉauI:u1Z`dar]j|AMمP]Z)h=U+g eE%̒ภTj7l,*zOhܹ3*"Sx\ K" Rh'd5O7^~ben3p_szsp[H:/AQc*[]ydJNOzw_,Һ}pԟq@l:$Wv- rJ6 vY"Kљ ħXH2ovI$*f(9\1|9@"_ح a)jP,I^kp9DH@hBME[plV%hAH3*H񨯄dR]@UujCC=/SJZӪ~(:.4swv'odMŠ6Kj )y{t.Ztv%=c貳#s7;P+Y96:àcґVE *2;&o!l>OYy{r:@5ALpTSrJP5ǕkMݢhT}C$ę*0HR9"ܝq>ȏ⮢Zk;==o$7Cg_ fY`۶SzTڑXh3Dy-6K湂y>RE ഝpJ im&&|:OS7e#W7U8r]),9eּI\8Rq(C'f-S=V-yoNC!ճ 'G&5HUP~ši1l6dĨhcQuE6xe,v mG&U? gofk_ !+DE1'y[-nd4+qlBe#[iS7c(;MpGq7N-!uEDJlZ!WX64$c1!KYvkC8u~kN|1a8BI34*?A=kW A{k30p9QQlZ_z"夌?gF_&g8;,? kb&o9]Mi]<Ԯ 9}xl:s<6 /hX"FϬ?jd3-9cfx:M8ڌ *es pݿm™Ͽz wu\Aͼu ϯ//vXRA,EH `,|}ZlTaDLX"%_`̏L (UM>Uww\;?ye5Iu4PKTE`C 3@A G\I$K{)3~|~q,Mp 9o w`}#C| ͍,sb?`YEpL&Tiv.т: Fd$ '~noȴMMpc 4B%~vv֠lo 0lJf]:`ƨ(>\;d+-[Ig&^c-# AZq(\WXiiGg"εh &,gM1 xpkL^|Օ[C$^ԩ;\`MX_P@_}ARJ{`B%PQc ݦ&+m~ 2GZɛnp>rmwRZf'ȯ*ȝ-)]5&DoṲ-VLh2bWlDX7ʺWzY/I cpȪkGXB@ :%}e?)O1t1_\AltRo[`X[Aܟ;N,!4G m7EbdG?J_ !J'n}SG6JBk ".{1hiw1<&ΤɁgAQNA4pEI zu c .ҤK`O~&P#71@ξ%)3ӣX?}'0̳} @ u\gܝ*tFq:&gL@{*@rTO' :C?>"S|+%ch=t9^%=tQƵdgs҉6'{^|dvls|T,N z#o5MW[v? ΍{a-xe78~(8Ҽ2e*;TؙTe`{r(&azz ;&`FuۀԜL;Pfeԣt%ĝ24ZƭV}Sa(; W!+]]zV^#T Q~K`_/t;}]tZ eRQ8xz}ɺ[MO]FZ`ގy<{F^RZu+c#2N b1^Gr̦c_W@`,d?-VǬf)Ǯ ͞\@_r5hh8T )n4>3:=WF՟ "7qffyW{#:B&wh5ceҶ%e'{"Ǵ~}Q 3`}EƦ]J1lop̖mV)98 @[8 "{$7 ֕*Y_xXF:3ȱ6B9/yQ̇mo8.01١BfIovPxhٻn},؈ruu:xƵO+A{t4oz$/y5~̎sDQ fd$ɗB'*EX]|?47w=te}vVa8}t Z(20l(HQm)HCL}]l}.wR=F$RZw3E#ߟᦘ}GP2,ɰl\O1i岓d;m.1m$T{$={l̈oТg2!zQ'<>J:bjSnpIq[  *B[P-!wNV}\ӓBe_a?P*zJ;T<'ctA"FѠ 3:娀ɦ#xJz C./5H#|Էngm'Cv0.[beDqՆ8}@kb/g٠Fw a]`c֗yz{}FFcͳ:/r] ƴV$?DEvȵ i%]M#h.XWڹ6Ss44&6 sU(Y /;[C>w  jD,dFc_ OaF_ gIiD{(DZ 7º{ m5Fӎ)1l^bH!:5UJtN9kk:J^kڂUJXe1>-;M9#C4&0%xi S8,30~^+7AsKGvkB{B;&$܆Kcr"@Yr~C&k<%O(߁؆@CtRQ$h|躻cr&+L*gOY&KFѹ7/4x١#7b>5?<eijX}p#V !^8̭`Ǡ؉ p qHkx{2C$Ik^8jv`txX"՝+->fdX8*G+9ʟ;>(72ӯ£;2#PSPKpbo#ew̻0*I}nl253!URM.n8R,LY.OF` c 1"1@W}F+)&4WMs (bx >Ky*Zqe,Ba_1 9i8: Yפ$޸lh_vy\P\RX; ʩ(ſ5K! }gTPBX(?c>r|Lxx/C0eliL~A\ /ڷuX2==05 H@@s~r-{x;<&`L[%IQԄSԴBXyaFdRUWc_^ۤo{@667Ӑã ޳8b.W=0(_Z\e5 yN:օH`;ɬ| 4yNatIX%2sl\̊kh48xo9q"N(;Asi2 VAb13!$nOk+V'Mqx z:ڑ5#$E'YeF 2A;3GbY6}nxsM~HSp-o8=h _c{ MG'"9wbBs[tq)׀VSБ[8".xD 9”;e7uB6H ֋^aŸ V8mK@OǮ t!~WOp#YM %1+ʚF耫(Gvx;h+٬׻ ۍ--&CLo;ĚOt E6!uyLp'_#:[㐌 aҘJl7 d,:pmZ?vnuY×#/FOVD:r> 0J[g5G؂U?U( {~*[>ws{s+76!!/3"NvQQjݭu]6TA2o^:*h| t7:xX Rܻl_xXJKZrR'UJ_xY9p7j@P/)q"Mn39)gI"l& 1t8! *x}6T&Dx/|g饓;~X!D+-L;zWbJ$NJC3lh,V[c[yRG(.fvd [+Ukҕh9UЛמ9_GVS+ 3Y8c*D{B[@YuiY:(@#Vt2 -qnCJa~n :l7@!Wj`xYCzaS>ic M 1\HW>RY=zʺP#=nI˒%ZݕCf;y횡&3ʓ̥]kj˘= +Bhv?>2> Z$ `:M'߇gO"5\0Bֆl쁐$ǡZHQbSl_mH.VR\j$.9 !xn;;:ɡ)QJM'&8O삠a V{W^~p ΆY )ZTa||a{βy}dp%u9Z `)f_<"W^n7[% "F!u[Vuͬf(G`V^@ M}qKZ}Lw@C~(”Bأ sKK"&n)v܇I5MVs|B tЯ;{AˡMhcMVh0O;4&6+.)w{1tOb"r( ܲw&ş(Iv4Y|$_=<)=0JEgo,#N.O㞩 #0g㾃y7cmį [)WK>qqD/ "DwIt^eeAH?dCbv`䂸Of5w%NXդN":rA?I[5aO|LkOXQ 1"A\)wjXguRl9lPaimpyKb4 K2Ǯ#쐞}e:3lP6?}`S ǵlݲ O^+$ExR:=Xn݂=|ta4p((s+ $',oD6[FZu.fEaB0?/7G~KhnN#57'(?0j%z۲smqO~ͣ<uĖ)E lйg%jw8Tn4<ݔ8UL= JnWcjk4-\P1sXV(^WߌYqcn;ҥ(KA:G؆NBN'brx8kYe?LA -%fK[XyuDf&0oUmeX$GYK.o ,eR5&FM @ !)2'lQxNPv&ghYP.eN; iW[]FD.hO; 6Hvd,O8k8'Ypwc,ڸm>(I*TJRG+N줾am6T{;ڒ](Ӹ&? J'=ߦF?#eq[[J:A||̹ epIm Ӏ7n?*V]h^+A7E~yxahSvHŵSpEw~qr ܒҺQ*}tuOӛ\>=Ǣj4<27$D~qhHAi^ Vy_ZGXF`4,8㐕;\b{,V DaPGJPa=< L[6Rb ]߭bSi  :N"z~ "cJpǢydޅ)}޹tA%>ߖ7PGYVpxC?tZɏ|;SG0]X~~NW낺>/F1^T69F`*?w%W^$~2I@ t.kYk_F˞IW4aAl! R /I6*y9e-ixЄw$46V]V Y~Ua]%_! }׹StDZC"Ԝ#Wt`iv2q W2],gȌe*FOwJ [OIQJ]z\񌸾%)鄠$X "Sx s=!a#Kys&#jLlQn%Z9ʡ>EewIs2њHu˂J-sfPl^s?'2xb\~ڙʴ3W[ 1^_K] ԫoGmUwb/ش[W"UR0;@' Jb<-o*BA'p0`mčd5|ȺWFCPͥwsB<嬍_ٍ˹4|ںק*ײ}]t{|L3(ь:9ch-И#;|oa߱k++tF!Ǻ=o yoV ~ _E!?K)TK +&AE:XȉwC=| /wT酎QjO~/{ze/̈́FuL8ˎc#O7}sL$[en%r'HY"ZFDwHQtd-rM;P}++)>6"v5Z?hl R"rA>PB^qƭw}7BMFX%.\*!u$İppJm]8(] C_r%Ѡp"imxbF qcٙ+dhx8;Or{U&~5$w2WI]q^'آ=F@tI m!EOd >qss| ['L'/=jiQT/9˝3RC M`'<*yo2\ hSI*HjchFV/LܪoêUs-_d6qPSus Egď`߮ lcC;3` 9|_OdL1t+QELȡ6#oΖt̨ʑnp:He2YtgpUq&8x /g>pB4.C{bBVӀ%u*Q B=.3~ޞfmvRZ2ʕ"n2Dxd[xII1[ T0sEnbaGK%sx樎گǴw28 w{Y;"mRUͰ =pfج l \2 ׆Ռ,T\9d@}Prn0sKt)1(Op(udgJ|"4yBV͕m}6! TsPVi6:F.o5u>X9"j!p!xBG!u$ҽIvƢK1O.col h};-9DYhs {W4&Pޅ-#-R5۠MyEcrV\↺sR# 0]笅-v@}/#\[[qr%cKZN{C1s뺇iq(iw kEv|{jvao ee`Ǻu\'ςšޙ#xnFVfmPC}DTPK9/`QÔ6=ؒԩ&}'БX%V3ojqCkuwcHk6pPy.i K z=HES6xq>j}ʿ#p &;YNA |piU!3ځ$>enq6k:a ̔C̍.)3}JJAzRԠvGO,iXp~^~B!Ad"ۥ" c٫Zl>ќeO\*Z~6. bp9 >`Ar 32&Jq~{i3]ҡbWx$Q]hq '%H(\BJ5y~K, ש0q4VSIEyS꘼Cb56C͆Ǥh00( ䷆٬Q_oo(P BB9ۧϨOv=%Bw.+RPrvpPIm\fvU8wtI4fjQXA!.u/%\Q~QFʰr٨yS D3ys[+6#>v(h!b nQA1) f.χ]q#5r#UNTn\LZ!Z΋}g*y@ r!NrAy.$T),ddyIqew_UEyS\5d7/b<٬3Ѭu{ * ȵcAT M~ejA(l"6ۆɐf-Q9":{A~dCA(Cɴح+"ָO`Z 1r(_fm1b*w7ؔ}NhήùHuvܑ9롶κ5 2k,̺[KpA|Dž;T!Q綰 * l Si: `ςMT@^ eno>({}޷O=dPɋ!ÏI(ȏEz`+K3yv)55M wc+{;oT}OH;!Tbmo:z.mXPi: = kXE,Lgia%+0rj&HM= ѓ_-t%T1?XpyNEX.Rd ]MXZYdy1Svq]gb;o:wԎ #0ek  XLu@ѺA\F h3౸Y $/,rt`wd 5ſ2X T q,=h7(D<. )9W"lhb`yg$s\ bTə+ceI=H~EElI6H> YD R+Z3`O蔤 T݉>pk᝸ٯ4 mXe%2GCWNxu=eDlNn=~, \`un,M hZD|<͈Pxk: %ț, (`R0414<knvX 0'fdf T.g+Yx2)uf51_땂@vi&t99Wf<;B}it$ܓ 9,|![Ah%o&gmV"ffڇܦ 8N9",,MJWa(h8B,D[_.h 3YePiuAt1˂Pa6d`oo2tkw=)1*TO͒^gqz>y[Uh0`ы/31&$ϻsQ# ͣ\8(>j^qmRk+J_6?]OwfGE@K8,mm*Dx52f`$DyyL0[fq'`A_%/?}%еug%X.pijc='O7H)¥,7=vh9ȁӀauL^aKё9JP[vHך16{9v12+Coگ)`QM*i?`S-$*2)}Pp'|2$iPj2OK>nYBߋ'u5<x#0؄"XvNn1]؂U.&Nn4bs'FxOxQDJ"&&y|PٖRk*HW?nNڀ{,ZN5KLNh[ UH4VM4s#(-Uђ+<%b;6Ku= Aw0[qԪ,yȒɻ O_R}A!RF0̶:Q!*Eg^ /_~w78UOu)gC˳ S2W<ש??苚AK}%k*+ gmxo(hioURmJF3rp-h/$#?"R#u\-wNȪrp&cu%6I揑?/.xWp}B$$";O C8ӞB^õ0a)+&ԧA4aP(gkLKx>'FG81 A A | n}j#GC<x' (f#8C+u")=*?8qN{tRS#fbC sdۯr+sZ7W"l4P'i&P9:̆R|bqsjf|[!w<7vVW al?Auo bt畬S'\m3iȕ*Ҹ>Yq_7.{ղ~c1ɟh7Aθ>}RiCG5IVbLHTMpb=c eE%6C&<;_!w"E BB k}m9Co*5 r5Aeb% (*dN&+h cMS(CUxi-TLZBp14 S'JYpŽ<+;Z(jҝ09b5uE"" Yi֪ !߈Yir. .Q ׎ȷ_Ҫ2u{ܛ5õuU=[Sg{N=%:TDY66dE%FE A_H!!AH*x7TU@:W8sIOȄ ڗ@ժ]D OijKw,tGG57JaS<-.4zg/}ՠݳn4#cݯuKP4RxCa~G8p\t >P4kPt0hS’n: w3Y3Oɋ*p0شO=⺖Hf \3ғJYmj|bVw&Kԍ̑cNN*,yhP҃ [ h On9(<7O'0Rs-I>ѵnWEСZ|zkV @;jmQK%ޙh%?VE r}fĥ0(] <#xtY) >i/bEB`bropJWD$8 waډ߂UJlo.c-Ga׺x8`>vܝH궅s+`\v oeƐ5^3Ct0Ȓd(/!zC 7vNI" [:V|VJƴ]Yt tA zo;t8k3x29\=V|;z0 ݶP*ӂqu/~R !~"dmI~'&J䊞q/nV3mJ~KP"锼fd{!L ۖO{1{#-b*HhiF =C)~PMC(@ ],GUH]qyߑȝp'6i]8VJڭbXL ue:"["+^5wza?|^jݷU"9Ƨ­rs1j_jxn̕˜DҲ,)o+*}YCIpq*tvAeBHmc}|ي_Ą5mDi8iIRyx2~-58]Yh- " (֬ޱbd~sV>Gt!g+oBkHi!2E_1Q`>iqZoR +3l葯#Vԇqx*""%Ȩ9O2~ L }%.,J̭V9tk,*Y OTna.Cn >w&#Bw!U+$IYGy .u+C,AA1ax Tj:,)I“LO&&#Dm)\9^56 2!c"~ bi,kQ{+i\ dQU1gޥC''/6t]Pwxrn{N2|#bErzQ^ Vu>Mu:u%x$8\sˋ~AZi\P48+'L ۩-)\)^HtC`X/F&͛m4{@\ۉڗ_W&rx^aҋ89HND%Nf\J7L] AH1Ϙ%gsM!q'7khysVbi^R٭q PH@58VT|[ijBhTܚR14s:َo^)6R5ZJyv(bkMudؘ)HX"f:fB# J'pڬ0.nKf͇G*Fp$6 0HH[!",W(fU8p,(=*UZe`;i ̓BB U=o=Wƾgܞuz9`tG#q ZIg>Gn*u u_/5k^)M !&vL{!dYT{zD{&/zN u /NT UϚGOn{-  v"cD;\cf@wyo73WcYN%푉 4TJr>hǶxYqI$~G!+}qhbf-*߲ y4m>pLN tM;Mp7GF 4`dKnnAC wݒw|"26w",dаZiD*Y|Ly&k±5t;3>'5|cvQ7q#\~lC.$=>%蒄:{H9}U>moU%Lr)V{V ؚؑ0@<.Q~m z6_5u\s}= +M$MI+q&Sᆧ rRg Y yDE~8zHa1ؖn=F`>7?'qFq211Y  V"Ͷ!|䦕0(oEz_n џۜo$b CpCy.;ֻq#{[ki/J=i@-Y扤y{^kMTi:@;=f!vaP.p]tq*˔(g(9Dc"A*s&u PMۡJR% ˗-c!䇦4Wng#Ze~i"t5Du~8Y=.Jvw덹JQb0 j 坯m>@ьK!'Eĸ!A>ʷ?.`,4ƺ˼a{͟[$qc6D1-;t?NMgUXԵ`-Rz_꠷=V2K{+-i?w΢ΌɊ=O91ٙW 8r K49ۆbgٳ''GtJ^SVGCR{tXж{4zb[w3:2x.kn`CKYۃ `QJ |JT%w=h$v+ҲnP"Yow`ZઊfH%1$h#xXDGj +%#0i!$l;a gz3^QʫGJc{gNœ]VϋE@FVH\=;Abw'b Vo;dW:|,|V)̼^3`j:)R{(Hq]`*oKMG$Etwq|!b10f̊02 ]׻j-mAER`p V3lRgm>qT @0i̳˰Eӣ -Cb^*zvϳ LKAB@5LHkBtm冚uDQr=fgCsiyU E+d>t/g/6O?2ufvFV%y_TUWIJ,p,8[vR.Bw&lH]c˿.W[B t>Xg&9Ha_79]U09 U""R 05q4zY.za 4J1;e]j*EPE"u\E8O&+K[L{njaDyѹ`hY"G5 R7(Hfة'u2@Xrn<߼<^v"@ED] N/Π:F}e"Slz{yvq"tln r rg:# DVx C qD6`45<桰/}5 !w"8gZ? -]8ٽpwI(VW=3uh];Mc#s4 l8RIX70w^+/gn769f lq~{ 毟s24ԏ%m\iQ]Tx`RȊQEHT\zVvh+p|?k1zV32+@K ܅$,VijY:8x.i&w|ӑ"+oBJb!|Jxɕ%N"4TDȂ\lG+Gz殘bdY4t^ Oj$&Ou}|`c9RVh )L-e W55H QH{б6 ,YzI3@b}S[SNx^h]LbLtzt_ (_ǟnf#q3-,]; @R"ur.DXb+4pb fA 7lbrZ1VL4)^NJc8(|` n=)n/e* ۽VV$~/vo±R_k} wj| =WK/Htz}tqYv@O D3=Pn#r<-'Yjtm0G[4Ca>tմ0|K:QX2I MX=Y;miS$Cޙ|J^4TKK.Ovr#HKZ~Βs21/ 5V Ш[κ6ft::8ڭr$[Q4+(=] r"% ]+BJC{7T0r `/+QF9zϤm. FƦ[LE.Ožσ|>qנ;þ0R8x6Yu|,ac^<*YpDaՆ) y7Vŷ̟5j_X>j.N T:`Y^]3ATbzI,#Dtx#n%WA}p^@sI njUf]i~PZ% d[ȹs0ޡ (&sJ6E'ޞktktэ-xo.@ h!{5+IEo.d1dF3F&S>[HٴȢ_>?5*&Rȡ&;7gcl[b<ŋlrN[ߠw l}c=]&mL/ B#Lx=qJ(񙑃7f#XKQM TyFm,]?.q)X(hܸup9 g`lhNzBaHѬٺTKw"5baOޯÛ|B8)Gy(HK3ps1& ~/zӣ7rԼ@r1g ͛@㶒z<$|] dqņgw; -M9ڕZXgz?j,>. VfZ|k3n8הGŸT멡]$X=ߐS*gX"/&¼H"L-;Z,25N]דZRbOx;ugl+ىs`}ae1bv8k]j]DC9:!ȍ< g ,gi#)3TĄu(rwbӄ.Gį6bwtn^K3?eMI htfШA|K% bՅ`ƿ&]L ]?|4IM :\ˆ{uk6i@n]3#`yƪ`}U,if/XN6«1ynι_(fSێ(*lBΛc{&/aM&tn/%z{!9#ńß$nTI-C8qUm8nߴt=X<^d21>9\uZX0tʐ5rؒaFxLЯRy{2NI C,b_ 0m{?g :|Kc:?e`-f)-cm.e>$DOʣ5G9Yd!xhCܫmϦ%eH7,xaW#Vة@U|)Ldb-{6~Fo\B>'c}+jFT5֏zj^(@ϒ+6֮>Hw;ᘘܲBBT<7/x+fv^v@v}vy{VU yh0l@ THl. &A8cX/ )3_:FE{⩬x%xLF;ݔs)oiYӯTϺ~}kEF0Z1r!fIu!Ak>(}ȚY~̎T(FbゅGD-te~H-BС@;Y`ϟY@G@G,ΒKщ]#2q\UX,/PLU*{ պ͐AVFb)*$GgEv{(ͱ8 ӄ֏ 8Iu|0YwkQr`~-f&p1Z)gp8]t}zHbf(&3j<8p13eWuhgd/.ed R\㟒oګd^c`BCW*We ;ݓ>i(@C} VF{!alJRu!H RS?.fQ3$m87E:ptShuHX{]2ij]#i yiX\D %(bap`yܐZ>' |\e Y4lNtqݚҫV,5q*'Gi&)[EypqwYHvZeUȅO17_%2C9@(A/?-Ti KZ6 d)<8HjD!&ZP?ȹO&ɽ{O0SFSKU{I*wjNޠ[ev;B*+&M_A7^j!~MHW-N˄{tuzԒ&6#ȁffsYJn_pBKC=8ߠm9O7u MY=Uv|hG*/Np'@e+n/XI #w7+1>h.2QSdWYN_ai +()w5]X7yIĝ`X\R&吩#:,Rz`|kt +2!!VM1Uφ:ǎj~] xjk= b$ C sQ7  nNG#Bg,al#,)fH~y~nj c!oKo^HNۗޮu5y_^ĀHjui.LUˣ@yV 0YP*Yk'DM196< - zp}iDhڎra ZC%R-m2fr&r}I߯5VЯBʭGCi|1[#2RZ[>q:X gȪgl]uOo+Mk@{4αi@#Xxcbp,7A+%!_4XX=x/gP.ާZ)"'NM^O)e47~8Kq_ 1H9l[CEuRcz:T}{ml4S?x<3 Zƭt`N`gvLU(Lrh_) Q׼S;66 l4 -Wk;7H\*͎AZ]./|Nm{h_#pkKYİ&QsuZ=՜@x `0jBhP4w`871Q6+ıkxM%U.\C k{}avqζbL6"5TLkj6=ooɆTU]RtH@#}/R@%B3٘Á;OLŁ:QCu6:yG0lpҐ>OhX 2)5dY+RZky<l3OB"W5A/ŵ4藫n-}}Ee! tK@w4d$`:p</cdMX*]&` Z%+v~0 ,7 y]T]O_p9bL@ U'.9b %X-2cM\zGFd8 Ԏʴox%+$?TLb!~3ޝhE+MI;=k[e\<`Hx-sXʕgC!/0⎩5Kzyu"nQţ0JbFv[2w]42[bCWGFc 8uчk^s-f\&C$V)^"g_\`Ğc8 AM™sH &$_M`x@[oG >GTY({o fg&j44$4G9ù.}pFB±j./Xgvj~OVS{͵g/ζo٪H 맡a'3(2 ﮊi@&uJ9/9 fQSmUd󖜇cjBN%pGP%= k^MLe`Cx_AlC3sZdy~YTI]$b%~yJ_uPնb;nhKT1,llQCQ{ ςvI9jJC?^`NZ,w<}̣!mM _n)3!XimݹW[:G)wVhh7:O֣sQgNwYg?+| DZx`|H0Cj`~{11~g )}|7݁oSWO{mcB FqnP^]Xi– G6o(S5}F9=Lt5OaS['W鈈^eu by(S1%4h//5u{B@вT{hCOSokĄH.xgR#N;ﱸIJŃɌkgr2bIQ*ldIDRm!cj:hU5-W$_91NF~2BPϯ4͊:SN#O- C9bijÿ<{F2GˤZ3 <#WۂB]Q`4sȵ d *~vKlpn ɑ~cў~,]aҖq.`7OnX6d1ĭ7}gS.y#ZNa X(J=}T|-{# G\; qY{PS„S,],e*YAC0ٹU}2f33N@XtQ&j~DU!UdbׁғqX?ߔ8T3E1_N(W(LF/%㳖 V~Ϙ[C2̘whAffxóm=1\(7M3Z!Uz/Gd%c0=IptZjC4} D>PKre@vX"ХSętHu,s6W^ٵNjOk#LocơNOm!:?Z~~ҏ)qr'6(E\72[!KowF]k+!cMJL?U@kyĤdF˦aܞ'kԬMՅl1ҏ!_u`WH§%. ~ɻg@G6c]))ߝf ?Q1S~+PasC=3Rٸݑ<$Z'2tZ{>)Z=nxm.X nO":ћqPf\]ZV$uh m;/ᚹ'@1Gg@GCMZdhj)} kZJů ,rS Yoxi`sϧ)V֠lu?9](*HG"Hu47ʬ3$Ug~ s\bAOX_+8P=K6y4:&%tb( lmj% }N]/i g k;-~JLL#PpD)- KdTb-Tyϱizu~s %7a{a@nj̭a?a墢"{7D|DDԤ]9U`&HIPj4M7/wϋWP̶ OfBd59[s(֚xC:+/e*0?[+[I+f$ԉ\U6ĒyG40Q%?qC3;ZGSkh2DiG'ZuPQs L{N8;j.C+鎗,`Ϻn XSsIV= \6c̸I46O2iUI#'2S o$P%KhdVVpBOnX. [l5 m`E& ӯJUTl+oWR +E3Лf%Q#Ti# '@!he>H(0!PK{(J mYr) ~X5]C[Nqކp9SCzi;VNܗZ(qGfФ>ފ2aغ2oP8M=S~YzDCM\DA9a^a!vYi)DDD+vT4_1|<~"~/1u ҫfǗ΋(m)LIkP!V26{[+ 8L|BrW,(yP2_:Jo] 0+OjS6욾c0" "-oKU/!-B #rMc)s?S(JE Dq5`/i}Y7Kj셤U>G`0˯<,BYZS#dL0b'2r\ĂqxĒklrq";JiX!}ӍHñ&i㤇On8zosrs^F}MsVkriy7鞑32^SRW#B F4 p"Ҫ Hbۦau+9lizrݚUi d K$ _?{l[Dfm5`=~mra^q)ʹ憎[fZEU$Q|U/*ny\̂J89u9@}E.6B؆Q+͜j a[K x ͫirG5q_mUd̟CZ/eOM|6ʑ,2YXR,~or'jc}!{ E36ǪPDuQ҈[Kqqj٩Zb;0%#mk [ rMvqk8YcjazX;[p*"WMȉ%ܙV#8?m$B&bO(H $'.@veƒZ:cusrp"d5)5|G6; ԃerNsqTE$)J! .pvIm߅4\9 F+ $n2ElN7gTӒo?O Ɯi[ l}o`th^C[>ˑ*7jjgƜ;Ղqz`[jkD"{///C'̱wr2n4=G_@H!GvV6ˊhߦ`+':)VwJ+ci1% ЛssU'IKA윏p;G$i jǃUqV3< aԦUL Ez^^ 5$(>%`%uËN7c AO;rn14ϫi|&GV+EEiVl4xFˎaR=7TN &!\f%aROe |22U,PQYw ASz./NVM@8 wQwBJi3kIJ/} LO;<]608%Y[OFK)3R`q+WtaFh*C$h'?PM"srXnZ G[5k'xO7:{- lGeLX,aߡxEM4ƥyDihMsg (Ln-w>B}M<+p A|:`X6?w`,Ev`T<#}=~DF=DŽ[C !LvG雙hM[R7/G:P/e1~+vI5Dd[$CV;MBژOKe. ĺף$yvV*iwlAn~F+^ ̮BZA;|NI*w^;3-NvCBRi@Rxa$%L?H !"߁.p+B*<>JĊ#ޢH,bxSŸ1++i"xov(e*-}n^O3H",huN8q 䔞nU{WHm+g]pdNU<7$vܦ 0 6 K m-л1" zdh" l 1~t L针/?ugyj[чOr\D6sV(TKYmP{jA>0T֦:]t%7Uf%`حv ª4~gpn,6 eY@PLO#/ IӠ8 /kкIz=)g ;;B.-&TkMꝥȹ^?(rz<&Ʊ~ E9DDj3An`l:WO>͆ݚR1^x26;JY]$W$e/$ ֍,~y N@^ljsף>fPZƊLq!D`"jH.|uXRe-kŠ+55Gf1%+aRp>r,ѯns(e-qoQ=TTbHEABKi5woגGƍo-6EfX5cS!<<]VJڟ,P *(HiΌ Ik$q+[O/Qwy =Z MKS`h'5u)RS?h7>Ãtd&*i3&ArXݜQ\KK xg:DV$mJ@y]g#U 0ڳ55.-_c{R1cM }w)qVL󆳽#وP g .ϵ :BsҢ/Q牫4 ٙ([ٶ]A\@d ,v(kp#|cGDž !re< ' i퍬ZGo(dŘ~塼*pWn*̀W y5pRcΐWq8bms R-˚]0ЮyAU.ss5Cމ.H5pN>E(^:4;h rSr"Tb1Y u][/`~ҶZn*3B7NS6OGeՂ{YJ뗭]Tdץ 罪WL'iTVCz̧:F_~#o*Fr2/j7YȟVp2,=a,qTQgH¬C[z_z튡&l|CKV>c&2pirpmV=ŧC҇=Q"̲v;5++J'מ >/;֝@c-&o}SL)[D6;ţ똄?M%dkh8s"(.q{j^C|GioS[5)w,qDR_\7 c|ƜnTx0zX;eS1N1 Kx@Z, E#!aϢx0t2su|N#.JuS=:=!جENH 4q6SQS_LAr,@B(t7Gc5vfm7Q)O,bv+rJCyBTOw'n9I(>-ZLps ]/A{u9&oP{Fb%kS.B5ok{2ӑx ×zϔvU6 À50R ! 6#CГb+Q 皭 1o,lCYRx.atk4- wZC,Z+0Ɗߙ܄ujHJ0#`O?+=c~ޟ09$%67|Dz*9tQlIϬr(r#BUQZ^0C6PhnG"㵰S/C gؠè4gfxO.濈 6q/5\pM-JJB$*WV(fKVWh^61eRﮐudu4[(dl 6pX 5#b0K[QcC_H bdB!dLW(K#L"O(Re=*ZO3Cr[לn1*Kߩĝ+ P<3nCÎjb˂`M.ywJ -"4͇9.}b"3;CzI4͵G~lCN8xu?+%j`Ux &PpRA6V0K>^\P6t @OAm1h5 n◙-߲i%3d):;`d߾$DWff5Z:BY+p-1@zӇ~ɏu]*@͡"t*OeD[m ǓCI s\iSc3H c~eqG6Ľ>]ž獜ig0>0N I-޹J칵}oVp78)dVeonߒPᩉڱxObE{1vBS`! P4%(92'; @Nrp %G`HU31I|Xv9ܘ= pCYAPtAFX,6^D8+CS#+u!l 0Pmjѡ^=SrWI}H)hU,E/$_We'L v.T"1CnyB?xT Lgsp P8aC*[!nW ږɗ6˪5=g|$ɹH%IJ6S3~RՃҊG5 aky}x֕XИT^qv ˔nc>0@nS*s 8aeK8/nd]pY͞vYJ>Nde. !,X<_uՄ;^(zLi@{K3Tek1x~ݡrFW=$z;vK@jg'[T4i%%aimT@|u>BڎJozbl땤rՂk1Q$dl#:>G&/DG|5Ð<ΖV>"!7/4:&sAvS;{5sS?m-ii7޽i S󯉿X D)݌{vuw9pjt%b+ PC88 PPaJKX!YH1BN}AGD]tD!2/f_ʣ|zЄ'i{;JN#w釴v$QlT!;X@~H뇆ڸEs 4SzHU'z+Ť(`8YAޘ~ 1?Bm\(٨-e?82hP{!υf"De_ִNfipY ί cci`Mh"e"D,E7DNz|^to57F~u4\[kr,̾bRHY‘r{ 5ga␭1\K >Z.g2cv7t" mD%eKROW%gpT2DI%"c5nI^6uѷih\ֱ9x8Ҋ8zEfh,h8hkS;$Ch ɶLܙ?h=whrCcz#Mk#6R_˧0- ]vx'BUBtWo"*;q `g""v4u߱A@OCrf(dƎu~DHj@C'!G7#D; H n^أuR4نV! Uڶ^»Ja1z,Lޮ= DȧFϷKlwEkZRĹP9H ؐ/J(L>ؿ ͉W>B31io7R~CG`S8⟣6TC<:.jWoQ7o;'K8OCzsڅFՎ>?F3J3]}P-7GnK WR6W LH_eI #J+o#5”?EXAU[T V_5%w+l~]~h[V*Tvta?zU*4h`M\VqE>[yqhj`8]H׷l]1{Ӣ#z~/ʓ<];O&Pop4fYS*HUKO4 RL0ohsX''ocM]G<*v9BkRS$+#P'sՒgION>c)J6PO] e>-~9/#f EtQ ]mMq`tūr>yD# N|h0 1jQCgVWpj@6gfY )ORJ LQFptс8äT);f>,ʎ@g0{/9hiE^;Ptْ.x4Z'^e6||Q._L6y₮?H s\ U˴2]zp>Ȇ~5*Uәøo tGώψmUaAU;Lr$V8] _F۬.C',BDC܈JUYv#)Lݐ`wG5D ihєtXǸWN )e}t70NM9U.( 4I>50l#UVrt ZˌWNq NL:7'~pX -Su,LWo Gc,bLx!+f@6]#L wNѴn"DY=o&'*a0GShO6d}pBV ^WAy80avNAz"h0Et)ZfLyݦ#ʖ\~><Ȍ{op[{løm'8O:j5м'P޾%|t+mPsfp9jvlդ9#^Ҽ9,22]6KQh  ; ϑ4Q!ȖHuM\^+N愥Rv'*H˰*=Rzkmv{'#r8PvU\!ž~M3cqq];P H / (*L.s &eZ]֏!F\yz]B|nI^g'4IܷoW"eҶK5orR w{1fT~@ @[]{BB;ǤOW FR;· !HUz붝rhόgf܉[҆Ѝ<-Aݨu/^{5zLCxX4rEBߝ-^GO{{YD: HΩbdvf.+楆,(dAfmoQ7rVҙlQ k%*ԪFBp5t3oD"ӵOWzQqN?\}]ޞo~cLl$IV$"mY\!fʔ?`6Mkuù/P+8HulLi c7t&<`ߢs&wBKG;9+36a ,& IY'+R#96[eVkIRĪ2iׄ'.AJc̟&UzѬE^4_vu?Pւ\$lfpY 0~"LIXsIך%܏_J sEo`LjliOFw[:(e,!Qf AZ~kl[٦a ) UwMSZh8[y!~0Ŧpv)knxan)]J^hU2;Iu֟lѪ8QF6cu @k%nѪf ㏅U5@w̢=x )#upD]*@}a ލ>OhF=BYvڏ 'H\5җ~Ҍ:\\L˂i. >IFŻ.d*n yHRMN Ù% o?+U><ⅧxS:D aSEj?Kmg{&?W44. Tu"UW/[#H-; Ƥ5w`B?A Po0Ҵf%Ε]Ju߉,';3ke&7{>@Ȱyi{1?Do(O9x6@  =AlC PvGyB+61)T/Yn9}߄<׬eյ -9SwJ]r382Sx Ú\fSpH8n>o1 ]~n p0~c1X7#m˜Dܮ_^ZIJ:qXn8wT7qS2uK?a;‰,`t`#ŕ.;0 #]J 30ԋn 7í*_ ZoӶ96#rA\ X^vpEzX۲ v޾#VI1Fca!)0f|nGњ\Ih0 ϣzJfuKB}#'iUC{HS^qJ#O!U2Cˁ'Jr1/Tl -s'Nl!fޢ܆ts efl9v&D$4#؏G|GrCYͦX%oWHݛbպŀzpza2U ْJƌ:T 8V_ֱe%w_k,xk%Y]i;XM)WYhtv9}6y/} 6|ʂnl&Qf n#>&Iqgkj#Rm!7rECY3@OZ<7jZWٻKck^ qόQ _ύ[n$T6 l6E]=`?5%b6]ۉusHNċ>[cTbq+rE_̜fOsmU*WD! 0ǭ/>i),G,"Hy 's߰.F|^yHp`R<Pps1\f-?ta{q ¬dm.077jߎzS:Q,?ǀXF{QrNʠ_ I`?o +@B a2م,vGA o ;pƣ`ٽSz~g$8UbuYʏv`rC~9#`"T}42qO#ŷy `Ai SH\_vyDSf%MOєXFesHܟR/D|+36G5Xt9(!~I҅Rt`+6hWa(~TiܸR=a`l 4r˩i]A"ۥ5UzZhwW'$rv:[׳:sT+ T5  6ճs6 v^8w{jppF7A | vt8NÑ|!ݴGc<3nA}kc:WvΪ0i ՃG5)7XŜʳ mhI8Y+Dh*CvN4HlDpn\sAA3`؍AwԲzGY FNv>6EFs'ޒ)w;*G%k[[:Mi_{Xya8L{9;z؊Wg@A nz! }oѬihEQv|܄_&c{_ms<& % ?y%OR&4Py F&<閟O0!fvәU!q?)r[l6f3߶Y ZW Ljk`0K!kpt[?t̵<ǕɂWj%i\J2v12INߚ8 d=h8,Oy%Ȝ^fHO|uQ]KHiX Tei $Zì章΍.1mdFL2U܀BYN!=nl!#Y u7sm4cb+_SY[BQ;ՊnxO#Y`snvZ"c]]ޜ`)MsZdi9MJaaxa[k;-F"-#n? TH7/gEG͚|g\[3xeٙZlpŋq Z"Ffsʌj-1#xKIuCD`khU2*]W~A D ::=Oeշf9f5<3tO7qt 7n6ܻfjW>ןEk d4b gmuR(mL{i3TUj'fW^ X+ޱt[hgߣ_#v&$F10z_I/+T}EWl4}XQčYaRIYS;d}'c9Ӱ;هx{|$xI:5o8t}z/uIBnx6Ra=>ְ)M}ARK0/[u㊔iCI=рT-] ysG͘'ۃBfM2pY Z"|7b8!iB39A ^F8KH+"(U`l{L+廌N'\9OF$L;  iΈ'<䲋7#z! :SW2d1@ 6(y`DSt)t] 6,>llD0C%M GE9Ǚ(Ϗ("Э?Jk#<P65yŦ.kL^78D4a5B %s$uG~O Si,dyF@:קs7" V`#)f!kIfcgGaB9)7|4yK-$c'ʟG]#οx7ɯF1vS(OA"p ca!O*Qu*!"T$:2R^HjoLJX%T8r뭛M|QQo ,{`f֋f!*0/ N[mL4.>{uo}:$Q0q=܄.ƕXi#)eG7NIo |DAR6>gM"2W?w+±yީ%W^8G;/c.,ojڡ8"xn>*LL$GQQкXUD;uP6)$Zp7aD %R4iP1{XN$[ uiZb/jdc/ja!HFLFó,HM+uȄKo uh18Y^yz"Ȫ zzؚ%_AHٕ2YIq^,&5 f`po̺ D"uFnѾpffO/?_ֶ|b$ՔiG7y׿DF8V<(q3:{HxuT!aps%C:ۉ5q@'lrxw{,LR›Z=V7?8H^9H),Ee7BY&Y3k_: QkZ=?4Ҟg Ʌek2Ԧ%3 ?m=,`M)c4b7X=x8&FW,i}J޳É5=Vm2;R TEu&((,Zx n[u76eYE-YTt撟g䁆G;C N&J_^UdQoA-Oܱ=05˰4nYDL5"r^* Nhl=CfPJx *Eʼpx#"w-@({۽M FC~zU#?EIM"+ D%]j=W< ЁO$W/!Z1+P1hzâ ];rs`E4-CUd/TZ;70@) 13&QKjo?R(w9u=N~x16Œk3ц+)46 GUHYzh(Q73EKAnzL?| y~דkf82-9MYj<`.{v!GŃ)pxxⷆh{ E#IWt=9mFa;BǖPW+6!KPpmaoO]̲Vj˸qdoܞb \5l8mYq_VUn=z9QNrh ?~1 Ki FQq8ݖHpKqͶu1GA1g>&zʧŠaK$.'Ewmbr`Eu=UN!mUZZ%:uªe}xx|Se7kLtb/r@PgA< Bz;Qb~4}I:׌x1AmIw"'hOui}wŵn .#€^|(G]Җo N,)A.4,WBLpbގ-m*F̆L b֌;? M .Z$AkY/>Q!h %1[x:Ծn{zڈj/ƭbC$=g\+^ac4\SCeN;G[?Gjhfz_滊@Ԯ3k2a4 k5ԏFT-hotQsWAFLbkadNGx Mnr`h!Sy pdN/(TGNٗ܌3! A>j(`Xht 2$DL#buXlvX](Ĺf3@R#a[-$ ]d~Un֞ ǩMGOr6q_뵩 '@mڝ㐘]:4d{Qֆ ! +-z9 ږpsGv{s,1~mW-&twS?BHNG1 *#9 tf6Wg<_h>-[vD:ڽx1q2[ c7ZkYՓw~1K+S#:ecaoUp:e!0+|2!E+/$\h7ݩrP;_#]۱Q~;<OTԳ}*< DuYJۧǞú=Zߧ/pu!A?H*hGk9V阋x%Lmq پ'h *9e}Ϧ;>}8rSSq ڙ2Aoxr7,JHAoУs˙2 ֧d 齀-խwbGߦ;QRc F:m&FcЪ_n [F'~p)'ʩ(W6t* 8Q[Fv5RF畮^\hĎ6ٺbea9@Bҩ@Q=h1K2]l(YɅ 6{6H9k{[nWc@ ݥnU_՟,t!4/Md-KXOOru(v' (JW ȍop;bJex$zgֆ5==qF(JĽ$O|%CxIFT (dG"4-ƽaFpIjwi ui=͒O^) ]Wh"]ġ?2DIݭrl1XlOp[12<&{|X@HɸӎvT;$UF)BΦ%veSͿU6g[yA"t!Pw^'dHLFRlSx39WW\7 G|D#5,_ IX(Uo߆AW!qܖmZ9 =zbe+_^xD"SJ:J/dM-WD=ȭ?q~ /,͘C!XdMsc2=‹)ɷ15",O}_ ;_5&y smlSr .܁[ 'pmWwHӺp,N-X.q0x\ݔmapAcYC=u.{dTūD&r2Gr6hY;C#ށRE*kId Z"\J4k"p6 ZJ z4XAB8tR^ z 4`HA~C)# w! zkcV၈ ox C  .Y#zHsZZ| o+Fe`DAڀ G+˞w 7-9U!GUHash .K=Im}$H:/1!D`[O)Q@6`osN6(UJ_7}`qKk: \)Qr0`棬urQmL9Iڐݣ3Om b4NuT0f OQմOG$\"#>$ܮҔ)@!~8Lqߙ6鉒.[V0RyЭѨn>[*a A j 併{ WQ%)%s%/SՓK"e1x%tx}xc}DYAcAmC7iљk$Li dZ8%(MG2V@F&rt ?nBsM =k)p9""{E)<)".Z+p$ 3 3 K EZ,aA!\acֵaȡO4!CiO^Cr?*s O  RM^Ht3b P z^GIνpDEIMH'bNK"͔t%)~PEC5y^.{(~Tƀ 3 ,nFy+PoÊjRsRv1lR9-rL]5M@IO QvV=Kvw'z=E?F,#_kF- Q"ϓ{|{UyrR2X{OKo G6NWЪR.AA;\79WOD-6L3b;&_\޹z[KDH.f9CP{)gfYisIW ~hfl4c#U.ܾU֊=sE8ne\E/\O5*yU9š݌=\ z87p.sn1 }X\uٴCB1s4hPϩƐki  FQ|ZYz̼ O .v1zdջ]qbl:yPa{Z%r.cqKF^[9 W:\2 4da:{V K7Rf%ybg> hcYgH1 oJKˢʽm8 U V׸ (%waaGDhtݳHY}\& љC}PB}Q1>|NS%hIk"H BěNR#N yžO+O}$)Z4lNPK@ULx4 |W`ֶ3kat!OjVKbxp.r׈H/Sk_xpߨV^ҦQ=1[=Ya[PH;K:YsuQ)B;A:=|: l7=eI},An] GhlV}/" WmqMT?76b "H9űnfSx w(UMh.rC_J8mAM(mP=ITh&׉HT Xs6k2gL/k`f3f$2eoqOzָ*>YBl479,}a dL޷j0(28&fp0)t\7aҨXzS'2"K75Xg(e]wq ^q[_GVu䷣:RM@ipDzuuD':x|]o E\X`@tʃ4 U7Cn[w$$*rhF,ZReqDm|z'!O8!!4OJ۾hOOs|_kUS3|ҧGup+=nC[=3 m 5IwūTKq%ܳܨIY2JPZp*eg+V2T8܅.3"fIL'4#!x76opiх@>3مbrFӲ8$ƌ)o m=/3ŭS?y'$:.FVcɸe_LY_3a)`u;#gKQp_P^QT4X2М0pw%0Ԏƈ؝b.e3] Sy 1\DA$(i3Yyq~*N[SmЀS EV'W"1װ>UH8qS\#0B]Oρ;H+9̳ZA zY9KOaXkG_uh ;ʡҝ5(®jq|A̜(5'7inEvч G/<["B\j?9\Ֆ"䒶umCMȨ*?`Xk3+U}q_zR+`a V]`h^IT}ma4$ث_sdƧI_.q&M KAۍС{3=:i'JUԹ,{ A+yU/Z[l)ؾV$A  =AiPZwd6jrI4s R |K&U8k.Mv;ɡ Kz sK| jh4ѷ@<žCe*r9_Րeoշ011.YPՉ Oaq'ȓLrn}C 1h_8tRBQ '&46y9moٜ|7@p3b^QGzхJݤe-QCg&emhz݇,f`>F=GXxwݖkWuB5Э'ؕ`e?ҏ.aCx)'n)z.GtpqdE.[{A`ʨsl(ү`IU;.RGw'Q)sڍd6yUq NS8H%fä2jڧ -O%R_=?Awh|ovW/ӪLDw(i[BOmF +A;Vp_ʗ \ʓ^ B+[ݢ2gG9>K-[ JJ%ϩppK\̓HT7YE(h7 XJ.iW%>[kӫ򕎨P#Xr_b>i)l[ Oϱ -sKR].9=}}dE]5ԡF5LV"g{`R{e j5L?X3~rREf'$tzZ-E|̃m~Ih(^͙Mp8"W!"YB?qFvP3/!QRP#Ixc;c'eYl{#wmw2Ƈ!;-]$UO=q ˴NVR^=ohܽjINߐ1ECz^3bŋ?KO_[t:ɱȅg8'W$tefM֘]&$'<|,/۟jlp ج.)?ҕXᠯIW:65-W+7aoq +ݫH-^&] @[\ O12'RDBؤy '[yl#IwNSNVGd$,I1;*F^ක9i7 NnܢsϸC[MX+7~hFY#.!a䱙p:Ϯ=ẸFx7PJ'Aii7'o|o [H*61ݎ28iEx gJ)AB C" 3`R4:v IOWsgk5: U8l [h J ݺA'OuMhA2#TsI(E4P *YX0k@q,;A8גj^`aS1'=XONu}rk  )R)VəO`= MXC4W-bRۦtK(eV@}Y_P?!&P3Սm4rkחDOQt]ۀ4C8Fd3`{oO[? mꈋeA3_M z>!"HkHT1oDkdyhr'0p NO OTh%Ӹ]W- wWL> x1IxkF 騨=C-Cb[)A*@}B$ÙH{ϩ~'2r%@Kek'/ؙ_A nez]3hX~u]\'C ottO@W\x8 3f5_\f> CtvssS%'B<ƄtpK}DX~,JKS"Tw6Oy9VOA+oRk v^@!\oKSq©hguy`qoIuQ oTXNZ6瀝%B=3TwdW'(c<ΒJ[! JZ0aH޳R xlϒ?,\AP^W+&d7m?\ޓiJj1HX扴P!а9-.KE1WJi-$svgQ@JV oxq\v6".Q|n+:] ݰH@[F\CCQ? hn}`]idHDZ֚*"E-ٰ)wC')vbQ%FZ*f`P6e dU)掾|a즉9w€֞ݖuBސ~WzE>3DgL&2pTmNb D\~jdfa禚}~ݡ/6K{F zy==/Ȫ֡N5P ^ pTFA j1}E"u * <3)vFԤ_~ >߇O6 s&8kY`bk7PenF1mU~ܕ;(BÌsr&q ?7x7*!z)E3L?Th^#[}ft;NY$:} $fsVhQԊJ]ZBStߨ-;x] %PGVEVj\֘e[l7/TzC5p|[q쁐 |tf)˄IkWh,-:@.vKҪ]Me4BZ~.>+, F3YkhHPWDw@%V,hA|W6{@9'w'.$$<Ʒ? ֝+O9 ,sZ+u-e?-obÊ7pj {Nj#C'/<ϧX~_FkbÞ14-ցE4 ߶HQ f: :ZwJK_n2nxj {>x5VQkszJ&oGWAuwU2^vĮ\x,V?1=U.O!E6U6.d>fAHn~g8r%vaQ"#t3 N|`Y{nSY!wf!a!rSVܪ۩+>f_U kG<;+VNhìye-:bjߩNs}.b*P>8\P4K.jiIXkj 2)4$3dcpNXuks2䯏 2SmO zsш0Nzfx!+^:a>)E$dI՞NjDIEiP''9ΰ':,=;&++w6Mxj)rTS" -eL36f!_h\dPHP֖hfk3.s>+l$y4Ũi^2dt-QٰyMG=~LBI %YNX^JlX GyB26.(lK连Q!MxƭE$,—rz8OեƟ ilsoV`w5B<:ָ{/:.EcwbB՜쬔?Css6|* kvgŖզ{uN':Cr:"ZAF{%QQX^|J~$3Ұ\op2eljQ'jePHrK56 P +5+U' p)୅fu3]}AMh_db]|I2WԅX('!MHf.WgwE$Č{"Zԯ/-̔l޺ۆw<߮bYbSTiÆ8VJJ;wBoQ XV+tӧ%o]_0H,RFz/2Ӎ_`ظ7=-SQ;KH0,ب'1эHh_kŸ;a)~kbEEvRkgPP(Zw%w*jPlCQL__1gmu[!.tdn5I bޜ4#d&]F-YZ3(hTl="iW;"82!e]*92e>ưM/.WUKhL~DZu6iUnQq۹d>!/'3ϝTZU)™=JCF.@Un*&6 Nnۙ[ _WBΦ/Rw?E g"^9D>$DG2k{P֤lj $fCCw;o)et7Szy:fb =&Jѳ u@լ"!.`y%Lr6F,/~zMlu2f49"q&CPJi/U\<E74ѵ{3.81MNۗ{=\o2+HOfb%23Fe0٢+^|A$xQ»$jDƊ~h>;Dm&j[-7`z/& sٴ]>[O QcJ6J咲F}K#'lYK&XrgޫV:=Rԩ^zٞ7w. [Mq%Tq #C;WaBT=ȩds8K'"7JseFJT{Kq0tzje B7!)N>Seכy_ƅ"pٓ{B/S*0hxi| F݊TD kxtHs.>; ]UBl҃8|F\+56츠2f?,wá :9u4k%F B֟CTu/<+'i,۸o^mSf?X'WڜDŽF.FB7^Mp~0;4vS en,]G.P1s:_6zl*vGUr?djˎ5^ݭ%>(Ѱe@9/9z|;ȑW*@E\ ])JIA7+4H$8m!cUg  c)"ؔkY;u{xrwۗ4SM2Z Ɖ ^ZS8n۴ƨ?s凪3/_ E0<#֦T=GG2B9,U1F#/rL]_alNE?wd–dduKQfQ˫;wP0[DiiKtny QN6[EMgܕzRѶޕ;HQ%mA"WԐR=..]ˣ:4eBqr-bf9ず95:$]nl Q5-:  3cT];7Hsz +7a]JZ/ȇ+/WK+H(]bQxzK*Lq$ݠ[#.Ef1fXؖ5 ǺW_B)}R%$VDJnQ0'{3?!YK xW,g`Po1;)A@G7P{H E5oG)/ 0S]Ϩh1FO2bCZE>8R7*Cz3.wG=2j嫠M'Dd[{YZ<WKl' )g ΚMBh8'ˈ,$8Y8 Gp,1R-:nP ?dE\u/ztbF|ٹ`k,^u<`D?Gf֛37!Uݿ:&̴Nl}P [O@6xeGh%s <"k /f]4׶_uJ!O1xOx8h_el޴=] ynU#}iK11As_S?=jQ~3J`ŋ'CCPFkoY1c&jxh~xDe@ms_UF: <1&4dg1@pic~/Z07A1 , [rgڵqv},27)Ot8pnr)9#;%Vƶ(j*]$siيGo^l{]y4vȠ;( [ɏ=K'kDW־d1S !4r<6/r5E| (^URW@W tp Bs_$D.,cp OXܿLz:1 xsjxnKoL%p0Y0QCZv [u"K {.4Wݣhqhhh [5N7rEx|?.R7*ODYMRVq'' Ikp%NIO-J[S2P3BiWsw!e7=f暗F ;hZ\K[ƣti1S Nԏh8)z5h ]$%pXuCWm"d6+_]&fg4،IdDm;.'͖! 5v Ǐ|@nwt d}d,S[C=pؗqS0, ۮ[6 r[%L DL\]5/SVa63( Ɓ?Bk1z-d JacI@Z'< 9ۘ͑R^d RB԰ruU/NgwR=6eKrrzr\Ooj_~ |z7f!$L9pj cMNojlE 8}o8 ճ`;m3.ʴdA6,7wbϬtoֈm$ ]ƵQ$zKvsuֱ n"N Xiw,-kŜJ8v >9 <jWJ>(S;R]MviG̬l!R~Jw;ypKtJaA 7 ln0J5j>TZz^#/XUV r%3{r#ҘX:]w*2֦1 kbev xʽSCVu:C[`, \m}O1yP^&y㔊]-6$I+NВl(KfL7r<^~LfD}‘ //îen:~Ӫ;ԕId'~u7p;(ȋWn+f~ -ZOzw)0r;q@bg@?HAvh 4~ {{?)0D .HKPU_kߣ(*= WD]P24#O4|Os8Y]+R4[<+NYNKqҩs%Ýs})TISH5驰n!1%llzPx9rcσC-__kXO.ݺ`t'J6[X^aau8Izfo*pmYT1'po>6ؒOk&rdr丢_Nf'^E@VM`!I X^<ϳ8;ih09EKm]mx*e3mxqVw>qZ>}w}Pڮ?-uBU*XJˆpnNg׮O 7 nKcYP\t*0sȼz笳XfXT@m&o u}DfLY_<- r,ahytC*f뫳[O+hG.f|Cb?9fh mKЈEhݢi{67Lq@|>v9{=Ӊ 0kXy"L7$Öރq&@)Pw>Ԍ߫>ʰ$l7!j_f fdއZ\ףX 3equ^#1hG`E7SaFD>$x2Ϭa0cGv,7 R*-.$X`Ը@ @f5kSnOG=Ƨ%rv(o`%}iે37o!68¯ze,<'T\*xE_ooŋ|[G&TKR7]҉AH[fD{ȷo/>ؕAJ c,Eʞ "S%8jdQo=h0/-(A /Q5V~{nqn75GBuIv5[y21d-)X~kls M1IaAFL{i}[᤟&D|9&wH/QxO=`!vkij!Ξgѵ4ң+Do "Rv yx_9m J蠋`Q*)y%LYYPџc&|-yg_$l, .sy6ّg\b^)aQ&M1!L{uJ<ޕ)Ցp ~Be c!ltPGƥ=Co^ON8H<hÄo;Ci83XYjW^:˟Wt'gHnjO 0}k&s>8Gy|VA)K%~J3_ʶǺX[i,j *25Icf>+:Mu ]9%WFeDQJ4Dt5H*!4^UwDٲ¬o+E5:;K?;ǜ#Uwk-+tijΗE^Zś3%a̡*&"DŽAٚhi|HtalB%sZo,ve'Jz۴ȁMV`OP0b6-]ҙ\ag'*,s ja#A .rCd#BBu8RD-KX@s\gВnvT!lW Uzo;#\׀4ˋS,ڷg9]H[|B&7Ǡ5r3sxp&xgtFKRܳV^q:/3%̩Fy H L F]Ew C4ASR_bl1i_\(IVhpQ K0^8x.0FDBݺ/5p~ *u}fM*޴j.ZrllH-q(p _Du#9n]'RU_XGo$~@z=vPϵ2CUIP(vE^ 24Z`Or(ۑn,7W,m3!>J9kcNJg{G]Dv }voS(7f^| u#ЯFCc!ɛ/.MR<56/c=f&<`Ě;4c**}q٪Slܘk F-㨓W򊏝Z{&dKf+FoE'Ui~e*X0~%d]O[Apk5J@:~~;,i(mbF?GkR$T父o^)aH2;" P(dG2ZhS(H)p mU:[\ qèWf&2фo尵.8}.@ͅTc\K:V^F-m}Wc*LO;bz#d`kN.ZBzk$t!|(r8@Z̏}]Q4rs|],kKq5䯽-*/EzK{ @y7<+I~Cupa6])77r]J)Nak2,L43kPQ`@:+YpX/: A'P}{kY%}B5'yzEU-9TU R\ejo=9.9XC^|UM5q5ZQ҄I] WԤ_*-HSt;'1cv-B%FF<\t*'SvxUeku}M1Tk^l  *oS!NAme,mHkamCL (z{s> &Ϳ}Rk{+G kOE$bKedtmSY,Yt6DQt~ նJuf˧e5{܃=@8QHHֈƚ{Kcݓap #ŎnbPi;j+$cel"tSpj^tazF2@_-7: [KܢO"V~ѪDڽΡJ;1x=H_ޞ]}0itTU7e!87B-@Rv`Q ĺWT0 )v^Buq0R#-D$\Jt$1,G?^[n"tLIw`Q2-yR1&<(OT*!f߬-]}~s+W@ev&127ZeNn(7·phM S``? 鉊^ o*2܎ -J@t9(JXlֽǑBAcEFI4 t&vZIjeZ%~2|Y8`uG>B*h? 8nJ-_<6Wq{Hm(QnT8Fq}=>&}CKi9O++'X+t;a ~>;â ,nPg\/%oh8hop9,ĶO.ݣN ~Cs1lDE!nr'e>єQ4f5-eƁ(S\E[P.!fƒ/6XjWsKw4Ӑi4:RkÀޒL$4$n؄RH55ZGdIC?:/-VNW*U 7lP d>ȃ $ wlsC|<ɕ@jر#δJPr{ j5}6Cnhv|ANǮػ:羙jgȋDy!_rK^=b,SA@R3ͽV`;#R;Ă'6rh ;BMTƈO߿%(@<Ј]U^}7Np7ޱ>OPXWκ۱';`A#B^œI$8d٣G=a$Ma/NA8>x![rS[SF2]Skb=*SWW'7D!흃8i+Èݾ J'Ѕl Qbq0H(+jC1M>`l{@cjnAڦEi˂G6\LIcPzֱvvEb%8RW>?ܪeIS]  *@R6;H$ιjl966\rM},_,4fLS5ΜsJ%.FYcG-!lyaRҳEګ05^ҙTesc˱6"CpfoKcev?UoI9֮+0I f@ݯ\F?:}h&7L((8˓ԫf}Dݻk oZ&gV+ྸ ap MBf%n4 8:!zIwLw$ mm :;$@Cc4#"aHDmW1" ~py!M!rW,U=0NaƖYBb ?߻_sԇq-SQ'h$bV9 ~ZĻzHk7_~ݭE ~xw}a[Z~i9"a0 Ƶth﨤¬+!,6[~䕼d\׍=<ZiK#z n5P8JO#u:L-/0Up~/⃋$SҝzKї(YT}!.Ԫ\͑\ Z,iHgsrW 4[dW 'tvD.Ze yuŤX&$V(a?\?3Y-&A-N09 znEۑת_>|U?4GJ0#L KR; ~3^{u %o60_w)~jjc=$aaaк+-~y2.=mؓ6n!_M":Dj]!UdVWLc9aڛQpAz*7pZlw zǔh[e)Dv4kǿZDh(+] OFK߻\1H Ҩۮz?玊lʽpahbnxdF|Z^d`8-N.pњf}Tי(?Kbi^4x:TRF*RUuԶe1p }P3zaɡyCQ黚 w3%9,xs#e2}HYpFhaɦfaA(hBdR<BKV|'xX.d|h"'gtfp_!Wt: 2NB JM-BH jM{tC{g>s0f

YV?^ C- hz7'mJﲢPp2*Ϩ̘7io:+ ASЩvU&V8{ʴx(l]HHZ6(K A([,8X?#<3e=v JVM^aLd)Dwk|o_nqD&ڄ-!Jdx50.3e]ͧF[< :\4*qm<HCy?'J(m:*fb\Cu*Y)5Hc&L:LҰaiĆ6Hzf@P#' ruOu!5& q6eiKW87HY`f|rfKs;ЀP2wxE$S6L4kױ=^ R+X 5{W&5 {FvrT#ЂʥOVTjocnRcUCGndg(")k:0[_P ,۟!F)#Lt:T"S $A<*g{̏笸ٶXNőɴ $!a֯p K}׾?T܊PZw9вP"wo-vL2:_H|]F&9ui|W1{>Z#GBR)fjh[G,J7#7l\tAzsW4v >B'G :$[شuֱ$h(WvfDXS^ st(ʁ0.c_"/hnh.% C0;O~1>y3Cy8{_H,ԾG[}{Hzv5%?kv2. #Jܛ˥OJ'N1W;D8NqX;iTpjwv_I0ɧRSQ9p!/I{)VXZ“i ${0,fR.8:,ȼ$e*(CAS&E!8eL63"w,ɕ?Gµ'/Cx;/GPR)ZѭdV>o3q=L.rp\ui8M 97PYܢ;fxeAqCtAfrv/1+=Ǟxkb.Ob.lQfQFZ6*LTn)vg?PyᅇD9EE8ۃd .mj@VS}7<*{YRaȒBC}S!e@:AO?vӦʀhnO!,D"MXҎQKjFė|=MvI{. +ࣞ;);833m61SNd2=~{lWM UfKYڊCʳ/Ƚ=g9dCͳ7Gpaѕ (/bף܎&lJoD-5 (|+VqymP\i(IERu?_+1b3{&8Wךz6jcy[%_nw.%WxE{z~ ̆==jx#9; \!{u*OQx7 %O-UGI)H*CbjO?5Nbwӳy4A%.^U-$m)/>^ Σ#rB5qUD0eI`f ]bMYSsJʞ̾L&r0ENҵDZ#1z1"@Ӵn&LovoaQ2VMuirOg \{3҉' ^;PAR 3)=9u")3@t_Ea:I9)#tVnXw۽D=x9o2.V䝒[Z+fT j2ÅZ 2@! z(<…܂:drQ[sBql*usbsYc#?G%@Zͨw"34qtړf~՛jZc5I`| `.zHC߂ʕOr #%G+@qZns 1CVrV\_ߺA{}Ѹ!"7g/N OkjF\9_{Oj&~љ I6+=`t+/(z[ ԡAUW8n6G[;8#^|x¼OofZ;Em O$1;x=P,lJ!< u4/*zLaQqB.R@Ϙ3T #VY oan.ޓ'{g7=KyO&X:7*ڹJ*O=S 9*m+e܏=Ån4x4m{ۂِ-hYh~sSZw}NS>^(wV7 =}6 dvq{͗/z4n\$`/vUݥnoњ% ~WEɈctfkg'4 8OG=AZՏeH{^-a ǡM p%]yS sM$k }ˤen08.ux$洅GK ,Ά棌E>""T"9VgMl^e>sСPb?tⰜ, \їAB‘Kjrr{3}z0k}e|GX%T3y/XTainJ@>ZfBa|P:iַN2]P:gb-1,3عiwI5?RˆxN=x;[rÕVaEݯUj\xE@j28 tN0\T7#&y67y[T|VdP灒YχӜ UEhj,6fsXw}~5];ʱXJ[mRҜ hZ[._VUjZ7~{/ <ˋ+#osJw Ae<-n#;$O#U`4yTm͗@#kEQqw%F힪Py/}%xn)Nѧ M +AY'9<|,*t}BL@D>]NS6}=5܍)ˑ~fwsM52Cօ'feDԈU1ߏpq\1OB'`f.RA}8 b3|sc,F a,[vA^KKY$ t6 fť@Ϥ(M+mڲ.r3<똞p [I2cjo1T!I2OJ艧cm+_: M]Dݔn^ mflŗ\xM~< ⩅ z||L q]RdH?=ѲCQb@svŐOK.jJY,E)̸M1nSuӨC'0bBՏ Q$yn _~wnQnѴ뙬&4D H|+}@xƏ<3dL>NgZ|.B ~UGjr`̱xhf%0ϛs1[rC?.@UN ǃl0DI&:Ne,smX{GMX}ͬzB li5&>m9 P3䋎UK-{a{po4W/hg7û]dO!"l+%ـޣ#_$8)T(2 v>(綾I%W&ه1>"WQaFzF{wnB:s9sN E5~Wwc#58C|D>1RhdSXyv",pM&S!kv ap>;P]YF fC=T,ĥAGf2k5ʟTCHl ZxE0H^U Gٲz]TR[kdG|zVV4VIpMxf[+E=zk` qj6ŷ}sR ~4t2_)<}jd d:55~l&/5n@C1;W"Ssr|o|x0}*csDVi<0B!'z`)L[6,3"<`fSjeEH6?, 濚WP  tq}mnZZK ʝƠucM$;L&c%Y=27%f:#£ȑlIoG˥ ;L7Ln1ˑ%X_[%543}_ܽC³d[s'OK{ V`j =%2ũ$T~%f*x 5ͯ$؇͵K-[J ^hPjzx|t…^2"1yUu'9e>A5_i@ȝy^'+wUg$JC:#I!7FTÓp׳ucmc}}}.gYA:['W6}WWt+FT%~yeS QmӬ!¤Р6Wf6% q蛥BMs2X愅Ѹ')hRT^;̀H s{<ب3ͥ&{)a$<ʒ"G:Ӭmm?pyGQ5 t[8$(rzV>>ZzMLғd,Nj+o+!LDz/sӱ1nN,#b|6 z*,#`˖gNWAY e)^a jq|}#6h;Z ?m?f7̡[-W,-6yT-Ӛ3@LE8[A t 2ϸޡs.idBOϹH6I=<1WfDm暛t8Ly(d-|Z,Jԉ i{_ qvP]㈓LvRdܵ~,Hg^:ckR JujtۦNXKA"qugS!%&mz%OZp5|ef۽:/C=fd^{ip7#(W_<צr+N7 rHRj]&;?"mIG\ĺ[rM#o Qbk<#r#aZ& ۂ ם{)|WGBk7J',r{U%J[װ{5D;~d8{RXEB+)iqLsXr; ZxO? |»B1\iɮ-TuJ"jO4+"*z3ƥDH^V( Y_!*犄me&dzF m 9;K cg,{-60RFp,;)zvdW!yY- EHd g `&P[4M1-aGNBq(LHr+] Poo7Kbuu1;rMcʄ6<(q%4nJvlr:g%4J--7k/AIH;ݭ^d=!p<JUw/k}!Щ| AC[ݷ-lMDW(G\PY4T|nuLI[ݯdMZw" .h`do%F6 caub-аH5+C Rycg'HDjhU̓R s9jSxWr.GH|PdwƽDj˜Lǒ1,qLZ1_7!pX"A@?_qwSLp;N-8}? 0uygu^5/c.c=EiF//7{O2w"|/kǤT὇׹0w%؆4czsGo0 !AT}-燠xp*_2ZtOqB>!_LY58Tc/$?f̛wREs*7я<ߪ8CnK֔ñ-_#ιo |6w׾_6 Ώaib%/Yl}W(jѴ85]9b/hEC8wyqm|.eo9TĶ)%cфm>Q20v"qlQ{A/bŧF/P'ECݱe9 }1EU;UӠ/8[{OnjNf}{^@<%'@]qREQ_;r%;^:Sw"&ab>CR[ѫ r)y}?e1ڀ9Ȑ9o 0`vmW46Wc"P̽=D*FIKʯt=OqC;rT+*D@щ]5Uƻ`ljbټ\$(ZwZ lĉ͹󡐋6%@]D1(ʝ拚BY3Ύ ΰ{tJjviJI:  |*rSjHBg^+aOYBQsqx:~Cm^-T%ܰ1NRbLk) yt#)Pdor\xσ=q,6~M7[BGx2h4KVg «5{% MR &V(}vg~atU| gځL1gџS:~ÑO+;k)FtmRNQHI݀[D x"!utX}AӜS,p?+}cFFDWvz^5#V0jg]c ntyYbj^:5 g4wd(jp$`7~v>.OWgB̅,SzI7լ#2銿YSO!n2&&Ib<`sOs 5& {ppdQR7pp]8R)L[@g3@5"c]M1c[ 9:+?swÃ+fObes7Ψ@.c2kִbʽ]^-BbbaxD ׋s(@I7¬gr-|i8|{HCYc"h%e.6 H~?Aj:)ƆY,-vL?_u{}dgKQ n ΊyBE)(@hbIr\yI*U x<9`З=hpb]\؝8OU?9~$RذD#[|MĖ1ȡ;Q:r"_͒fMuŞFԸ̼Ja `qQVUNe2is`;i‰[S͈_!˓0|gJ#Һʸ ,C6vnp-!77 3na FnGô"U.ܶb)/SaS+L:ux7{MHzi8cb#⊜ Z a]|rNHdߢ:f1|dF84X[iNq`W+t~?04DiV"\,AZvo:m18 a(L}@i]iw1jg㷏hZt|ڐ.̈́+R#n,rrDyM@\燽vInp$=`,Аcit'*)`&]!4To1(OciKM[Ps7Z"^Y&FqS +9[pNI(S];3}o~3bԱS%KA`;S;ۭy-kn<7[Φ[q*SCP[v-glB6O/&;h  #dGuQ7Yfۍ܆ﯭM؏/CZ%_C*]P_[.8pM~o+k,}O'-5Cf0~8Xϑ Vi`2#-T8u^dce>4"J&)`--s)Φ5;KǭR,zrPV)7&ٶM)|oeO1o`djǰނXԓk i4'6OǏuyXrAh׋ 7|Ttv}5e&h3"x7҄Sprhh4ekj^2b5f|^u ^mn L##;!y@9G"k꓾e&kH"dE%mA>U8˕CJm8}*UC \345πyNj#Bý8*tenA܆瘛aW{_YPcsIL?ErIy.vQ$ 0"=1Xcˀؘbkea7ȵ0Z`t}U`x> MqY o|M&$mZP{_Kϳsب_CQ'@pZ,{]NrRYti2֍9(x0JrτwuG:PO4vg cNj6zS)Z56O8хɅ%F_[u!,pJ)4@jF|:ʆ7ٍ='.K}}?z̹qR@wLVh~MBa;`kbJ eV7͇^…r6ܶ6W?|n"Wvc[-[]k)TM{7t[|HCx} pni{̬Ioi>ƃԎ7`T$!!5P bN# \(KC8)"%N^{:8oEC&ɉliL Ne{I;ۡ7iErn,,d[rcK+:[ &8 4?̹iuâ`+se߬5Z}YZ&@]8Fc!H`EKqc9~хЗPWm:p$Ʃ H&h;zQZxH? xf<EcVNeTY7}l >tƔ8k(jGUM+Ib37~dꂙΝ` j@ǡۊl^Q(\ԐpPO_1kGQosN̺H׈`Mx@>OTa9{Hr94(YA"3 yaœC/ÿ]o;OXo¶ EAϽ!hQYwW{a2uo?5P.T/h-s1} lMOw ndYROy;iY(#Z&pbTNԁ'7kM]ɿ,f=b-J( Za9_)] ۡis8ҝ,oj?=JZ*[W2׌k-@py<cn,a&8{Ҷ: .|1$[;WA /ZyOnKzӫ9ex =Y]b&tiUv9,NU8n_5UqN{$86/+1LaYˑ}ҎTrykAZ.H4*Tɿ\YRj9-}N@K`W >b.Bμ~6N5n'|xxqL\kM6jcUsEU-M(x~O"y4XܟNn<( fPN)oF@bU,s?sGN~Zsow]A=QKVcOܒ  gVdr=!0`i9 xT .ӳ3Ӫǀ5Pa×!5#aV@#ֈCFp:R=pghS!+³&F'η4GouFe ݗnPM p:Ѱ6[b8$GCRxcp\=b rbL2\mJC:;=슏 ?S+nxLl5dC%_)܆4"D.;Y} ej25%/J J,~1IF{P:@pr'μv0F+OԻiy.4f%n{S5HVU֯ 8&U(n{ngH^Xb{vOsUxaϥuUceZYn鲉LmƊ(Yc }7($*&'X4+CYVPJn"Ӵv]5''G2{h|KoIRtk0 4jMN(/MM$ͯ WZA&@GI\(sӊ4vcSUY1/ , 6VoS N zr->W[g#ȬmNi:9$TE6e ?ʌH:8?h(ȰU2qG&{Dw: ]Za?5jKB$#(D7ɺ9tcc2uSv]B&ؚB3́\vioX:ou js]ZAk&01 /96%",VlO)x!]8%ع !1p E- ⮲>\ v?fe8̣#/3cp4VSlСP1n!JX& '\gu!dIp*⺷?FQ'$j*>I'@-vMkl 7S8ҔXd2*_p) <6e7YA:!&[X1zcqHB1fhVW6NY~TX~tyaq3Xu&mZ jֵcL(U]HWXq~tnP90H`4>Fr/܁!3y m}oL( 5_;cL)Y"ybbGn&}3Cޏs15M|> >5T4n` Ua­Y<ZQ`<'YDyDY\@ImNj.VXYPmkR0d9۲`F,peu扥[P~=7f!*T[ E ɠM6XTl=;R:A'y9K3 ;|~`&Q$\_jXڹf xx&Δ]%s>ĭa( bbl*zl me{{I̖`];\ \T(ᢢ&HNԳH$#'EIm=ms DQe/+n7v zISA·*iU.nw@:3؟\=;b nwvq o [c&=M Z*1ٮ_s% x}}{1 FۅE|Fbrc|WT{Siq;wH1#'Rޭ󢻵둍.[piTWIBx/G&$ h]'$uD 2wGPv)'@(| m;Y |CHcmLbG/|qv+42@ѩgI #{=Zg:1ފM鮽R(=Ŵ uzd"eL\yY@sD7T u2 #iyo/,j> hӪrn5MhO9ZMN@Qx Iɤ.+*]N̍w`mopeAyW8zM}ٲz)1Y*ϡGt޴~uoD}7|ޗʶgg5GX{6p$=+\k+CLM^lς\Z+DG6M-v&:jwMuϣ4}$3u%\]rˍCN1VF:hY YU (.0[=.l KB0iXw/U?Bs;mz$׸@ u5nCoJ{'TWr${坭 ~K:BfNHU c&`Яxp+8keVqKrѵey&4/.Qb@O5N˜'8iqO.MJ>=_4CN̳E'|_`re/IXlQ ppSJh9> 5(.Zջ[\JG?:nP?3jDKfH_0 M|#n^_/&uh[w:(gCɋ&O-# KCA+ 4ZkR+5Y35 ;ۊ0k~wSW`xMbsa0? }8Gޝ :%U6`!pZsg'▒8C *3 a$Uj$Gze~ҊԞ8& Vg%r k:xF=Sl]A^d%KO_yO*q׎J \W+ 8GJu-%/'ZX:J[,ר >H-%9gGYD33NmDe:kAxA\=m|!UV-4n{d~P .0i a+CK>M0n"߿U6?%]ąvN"b^=IYYt:Yu NM ugswY),Ehtȭ>dzlT9[?a̫񦪖k'V"ZYR4}G\DGmUJUyQ^\~AJ0'Qt;Krcri+x{mbCVEL0 =4 g'j' C#&ܤ !ޮ1w+QѦ/q7nd^B )4s]WADnLKPaĽD<,c?_)11iU$)B߲#\[U>F!7r- EeG|iL }/Im&:B]M61)*EnkMhN]j!.81K#9m,iw5hII0OkTY+Л% i|yABhO۵|& $^:6r@Q波Pd|]e:lw+XU ikő˺ׅ4TDCs¿c55^=+,`#͐\P۩2Mà#xd{AvХI;t^F&26|0QLΕ?bްߪ $FA0ŶCo8OcT8 A]<Pw`H'd|D78;y0owt-#1ې uv}%R8ˏ{R~4yʮn~[(p&=b;+}MqdDFN(0L"D[+ʰuq+aZaŊZLamGiS 06It7l,-;ZcSx#i)7j̰p"09/lF|gJitk((7?`߭p29~Lv߯hqM".s_bv3SSn86.\P~̩y*R+GAd%^$uDݣӝaMګ"V6Y6z-#4tyTP*MHYNc] lw0z}=o,iBj%1Jy!m2SM{J˳uSrϽ@*e=;;pcq5K8/.JAxFup;| ';ʒ7 !`|~.y.+xIuy!5AO\\DE4Y \bۂR Ì R~q֞KҳK;亦_ll2Q:#h O Zr_GYFi,4ؼIdd|nh7c(ḶCe+i7yNj*cp1#CD#(2!',L޽C6&1o~oJ2?څ/i*%-_In&.GM4#i%V21yFzm:W\Aw:v`S ݁Žo)`W"NIYFJ.u+4=erR=|=nJkٍfغŸԴ'μ#mxi{O#cfEnb檽A;gfIR:N̞qOQg meTın~C{b<;{G@W ĉVƣ-a0 I  YS`1ZqN۸GmhOϗCΛLbW:akW!Fkf|xw\ pO0P@~ [ocG t]fXԍ;%9!~@-Gi* ҵL!Q>+0-^劭â)=4!h \&NdiNKD|:9e b⺕SRطV/vOb P&abmΑ<#DcJxن ^ZfNb?hT6JUHkjԄe$r::z9tH)Mn)tSZ᜝3H[Z֮/J;;#K=4₯pj).%=|G7_n}F^Ya"ޭq4 Կ(P(B =[`lgwNsS59m'2NB6wW-bE!BkL.Y3kLB\L7,MqX#Nz48-acX2VtHP&opM8%:W /r<7 R:ipҡm\YZA:BZ*5qܯFjPQ\i9ڀ Vyd4TcH6/(uE)scFBƿB&SHe(}=1O WY}Cb`%ޣ˱\:$FFZs1y6jV]EtqߋlcU ߾; !8dM_ݷc Lam1ΝolwPflKI4,͊?*0$\ D؁%B\ě2Z0 "*绞 T2&n4?z&'!tDpA3 3vZ a1-ݵ|H\WX3]0nlPm_hI{_\vEL%>Hiazx)E& l xI.10?=MՀP,({KA-$nOsl6kpsn64oJᛙ2b*`Of9J2cY2şDr2Rш3=tT`jK "Ĺ$? JtF渿F\{c .>Yz_K^qCaњ @RKޢZATjŮ,~V< j7Gqc+y7'uC]:Ly]̇ຆf+ҲTd"/&gNn P\_ej@ПArQ2Q`B ZێS=|5U^>ELZǒY7d#!1R[ԬƙA^SؕsS J0Fؔ^_@Va1l\F(i !% ]= e??ok pMJհlq?6<m5R&;2ԎJ%{\#{slU[&ɸSŰp@PFk5Pɵ_OHI9JwjqJy\eSYŒHJ.{qPI!|3lxR-qھ60!e=_p(?ǽs}SDS bRr$m(&_wi,Pa[ʈHP:6L"c x' f|s :UAFhl!ߑMH'@7FCVꔅkl2Z zdĭgDPFbN.tٛؤI:y=)z'nR @%lfItխ.z봡'u'}O ?z$-tepŁ-z'Gԋy}GT ,λ5QKїk1:E.T5N؜`P^CљIŒhkB(duϘS)Vvh|G`BŽhCBALp,җf7U+fwcY\ncC_ݎrϴT8]s;b2Ng-4vdT>Z~.sσ|ezY`~ԓyHpd\`P$et!m~yո U C<kY2R] [(%h[4./!4ϝ ރ倉Us- 6f#mzP%Έ^ZVc)ǔVi|ub?Es>A|c!fmŸ-I]١F!&qV=XLwi.c)"SisXy Dρ7QjjM?Ye"ؚx}T΍|B%"D&UwW_쌕V+;9bq>3gK"R =8B ghy$|G 6SP\:iV6047-D*F"jgIY ~[dTMhQ넔nII%tqR/Ey "3Le;NO}mWľlÑ͆3eϔsVIקH"gPvhA)\ٻZj+~0֎K7BL2DJ֧z+~Q4BN8oꕰkjTKj=EuS-kmpE'.c^B1z6DW%iO簵 {8ȻS/;8ZEI Jj 7KW~L:PNo3Ȃ4# Z׋6ۦ [2|IƜ+, `e$D-Џn~Я2<3s˔9=aL$TN09`\̆Ű_TC]H8l*ܖԐxT8n! ovt:Z$:ڹ0l.!NOneO 7|uzj'J1 3bV,6}F'q($ \Y!$K<?zބTʸg"mpA]~9k(rC"p_Fäi,:)$*!H!E>o& x[$'s[,H#R}*&duӰs~H1RD-FH. FPdB SbG^NA.`gvaFҮb0t ]t` Q9u6 Beaih\kMR_>MSII ,BG :/z&f%MS=Acٽ$z<۸i˻[[5(^&xҙʒ@%VhU2jN-+ oiYO<{HfTv ʆ!c"gEЅqhJ=Y]Gaby&SjBxŦ1Ib m"ub6ϱv2n~t㘧̐hr~XGG}bG~چOngNvY@ 1 (>*_`_]TKT9_hI9:U!ȑ;<G.Zq[2c\2ʲ~ 9R'CLF _5dR]^_.<7hSyi:DdSKiqgȎfiBmhN.e=6'8ٓpe}2TgK8r N.Gɪ;*Zd%Xx#5^LZfmߦqV?.ְ;K{G&)37928Xo;hsz0G]t( Y:@@jo-N=^1@b"!6E ̪2ⷕFPѐ[\\cJ {\4 @#¨K3j* u**xnv.[}:֫'xf ka-4PL2%'g\J.jh\E0QCCyQfDݬC~}^@H^Rԅ!|9k_ O$vw4poTdl__4 -Ek3ΐS(ty.o\WYXjv/}z=sH^3`ѓ]Y ;b[ ]5^ LXf@oe+a!czvWc8剋|Vc] *hX]=_=2 A&+ka`,h6c|sP ˙cRy߬\* ~H^Vef JgR]woHγs2keV/謵4Mz4LdϴKԆRʃgYtM=j'O; jWz,RL"_9;jKAl"ge5L>QT%|Ud3k>cN]/`>jǬ=SxX@UTR'0^Fq1 ̏O_舮sSS(F:DM'M[wYI'u[vUgdG8:z8`7vwj2R5yɹP\/;_#F^ pS!2|_H DFӅڬ_ctW.$$4"gggl; D f,_%,+ObӕYGNsqU8R@@ӓI2S}OGͥԕ൸g 2DㅆA|Ħ>═ES]7"=iMjJ뾄47DZ}T3T݃H/#yy=QQr̤SG Oمuߊ,z!OW:KK,Kb,s9d{MhsŒX \ $+)JTyvi1,t0RTy\^%h:CBG}dֻ.op!|1Q^LA/9eavë55[v!tK✽Dhe3pH? M)x " YTD hPt'XM޲țC(BwГDmS=e2xKtFb1 n)R*/73n+|X IrM8h/~pIgUP ƌݠIo Pq|& ~rRT3 UIӪiTLb}"׎I+ 2le4RG~L!ʻ)yf괘c 87m"x;|S@IY5+n8NfXB܈ 3Eq̢klaqΪ:⫣lX!K`vOŗʎcjA'|r}nH<\e~!~…"Q/yq1[\.Qe+шNzT6N<J2V8znȮ\tl %{ 2VWG)ҧpӶl@ ?8{5 Sj- ت0瞡;Ka%xwH1۠@ v~Ú" Z 1ʼ6?Rl!"k>\H |Υٹa`A>Y6m<:tR]|v 䦐' (L,1KEO Lo !@z 5'#hDFO#"~b'µ>iԤcWYB@ DU#-J+t d\Pڮ.f=+pxWfpq4m1%}9wm\Yñֵl59 M ?7jFU*4S ;.ٌ+2lyXHJ$(^av†׸ m> 2sa)Wș+Щ?4Zj;4;X JPc#iKGȂ rLJg QE~Ƈ@SNkfPI;Z`}]4;Q/}:u`|"7O,qQ0azyyQqFJ7yoVۉonb #ǬER@0!b"rg]"[kR9yJoTRi,Wo٣C<mnds0-pw4;xF^mݿ[a|GխPqnx٪7 %<}7E@t :6xQKEFu䬜Mcm@'5ඓj[G4 LD()Edn/sDI>Bu{{8ȳiW82: Jѧ::[+iX2 {_cF P6m=!R&i,8E;8v\9Vc#ܒ2zpzIC򽍫Z >AS]d?ZC\N!˼_RŢ Z헝K- vvqǖze3[ҒeY7I ]Y#+;'gD~23[[h!F4{d1 ȰǙV #gg M~',:Cd'ܜy1F̖iN!#aN3jό;sa|tEC_H@PnfnJ`fuJ C PZOPv.ʬ`dRE'jB4A^ U ɢZBko%? 1IVf\Q's 2k5>7;^I1"翲-"XԶXIq5ølϜ)`JЏ\p'3!A[J˺Ϙ&kHC)%^Huh_ Ҏ.[~" <뇭ˣA]1Wۘ6GE7v6]$~%^{hΟ 'zI ;}K-]8><4+bKt>Ќ;{(/šE'%_%_,OЭ))W& G,|=F#SC2hm`{̨ZVBu_ÐԆ_ig{k=d923eI,ß5@c*L('y ySyFô,]LuґHUɞu*}:"' + 7G=ChʴQ| l œhȉkQVfx|nxԷ!cseC?^@0!?^=>pF89 }-iuzçC›Om+!gb%k*Gb8% w`;mmI;n-L+XҔ '#hCp Xר~ axP-S- r8altҝ"\o2kj<ײ7"AZ%_!Xaoм[ӹ :6LLCݩQ\O׈mlt% P?wITW~dn<)[_ފO^TW< {6e2,Qڻ)-9q@7πFVB^AewHp_|rCM*GiTSyO/=iSIb,Nv x1XvB':?=f߷ٯBum={JD X9Վ7 Bn $"Ccld,z 23K7˹DS=G&HH>'/v4^&p ZFG"3iiH i-7%Yޜ!0BU"~Ч:Ȝ[K\Q'ܰڤC*9/OJݯ>wѐ`L1r?P>H8 c@> BYXI\;qR'J"7+TMcD(ā^!wU[Z1̤dXV*xr."0P&B]d[<)Y7>pM`4X!aiU}K[{xHuZ7NE3i.FZ' j3 λD!y~;.E6蜟47M|T;3Wsl %P4aJ.UdknwԸe[<%Xo9/KE~5?\T)wM| "e*V{EAc`|E2kXgB,8F׍T*SD5Ƃ&NExf/9Cf'Q^Sp %xNƢ|LS ${Zr!CۤNQ]"?^{VZ8t4f,ұ }u?P}F9/2F_ęj{QǸxhr4inaSLϝbqKCWI}Q8dI [d) \:8o͠ WG%ɯo,u]֟@"ۣq<6w}r*\ +㰺<4 B]0fbOc юGJ( B޾^w2d5eQdf!{pq+MdhoʔZF-FIBO Uci֙-^֎X4;4pb. +u" Q ;oצ\;qW0p[i7d.w=C2-%d>p9U[:ֳ5BD[].硓oӴ]}IRZ0^,g#nwќNANF)m۞g/ J-5p\D6y 'zAO 7x$`,5joţlw4(SBwMwoC3LK7s,,3ވcBE3y}Re[.V[qҢmca5|f=ͺ@ 5<p &9_j#)>prF*szXX 3g3BLP]p8HJO Go19e\J#ň(X]1C_R{h)Z iV o. >JReǤw圅~!օ)GVevvRPIQ堏IDM-e/0 @3/*|K4DMZiYLتy$A|<3/KZj^IQX!s-1 Ws<@TVKZ:[u8ba>12Դ tHL{v4qׁa BlsyJVtҒo ^Lq=lg3D%`bc^ׯ$YO.z!RP刷 ꣪ofp(¿۾y?V8cz#N}体e=rd./EVhqLrm3zri R;jw(,-xs`ʥmѮxk"䋠r~):#MaWOc~I&0nm7F3`UÒ'ޤ v,Fξ# |=$Jɠ!V둸*T,`7xGsK|ZoSRP׍6}ƹX:cA?<[.T*ѐ;YFe҄}$rTPjG 8Tl|_GU0$Gje41btS|:UPK%xX`@뜼S\FQ*f7 򨐗{n\%~BHBrcnF7IgAgO[$ ,d)e(atՑZAپo(,=UT!L/n \ݛ\P JFy ban û 8:k s|5aԖxbgV2>]G`x1UBSRT8%z=̐aF+k}#J4^34r$u&քhDvbJg,l'dy< q1.Cq?{pǂ|V TW;ZA(>Glx`EAyGQ_4*ʲ{>ED1B7Vm9q^E=ϠLd+e(ED }b{l)b"O {Eyz|=ʩ%a$<8"ki]ƞ[ܳp& i 4+*Jh;syw.vhcMqm}/ed8Np^{fŬH @QyߥUS>N}GR $%hJFWѸNB4@*IffU ڑ,6-y 2NieϗGw8LO cSW0KY6bFWL0,O-'VQ+`0L<=2CK:0{:2h )mwoëiuU? j: 7 3Tez ލd{0bLd٩2O % m.,?7UTp\D=>fx"GYt=Wmi|/[1HLE{[.nD*fPPLYdWuSh-( zTr$+ۉk6ebPR:7~F 4sJAoCjxٽpsLW&5ZRhV8u'0ei%4ZI~}ʖej#ףidP{3*pz+rcɪ+BϕUZH/ AI2h`n[ERPρGӸExc3T2yOQ4&{S$"%q ceSG]EГH4c"A٢~ڵcm-}-OJ]1:(*@<,lS$셭lo-&"#B<}a  Gd^!;zޛ*H¢$uq+D\O zU^ orYEk1G.Є=C1O>yʼn H`}uc{O oqTdewq4[vBi#{A0dpQv8+ںߙ8CA ~[' ow4s zt_Kx, #KI=BEoP3lvB 1f}nbQҜV6.| MsWL3mVsw2 +=X"u,6ɃϽyE2 g6r~ G*_{I[J(A-.-B 0`*uɫ]aඈVȕMbS}qo.gWF62PYng& # q6i+;kEto O^&NEXw6Ϧ4إP{PHeHwzĭRgiOT#`0rwy,MEAMZ "Z 97DN9k{[N2n͂U9:,URQmq3L ARŚ) Q872:ls?Aa0z]vL1s D4#%^c"tHjoi6Tw&)Z5jJh܍6u2Ѵ%s_`NafZr5C6L'i)!/f)jPc[ڱ7{Ri|:Jiݎ=8q]81&t\^9WX|f%8u%삖[<!0^M&z\@ӅE" QpM}LR V;&`6gPW /FNV*gQ8Ai[8:$"xDd *ϋ dT|ĈڷsOFB 5&.׹&)Oac ܭ%#=}3qq81dsGXŮ[Pc`N]Rw8l5 Axu{A!a1!;3Cֲ&v 9Q2 `B}=g(FΏ8JN5bBɣ K݌5@~EeaϚO1)x(/SD JPooɓ_1z+gc3 L!?kcCGJAڗ赭vPPf.d&0Pe?Nͪ[̌jѮiw=37p 7; ȸ1rx~;+i YԐ.TI]H lRu8鐤[7kU8+sjBm9<+Jg`;] œ fE"°G+i_(I"V<>2N%~PCդ9 MAdp,F2&4DTc s#om#XˡA@$:WcZXżO+8#r8vKa<>Ҋ [ O"f.f[rO-xAic_G|@805luPtf z+s0dS4Cy2ss|?c7㖋GH(Be05c_%Ox-=d[D9Nbu]kvL%rPX`NύS `*{ʹxCi6|q^/(WjIrqR$M _֯ͅBp(rˉ}NbBh:)FIV.Ezmd۬ )'?F BŕSq.Z7 @/㘋Zb1f_buH 㣼Zep3wWl Bh,}Sb6w.ZT zmMQAc2]wUY$xKO-:~U B+0ںe;BIÉ^fDp1; Piqft8LĎMKq4[z^|SPc1V/8nNwV`5\oДݮs}e551=Wew/*mè*b!d1nMXoUs- BYmoet\{mBR>-䝷;PZ$b9ty>: ,h-(ha$?I/*E ܧno5M![gfJ|}s_<2wDRf5wGn#Do e\z3M<'DvWxTM&F}6}S$W:ɏmI#)5[rM{<2{OA"_Ӿr/2E 4y ;c) f0aaSĜ)1"00h2/߃G"ڰs.p3*{,3qT0ВNjZBA J%LMd6.2'pג1®'~'>8Vz [z-FYbq^XWFOBd?ἛTB+qԗYzq{:2-{[ 8ƣ&GcZvJ| V^ pCطMκ<AFmݓmާ.'C1Jdpm =ѸtHviSnnhQ۽˲i,i p88:OdN2$Td<򛣸n Z: BNK3utTRwxqn|^I.e:A}%b*%ūX| A2Z "WO u݂==ArqDsG %]f)|)8E P[㼨zxSOjcS t!9ƭ*E񔤱3y~Vl@t 8Cr/0ոumm#-a/̗ }+K`uc;vr)L'ܺ8L]UN"Zw䧽;!;`ErV"P$1:NsKf'Mk&BM_[RtfttF?1.S p63)paG)O&[q8멇aqV_CTTl[!Gk_v|=p.NI\nȹ/kޘV ~A՞)呹)+M;u*;lNx.ތr~H|;A^fAa2yB;є?2[dc_}/+O_C[] ʺ~i/G!7k'@E1T,%1}'TrXwިxL7#6EX7kj]*#? vmCh<+3yZ!ug{#ee+3Uw>R`Z ݁Q:Y@H׷R^X耱&x ˄7wO@1uAGXJq .# I$vnuA:o wÙ  e xsƲ{fSل*]_*֭ezR(Yʘ[Ԝd ``EW9O׺*f!=`*Sg98sM* }n^syT܊?/=*"P5lMoVtxOKu'}oIK-S>.do'T#6GX q *{S5ZТhU8p&fKZ2ɸ?N ǵ=*@&E보gMpX'*bD_\&"V;4ی>DC!j FNdJ胫_\+dQPsfe V{ Sʳ8$ٵ[ka3c7PGl ]r !$]aWo‹[ς% ؊6$66)8ۯ,3j>y_}1ZۗMn#Şwm(o WFb=՝m_\{7=:pRP/Gyo04Top2'nBG``12*ώ771zg~jCң!ȝ8A" :'v{ FZ=_@4yJwV t*PTi?+F^"N7H랥P .S0aR$&XQ+)Ctyk0Mq}O2Mtkd'6'Q=C8h_g1hfWz#4gѩ MZ0=R-`ColJ8mP $&B܁L \?;2+)/cl[@a^}RBlrνeZYcł%\xktZsgB3fsC,Y;L8[<';>~O[hiM!P16K:)`=H`;}rLJS귤gw:YS-ǫ`աf~$W fq_Ap:痌\z@۞1HG$",>RgeۆF-`8R(QSҪ>N§LXTX cjLa'7{5[Y<0Z9RQh\#!LÆ̇UT[P:dn;Q [SfoI^HĢyL7C+H(]AZ}5ІwiXn\P%Y] ,m*!ln|s+T}}!4hŁ7%^Ux4"7y_j1>yX8U]zv/W- e0q鑼ݴ՘ G ܝ&,+<4k[+,:ZVIZB҉Ly%a; 7O 4_ e>u.7֮&p.A?\-VW1NS^(_*畡jMD(߷cKO$+e5/ Xbc1 e6DtDUӣ ^&a[*-'~+F&a#ӱqCM{<%ܤû3'._%rC5Tbw&ɓ6rZb N V&Kmb_旭Aŋүp0F p/V cC%%7"֩H&R|Y|N kB5#!.3['ϡ9>ޑH/0* D2%"hvX+XXrSbs,0S@näYx:+z!5iU'QɢW$,VC~lċ4/gV,We`/>׋0-e!X_o4~TI֪hjykmͻ$ڡ \]ϴ-[**>%{ٺq6 IVAD.hVol͹)q9wNPD4iq+FTeHU6./8}xL%NIBx=q|y)6َ::6hs+{1syM^pRK&;ņ!x-,fyGxdaX9V|rC$T`![HcMkc(d3oKx1eaȫWB܅sT]AfeK#/E,Aml)5Xl \S~n[xa1;U$]?n+{4c[0#(|Q`7vHCd{іXky[7!IKcEFW49XjSulkv];|WiQY!Z/)$%,a+pRu@nܱђFM\CظM`Ez-FZ}@.mL2`#=6Ot+Do0k[d%9h~[$CrFi 1~ r y=ͭM2[_?)>:[e~G!S|Z `7KZUr;VVDcMgݛYqf#@~ mPOE)pմyGF FBPM`1.pADR<=8`5d#p$˜ZdvRyj޾@!-<ZGIWPjibRA~3DuSi\TP(7: t2:.LW>jər/6Ǝ^M֌r>ubTCBdo'ʝ=[`p> {?k-5RY'6n(ѦoYȊHDD R#<J7W"\ynYy==OhP n^hP Me6!0},8vG14V[P>CrT'RDA^slpKৎ`Nzh_6{X{+9PI0jZIJַݝ-5[sLageGV&f=>,蝸.odXD8ߣ{k6<9#XPy졬ué, i4S 6v:tUf&v:JxwW׶Q8@ygV^AçC7qVe%-tά슆DHԑ [* FU%Xь$lgbxC><0:opN=>자qs:?vCb `Nވ@g|w L!7cWA{v'kC.vT3pmEsJMch}U0qiؘXEgChAo6jP~JXq}r 5W zkNAA c2m|w.X> _j~k\ȳ{j4яZkly1ћXCoh52A=xǖ "UXij4TEV9Z)،XOUg=x ۊ=D^ i[7κzqdƴ"+*FM %jǜ"aCy¦ $ ;4{HthTgs"nAy@pdmny5t̥ܮ rI,:=oS9G&w5ҼіmzK"N *3 ԬxŹav^'qg]ˏ,՝ƖaR(,*֢PEMO"{"mewP hփnED]Zs(cx%9P{=D -Ą4m6CKqtH> v$WfQ !hw7ĔsDt UN~yz\Oؐ!W%{g}9_K FrqoA<@^DsH9%#~.áώ(L)kfr!ⳗDK:(ЋWرV#v܏7%צaY4yw mTsXB)*PңJuv'5V|\a2}M:kO+ڛX174{m5ruRnP7%ix? $p*uੁ}Hg}3=Hd.g]rSRvTZ3D 7Uz'SZ}F'V=ďU>!x,nTLs kQe߃QU( l[DONr3q+C-O$sjxl$[ݲێqF0luk؊ ?!vo^qG6 CmlĠ̵\C3 9ĈaVkG RCM \VyjˊR$u&<>{ 0,^9.H߲@"iX.P0 Aՙ+K^e^%,yDž&35F誨6"..X8ٝ0u/$ENB9nֵ[FGsc2}u;*Ä Z2H^&\q Fߪ}(z I @(-HR#m҆\G)tnJkq<7 >v%k>h7ŶpU2fSR0$R [E}`@4AQ4%&mkISA ?<^Er _B[mhr`7ٺ [A C"ړMU+ _W)&pv(ΛS ccO.+#l~g6~ÉrQhU>yhef|?α]/CS08 YHVCieaKVV'‹nxj+ F1#8 8FI6t6w 71uiݯg3Ȁ9[/VK]9*q#V#&l\Z2P@XJb_ `M,Oe?>u@{ÓWZ-7 Ԉ$h`?? z< gf҄e4 uRx) Ȳ~ܡd R_c+l/6=:Bnm G|:#ٟF|2bQ}6&ÛlVwݺHl`G?yV@~k<ёR' C)(%Of|RfʁF^؏QPvMO dnF,yY/1s/ ˟5JF b5&0SɕX_yf$ΎjۉIX '؞2oUȃ<*,Ud$!L/tc=ǯmLTh_ =}_,?Uam"B!!m} 1m%WfiWR1 }QWo㡦 n'!Eu^)HDiՊ15xӒgRR* "dmhJbL諸*Q`.s ;},Ug&)׊ra\ I$HjG|WT,p1͋q3rҧ^ӹ_v#A#*wF8|FrѬeoqWLFx32h_B~?U.^ȓВ5Yqn|s+ ^S>,Ga`˵iP2!y1iep4m~+ 3c#ҳAf5PIаALj 3hUI=!?oK䦂 [ ,WoǾek%BE9" f6h3gCə#3$8ښ PI$<E̫I"Sx //vg(bq^oipi͇.wcPŪY260D NE%eh4'ҹr (lC6F,?6Ld$\ SKѹk ߯te߿=gً2\m @W.V ; Ux^PWVp>sJTA9]?zA(cQHf!B#nv3! /C63i2# w [Q9w`ihm>$Kg{5b769J ~6!&3O/hS}b)P:vR# UoO`b6& fr & R.{vZ^$!8@V:Ba`d<4ډM`v̩.\n8NtW q,N"`l,D\9Ԟ6TgJo{!FVysW }VÕwT!O!"k]sj|YJ ;e ط-V۠Gv`0.@'jpS?a_J95EШv).gym&1B?*J9_k"\P!t8pWxJ_D|5 ?M>3?eG9 p+F_E[JuPЛ(ܟ-Is|(7P11n zڄͺOU϶.6& I:ۢw iXY0h~qS5> ynT4 M63B;RM zj8 QR"i}=u8!Q=N~5<-|^"aa<DpA e13[h<* 'Mо_ _;w)K2zY%⟦ 4mhVSCMKv vWP[!^>HhBs>TST`1IօqsojM"D'&ˆA6Pl6wBtYau|ʇ*l?~j``RZ_2v3F5 v{L\F*Kx}o>Y]еl!gaީ2jKsrO/L5<7UoSe7a1j,?cԾǬ IzjA-,-""}ϴ0]pyw!cx`:*NQU|3bȽXwa11 [L)xսн\BhYztgM#W:E43r(B;|:@7[MfAq i)70h|˯@5F0Q d%\Y4AJZ# .B75X֢G?.SVŌA5+_@YY 2aAPd JURU>yDO@xڥ {Qu<}ޅ>X⛞eThQsw1$\&- KIɮ79QmwchC?H>/Ul 3w:nk9uhT$ >D HoRa'iJh(f;Rې* K-(OzxQ$m龿ϖWJ9Q*,z_LLe𼛌h^& ?yz6<)p̀R: DE8d:/CQIub2`|qVֵQswtL!#^L1&߁"xW=?zd-pH7ٙZe;10F"TT(g_xXqO)}q&Sqk?xG#KR8U?r: V/EpJ,Q?WF__$6*TFl=8⺮]G R?zq#WMR?B2u0$s"u5F7f4gޝH@|o+}ovR L#>huص=ȉł?%߃c`cž wK/-~Μ({2A+3Ŕ9x4?!j_P\yǣ;|e Ut @ IMɅ?tEVO *nulr ORO%:D[;G(ʒi.֞VE`lLBC 2GrYB@=`@(̙Yq`v,X,O.7%mIbpȎT18%Cl%ߤ|6([hqM}ڛV-"jVmt 6qj编}Xd嘢UuTSmeYJTz/'gsyGeʾZG& ׷=H _7.έqE1O>zmvu0yj w *H1`j"ᱦeH HrV,W_ة$}dz(\ ֳsR%s$=2Qg'RS4 oyj$QHUˁۆcf܏k9kY"#fb5 Yނ=}E *&+3 i)hrAI(J,=kQ+Q JI}K"%1f ؕVx'J^uy V ǜ0M-E-`~0hAʉ?3W>D ?7 6czN&/B=4iߟBc^ŠK}hZi?K(ăUז1Y s~j B9{*=W)su1>G` pQ*tިr1~cӓՒ^@\7*kK8:{~u)$㉥1 QOOhDo/"Jm7ɖ&Z\UdgziK(5#Z^=3j3 ]S}DBHaZX׾Ģ-[ntL[%CFλ 81XߟbBqsH;/#$tU45o,5a_KZ|}];YF?ı Z:wJwvPMB"I&e<ͥ Y}/Awoj\7?Ҳ l1926Ry]uk~$N>9ˑ\"D]85ۊEZqoTH`\~+y H{:Fݺ#yW U^oJƈpU[:B C&;&k7؉ s4p+Xu{kr{N9* +Axߊ3bT>}xs])|_\VZXJk4:_3 x)1M5|a v+pL;`{[5#Ҿ_") Օ̆0iC6ho8RLduWROXdhK&=H=Dh,Fܔm-I-0s?MYx/=A>OL%XƮ\݇}>.dKKv3tܪ0*׸ct h򌂹liGbȫ3*h`Y8LPA 5+ ͍'C3޺I`O oJ-֋9Ӛԩ}Ebs]S2.prkSCX"- O& L ʆ&TF*=$ɧ>%xd1ZNչR=I8,k]UDj"$Uoyv]W*m$OHe%PX}F|2ìR靑NdQIf򚘘CuH\)BA9laCDURUw @ R.aOHsmY*;&Z5ܼ {>x\bQl} ]9/rw`6YŅmSi$ek $a/]N/ y!w7).,Z%&É3Qt#AAPaݴt;rFisӴ.mRGr6d@.*t=&ؒQ[h$+)x NCo N̪RZ{h\GvEXgfǍ{kDLa6c(m͡>*Aу{p+) z<+.d "|=JM@:.Ex1c{#wim!0tV^S\Gń){9]%jỆ{N8QE{׼ykMۢ[*Bt>Ms w9WMgһcbR oa|ſF%&jM-=֟JKx8j%Jv)B*j%jP+|\:)&n8)Y71d2)!QR>Oſգ?Po(IK?S/'v:*дnrI" ?y[!)fv|qNPfQ^} sVC%bW7Mo$3&)Eg7xr2_ P2@-q]8W~98Xc>ܖݤ Dj\#+UqK:%@;*?^sIKm/5e*-3c2= 786;6Fdf>?% ߴONe:q 4|D9;960\l1ȁqtw^Bo`QfL}N  x.4tٲrN >HeZW/ڴ[8"@Qv,l Du҈ץ@Zg\em]ٵKړKW|U`NY3^Pwqq}D^Dj7bL|.X 4rjE[XhXNu:yVJkq8 9sj %OG4z/-E$^y+^7Glgi,dA˧j,(@Հ I(& l~B09vIiDmQҷ2)1Lf@A  nn3x8108a٣BfqW[3?aF `ʕɘmvLrU ߧԣO8mT8Z6e7W},`ehvOIPsC0D x/ԪqK°uYӊG"&!JQ'sSŃ1ֹ^*ՒJk`D.T%̂Z3Wک4nd)O]u釹uGxxEb_Tii J<#;8nFw ЂG_7n`ҋGpQ1pq.Mnl;Ao1Xoa\6 8uk2$ ?M";o beX<AeuVZ|kUA9KT˩zϜ(!qr@zgOȣc)z'>r/tI9g^-w{ϻ9ڋtng] LԊZ #Pr54յfb_*5Mm ?EL)d}2 @$U? H&Ѕ0O"oN43GOyP9,vg4MvB&޹bkXG`z^2LLA,gˤ 3o .0VԢiyJ&_1:[z/qt}h+p.(?+OhW\OK:,7~[T҃> >BUaZn1*V` nN&R2u]ZK- h y7P;N}4@]M~ok̆_jHG3`햿mЌUdWR+N}Ą P`:"A4?* |vD_ \ӵi۩9Ewh1Y8iCeF`bk/}T5pY yYE-Y gU0ړx p>`f#vHzɹϘ=90'V(=xGZ(+$Vs;yM}1?1.cM$  9~h,o`~C&i ܖ*KɔF &Z |og)ڤ/T4lf) x3DiZt2W@Zt )gȜy{`lj[J.!ZT_Wf[V:#quTN&[xXg%Jyn+͔TNAaeQNkXNOc0 DXu6.{6MF(bFzc]|&t?శ`(i0v9Pw١VEa]lq}יOwaiuZ+|3)0^aSfnwW}f{Ds9 TB1>xM׆y(pI.BvHbgB֜ܮ<K0$lP9{6>ҍR0hcrgj.6^ R? p}T5tV#,bavLO\ɨZ[诫 g}r_>_3LA?p^=}B z:0ZK.ƒ%&к%8[U% Z7\[]2-9۴?ɴL#Ҩ围A==f\#+8F.tuж(gb^d>@R#Hk{1)"OGa%^CfkZp=ǔҒN-=^>߇@2rQFE"c4N0 ,_8W J&1Ȯ!K>jڋNv(jܵDV/=FӸk3 Ɇ>jfS fۅ*̐; GI)bn0QBbڍpW6b:)I'evo{%drMز70>*!z-6\5HE]+.\g@R4od1)b(mu:KZ Sk!K xkGZ09,itcz#/;QE.k=ATF:W,޼[d/IjެnJ ԗH&L:)}%fZ=ܚBg n5Yd,+Oo3qH덞=nDg//ì `͊<}`A|KHq-1ݍxՁjj-ְ.v,#̗?i[)v~G/7w8[zt >v &dq5W@c,.?N8'.opH: pγXUrFh&]@88g7~{/|wy"<=dhŠG>D8b̈#r5a,HlAV!cg]t@$]^A*Ĝ<$!ߣK7Js " V;a:msIg%/73۰%{.oGt-5lW Љg)Xu|ѳdH O\T Oj0kQ6`˗(SXao1 l\:r1H#՘pLiMd;\a7`Pkp{Ju) q,LMe ӰE/}HIRpIG+gf3}x`wgTEA}sW#gυ ӝbP@ J #x)pPz>ab*ILIӍzToY%-@JQ (| IOGQ2֫d^]6#B{24u7M~;Џg*ouhJ>1$ b :T9zpeZN.PWw;`@"U>}:')5چD(1C˟D8y_j_|MM:ecKgAmI,ԚUJwyf0uU 'q>f{/ k5akH@WD؟̇FbI χr1J䧟Ht>NX"aE@{ĺXz13?dÆ_JJ'^Dٔ-`? EgCo]! 8RX͕+1JDBw[U|c8$Ez?˄&mh%-/By|{ 9O,?[;ݦl^@3dâu'_(bO-RKZWT9!E&gF""";aDnUϢ&Ȼ X$FN}ѩ-7BAĽ""5K]i)yf\.(=>ˤV6Q d2B}H[ƳíHsL2ah`.4,cyrddWU7N0фņ E6r'瘨m,C:~2`^e¤ xH"w&;[iNg;x*l3wh7J*`yU.G=_OHjD%-]3Ñ϶~Z m'}3{̅'eR|ZSW`uP ̅@ǃ܎_d9\e'iԋ#Bt :r&yK1:i)/:ƃ?ꊭ |^:&2ң$¯6M*bJr% r;ܡ<&IAqL<=C?sui[wn핅$|e99eFW͉ "=@GfsҢrP ¶kU zJ^)"+bq=PNcg`19?r:'PX3@m  J9O@M xKȽ%`Km0$QFȽ+0_yȧq0Xn^.v+M,)bGJKxjcfy >-jRT=BET^[>1? u?[FWX>'T7&l*6?C*'vhx[!m jȃ_c ٹz`e?Dcq"2y4w̖LTrLQ ~+jvMr=3KdN MD,6y(^fA={5ظtOOpQ]^UڸK/+'kIxdA~䱅d{7foj$66ؚaGrHH/eb Pb1,aLl>=MWHx9ɅI*#o<ŎU69N\w6G0'y %ؤ PZA~uMz9Xw3Z@pۚrp-_8'uc>4~qTˁɭCFd)Yn'*`pWES@^n#r ﳚyt"/_jv7@Qz(#lZ@Gf,( =RYP/D=٪x S'$A6{{ :t~&h YK5$\H)U( v+/CaK{og.њʆ-eRdb = NSJaH4J}O{@Ζ9G(A.\L7$IױP4|:B"OGV]^wAw0mOaりWJO@9sÜڟ M|_Ԭug#7R_!Kr}3obpxdnsJ溁+x%ݵh/t/1/S+2{xlCr(?!Kː~j 5PMP'z =8/3Ԓ:ؕW &H7Yu?+P꘰AwQytZ(Bh|U0lDݣKRD({x޹%͸Thh7SYh) X+^&hr *w$cz26/GTgz[z M]eC˼X︲ѧ\'{z9yu0^AƜ|Xp0ڙih_)2 $Q̼Cr}>U@zLEN^"~Ğ9 l1Xyپ޹ q{]`\ARM+.M9J|U唏B^bZ2jEֳs[j Nz |,'!vj]Jj=på1F"^`xbWv3Lh"`DKmIs4:(@j2WBat9eKೖaJs:'FSSz{k &%>Qނ&,8C%7 N*zuXfy)`﫹M mD(&9l֥5ŽJDQQUh1VN"S+lt5އjnjI-2c*R޲`[_Lv0lNq \"#!$BFV-Ryuy# &[K })1eν YM)fgT1 l))jC+4 SV*:YM(Ӿ<G7=ؚh{Q%ed?(Wrw#qq Cg9俰Y=qT}@۫|kQ, |y(r*?joʽ@u OV{WuVN4hDuڝ'ӣԩhFs:o)% .!xe藝V+rA!aaIm]d(_u 3:zkKAIj ٹFbvodE6e^jlK)ОV2봖QQ%;J_]J+2aEEooxn̆IrD7{ WCjzg r*tE*gs=7& &by>ID_-J%<"|NN浹*O戛"- hb!7ede.ۘ_!U+*UG'og64ƏZo ({>8F xD)xdxbk@ԲHCA]KLj~(#E61K3/n8MviwuBѡ1`FA{s8xNXZMlpoLC:J&c+db(|iZcb?8Xi4`T zr4/p4Z_n! ΄AE 7?Ѭy|$Jw "e.KdZsX|1/w)T;I1H5$7PC!Vy&_A,hv NW4~ >|vF"o1iNudce'JХ_.h B&+pW6Xl*|q(l.3Ymۺ~4%bd xNXXY\p/͗7%:"HdK=_r991RU_yz~<;L!1s[S~.2VBby2T%V/q'^fM@uSutwzME΁fxA촠 lN\Wm5za+Uv+sxg y.w{?4ikZ(\U'n#0HFFj Ḳz^:Sܸ =f j ǝXeg"}HEIv`A9J tv_Ʃf({WY$?jN |&Octλoc*xVqnOi΂?Z@G$zVz~Z"g-B3wyIT96>f}ʺJМ43۝!)*,Uc>_D|,TIr%)l^^nUē7{EUi$© GfcgEa Ej\[9G蚼 uevuxW8ֆd^5EbHK̲<3%a/AH&$*mJmª]A`9]<XYrp[CcJ$mg޶a͐nHCA7Tx3эkU1/IU'})2Q]2WR,b]Cx7|\{JsJKgRQ>~ j6ÌћĄB_gw@R7ggz\Wȭ^%К 4ScSSO|[td ("0CE#|855=|N'VtTE-}q yJTJ0 ]-&茰Mx1Z!IZP H^ ZaWhvZ{2 ͸m(ʨv"ɶL ؽ " ׈g7PGW t1Fi&_[YF*}DV#o{t#IpDbu@16Dj03zdNx[#]zz,vK&WQ^6"<4A4OIhAp27=mv+T2r%ѵsl߄J}׆2%cqsߜG>'G;@u*}T>КAIu||EWe2m6Ȕ,cTZ~X/҈M&*,Q1WpnsTd|t[f_Hլ8}t=LԌʬ(6ag8).%7VmnOpSP=8j3:c{# O?ʩ"Xm7XOIQs˯dw_B&g#. 3fqpcXkN+B3 ><倸}pިO<ϨvW -(o(!{>o,v^n&oX\5x{R6.Ja!%dDRS:Vh:W9 <%JҀwzGo'/lRv6x9%X#9#ō#3ZĂ#׺|uF"w 2UQ/ȼRHrYEAXYe6ByeqP^ُ8^*4Znr(xwmaG95vv{^,"~,0S |"`*pJ}aφ_;r:uie]tl^Tq^= }_ǛmfPP5#6 uT?UYռ- k/!z!<44 /A4Obd!P^Z7$S^:c 59'PfLh F p,*몵v.ٵV>(R|JBmxݘo/#:u4̮œIoS#D D,4 nC å wH4xīhzZ,!{tGIQEF7@64~[ #h!x=i'] T9A>?u 8kwULIY(~yTMmxs7$_ؾMQ̎qC }(s\G"i+o3;-/C<=6Uzz4VɰgɔD}ޜU nO׾p4#0R ;Pniq'N_͵?Wō%f!|\{,am#9͠ND4q KCU<})#qW-3?1d59Qc佬Sݕy[zRÂef-b`w_6WJ"yt͓ruabDxعr졊 q<81Y ?bGUQrԸg6L5kdsOKpXJOvCk\'@ ^l$h?\.e?,K˜e,T捔pwM g;;X 3߳R XHo|w6Y!⠖JYs|A'ørP ^̼KR,,zL9َI x^@sJw.iğqWމg6Ey0YNao uC.!'W9TNe'pUO $tCP c[v8CH8)75IӤY_qKu޻/Tx˱iZee6O@psk%x"=%0LJUVQ!Z8荪{*|6Y_.Y]w Lm*wn:3ʄ#K]+K˭-UȢymoD7tEύBs{QFe^1.$)O@yַ EѱIbДK٩o8*}8`ɬբ0t1%@aPI^/٦ juʩ'DZa2`# t7|4X5+w r?^t5NLb8P[M(**`O;9SF({|/YSƋ3bH$ EP+%"aQ1(-8X >9vˀlCYjHAsqp6a6n‘hZ#'XX iLm6A04LWRyLFw(:A\*fa] p)DDh8N"Sd Z"~aOu/.Fo@}}?yaFюǩ̃\,w'fǓydr i7nJr;Se=;;[GcFLoZgJ`lF?%C"Y ŧ { N#yJ&~ω0 wȠ+uy] 8eڞgKkd"b/2A'U4T+:JÝ 8l1+ y{ԈvUDV ~:0WUdlF"..NwZʢsڟZ!P^Q9OGTS7ޙP /ltCe(pt9#砑{iz{BF g%6Rt\9j`Ο^:#1ER\sP HMa*8f=]߰נrNDPtG2O=^},ԖnV-M4,H$=F/qrRoÙ(YY8VY9|*)>cB-^K@:uNy7t C7iO>fS()h]:ɶ`C3@< .Zj0=R^fT&$m)j6ye ĕy@,a|MRS?̐TяJ+ʸrz4ff/'-tdݴ0%H~LχWv&٥0b>MCH`X"AgA @ι]J1=SQ=$uSx5 \r]|%BQCe Uk~4f% 0x2zz6:iDY_G﹝^p~z*t:Tw9w!h4h+a~)D' PRU}zQ_Q[*ѥ$ P{s129yU; +ƶj-Y!J5K8uM;e=y`ehZcf2I3j>'9:K[v-:c1 I+ o(ȓZyKf(N(-,Od,vT}ODD%Q5Ғ\O+1Epf^ps5Ԗ4?QV=wLZQAI~Ke r⒴2*j>_uuTI6GmU?Ԑ a=qVWqiJqٖ][GWD-gL UcBdY#M&c]@  $Aa9Hlhp.Ѽ}w9#PNsPly`A,u,`?sT8S>%nޥظI6e:OܥK Td݄v,g$kk|:>8h*Cđc >Ecф>q]bӋP/C]6WO_ sۋYz 3oF2֒{/㺈lb̒95'$TKŜ&Xsm .3fbkD*ju-5^ѳnUۙQ'^xځyMDw~cD{n(©]rncaneyZ??0FJߝKӂMSbU(nݧ[tF CV䆙8Ztr"IeC]Xl:4e:EgQ~t ˲ TX9?`0g8L 52*et#q=v!߽I Mr:3=O͉ߴgU 5e$y{q[끎,ͤ0Zo>9B[1d|{P õ29(P5Ev!'"HqUx- 5[?osNk& ּx<ۦ;=CuO,QXx5OB.I3sj>1 o)/;|b2=u~׫2HgMC6;l!0H דw|:Q` /li],Hӥ; ?ouvN1HdtC_!j|a&vD2ښ2Y^?FI|ul0Y+l q^]ڨxVVSxKQ}$1:Fij.rцL6Ӂ~|3lt)QcZT=Y.@8uf`/W_K6MЛkpNNW/NE2nOX~ _[Yx ʃAԂKl JC4 Jѕڊll,utE)4wf @oC Җ'̿!@2@I\r\joU֛2 i/Y*p ٤KاD_6\ʽ"JOכ`y>\R4e-sk FsLʨT&|Iku\qH6;? mXEGų wD'|P}}<@( Y;3WAG*~y\Hl0bkJ''P'pF'Rp'`mq4ۇv2uӑ_crI ?LmK(?EIeˍ̡{Ctg@# XaQQ'_BX6*F!B+t_HX.$hdEѸ`wx{jd T,T4ڈ(ý"6j78=#6|;, κQ .[7%ji}MZкy 'ZM+o'~ˮM7`j\b&.l0S~2ԁ*}#P@k{_7 gU?_o~^տB6/?t4oXN1V򙡼&wb qHE(Nl3MJ)F{grH [+Wy^8?W # <$<4INF.,-X7]1" &լ6 W+Eϯ3ShZyyzũS7JI[ؘs`=ȶjFзեMyY>kЈo)rB,̗kF0V_ +K iVR1JgзsNRnͽGʫZ.Jvܰ sQ *Ӎy:WUbY"$Kx!QN>} )Lorwp@A\+Jp?tjXe*l#A7/*:e(&2+ҿ\ngn@W:*=y=. 38G-epoϤ8utGbgS)[Spy"V_R؞g|1hB40m R3tyl}wbɼT'Ɗ~ɵLG . D- i/Au ̜fW I ,bfn* G9/(eXگFOP;]VCx=\>߫9dbן{#i]@ e y5|i.OQQC^,2q3^%{@-uRwd-#\"EŠ4{"CQM $⬯,xdjԽ%t&1W#$ Pҙ #^P"MfKhK5H HF4-|{\׮͋!GT(Cj8<9qhkd&D$u @s\eڮA4lg-n[{bT3f9+d xsSHW7|Tī[X(sD.½2b0Bk[T?D9ֶJ-Y1QcM:WsJ,-hMBe*5Py cuY&am@ E$PΧMP71A'j"Ju$ b & Tbsm )h#.d@X1'h&~ _-WZ`,w?Wo]ك z4l,uS[prA- h/yd*ז^¢qZnMl֔}1HEB*b{[T#lSp?'Fu\myYYU2<̚3)[7j~fzέ-N>CC[Yuu*4>v?Uݍ\/(~7Kdv.}[M882Mt. JL_G/2\;ܔb3kwݱv'D>o|]l?&mBi ;m:w,?{BvT^lw'jV &=ڹmr0?b[dz^^93v( >YJ^.#!6<6/)l],%]}%O9vW5Tc-iɥ+0ջ3Cu:sHhjs2֐lU6ex$s",/%a04ִ̆Wmor$P_xȊt;At*@A+>}Aƻ `Ur.*8M6˟gl]ط'+ Ih7P>XAĵqRV9E!&4;*4{9Tw* ) hK 08]Ҽd^T!4FA"=GSZtUC[tfa!_ʛ¶{wmDB1F9C5PS4ZzwSh7D 榢OCr] ^NjS)2! XD ]0z~u\9=4jc@1!ʜKeUI=PC\RQTJ%Ya6h[H LL`_TWRəR{{cnPz+1RtJv\C1WEٕlrh/g 3Фpw<{"Xa |uS׻:ex#.4#ygbyN)elP峔0[hϢBD8Qq8h=዆vUWOܶ9޵8a;P:kA6W"eЈ+3Ug\m&^Z?:)))W寯`N'sFe$Cd ~)vqk],rwLBE&Con0̿4wVAN@ا@^5_$ f cuS9ꃺOh\2rV ?f62{ ?ѻ:=lvo߉5L[3C* '{(K Д= oH~T-  I4vdM{?N׍D/Ib O9. ޒ']LðH?d?p)Up ]#նc6՟*m)ņ"}َEm铱 { s)"T?6Td1Hg+cI=3n^53ID'E9\=4AR0}zH.٨J_:lm=~%"'$YU٬ogCumr#ANYJⅨyd8c<*1ڏXZD%4 dopJ:ջH(3kTJ+9,Hqܮ'* g-vVqec%RMp\y9rɇ 3B}Np2´ɪ"-med"E.A^In~W 0*:hyyУўv?Btec *(178x53/ +t+R(0kn:ruq=yaRdԊ3Ŗ!+ؔAuܰt7hְӥHh6y.d"^H7-|쾂($,}X>2C;lwv"G@A@Mw5Qz(pBAʞDG'3@Y83GQsX<1t@D_ͽtSȶ(L~AuG;̊qVY8{:޴NS39 7P/e+ ~ie`9(;6'ii:9(RmcL} FݜͼXZ,hYEv'FpSͽUS5Դ"[,i8q!!\1M`h ,Zݿ_(mY}7g QSfGbVM)49Ű F~Ih%KmCAyFY6a05+n힬"橫;\>SU)H!1t^0/v;`f%p;B;sIbB+WG=˨Vr!ȷp0t#r܇ZP+TR*E>a*+8ZS46rOAsv҉k1{GybcYs]?n#)쵸GzSu5zPXWRm3*+>j0+aZ<ˋqRW孡Ejmr,l/FYkDYȺ\UAc1GkKYC[qv4v_|E9x' ^PS;e/](eÀ8ebكi*Nv- SZ%K!v“.Ë!aM+{ns8:Wzgvt:tnPсbq~VOmbY5}VIxGn3CV̜D}Ǣh(XI*e\Z>K=>KlI8(EGJ{9H :ƌVuHLÍ=\d{{a~JH\Ñ:49f͚Ciuo[ .}+Zc,T_-$A-v[ ](<: "~>& Cͭ抆I`X:=Rm?Qrӵaߞ Gn^G=]C;pZ]ň,87ŦNhqev}䥴Pb.,1? |7ԑ觚]) 03KQ[9x`ض<a٣gl0O%^1|VJlR5 =r; [ 6(lZ? ,ɉ]3:S`H-hcd}b;ݢce F b3(J'Qi%e2thܹ>Lm:aWjW7 ~XִX u@E p?#?),$ H*m1?N{a䊉o 9 9jYsv?VY-\ݖBлO@v s?hz:M2ه+qbRor5s UXz֤f]~!} ͺU1I8j窐zˊ0>:gM4+4+3mRMNsz^ק7b|~LxM>u9hR(cv,GcRϷ,%& L%^ ~ƽxm Eao&s&jV &Bm:pvjJ#.i =vإt =k-> 5Zyod0!g3H65 vm&Rr DƁ!敝vqpMpX<:YY':[iP PS\Ln4e]tD|݁=Is?Ekv>/nYiO# a(_茬 2'R痰7Aӈv;OSaa[3EU5.˼pUCVef/"}82ҧ/)PúNN`[ۻAȒ >購щ+ތ|/g so%1<5Qvx7u!ZZnTDH䔆R-#)|bNǮxf*B%E.`ݤ RImaԹE_5:aeI˳rӟc#mɃޔ~_Q 9hvdE><sJ0u]Gr t_A;ʑ%7ޤ^rK\(HxBˋ,xx al/?;3 QJܽ~=e/j٣FeCLc{SszݰRe8MhLc!L* JEc%֠J컿b̫fPM Gu,]#4sV_T;'TQ%ޛG.k$ '\ )Bx,Us'}y)g  (GO4<{a`&27 7t5?R'=rjru4KcklݥZ{%1)@ZNċaNlŸΓP`ɤtCEdrԜ?t 0}o:`6[gv-=aG,rIqO<#KVэb$w/^/R^L,@W`T930S)).V^{mo,h2 :r__|.a.Z6t!}פ; 'VVQ4)&JJr*.'k *`c11?) <%|o{\Np90LS›<袖rC] j$ X"(aT1%Δ`XYafҬ4x0t-nec#V|B} nOꉐ홭^j^tuT2 M .i6rjE;ƽ @ U[b[;xVM1Ŵ:-%:ΌԮマGRBE7%kDn^ɣЁ##*(8DvE/5E=Ixns[;] 18m2 c[JL*vX2h:Xt-'4(~Ah 6% Z{)Xp)tYꅄ5}y/ls9mr5 , ݊\7[5}]:M GX䈂61.&PY3o?ۿ}j,t^J[g7ŃOwm~B$t,k%(͎0pگEγQ͢T{߇5?=7F^G %'u#}>TN3y ?ƥw Wv"8R}uGf<]\ lksC~AVUlkBKֱͩ5[ThOOs $Fxґuw3o;OƤS)?m c3w up=8#bqSGrCs\,CsќOЈrhP.." &&0G_Ъ"M3).L qy!j ,:hPz6)Ik 8F7Cku4`*!/W!;=~4YawŇ2>_~9dR֓ BQ6RiA2,UMw f¦A ` dhlc ^-!\{5s_n<+YpNb-뮞b>}lF,tID+g`Q'RĮ*8ZhM2Bnp5iye}(Ύ]0/F0Kf{SV[X˻㇁m !iA˒eD`HJuž1.x&2XiJ r|E]ؖ?@4 "v$'E{Azjd5aXlc կqt+LH캭)_GOpOJCe WoeDpK9niйheґJ^6͟8Ek J`O-:$4BVSdd`("plw2i>b"n.5mE;>iԈ.#}rz_p%dH!Y9B)4R9T'ߊ!FsfNxOj:&*A:04y&tz+۲|Ӊ.z"I#xU<i(kSRȔ6=x],yGL,RȎMvڌڜin۬ DY eMɲ5'(YmyP~MhSy$5 %_:\'\Q(傕 }gw&$06xH< |s.s Z:m Ѯ nf)rpHN hƼ2rU9-۔;5B̀RçvMILcG7$gynCGЬ$)p&EAԲL"K [{|.bSk`BcɼKWz9PX$~w68>f~Ǝ`3 >HZb!]xq]X/p0:T)`D 1f}~yKu}ax$2ad!`Ŋb5?Rw D#`EҞ3;{eN,$C4hua< jn&lY= .@Mb-9v] $-tXԜ@ɘ&/%\SQE)`sMF[qOzfa wљ m[Z5fĜoKorC8duOxb֦,8gA$p?*a9z[RTHJ_)NT=Ѓ~*(֑ D?s!散`t M8(.U>dgG]<[v:3 )VJ?5=)j*G͖6bU$G2dA0:(^N`s3 (Xy V5̰E=qāeϩԽku˚^L5HEԨJv4KLBVެ,@=B)Y9ͧ2~n'.L>D>%嗐˿qȝYb ϱՔT3t faUy(7;K #QO{ bǬ mf|nSWSzrh[;Z 8[_P#Jr#CYcax6l^ňEˆ(m6ߵ߂(cYA.;WeI^wmbɮѷ9QٌAZ&ȝK[895kp%gU;iڭ0BzWK:*Uk-[k5idz{l>FIC Pb 8L!aELJm;)x8=V;)wVDFVUB8Ya`ʍ<+RV儕d֑&1Ker{s_hD=L'ҕ)k)mڮpGDCLKB~礭OYn~KBq:.옘#p@]0hMǫV7*rO9T$mD`)]*m?[i̳$RwW4CZF:f͋(S(/B:ۘ-n(8mAb5Ψ+KNp$}4QZ_ )BY5y{ah9Ca4;6/cr,=%z?sSZ 6Cf̞.U *9cA&"I*R=Dtqs{\'~ &t]j9"~: Sβ I 3&;7kkZ࠱{-"s?m0[!KE Ǐ#5>UHUouu̧xr/jL ? QŨZKJ@MgܜejDn8CL&%ER9*^jl=Sjc}?[JD]׺E/=Z#{bܜ䅤?s" ڱFG~ik܉B4UsBҟ$˱-mV=9y)g#Լ5 >_=.ݨq"7xc25±I;`J\,ddf ]xKT˒^_72Y;l 2sz宁!44wЮILLy#I=9U M#'7ޓ{XoSVʢ'ttQm\O}S|i zA4$lDc7jbxNCAxz;y@6 (oPaN`~T I]!:CW&~A>_tXCۣH؃ QrwKOGa7lTh3"6|RDp˴6\yG7B&q0WU+;лj#g.vV 1)]5d}c`=@a[7$L{ Vߘvfcliѷ<н/PP-B:a}bRQ SY)*at|'L.tGަY|P> asOPVl&zhÁ2fb~L_rr RbnO` rNZ7" ? 0tLoaG]S1r/wo;~VsGZiȤBK{[{SF}O/H`di1W9e`I^i~Aȉ(QBW_5[SHIí[ əSd-U:Wfa' `8)4623,yݵgLkQaB{qX܈/-+,aƱxE$&/+DUڜ*=IO@9-,/E[/;iV@M} x -+)O@t/ePS*4i++O/ؤ6:FfVp{n/rފvl;_dâ\]jxw^`D(G'0LƩ,ѸM2 oՃrT+ZY@ji6vhi{5rc[k;j}ZU `-8hޢ{ӵk$GЦ'&JvLkx{^ v@Sk_U-J6FPٳwt~=[j;bZXaO2R*O!:'v~!`Ԃp8GRlsk2ڕ (iYMb-͗+Fݜ!wއRvs.'>P`e .77:=cx3-c=g,v1{S $b9L/UMZ 9rNK]ŭ[J3q掃imMTWpѹʈ)s=Rv:,14AvAMqIMpk7vl|/6v[_lz HaЩ R]644L9>hd&=KNTq<}9GWjU1Gh H?}%߻FhĀ!leK_qi] pvIoЪ+hf@s݅4^2F./Rr.u 3da&(KGbGhs{ ,:|q=k]Mmii"Gv^1946وfOMC0yHߓ7s7JX9FD} j$ĘO_SR" t{~< 2C6Xgzg?uJT76!m,AEĖAWzdGoV ѐڰM7m:jm]xE>-lr@$'I;m(+ZIL{DM"I`c}wlP6U*~d؄-?r )➲vn[@ZӳIJ2IDx|ձӽ R3P؍ǐ h z]22fR}ƩMUaUf yCX\t(Gk"7NRe Xڨ ܖhh{sDU76aF]P1dyy(2/ح5Pt7V*}Ùm;i~h 6:~C(c &/$ N{S GJ+Zօi#:)0ޱFIRU*<-Bq]tt!L#nD0R xGd4?sKSkot 3}%DBEXi")4S97ndD|Y o߃L+k-mu8j> r:/O9=ub)k(l>(˾gm7 oJ0:0S۫]owX%!^WI%Jh;sK, >$tWK˯X:%<+_FR&5?[)Vl, unBHܦS`pm)V!}e0G]iѝom˨? i&:Th!cb?ĽW`*LQsAX33y:g+E/P{)Wx K /Fg嚕YwgN@>lv em} *:Bw}n֢giڑJe-04㋇p<\iQ$L va <XaTum#J=5VܪaoVjܮh1/Ɩy8V8p`Mͮ]Y[83G=bK}،nqg*S0Kŝ{FG2_5ozGH;y;"ȉS"J%Z2[7- G3Wn ̹WkAҡF"uKmh\ӿjT1~lΟ!¬dXw8 B3d̼V]#Lz$NA,-t}C?Z_ :p,⼉F1f: KkhGEz2他7_sޛ)RsK YİTY"cV$Lx=Um~$>Ven3̳rn7J(gT+;^M\3WT1|$%e\W  'xix<~dT6{C'zݍQy+5^ >`&a 5zׁnPJ@#.Iv˘\'9|A'ɉ0$FE 7n>Ѭ4e9=ӹYsE5qQ>WBUq!YBL";%( %@}AvyCHK!}%^DBpQƳ6Ta8U0a#aBDvكֆ7e䁗T1NqK|'{Hьp?TN C%$LqNQR߳8Eo?#:X+30f@0r"qãRQHs~!P"1LMvg-] IzrP/2 K#- zƱ;X4Q/F+ׯx]:vZ=%O!cjTn`Ѵ⾕&siW24˝M7Ke?gSƼW@gn%rK }Dh,5w"j@ 4 R0LR ?N qOVAlQ *;nkNoL5kր/p }UL}p\z@ɸ;Yk u[7hP8 >A ֹєτeRAX0}s貵iQW*>2tv|?~[qˇZooRL ǹ4ȫ$ w0#/Gﲁ\Ra>y^zMy/«7PZ__c#,Ӥ5 KՏK0^dX4~ \Quum "Ov8kGK($0pB@d))2u#S sK3$n@DtjUD?.;Tf[^se8ziKRht#F|f[iOڝTNeF֯KH7rt,~ afl6qZwd^v'qI7#1`J]t G9svS:Tl;d?9 cSⒷ`kQؼY⦌ OU^L!6̓K[ʢF]gLaF׈ (^'̘s|`8DXX|UZZ^&{[x"=IVi'gJa\ /1Ѕ t ޛXeas3vWjlhzƭۡ M;=87J*d5~HN7CJi:Sѿ#.LLv9R3g'S ]F(&ΰbM 15QH׎*0$*A h )Ӹ95tGf|^Y%Q4}Nz5i_]do“O Z&rf%B OWɪnEf\[g*sB ]qt7HS  M0sk(l0/ zB` WEut'[aٔ콐 C)C4lث7mH~[ER|d PqYŹC7ֲO|*oiy*fϿ8x&BUn+vo%TmS3 \mjBE8=b-ːv bHVp}q{r]8e[]IM _ ^lqv 1Mݚ~s)ZDxڎHa|z өکuB"jC_@ǧ}*_$)+3s6='atؽ3 {DѳNI&(Z;'0d,}hYnC,zu9||E:>a*b!n`n0[+}ïAUu{6]ՐRh AF[ ńmYNq|Z_5f![Dd.Q'B`hKB @v2#c/v8VB".Vt.@I/~[dpRnH>۹Lp?'btd`(-e.e:"ݳk]A<]HYzA|m:gċcukaR=\|-E\6c* =TtR@[ xJw[p-!$QXװ]l  V<b8Te6 ˁMzm[GseHsdx:@i}ű*˭N$+>Iw/oDHH`%E.02~Npxn5Rᙃ->Jq=HF鲉gY1lK Qrܲ,- }z@HQ9Fn?ӇTh&D(GZ_2)wt.U ƒ~^^4Ec(NRsgg\Ndn vύ䑟J0ɲѺ}d6oDē,,Xa@Hk eb2=#sNBl8g7n2ؔGjg!UtA zGm3#39=թm  X;~ eW5,0I5I<8ji߫yY9\)w Pzb}B nJ]2֡YGqhNm-9pZ8it^~f5aAZo;i@d+DI-vBR!d>͈(n2(v$װ$Jpn,1qy٪a2*\MpIhrΞѱHG-[S@\Hw x*0yl S1Hӽ)p6!uKek H^Ԥz}+װl,0I3nwR#^Me vKfpU۱';ZW8j_oy\C [ } J B ]^Ј=H3˰Q Ɔ1v!MT -RPu4](HImrשPw 7PVaDKB>Z:@6iqI'6I/M [(nH[ǖGc'[ABM#5hv[}iq4 M̮)3 vW_%0? T{fYdx%)iܗ9ם",6vyp1Iܲ||˻3Fa+ͱU\Auo;πҿ"jζ媴TD^B+6R~7^˽{ţwؽHߵҲ4؁%sQ] /^, 9k? y|'eOinB:*HBuT"<)qׯΥNb>&hgCm9*ۤAB*?}bl{&-m`=.հbM܏PM^A^#}~P^jB}%q wb)P)@R#J"' bqڲ}5x=:}U#K E g!d|[ʏ*>N750_N=G=Dr{TDp8-H'D+ sEKùl 0/L$^,Jq݄ZY1z[IJ߈Fr\BQzzfvn 5#C8*81^Ud֪&iRx}Nd {{;BTo+4 .v){:Xp(~٬~urv'mxf*q̎4ǰ܅j+{8QTBlMg/G{JjiCL9k*E͉L)+ye--!|&LQ s&qnm{C7*JX:xir#Ώdͼ!= D{-/ȹ.VH@]U,-CvW""-j vv`+G(W R|#NapŔ-s+5Y#ǰ~frW͏B'Y;v3\|%]ȥ~i29AhixIe'='엧IZPj!+񇓣Gv*ӊʶJ`+vh_Ң3hzص>bĘú]Xc U0ջ -A1Qdjd',]J"(륋GО& P,`{p~ 2$K3:1R;(ǃ^{&:H6d*4V벨ыICSMcj=>Jj>(>o(F^0~5&sn?U UjFcή jX%/X3JҦGԈlW7%Od&iޛYF? }l):79??v%~9ue+F3B| ߫A.W`I(pn&4/!V cG#6pX!"Wю@icAKt?#wt|[3!p/x.|5l)&`j0B?~:gMR}s32"u82G%hUg0 eWL7Jq̼u&&VtcޣLUb174#լ9H֪?n1|LS$V''y?ieg.Jb֎UY{z|Ќz ^d>>ry5{'=t͝{K &N@Пv5*2*S&ש_vLx;òe)Q)1QM(B}O_1~7dDz>U /&0\}~rȽ8UЅA(4U ۙsSKfWe ƂA)mpbQ}ŵPYeNgNǮ(sw[ybGד2 nW[1{mcJ%zUxW͓LRtti7h~1opxTY1Q>h1Y|@; D*,LONb 7zrA…a#*7=ev,4"2S~"ёuEaC|W,$9.5?(8 -=\:~@ ,#|'ʵ<_6jxT>^XrF&"53KBY`T ͑\ὴR_NK}i |li!~hX9^DoHis*~=% lg0Ec[7b, ?v{QGV?Hc}U]&QЖDz(<qq! Cn]} P>pm Y"#z:MMoG4h'ƦLi)%}Q҄<7,m9 b/~ ݔ]\ܒ}3N"CycG)ʋa}ݡ>/gek[,hHVMAF]K1J"KstC1- Hɾ :^^G$D vhYҴ?ut@K{YR+xW\֑RFdLϏeڈ(/T`~ǔѕc(_.s6лlq"v[wRUPNjs |&1:ukMEiWd3'WFϐY%@|%z>KPq qJY߇v6*t!.7-MC,"Ndr뀾M༘GmNk1h&KA Wi8(^axN YHh=HEXv/h/gYű<%J 0$>~I(2WKpOuL3D]V듍yX *޵5{V4WB洬Bt~Ʒ]@8=dZaniDug+)_PPD쿐J痋m wQ"w&hXC1&/madn( 5gRDflChI-68iVWg~R~uFz ˃ 5B 18@71Q_3JS~H?[֫#q8&wt,bueڌy.]k79by_徴Uƺ19?!h-(_R'->t '` :0C_a &4c'.+]4ੋ̺gմcm>)fv˴"# lY;S 26t,ʫrSK\cVY !79|uOL <a2^ Iyw `xZέfЀVVo.^_,`Es޺ĸ5*-u9 NzZNWϸ6vI$<ُ^g򱤯 g>oZq.[vP~-$th/q(oGJQzAXvY^,6b\['"kL`vw7Cqⱞ3Wwώ&nr2 O-Qfjy]XzOJ{V,L;ddά tp!e/SQ 7Oˤ`Q2M{&S>M05uFp_SK/E ;_ﮠg}\Yɘ ?،/"3pi]d΄\J܄OdϨ7.W)P(/tFp q"ٍa*F"Zv$،/e_EAW)d@|5#^wY|Q]Kw=I܌pp-#[Hgo +Nc621pr]LFnTHPGʱ^LI]T3D0<'񽣱˧;|+/Ɲ)EZ zxGf{g\h}[,ee*LBKsDA|iml%^V+z6k.6z*%6(&EKF .s& [e'pʮ $0* BslpTr. =XJ/;wx= u3gCr meEJeIfIsVbrX` (=>pǫcdyU`DK|&?dD%"hY#UE#Jnq=.;2 /%`, D?59Vf"2v3 }P i<Yҹ?f,K/| j!&乸$~]£5+|yͧ:ÄCeG]SH[)}A"II{ sO h+fd^<?yo5~G JvNKk䄌5Ewfg!%d@ ⃥Uַ&>|DÐ mb/h<FǺ$@.pgCF Y3c13a'iQuF2D]f䎩&!`:ů̐m (/+v`̲7pqJߴ5Y87tʇ |} nSga`LyD檇@r.1]51ӹi]h2W% X-u|Y 6lTZ'T=f(DL6Ӓ w&hϷ׍ag,m}VNo~OQ 6wAAZR*^ڕssO{m#UOƓs.<Wh^SI51"IhX:enhE1PÉ-|<3!/Dt9%4O g]FhqJղj _ĵU@28?pj@d|N˦s#[ӿu x5I<)K rdrB@rQkCN_ a(կ/g*&"ڊI^kԫ0T-I;|)!QԂr%D^uW+z)<e^Z© GP+<4X4`׾ —g#vj-GGkl@ cgEd +)3MgZ%ZPEʷ~% ޳vV!<b mum_g,֪qn'N0hc=S$<gE`FSYȥduMi=mɜ3y;=fx@hhͤG?l@(KƀpÂvخxHuG;iURITo{*4Z39LNM{(! hyxyG7\2]Ƿ ;= y/b =U3VEv>.lZŤDQ).G7_@&ʁ}f'VK GNJYDD蝄n??0v3m@^i~gHd4!SZR>x^9Թb3! Ju#d*|1ji̅Ͼ5m`߳{/^WU%mnM3#d LShSX_>\X2$S,_EII6*(TGrH ZRl=xV"T'`B4~t-)GPNAZȾ9 Ys;) ˍƶ5V`45ǵ. NlW7 x+肼9aLz]|*dPFMS21Y474v^]QӅ`0g#/p`Yp{6fS'-3ĭ\KBX@a7\g.+5K%$"T,LA\d(XX@ZN$ D\pO .563hZ=oۚTATQ: k;8m''7ܷM5 rkG+ f(f5:pbYSRXMǀw -i:eD'C|T_S'T7r \ 2KHL3[P~D.@|@7nsl(n;DZM%Vw< 3OUkTK z.ڇ|c`ȡR]X W] &EJ˟S/:;pS8XIug::[\*C#J;`W4ޯbd%6/'lO̠&ZIR+Iw !,¸d){vlTHͨFڿiD'#Zv{y/Nҧy)K7wo_0`<jackbQ6Ev~E!w"gsoYñǡMޭh$QќՄK0*{}o{Od\UB1St+'!5b nÑ#4w7DѫБ "2kww45ىTp[e,Ai^oP~:\׻=~pNZCvfW1tN0Y{Yׅ1QAV!u0H./ޫ]o[2>$\bN>q $-O_&['F\mxkbb+zn?1U0"g2'{Ʒ1J+p/kˣI*M#Sw+QNsLJKB1q~MP|tYfWɗ$Fcù>KetX[PDz:8c%>o$,$&A8x&i nDy| Yc2^v)SXy3k蔥6>,} &(TMG!uog#!_<4v[o71}uȳհ;񒘩ƕ`Ƥ$2\WnE_,v1s+"ox1, H"lusKu0fU -]-BoT}L515hzx<%HXE$Rj*$']C ?KfޮbN̊Z?!nfEUEre/0|h_C]lj.}t!'YZ%(W u_wsʃ|ܫBnt{qt,y='P+jNj̖:]2G׎\^-.$da̽_ȀHQg.5 Y}z}vLE"Ãc܅b|K-^{uv&c춪I&X3rg.̅EA={ c9!ƫ [tܪfVXsn9C4R+8m.sF*n% D]7b6<$A?HݼkT_v oL]-B`Og d_1yhkz`pLH/ ugAv221N뇐L/rڶr=oVCOk`ɨHcΐayȄϥsWF(a 7D MVsNH ~~ӧf;U3'4-W9ΟNN!;@V3īɢd%"%/3{8ѽ@d\4Y4\aJg4trr6Ԙ{S`]{~$C[LcRvSq!^>_ogxΐPP:U0$8GGFrwWv6WH x' L#%'#T $8 4b]oxzyۚ\5GeG[ K}E$vnx-{ 'RM!ϒm{$D _F( 8("rטWd a9տ" ՛PԺ36YZUѻ1dK5nF QW/Ht2B)/+PB]_λAӔe1 6D8xS[EH4 U5Kf*J)gܤ,Q%5|o2eܲo蟽UA"v ![[;ۖRQ{(#>\&6cQޡTpct?s̺*D"ԯ4z.BM*oї eaJ6mL~9wvN6T?u!dF̧S ,J29cx|Q)UDi ngMjhʭxP^31..|H;nG 03'J6SW2)k&,!]$Ae #zBz8A@ȫux1O\Unԁbon6yw9'}ۛz@ce*W՟sF\t9º8)f=rieJ87 nüJ5n^ St{ZHg0"nϖu4~ $U6Ozu6*(ۂS,9~}R\)PY˱ nHjɛm {IVΒA+$ON}(>t"hޓױY]=C!L;'|t6Ȭ-^uLUǛ~cS:K" 933_y7x]xh 2gkp0qZ>΅ ٬z!Aí1Id FE>C`zG4[?y6 䋋qqs*s@>Qw:\IYijf+Ǻ {g#o0L)"tȑpec8RS.H|뛶sw nA@ jO=&ܼÏX^ECHl}J*5BN ̖c#x7{']XcF5xE =dx(B̴YHIV=" {dHۤqEks2R}qrj7bd.:8inxO4fcWt\Hn"0iYQqHfVON5@>B"IX6׭ 4C9e&fjJ[H; \BVJ)0.r7Ǧ?cJ,,%+,.^AOm>L;QQMlB|P2i_5сzsyi\5KSN̢2ԭuCesh{*L mSsھ*jLi`IPs&5ZEsc'-SdF~ΣxWYDwy*hyybgVu6XBT*>ʃw(ЙAjmC7Т Fg Ǹs`z;/A=;6/HT==?"HlZP9(;>;t̼[ j4}|YIJ*tA C}ouGg1v(M2sT6Qn-(@YséH5lܼz%x}C(t\Fs&҆R"'hЍb=6_ 3-'pvKe] Oh1 ^AfKɧV~v}SF,_.;:8pJ|9.;(xϙGSphaQ" 00Yd-${Oj-{(.c^j#Rዿ!ƵPhl걤մ,ėu P惘K6:i?I2 *U0%_cqT4֯HEk2V:su3Oi4~A*TUe#ެ+8.:Y6/Xw)9 µA9/Г2eO<wE91ن5&c÷S;5҆3K XLtZX[+5%p&H¦TUZL h).R~б5 qY$E? 3(*aT_+~LjTSW_KVq^D@! ! NWC>JR#4Rp~_E!| ZcT0%d]f߲\OHךJ|%?噑j[HkS Dqr:V1136=^(ˣ싶0q;[]4!Ee6nT3g, cKm>NIo|GXǬxM5N@lWOQ2od/ϓn|2VLۼ95jA} v Ԫey $o9iQ%`*!͏"wP7;<4[JYi@U_jlxABq?m*̹m8-W%z+b9ߵc= U]4?y_p1&;.S/OUzƉ7(oX`aM4]ewM{ßk}$W\RC`vQ@L KA"wW!,gp$׀7&9tm>0b8]f.dka[FWj`nRRZJp$g,j&c_EK"˻_(ؒC+ۂH^,J𵤡oi6ukjJ\R'UI%g=}#pi׹P/?1:]W'MofBpfbv!CC17 m,q_MzyS*PհI`0 esz$NYK6>*i\&_#~h.65O-w%-sa0ZYڹ%+7\|u)D msd`_ԗ< .ACPG (^s/$&}"a}9󫠑z)/$(`)gd-'Օxʣ |VF~aUrHoj:3!V1|3=gDBmwkasc.ZkrY w]Oܙ~=3+}!WB(fec`aLjC`Pdx kw?G^+~,AnUe ̒>8Wx`R:C7>RB[~ea,dGJG5p)Ieđ/MVYRqUITzøWa*3zٰ!nbu^+Tj[%'G.i z@롂J]AJ#f#Jrܗȟ X(h Jv7714lj*=|0y&/M.3Q-W;ɧ{9Ia<1<s']"^c`cKXHxtyu|GyeOOq'*/Wrr<"˧73A adX;~i,U4"Al}@(%*#M<(=5Q#jR+&~)^,>S5d:{/qa=9G}1, qKƣo]ԅIYkm/k7 '|k8%~ ZazBqOo6>t10̾ooGȔ^^r4e;pB%| B9Óc3r@bCndse FF_BJQ$f7R<yxb[!뫄up[_0C< iH`C @9tٟUQTcyH_ghg[?_l XZ9Ʊ_ZJxsuf*vہbŻ(} wCs`|87#Tȏê;|OU qUG;n84«&UR|/R)IN')Òs.Mα#mmT%:- *C5 ewS~ ·yB z8@.}7+-OA ԛ[T5Tѓ f4^ kʹ-ZozwLwr]N,zb;V"qh!H=֙Tyw)o Yݑ(I@s ~,`䝅cp)I lfb'y,ɖe(XwiL)QX!ú)tv ѵFfw~@w#h(c*A_eTࢻ͢dNt/yP]( epo1IO觚港qxUxпc&Jl<D.bI+%x&{$ Ʀ H"Vg)_7US@R׳dn0 ̢.ܤNɓ bB>.fa0˝H}9)^p?VUۯ3 Y۟JE(!`RD m]3w_DaYZ+Ù2lԌ3hLuYBׯ;^i 7Ө9_{>4MH0ֆIK\~U &K6 4/3y-XOЌ ܀LiSxr;6,TIf@[7}EiNs:h1+0؏f.$/n,wXct$p $#9B9QX4Vŋμ I e"f{7aQcr:BeZ 'G 8A3Zs)⠢TDOA0g i ibx@ZcW_ҵT#yu7sΓQN(:eu 6 1tc:"^jGEF޷nKݺZ6t߅Oȯch$5I죝g)SU /Եؿ' }lޯfbH9 XyN=yW44@={l~"U#2 <׀̝JEyk2SFv pF5d5+XnKVm籲-H%P>1oɭ9 F}EKmǃO( _ω3 oiEUk1ݏV`);qDP4=-/.l{$7\~30Mfwfi߄™2X3[D "C SVfWloM"Dq˶Q@XuK^!O<JimH'}JH SPVx(dL%9WU& o30Ct$YU(45@z6<7*<wbYJČ3R- S%M8an5SY}<]Wn4Pugܫ͇b# \ZO+^Y{0U˂n_ ͖nFmL{koD'+Lt9åSڟr*Y8PS!׷ȡtEAXn{I ~ 1RchVbE:&SS+Yk@`ddX} -/rs\[&Y[ B5)c4jl npML.+q`5i)T?L @/OZ$Z!(5w#\!RdU ]e3D",ފQ4W5m8I??5ϭKill-'S1< ;S 9l?Lnv`\Xxz ]ï;+$-N2{(3z l )80EֳU-~XȦ8nL7ki2e&NuJqơFrPwjFd+H[sNcS,0vHcqCR .Ù&ޕTY91nŅiy< \ݜ<YoL5Wۢz ,a\2_tc`_GCClL1٫@}Լ dxmQO"MuRO5l &De氛0iŸxazH=Ul&zQfBP]Ƈo3 V}4Pn0qngS v&oH,_JS%ZQzJcts[3y&M {zwwD֏S]F0J7S(Y S1ܑP 5~xܤOL$[OnZbÈ^BĝJ~.*_xlɍBEiÚ-UT_{;buIj휥ƀT _^4 3X*t㇋#>򊀑YLeP VŌ^/t\B,colxn2q uE`zdqO{i1Vϊwl%4H4RXgr6жC6,Ifz3/~u[Z S,9dGWzTa5F|*m(1 nkߠ< Rzޚ-74ln "3Z>u OSkEU8L,Zo9a!B׎dϏ.LyR*x$"XWڶOJ$HRcS1OݐAۗDVK}%t֣ejnbTNuw.>!\3Ьyg{LE|jP'3;63>L%AD_-ɀ;F(ťW6|hfhȗDhzdrq͙oWP*+/Ŧ60.sXj0ǞT1jE~Ĕ<o%bwtA{xARԿwt1s(k@YDžɱZ2^T3[g/RAV='5(L:?-LT|߁Ş0cO8E`g/6x $々!8`vTWMι/Ijozu0jzoL+-J3;Z@LUeXdCAWh|57ӌi?Lb ݿ]KOr>EKUvB"6aBlM~' a.M>J?yfqk~lu A |#Oav9ԋ9|OFĻ<փ n'dY3Ofry,X5N1Tr_57K96NPg!l9Esx^>@ C9\R5j7^r]qy6tA~o6Z>+l͟б}ilFt9QǚihXLj:7BA'逓Nb%X ('ߚDd8 Pm߹ԉWqwiGǪUkǒi0KL+ 䶠P!UI4P+Nv 4+"@iPJ>!aBoj1ĺ_X/åɧ_$X_4/ =I;,)%P BT?k/ڏ=h.#̞0򣱂+L]8X>'ZM৕3x_E>n1ㅠ]`DOǣ@_TG38N/F^QݷmFC?lw2LNBpP-:.@ŏ^SJ#njs|#Z'BhRivҋMfy𺽓W D<",1cܗɢˑ/X=J5&Uwm"I=8it5=μӌ6O!wOR5E^ݶ@m~Gǭ2VH04H-C" xVzDfdo AiL-~E=-^|m UA $@r$ "m}`Na= q a綣ߊY\zjHݠMsQIU"Fjvqќ6gvǤr_}~)$웆cw$FX@v;=3G+4V o*]xÜFLUCm]f%2x^ NzDzC@CAkdAV};Um^z`kPj$:92W_ jv{:۸!f%MmˊN7+ќL[v+};5u^&مi_<3+-0&=Wd%ϝʈPGiI e9?N"ۅ~Q?:ICc,6}4 ÔRz N,RZPT'oX0 :8CMoVcqcsbI0v}9;؃y0h*#D 1$ORpeP7^4GA: Ws&npD0or3P2S~釓R [N٦f7EmS;9 >I# J ;oH;C:7rD_ztd壢h☿IA8P1uD3z^ _ d`v1|O4b"(XtŬQHxj ǐJ*EF򰺢As[p* bf*^E5oOEWVv!5L7nJ׏3pغ=??9$# bZ9W#=ϴ{1AIcyZr0ABV5 g]cTv.ʗy({>GCMs2q}y_Oڋm:]\zIkB:Id'lȦꀽ3*xM-0j9WY6!Gme?pz ӨxVfrRg-LpsfF02tsŻ 7:_n/qZV =S2 7z_a'vX5R/ZϽ' 4bO(mIAhHsAi~ 2ߡE`#;[<# yL}bFsi?ISTz"NƵ]]5JQt˷U']q?$->$ԄRs|E[ eCK.@LRLDI!s ['I7K^%48prZbo%B!rD"Rlc%*%@I.gcWֽ:J;7 _"D@ukEv_j'eB38jUaB0maG*KHqxWӲbY@cFz'|So-CeP5ZJso17k}m N˟+پLurLScF?Zyk-,%馑'(^QfP4cv{0JV^Я,Z;Ә[̶WݞSVଛ"c8Kik EBZX6g'Q6 4tu&5sL-\Dw2KpZ1*u}nx>9Xa8~W2 kδ \*6ua;lziNFauF?~[fb w=V[^^DQf6 i[cBDid䍊g3. \Vc,$O[x*_$|G\2B1szo ߎeǟɿx2I7k5l=D_m!OE5UT[ `1lv욦KTZDu.H)$ȥ1Y ^P̖zr67cgDo+Ja8LpWYcJQUFē8 dp !Aw4E;-3l[>Zr*$6nMiCFz.3J %n~ܢ\t`Մ|p.p|S p; dBQ}Q™UvCmSs0,yU}0T$%1Lfaa]ָBև3GWN=Ut3;4Pc$+mcA0mHmU`~ Et |O4ܽQ#iE:Z9Jsq-cƺcea2묯+wJ+e 3f^ ZHOt*9v Vwc(|51֜yt2-(5e8}R)xW?痐V{Q56\%2zRSHhM\p:2Vjшf0F[Pߥ3$g<½>GXI@I`mP . 2;|W`?{z`6 J~5ߤsa|4XX ViY#?R=0}KL euLP"z`G/j,N )= 7 Iќ./H&\4଻&_I+U^ֲfK>IU 2(mb"Gmi|?[է ,tx|J&wڦh!w`t'f.CIĕ$z^y++]=DŽ GaoZb^WT[L2jxqgfԣVT}a2fcCLf?w[j`=r'{؛ Z_sBgr)}%N(X pTyDDR3ȘMw{}n9.z ~DaRUMr~bzPv"?OwXSi8˜6nЦs۶'ҽa~Khptrj>V+BdqZc|n[,yzV&{WLLJm~i?8|=2yQ1]'Q DriҨ@,oěf5;s+BM0hay9ZN ~ΚE# / pN(I0Zۄe>h5ʻ;T)$X׶V + |:gʈmYr^d4i5 M"uCnYͮ D._W>Hl/ 4e?[bnڣ@2z$0~w͗iU}%ڎVЙ=nX!Zzg\JT;>-\PycB;ʖve 8˷c+[{2~A, @j"#Wz-4F== ](>bB3˹L!Nf5W]kHB4a0Y\@` 8ʈ *ȃ \tHP,kz甛N^ޑYA ~HQlę +9k-6A&=Q5ƵpҥS=S*Ň>Oϳ]D1]"5' . gcB+lRP<b~a25B%${E4z.Tԅ› Ԡ8"5Q;5GQq>k(p-"xUÔL?>_ O Ci>3FK 'ٵGكJ ].\Js/UZq0E@Bph%-;1Bԫ< ?r C \靖~R^X+S/v?| Pdۣ% c]DN+Cvu~uB@6=wEoL1L_ZkD 5߾)5DE[(F;7Gw5 LVوXt˞>t?Y;ݰntΞc")Zh>E.Y:heƺz]gzx EH eF%b , aK?GB4w^! 'iYti]G}7Fa?>mݕ* v`,tHyWzwH-iV< ;/{NUCSs}s-KR^ }tze#o;s|s3)A+D _Hi"ܐFORjWٌHkl&S=ԾȪ L\5> qquj/A z6$IOֻ(jz'-TayU[)TŎ^zW"kfօؠ/Zr9yȢG*zc4cG9_DA+%Aآbdcʡ=#Z($e6Ј ]`"&j"1G/AL7}cH \ W:4 GqF𲘡˝(A:+"Q|bs9=,<8S!'0A)2 l?npe(G|XUX/AD&@6S-2U(y{ jE ` _F ͷ_q׶@ xު;=zqi=v,pvvKSR=.͞ {6L;۰/cpÆ"-z:Ken2?q.=x>^ґz muwO]rK]uP7o|P֕!CoRs%Tr݀G{wxL)N> G?"(h(ZaJ9X'&V-8l *qF9Z M 5v5ÕLKryr7rk{iVf.sbɩiqBDtBBо|Scx@3E,psI3M26HQ]DZWAKQJNOױxAPæ'L(k!)|; p'(zzPm˰bfV( uK(k0T6($MH1=v<|³laNlKBͯѶ2Z-Ɂܤ'K,{v1F U۱t!;&Dw@jĸpg_ոG(K"N& U!V)|Z']&vʼ2SPT6/%2 xw x %?d~1H ƍu 㪉R8!p&c^<5 7h ''ϾgPSGe3YlL$P:t:@/.=B<ټp^{YDDprY+@|G-ߕj^P ǿ5tY鎛CW p/ t P#XvY6Z# A6%O&hl%ltm~qpf=_8]>sϸb^319ǐ7՚q]57ܰ]`jF*)Mŋ=̅͡U` U,'w^ʼUu'YnuL#W$T};ϗa0 ŏo,u|.gl1;SJeSZZQο;0Uf<)L[fgP3 A /y*\75TNG\KY3ڀ$0ATSn BMJ;4I s v&t{zT?EGkl,EtWV_Dު+bZ{}?A"Y]}Dwap~%;^2خg T ^< t!; ȵ9&r9:pޕώxWּlj>IȿC|Ě:D^  |Si o%.TU; _wþʆ>˕)jFz\AYYiJRȩs٧~j\Y"G¦㻄*n/rЧ&pjIT[ e幥!,,[Q!-MK|cY뤵e$LyW_%dhdد\n* 堟'#!8ߜcZamXcmi=Y$zB_(ϫF6 ^Vl*->эNBZ`OTf iPRc}mҴLMԝ6Cgtv%m|yP<{:dq@:7wKT%^s_w.n_%VR՜ڑ eMayBHÃ*04lDq}ׄ=, j*/@Sz!x+bR14 O8$7#O{؊sT K *fS {k~Umܧ]> ?k1;6`!ƖO8dbw%%NyZB0HGSS/iXCv ,EO]+X?h_bE+ĉ~16?-jdWIttvY Sg'w=|0wٍX7Щu`gV@i]r+~ky, _A_k >p{=y6_?;BH,@p~u-u :ƭz+4-3:uwEt#?Hmj+/Hۈ6SkNbOƦ PVt%N Z`Z2ӊ\VlYVk rNCtO/&Ne#vkCp g1#9ۿv ;Ϋ_.ixwrVKVG1=2 ۍtxG(E#h8$ŢDjzxUGAl M_ZT*6Xف{\%e(:с5+ZzLa&cr%hyK# TLR֔LR1K,Bps% X':#\{yA y&§T |h}sfVMtaGw/%^S>ɂ"ע4!뾼̕oâv?ԓ u>P:3yr^u*HLfBI598;z3g:݌o9qZ{Y$S`BW(=BP6nCysuWdk8H( }Hj1j=!3K9v`u̝ Lrٻ mIȋf^T 9 7x7|C]R*X#|8oO2Saͻt/eYa+t'X,ƃo NiO}=: %vTSx؂J1>]Cs"Da(H )A/ wLiOo;8VOAK΁چY])vB-2Qb~2dOR_ -I6%fbwKTxc+2u@;jԮJ\>IWKzpߜ^-wݴ^bQGĸɂ[:d*ЈQ8'Ď7~Qse;էCe颈샜Sḿsq蔀p6bb1 "j cr@zI((!\h 2uO,> mvknQLT/?O8EǜۧBXzhH00:@bEX`KW`)G qZN3(a݅ &ۅFFl^YZΚ[[u=P':l +cȈKrCxV3j&LMf@h)C%^# OAk:Y|rϲ%IY!j8/et1>\9z' J"9yom!Nmh5u,ZC#X|F'4_4 "U0Ӵ<÷3I+{=0JdA,a&u88GƦ vk& > ?C8tAX|q`F>_A\{7 Є&,€8]x}svH<')ʋ(OS=u:*M "5iK$K{ Vr@TSq1?%m'O?0VoYL۶w٢!96A[_jt}gzDHeȎ˵dG>dcx'P ~ `fj= vV90GW~q/9BTv n7Tu@mN^y.^8$hK FIUعQH9RQO29S[íS(AJ(I=7ÉK֥,@UgXBvIK3esͶzhD/F @7ז Ŧ d nx0 l[wĨ_Gl+=ݺS5"Xͻ4=T4VoT P ]Fz_Fjz}@w!Tn-)+JUȨ:O74#ti86iaxӵ3"PJC ce ؖ@~F̌7_jyx五UQo>iK>E^O5}s ,6V8gkʒ{DUXz 5\@ʉ6Ob+/09<͔ɗO4tPY`/-QNZ"YSýzX_1IaU/,̶uO:c6{}L8)lIDhDͬ1k5 NdhjV Hf@҃8p}CL$ B"C )0=~첖5+hXsxaå=U\u*sSsm'XZ:{"~|/:ZAXL*\cy>15MCus@ki͗۝u ǫQeߠ"F$x+gDBKZP[s m@W1kyp&zĝdZ40aDo26xq5E.''W0˫z742.#!%z Q+ki3N0:_PӉ#̽[ln(;X%?l^Bޣ["A4Υ ܮ<<x<ܧ|wާ{˅+5lKTXjnU3LŰ/3ԟ Д0AøY:8XD+V5$ZWQkL}8/T Dp )˔ev1밒4cc۔0Yy>i } L[;J>%>*@T!\jԱy4aLH2,5GMBƥ|K * {n(#~DḤ-1Y{CXᑵDU)J1ϝ& ЦCt^oW)`T"Y|vAaa`*!naVE{#XA ܈]-t;wLxJ'ǬLw˭ j\埸7q#!!3\&ZGRC{nl%r% V[4McURˆNlߏ`DAFYqߎB`(j/1A*bZnk x#E=LTB\NQ6s.}>D eĦ~`h'%tXZ@4I:Q HGv~n&ͭZ;-xmÔE}*B;TS yJ_߭qh}-@P~G}* {:26 :[y=;.`Bs/峤J@]̱-`̞ۇGCаKOgTyQ-"lVIp}çOgk5J&o⬌t $d,sD#~UeH,]Y16q'!wj$o$:2G:XwBV9 8_gj@wEiyvs|mLÊiJe)Z֧1 eЗކ1#YN:Sx %6yD# u`%+ Ȩv3M.2 t5aYŊZm%L_S?L5fP" Q:TOZ7eC sw>>~j&,^\n=%A_ ߌQ7y Ul{!\wWqq唟ן} .OF//"AH4i`{(YdN >4]H슂SzY|`m'C2؂`kq{;~g/{ouht:r%V,2bY{M{jgQJO8G!c:3?0q#,w`{q% &/zfYw @Xzj7`A Zi ZpXe1r̭K}2bdq̼+,61_uM?du~MN~9j\*#^Kn1e>y_5kw}}U\k̯xZ#[p"wbP]3К}hEdONtxs|¹_%L-8n 4'v<٭JLgGD ֑nϐE vYP~sE{~<'zZz.^;FNvX{R#TPpPZ9tElP/t FP:rZf9Rh=DrrGBZƫP@aŐ:*,@tg3&y=W~Vk~viCkל[-j^hYd{_,-*X5r]3 1OH~Jh ˏWʑ3 6( l1M)m1 i^w@ 5*d  djJ ,B|SQSƃ;dZn|  2?!| 8yipnt񟣶E>6 e7H͠Qղގm9 *PL2,<-So;R=k_jRty<@Y&K)rZrz/ztyܘǏwq9l6Z~\u 2aWAI~Q'vhYP{{w tS/lBn:2eScEDհNfQ&+dI ,hOh12T]T&_@Iz<ǚVV)[ 9b6;n߼'Ä̘0 #\bO#2ꍙ%sug:$ĞJOI-nDzt 9(4L,4|=Ob!7p+F~K1ڑ!6Fq7wu) D`QP 6l:qErΔU(93 [)wEn4Ae[̫{s;wB,ԇ:_|rӇRnt- (2=/7Q8ݡEd i 4XYǝr)[5 6-W8Bĭ`-L P%FdU~=Vq\UӇeFz^coO[R`xaj{-||j\a"WSQm*e׽U+wf^2Sj o_F@6yk7QlJH !0aLT, N2SNc:EUS_D&"Irwji,/?ѩ;dbbB aԹxª, o7%s!'A`M2I+v>ɩ (8WQ CKQ <+b;QhF P_ee6e)w<, h0=SœSc!B*CD.{`x J]w)Pځ^H֩QWR­ Uk"'Uc~si'w rD$M/ 5"/fy_x7h,$0;(n}ƫW4oR3\5|w]VPx5)Vjjw~ˋ@.@Wbށ]c ׏~_y,>@EfV`j[b3:CK;yTHlhgwo 8{j}<`XMo_/p07Z\Oo4w+#Edpb6K_ /aeP4tsVvt*g͓,Y,e?ԥIEx̻710mK3vhG$IUКTRhL -ցxu_1}cHxlFCgpU(86wi y?8]y[foiP zob- k%uKtS`U7f꣎64W}̧ Nz!mZ+?n Б끔u)P&U<'>ٜrC$6 :VaUfTNnԯzGW~^9$>T~2&`W5nA>#U4rzRF$aUرn\ƻC,r(D=ų8&2GtAb%(_IY`{=)<M; ,ȑbm EO,݇6k ?)=8*+T؄j,cjFe:X' !5ya +M<;K&<jRX-0Qpp E[n] nkV8,)9X;:Y`yMC7n?RB.: ԃu~dk7ǒqf|ϥbiJiMQX/d&hI44ljLֻa1p3¶(q^_|rOKB  l(wgI'!29_F:kApCUp??O$1^θ %3$.=[ąVyYQ|Ysx-FbkxXKQ֓Y;-Z~ >d:kHrw- ؎]!Eۦ ?XXDɅo@F>%;]XF@qIvJ)d ECYCUxUe~0c%.Hq_Flh M6"}n⎕@Ϲ:aЦŬ Ԇ7`Qߨǖ~?`biK]!BDPgxkEC1@\9оV Su+"Y?5Qޝ!_#Z=Vf7W`{-U|@s#MhwyǏ=ث,N DV93~wRI*cSDj@(Ebf{ioڻEƇb~י&Ֆ=isK07l"ﶭ:mM|.OH myEDHŃui!߷[#Z}́J14yU+%e^؞Ӈprs=R φG*2$zJGཉ]޷S|Od$\DH@qf5llnI~0 uIUA\ͼ0^}?`0؂QNpDp_GG?X}VS#Zա{.Iг?Ķ~#9nR j>{UvN2=@ cc@㌂6eqJG߇= HR'dS52Dt45q- D|A9AXC)ș6Z:?z^cQ7DhS%(;̼TjFI<:"L;(OK\&KAT]F:10X;A@SÉQ'RoMW1&OtX'5Ph~){(7!3-X& 0X;6nEm E֥*K^5[mB&.١@lnxǩh@o\[a}d* ɦF` 3}@m_GeP1e?ό>\BZ?;o??#8sd>˺ % + gް"AUoFAڗ Lʁ&e;rH;ՠU B,2  N7CZQM1ZCnHJ<4Os\2^q3o:c#Z}L /AYvm}+x2b+K#X(H j{iBN_,Nri3D_oWx9o2ω5y3>7Y{_O}=Ʊ<4՛߬ _{92+FGȲ<49x.+;0Z% q\Bd4xAŬ_Җ#\ɓ߀fUMD |I@ WXmny; l \Owb$.JYg%R}cL:qa#]WhlˈQD~"1 6&ʜݒ](iSalf@ds㥽-BLo,Y ,.(e1ܭ&AD@h0(eRkѿ6O)e2 8#y} ^[)Z_E06i>:4_ҹPݐ "5GR=җWbBM5KnlwP~HFb<7&HMLdw ehL'ıPR<~F-,0Z>Qz"&L@F>~0Z4ZU430wH9L\f}EfN04`!XLNؚ js]l_EbdL#vwT؄.̩xzr5"f|ƟVXgwFT卪Mt76{!yo{j!QvӃYZT&`Jc=Q%\\F˦Yu8K׻@ =ؓvQ Z_(';A?aǫ,'؋k.E0`MB3 g&BgG@KF:c}cA 嶘@MlO"&i!Vl,'Z8^S(1wu .Z&HeM+*RE"*[Y^%_ Z,K#0nq(bx46E$/zgNIA꬏7rRs Jng>Fy<mS>(vU%2懶1a/D# L8`M m8CyrsES]N4^uDe%3qFt[/cy!sϚwbXqs\~֚ h3Z l*xi Se)((fc> "gxä-uf|5 a걬A5KnMd_(hՅ͇oV[ہ XLqϑFY[Ýi>|)AiZ8I.L]W*b;*=HS|OM1rVЦufTqb!E{wjk8y'Z4Ьֻš>7wku[]+5rdd! zjMS#b@`9oO[qvM f0(]c;-fppI-*aƾ뤆F+[hn{,U°˴xZ?1OZLC l21jб-{=*S}O^ $7 % _T~e$xcP<=@ '"t .?T!_"uLOݥ̈́`|ci-[o5ei+`z áhŸٽ[!=lk[Sƣku<5.2…0ctXy*Mx;8kӆs}Tt虊NB s5L' bvZ.ܷ F-Ljְ д-}=)1{bM6'=*?5NϭQ5ҧy͑v1ˬP_ҀkʔŋgB6JS1#7ڰ bdog0t .%d|k+302J8=j]H~HKQr ~:;8Tu. 9:U3"),a2B/ fe kfGiF 6_B)'zd;v=;s-GMID<)P\.ǯE鏞]OqZ~@; 90ᗡ+s`,夐^f1ܨTiY\oHc,uM2%>tp8lj@}UyGF'ez"k-l6w5vJM ueBbz|n'OGhA|0g׿r~Y{W*M^V h}?4!Q{>(0N&tXoّEuo\XsB02 \ z)^6DInvoËיwdA% ~{2o֢W;+R |(\dhК>UEpU_itTt_WZ/>:i{/yna IAB_bQ< =E*&Ӄ-Ҵ, c.Se;&W  [b7ф\(}2QK`<챮,+j$hUpV}bnl-mŭ/C l=/T&Ƣtmȇd|gegS-:$"wBQs.<ld,NX l-Qm&#[*YyJ$Qm{?: F!{'<n7r_~\Q)ٱh26b,42 CO  KW/ V/¿($\ 4ʆaS鐿LJ-ZmR6X 3ugO=µa!_vر?#35sG3(7V]8c|doyK'.Fe(* Y} ã ?'vYy;54ؓ ʪXf3{#VlBz+A Cm> JVNd2sHa ku|1L_ ش5,:QŹ!/%v JukrYt玐th 1B#jb,NurueWGu VSA$В6Z*I :\D 1LiPŋ54Vvn~#3/q:-Ed"QVAI6 e!~=f0bHF&7uGQ\MH%,բ SFwu*}'^Nvl\tLi~.CT*zM;~E hd/2-+'ʺ!s r&UDӳ*[=j $kǬ1"*PWP {?/an2 <%LΡ0|~v7-UIQf7ltՂya ;߸]^ND11ё[eloa,'L2ZED6+(jm%o{O=223ސ 6mDtf8H4$KQL3 Wg?m?5B8+0P;_3!lE@liw_zFį h|ڸt&1̄T i-/;#FTeD|>Tܱ- 0ckF&Wj\_0UZ;=T@G>w*BڪGk[ήiξH4jWL+rl%\`9*|Y31+"/Ld)v++u^^ȱ4 `12Dπ; w9˻3+P_ov<)ff=mydiX&Nk+ط4ruD#O:;$.K2ǔ^߫>)u#fX%Q,P /)Ѝec^P8v-g!v2m0Vr#C؁+xsP Uc1q'![h%eJX!Ejp/ioAZdw*>#D+1qlFA6)rLrϔXPޓge C{.( !qP\񢿞@^(I"My% S \a%#%;Ex CNiL0mBpa@b쏑=ҩh]pCJv4ݴy3*e\#w\%!O_`f?%u>YBv+!+$B:Y(D{URCΊ)*0*\9Mz=o,8:kF "yqrʕepqؒV@4CP0'iIqX#-CFP?vTQb_k-f vP{7&柢 < zKQ{uE#Q9FL"ݒ292\Ia(B<ȧ/5ar;h`2:͞l B4[ÔC\uaJm$צŘܶEa!6\wvW1_xI|[]KSGjNkE!єy}n\Y{J*Bck-DqJdR~  Ɇ%* 9+LYJpJIC1`d afфhwXoT3&"bڪIdF4}Vt:?whTY|>c+$J/V$@9(y=ºhbS乆S2w{4XqJd)~ \;R~Q.=@A`~\sq h"}NI}Q#6EqIsPs"F`;`!@VC >E˨PfN?+u_f!o:|zDV5&F9CEͫUGao" ";Ih(y)F_:+.wvoΦWk v+(`%ֳ:!~*So0o!)$u$Dq,aZ3FI#?YQ fo"s\a/0Xo^.mdek?Qw>Ƭcbn@ t7IoHp\\n{xqm \4C:. 'Gȟ?}{Zǘ6KGP$ulb":t3{D*FcdZ-B>f"Q *ԢDK/rK zd-LY#/pя]ɻ[ܻP\9LTXoz*\H9Ƴu9$Lܙ/`Z.5JA㔈KK "gd%O1IVEoq-`!@rQ,Lv ل':ICڍ$s883֍USKO )2(ץ(۪Rի\bl){]#)H#Aq ؠ ( -_ "k ;JeK5jc8v@=HV(FIjlsԴ &]͑&0ZխSNX':8[R D9?)Bip-„3InRfKBLF. YAYWBۖEsAbx,7Kk"U5Qԣ kmڑj#bIcP¹7,Dp%Xo<ͼmG$$PwN#̂ :^>/B`N,GQ`_.Y0Qk>[߳] ~v,f`DaBeb6tiT6_|9?U*cO2zhTq*K.;vm, F]ĨWJ6[^^.—X%D$,I03g""P~ Id]T @ל8FjaVvKc.v|Ƈؤ1(5ԑφaOQ}=8/cTb9"ʳfWW[/2>ca]/sSE"t| 8$)  }~t8օՉX=-J8,ougFN҂iӛ,dPX<՘ O򯾻:_,\uH,n>m!!r_b:; !"ɉdq»f(;St`kD8DoRKX%%ܖP4,Ih ?5%sɁ͈]oʤgjSFw˃dy6d0xw W[,oIyCnho; ~^¸yA#?bVDt̓ڰ+e搾 &tW/6@x| 31zh|ZUDz.I;c*&  O=o|-m e7 nf* ˏr@" 9@MlԆ5Kw"L7T⃭n@#1sh|tfsOG P*-?NGXiƲhCX[(Dgx9xœ>ThKO]uD1JRtR$ޕQ,a%bVV{l>]g)s>6=Vì DXW%p%hkI)Cf|31wr9!jgC1cӏ(L!ῤ?Gnʅ إTl߃Õ+~ni2cY#3b{Q esBm^"$.eBo :::(҈C?jӺ Kr$ at 8uל?FVwng2Ԟ=.KUV3 Fޱ2viV$|yTTɸ+؅x1N}1nWvj'N?= 12x(jF,pa[ex0;KT uFU7cL6{VvƆOiUe6ъlW wèO-*1d9:8)ÿDZHtz _HɊʿ,{&n,@-7bٞ$El6)'ӱ]f&^ܻOr_m)yЗM&LnW^8q* b/+ p.Χ2nFNy諒n.jXo!mYD?)&0S9@tgވӝM1 iu]Vk ˞ ҥ:81!K^_?t4*I"O1*oOW6C1qbJCT5,=ZI3~E.ͱgspO^xlM`" xl0v9NHǁxi\=ΉV츉PKrUs dG(2FXfkjJj6":'MUJ& R&3/IY77o.-mB暿7Tž9 Hm۾,?+m{9 *5GMq qYaȺq('u7Bʦ.\x"q8;N0 9Ar]԰,UxBb.$i" 2d b}SG(ǥ/baE'_6x 3#/'进U(4>@lrL׿ӓ83i)F2ܱ J/!@B'H?ӹo/ř|FxzKW<k~vYޝ<+WNHg#gHf{#1V'hQ:({xK5]L-7! c,L}U sq;׵4q-tʕtR12ߑݸk 0wR(3<םxw}7vT HA*MY(":c؟Hj `C _ A`P!"Hy(A٠i PVCNm9޶ a!\Z%TUx#_L\|y"7oQvq,oG҆s=MErX9EtvZǡ8' "N`E>}O9Xn"1±X!t@$ǀV\Z πԹ+P_3㢵{U-Z0F5)R}&2}&E}"Ŀ& -H냃i6Z{_]y`/ey?h$>J$TE0Vqo%*ڃ5~},fZtP3>N"{3˻%_;GA7wbR6J!Y9"C=^x@%r ]ݬ3\9>&ugގ'{]/aydK_TQ*K6]CW-gF []]+v0$ED*N$O8mhFd $ Pp&I.'[J;{mCس\zԽHE޸JȮ+olxo=p[q1g[]2 Kgco.ҾMsWs⭛3^YDΝ`IHYv2x<`iQL}z%ÍX [ȭ>{cέ}h| =v *I׆^> |g):~q"|ߐuZS2 "m%&;Ź-l# ]ņ3Pf'bKFc 𓴋;M)1A ]vTJ;YZ(CQj,1¤b#8tyFsiȳ14Y u29 " 5\aa%sUKNcGizQ"H(|j9c@,~'RbhbL{RNP]xu\ )ih| eА`A}A&UFaZ”rR* -Fd1y]hB-P,(Zxa/ "b)u Xr;yMy]k\Q+no%jGky}뻖ʵYT_t o z}&$v`.kF" HL,И7\עMG6؄9X3lzA-.zF} w/dn_ViJT(uX^";iK9{SzJVXjhI=!eTZ@M|HqΡQg]GmC"ړϰ3pwɴ0jJ,(ݥ48Nu2%W/B=qҺ@'acدK%Qgςt-eZ՝$ymV x8йmTG"|ƃu$_)˫@qS"|#4u$* 'yR&);<>,XB`cw Ł,yϟJk€|nҨ'Y%#)l@ ~YTPJXKZߗSp?ԋqMj,]ah1킢 /Py7 Zq=,NE_)g+e4%<"P bǿvFVTQ/x \|vVmҤ<b,k>g緣~(7茘} {M(Q<_WtJH6@VU8a !GvJmY)B* q!uIρ}'JwXdWE EV#G pVXwmU<iۿ[9i_҇:~!ew(g |[<)Gh*0k~W`^O+泤pPP'rrGSYZ}荊Ը;=JKIٸɴ5Q%g$) ExuG|J򂿜` sk'vGRgN,I1Dfoc[0%= !m]qnE#c`=E->Uo@\l7# `P]p/pܺ1bqQ l.GSRXЇ9IckQ WhBBVb- e+#OP( _;~l;y"Y"ıƂ\,ՑEhc4d\XNMJ~iףw"?gs-} }L"(u|>3iZx@(꿽eRuFmB^%ж%Q@\”5@ݐAkގbx;Cum9V;EPedlr*xЕeob5c\Q#t85<6U` {]r*m f'3ΰx ,R`GR(Cm i{^X2 ,R1 .-_"]m&[Bfp=!ݿheyd7M/s. mJ"׿5M-=_CDCoЋjT"NVC-n@_+@au/#Sa}Yґ|LIu$kqXii ~OX- bE<_VzCD1s+u铬y[A?'TޭބsXL{c͏8xq 6뒤cEw06àw?B~P uz66_}·sg:֓k .I ݖiȈYʩ;#g+|+Ùh}kODvXId秓y}UPKXk?}!0¥FAs=LW `T-cT/ /Ke ZE(DO }qO}Ͽ'QEW[\LPVj?73ӷ)>S%0\4 AFdMM.Vus"0"k&ThY0Gc8ew2!X\Ď\)[VxYI`[_0@ٖ e^7@c;-]&^?t~ֵJ%˾]4yuy(>,qWyJ C~muZ~x_> F5j({dJJ,'Sȓ9b=3 N%}*cx ӟpz@0{ Q?Gb16QK> Oe'}0P?i{ZB ~ŧt_``9q_QtdZ[w)G(+ڽ}clc[Kӻ@*Fܱݗ|4#5yAByJvTFmP>X.^%HK$ŧw-iMn`&0,tAбMAU-s]Yѕ*+MИk?`4Ku #:4az-[.YhM괥̎glsŎ^ȝK]ſ?Z}5 )/a -ɠԌp]Kki LOa/rK>i``ը3Ik5ҙHjYF"3Qf/yAv.kژD9n?x]lq,?u4 ּ'oW0oYp|7)ۛ1/N~^x"a AqKƟ9Fufca:E3.S(yFsMLôrtM q!!o{!nkO1#3V4UnJ,Cۣ gNY2 7jG XdTbeA&Tp ov:lb~ |)) ] &_CGϳ/vɚlz!$&sfum/؇Ow(vWZmjy'M^o y&^H˶.ksm@>QLYתB.%zURW C^/*@W "JUْ5)Bf6C$;Ջ-TUq94-- .3 75WZm7;Ծ/~q<}kGqm;:ڜi0!:o5R7 yZ9ͼ̿4keX#(_i6m =n%HyQބ6 W'hnЃMOk2)]>ʈm#:~]m3-9I} S9*Q@yΨ B~#^oX51r{qlS`RY_MN1DG\GǏ(v{-Aˋ`vw;e[,dyE+nÖxcymYG4x{YO`I,?W4%XG `G(yI~A Mj-p%+FZ;= ]{Ͳ56¹9dήO->d$^>4Pn6>i gs*c4 &}WC$ރQHHf&"h <ߦk(4)E^m7˱ zT !9gOo`LW:.ĸ\ 5 {jKOWGPWԌ=3&WHPWm{rR<qyph MNFSp`$2@QBl\ʷm1$}vɏ0SyzjW u  ǴErJ ;E_& -u3=N)bרQj~R81 DťE:9DUSH2P@\_:4vT䲂 īrCM0qܣOcI^'Vb`e_}|fɊ̈́$7cH}/ +xQۭn_˦75EO"HaOn*Oϰ>x?):9! :Hl4FTO-_Ç$^TmNKQ=9N(;_:GS9%] ޘ[Y2#8O Qn:`2ԣ}+b.YnU觋71,y,Y`7+uyc*}[:RYWCbFNV2 d;4 &9fFMMNƓgx>gDڍtpn.";# 1j\-_m*{??l# |1f#&ג@IEŏSl.Cbh\mx^e׋6^K%3%EֈUb!Qh=Zī:Lx2k#5AB'%UŎRԡTJZ^j"s25Bae@iy*zоa& |e|+57ck-5maEGkd:,|X[M &wV?B8B@W9qeHE߭<锔ƙQx-"@Ǥ[ ~fV}z4tLV?rl􏀝jr6n$bW,-P~> gb {E/x ,ZCQx*Zε[!20qot1 Pu#2֟ 8hZ%rHFE _oc,_1%m_ QXNvVȼ <'y }AOWf6;po/*Z $|iN7O""Ot,Ս#B#m]~0tE=K_3?J%scyJotGB\rMK3o~P~E\A _i/v0t/I N'hj }.8H[^e}`v1~,]-T 2$afg3he83D¥:1'J]FsoKm@鵽 $Sx'w(n(7ޓ#kv _#.eS^A0OțfW$jl#`{-HcߘSe@fg F9B츀әXc?{^N~*_jB_Rh<9(-WS@ K5<$_(,]xO(ȧ0fHЄ'|qb9M?nAYpf(A{&*F j$5ru'3kJJ*P+x-zaۉcr@o7vX;jtpTRopap(8<:'377x{C][DxߑJᩗpN!T:r8ꊴ@s$^a3jGô .(R(XuBS[Qo[Wh2F y. ?l6iI{|Xy]}B=]D~ z߲00Y3g=4"E4*/*ӞvD?0ä#kRp /Dx/h3[%FIsQ3z0QA' p~21ӎ/%ԑ jηq9O0W`/Vı8piՐy_?n]soU>aJIjF:'^1uԽİp+NP,h>E3-R܎DטbqK>tcS]U;vh10xlB̴xu) iK2ڑ, 6~%:ې[qa7iazg}y4=b,4z4<,Ys贁q1GA[@qhvqᅫyna\n5ל7,\fcl k}#nmOG Kcb=b2*ZVGK'q$mԦJ^@V~BmvkPSI>dZV =\.z?k ֯pYTJsN2ϋW~刊8Z'9eH]Im9;2.LQxV;8Cѫ@˦&Zt&4<ldZEkp7Ț#I '$C^i)v^B@Mi 񈧀* Ei{ĘjM03keU.T22LIwZHM{*'lG^FHp ~nv@b 2P m,i]q~i=ƎSsf@C|1+Y[澖RL^*^e 9$t>k~9׿$#;CO[a"i4`/0!5򉆜3A+7*SO:bsi=s;ɀ]:YA^qf9V6rٱv5g{;^&n<ڈ1[d)ĘlX$Ry^U3#οt /A< 'rWWIcȇ:g;6rC%I%G@cbίZ3XsWF>|5ҲOPC#" N#~vjxsȪ½ҕc%rԚUȳq@JkK`$q Wp'._hOͿxRQT=8ҍCJ@x*m6)[.ō *1oTC/n/g?#< 5F1f/`K3XG$];/E{7ǥ z7y8e}nVy&Nu*{E{/G2`2;=E'% X#px3Aײ^ _2b>|W[ݸ*ܚ9EJO9Œ{CԎVrv ApfO 34/ 鮽<%Yû vbJ̳/kf#w@n&Tҍ ˁ'AomI  m 2g;R{Q Q= ):p n.ȉuB@ ڇ{,%ᴏA V(* N/Ζb*~90Y 9)Ǝ'h[ _U]$Mʓ S4#l[|ϵ{>-57*(hvMTii&ܲd=!+~)OMo6'b"/tJ9 .|j ·Z~N=HKya܃hYk6.D5ªagGR2-ʏxIfvnZdS 9bĬkՍoxC&ӆ>AIkԗ^cP#W=GjEWv 65Ƨb:=Q):P׸ :SPcCV]l ڕ}R f6+D jmQKeeBڔ@A]zc5 C&(`g-Ê&l!SI| ڕ]_chbtZKz wESѪQƢP-a,m%-*]-TzEfkU81Y2nڇ6x,|gt f -~^b[fP&]V3b%eSvϩB[Dׅ,=G6 ;(lX:y^ Yܵ [1aAK0*hIP7n P[fh ?0˥`Li ̅6L,soiV5k,ʵ_2/~>r?fHxK&op7ngnW`@Z~j,$b'd %J։HzZ_"b M#xxE#tMB0Pnl]BWÊ/-Nb.lTgvyɌ;e$ oਉ FJ "H34͏7gPR-tY'ԙ.vAMbZYr,< Ǒ\7 "1Nw=$ii/EzY\A-k%/!)t9E}꫆'Q13AћIxZKR9ވyH*Onjз&hڞ8YMR[E.硵fIO>Y_0$0̮ݹ!Ԁ :Gvy1d<>pm%@001NS6pUiO}VWVb?`p*I@]XzN<?G"xy8aI'7e:Ňd]J{:eP7Ōм$XP2'x~m~SIZ0:o!F "UøP{-,7 Uָ '/Sa`k^uս"WƦU[=ϡ;UxatCMdE)AГxond2 5袵w j0N,!Iq2ʯ^9E$tC8w)Sp{04{&>H)m^s韝)I[sc+ z"&sSO*iYېȅ,8 ^ 劏i-8 SY; {yҮϯ1oX'l # ^rPnmԫ^jGbzȤhqDQi]? l7Gal:$fɞlO)I[J!֮+,,d7H{Bv~A}~SUMRႱaO L֠S;kZ-ɨ/)@θMp WҐ۾u/@Mgî˼GSVYxئBZ퇠>c[}jS?a0'$K1~wMZ ^)BeiQquF}^F I NO3I|-ع"/sjTЭV*?UGT"us c??N jX(4:<9,kz"@/ Nb'5xogS3߁ay7!¾Τ|*J2d׼;G ~z; Ӳb2c5n3X3 1 (Xbz>h[@?䘢הE st[VvEXmD`zj +MF9V= IJ1ߣ[//AN<@H,bhs[R-|5*c˘Ce<l wMGlr2#U,4xQSV35~p*XɛIݶaKyOĿ#J߯КN}нaoIB >A>xLr7F!skwI(0MPLvL|oThaA9pMŰ&w'D &TR.εFyYM}@EK(wK uezD6]p<Žto5t0UgBV1EDzm"TԀ7ؠyMNС<ϣqAj?){rgMJ~t>ZV'kvzt! /߃~b2b LT912Ce6k3_߉PsQS-ibkJ ?L$zsL: j3bA`EDjtI.:DnpgLo14a g4mƞ]?6"s ]L00ZR^X[9baK튡{{΃HŅ>}C2֍R+ނYV"2imHfsjV n8Yi CKʭ؛\GV(!6 IB h%`u bNZр0IfV6)*'L"")Ep~y}QYBDP,ERo!\dWV_T:GB6(Aؙ7$i7#Sw0[GpXGPj.,\dbPx:6G8}:J60L-|CsZ$ 粉89pjxE@miqwon>m=3ث߈Z9BeJ K%a!".4\#΄gL+AuHVFmlJ$m ϴ}$7 OBkcrw-N lPBL}끨 Y&6UE`Vԡa(u<|ۅ稾l"@$lAKҚNb1fmRׯrrhMY~TW8HJ\vs24n [c]hV ڶ<>-OV|P@}Pl D<d>hvЮ~L0I|=#Mgyy~yjK Q\*KL c;цlrNǴXA%cG!vV4kU~cXa}+i^SXxk c.}׏側HKGw /Rx*~n9[, | ^cvĕG|n,>:ܴ=x&mTX|A uo2ָO RU`tz*,-D kI {?*8BVM$1#,R[@8tD&ӑ=!&'Rb0_Zum!>ڋ }Մx'VX6{ܠ!H֝zh ѺhAa=Z&g:Ow jgcOO)e|!!U>)vK VO=_#D0A7$UUx)<4HZ(rԉ[;yxwTvX "gG\ E<Ť B/ wV)1\h *Ϲp_f\.G&S#uXrm+(MP0F/Nڌ15]2 >9\qSl;Vtl'uEtU|S+b %A)DwDz%h~D!||$y)<?EZ(D1:br7lHGl4 61o~ Aϊx BeR [u^pjEr]MÍvWLviv %6epɢ:x}y(0瀹~J,Igtn.uOpHffis<]$o!ۿ01lڂFkIԩ2~vQdt(D\1H. 8a;}r M:i[T_#J.]FXD9Š&s"7~?jeIh }-.!Vk߆z`B4ɲ5Cfv!U޺ULOpBj:EքBcZP4/CTxܹ#oDQa䇂Z=!cSp_o#]GW8x1m'iTK`>h2q O(HgSғgiXH݊8zJ_'9-S`| Alm'&r A~׎2t]O.-LW9Fx"Ũ @(\:T3Io^1R ȃ=\6o- uLI wzN,z7MŽBΏ1ԁS/""?*$.x,"5]X%3U7y]5W+lvj-꘸$7#DV6W)8jč /@t+C?<>v|,`JOɡ+KFIB(b'3 -:*j,U*Q/qGIϦ9kwKڝ@S̏C]E/0<M:gLe<OOk<V?DC?c63$N&'X>k%=uxsX,\dz+2IfV 58o6.;u>RY'gi{~aKۅ("xj--Dv 3xXГ\S*"J5!0Zsnho˃㳤c\+kXil:dȕi_/Tp4߭)0G * : <(Eg]LE}-C*m"묞at17 QXt85sq[%bW5p-I ʦRC5S>pbMZ&qWIL.^\0(,1H e@#i_W;E?#FjRARF\.dz~OɜH>q@Ba?j#K_/l_h cT>ogYJiFhMZo!h P,*2\b!IW$m68P3& +gy*FǎD2uҨpӃG׍3]d!ӼN;']۽ l,e4_%ϭLZ|_&a/MJ>0zg H3d%,z3TVwWSWs1e _,0#")ROI>e.KÔdI32ߘ*$Ok (3밫ꏷbi %r 2:>#"pqY1s>y 3πfE )8:GndZT"~N/ĘіevyJQώytj$&g.t"v f7=6H+~z81qS}%M]ևH-ڊ̦NNz܂=T )誗2Pٟk;ib~cnS>5c-m7*"OQ-Ltoq$&W})rn(jiRV !myH~K@]X:r"/ 1! ?ƞHŁݝF\0x賊YHѭ1 ez 0ÎrZ P$3bg)ܳ``4fj=-]Sт%C(\]03?CK$dWeɄ+fJ AfP`_"Th8@ *BmE/Jrkp~EͲ20MTvq=hyHër4w_7K[ q$GtpPXPPu\Dηag~*&U_\H-Ж4l6]qsPsoy+%Yp將j "4q2!$5]jZDBf ] LD}X ?eޝTؘBaFVE՚ z9߉6_6jD}#!$0^ PB3{ v.dOc~l'~lCUȪvĂf.۹3^<2풟cT :y5+t. =ñ5jF 2tԣ^H2oBb3ea1.u f ZFÄ@N xeYԬ5!mgB.ɖ{%@v)*6HYz1yu>aPK |WO"Bao7TZ'PwLv(RZIa[j9G G],Go(NTtRZ`8^erћ_rI}'L '׉% =j>ӡYI(pb20}p.z< 89nsV*nK1KNvzisv@By! :Wi*$DR7Dk-1xi%꽝e}+NU EJ&p\n&i7LF$#SĈ@ǵu0Bے֍%kZJKm A-!W+>tBtc5F̧;TFMW I'Xh% @ cRm'~6ͅ:34nقkq Q>K>-^7I }7hc+,-u#2B,Λ_d!if ס Sp.zzH0hy۸jvb rA6x:g-P"I.\_@i0__xL-oWBTK/]1X>c?~U͌z. dY"fb_= K`E+u,ѵ|TloPMFH<5u ka,j)QVZ+%rt6{÷[Z=lߓDsջ4+pYôFQLr^2rMGOX3Q +%Ifo>qlYeȮrR`؛~~rs*`p& LU MpGɄF'y3q^4j' bOiOLm)56ҨhGnRBQ !ÌJ ft&”F,ŽN ͜雨{lȋ$v_sB^8)lXCJod'Oʂ%ݒ$w8F>7T~1?e;-qo䭼p[\g5YYd\Zv-;R3wܕUW`h. Pdxt:.VPo+uoZhO,11~<qD7mkk'2I֮:lhD1q!WyvĽjH5vT$ n$DuW<@o]S0CЬMDa I>!ks6jI[ĵ! C_/*:.z2ϔa%+HR4GǙnD54[ݗ_K%Ml!t=E6a1hvT;/` ܘ BzNcoKFd"Q?[j&DĉVqjyNjTSͷOA~L̟03n0.:Fx:(X(gb4%C!zuc/3$>UMXF~5P,Yk ]6^`H "M:49IsT3ʜģq"ODa(\}zٛitʹo¬`|JXkrj[M\J#@|uZ×vM&oբ jQ[Z?(v{SsI#~{;c}4‹*^]An{EÃ`7<v1WEtVZ֊5|,xadb&jD?d{U9UpO=8'<)e~ R϶~qzőe>_r^ᓪxwH@zVGvm4'$Byvj/B}u ظz0H͒A9gKXl.Ս\4>K-:Яydu$VհUGgԍi{'i\b(k 1 wG]§M;%wq'%qzo5Dt4n!|@w(N: >o @f=#7s95gؐ&+ToӺ tǞum"#O4PQ!= sdޟq!haf1o!_ѱ55Dz𜑖F(jM[XmNg lo̊3< b2EO|< 8b(MnUG,+_8}78Mb?jtx&e Mr&ܢ>jP7'(?DP-F)@ 3!brp`0>Vaʾ.mq9֔֕ <#CΜ@S"G_dEhEk gGA`ڭ4ՌN ĭm(z= XG[Z v>bwdwqzV"XPoc汽tL(=(쮋-f @3?p*o̬ȳŲ?H`z{ճ ,WH?gYS+vJSp>= Tc3/ BɾHbF,9[AQHɄ, Vм. ΰLJ>[ZVc(…|=7sW>- GO$jS]q =W:47aJYRHWS3霊h$^:vck~g蚔h@THK4F \'B>:>V#)+NyI:H}kpfG=Ǩh8f̈́%\_qE‰M9@=eHLlEzvfH6<˾fy@6:mgܭЄID=%,CPLc] \dIOckɒ#jȢ3ry)QU[g7NA-ƿ7tdG(ם\O;9w7 V^iD41Abܨ7"&v.LOT7b@@%Mu4hnm9  ׏ۼ)5a,"HuPxsA;R6y%e|*H ͤ#HDLs^Pcm&qۍ1 j^r W_ HQ%=Ru8-ݏg*< Lx i^l"?ۚowcrղ [CPA\hj橭Wm.jElnioz^z M󪇣=01[ꉺU"ʚLt i\Bu^'kyYm B *>B$OMzLʹTO +O n_]툓]mj'e#k+Dld I8sS]U *IZS=FyrU-1ZQZyIdo:/om t^W:Yv> "Cn R܃L(ܜFX]f;ح$=_;+mXFWFN u۔9c\&P׏Et\liy:YKpl ݹ( (y4_=jcG~ \/U۸hpN~3wyE/Y,t@E'%^9]>9*v6Hn zfzĊͮ\-7QN^ƻ>EoӨQqwn In@7&J. 헚+#Í8"g,ӵ2 Kkg4W^Lr5p#loW )pT&fRw0Sáu.|歴8d^#o.]:iH~JD n+ *5[a5VD 'u ЋE]Xj_-c!}l|B昖icj$XaRe-5nu<4 षXuz]R׃-nǧllR v;sbuޯ="0n[rbLй܈ݎ9y6Jvmz~u5Ҭ0 pyhÄ*'0Ǿ!{ZT#.~x8ATʔFD@Z;M3Nm)=zKJimøefJ/Z^͘8]ӷCvTK84xi1.HJ yp<<DRx뤳tVoA tYI5ziU"3PK'ٔ uL [*Tt k/mBYX±w)7ob_,zmW^-i P܀SqS. *}kvs䗳$Mu`V;ӆ֫pw =[j g g=U#;Hohױ#q?};/})Gȑ)*3Z L$۔d%=jtN -2@\BCIO.m{#i]-wHQ+fthNMCŪ5ݙ}{'PǮ2QiyV=ZWYnIԿ@c1YA5T[6>" KФQU񓥁uiC 0O;{a"q"?}cg f,hY w||_G%Ui¶#,W Tiўυ](8ɾ9GUAwxasp71/8&C짯,ѫ̜!,NOrv>&ǚP{ш6qAԙF^)Irpnݓ}AP1(KF"Y- @^\l)\.yy})ǥ:ឦ~[qm~ \.tc]r-c%:IcO6m?hcuaQ@HJ|+ن*T/鵯OjC(.kBߕ[RqYaS{ac*5g60n)BY`?xOhǰ z>@D'ي\.АX0呉+)=.<< Ƽ@su3QH?=29Pa=ndt@{95F9fO8;Kع+MĽo脇{ nphHul֘(7G RLk\@!u!aHhV5M9=v4\K=݃íRbH4ɱYlמ}Nd{v!oq~[T{X7rK\͌{G nmMpp,Cy½5)J$ p6MVrݟ~ 8JGEdwtnMh5Z=e1u8o\;V2qndbc,cb ~uXv vBxVt&;EI-69@K)(9d>0^ Q/~_U/fslr(Hdma獩҂ȑGQr2u'?@2q*vHS2СxħTA ׷E&sA-ʵ%kߨOkю=]dm.1+ӈ?v>N501w)^h[YuݶۺQլ? w6趕[ּ-U@dS{T2yw!sьF#5 -n N0`SEp8UEZsZ,oPK$%}fHzm 8x ȖƊ{63Z"" ige*8Nq21JtNH;M"P͇VCOjݏٳS%AQ;i'/%4Msm~?=PRЉB7s*6Fy9 I7-@/8^+aj2BE{Q15]}hep8, _=m{rЬ+F` =w5B#^z*}gqx>u+e@`>~21b${WO:lx{Z3ZT? oaVR3!ck ,M2%IJ}ϗ+hfp)k} ho9"ƒRB$I4|Sw^ΓtP:OBOryR,(nNڎ\;rL29<)˗FHꨶz]ĺ .qppMOwûrz>ljON| \Mеi^k,WYhWC(Mz2M@6' TҒc. 4E F@T 1h>p"C淇oOO6IPq_ AFD@JIݣ%d0=le,IQ~[.%q1!B ˧ƺ 7eܣ5 ls$z&,ןD*m8^RH/`]' Di2hGdc9$9PuNzLjV\W-@lnjB+Fz%aTigGʛb+h_@nk'nޗ2vhPūT{=^YNkقě:YbPƣdx 6''zVRLO5'JY7=|T0GTG8Riဟ#WF=&^ن,Nj&ldd,Oka 'wK}Ub;z<>*7ŃLJ~\GEc!s?_(0KF>dycry|,ӜC `7~"#W8N^,u~Z>>`XK%Tuv#CHuSYhRt apY=s+'}mpiv=̹o0^Y*.8`h9F\T|fX˪bjGOLyTHsL/Ld΅)Ȩl,bMP\TZW/-%k@=JnLp|~v,\x6w1:cLq2W )'21}:6Iʜ%P3+ QnlK~Сa(/eEU`'uѩv{t4`^X^MoL}JEb#-j퐥kK}t/.5f{|j 6E$'?ؤ w1IdG2ڐ.:#uuEcTY to3"(vo|ar:h3n>+ӗ:qBM٬SfU(4'E1Sftkiz pKOg }J6pqmfc@orܜ ʃ6jKc RJ[>CbZ#wR?#gr;E2KMB%Jk9>[{`u?|]z>VtB|z5 zfKH,zzAI=5XUx?; Eب)|Dߋ/IYMؘB=p*?_@J*\av+Cr]~5ǹR/(-uc}]UQ[ \㌣?B^F3p C,.a\cuሆq&?eˆ^m5WI1N /{d(_suEjB]-L[3`F.-![%zSJE\ۀ^̅֙YJC>%U@?L׫xɓH}f& ;]@vC]>X Bj2f:~YA En ,N\)w펩aff&|[/f) #/;5V}GĘڲ= -$)\{ xebZ;">a ө%=a0ql>0y^sHgqHg勧TA (wƦ`^>>ki3v48~s#(Y +7fƒ;&Z h} 1.8Pk%6nz_ vXJ@-C,,iQë:ɨo/YIvD/i75 l rKyXjy[?`-@ =`U@/#Ĥ-tVB%VEY|< \~%z KO>4VEx]YC(z>3W`L !ajя fRdh!ҧa.%9/  Т9pbKÞE h@=l:LL2ɨDKXӤ^ِ%WnTg-PLMK}԰ӳ<_x̿"Ia&^@Li1cdP^A@1mrWuڄ=ڴ4z?i$|u+a`VdfkkiE$a*iseIJ`AMO4ox6 ߗa9̴^J\/~̫+#K>L ޭX{hEp<㔒 0YNb*A(wn7&vUP>$'m'4[\e}|K)DŽƪdƈ=&e7DOAbJWkѻ$.0F~[zThܽhӋRLb_iLH !|ܹZU+gfz+e焥 xv]y8W; )ܶ4 Eb`k¦m(!!4ei Zj`?SmKǚz3z,.fl-rs~GbH.V~w;V{;P@i'G@Z͸-Ch],?FNlϜ6lXhq;*\< >L!HצNwF;|d` sN0f4p9y ű0WS/Q1o䟰BRKz E$J3$,|HF?=xhF|Ȁz~΢܉hg[:%g %BT+3wEul\Rԥ ,2ӕPa! _N-/K3D= IV_o'*lഔ'~r[ژсg|;t!pc!Jj]&kZ<ʖ;0lV*Wy 3|d/Y-CPͿz=~Lc9S`"Og sC8}tP @.r(e/M~[z<9BVg. 04rW&  Gm^ 6A 9M4,B^mk¡X;+G]'$+/䣨91tIR0`Ǚۭяdh:jNWIŸuС&b`T܈;"C[F -L9,}Dy|mt9/AK 2@?<]; '^I|rg1+֟BI4cf\;_'Qg8'^KՃh"dncdw#88Μ֧Ɉ]ns`5Rg?Njo)6\Er7< _62!'B\A%9A_҃WX7@XeވE+ ĝKnM$#'ի{kmѹ/o5  G2#y@Odo5kߢCӖ|x1u{1yX)7liPIa._=IM?*yCF"l728}W ei'Jb-qeEF v2a/=%8w%;1<]O1*[i>i@$(#v.o³]TrX`.-qg&0 7pؼ)(mС7[(NG[ V !'=+tR$ݻ龦?>hh C26.l/yg&q9'X7\ޓetbBSf-F'G@-C__0[`cD˦"b'+w\F`[2`YKҒ@|729׳+[u E>lJv:Z8̀kpaTxpஇޛw2D]Zit=QR|?L˔*3 sV`!F94ZDCn/ x#h0 @d=K{8mB$ T.֒O.Gf 3@gc.J ri\ёZp=ǃvTNK BiIQZ;fQmD+io,j}9 U`AAwBͦbv9ܓx/{a%&\` ۪$`Zߥou*qi'.tR#9Z6 ݶfVjs/eWq /OogDxuy|T5$7gZin 8^1kAօRUv]PIPf.Crr$X.MEJ%/#[ 6بi'%hh_S(L^YgğXyŹ0~dAfq̳4A%Q|<~=7c~KD80Gϐ>٬ͺm!,hqє%HAVJ뷘_Z]J͏å iD,#>טs nAmkO^]..5]C9J<3X1 __=g[r!+[#1) lйpMpA@]wNWi}`PTRK|REiըlX*ӈ@kҚ Bs)fmӎ 'sRR˒JFzVHB:FfuYv@R}gbP EHSӣ8wO;^0WЫuJf ݭ!""jgŔ$9&nǼEPO(sX|]ڝp̵dH–3^=!c֊tzÅi{9@%P{PSb{{qXW_C:F""}\AƍtovP^,IzܹY!|n`FG7V9 E_Ʊ8?*ޮ@R?_e M'mx`:KS̥*~LC8Fc_Zd,|&H"==C(Wm"ɊƨHHnj?L/^NYc=gnǜӾKG43W'E9_^!C*Mgc:K$O H$(%1lSCOb/`[sgϕ }FmJ" pm:'E!Sg վ+XMu >&-)Q3ޙ-Ind7, R дvhB*ky!{ -rFYMc$!D.f4Mzܳ]'0I- : IԵ鄜ID0O7l|%r\:XBaPˉpbf_mz\u HJOP䦭[Q~sfǬ߷jЈ].FPx ;tT"EK4Dm9/pR  EۡA- $sզyds52n㼤0_!}98Z!}h6,Pi\Z't̙ dhK=]{,I)FcLxicp cp]? BZnj?u3n/Qdlq6fY,vŹniP `xt~NUj8h!W|TyD67Ę-+ZSqu;|V`!wH\kn1 acK{Uُ,.@O*CJJpDN2=dŕBKI%(#F?Xq{vH=kֲ1:j8#ç H8;M+ Z8AC22 #@%$Ӛd <*{prݹ(NNkSs`]^92ŋяsodp! R#V"Fwv<^ͱ 5VQd'p@?+e{i; 7W$,Ҭ"ZSH~Ϧ)n_NT*Lb*gح+*V?Cy#$u 4Z}G6Е%a 3|4<8HΣGkZyjzmM”ifMeʟp7KKꙃ蝧,rMnKޭvٰ.DE %]Q'3a0r6Es#Өcbf&$ eˤ. 3Iĥ+#~n9ѡ2R0>q|-ϩC"$br*vJLFڷ4k]7-KA*HD#)$j+E%[oǧi*G/Z;k@TIitܪF+&#'`4޸ 0I0i褃[:^7KUyr(b$$:n>İu)3p%JES2yh̪Helg KO_HUE!L!Bc>.%噦#4* -uOQΌIEb-dc>W',/m!OX$T۴DlgwCbh䱴'?W3IsA LxeVH4gF( r8RI3P>ϜܫR1MlSSS[Bx Z.ZRԛpZmF!#@eaK4sʙzK4.EuRz6Eo]M9jߞ&}lg|L6X١*uAM1{DE\;aubLO-M4.C7kyT,X2bgu+Tо @YX$;Fx-@eU;j>FOEýJ 'g wh[ywCmE MF#d]e's4:M3sY4`h:ƻWb2ݻϢ:nݰJX]2l/6~!˺|m:ĭLJ!捪ң aIb 3墧|RBzBKVBgoA#!,#?J}G{> (ʒr bD±=;;`mas\(Fmƈ4W5c>3&K9v˥Z#ai0. ʨ(WypLq `*dC{jϼL;0j5[& 1+u+tY0!`5.=#[ ӷs!gTܶ.PW+ @ߐG=E=_,z HDŽTL fO kr3uFJs7_]bD #N$^5:J?& eObcba^!-p?#*Ψ ,2Pe@u,ffVxߤpOˢav8 /߯`*OEld% =bHSْPW*#dS:*]8~&_>RrIR6L!sFBlOo`7p|gB3E-Ӥ'b=n{#\`Bl)iإP@. t{ř#2TD3n%=+%_LfbEzō {4`^?.Wz8#/]ǯ+#c؁ t@4ڤM|b0 o^fz\NNiWh&AZtA63* z-E7^6&kz8Ѧ Z5x2-A`? Y-S#|p޲eBO/SeN#=R$!=@` !KLgʏyv\!Acː˿0Jk?dw\6A nr'0e& ȃZcR`-7ƑtƗs-˭5#\FK!PshZjb#!bBr m0σ@n>١=fP8ʧTnD÷&l/aQh*9vwpՂi[lX%QR]cĤ_j%7畘/= C mxÁ9v9m,PsFt|PŶ V3e{k=`F9WQq.r>~v5խM/ a $V1go,Fk@k%Gp^= I GQ;WLN_p~x̼{2TnB -w(ݵYL4dGD| :o‚-vy"5H8Z])2xxc4v}{?S;w&N5qakK.z/Q7Xvo@UW͑9(R&!eE>jFf@]W3>9O2`C+Iw:?+-wo!Ŝ>$3}|FXy"m?wc |F4c ut*J#d m1¬pYDw1TgV0нx8PK,}m* U a%mzU3݆'$n߂Aܩ6]{RAzGi +tMf"|-m3ݶIjFF*$6rӱ=7 w켍i)Z 7pYU堆,)iR9:kL x@7Uusob ?MakqKW*X<@%Y'39fi h (˗g%?Yt.وfX~nEم8G`N9g8 ,1c=ĩ$l]P-"r#X^ĽGYkz֣Re  Eɪ{X^3boP<}6t DJذP9woiB>PMMKdRXx""N],}Ҏ3%,1E #̟xtvza{zvu"b ozءj~Ab3!TO;wQH[f%YgȚ4'hE r\z͞ΑZCR(8x7+dM^lMI1Yy;}>KL!!EyCp6>EX! E/OKC*Q/I %_he N/5D7Ih`Wtz'l릴t'V!xбF+@rA?= 0 rYt|U3KMSѮ†wAdűJCw3Ҝ*]&REz\FS": DϮ*e\b.] SQΛt Xw)-eyWc754O< 鍱$#6 D:zƋ&f7CE1 C"0 $GɉGE k;d}yIU_ܿXwgNo_PNA5{w̕'ךVJ8;(P FX)8Af\ W:u {9W(6&n l*P0lg͔ki5 3>{+*[೛Y-]Qǐ95t2ԯ-8̿4mScK8~x~3 Wӄ"`@5) &Kޘ5wI^i~Jg.a_MsZVZk)E5I7[0٤|!PoqD9.GHl X:߉!FH}ԓX)Yh'/̍P<sj?[ddTkO& )wZ~Aof.$X.jf${"͑"}wzX6nWH|#G!xT6/oDr/Y4UQF:L-WR3z/\ZMJcξ0YzR dg$^7>IEdd{җHWԋGs ]Qa͂Zo*K\ 0/<-V6ٰMf[zɻӤjqEcy'XHzHaVegWZEA@ҙbD1\Ah_ H܋ٵna]ݞ@zsK UΈ9TۇU \o2שrueD3Aex;kT03LRd\bסMPZEl^DzX lP21uu nq`"`eb܅4@v}"/$R ,5KEsYůfw%f#zk؅Bgf<g!~B,/CXb/ siP7‡ 1̦wv%T6U"pM,=i ef9^tL:..Nl%fˁ=I}/Yaz-Xr?t(\PKq{z#Xg0(x8Mj&B~A캾7WG|ߗ,nrjX=ʾ#5CQ2\?y0w-~sa PT7i|kT\W.5e0#K^%Pz} ,MZ@ۆ]6V `r4g0\ jl8R=kyB*?;iE2Ε5K?gAZefvrOzgFxފA]2(]R= {`BQz8t2&[SMRo~GLv%d_66τ{̮hu 2L{WOw FHeqkc~ -6P=I4ƀU VyźGmf< nfI!@HRYŦ{}QmDF%"rsI}i{|^ݑQAf!ݖ>SN9HnZ}3f } ~V kuYƗK.O렳Q=2%Ud6`]ix"Wv4pg-&]]$Z3WM]_XS3Hݏ$n%Id.D=N \ʗ*$IA@ue25+L5ACg&: z$Y?)#*90]ʳ1s|X 5rsxC%(`bpC1=8gFMɏbm@]#_{qp. ?i_ M_o^%mp;t`?IȿT$Ҡk7;$?7q S#LZP ?|kCQ055GWL$iS?q׶54Vn&P9OӁc6.DE F&6"# o΁ td7\Q 2y2$ f ptlk3mPﳐ8%C:<)x#'*}|Z*~l`$g¾(8_d4(B+.t)8T'LC:9t Xn;D fgWsu=)F'h"\ݢ[U $  |=fjJjN]h? =-od3b;&F'l,6 Lifa)W<;4V4.A;GV ӰZy0?xaN͌sR/q/.UWSIڒet\ZJDxz#<ɤ.jH@Cznw wE+.ylV.vCC~[i "+ "[= C45[;Jŷ\0ZShkQgeN+*X"Q3}Ū2Ǘy撌=VzTihUɵ:їxױ٣eBu&YRZMe;}{dL:CJ @@Lf!i\S(Kg=Ґk#r;m2n7\0wv':3v "oŘw5hd> q;կYw^)^e` 1 ?l!g0 W8<6`y?НUc."]~?q빫Y|ff(([ŬڏOX K1ow9ա)W参[[2e@RŐ ]LUIBuZ,E\;˰,'k,ޕEŴ'<nQ(yoU] 6jš)V;֭'(h_1UF~ eCן!l_72 ˝mڷ挢>g-7=DHCgcb7ODP^IWqj\R)0\7WC.qa=<p~&`%Zp,bp@7uh';Ijix:6SYB2ٔUJq,zyv湀qre4?Qʇ|/Js'l>U` }KXeN#bt$3Ug a47| VArtسQuqc1`qA% k}-Sƶ}Nr1Zx"? )Tl*[1^auLPa^Ci_ +y 1H8OR\ F". k@F ܥiQdKsw2 +.W=.)1jWe?iGj7: f +ahe LF5l=F=N^1vg-$$E6m()]=("%iUbʹY6}98T|rԡ.4y{f2wMTlpp&xu#](MtG9Be|{^>e8 yW<ʍSO,?X&"=a"!( B,|8]WmN2*ZL|zg4~$CWC24@. 3#,m{Dȉy%e=&ІzU!5B^\Xzz0RR M]$Dr~6F\U +b_Vkk L:dҟfOW6f61l&RP7n|%;"Ds1HOiIHo EWӯtv>tf%J?zY=[08¥ݓU]I7Ŕ;i#MP޸[lvX]= Zhp!HNV].W)2UO|f%:u%(_ťY,18܈ۓ*:BA s)q&4Lmu 2ja71:AA%4WHw$@@ 2Lֹ02g*ӌpe;j(,"@o'ퟃ eʇ:hiIm)5Es+ǜ2ck>}}ubG\Xf&dXkד8,G#=^65.QLd&%`ԯ5.'Tg2i wuniG7_+*|(7k?hi3]gMj:D^aނe9J&Y3VONpyl!.`֣ȏ._9c2fk~՝=*+-hT(NŘ ʹ:ed*9.%rv6GJa6Oi1ʵq5E/0Br Q,+3ݖlIGl){6} `|C)+xF 0s$'Jly8 >xiTĜ19lAQI 뜸C@&l0/ * ‘5+7vPۆ"%ڨ }?(`{f.OK'Ȉ.5u쭉kK1yHyV`!j$m a%Aygĺ ~ZpOqS4=UNEMWG+GQ.-[^  U 2M`ʍ?v|tVIQ`s>{;dU=Eݠ#<4͞Z?NAH;?3拚((xAL=wTIlh<]kJ L3 [ Li*>j=_ 'YF;z ?%%LTk]./'zDzyM7Eq$]xל"ng!M:>`[WZM7 Im%˜x 4 {"^Ԑb ;Q3β6yss!L"\й2Z/zYQ@#]}ݢ9uD2j GϝMJG.#kET3#-,V,]T@3~;!:5DG[DH+Y&yb~N3RAU:szQP\$EMf !wKb=Ʈ i=XRj $kRq["AԮ@.rҙJZW͖N`:/0zCFwjs+X dn ]N #s QY1k@}S&vN YXgӁhUՠ]pԖA|pHȠ;ބ"ha> S_)ԋN.KyCݸ:SjEpow(4j'(y%ٽhR2z=Y,b/7bKtvew,YKub^؂ޖEJ8T#N]J꺖-;Xt.Zk(2vn#6T\MeۜQ&ܹV;.فv+e-gr7R6g/XA0z R2C9ѩ_2<|!:~T,݇Xkq LkGG5Ngs?kA@PqB2#_+pO4@~_ym *LnE  MuҝςlzѴ*&toDDÉKYO]a=\!3x7g$Z/YjRmUaـRص#1Ht rXON% j1QT4q{r8kmYq[?s Dݶ%BT%xXjQa5}oj>LL%"CLݣ K@[lAIAoA+*'K0V @ɭC\Rڬ u|VxiO9P)C݂YH5[T]ХNх7:Nyk%L=}smsXHJ{:YFӜpi&nIEೆ1}*~7nO+ Z(a{HMX+,f'ϱ;>CvFRp~27K;fXQ'=! qG*7CZDH#;WRS--"r[[- "'牘8}e@PD+[Ձ jKh&Uegx!s vE f~ϸJu`IdU0CW-] S5aXdV`%挧x> 7+9AbwM5i8UO 8ǭ5d8sӡja8q9Nr x$`gpn,Sݰ&v*CX:uC. Ve$2cد|cE5+w$0ޑrc3ر|qxcRsj׍xC.q7&Χ10P}s?͏6_fHыJelq#BW ;}d$P4z YY4dZYZA_Z`2%XTvnDPmafG>2IJo12];:ιC(u*ZhiuqFݻ39 'ra_5FNl1iXȓ\_k&ЀW{eM .M(vJ?V{b7d}ݿj$תD"_եnsnjfLq8_O FЧŲyF~Y?&qX j22",W;q#lAqlhu0GB!_XaD>!\@5dޓuAT3aoHB3yzts P!U d_KR9u>5y +4=oR؞^j^;Jv O! gWſx|S΁\&\)Zp&4gC)HgT7$(G8z @EͦtE 'OY;Ȍz?;o ( ɻO_5)LHcowrIy)sȢ nM<M^gNFԜ¸z%" GZ@~CSߎF\>2 =SQ&ϫ+k/*dA"- Qam#&Coh!z&baZQCR;s2,TkjDgM-=FO,.mâ\hmX+! v4Xu5S;bDVV poϊuVleqN&!^ r/eMAAmQT,*wcTRXeGl#N۶Ƶ"y8|s5-ذX:+Zk j9wN?f,%?HxEQ u1EAShgعI_M4V VѲdxsj`LX#<k{Qc2ȳ4Q?EK46zc8PxjԚ@ߐgM<_<31 S EʆK3rxo% |*iIǘ޴sVFMؠ1) 2ɠ7p}Pp( Gus4Dg]^wvr㉀&,IY\0%Fx7r aF' j6W:y{!>\pIjT-`YN ~Yhy!#C0\.M#Hz^xӵOY9Q'C_wØYr%tɆ` uX'L!>Ak3~6K>1AI9~ߊWO  >%g{xetk tRu).UoQJg+9 /A|.O?` 5t4@%e)ង;1kCŖ¯9m W<f^;*az筇xJԊG|PA qX*3IxY64;nT_ &[-OS͹LyU8#dy|OmD\db ]Y ma,X,RjU8|u8>1,%i l-tZw==x `3?A)!̊w @XMBXjTm3Ml\v ^ tBU<}RuY]GǨ`a \.bfTyZߧ\B香0FTJ!©IH?>#(sxOM8kCWQF䥘h`)(VKʺHXݷ4Z㧉엉VDL-M鰺zT!(uКD)Q܃LG洽j[J‘R|.T+3,,֏3k2{L@dnF [("Na[AqZwcZJ؍yP)5oL}p;.޳`BKp18XnG:N !'}Pfx9c3oi!6,I7l =wr$;(2mH~Ɉhm⤋!$)[BxG Vz!|@9ҝ -r|Sd10̹!,˱AhAGK^*] ON-])H'Aƻ*K҉ 3Wehk1Q3 l3ŸYʦv.Fuk"Duuz+9pn7ImU@ \ NHۅ*ZYA!:k>]&F- Zc|/%ɤ@|rDޕ PkM&"M/&CUny9KY3:V򆑛^iB0Һ @J(f2xfM[r-sV-Kں qD!MEy1P/r64.#ܔ G~e HX[TOPQQMZu0b\1$Pvx}&klBJ(=̗޼FΩ.Z&츿kv`v*li2k`JL9z>VTЩMH,S)CuMS5QAx-h`/z@ӼzʩwJ-6y"q_W'$O̗,6;}V9؍ŧ$Ns<^`o:w=UZn_N}bu=g£]WRUT;VKUe-kVR sZC~'Zw}C$Ut'ubzXd(wL{{&t{ıvכV &;V"J[9aoM)#gD^'mc#T,FUPIMgH3ZD&&P6~,tKgPEIS-"&&ڱ[Fo1] vgZB3\+?&coI&:fe{ 5Ǭ{6--Z7 ?T wfT5QY<1KEG3]@zfrɤ p/|cg 쬜M[ChPbca(Zx-J`,|#_RJhmɨ}܌gc'zs"i|#]ԇA7PGviz'a_69*bzǪ_/RKpMO!Ȅ*FHP!^ vzU$.Rh|0c7&vէ/PvƉw1ZcՅ0c2ґUǾ RA[ETP)3αI8 [Z%#|vG!k|gs')YG!aNc'E DL))z+Sfv6 YWYN<}<̬#CMmL痪xݟe[cD@U׊+9I{=j]+<_RXtOĺu^%p)=@3֘R PCVy2prPaiijBGLc'ABp;n#;}ɾ9OSDu4697FERUS/*Yi.7(vCz  52Ax^xTvdV!BU+nB.}NlKE~.2 '-@ F)(v`oJcJҧodEVUƔ~̏ܔ\="Vrger{ޞ dzVW4 rkERhkVهDTzlҔ_@:KmaH"ѭ& R`w(S@ZTdvw{'bB?9yIs+~H3C 7w!R5cFoMαZ7_}!&XxM{Xck@4}M|]t*7hA{^z Q`szx}$ YPQH*cm2")BF"+nɡ>ml/E]cNGA<6E=%IZ6Pٷ I/rPQy~At>7jYۭOUX&Wh+bx]ݲ= 2UT7'>܎c8lLzEBdm"2P2:I [d>[&Ǥ D5;}%t2"?a/n=ϸbS]r 5~KZ ft(VX!*GDl#^W]Jo8%!D3pOr;|tUշؙ.+33Šeh\Beޞ۠c ߹~!FS^_p'РIƹ]_}{„e:cJ~>\)#qiЭ'iG^Ń!;M?U3WBT0!z[f/TOԵ}Վve ieWD6Ԃ|ہr7V{zth{~!K\n m۷lp #vͶ_#r^qcFƴPTJ#-ER%ST2bE U3Ѱ &~Q5K8w` ܠ/AΡWȴɭ}nm.0Eѐ# z gh<24E)JO~|Xƛ kglcEB"[ؑuJuZ$zroOyҏj5^ZUeU1S{xM]=}>¾8 ¥ԍE dIG||Ļi<,9 sP xwv6_!zk1X,巎<ۏHF.ޗU}\T~H}/IM%R+z$nTnH I0 Si%͏LKΪqnθ~-6Dg^a6U#xg1~`.aƘF#\Y"xz>ف +5&AXGi[ uLCo:Rv-= |[ YEG>ÀUQ1:^|[47:fNFPIUQ,&oHM[afY?č%%!n`)WN9j?x(>o({Z#t9`ŔÐx$-j![v(>s>٢40&JiFmk*`b"<e_];׻ K5`vHM]Џѫ*%8DW7xx͛6;U?IO2ڜ-!j-rABG2)5Q!"c7iC6ϸ)Rw))dW,-:+):<0џ vC gijzjl3$j:2[.iZf`~|zVcG8euoGأ|žeWR!XƮO @WIq^;su"J^P}#s6H-ΐ=}#rm!@w4g3xCPlW"7@Ʃ*J £x|/u6pxcgF$6Xy*.51 8^NސL!3⢔ h=]j-clIp,ʑ1Jh߲K&-VfbNԍV1iR,+ bӨ2V" xVK2k^9Vf%m,1>?MxE{Wɟ6l% nqS;?0lQniN#mFin `)E%{AIGw^*aY5OJrXL= Αz܆XI.WZ!$|~i23RJ_LI yćeҧe#FfDKxq18m,#{+RE\7| , $ 2q G)\f(`9ZC^aRD˽W僳с)M)24A iVVF_FЛBJO=mG #S MY#uhdf'h i1@.Έ*}"RQn-Өe@T'E;s,䠹pCGGz@y̹h@p@P"YMRL"%=uA$/HP^O**OZ9wGU `Y~J ,K^rwN9c%jY͸iS%Ioh'L; C` +yE{r2iV Fŏ[ 5b0X%^\#Ǵ0(cPW3!^^K̓nE*9/϶щA\x}04fJ_`4A h$\OZμYKvB%goZK5Gg wj =0|ÂeM\) $9f_ϛ̈;7ɵFA)9.8<)3ȤX{K E8`(dJP8ߟܒ$W+Sp6Uky,~-ց7NR@2'ǡ@Qdfg}2,N!e#H)m g*yFz9^i._ݱS)Wf &+ozBO{)Ǩ*r\>Iux͵YʂMPu0y^0mq=0ڪ,~WIU 2Vd|r\A3fE;1Eb=jո1#P~NR65z%}g'l]K !2ZGYA:mo'9c*;yZ!1̃KKk*qKI"܅+W#R6Ldb4UaҮbhe\,,|.&҄TT5eTm43h_GPqsW[Ymxz[v٬߇.O1H9R&ñI;W,]+cݔ89f/ + eM&5OO Jx>:Kvb&!dּ}2\㛲:yd:/ńq zEi+ V8JCݔ+})5`|RNYN!R6P!Q4uz53s(GRUhӥ\aqJPEX6Vn\0,LY^CfqiJ hA{:'-,Ĉ..=[$VϤ`X[aQ<`՝Wl,z,=ºɼ#x~8%w{nR t?eƢ!L/c8(rFXG0ƽtC*llμhob6v2/3ʠJ@gbHxha#|UЃ,$qW -a+ϦslY_ AR%N7e2!L9'g(-ʅ|~lS~߹Y݉WKe``\4e“z!_wR]g-B0\\wNIoL&ҐQ6}orOW0Vr\̫pZx';az†\-sBé^YĄΪF|SXg]375;#&uRwz  dM/D!@1zQILַEf|Lt|b>!ob7Ɉs i?J)L%7<:z8SY&KeJz Oy$"PI⍐+s&rmtKaIIC1ZtR;MTN&%4tZDK C[g^g., FM].?òhr U?/P'O>DvE`ALpTŚdU!WSE8cT8M꩙?Giۼ3vNÁNˎR^d2~{oE}8G+3TR_k%ۥA+xfLvR+1G=8G-`yl'Z~KGrxx4,hp*MW ]h1޸α8)(GYZ o%=B϶4[_[) f)^z0FI&^3/)5zW$$p,,íAnͭb}D,$;G^[fv(+ѹ~J|`C,#5߮@㞔訨AC8ξOje+8O. TT6=c1]ڻB$o],XR3bcjaHAċOl$"]&|ȩfXrMh0$DT13@$+˧BwYI`9쎐'- ywNmg-/ 5$[!$Yd,#X&.:@Pa4n?|G}gjp3Rt@%m >d4!bNަ׺w}Xx`[mfkY h#,.B7f7{mRklڞ\J)K}o R(W/dI#Uѵ(멇g:dhLdXp>N @dx*H5#2J r%8o8rw84IGlPs/,k*_ jThW ]֣yӏvJZ P^nUa͸ ;+gu+_$h.| F3!j{_y$ q`NV+<d* wj戀IP[a6˿-Kq"9!9M4v7 a>=5MbKv*tC OhlCZe)Yv*4mćq1OS zf>c`sǘ?&Ҡ8ZFt/ɥ i;Yx#$ѽOohwQJa;Ҥa;PN )3p8Tspwu=Qo(HA8t C # `KV}B:@a*`mXp&sxzR2Zn@!-e>9bTy4wdោq{!ɈQ Л%*I$r\M! GNV&[Еr}ׄfPx>|\xuSwnY3-hܺm3L˟y] c\/(TNؙV޺ufOǬMhşӍӛ_uI`,UV _Ҳ|("Ú? vl?[ q XKLO""&H@ W_Iڪ$7kNlZX1 J|N7uTZ3QgmNX fJ,Q+W N9A}t(&䔗a= ƔdF20+kFͽe)9u<]@|j!#*'c/\"f&l`4>sFq<ޒ d dCM &4P ڟ(4: A߼8myx%*-J6moqR@p\#c/JoeA&HEES"Wh)ϔHOb_Ըfߵ5$FTa/ G9$_q5S/lJ"-yά̉rZ5Ut=d IDE,_QW-z:&հ8&ٔ=-{y'Qf$gL3!߈ZDFT@"zͭ u_J74BmJv݃@H_t޿~ٌ $K0p;+YKYug![X,{K+û܅!;ƨG7;T*hyn? @*vtR],pu1c29KZ6 7-ٝhm'!]m,.o$5%bqUamiL2F*xK}mT{ծx MsHo0i˱k?XXJm,Il"gRl{6{N/Z=!v@s|:M)С6{N \|I` >%͓f>13w,Z\ V8T3SpW eb;SxB=z *nP!ss: bzs߹lS zR"@eNXIΧ4sB1z+̅*SIpd<_RG*$Qz/U޾5Ofi< )'cL5~t8}*v2%LӭocԅN(+Zhlb}vBE~[eJ|Et$ʸwKxtnB5M2,"0׸{I[pݤ"*3x`s&4p u[-7&zݍϯ%Oc/o鮧vO$dN7]O|JmyӪ~ diDvcK P []0̬θ}3x+A\f;e|AKY7%qmb3ײpqI(w_d*{%vJf3. yVC}UB*@ޟ[#ɉ`J7^V1hV!ri 3 0,r5A (kYت!Vec:"O; ?q: rxNR:ˀ+; @r'34Y8lcQ0v/bETS9Zӻ9pVI x\ X 6ZH~c?xV2Ia"๲o<)SCEQ݂|K^nY9wczLCcO{<.'ѡ9e0nw¾(x?R|YgD!w^ ;VΒ.rc馿79fgǟ'Py Bޥ/RE=s>ƆlP L@cH*|x<ꉤ7d7Vo0j+a ]yt$ϞI"b =3%#וR2 %`{(-kWmb#x;]nQ;j?{BpY2Mû"؅Xz2Sr?_˵R(ϻKxF#. Yi4 iLE]!HJw_h9޾"ǩ>5 # xkv[Hա>\@\W 5 n0aێ~ϞřT/`p"ɟh{COi8D*6H=#BLZG̾= %ǡΑ Ѡ7g 8_ q vvg݈ZBۈPcehI1 }CY ~VX]~m #<͎f\˒U>Eq ڽԬiƕn9BmT^^k]E B!=-LUcL@W%}\޶r{ WcP~&yD] SqP f=3f%][>zn\'M^)N;*s>BEXa9&X{A([՜b4bE# bܘх xnG@ӏyXpV{2 MgzG.DIq }5"e!j9PKJWQ2ƫ G|6*1WbZZ^C[Z!{Ġ L6&rDm%-XLMUͣ;zt0_tm(iɞ`A\L_;k͟IooLPvZM"4w&;!Hk5(G'*WX e|Y/#m Ïb{]zpZ2نX=52f||b|x!k|?(]:WA~U!]::{el\,7G )~xrQ(  s#?`3F1Fl\??!.5I~ܻ }gCjS䬡#iVLXKy6 >p\ 9&PoSؔ)*Wb^P\S`L}ş+CqaOl!5Aby.2v|_4P:E4FOOXj>ECT}iX4Fk[N\Zwm~֌q!%|K89@Bmm N6IP˱ݘVF(ҏKsMrN^fe&m q:u=`΂%eiwOwCO7u|d1CW4󁲋F<&/g&'hYC]"c>\z<̵*Ѭ'?|ZxHT{UxoTu^ YW:Kk^Tn0xa5mrfo:Tګ)\֚F d3^ B̄I2msefu+{b5fDTU(حy]E[=`g,* '@ &O*vWq t-(NM!a>!Z'^t8mT="*[v'dH8M4ъ3/*?;S0ś%fO;ŝP$}%WBJUILzP/Vpnsv1oq Soxatg#$&t')1:܏N7Q_ܲje0t*r<B uj5ze>O}@SdkeU|]ei4y+&?y^cR{)Kb,yK)R/n=zB8D1 &CJA=-aE0tY{b#3QηFu_n ])=d|ÔI#d(Y q*p9;$U >۶(īļBQLL !1-N}E{U>`(9J]~?/;ԌS"c-N\tly;l3XY.-d`wL|%8{}dgn.;tm ydl*6E':1'ZHſu>c+5LE ZLk^%cp rIQWVH1): y]E*j`5ѕH;_'37)dH™NM!qiG9H @v]<}ZfuN t8Mg)ZʺA%pc}1D ^ț @RLtjI޻ wGF}o;gt]W{#e!oߠeuʒ5]V'rE*u\]Ę~Gqfğu_2K B[ODO&#/RFsŹFuh2 2Te'(=.gVH{GR % Fv"Pѻ@m kHq:4ú)iz 2vzkLA.Lծ_.ac%@qO ~EC ebXLFp#9̜m^ZssTZ 93ـzŜ~S`8X/sNSUY?p b&i z+K(sŭGh #:k7e b+,6"X}'[ZR,ע8-R+7q](>͡P 5pCcU7Ckw~gȨ[Q$QTzI|83ZKOcf g Ә%IA#MZ%i縀=5I q-ao܌"P?!?,Inj PJQVUJ; >9=8_]9۰0s "+L{י&W글H!(]|dY7<[ᶅ(o.hDR g2sP=iyڋ#t?y''ks? +"zlFKH&)/I'ʹ/*"8{ixx|QwwX.i}n.)RJ'|ro7Ο#AvE:P p6m5 J5k BpPu5w|{E@( +܆ .!TD8mIVv(P'M11R:lx w[T-|`kG V2XyM!GRdlsu/qJa7J8F^.ǻ9H=ѓ?鋣u]Qm'EڱƔvN;僌gqkgw9>yH&P9 P'd~Zu \8]HD9܏ npUSqDgb`RG7{@CC1KL )_#i ~/]@ Q(xRڔx>2Ɠ!p78 @I¨| \c/lSa>Z{p)QsxnJ}~Q`3H'ZLG3%#Uן3vHL.Θ-f9 +#gΞBFr&yP]XߓE?G"4qtp(hKڦl aU5cER&MkRDIyp-LoLV6Y~YF<$5!☻)$9mY)}hd{$~ov/ Cu s6 uJ/8[B}hHJdPVn]9)ׄ@J%j-iWLv eklR5aI#t R~ˇb +`MԆj^c {x qwu/t8fv D*%ևC^Jۅ̘Wk/$6m!*LtWn7|LD g)C+ -F?-zDʧXߦpV5Pz q!vV!'o">]ZHcm\Iڞ.4eZC4\>ɣ&45}/ik3FG|/qGX/a2ߛcex*^ٻXALXDHqSm~KUpkn*Q| oFu_r=%Wgӟ ?(s[ [o(}&<g/?B&| y5`i4!&tƳ5;T$ F72v[xdB~$ם*D3ǰ)VƯYn <'*a(EçĮrhlZU#Ǐqápby6U,nVaf37[֒n"=5-EPYC3jTYBp@d%aٺLy>,ZjҀFaHC$S{3W%U;It&.<$XA\U6~D&|h'Y^7* & kj`7x{mQL^|a&uJދY`SYaKD5NhPNcm~/p{ ~~Ov }d0se8/t)mP&X ohC0_Qhf-qUW#j-Eׁl}4 =`vGݨaZШ\ Svm_7Y"י-R&ydK*Z@{d6:LM&*wL| 08 Dg߭}ZN% ?oX9f$[Qa;yȐ'D9 *0P[`z~6waDBZxIHҲ=EJA"q> !١oJEI'ՄL1rFع)nbmU[FLcGojBrR&l.yD{ a0~0|hK"]GRE ~+6Fo6Z(S[R"QʤFJؘp!VfAה!JBG^p>kk`m%t5LزHv ݝ'ùYQwJkM~PҠL۷@&Sf6&d4DQi`"nYBCGQW 3,0 q!oJq?f}>UbQxwr,fdY"Ƀhg/j}Td &?l"RMK^&V}Qsz h8`mUTယ G#op= *O6ޯU=›tOy*8`Tb4xnMbp+RmxrYEYOLwJ&WyK`7bK DNr5Hf@|u1ίn'7UC+;%X&hN5)='2w3̬hPGA]%X\C'z21<,uJ*u)*] ,ߚXAרd6wکiNC T76;Vc2 _0 j&5.;F $"0~|en岌8Zp!S&Iyۣ릷Kٔ;_XUtE`o?JLjM5?ҋawa;ǻ`*0'5 ~1'Sx,._E ic+VS{hzVH($Oю !BO$pw:^*N\th0GHO%حz n3ų b+w"$QE$:>hک{#tQ5;&5ÝR!{Bk|֣; tP$Mc5׌-Aig%d~H9cΥ8]9T!K܌Eҍ:jp<-::]3\lɱP/J&uD{GRW[OʍI 5lfcRI8o!͌uUE *=C\^ }QX Kc ӹR$'Jas|A2:r}5Pg)K7k40sehֻMdmeYb[ 1[s+:|b-m.{#wIdUߚdl]X48jp 1 XC<q 3'SNe(\&՜HЫyOua2>JcS;,SJf[Mĩ@U+!2[dyVfhy[e{OCj,OM+uDH*$qce}];~j6HT f¿TMU0Z^h^%hX,kŇ->ά`EUڎ_UIXK7~Е15xUXDQ:W]TM #V8b J2-y%'l89XF>dczE.??haN_r>$14Ӿn[^`Pr^*"D!. *eA ݖ/x=5G&@M@H@77 ?O=0hoXaWewM~8:cdD<:uH͂ԛe{?Xs]g۷=mQ?S4J{ mah@oeߘ ;CP6\B]AV=+Sдd ~![&9hYd7tJ]]!Cs$FHOS>weRì>O)% \=ri*;Q׍,춹I4, 8w67u"FX~Σc#"ùz  fXN~ x9tb-)_d2Wd/K!I hxZk)H+(5^UPq} F]jC s88p2UToOY _lEsYo2o՞D=jMz}l*'J8+-%`E!D 6NK0&񫋑lap;| YcH[fc#o|x3 0V5YC6P'ُ)P7E k(^P$0d|`_SUk+H9PhY6iR$\ZO3df'YCgoFz=5X8/aKr)IiN_Cp|- 𒔮(60s^Xfӑ_bZ9O]+/x{ vqH** o<[% Ri$ʮI+u ϕ>oU|ԓ =ab¹g8{? 6wL:G{J<66boUA\ }ʧ60J0O@ϽT9MA-)Kz:yt \,+ML| hnLҒFJ!M5S?q8P7X5\38L&. Xqgi"9kO4B;guQyrTtx6Cbd~/JVdAKΖw[U=ta|"WSПwFuxc&vm6#pmP52riDܫNJl5ͣ)P:+*tz6҄CY7$ / p$B]X)<SOcRAۇ^Zqj j\A/cl737ckKʪwt*9ocA&bC`69:Z\/:uk0T|YTÍXFCbJu'X-c>*x"ZhiK'AiL> <{rZOr[dcnҝ .J5{CաP oUB~3S`$^XelnQnnhzgYXʅIxnˏʐ4*.E: !4@ L|HǍ2fFiagG#K18HA\=Zl"*Uf-^}Z=m@{e7%Mr r?-9m ٞɕ&tYo_nUqEɩh+ 7#|嘾MCjFI:䳬I ܯٵsr=/]!{^f%"@<OWyPx;nNApKٶjoiؤr__ 3wD1)FGv4ztqg?T˪r1#,m(,>3%ho%HvcqR QUJӆSYIaT9D|T茞LF.8ŤۉFJ{5X uK8jX$/:CJf Xhd{"/H]-d-CzwHij$j݃e$R,_f,9?w1c iJēN"ӟPWzQ |aF CV@R&Ǡh4d<6̓tnxhQ㷆لeT6&NH ʃ;jhad!V\;A?lgc adIM<@n6cFf 6־|v25']L*K~A@NK;}VcLW!קuid' 5{Je(n .tJ '>Ȳ蹶VdC54=V4wp$Li.q.YÙh+DhTd (8s꼴-lDu]-gzA > UD2b̪ZMP\^ .fEm) 0]lRYV$AԱ=!;;) V}@!l`VGJ0Szߤɾ~1lꮾLFf\h أH9e/8gqL]dVBe![;Qp{l8kQq6䕽k ÈD=3LRu\R 5#XLPk m{q~2>?8LmB"y6uxJe]Ӌv$^,:nP~rNJ o .J,Eaj&L_ zIǕ"L|.E~ YշGNZ5: lZ!W;aqاfi٧}}Go"zpvsmx7x4 9ZLaȘXc}""tpBBg˭pAES"UV@w gD:2Y{67)+L”KZT%,hECm,Vj;u.,@DhԣQgf!C^umh,"<{\攫ͭ+YN:`8mBe5G8CoR Vߍ b"# ##s\{4I:yi vC߹amk:7,zz\ qT|/#? |I[֯V~c:4jQC ILG0c.bf^H-xkYMrpZȁ$ĔmC rȎxbҴ o[+:lpjU 61۶RvBṣ6>mI%WYì̏FQXY_hXNlEte+Hpi9ӗq$=M僬Q˓ j_}W`{-m*^J@EKsgn[O!zW51[5iOq:U $b]fT+޾HRʹrޢYD]&%o/sndM}T 8E7@[ey@T$/apk3 /Df.P(d& ݈,ԏI/Aˈԙ"{B2c3.y s5lmD;,iĉvv[Sn5?0yO7hƛ==Zظו\f֭];f6 U7 -++֠^r io>{'Kw{$QװypI5b} P|nFT's U?֔1EnA7tj%_[E~I;p>QD:6& 4@VW==:wu@Dgl !H+,ЗQKBUƥ$ Q}9=;$xsٸ`ZmKo<9 =3- ѭi%;lkYü^n tȩ Fu3Qy &fdm@3#ՅVpyjHTϣm_k蓮FD)'뿭ோȭTSgiXPEX8Jio̘g_W )j 5QTbkﴺڬO[3 CfMͿǥDķוIaFF A2_N췈Ot2K'^i`#0kvER|bUIAj ~UeЫpn!e%$dLdÃ넍eQE+0rW9Ĝ5f W(VZŻL%n)jw۵ Ձ&G&d+DBS8M H7 %' & ͩArc:W ~\_n:YPŎ-<-zVs5rWՖBF-e9s;%ZJD'F~R k}`_73#2s6|~ PIU|M5\é \'8Cw#Q !5G5&3&d^NG%n, f{м}$ ӣ{5ZU&Fsj BǣjprWꞰ 6= Y ޜ3Rb6`oLsܐ Xe. n&E0\ҟ[E 9)`?ZM}Hg;W+PDb LXX$e5 uSGZ& .OV#17kh}/[# g ;ʱŭ>rOS!hB?0tR$ۘ)F: Lnl,rq _NjV*fEpyw+xE~a'|0Gt┎k`L|:}|W`S޹ gq92<R5E c s&WC}!S$ҩ=YbOw۞j8me5x;qVEŰyL.o5ùn8 BѠKWoDV\Qb M; Y, ȓ{j=ܸ*犞\HMv-ϥ-ŝz:=*I>95Joe4)6ސh1-Xz:;!zjD椺Q?^#*7tD5=9 MX>*#b`5`RqqLsC5mL3 GgG>[ּ܂Ŕ*.:CG֬m!+XŬ̫%(Oz]bg7l3qbH!J7^1|( d' yu%&Ã6"iWNtpQmxmbY5<7 uI7gjUQ@ܺ?n=1H "u6[{a6?Ƒ0G˔L^ -84%xy]PMs弽lL$cɏ@Mo\P,/:򭷮e`=;nJ(`uAIŠ~F(V RiyLLXyݐK;3 =g