bpftool-5.10.0-60.132.0.159.oe2203 >  A f yW^^f+${+Bar@Gp#;wyL b/ L%hpے}R}iݥ[Ĭ E{OɏZ/s`KSnQMwrD-9'ȴ<+ЬL?8H&#!rz2Bq>㬐+bSQ0T7ɨ@lq{en#.C~-tbvFoSD䪭ג6*} ?{79e3692fb380354ebd3fa6ad13690e6c7719ec2ed7505aa34702235682d6512457028e22328f5eb9ce90357a6cfaac51596880dfIYf yW^^f1HˏݠwN<r})w"$ %٬/ @!څP v -@S7k\cV`^9Nky\q~V06>~j(OND;lp&3wd9{L"W%hГ^:VU䬺E9Q/)q~XbEi,wDzvq&}ArmM '槾JY1OeGW+` :HS_B'>p@_I?_9d  % b $ 9E\bl   P  D,x  ( H8 Pm9m:'mFVVGVHVIWXW,YW4\Wl]W^YKbYcZd[Ve[[f[^l[`t[|u[v\w]x]y^4z^^^^^^Cbpftool5.10.060.132.0.159.oe2203Inspection and simple manipulation of eBPF programs and mapsThis package contains the bpftool, which allows inspection and simple manipulation of eBPF programs and maps.f obs-worker-backend-test-0001'Huawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgUnspecifiedhttp://www.kernel.org/linuxx86_64`&.HX s+-u .oA큤f f f f f f f f f f f f f f f f f f f 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-5.10.0-60.132.0.159.oe2203.src.rpmbpftoolbpftool(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@    @libc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.22)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libelf.so.1()(64bit)libelf.so.1(ELFUTILS_1.0)(64bit)libelf.so.1(ELFUTILS_1.5)(64bit)libz.so.1()(64bit)libz.so.1(ZLIB_1.2.0)(64bit)libz.so.1(ZLIB_1.2.3.3)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.2-14.17.0f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@bbbkbw@bb@bzSbjbe;baG@b^@bV@bV@bUiJialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65Zheng Zengkai - 5.10.0-60.35.0.64Zheng Zengkai - 5.10.0-60.34.0.63Zheng Zengkai - 5.10.0-60.33.0.62Zheng Zengkai - 5.10.0-60.32.0.61Zheng Zengkai - 5.10.0-60.31.0.60Zheng Zengkai - 5.10.0-60.30.0.59Zheng Zengkai - 5.10.0-60.28.0.58Zheng Zengkai - 5.10.0-60.27.0.57Zheng Zengkai - 5.10.0-60.23.0.56Zheng Zengkai - 5.10.0-60.22.0.55Zheng Zengkai - 5.10.0-60.21.0.54Zheng Zengkai - 5.10.0-60.20.0.53Zheng Zengkai - 5.10.0-60.20.0.52Zheng Zengkai - 5.10.0-60.19.0.51- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 cores- sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} - sched: Throttle offline task at tracehook_notify_resume() - kfence: parse param before alloc kfence_pool - arm64: remove page granularity limitation from KFENCE - Revert "arm64: remove page granularity limitation from KFENCE" - slub: add back check for free nonslab objects - audit: improve audit queue handling when "audit=1" on cmdline - Revert "audit: bugfix for infinite loop when flush the hold queue" - hamradio: fix macro redefine warning - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" - btrfs: add missing run of delayed items after unlink during log replay - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup - btrfs: fix lost prealloc extents beyond eof after full fsync - tracing: Fix return value of __setup handlers - tracing/histogram: Fix sorting on old "cpu" value - HID: add mapping for KEY_ALL_APPLICATIONS - HID: add mapping for KEY_DICTATE - Input: samsung-keypad - properly state IOMEM dependency - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() - net: dcb: disable softirqs in dcbnl_flush_dev() - drm/amdgpu: fix suspend/resume hang regression - nl80211: Handle nla_memdup failures in handle_nan_filter - iavf: Refactor iavf state machine tracking - net: chelsio: cxgb3: check the return value of pci_find_capability() - ibmvnic: complete init_done on transport events - ARM: tegra: Move panels to AUX bus - soc: fsl: qe: Check of ioremap return value - soc: fsl: guts: Add a missing memory allocation failure check - soc: fsl: guts: Revert commit 3c0d64e867ed - ARM: dts: Use 32KiHz oscillator on devkit8000 - ARM: dts: switch timer config to common devkit8000 devicetree - s390/extable: fix exception table sorting - memfd: fix F_SEAL_WRITE after shmem huge page allocated - ibmvnic: free reset-work-item when flushing - igc: igc_write_phy_reg_gpy: drop premature return - pinctrl: sunxi: Use unique lockdep classes for IRQs - selftests: mlxsw: tc_police_scale: Make test more robust - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions - ARM: Fix kgdb breakpoint for Thumb2 - igc: igc_read_phy_reg_gpy: drop premature return - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output - can: gs_usb: change active_channels's type from atomic_t to u8 - ASoC: cs4265: Fix the duplicated control name - firmware: arm_scmi: Remove space in MODULE_ALIAS name - efivars: Respect "block" flag in efivar_entry_set_safe() - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() - ibmvnic: register netdev after init of adapter - net: sxgbe: fix return value of __setup handler - iavf: Fix missing check for running netdev - mac80211: treat some SAE auth steps as final - net: stmmac: fix return value of __setup handler - mac80211: fix forwarded mesh frames AC & queue selection - ice: fix concurrent reset and removal of VFs - ice: Fix race conditions between virtchnl handling and VF ndo ops - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client - net/smc: fix connection leak - net: dcb: flush lingering app table entries for unregistered devices - net: ipv6: ensure we call ipv6_mc_down() at most once - batman-adv: Don't expect inter-netns unique iflink indices - batman-adv: Request iflink once in batadv_get_real_netdevice - batman-adv: Request iflink once in batadv-on-batadv check - netfilter: nf_queue: handle socket prefetch - netfilter: nf_queue: fix possible use-after-free - netfilter: nf_queue: don't assume sk is full socket - net: fix up skbs delta_truesize in UDP GRO frag_list - e1000e: Correct NVM checksum verification flow - xfrm: enforce validity of offload input flags - xfrm: fix the if_id check in changelink - bpf, sockmap: Do not ignore orig_len parameter - netfilter: fix use-after-free in __nf_register_net_hook() - xfrm: fix MTU regression - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls - ntb: intel: fix port config status offset for SPR - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference - xen/netfront: destroy queues before real_num_tx_queues is zeroed - drm/i915: s/JSP2/ICP2/ PCH - iommu/amd: Recover from event log overflow - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - riscv: Fix config KASAN && DEBUG_VIRTUAL - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value - ALSA: intel_hdmi: Fix reference to PCM buffer address - tracing: Add ustring operation to filtering string pointers - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag - ata: pata_hpt37x: fix PCI clock detection - serial: stm32: prevent TDR register overwrite when sending x_char - tracing: Add test for user space strings when filtering on string pointers - exfat: fix i_blocks for files truncated over 4 GiB - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 - i2c: qup: allow COMPILE_TEST - i2c: cadence: allow COMPILE_TEST - dmaengine: shdma: Fix runtime PM imbalance on error - selftests/seccomp: Fix seccomp failure by adding missing headers - cifs: fix double free race when mount fails in cifs_get_root() - tipc: fix a bit overflow in tipc_crypto_key_rcv() - KVM: arm64: vgic: Read HW interrupt pending state from the HW - Input: clear BTN_RIGHT/MIDDLE on buttonpads - regulator: core: fix false positive in regulator_late_cleanup() - ASoC: rt5682: do not block workqueue if card is unbound - ASoC: rt5668: do not block workqueue if card is unbound - i2c: bcm2835: Avoid clock stretching timeouts - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work - mac80211_hwsim: report NOACK frames in tx_status- arm64: Fix wrong logic in gic_arch_restore_irqs() - secure_seq: use the 64 bits of the siphash for port offset calculation - vfio/iommu: Fix uncorrect type parameters which used in bitmap operations - ipv6: per-netns exclusive flowlabel checks - memblock: use kfree() to release kmalloced memblock regions - gpio: tegra186: Fix chip_data type confusion - tty: n_gsm: fix deadlock in gsmtty_open() - tty: n_gsm: fix wrong tty control line for flow control - tty: n_gsm: fix NULL pointer access due to DLCI release - tty: n_gsm: fix proper link termination after failed open - tty: n_gsm: fix encoding of control signal octet bit DV - riscv: fix oops caused by irqsoff latency tracer - thermal: int340x: fix memory leak in int3400_notify() - RDMA/cma: Do not change route.addr.src_addr outside state checks - driver core: Free DMA range map when device is released - xhci: Prevent futile URB re-submissions due to incorrect return value. - xhci: re-initialize the HC during resume if HCE was set - usb: dwc3: gadget: Let the interrupt handler disable bottom halves. - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings - usb: dwc2: drd: fix soft connect when gadget is unconfigured - USB: serial: option: add Telit LE910R1 compositions - USB: serial: option: add support for DW5829e - tracefs: Set the group ownership in apply_options() not parse_options() - usb: gadget: rndis: add spinlock for rndis response list - Revert "USB: serial: ch341: add new Product ID for CH341A" - ata: pata_hpt37x: disable primary channel on HPT371 - sc16is7xx: Fix for incorrect data being transmitted - iio: Fix error handling for PM - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits - iio: adc: men_z188_adc: Fix a resource leak in an error handling path - tracing: Have traceon and traceoff trigger honor the instance - RDMA/ib_srp: Fix a deadlock - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close - RDMA/rtrs-clt: Kill wait_for_inflight_permits - regmap-irq: Update interrupt clear register for proper reset - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets - net/mlx5: Fix wrong limitation of metadata match on ecpf - net/mlx5: Fix possible deadlock on rule deletion - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() - surface: surface3_power: Fix battery readings on batteries without a serial number - net/smc: Use a mutex for locking "struct smc_pnettable" - netfilter: nf_tables: fix memory leak during stateful obj update - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() - net: Force inlining of checksum functions in net/checksum.h - net: ll_temac: check the return value of devm_kmalloc() - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure - drm/edid: Always set RGB444 - openvswitch: Fix setting ipv6 fields causing hw csum failure - gso: do not skip outer ip header in case of ipip and net_failover - tipc: Fix end of loop tests for list_for_each_entry() - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - io_uring: add a schedule point in io_add_buffers() - bpf: Add schedule points in batch ops - selftests: bpf: Check bpf_msg_push_data return value - bpf: Do not try bpf_msg_push_data with len 0 - hwmon: Handle failure to register sensor with thermal zone correctly - bnxt_en: Fix active FEC reporting to ethtool - bnx2x: fix driver load from initrd - perf data: Fix double free in perf_session__delete() - ping: remove pr_err from ping_lookup - optee: use driver internal tee_context for some rpc - tee: export teedev_open() and teedev_close_context() - x86/fpu: Correct pkru/xstate inconsistency - CDC-NCM: avoid overflow in sanity checking - USB: zaurus: support another broken Zaurus - drm/i915: Correctly populate use_sagv_wm for all pipes - drm/amdgpu: disable MMHUB PG for Picasso - KVM: x86/mmu: make apf token non-zero to fix bug - parisc/unaligned: Fix ldw() and stw() unalignment handlers - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing - clk: jz4725b: fix mmc0 clock gating - btrfs: tree-checker: check item_size for dev_item - btrfs: tree-checker: check item_size for inode_item- huge tmpfs: remove shrinklist addition from shmem_setattr() - huge tmpfs: fix split_huge_page() after FALLOC_FL_KEEP_SIZE - huge tmpfs: fix fallocate(vanilla) advance over huge pages - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs - dynamic_hugetlb: fix undefined struct cftype - file: fix kabi change since add f_ctl_mode - selftests/bpf: add demo for file read pattern detection - libbpf: Support detecting writable tracepoint program - ext4: add trace for the read and release of regular file - xfs: add trace for read and release of regular file - fs: add helper fs_file_read_do_trace() - vfs: add bare tracepoints for vfs read and release - bpf: Support writable context for bare tracepoint - trace: bpf: Allow bpf to attach to bare tracepoints - readahead: introduce FMODE_CTL_WILLNEED to read first 2MB of file - lockdep: Correct lock_classes index mapping - i2c: brcmstb: fix support for DSL and CM variants - copy_process(): Move fd_install() out of sighand->siglock critical section - i2c: qcom-cci: don't put a device tree node before i2c_add_adapter() - i2c: qcom-cci: don't delete an unregistered adapter - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size - dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe - dmaengine: sh: rcar-dmac: Check for error num after setting mask - net: sched: limit TC_ACT_REPEAT loops - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop - kconfig: fix failing to generate auto.conf - net: macb: Align the dma and coherent dma masks - net: usb: qmi_wwan: Add support for Dell DW5829e - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create - soc: aspeed: lpc-ctrl: Block error printing on probe defer cases - ata: libata-core: Disable TRIM on M88V29 - kconfig: let 'shell' return enough output for deep path names - selftests: fixup build warnings in pidfd / clone3 tests - pidfd: fix test failure due to stack overflow on some arches - arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 - arm64: dts: meson-g12: add ATF BL32 reserved-memory region - arm64: dts: meson-gx: add ATF BL32 reserved-memory region - netfilter: conntrack: don't refresh sctp entries in closed state - irqchip/sifive-plic: Add missing thead,c900-plic match string - phy: usb: Leave some clocks running during suspend - ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of - ARM: OMAP2+: hwmod: Add of_node_put() before break - NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW - KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event - KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() - tty: n_tty: do not look ahead for EOL character past the end of the buffer - NFS: Do not report writeback errors in nfs_getattr() - block/wbt: fix negative inflight counter when remove scsi device - ASoC: tas2770: Insert post reset delay - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests - mtd: rawnand: gpmi: don't leak PM reference in error path - powerpc/lib/sstep: fix 'ptesync' build error - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() - ALSA: hda: Fix missing codec probe on Shenker Dock 15 - ALSA: hda: Fix regression on forced probe mask option - ALSA: hda/realtek: Fix deadlock by COEF mutex - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 - selftests/exec: Add non-regular to TEST_GEN_PROGS - perf bpf: Defer freeing string after possible strlen() on it - dpaa2-eth: Initialize mutex used in one step timestamping path - libsubcmd: Fix use-after-free for realloc(..., 0) - bonding: fix data-races around agg_select_timer - net_sched: add __rcu annotation to netdev->qdisc - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - ping: fix the dif and sdif check in ping_lookup - net: ieee802154: ca8210: Fix lifs/sifs periods - net: dsa: lantiq_gswip: fix use after free in gswip_remove() - net: dsa: lan9303: fix reset on probe - netfilter: nft_synproxy: unregister hooks on init error path - selftests: netfilter: fix exit value for nft_concat_range - iwlwifi: pcie: gen2: fix locking when "HW not ready" - iwlwifi: pcie: fix locking when "HW not ready" - drm/i915/gvt: Make DRM_I915_GVT depend on X86 - vsock: remove vsock from connected table when connect is interrupted by a signal - drm/i915/opregion: check port number bounds for SWSCI display power state - drm/radeon: Fix backlight control on iMac 12,1 - iwlwifi: fix use-after-free - kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled - kbuild: lto: merge module sections - random: wake up /dev/random writers after zap - gcc-plugins/stackleak: Use noinstr in favor of notrace - Revert "module, async: async_synchronize_full() on module init iff async is used" - x86/Xen: streamline (and fix) PV CPU enumeration - drm/amdgpu: fix logic inversion in check - nvme-rdma: fix possible use-after-free in transport error_recovery work - nvme-tcp: fix possible use-after-free in transport error_recovery work - nvme: fix a possible use-after-free in controller reset during load - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task - scsi: pm8001: Fix use-after-free for aborted TMF sas_task - quota: make dquot_quota_sync return errors from ->sync_fs - vfs: make freeze_super abort when sync_filesystem returns error - selftests: skip mincore.check_file_mmap when fs lacks needed support - selftests: openat2: Skip testcases that fail with EOPNOTSUPP - selftests: openat2: Add missing dependency in Makefile - selftests: openat2: Print also errno in failure messages - selftests/zram: Adapt the situation that /dev/zram0 is being used - selftests/zram01.sh: Fix compression ratio calculation - selftests/zram: Skip max_comp_streams interface on newer kernel - net: ieee802154: at86rf230: Stop leaking skb's - kselftest: signal all child processes - selftests: rtc: Increase test timeout so that all tests run - platform/x86: ISST: Fix possible circular locking dependency detected - platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1 - btrfs: send: in case of IO error log it - parisc: Add ioread64_lo_hi() and iowrite64_lo_hi() - PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology - mm: don't try to NUMA-migrate COW pages that have other uses - mmc: block: fix read single on recovery logic - parisc: Fix sglist access in ccio-dma.c - parisc: Fix data TLB miss in sba_unmap_sg - parisc: Drop __init from map_pages declaration - serial: parisc: GSC: fix build when IOSAPIC is not set - Revert "svm: Add warning message for AVIC IPI invalid target" - HID:Add support for UGTABLET WP5540 - scsi: lpfc: Fix mailbox command failure during driver initialization - can: isotp: add SF_BROADCAST support for functional addressing - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() - fs/proc: task_mmu.c: don't read mapcount for migration entry - mm: memcg: synchronize objcg lists with a dedicated spinlock - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence- ext4: fix bug_on in ext4_writepages - ext4: fix warning in ext4_handle_inode_extension - ext4: fix use-after-free in ext4_rename_dir_prepare - ext4: fix warning when submitting superblock in ext4_commit_super() - ipv6: annotate some data-races around sk->sk_prot - net/sched: cls_u32: fix netns refcount changes in u32_change() - ext4: fix bug_on in __es_tree_search - exec: Remove redundant check in do_open_execat/uselib - floppy: use a statically allocated error counter - ext4: fix race condition between ext4_write and ext4_convert_inline_data - arm64: Fix some build errors related to KEXEC - ubi: ubi_create_volume: Fix use-after-free when volume creation failed - ubi: fastmap: Don't reserve beb_rsvd_pebs while filling fm pool - net: ipv6: fix use after free of struct seg6_pernet_data - net: ipv6: check return value of rhashtable_init - KVM: arm64: vgic: Drop WARN from vgic_get_irq - Documentation: arm64: Add limitation for exactmap - arm64: Fix reserved memory via memmap - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()- io_uring: fix race between timeout flush and removal - net/x25: Fix null-ptr-deref caused by x25_disconnect - iommu: Fix potential use-after-free during probe - perf: Fix list corruption in perf_cgroup_switch() - arm64: dts: imx8mq: fix lcdif port node - scsi: lpfc: Reduce log messages seen after firmware download - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue - Makefile.extrawarn: Move -Wunaligned-access to W=1 - hwmon: (dell-smm) Speed up setting of fan speed - phy: ti: Fix missing sentinel for clk_div_table - speakup-dectlk: Restore pitch setting - USB: serial: cp210x: add CPI Bulk Coin Recycler id - USB: serial: cp210x: add NCR Retail IO box id - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices - USB: serial: option: add ZTE MF286D modem - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 - usb: raw-gadget: fix handling of dual-direction-capable endpoints - usb: gadget: f_uac2: Define specific wTerminalType - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition - usb: dwc3: gadget: Prevent core from processing stale TRBs - usb: ulpi: Call of_node_put correctly - usb: ulpi: Move of_node_put to ulpi_dev_release - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup - Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" - usb: dwc2: drd: fix soft connect when gadget is unconfigured - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX - n_tty: wake up poll(POLLRDNORM) on receiving data - vt_ioctl: add array_index_nospec to VT_ACTIVATE - vt_ioctl: fix array_index_nospec in vt_setactivate - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister - net: mscc: ocelot: fix mutex lock error during ethtool stats read - ice: fix IPIP and SIT TSO offload - ice: fix an error code in ice_cfg_phy_fec() - dpaa2-eth: unregister the netdev before disconnecting from the PHY - net: amd-xgbe: disable interrupts during pci removal - tipc: rate limit warning for received illegal binding update - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE - veth: fix races around rq->rx_notify_masked - net: fix a memleak when uncloning an skb dst and its metadata - net: do not keep the dst cache when uncloning an skb dst and its metadata - nfp: flower: fix ida_idx not being released - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path - net: dsa: lantiq_gswip: don't use devres for mdiobus - net: dsa: felix: don't use devres for mdiobus - net: dsa: bcm_sf2: don't use devres for mdiobus - net: dsa: ar9331: register the mdiobus under devres - net: dsa: mv88e6xxx: don't use devres for mdiobus - bonding: pair enable_port with slave_arr_updates - gpio: sifive: use the correct register to read output values - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE - drm/panel: simple: Assign data from panel_dpi_probe() correctly - ixgbevf: Require large buffers for build_skb on 82599VF - arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133' - netfilter: ctnetlink: disable helper autoassign - misc: fastrpc: avoid double fput() on failed usercopy - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. - gpio: aggregator: Fix calling into sleeping GPIO controllers - usb: f_fs: Fix use-after-free for epfile - ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo - phy: xilinx: zynqmp: Fix bus width setting for SGMII - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect - staging: fbtft: Fix error path in fbtft_driver_module_init() - ARM: dts: meson8b: Fix the UART device-tree schema validation - ARM: dts: meson8: Fix the UART device-tree schema validation - ARM: dts: meson: Fix the UART compatible strings - ARM: dts: Fix timer regression for beagleboard revision c - drm/rockchip: vop: Correct RK3399 VOP register fields - PM: s2idle: ACPI: Fix wakeup interrupts handling - ACPI/IORT: Check node revision for PMCG resources - nvme-tcp: fix bogus request completion when failing to send AER - ARM: socfpga: fix missing RESET_CONTROLLER - ARM: dts: Fix boot regression on Skomer - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group - riscv: fix build with binutils 2.38 - KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow - KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode - KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS - KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER - KVM: eventfd: Fix false positive RCU usage warning - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs - perf: Always wake the parent event - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend - PM: hibernate: Remove register_nosave_region_late() - scsi: myrs: Fix crash in error case - scsi: ufs: Treat link loss as fatal error - scsi: pm8001: Fix bogus FW crash for maxcpus=1 - scsi: qedf: Fix refcount issue when LOGO is received during TMF - scsi: qedf: Add stag_work to all the vports - scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() - scsi: target: iscsi: Make sure the np under each tpg is unique - powerpc/fixmap: Fix VM debug warning on unmap - net: sched: Clarify error message when qdisc kind is unknown - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer - x86/perf: Avoid warning for Arch LBR without XSAVE - NFSv4 handle port presence in fs_location server string - NFSv4 expose nfs_parse_server_name function - NFSv4 remove zero number of fs_locations entries error check - NFSv4.1: Fix uninitialised variable in devicenotify - nfs: nfs4clinet: check the return value of kstrdup() - NFSv4 only print the label when its queried - NFS: change nfs_access_get_cached to only report the mask - tracing: Propagate is_signed to expression - drm/amdgpu: Set a suitable dev_info.gart_page_size - NFSD: Fix offset type in I/O trace points - NFSD: Clamp WRITE offsets - NFS: Fix initialisation of nfs_client cl_flags field - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs - can: isotp: fix potential CAN frame reception race in isotp_rcv() - mmc: sdhci-of-esdhc: Check for error num after setting mask - ima: Do not print policy rule with inactive LSM labels - ima: Allow template selection with ima_template[_fmt]= after ima_hash= - ima: Remove ima_policy file before directory - integrity: check the return value of audit_log_start()- crypto: api - Move cryptomgr soft dependency into algapi - moxart: fix potential use-after-free on remove path - selftests: nft_concat_range: add test for reload with no element add/del - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning - net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY - ext4: fix incorrect type issue during replay_del_range - ext4: fix error handling in ext4_fc_record_modified_inode() - ext4: fix error handling in ext4_restore_inline_data() - ext4: modify the logic of ext4_mb_new_blocks_simple - ext4: prevent used blocks from being allocated during fast commit replay - EDAC/xgene: Fix deferred probing - EDAC/altera: Fix deferred probing - x86/perf: Default set FREEZE_ON_SMI for all - perf/x86/intel/pt: Fix crash with stop filters in single-range mode - perf stat: Fix display of grouped aliased events - fbcon: Add option to enable legacy hardware acceleration - Revert "fbcon: Disable accelerated scrolling" - rtc: cmos: Evaluate century appropriate - tools/resolve_btfids: Do not print any commands when building silently - selftests: futex: Use variable MAKE instead of make - selftests/exec: Remove pipe from TEST_GEN_FILES - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf - gve: fix the wrong AdminQ buffer queue index check - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - pinctrl: bcm2835: Fix a few error paths - pinctrl: intel: fix unexpected interrupt - pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line - ASoC: max9759: fix underflow in speaker_gain_control_put() - ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name - ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes - ASoC: fsl: Add missing error handling in pcm030_fabric_probe - drm/i915/overlay: Prevent divide by zero bugs in scaling - net: stmmac: ensure PTP time register reads are consistent - net: stmmac: dump gmac4 DMA registers correctly - net: macsec: Verify that send_sci is on when setting Tx sci explicitly - net: macsec: Fix offload support for NETDEV_UNREGISTER event - net: ieee802154: Return meaningful error codes from the netlink helpers - net: ieee802154: ca8210: Stop leaking skb's - net: ieee802154: mcr20a: Fix lifs/sifs periods - net: ieee802154: hwsim: Ensure proper channel selection at probe time - spi: uniphier: fix reference count leak in uniphier_spi_probe() - spi: meson-spicc: add IRQ check in meson_spicc_probe - spi: mediatek: Avoid NULL pointer crash in interrupt - spi: bcm-qspi: check for valid cs before applying chip select - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - RDMA/mlx4: Don't continue event handler after memory allocation failure - RDMA/siw: Fix broken RDMA Read Fence/Resume logic. - IB/rdmavt: Validate remote_addr during loopback atomic tests - RDMA/ucma: Protect mc during concurrent multicast leaves - RDMA/cma: Use correct address when leaving multicast group - Revert "ASoC: mediatek: Check for error clk pointer" - IB/hfi1: Fix AIP early init panic - dma-buf: heaps: Fix potential spectre v1 gadget - block: bio-integrity: Advance seed correctly for larger interval sizes - mm/kmemleak: avoid scanning potential huge holes - mm/pgtable: define pte_index so that preprocessor could recognize it - mm/debug_vm_pgtable: remove pte entry from the page table - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels - drm/nouveau: fix off by one in BIOS boundary checking - btrfs: fix deadlock between quota disable and qgroup rescan worker - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks - ALSA: hda/realtek: Add quirk for ASUS GU603 - ALSA: hda: realtek: Fix race at concurrent COEF updates - ALSA: hda: Fix UAF of leds class devs at unbinding - ALSA: usb-audio: Correct quirk for VF0770 - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - selinux: fix double free of cond_list on error paths - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" - psi: fix failure of create cgroup psi trigger - mbigen: fix mbigen driver defer probe - md/raid1: fix missing bitmap update w/o WriteMostly devices - md/raid1: only allocate write behind bio for WriteMostly device - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors - arm64: entry: Save some nops when CONFIG_ARM64_PSEUDO_NMI is not set - crypto: crct10dif-neon - fix use via crypto_shash_digest() - net: fix information leakage in /proc/net/ptype - config: enable CONFIG_QOS_SCHED_SMT_EXPELLER by - sched: Add tracepoint for qos smt expeller - sched: Add statistics for qos smt expeller - sched: Implement the function of qos smt expeller - sched: Introduce qos smt expeller for co-location - ext4: fix symlink file size not match to file content - ext4: fix bug_on in start_this_handle during umount filesystem - ext4: fix use-after-free in ext4_search_dir - KVM: s390: Return error on SIDA memop on normal guest - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - perf c2c: Update documentation for display option 'all' - perf c2c: Sort on all cache hit for load operations - perf c2c: Refactor node header - perf c2c: Add dimensions for load miss - perf c2c: Add dimensions for load hit - perf c2c: Add dimensions for total load hit - rcu/nocb: Make rcu_core() callbacks acceleration preempt-safe - livepatch/arm64: Fix incorrect endian conversion when long jump - livepatch: Print logs when register failed - livepatch: Print logs when check calltrace failed - livepatch: Print logs when patch text failed - livepatch: Optimize list_del operation in 'arch_klp_unpatch_func' - livepatch: Use 'old_insns' to replace 'old_insn' - livepatch: Remove redundant copy for old codes - livepatch: Reduce duplicate codes and fix issue on patch text - mm: export collect_procs() - rcu: Prevent expedited GP from enabling tick on offline CPU- tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - fanotify: Fix stale file descriptor in copy_event_to_user() - net: amd-xgbe: Fix skb data length underflow - net: amd-xgbe: ensure to reset the tx_timer_active flag - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback - net/mlx5: E-Switch, Fix uninitialized variable modact - net/mlx5: Use del_timer_sync in fw reset flow of halting poll - net/mlx5e: Fix handling of wrong devices during bond netevent - drm/vc4: hdmi: Make sure the device is powered with CEC - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN - x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN - psi: Fix uaf issue when psi trigger is destroyed while being polled - KVM: x86: Forcibly leave nested virt when SMM state is toggled - Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices" - net: ipa: prevent concurrent replenish - net: ipa: use a bitmap for endpoint replenish_enabled - net: ipa: fix atomic update in ipa_endpoint_replenish() - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() - block: Fix wrong offset in bio_truncate() - fsnotify: invalidate dcache before IN_DELETE event - usr/include/Makefile: add linux/nfc.h to the compile-test coverage - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config - net: bridge: vlan: fix memory leak in __allowed_ingress - ipv4: remove sparse error in ip_neigh_gw4() - ipv4: tcp: send zero IPID in SYNACK messages - ipv4: raw: lock the socket in raw_bind() - net: bridge: vlan: fix single net device option dumping - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" - net: cpsw: Properly initialise struct page_pool_params - drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc - drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy - video: hyperv_fb: Fix validation of screen resolution - ibmvnic: don't spin in tasklet - ibmvnic: init ->running_cap_crqs early - ipv4: fix ip option filtering for locally generated fragments - net: ipv4: Fix the warning for dereference - net: ipv4: Move ip_options_fragment() out of loop - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending - hwmon: (lm90) Mark alert as broken for MAX6654 - efi/libstub: arm64: Fix image check alignment at entry - rxrpc: Adjust retransmission backoff - octeontx2-pf: Forward error codes to VF - phylib: fix potential use-after-free - net: phy: broadcom: hook up soft_reset for BCM54616S - sched/pelt: Relax the sync of util_sum with util_avg - kernel: delete repeated words in comments - netfilter: conntrack: don't increment invalid counter on NF_REPEAT - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 - NFS: Ensure the server has an up to date ctime before renaming - NFS: Ensure the server has an up to date ctime before hardlinking - ipv6: annotate accesses to fn->fn_sernum - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy - drm/msm: Fix wrong size calculation - net-procfs: show net devices bound packet types - hwmon: (lm90) Reduce maximum conversion rate for G781 - ipv4: avoid using shared IP generator for connected sockets - ping: fix the sk_bound_dev_if match in ping_lookup - hwmon: (lm90) Mark alert as broken for MAX6680 - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 - ipv6_tunnel: Rate limit warning messages - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev - usb: roles: fix include/linux/usb/role.h compile issue - i40e: fix unsigned stat widths - i40e: Fix for failed to init adminq while VF reset - i40e: Fix queues reservation for XDP - i40e: Fix issue when maximum queues is exceeded - i40e: Increase delay to 1 s after global EMP reset - powerpc/32: Fix boot failure with GCC latent entropy plugin - powerpc/32s: Fix kasan_init_region() for KASAN - powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs - x86/MCE/AMD: Allow thresholding interface updates after init - sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask - ocfs2: fix a deadlock when commit trans - jbd2: export jbd2_journal_[grab|put]_journal_head - ucsi_ccg: Check DEV_INT bit only when starting CCG4 - usb: typec: tcpm: Do not disconnect while receiving VBUS off - USB: core: Fix hang in usb_kill_urb by adding memory barriers - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - usb: common: ulpi: Fix crash in ulpi_match() - usb: xhci-plat: fix crash when suspend if remote wake enable - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge - tty: Add support for Brainboxes UC cards. - tty: n_gsm: fix SW flow control encoding/handling - serial: stm32: fix software flow control transfer - serial: 8250: of: Fix mapped region size when using reg-offset property - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments - arm64: errata: Fix exec handling in erratum 1418040 workaround - KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS - drm/etnaviv: relax submit size limits - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX - Revert "KVM: SVM: avoid infinite loop on NPF from bad address" - fsnotify: fix fsnotify hooks in pseudo filesystems - ceph: set pool_ns in new inode layout for async creates - ceph: properly put ceph_string reference after async create attempt - tracing: Don't inc err_log entry count if entry allocation fails - tracing/histogram: Fix a potential memory leak for kstrdup() - PM: wakeup: simplify the output logic of pm_show_wakelocks() - efi: runtime: avoid EFIv2 runtime services on Apple x86 machines - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() - s390/hypfs: include z/VM guests with access control group set - s390/module: fix loading modules with a lot of relocations - net: stmmac: skip only stmmac_ptp_register when resume from suspend - net: sfp: ignore disabled SFP node - media: venus: core: Drop second v4l2 device unregister - Bluetooth: refactor malicious adv data check - drm/vmwgfx: Fix stale file descriptors on failed usercopy - select: Fix indefinitely sleeping task in poll_schedule_timeout() - KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU - rcu: Tighten rcu_advance_cbs_nowake() checks - bnx2x: Invalidate fastpath HSI version for VFs - bnx2x: Utilize firmware 7.13.21.0 - drm/i915: Flush TLBs before releasing backing store- llc: only change llc->dev when bind() succeeds - netdevice: add the case if dev is NULL - llc: fix netdevice reference leaks in llc_ui_bind() - Revert "clocksource: Reduce clocksource-skew threshold" - Revert "clocksource: Avoid accidental unstable marking of clocksources" - Revert "xfrm: rate limit SA mapping change message to user space" - ipvlan: Modify the value of ipvlan modes - of: Enable crashkernel=X,high to support kexec option -s - arm64: kdump: Try not to use NO_BLOCK_MAPPINGS for memory under 4G - arm64: kdump: Use page-level mapping for the high memory of crashkernel - arm64: kdump: Don't force page-level mappings for memory above 4G - arm64: kdump: Update the name of crashk_low_res - x86: KVM: Fixed the bug that WAITmax cannot be updated in real time - powerpc: Free fdt on error in elf64_load() - powerpc: If kexec_build_elf_info() fails return immediately from elf64_load() - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION - ixgbevf: add disable link state - ixgbe: add improvement for MDD response functionality - ixgbe: add the ability for the PF to disable VF link state - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path - RDMA/rtrs-clt: Fix possible double free in error case - arm64: fix clang warning about TRAMP_VALIAS - arm64: kvm: Fix copy-and-paste error in bhb templates for v5.10 stable - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting - arm64: Use the clearbhb instruction in mitigations - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - arm64: Mitigate spectre style branch history side channels - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - arm64: Add percpu vectors for EL1 - arm64: entry: Add macro for reading symbol addresses from the trampoline - arm64: entry: Add vectors that have the bhb mitigation sequences - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - arm64: entry: Allow the trampoline text to occupy multiple pages - arm64: entry: Make the kpti trampoline's kpti sequence optional - arm64: entry: Move trampoline macros out of ifdef'd section - arm64: entry: Don't assume tramp_vectors is the start of the vectors - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - arm64: entry: Move the trampoline data page before the text page - arm64: entry: Free up another register on kpti's tramp_exit path - arm64: entry: Make the trampoline cleanup optional - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit - arm64: entry.S: Add ventry overflow sanity checks - ARM: Spectre-BHB: provide empty stub for non-config - ARM: Do not use NOCROSSREFS directive with ld.lld - ARM: include unprivileged BPF status in Spectre V2 reporting - ARM: Spectre-BHB workaround - ARM: use LOADADDR() to get load address of sections - ARM: early traps initialisation - ARM: report Spectre v2 status through sysfs - arm64: add ID_AA64ISAR2_EL1 sys register - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT - x86/speculation: Warn about Spectre v2 LFENCE mitigation - x86/speculation: Update link to AMD speculation whitepaper - x86/speculation: Use generic retpoline by default on AMD - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting - Documentation/hw-vuln: Update spectre doc - x86/speculation: Add eIBRS + Retpoline options - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path - scripts: sphinx-pre-install: Fix ctex support on Debian - scripts: sphinx-pre-install: add required ctex dependency - ath10k: Fix the MTU size on QCA9377 SDIO - mtd: nand: bbt: Fix corner case in bad block table handling - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test - mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault - lib82596: Fix IRQ check in sni_82596_probe - scripts/dtc: dtx_diff: remove broken example from help text - dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property - net: mscc: ocelot: fix using match before it is set - net: sfp: fix high power modules without diagnostic monitoring - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() - bcmgenet: add WOL IRQ check - net_sched: restore "mpu xxx" handling - net: bonding: fix bond_xmit_broadcast return value error bug - arm64: dts: qcom: msm8996: drop not documented adreno properties - devlink: Remove misleading internal_flags from health reporter dump - perf probe: Fix ppc64 'perf probe add events failed' case - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition - dmaengine: at_xdmac: Fix lld view setting - dmaengine: at_xdmac: Fix concurrency over xfers_list - dmaengine: at_xdmac: Print debug message after realeasing the lock - dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending - dmaengine: at_xdmac: Don't start transactions at tx_submit level - perf script: Fix hex dump character output - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() - xfrm: Don't accidentally set RTO_ONLINK in decode_session4() - netns: add schedule point in ops_exit_list() - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh - taskstats: Cleanup the use of task->exit_code - virtio_ring: mark ring unused on error - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 - rtc: pxa: fix null pointer dereference - HID: vivaldi: fix handling devices not using numbered reports - net: axienet: increase default TX ring size to 128 - net: axienet: fix for TX busy handling - net: axienet: fix number of TX ring slots for available check - net: axienet: Fix TX ring slot available check - net: axienet: limit minimum TX ring size - net: axienet: add missing memory barriers - net: axienet: reset core on initialization prior to MDIO access - net: axienet: Wait for PhyRstCmplt after core reset - net: axienet: increase reset timeout - net/smc: Fix hung_task when removing SMC-R devices - clk: si5341: Fix clock HW provider cleanup - clk: Emit a stern warning with writable debugfs enabled - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress - f2fs: fix to reserve space for IO align feature - f2fs: compress: fix potential deadlock of compress file - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module - net/fsl: xgmac_mdio: Add workaround for erratum A-009885 - ipv4: avoid quadratic behavior in netns dismantle - ipv4: update fib_info_cnt under spinlock protection - perf evsel: Override attr->sample_period for non-libpfm4 events - xdp: check prog type before updating BPF link - bpftool: Remove inclusion of utilities.mak from Makefiles - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses - powerpc/cell: Fix clang -Wimplicit-fallthrough warning - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK - RDMA/rxe: Fix a typo in opcode name - dmaengine: uniphier-xdmac: Fix type of address variables - scsi: core: Show SCMD_LAST in text form - Bluetooth: hci_sync: Fix not setting adv set duration - Documentation: fix firewire.rst ABI file path error - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization - Documentation: ACPI: Fix data node reference documentation - Documentation: dmaengine: Correctly describe dmatest with channel unset - media: correct MEDIA_TEST_SUPPORT help text - drm/vc4: hdmi: Make sure the device is powered with CEC - media: rcar-csi2: Optimize the selection PHTW register - can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message - firmware: Update Kconfig help text for Google firmware - of: base: Improve argument length mismatch error - drm/radeon: fix error handling in radeon_driver_open_kms - ext4: don't use the orphan list when migrating an inode - ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal - ext4: fast commit may miss tracking unwritten range during ftruncate - ext4: use ext4_ext_remove_space() for fast commit replay delete range - ext4: set csum seed in tmp inode while migrating to extents - ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE - ext4: initialize err_blk before calling __ext4_get_inode_loc - ext4: fix a possible ABBA deadlock due to busy PA - ext4: make sure quota gets properly shutdown on error - ext4: make sure to reset inode lockdep class when quota enabling fails - btrfs: respect the max size in the header when activating swap file - btrfs: check the root node for uptodate before returning it - btrfs: fix deadlock between quota enable and other quota operations - xfrm: fix policy lookup for ipv6 gre packets - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device - PCI: pci-bridge-emul: Correctly set PCIe capabilities - PCI: pci-bridge-emul: Fix definitions of reserved bits - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space - PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors - PCI: xgene: Fix IB window setup - powerpc/64s/radix: Fix huge vmap false positive - parisc: Fix lpa and lpa_user defines - drm/bridge: analogix_dp: Make PSR-exit block less - drm/nouveau/kms/nv04: use vzalloc for nv04_display - drm/etnaviv: limit submit sizes - device property: Fix fwnode_graph_devcon_match() fwnode leak - s390/mm: fix 2KB pgtable release race - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds - tracing/kprobes: 'nmissed' not showed correctly for kretprobe - cputime, cpuacct: Include guest time in user time in cpuacct.stat - serial: Fix incorrect rs485 polarity on uart open - fuse: Pass correct lend value to filemap_write_and_wait_range() - xen/gntdev: fix unmap notification order - spi: uniphier: Fix a bug that doesn't point to private data correctly - tpm: fix NPE on probe for missing device - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() - crypto: omap-aes - Fix broken pm_runtime_and_get() usage - rpmsg: core: Clean up resources on announce_create failure. - phy: mediatek: Fix missing check in mtk_mipi_tx_probe - ASoC: mediatek: mt8183: fix device_node leak - ASoC: mediatek: mt8173: fix device_node leak - scsi: sr: Don't use GFP_DMA - MIPS: Octeon: Fix build errors using clang - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters - irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time - MIPS: OCTEON: add put_device() after of_find_device_by_node() - udf: Fix error handling in udf_new_inode() - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option - selftests/powerpc/spectre_v2: Return skip code when miss_percent is high - powerpc/40x: Map 32Mbytes of memory at startup - MIPS: Loongson64: Use three arguments for slti - ALSA: seq: Set upper limit of processed events - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup - dm: fix alloc_dax error handling in alloc_dev - nvmem: core: set size for sysfs bin file - w1: Misuse of get_user()/put_user() reported by sparse - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots - powerpc/powermac: Add missing lockdep_register_key() - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB - i2c: mpc: Correct I2C reset procedure - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING - i2c: i801: Don't silently correct invalid transfer size - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race - powerpc/btext: add missing of_node_put - powerpc/cell: add missing of_node_put - powerpc/powernv: add missing of_node_put - powerpc/6xx: add missing of_node_put - x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs - parisc: Avoid calling faulthandler_disabled() twice - random: do not throw away excess input to crng_fast_load - serial: core: Keep mctrl register state and cached copy in sync - serial: pl010: Drop CR register reset on set_termios - regulator: qcom_smd: Align probe function with rpmh-regulator - net: gemini: allow any RGMII interface mode - net: phy: marvell: configure RGMII delays for 88E1118 - mlxsw: pci: Avoid flow control for EMAD packets - dm space map common: add bounds check to sm_ll_lookup_bitmap() - dm btree: add a defensive bounds check to insert_at() - mac80211: allow non-standard VHT MCS-10/11 - net: mdio: Demote probed message to debug print - btrfs: remove BUG_ON(!eie) in find_parent_nodes - btrfs: remove BUG_ON() in find_parent_nodes() - ACPI: battery: Add the ThinkPad "Not Charging" quirk - amdgpu/pm: Make sysfs pm attributes as read-only for VFs - drm/amdgpu: fixup bad vram size on gmc v8 - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 - ACPICA: Fix wrong interpretation of PCC address - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() - ACPICA: Utilities: Avoid deleting the same object twice in a row - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions - drm/etnaviv: consider completed fence seqno in hang check - xfrm: rate limit SA mapping change message to user space - Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES - ath11k: Fix napi related hang - um: registers: Rename function names to avoid conflicts and build problems - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ - iwlwifi: mvm: Fix calculation of frame length - iwlwifi: remove module loading failure message - iwlwifi: fix leaks/bad data after failed firmware load - PM: AVS: qcom-cpr: Use div64_ul instead of do_div - rtw88: 8822c: update rx settings to prevent potential hw deadlock - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 - cpufreq: Fix initialization of min and max frequency QoS requests - PM: runtime: Add safety net to supplier device release - arm64: tegra: Adjust length of CCPLEX cluster MMIO region - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() - media: igorplugusb: receiver overflow should be reported - HID: quirks: Allow inverting the absolute X/Y values - bpf: Do not WARN in bpf_warn_invalid_xdp_action() - net: bonding: debug: avoid printing debug logs when bond is not notifying peers - x86/mce: Mark mce_read_aux() noinstr - x86/mce: Mark mce_end() noinstr - x86/mce: Mark mce_panic() noinstr - x86/mce: Allow instrumentation during task work queueing - ath11k: Avoid false DEADLOCK warning reported by lockdep - selftests/ftrace: make kprobe profile testcase description unique - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock - net: phy: prefer 1000baseT over 1000baseKX - net-sysfs: update the queue counts in the unregistration path - ath10k: Fix tx hanging - ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work - iwlwifi: mvm: avoid clearing a just saved session protection id - iwlwifi: mvm: synchronize with FW after multicast commands - thunderbolt: Runtime PM activate both ends of the device link - media: m920x: don't use stack on USB reads - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() - media: rcar-vin: Update format alignment constraints - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. - drm: rcar-du: Fix CRTC timings when CMM is used - x86/mm: Flush global TLB when switching to trampoline page-table - floppy: Add max size check for user space request - usb: uhci: add aspeed ast2600 uhci support - arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node - ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win - ACPI / x86: Allow specifying acpi_device_override_status() quirks by path - ACPI: Change acpi_device_always_present() into acpi_device_override_status() - ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table - media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions - ath11k: Avoid NULL ptr access during mgmt tx cleanup - rsi: Fix out-of-bounds read in rsi_read_pkt() - rsi: Fix use-after-free in rsi_rx_done_handler() - crypto: jitter - consider 32 LSB for APT - HSI: core: Fix return freed object in hsi_new_client - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use - tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() - drm/bridge: megachips: Ensure both bridges are probed before registration - mlxsw: pci: Add shutdown method in PCI driver - soc: ti: pruss: fix referenced node in error message - drm/amdgpu/display: set vblank_disable_immediate for DC - drm/amd/display: check top_pipe_to_program pointer - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART - EDAC/synopsys: Use the quirk for version instead of ddr version - media: b2c2: Add missing check in flexcop_pci_isr: - HID: apple: Do not reset quirks when the Fn key is not found - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L - usb: gadget: f_fs: Use stream_open() for endpoint files - ath11k: Fix crash caused by uninitialized TX ring - media: atomisp: handle errors at sh_css_create_isp_params() - batman-adv: allow netlink usage in unprivileged containers - ARM: shmobile: rcar-gen2: Add missing of_node_put() - media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure - media: atomisp: set per-device's default mode - media: atomisp: fix try_fmt logic - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR - drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply - selftests/bpf: Fix bpf_object leak in skb_ctx selftest - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y - fs: dlm: filter user dlm messages for kernel locks - Bluetooth: Fix debugfs entry leak in hci_register_dev() - ARM: dts: omap3-n900: Fix lp5523 for multi color - of: base: Fix phandle argument length mismatch error message - clk: bm1880: remove kfrees on static allocations - ASoC: fsl_asrc: refine the check of available clock divider - RDMA/cxgb4: Set queue pair state when being queried - ASoC: fsl_mqs: fix MODULE_ALIAS - powerpc/xive: Add missing null check after calling kmalloc - mips: bcm63xx: add support for clk_set_parent() - mips: lantiq: add support for clk_set_parent() - arm64: tegra: Remove non existent Tegra194 reset - arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering - counter: stm32-lptimer-cnt: remove iio counter abi - misc: lattice-ecp3-config: Fix task hung when firmware load failed - ASoC: samsung: idma: Check of ioremap return value - ASoC: mediatek: Check for error clk pointer - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register - ASoC: Intel: catpt: Test dmaengine_submit() result before moving on - iommu/amd: Restore GA log/tail pointer on host resume - iommu/amd: Remove iommu_init_ga() - dmaengine: pxa/mmp: stop referencing config->slave_id - mips: fix Kconfig reference to PHYS_ADDR_T_64BIT - mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell - of: unittest: 64 bit dma address test requires arch support - of: unittest: fix warning on PowerPC frame size warning - ASoC: rt5663: Handle device_property_read_u32_array error codes - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry - RDMA/core: Let ib_find_gid() continue search even after empty entry - powerpc/powermac: Add additional missing lockdep_register_key() - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs - scsi: ufs: Fix race conditions related to driver data - iommu/io-pgtable-arm: Fix table descriptor paddr formatting - openrisc: Add clone3 ABI wrapper - binder: fix handling of error during copy - char/mwave: Adjust io port register size - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID - ALSA: oss: fix compile error when OSS_DEBUG is enabled - clocksource: Avoid accidental unstable marking of clocksources - clocksource: Reduce clocksource-skew threshold - powerpc/32s: Fix shift-out-of-bounds in KASAN init - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC - powerpc/irq: Add helper to set regs->softe - powerpc/perf: move perf irq/nmi handling details into traps.c - powerpc/perf: MMCR0 control for PMU registers under PMCC=00 - powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C - dt-bindings: thermal: Fix definition of cooling-maps contribution property - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA - powerpc/prom_init: Fix improper check of prom_getprop() - clk: imx8mn: Fix imx8mn_clko1_sels - scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls - ext4: avoid trim error on fs with small groups - net: mcs7830: handle usb read errors properly - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() - pcmcia: fix setting of kthread task states - can: xilinx_can: xcan_probe(): check for error irq - can: softing: softing_startstop(): fix set but not used variable warning - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' - tpm: add request_locality before write TPM_INT_ENABLE - can: mcp251xfd: add missing newline to printed strings - regmap: Call regmap_debugfs_exit() prior to _init() - netrom: fix api breakage in nr_setsockopt() - ax25: uninitialized variable in ax25_setsockopt() - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() - lib/mpi: Add the return value check of kcalloc() - net/mlx5: Set command entry semaphore up once got index free - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" - net/mlx5e: Don't block routes with nexthop objects in SW - net/mlx5e: Fix page DMA map/unmap attributes - debugfs: lockdown: Allow reading debugfs files that are not world readable - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init - usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe - Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe - Bluetooth: hci_bcm: Check for error irq - fsl/fman: Check for null pointer after calling devm_ioremap - staging: greybus: audio: Check null pointer - rocker: fix a sleeping in atomic bug - ppp: ensure minimum packet size in ppp_write() - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). - bpf: Don't promote bogus looking registers after null check. - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() - power: reset: mt6397: Check for null res pointer - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes - x86/mce/inject: Avoid out-of-bounds write when setting flags - hwmon: (mr75203) fix wrong power-up delay value - x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS - Bluetooth: hci_qca: Stop IBS timer during BT OFF - software node: fix wrong node passed to find nargs_prop - backlight: qcom-wled: Respect enabled-strings in set_brightness - backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion - backlight: qcom-wled: Override default length with qcom,enabled-strings - backlight: qcom-wled: Fix off-by-one maximum with default num_strings - backlight: qcom-wled: Pass number of elements to read to read_u32_array - backlight: qcom-wled: Validate enabled string indices in DT - bpftool: Enable line buffering for stdout - Bluetooth: L2CAP: Fix using wrong mode - um: virtio_uml: Fix time-travel external time propagation - um: fix ndelay/udelay defines - selinux: fix potential memleak in selinux_add_opt() - mmc: meson-mx-sdio: add IRQ check - mmc: meson-mx-sdhc: add IRQ check - iwlwifi: mvm: test roc running status bits before removing the sta - iwlwifi: mvm: fix 32-bit build in FTM - ARM: dts: armada-38x: Add generic compatible to UART nodes - arm64: dts: marvell: cn9130: enable CP0 GPIO controllers - arm64: dts: marvell: cn9130: add GPIO and SPI aliases - usb: ftdi-elan: fix memory leak on device disconnect - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding - xfrm: state and policy should fail if XFRMA_IF_ID 0 - xfrm: interface with if_id 0 should return error - media: hantro: Fix probe func error path - drm/tegra: vic: Fix DMA API misuse - drm/bridge: ti-sn65dsi86: Set max register for regmap - drm/msm/dpu: fix safe status debugfs file - arm64: dts: qcom: ipq6018: Fix gpio-ranges property - arm64: dts: qcom: c630: Fix soundcard setup - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes - media: msi001: fix possible null-ptr-deref in msi001_probe() - media: dw2102: Fix use after free - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush - crypto: stm32 - Revert broken pm_runtime_resume_and_get changes - crypto: stm32/cryp - fix bugs and crash in tests - crypto: stm32/cryp - fix lrw chaining mode - crypto: stm32/cryp - fix double pm exit - crypto: stm32/cryp - check early input data - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests - crypto: stm32/cryp - fix CTR counter carry - crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter - selftests: harness: avoid false negatives if test has no ASSERTs - selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST - x86/uaccess: Move variable into switch case statement - xfrm: fix a small bug in xfrm_sa_len() - mwifiex: Fix possible ABBA deadlock - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass - drm/msm/dp: displayPort driver need algorithm rational - sched/rt: Try to restart rt period timer when rt runtime exceeded - Revert "sched/rt: Try to restart rt period timer when rt runtime exceeded" - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma - media: si2157: Fix "warm" tuner state detection - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() - media: dib8000: Fix a memleak in dib8000_init() - bpf: Remove config check to enable bpf support for branch records - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) - bpf: Adjust BTF log size limit. - sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity - sched/fair: Fix detection of per-CPU kthreads waking a task - Bluetooth: btmtksdio: fix resume failure - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() - staging: rtl8192e: return error code from rtllib_softmac_init() - floppy: Fix hang in watchdog when disk is ejected - serial: amba-pl011: do not request memory region twice - tty: serial: uartlite: allow 64 bit address - arm64: dts: ti: k3-j7200: Correct the d-cache-sets info - arm64: dts: ti: k3-j721e: Fix the L2 cache sets - arm64: dts: ti: k3-j7200: Fix the L2 cache sets - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() - thermal/drivers/imx8mm: Enable ADC when enabling monitor - ACPI: EC: Rework flushing of EC work while suspended to idle - cgroup: Trace event cgroup id fields should be u64 - arm64: dts: qcom: msm8916: fix MMC controller aliases - netfilter: bridge: add support for pppoe filtering - thermal/drivers/imx: Implement runtime PM support - media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' - media: venus: core: Fix a potential NULL pointer dereference in an error handling path - media: venus: core, venc, vdec: Fix probe dependency error - media: venus: pm_helpers: Control core power domain manually - media: coda: fix CODA960 JPEG encoder buffer overflow - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() - media: imx-pxp: Initialize the spinlock prior to using it - media: rcar-csi2: Correct the selection of hsfreqrange - mfd: atmel-flexcom: Use .resume_noirq - mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP - tty: serial: atmel: Call dma_async_issue_pending() - tty: serial: atmel: Check return code of dmaengine_submit() - arm64: dts: ti: k3-j721e: correct cache-sets info - ath11k: Use host CE parameters for CE interrupts configuration - crypto: qat - fix undetected PFVF timeout in ACK loop - crypto: qat - make pfvf send message direction agnostic - crypto: qat - remove unnecessary collision prevention step in PFVF - crypto: qat - fix spelling mistake: "messge" -> "message" - ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco - mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove - crypto: qce - fix uaf on qce_skcipher_register_one - crypto: qce - fix uaf on qce_ahash_register_one - media: dmxdev: fix UAF when dvb_register_device() fails - arm64: dts: renesas: cat875: Add rx/tx delays - drm/vboxvideo: fix a NULL vs IS_ERR() check - fs: dlm: fix build with CONFIG_IPV6 disabled - tee: fix put order in teedev_close_context() - ath11k: reset RSN/WPA present state for open BSS - ath11k: clear the keys properly via DISABLE_KEY - ath11k: Fix ETSI regd with weather radar overlap - Bluetooth: stop proccessing malicious adv data - memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails - fs: dlm: don't call kernel_getpeername() in error_report() - fs: dlm: use sk->sk_socket instead of con->sock - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot - arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ - arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name - media: aspeed: Update signal status immediately to ensure sane hw state - media: em28xx: fix memory leak in em28xx_init_dev - media: aspeed: fix mode-detect always time out at 2nd run - media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() - media: atomisp: fix enum formats logic - media: atomisp: add NULL check for asd obtained from atomisp_video_pipe - media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c - media: atomisp: fix ifdefs in sh_css.c - media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() - media: atomisp: do not use err var when checking port validity for ISP2400 - media: atomisp: fix inverted logic in buffers_needed() - media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case - media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() - media: videobuf2: Fix the size printk format - mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware - wcn36xx: fix RX BD rate mapping for 5GHz legacy rates - wcn36xx: populate band before determining rate on RX - wcn36xx: Put DXE block into reset before freeing memory - wcn36xx: Release DMA channel descriptor allocations - wcn36xx: Fix DMA channel enable/disable cycle - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND - wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan - drm/vc4: hdmi: Set a default HSM rate - clk: bcm-2835: Remove rounding up the dividers - clk: bcm-2835: Pick the closest clock rate - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails - drm/rockchip: dsi: Reconfigure hardware on resume() - drm/rockchip: dsi: Disable PLL clock on bind error - drm/rockchip: dsi: Hold pm-runtime across bind/unbind - drm/rockchip: dsi: Fix unbalanced clock on probe error - drm/panel: innolux-p079zca: Delete panel on attach() failure - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure - drm: fix null-ptr-deref in drm_dev_init_release() - drm/bridge: display-connector: fix an uninitialized pointer in probe() - Bluetooth: L2CAP: Fix not initializing sk_peer_pid - drm/ttm: Put BO in its memory manager's lru list - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages - dma/pool: create dma atomic pool only if dma zone has managed pages - mm_zone: add function to check if managed dma zone exists - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() - gpu: host1x: Add back arm_iommu_detach_device() - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() - iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs - can: softing_cs: softingcs_probe(): fix memleak on registration failure - media: cec-pin: fix interrupt en/disable handling - media: stk1160: fix control-message timeouts - media: pvrusb2: fix control-message timeouts - media: redrat3: fix control-message timeouts - media: dib0700: fix undefined behavior in tuner shutdown - media: s2255: fix control-message timeouts - media: cpia2: fix control-message timeouts - media: em28xx: fix control-message timeouts - media: mceusb: fix control-message timeouts - media: flexcop-usb: fix control-message timeouts - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE - rtc: cmos: take rtc_lock while reading from CMOS - tools/nolibc: fix incorrect truncation of exit code - tools/nolibc: i386: fix initial stack alignment - tools/nolibc: x86-64: Fix startup code bug - x86/gpu: Reserve stolen memory for first integrated Intel GPU - mtd: rawnand: davinci: Rewrite function description - mtd: rawnand: davinci: Avoid duplicated page read - mtd: rawnand: davinci: Don't calculate ECC when reading page - mtd: Fixed breaking list in __mtd_del_partition. - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() - HID: wacom: Avoid using stale array indicies to read contact count - HID: wacom: Ignore the confidence flag when a touch is removed - HID: wacom: Reset expected and received contact counts at the same time - HID: uhid: Fix worker destroying device without any protection - KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock- sysctl: Modify sysctl_overload_detect_period minimum to 100ms - ax25: Fix NULL pointer dereferences in ax25 timers - ax25: fix NPD bug in ax25_disconnect - ax25: Fix NULL pointer dereference in ax25_kill_by_device - ax25: improve the incomplete fix to avoid UAF and NPD bugs - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 - mm: gup: fix potential pgmap refcnt leak in __gup_device_huge() - mtd: phram: Fix error return code in phram_setup()- scsi: hisi_sas: Limit users changing debugfs BIST count value - netfilter: nf_tables: initialize registers in nft_do_chain() - sched: Fix yet more sched_fork() races - USB: gadget: validate interface OS descriptor requests - usb: gadget: don't release an existing dev->buf - usb: gadget: clear related members when goto fail - usb: gadget: rndis: check size of RNDIS_MSG_SET command - locking/csd_lock: Add boot parameter for controlling CSD lock debugging - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task - PCI: fix kabi change in struct pci_dev - PCI/RCEC: Fix RCiEP device to RCEC association - PCI/AER: Add RCEC AER error injection support - PCI/PME: Add pcie_walk_rcec() to RCEC PME handling - PCI/AER: Add pcie_walk_rcec() to RCEC AER handling - PCI/ERR: Recover from RCiEP AER errors - PCI/ERR: Add pcie_link_rcec() to associate RCiEPs - PCI/ERR: Recover from RCEC AER errors - PCI/ERR: Clear AER status only when we control AER - PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() - PCI/ERR: Avoid negated conditional for clarity - PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() - PCI/ERR: Simplify by computing pci_pcie_type() once - PCI/ERR: Simplify by using pci_upstream_bridge() - PCI/ERR: Rename reset_link() to reset_subordinates() - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() - PCI/ERR: Bind RCEC devices to the Root Port driver - PCI/AER: Write AER Capability only when we control it - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() - scsi: hisi_sas: Use autosuspend for the host controller - scsi: libsas: Keep host active while processing events - scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed - scsi: libsas: Defer works of new phys during suspend - scsi: libsas: Refactor sas_queue_deferred_work() - scsi: libsas: Add flag SAS_HA_RESUMING - scsi: libsas: Resume host while sending SMP I/Os - scsi: hisi_sas: Add more logs for runtime suspend/resume - scsi: libsas: Insert PORTE_BROADCAST_RCVD event for resuming host - scsi: mvsas: Add spin_lock/unlock() to protect asd_sas_port->phy_list - scsi: hisi_sas: Fix some issues related to asd_sas_port->phy_list - scsi: libsas: Add spin_lock/unlock() to protect asd_sas_port->phy_list - scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() - scsi: Revert "scsi: hisi_sas: Filter out new PHY up events during suspend" - scsi: libsas: Don't always drain event workqueue for HA resume - scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy() - scsi: hisi_sas: Initialise devices in .slave_alloc callback - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() - hamradio: remove needs_free_netdev to avoid UAF - hamradio: defer 6pack kfree after unregister_netdev - mm: page_counter: mitigate consequences of a page_counter underflow - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() - io_uring: don't keep looping for more events if we can't flush overflow - hugetlbfs: fix a truncation issue in hugepages parameter - spi: hisi-kunpeng: Fix the debugfs directory name incorrect - spi: hisi-kunpeng: Add debugfs support - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() - xen/gnttab: fix gnttab_end_foreign_access() without page specified - xen/pvcalls: use alloc/free_pages_exact() - xen/9p: use alloc/free_pages_exact() - xen: remove gnttab_query_foreign_access() - xen/gntalloc: don't use gnttab_query_foreign_access() - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status - xen/netfront: don't use gnttab_query_foreign_access() for mapped status - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status - xen/grant-table: add gnttab_try_end_foreign_access() - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case - net: sched: fix use-after-free in tc_new_tfilter() - mtd: fixup CFI on ixp4xx - powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS - ALSA: hda/realtek: Re-order quirk entries for Lenovo - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all - firmware: qemu_fw_cfg: fix kobject leak in probe error path - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries - firmware: qemu_fw_cfg: fix sysfs information leak - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled - media: uvcvideo: fix division by zero at stream start - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards - 9p: only copy valid iattrs in 9P2000.L setattr implementation - KVM: s390: Clarify SIGP orders versus STOP/RESTART - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest - perf: Protect perf_guest_cbs with RCU - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() - devtmpfs regression fix: reconfigure on each mount - kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test - staging: greybus: fix stack size warning with UBSAN - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() - media: Revert "media: uvcvideo: Set unique vdev name based in type" - random: fix crash on multiple early calls to add_bootloader_randomness() - random: fix data race on crng init time - random: fix data race on crng_node_pool - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} - can: isotp: convert struct tpcon::{idx,len} to unsigned int - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() - veth: Do not record rx queue hint in veth_xmit - mmc: sdhci-pci: Add PCI ID for Intel ADL - ath11k: Fix buffer overflow when scanning with extraie - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status - USB: core: Fix bug in resuming hub's handling of wakeup requests - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100 - Bluetooth: bfusb: fix division by zero in send path - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 - Bluetooth: btusb: Add support for Foxconn MT7922A - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() - workqueue: Fix unbind_workers() VS wq_worker_running() race- Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec - Compress modules to xz format in kernel.spec, which reduces disk consumption - kabichk: do kabi check only for 4K page_size- USB: gadget: validate endpoint index for xilinx udc - sr9700: sanity check for packet length - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" - swiotlb: fix info leak with DMA_FROM_DEVICE- sched/fair: Add qos_throttle_list node in struct cfs_rq - ARM: 9142/1: kasan: work around LPAE build warning - mm: kfence: fix missing objcg housekeeping for SLAB - cgroup: Export cgroup.kill from cgroupv2 to cgroupv1 - cgroup: introduce cgroup.kill - memcg: Fix inconsistent oom event behavior for OOM_MEMCG_KILL - memcg: Export memory.events and memory.events.local from cgroupv2 to cgroupv1 - net: hns3: fix phy can not link up when autoneg off and reset - net: hns3: add NULL pointer check for hns3_set/get_ringparam() - net: hns3: add netdev reset check for hns3_set_tunable() - net: hns3: clean residual vf config after disable sriov - net: hns3: add max order judgement for tx spare buffer - net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue - net: hns3: refine the process when PF set VF VLAN - net: hns3: add vlan list lock to protect vlan list - net: hns3: fix port base vlan add fail when concurrent with reset - net: hns3: fix bug when PF set the duplicate MAC address for VFs - net: hns3: handle empty unknown interrupt for VF - net: hns3: fix race condition in debugfs - arm64: cpu_park: Move into stand-alone file - arm64: quick_kexec: Move to stand-alone file - jffs2: fix NULL pointer dereference in jffs2_scan_medium - rseq, ptrace: Add PTRACE_GET_RSEQ_CONFIGURATION request - config: enable CONFIG_MEMCG_MEMFS_INFO by default - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup - share_pool: don't trace the invalid spa address - mm: share_pool: adjust sp_alloc behavior when coredump - mm: share_pool: adjust sp_make_share_k2u behavior when coredumpobs-worker-backend-test-0001 1711929600 5.10.0-60.132.0.159.oe22035.10.0-60.132.0.159.oe2203bpftool0-metadata_list-compact_tlv-bpftool-5.10.0-60.132.0.159.oe2203.x86_640-metadata_list-compact-bpftool-5.10.0-60.132.0.159.oe2203.x86_64bpftoolbpftoolCOPYINGbpf-helpers.7.gzbpftool-btf.8.gzbpftool-cgroup.8.gzbpftool-feature.8.gzbpftool-gen.8.gzbpftool-iter.8.gzbpftool-link.8.gzbpftool-map.8.gzbpftool-net.8.gzbpftool-perf.8.gzbpftool-prog.8.gzbpftool-struct_ops.8.gzbpftool.8.gz/etc/bash_completion.d//etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/sbin//usr/share/licenses//usr/share/licenses/bpftool//usr/share/man/man7//usr/share/man/man8/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection obs://private/openEuler:22.03:LTS/standard_x86_64/9fd6ed560d1bdba3cdbd3b5d19bca316-kernelcpioxz2x86_64-openEuler-linux-gnuASCII textELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ea8526cc79159218d6f0746a84062242762dc4d9, for GNU/Linux 3.2.0, strippeddirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)C source, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRR RR RRRRRR R RR RRRRRR)}.T&xN rutf-89cace053d6748a2e0e391839e01a540c3ac261b0afe60d4f7eb3889a7588d4809c276052717b35c0ef69e790072bcb896fd4f68d678a997e5c4708487d62393a?7zXZ !#,Z] b2u Q{LY)Ѷ6@8sˆKTRw.s>*g@|讔 Ü"gZGlUsEdŤJNxFYIEvRK;K,m"r6C?3ꌶTKtFł[+yNfMߚ6ǪњM[1L~46ޞ6{f%ܕJcl@9[iVQj4: uI8ilH__уI5FZ?PmX@ᨒ5 M#-"6dDoG-cZ;#Hw k&L~^<`D39pI4zV4ӱS5,۶lvCj7`X+˨Y#֒ሺ4mqxɶ (Si\pzbŏP"r&'c}*NшVo^)e62r20| m[:|o /)k|f2 HO<ˋ&y׌R).6kya͚aϋ2KO+Ȑo7C YG c 0iARӰlb2~qvYMQa"_Y kΟ]]D82W:V⃬.N0ER]UO0 ZL|6]),%6xlvY4aen$F|6qo:XohqĦ<}>\ͥMY볋HSRLHfLU]'$n0jD(J/w~ZDž"3bőo) *Φ.JìPv rvꩣ u>+vML%KmX]?rIrۢ)۞2Q+F}>]хsYsf :aǹ!|#Vz3">P$gIK~LUj.|-7tL#[M"D|1|:qIsJּKZw+yh&™-?CfSsB TlfMFWI`+Ŗ>lOic!xZyA׎!΂H* ^t,^+ƟuDŗ%r@ ڦe0'8W'h6x,c\ :ʘM<s_4KOXLlWql<繓2yK@ft| G,>JEE,&Y|uZ\+E0wn`h;!Kuɸ Vem#pM5Iz5l-$iJ,$RvBJkf fUj շXSٔ4<a6Κ jzRCF _Y\hntGPKA0Sv0 6gd6 d&a'Ό2Bs7aJ؃0\.I !'t0ѝ`wSq!abBIrDz u C<V\V?rfm s@O2-U~f5jH^tG3kgx4_vfq[J '?CYDoљ<: F^9F9>X؍ĵ1ֳd['Ä Yak:C8.ކům1|0 RaK;A8ZsΡ=L?,ױ4`K* Ŧ*Wil#:,J>Je }m4+XII"0~e[6ˋ? cg4pZ^$hH+RY9dR8ɏ)oި> m&k*9$GE s5xWخhN:G<WZ1kX[^y0"K!0&o%#=TͤX>FU7mʽkALD@ T]; ,D؂inF^uH|G Ztڦ8H'ҙ)$xBxHwjT2$a9IGFdaER>5l7 PkI?*:ɕ?JnonrtwXVסc[U1VXuEmݙ ;,;Z+0k7lV>D3sяvEp*rD- IJ| t۰GhJy|/GOb㱷 eUo`dƓ;@U>5UczE7%{|[%/keUDAgˠ+}A]hLZ\Oý2\5G@.U]짔+wxdm9)'Y-t`Ʊ\uϖwHQSzfߴ%<od_|N5z[T0D7 h=-<%jkc혇pF):Dt8 :60r3z5rf%rʔq5 CLQE dy bNKO=ju&92lQ& øE^3nըdyN5+-NMU4jZK 5PNȓ]ݍS@ Lܟf/JI]Ő:>~鏠/d3:\O.ON@ǔCS7pˣZbQ<>g%EA{:U2㽩}E~_6"s[igW4[ -òzrdAGc/ ǬufQQi0ۗv`?vN{ŋy.+ ?t Ah@x.缰:ih-A}߯GyFWԛ騬:Nb6cY7o`*/-~gx9V% AMk>Spqtwq cM(uo«9Kzk03>hA#e'awy p c111 pZBoV"D@{snW@J[A&Z^tiC2q'0v)>镸\C1M%|`ߝ1 fnb~m:]4q'.Jǐk=ɢ)*f),gGn|wXgc!Y?lE*SK_R?JwA΀_,KEq0?[-\K o>hXbTxJQe GS!!{F@G3PA?l3.\wSf3Nt;צּ>|yjfM .g37ѿ!z0N ַTsέG1b3^a&pIuLw6̤aʐ,bJw:z7¨h_ VQ:G)'d՗,$q ]&0#1Xӓ^ZyqOgӒ:8,RDSHV)$FW\2 UZ$S c=/O& I>qk:%laoV[(up& 6%EorːC]"/de8ٛNgX5boRs~|Aa1q~#¢}"Ûǖ^U,$.͆CɚE]Js~1^@o!w;` }pS렑*'pd D01yN>֧9}ɘMGU U-יfx{J/֥)e_J؃?P`Uo\Jsw;%QsZ`^[F:7xt!1NM8]<ů9L< A$89h쭺0Vku x5RfX%S`cVMIל 2랂 4S&NȐgKC-pO!`7Takc:mΰ|MM{?WG#Gp%賶0nDi e݅s+I@ŒolOԅkԫ͝[!&0et c|; ʭ(j֎}vᄹ D[c{k{'l.J?GYUlg_6WxیXYwӂqxr_6T%0W<|EE0lUQ]vO^݉ 9"9lt#^!?Jl2<ޯ_"K9xf kZA}# :6`` ;¯w9Yz;~.MgbO$- wZ9^@ Q0x#sU;Ik3;ےc>Z[)px-z-0%3<3KŶzb@s)6J E}ɯ@lXH;XZ/ٛRQ4w:ԇX[1/q(ޢ _6A KrwE'h'շ4{h5d+ y~V/H@P RMpZK:&~ڱ)nwi*҇Z4Ӌ䔺P5<ćMvF=<+If/[25;lK}F\܇ӳ3 5y,P p1JuW<}@"z|ip)kG~xop:1 KRfH=J8RĈn˨3L1,P>`qUQ\wTU݆ 4A qX[ AxgNͮ{ ÊC+$:)qQ5٦5:b6(B+4H;i~,􊑄YJ =y؀#+XXEۧX*Y?aXcE8Tt wnL;-|>YYy$&Bgi|&/lըXұ^Ű,$ʞx]IKf j6 !"ːϲ&f LS? V`Ɍؗ.3>.J\AN\V@Spd ˣg$O Ï: ݨƏt&&WOUZZ ]Y'# :M!4X9׎:-f)xrh#۶RdBGpLIePd5$EE$vJd0&:F)^|yE^+Orn6TGm#|)Cj:#q81D>E%t*.Kd./r{6 N2'C͹3L8L~j| W+XZ{3_*)9ؽ)v3nxO;ٔ[L+(렓3z.h4Lʺb`m DtxO*>`:,*t[;@"Ft1'Ji$D/]/D݇ ̱h =џQ+"*c> uf)( @39|#V%}bTxZ.3O$.] $E\d޳Jܡ(,C9eF0L_/ӭ v ̽٧GD{ktJ͜o2(W dAى'a[Xh`&*cG3ϐbｾ/aX0ASmRYIWeǵ^e6_DmVqFgw5TؔtHB^VtK84+Hؽt ٥!!GHv$ѳpHs׎m.Q72@w4 ,] @f}cǰ}ρl;vݞxX,DUtYgji0ih ^6@9HT%.,5nv g:@Q׸Cd5e Ox 'ee-$Ia,VԺPhޑ^ZFz6U*M5m{w,50ysQKB#AKҊ}=&\0+Ǯ_1Fjf;{*JI &Fh̎_mj3${VǓb?AgQs!@li,E E P9̉`EM\ `ZfOE70P!0R5c6--!NdHTW,>N)٬^Rj޿nTaAPnȘ pPvד$ IiY=&v# pwC\su 9 6 !9dg!RI]/iNZ<'4$P!躪z|\ZZHI[1cp >%muyA&P=uŨhgwB`"VS͵{aM >Thp3rUv00\;(Y{CR!&,}]!7GҰYd(&eV Z{DH4}O$e5^>5xW-^o|m:&޻W IԎmotaqĒBQ4Vy4 ݘ$#k: h̪[&, T;i%kqBZƹ`R<0,uuਢÃxGW1'4@eS&yQάFz V% .UD yv*1̰{ʠy?҄BTW![E~9? :SIpM,(_xww3o vQGt.>h;f;lX2r3" ϓi [VG!ob84Mش.4`~#ԶO7͈Ͻcn-Fuzp>88 p6v @r^I_i446F\D-Lކ#=)qo$YZ϶YEz1)jo&]ZŨL Ik/{҃D&σ‡6D JnY^!y%'u㉂?y&+MgDt +؜}‰xi6JhfNd 9%kflk?:Figy5LrDT3_M[ωFyz9!T緈 mGW(Hw%{$6!HHmywE W҅pt2Z"{2jUO%,#Gl2iXJ`È dRըO&3,R9P (#dlICc>/O n"HViګ2# }'!gۀkT}*|?^pU1ޤmVMi'24ZdĒ"EDa}hvt }\7p\UԖl ,S߁wKuge1'a:D%Ù+;k/*g5^ :sZ^;"^"cDZE=8o s^BD)LC;n>ψF\n b8Ki#P8oeH:,P$wL薐x6EPk< I]=+ JFU]MFd{; G^Cn gF, o2ma|;aŏSϙ# Р~M~ެoSe߭O_6B6}J? ,'@ҺF,5µ+}%cL?ŵEljguÒ Vw"ɖ?BZ}TV|mh1 q5>BT~E$P^z2Ln)X8W/,B/aԕ$one9PhJ8-Ќ Ekd3[I=tw3ZzذX ֐?;*ׇr.oں d,Ek:r2dJpDKMZ )'3}gل6lD`1^QG+hPJ$u զ}SaB,8{]u,u&u3ڈz_&x2eXn{2Ů[ѳ7 ZWRe~ _E}09gƼ R'ˎw7NTV9.P6ch+4:6܀2Pl'_v kg9 @لh Sni.͕K pgoV)M?;S #!#sFH8w4gvcvlAMVg6xMn/=%3/`W[#o`7ub $pG^ nPI70;'wLI.q&qr]W'>߉j-,,l/R,`X̱oQ^>!*kأdHD"@c>w ҽ0- LS\|` cz aiŹ:*+\%!k-m + hiu[U8%6@Wp)0:.eDpa8@HBOBvͅuצxgTar-TRf#W^oalaCjBwF  P).C}2]uww,nN+mߧA`lׯl9A;| 8]324-!?FUp;!?{FRպl7jK h#TGg7&|&&=傡7~nR팪(($p#$P=r'xk3^030][Tói{HǧSiKMyڐG731?oFKzRtWʲoSԭa4_Lo Lmk/m)!x)qp;k8Nm0U|B\rAb,Q G?S܂Y'yXP1 cqv4EJfs#ڔj8چAdmg 0BC;%ZLN .uq|JsgU pF&y_jXn A!B=8 kW?[c"<\#`J%뭟 "ˇdy_E/t Ix*Avjm_L^K;-}tu'j#D%Fo`^Vc%*JXMlH5n=aUVPWU^ A)6sH.]h <׸˛bV876GQi5eTMS*Ѩ =?)O|3+DKyT^_snȓ+H 6z&M92C|( s#xo'9Zf zQ_:5LURnu+sQ-IoeB[cuFe3Y?gCMͰÃb\{8EʨP0zBɳYICVH .Pfj% bE\D/җv0ϖԞ|JHQpsnw=!ɄVx?;#;Q˰xAxvԂr;ʝM~-m !vxؔAط[wIsM7XHq'!'CC6V)3ok&)dlf8AZ/޽-w1]Y%$zoNnqCC> Ne 9r=v,HF^zϜɰwso0$|E)螘ľ&J@Q"ʦo |}=(rb5m}uzlӜ" ] g+PN:S*V!aLjøOLaĠn ud=:cB=>kI\2mvem~mD"J?7Skڻ)(4>wXPIH ~4# (ɑ;?;?o'Vɨ6BFxJt ܨWAs2VFM@C]~W0ÝM Sj{զZ9VU[qO61Qt.e~"hpIV(1!_,DKMWrj w~J98YVGJ ,*eU' Wd5aq/;ަ2)3bQd\;tp;euehp쀕x=nh$5lM'߯߸&Rhb(T8: g16Uw8"g& ^?0X]"ULg$\ [X]m]/!z)븊 1k ̯UQ1,4Np\q1ijl !",~{(!;oعu U+MJ +Jj t[2Zab85s>r.j L,ߌ]˂-mfd?j>70s‰FvKm 7i[fHa%Sվ .Pj +esHV}s6s^{Dkҁ07Izj4%i46a =ēwף!}bny,洓K.V]s͖;H!QzxNJtɈ*A;Uգru( 8d>־׼{6;cOElIo"uf(yq"5|]^|{u\\5eƖhɧa\Jn*V*#GcqSH'AN/WTZwPM4"8ЂͶHE!&6ٗC9q"Dj Aa$hz+9;kwV?v"(*(GĜr^QI`Zù\%bL}pa,ʨa}hiɛKCAqe줯(e Y9? jE]dX2WBZ.4|G`eXDwzDy\#R̎ *s+il't!hMS ?FC}G$H p?B[͈T-j/657t6ʈajJ `twbE:uI9vI.D D"aw{& /?<Gӈ D@E!fT.<-)xuk%O|d8Ǎd6=Ln@jfֱOE4&˧#'َ[2ܭ.%M//~S>]B|t7x㔵[-9s&:ԢNcLbG܂ #߫H(0\@Se_T]}'݄B@d"j˖@cFƈ/mĎWL+ MjUWdb?~EȨk%EQhͭ!&/|;h1z#e&/Y?1ZD PTVkrU CQ*@Qffu!0h˒z"/2%@:9f-r?Zkҭ<:-[a9Xn~{CjʧN2O ˇ#q,{6& Kh(zPLz\ziޥ0vk(+DicQO@UξZ}zH"|j.\z!b~'NGWkT/>fՐja+W7!C .B-kYx̧zK -qWE$8ŠcW S%Hv;AE@uLbX 1VI dR@HfN )9Y(smYb |KߢGOK@,r(p*&nhoH/1aӠEF29 S]h؁gTT:/\Qt^2uNS+]EF;1"fE~{#)/OJމ,-hռO s OiTpɷs9քpzBo}MkEUjYF,5;&ֲMD7/:Pږ`CP&.Iwa(I7\kPwOQUmZhބ2j?&12J9$*oeew=< b~Lc&}oOq*婻UwH0IJ?,np𨆈$=y1/7GULRDuZP/r 7fIWThզ]U9F4 ?P h8%E\<__Ɯy=7Q[bQ]BwBf03XP@ga9 &G4W*!nKқ,5TC>w[鳹b {:|#c{v2LEBӸL|<5uw9P}.mNE ߆^,;??k bH&#)\{ĀI :$8~! G! WyKK _dJ>탳1ud?!1FG~'wj 'ii:mn ?HΏ)jjY8#%{l`.j9 _ XLI n4y%CR}kHG5f.'HNACX(bh|Kr;ZD3/84n-Gñ 44R(ă-f QXI+cƖ􋒌[p&U*, <չez#!ro1'>Rv"zTTrf|5Ƕl-(Ǡ'77|r )ȃ^g}k˄{98.XBx;_WȮ۷"'j1Quvi،Og +3=Ǘ-:UX0lw =aղm3{{yb ȞMuj.X 0d"ۉ?b(ru?tetAդ_Ӝ/X6rKݽ&%'q'.U&i,E@z3t9 JlۖWB"ɸh>!~M9v)$餰8,m4;C [ #J;Z|  tQJkNj{fƆUհRa%Zh{`:҄ZV6ASe V{ {$CI1s!aGU8lYf3sAظJe 24ua6lm᷁4>`S7:XBe* htnJijR|笺G>ӹ)[*AcUi׽rsD6A@!0 [ 6Xſ[\oYdVq0a 5F7.<E{?~RӺbDO=:|5U@Y}7HQ6Tѥ ΅c^uYRC] kK=ڼ:HajFLJ^eͫe?b Iʹ]9Oqr󕿤B GfEBP^TQ‍kcIjGP;$;TvqZNjڏz鰒O""fMߡWfaeȶd3Fc1< mBUo$vsA%e<\d<\y ׳ZkX>3gf6Œ n#iMfʙ37tSj˴'SzptG\HFNycD? O&=bEl3D& hK)CL݃oEd6\e&|{ 봈Oubp(Rב?qR7숈C!mHj'TY-ƫƨS }r9C3 (hl`c!I03VRQC3|n}0TƔj?,OJvWOyӑNX?h=\ڙz_3h };Ho[S&7knP ηiV!mxqtbSaGs{qDT^#+CL!_Q[,TP"A(G7Rj. /=C ~O)u}>$w5V],z7pIش99b )-C1.q#<.01ch>w|KG~~mW4YoF{c8fH<@5m{ƚeG@\gRABmip[C1QFd[{s%al#Kk!X^A' k؀25^X);֫*xg&R4V6 o6+\5_.zdVR-fb4Avy|1Bt.|ᰎBqqKie߄xk5[: Cv:ޮɵekH:egtU*9yo=1U2+ٖ{HfCjSITd`ʫ;uʿ+jTE@>2߃THlj=7|s/| ͐=Mvn@zO1mAVީ̸q-垇9qO cp,lfA u 7{LD V\Ҵc'^$!Gr:Q̟X_;`e^VB]JYu{ն@"ż-8n]=4LoRް 8;L0L9$kQj]ג,z$"_rYB~i04iLCesǖ{[Mא&BkdO%c*r9bh̄_Q 4GY$?|όR c򸊜QƳ,I#Ѣ ;M_ O!@[oNYs fz;LJ30{%A{} [,/܉=!{H`+ EU6V[ C/cʖҭD 8ǥuxʘnk]WT/8 KL e`~/UHH~KS*b:DvlUݣ=AGkF*i"®/̋ X uŚ3Zx&f 5K~c( @V#ӁC$l՚7@8<ĝ1S\?[0q ϝbT58(n4 ?8S@{ze&}5SE? jdZɡpؼ\XBd[&k%$D(7$UjԸ|Sq%Fs:Z'G#+֪/`mWtbΈ]shy]T"@PLN cHy FޓV2=Årwu{,1Kc=pvgЁ oD,x'L- ni B~q8wRWwe8Oq \&?8VxPܯ bI Qg7Y֛v9˥y=g%2|'T],v#_fݥn .p'c윔D}Od+ TS.ϱvZñ~T.O % &TI旽;_h>_Bo ̔M4̢Oai{YQJUiuY+fEmgﳲ0Sy ~FW9ҽʔ~" g۳7?r.+t+Z]mK[V#8HGlq!Uj&Іf #x7 /KhGi &El7m~+|\BAՄ3U.%\kwGd\L ޘoWl7E-e? }/N{'h,a}"p_ /Q^>/ LѸF>ί!o&(D 'z @i:?i.v-h ~L~( 9 y8H@޾Zdd]ƍBoYnL )->? &EƷTWNgsF!O h w˾L&aQ]a1}"J/+1nFKZS1[DYS4ZXH6x<[w95qBh2r[TxRfM. ђ:CEگr`"XV`+BcLvF)*& YsFFs* 3|Zij`e2^7DPҚB3ּ|(R$D5N;[?U0W&yBL!.w* OHvY M00sZGV@cr?eX\nP@_wYYIM~<֦~d2tgk6ȐA1_5A8~*J($Mw#}Od3"UEr{Gr2̝l{vA'v/߮v_G܌b( |Y_sY#W>dgޙeeI]6;P«b;z%ϊӼc;?wh9:kpj(1.~H7$M'Iz9iA3_zmaio̫fVqM#鬜XQʔ9tcKw:-L8\JKLJt6n"wD&_^fiQ;-2}{L1mx4\-mB*Gd lQX?^|N@LۥEn6&=NkKkzeRBq}’cSf;H7l!uTCr@qe *=SΤG[]-C_n{զ _fuaW1G ދ]NQasfUsO^E#v'W (7-Ju]L[e{i*Sl%ˇ4Dh8֔fgF&klmbW@t`[{1./=XW/MQ?o 1qHDH#ع#OzR=h;d. 45UBGsoo*x/M~!mىՕ)qׁkKFϻJp=xaryN:/qY*=Ӳr5 0f%$iń<00)0ȍlHX]Eo͏#hɔdࡌ\L8SKh5 B4 Bή &}_ ֛<Ꞧz㐗؏w6}=D5n(&+/ vb)SE wePL޺|݅Dcydm"۳w{8&G+e|tꨳzGABO9sȐ;3M|9?5ۻmOzԸ:$"oHBXPW5sW,G4j[öFfv͠$p.3I>Yc:;zz%hY5!q+kZ\؏ΏՆlLp;7;( 1_:Y#zi*oLիi+m"VRm;\P"Lnd1#htT;->mH =(mXeMڥE3G-}M&gP&%M!b9]B ZNBDoEĤaIϓF{{%f:o]y}8_,q;8moQ rcng"6}Elm`0='Qf8C83>?ӂ\YS nx%Wes9x\Smyi?(N~J礒ߢ0ݻFU&1֛=R bABQd2JB N۹XN " @S~%r-&E[>7Lr +|;B 'mLtb{vty<̙ir ;ici|J:Q$ hC5R$B4#BʦQx;WCtH>iX&v8͕7E_@ P e Y=Bs}VUi Nni*d>>*Aeܣ/< ́0ɺ%td"a'gf6hHmWR42E'o(ICi2LN$Oqշ|={G_Q,I#SUAkhH>EPg.\LÑlW5a%hx)6{?9ʹ޵ xnU9LH2/߅x3s0d 0#1L裎n7)ˆ.Df( +I9@fԍ!bMvG^枤itF*3%΃ x 'fh?`,jCf(ouHiLieƒd1`ь4++ڤjdapvQІ2fm{ k/gAjy*EGuMCN3fH`Nέ7A9wRki>t1Nus(>'G]K3+/ҞNfo8 ЁJ\sG tKy*k8pH[c. _8S9Z ۶ZHmsZQLIi*p둍9m ̃e)u&`y-z-C ,#GCKvJ,ߒ({߱ߖ,QT˪oN™[0T Xu{W0"}Nq2.?H mw?U^#l-xt( j k5[/bZvS6K7|Pz KPdzY0I |` D@FCM$nC>U[ʦuw/x"PJ誝.nq$ڛɎF',adfl۸ V@I+ӓ5)zkrmGU pxLߖ9K^I}Yȕ~B|? !|]y*lHZQ-anNKf5gGРڥZ᰸Ó#% Q*:@=xdaj$u@o?fl5;ֹ.v L)TxyERFTb%ƛMKOeCs*KXl*h.SP 3; שPZ O̜ ?Gu'Dқ[}v[QuT`<8V,۶>~0긍Gx)rՇ0>xt7J4;(2!B;#$u..&N: " O3p)[y{mrMdRZaqyiI7PĞ,HPUR+u j ?@SeOI\*9>ʶs)98sG~qga4ګ7Et.S& >`_W>nKYPyRΔ7κR9R{~Z9wĶ9lcM>'H3ǪBȘܔ)#1Ȟ#zQZbD;8XSo[VTm kc!l B>V[&H۞M!!&t{OB֊á +@J?u+Msh'D?&sg\O}]$޶ABnYH.}'FdTJ~oP(v?ei2%]L)mh E\5`O>L;VўVP:?زr'6[5 0`eCLIQ|֕vO1?LzrDh -$#~1wEN[IK0h|@y^ ]{W QL/֒_xZ?˄+ af:-&K(>.˳S[Nw"itv듆˞w𻰳%E R`P@dcK,2H.d +˸(Ƥǫ@d֟zyiQ|qŐCɦ:A*I穀DeۆH\ikq&Ⱔ|tj0sСף|S@f _Dh sYa[̷׫/RYӟ1<H2. f {4N$DD`{z:8VrM7[OJ=Y?Kآc– Z#q&lX1mg .(dP,z![%D;Dx\ć rkauUŋ!wN\ ma7҉(77׳f. 9WT<H\ ɬS#UÊ iյ{0Rf.DYHӠXo{!}{71LVTp$ƽ;QLBc92&em) $- Ȩ)Hecɛ~ai@9P>,e@l c?'"9![S:߮gR~dW,<ղD 6a'Qs}u/eM; xZpcVLL6ţgѦu`YuaP s(^}pg;ӣs<=k.FNB=j?' TƸI ^zEQ#ֱ8+c@ Sbzć9)r+hϏ<5H.#@g pd!` *Bqy!<, +4c6evu隅Ҟs%"cq܃%k/[q 嬧A%Sh>E~.1{$v[  2V GQX/׷Ո>"4[,U'4Lq ! <)6x`:0xjlG7ODYp}='d ƒW굚p{om\B`Z_o3U=op 8"6>~L( ܢ-R,r ;]3TGin+^50q|u`ӑ}% jb'Qўm{yV _1\[QV,c\o+tp2[$C&hGĢK-.}Xc1.Dk'reV~n{m* k&͟wгJϲY7^۔.78"g| 3Z'JˬtwSuƥ zP?:ask혨-+큕NML";F bk!((O:';Wu yn+j+3vݝF)#vʤľ}[RӊBY.49thǀA{1* ;1=HA )n"b.G~!8L!T( =Ggu\LgItH{CZ~, rcb]%}h'W_SRȡ3dϥ^D6n0'鉞VΗ'=D[ެ7jt)QC(z|CbU ޮR![ѺcC"r8x?퓚 2=[rdN-}-}|Eh]A *\AcO*pEjVV ΀󚹼R mtMi$mm\jBP4 9ewYbY~gQU <*s*ɢB ¨ ?qL&YAnEEˎGP6<_|IW ͓~b0l{G~TǯC8NJ5`> :l6:cEMæ/Ș#Tb}'=KzߜXZ:'O٧f|skd! 5d--;z&\:=&]3l湭eZk\2n40 07vn*2b\IUB1cSU*h伶b_Xf 6vU`Ռ`*/[ȅ0X%Z"ZP7몽&LN|oke$j֗kOJ6D5l̤ %. U- p$Hʳ ^[+̕M@A߫XVވ$:jA)O° (j*N C#Ս3d˗+IF R" LoAs\1n,&=Rb/8(ju&IFFoU?W7f]_Sܸĕ*c9<sŀEJwE&S 1 } bwǚ#"LfҁG[q|=\';GZ@|їgEvnЏq7B8 ./qkתC^F<|pzgx*]Bb?j,'J<Zz0_,q`IJ)BF\ N=L"bf_kGׇO=3sP.9:JkjhwmDEs3)둉 ~Lz4S4Ba+7RzND3θr@<[M2ҥ<1fWF} h7)>{Ұ@NYq6RlSV$u L-S>TnBэ}]LgzG5?b+C0tJ}̖f^?C/(fb3MS2m(mkpa+IT0ܬ/1[NlJ<,Wg]L"-wMdHkqowH(%R%H+tuT>Re 0n,cFuШ&@I# ?=h3"qOe2n'ulA3fq} PjSF-OZ -&n&vP:[x>ԓb=-`D1Ne0dʀuǼR7׉ѭC[L/eQEqqdyJYl^nz#*qz+(`!1*,Sat0eΆSjJo]ByE0x8GW}heS9;ntŏ:yMYRpDx)!}G/UkGY9/[FX.p@mirqBY0Y 9핵p]S{gFՂ.\F^rĶ?Օ#,@E NJgH75hr숰$%I-F2Ǿ=u%]X`6+~ ==P/GnHp3@[&~ULKû܈4ēB kjQ˩K9|>: d%Ӆ9 QV^Q8 ÖxGӥX\s [ŵj>~L}OIw]n Op+>i1-̅Y3vG&n 뎹̨O/VŪR>Hڀ|RCxAz/nGr C#>u#go-f\*2|F]3^OnȡHp]GյJ |"h-]=ԥBpT5.%"A GQ61+wf`&9N%jNMSʘ. yԈJb1 vAȫ$Ŝںv%qX`%iJg>8)xdW mcB֟w Eks1T]*GOqסmj)#*͞rɢ~U={0oSPh&%ʪ1x4ffCY.7j#jeN0m&z.lT៟wukA)\;XȦkG'&}ODy.T_~3[4D3 ,L %-w`ӑM*~E.}cnڝŌ [[}+zX.H]}E@KXıDʟˆP+f<0JEt?]x9+'(0m ta|=X?L[sܸ1E(a;:;8p% #jh#Aڨ})J1QtfpA bjJ;M^XM7\rzyI*!%Dqf qS#BSn'0ɕf+f//9ֈ=c/iqDxniB^_[*uH71] X/xjj+TT ~Ijm]q(#.#J0-3:O^^E݌!5f/,ъG Jur:z-uҡt|EqTj S/zEB3c4iW+V\%s=|W4U^ՙRIzhʯJ +_֠'ts,) I~ S9ݒyNfk>2A$nZ>A[-`O=>Q)i \:FZqKƼ#?')B) X3t6SړMJr }"R>Y7@vAgv[ fsŠ,R2ǜd߈PK^>"%KLq֮""tKJTn Bb={9yViAsv&\UNsÚiy=B4r&B9.oC'* Iֿ$j{9%VSM;WK~wB_44T,Dک/N~ޫN7`,PSN@y{)"P_E4Ѯm' & At-_r?%oذA9A<0dGQЌ&Ykccc#v^*Fa]= X & N0aҳ AS kigHG24 kG[w9j:I;&&AyYZ=] ߅崡R4(A z,K!wdnh8Z"bΨf)K|y(La>nl ps?ѱbXCkVZIRR'*5:QFUآ>Y7ð98:%ơ[;hBKCشk=cL>s6oynXO5x(eK%ܱxr3*7߉j'MkNg_ol8B v5CK:lWXr׶I0W+˒:|g8K"zoƽ@!ߍMm$S} [ReY0Ǯp:{$UH8~Q`ČomeyzM4X`PLq+QD:#3$pWx'1d6sȌ8XAoElG Дٖd5'Gp^ -gxߗt``;M:AH`~q I1HI;8vN LYX?eօp=Ӝ c‹nyL#$ոhd)]]&2X ާ@>4bS}zN.&w(\2T lWD2>1͉vczIya)BՕnpM?8ms[lv-o!q8u=8̴f[hhg,߃aP_ܥ7E@1ϣ/jB4o[F G6 @(LuCbO 8t v'ߖw@pG"vWm2  Sݰ[RCKAÆg5Sf㍵iBӾ/nlWp&P!\AU+rax`BY;E D([X !o'R*YmHZ]ﲝU? #A'A@$`\ *u˲>YnY Xb4٪Hr 4 E8= 64,wp+oj<.AӱS[1Ue;b14Gij NB 캔džILo2lIuw=sLB6 @೚asv^ 6ƭG(Pd⦣YsM$nxKb~2^Q뿒 pԤ3tt F|jCg/pSxK_M?uu cTn9 ; C =` YY!IÑ0c4H(HX~ kFrb -&󉫮XB%]6t[1Y Qk&ƍ~L_gRI )W]wM97Kۑ*.יW倔vxźx9A?]/e*+Ŋmt/0lM2<+ ț:0=A'vSn?g\WeZ` ӎb9~qXqL?g`U耞4?,jv,>xIw"maJ׾yY|=j85F uP`?GEݿV@-+2$>AŶ_1L㜝M8މ '<e"V՗%̩K wwd#{XI7 zJZLWR|޴f :6U5ވFDg.`.d "i"!Z-A@sƔX@ @ >g~wujFIYLX+;I1J 5`+r㺓3J쪉ŖW2~)f q?"jyz >0҇XJj Q4ܣG<`ʋPB.zD{ڹWHRIȨ>8 \Jg҂SΣ([C_upl %L. ~/̃i?i*bEFIۼ$A%L1PVr4Դ̂&8 xqqښB _(i(a>2לSVWE(Fmr,\tr*qx*M|mBƜ˯|P'Ȱ+䟇\GT)K^PL`GU/f xU#99ߚ{LqKN`x)%\/vLLqh v3NIk;Bs Z/%uPk ^Yab٫ʇ?TˆE/r㫥TYBRX2@VvIm/ (VW; 6[7paTC%_E^Lx&4rntn,#ge3*t I ::UVﱹ(fs\@APQ̧9kf5r.#Ud,$+-thklw q0\z欌VXX@"r50 m'l#YG40.Wj~]57'OZFOVx{=?os'jic\DdM2g6o!:t◷ӄ3wJQNU3^zi$K4+}>S86MM:==%HflH(rS/Bÿ3%͂ꍪ -S) 3烐MnZ i}}OnYs0&@uMI}DFC=m< KyX(8tslȠ9 } jh)xV\w5NL_yjUԡK OL~4$ Ѯ1 "*ԍ&T\rw}Q1w(S6wwXW\ ˮNt+80+ ؚOWdg W6dG2ej}jHAC[t#w,쪦%`,UOu?5x 2#ʾ^mU@kqbAEcHen5/j&XB$^6zx"yRD),^TS m-Ge/5Hd*; F3o*ڒz4ڀ$ڕ;4 5{\*|?k%ϛLS=U_Y?JõZ@`'(OgI-T(?Ҁ2WN%eb"4yn)@favpK-6)gmj#M|0Jk'b,mT]=5HzB6=sDOpt·{l 9E[c1y.aae$ɪ5D^%j!!"~9d^HPF2ݓ#RH|}=K[]\M²~0 nyWcTD#!RPKI}G{ 'MCGA#90ݨ [RubאQj6Ht([@+x48+Io<%%>%)p4~B)9iwpkqrBПF)͗*H Nݘ_u8h<Y 5P^FL;ҿoCIV!o9րc抡"KvH]=(_,9! ;,Ouۯpm OrXY+o-LLc`;O?[ {i3> ]!jj~0U=]5*lIRxLTC#z>Y pO 8-n9fnL/BP`/EYg)՜_9.%xLUr7VmͶ= ڳBT@.=\8y>ju3 ;Q4#o󛾵<5w떓VHu,{o! `MG'*'xwCLLC+4 Y cpzQ} >#P;"vQsh!,v v`AԵuH?~!X@Hz^k`0ZS1r+HwMJnx9/:_g@z8ee{͓t\}~8ie%2Ç]=Avql'2`tqNc q&%GPOci*+L\ "5aㆩь~{!XD3 l(A8w!e{`bSN{Ӷ7_fZ|![ 񄗵Ҹn""6m:qLMWqfY \%Vg{^@K}$ƀ+# O-,:,7'P^'N(ɌזUfgO z%xCI1uGʝ>Ͳi=G h5UJr@CgEv˃3«3pJ XFXjCr^#b (Y4xj/3x2xǎ/kH?G Su~^?Olwe!`k)ѺJnef\b|?V2 4`_ibU z}[=! KVL;8;ۖ♼Ec6%mQfsL7Oʆ8D0wԕ"SUE5.BrZKU򤫣`J)1 g/͂h'1)v)񋳬3D58Ov˅L6i\UeU;CೣFUVy3tHڡAdN Fqz0J5eO9d( ChAkgT5Ok6UmYXY2sf$*_K=DtFw?DȷP'6lsD!L"[YdRX揎7!T *# 8y@0iunu)Sn_fcʮ٨4> ]=lb墤B3\Yb]vG˻ ^daoFI3e3nK ta==d9jSqx&<_n1*+P}t . n;i!Ksp"&:W='hg@@HX'9I 眏Kc|B9T̰#7QD }!ӔW"K{mՐoL"ps)ue8O>H`@}yD#b)JH U\aƒ8w> ,nM$F^GM!FD{uң8û41;Yo]saS#Dy2SD$0^b;M4KV_r"b@**3VQE,r{&&7Axa{ !RlyT~gbBjl%yjJ#ofv,!ֲ#n5ea?YXL@lZ>TOTfa/IO&bR) w ˘wo^0HH /~? [1OkN\X9S+(YFB ;=L[HVbr6OVOzE%  s"S`+"S;jQ`7'5S_#Ѱ ȲL4 !ݐ|)&V+.ʢH8KTz *>KJxPG5O|n8NuB4V1ҙ %mew\*$}ֈ*qtHG!5-:wĸպ= $t~8"HåvK0!WKz`GN䑬؅T0p$N h &lB`KUk+i&smֺ@Dr!?^OP(xYWq{\ƴUXE~b 'mcU 5$+ 7XSLalF(_кfqVKuD#> k^N09klD,"W_:X C `{WEmvqt@jmw8qqIUB[VOhPB7uDHf wb<'V=(s9w$I[2:Ls]}nÏt~M M3*/7H-akNM5_GO Zv4RTw,xAsUo7M$}1B晭{*JnC.ƪXK2Q O`_ɻG?d &O6@󧕛IqR 1 }=a}t?(3~imd 6<wvsWbFg) (Dw= w̯LXdSiuU$yAe6׻֩ךwV\xۏ \a(1<~IvaE;@c7tąQ&:r^41d/ѝ2<p| E$^NMz_FDŽ'Sn6wcLj̳L?Ty'Nܯ xE3I'fԓ <]g~RzQp҃2]X§Z3}#0A)3vBepLyh)@r@wWu2D#Kk L9~Z<.󌔧#}0ٰIX6;ݴuwpG-VNԁM=ěT kQ8Ne q"4Ͳ̩;Rl&Qt_R ,ϲ>$J 1K/>{W`j[Q&k,LL-- 'iZbl=-1N@[OARA'&ٰjǒn ՙk;82XpGװ5WUFA a7ob{XXnE5!&3@պ`-]4,*}kXb:?O' x)?Bۖzr8Ӹ?=uowZN~P{ok]S,"ֆJD4.(&kmɟfT{[OޗP^pkwJG.In;JThMh<案G|4Q_qJ@R)^έϺ[~WpYmPdgŇWnop`7%flZs}聩5t%嗾* y;%^kEy> 3Bˍ0S^GX,"rV֩ݪG;Q[ 1w&5qf^h`'5XsZu#m%H%~r- ~$f)*AVeM6BSn o&]_~E6^86fDX3 ߓqQEeFUDί4dݴ}Vfhܝk YnU'qT"ENf|XX@ &0PQғl2P/MR˃4>0=q22CTwiCsҐ12Qt:Ko DɎ*sm ? #d3Ab32HhUPÌ[3R "2R\M!\ Gza#⃿^ٿAQalLW{hi(>|F{0F{urNp!X _0|9giRoXg^ b!T[5̞R_ 3k9J\\6 0a$Auӕ{@?SR_nE%@ēnal6\D5_5V?6I3DzwnxAm)蘽 }]I7⤬y>dQJ[0' F/NrY̔]|CWwvt""QG'c-AJ,jr,3g#ka2ס(+lW!nc)ol0m>gK@ce.zK5&[ RvT&jRvěr]|vjIR DPjQ2̇`f8U@dvAڱ1S@?C0[rr{{A dn'j9dE=|O wxv%o8,# jt86o`ƛw.!-pMHgȮ\TscG?4A|W 3ַR+r֍Le8S'%CtT_Xlwێ=,o.B47xEakH?جu  Ywt֖臢@{Kϩ&VZddm=s`RFm63Ip E|;N؈M OƕG 3B֡<L+xCv[K*֡XqLIvMیʟp3){O(@(΁`w)d OթyJ!.M0ѪkDJy8Vl+ӷVkkUfp$1 Q!6q wL G!KLIBt3Zx:9WQ>:nR 5׆c|JfDkU|Klk9z:ת?sMޠ,eYh" \9IgH<iPē9~` wOKb{R3Q.lu:&-Gٱ9W+d4|k- SMiTS3񅖘{um V ZWZTuSrO}Ҭ`)sY$msj Bqjd+j oѤ[sGn56 S,#X8$65, )D:=U-:G8e6Ih{@ݝV<\U>Mz3)Q̈́ښm (^G$+>mi#T`/A&}(P:_އ=DLjǙЅ^qGәڈ4yK(B + %?w؏su<~׽x7gľQ@=a|$ wdڇ,v`r~߆*qSDdi%=CؗfHLP `"uv:\#ag'"5WϑYf~"]kÎ]#iCZf BȢ͟q)$@u֛xU y4oCS@q\G[ !5ש>}ABZAsyXKè6U {8-HT`5 1D9/̴pUB8.GubY O5_]X נ~GvN+wk3|qom_4 _i}BD3fצM!/5.s`P/W¡ )Y :\ KT}qcW{kT:6?'}Lyݕ#0mT(}L*X9yЗP43De49 e`8<ͽX5B{id t}nCHwE*}( =Z9,Y;XnXRp~~{Z ݟyczH{)X;q!1[]Pq.ux!u7/ u~ i7mqZ⾵.d 5y`9W4;@ ÐP@gْvAFNa?l bk}X|N^aцG6wᄗF[7ȞL3pSbqF7ϭcnPMr7 tv&eYUIOY(5J 0Qq19`J/*4+΢r]Q bun\4ьhdUƠX=؍OFލ#C4IKbLΝhBI6O9sL-Dw,뿅D5,0(TGkȰtWKoa:.FEuƪBߴ} Nٱ\,}V14k,*I}χiM>^V\Mv`N0c)o~+pvhʊ~(枾,x5sgD/ =l ͗Qmuq i#6W  f4G:kygOͯO(sĀ3`k7p/FiY2l L@bU7 ϢEhM/M#u"׽d"VP^:6 ZEg]dmvɷ)fE;}b7HG]sj)R0 aln[~Yiv38%1{l8 CLdw =L95qw5BaS)[ .WxCheq?gg r2SmY`TbP~[;` YkZy ~[8D4ZۗAEZ7#5 H & n>K}1rS#BmW1Ƴ }GF|q #$1\*̷szv%'>f seMmΪܝ4?DFN E\M8 h+ 8RG.O32g8 $&1 p^|`.k2Cb 8Y Ъ`q aI>.hX;1nrJ.e&3IUy FYYЍnd3U&SL5D}=TJô%x^) v:~Fn0TLcO"d/qT;gG zr*Wd}6 /1sK}#hm`CO8w:?e Y$~ulu ͇qcTWbsZεE:]UȕlC20T52?X&R5a5t(LM;,w0=` tcBt k@r$"Jۆu(Hs;deR}!j_H,la'4ϸP:rD$ioKOt,m!ޫ8H- @"۶R#'E6NWC h&} $ٔVGG`IZPceiYk9oрDDCsҸ6uh@&m%9Q>6-n gMPE 󌏮j.L?a||u)s?Ze,Iplw#ޅ,GdΜyQMOH=mZ­,7n mwWT*h$LbO/b9GI0+ I1~Or7wf1QwCfv@۵Qg)MA0WYs=[zKwxGFQbH%D{|^CBk/H(!>§x,B7@Z1V7_yg'HL.Ҡ҈1L1@૲bUEa{Ghfql 鸌sTT}xRwCM%4/ĸ/y.XW?ڭ}~P|>>s4B#)0w0K*u{M)uKnVË}! kNͳsTZ)@ O#R6ޤ߼դcP|xd]~ez-qZ;7hgQb#5*Na"hig[F{<ٰ{2*@ .ްcզ/ѭ/n%u"O)$Zc\c;RyئP56CTsU PwzUl< ~OkYiL@yóTmo9藳ZL<"/ }Cdcanz(I 96AB5lH!`ȃ}̅J - TZǜ}875'uyE=k^%q٩cE1V5h /U܉Lf+}!y%r&nsPQ\KX1i>9rA-Bsn"AQ\D͎PQ炟9g}tut\@oQYo_~wnLH;V` {71"t-@h?8 RVXYo^:p ;ں?c GGuy_MR)~VAXsd$>%?Ǯe-S-2s.j:EE<P~]9EP/-Tv(@!vm#CyB1?xB/oE <f*0IҢINoaʔCEFt+2  u7X;nO慔 ]O7bq ek!lS$Jz%EqVuH;F_p[Y4Vb nګdUvy$?srSu97NHVļSyIZQ p!Q8jUxoAiPHAsWD`J*k֝M* T >W_ocP ECA<}`V<,ϑc1ޭ-T#誂Nͺ#,EqQc pR2mScs# H!2%GV%X׌;=E XIՃfA nO_dvӛ`V;'1`cD>rYY\ |ygǞu+ ZRܽ!R7Τ k_~ȡ4lbs3T",vD;Y6d5x n!!dX~!AD?ˍުVM19k`-0®ۏMllƳf/xTe Ưp7tH=8B gEcYvLF "ႆ3_/xx[_i("!%ۜYmA-.x,Pֶ` H::#&GVcBz*לtO.¸ix;Dm$'^t m|iCYy[ntY0Or}J-lͯ)jQruCCC>L/zm)naW^+Ti,b=E ܣF\z%~/FX㼝Anzs՞2+5 X!Re-Sl!BlvSWAp]/)O~ ǣu?dwnqͅ쥉w$<;k_<]/ Zj2Ekc(/3U.h1Lf.ԉs|{3tTp>4ϵ hK)7g6bǬʅ<(O [P_"y@gbEKkܟ8t٪d[ T:YqR"DeFZAͱx ձ u#P f'gvJ}XfxkA@kf_0yŔ,fVŦK cqX 6?y'!9-'pXT*p` !0k^0%T%?VuM"Ď<{)1On )Ys5:JmJxr$lLzu.3acVzC :1%UYq,sLTj~ZmE{9LEQGosV[7`w~.!$ u`%fXnw@+xb/%<*N9X Mo0ET{ht&4@FUq( -?_Hc+F3DWX1Y0NۼUK6T/Apha+w4bV?]+`b-qPT:M%_ ~H=x ,vjtt^pǐjT0icl>5(++rx,۞K2 N"OEX7afdu%2/ʚrVfF}}}9̎5:E1%!NCHI\#r6ښɻ_[ [o8 6Рz$`̞*ߵҢN 3vʒaQIz iSt b^4!^mn}*t[I+> GCf5~) =~*ui:a^]t Y2>) Ľݲr P`pbJ?E2# (t)!hݧDRxbB5ږKIDTR=a?:-ޯL^I2p@蟑2Kͨ1{`hKʗQs:,?X*nRjY!w5{H\9SoٻH$zqc6gcM&a|r.*kDg~`]"c5+sD&-F71rm±=Kj̓Jk3t7ˀ ˢ#]ߛ,*Q柠GDI]DˢɎgUl䓼6lέ|x[#{ bJu!Uz}o0-mN$eGsXvѩ6xuE9tܟ aڬj:dr#1g!ZCl#kY78#Ylδz[zϭ].(bA:ZvH2"O~M"}K|lΩajW F FK~"f̗VT xB?Q">c뫆:-Џؓc:M$ q҂̛: ?DжnOWEspx!Mgpi+Mk0'+ھ|/p|bxĻ;`1hs|*>7ipă%1Z%sg;&VptC5ۙ^[D8W؟br|bH1 p g.W ퟒ }L&UT/g,[DEI$Ȓ@](^DLrZMڍ(M#CDYBBRIʛzǒE6wЌ]Z{Upy>5Xv üU>@V!a2Q+ 'ehD]lK X *] `6`MuؑOJs>X؇{S(6j4v"QE5d_:*˵=sz]^.KS,AL%3<ʖ98;L;D%Zhk6j>+up[Ѕ(8:-tkе i\k7~8B弐ocqL明7w}.:C:dг't\'NSsrZ (wsF |/ݚ~k@#Rf|bh(\>e.Tum 2pPe/QxErJ<Q޻W };,*-q♭ [#"ڶT"q &4|%BͯbHXvپ>B%fj2*iN'2)xӱ7A19N80ڱR$J=Ԡ*!~Kw"8#V\<$YU~pFφemQFdrnEozjP @2˸HXJLa/]) )>Qb8Ai|϶R3bS9Cf+6`XOCWhg ( oeCF@Z, i0{&$և > '>` !@Gm=bn͹R\Iڞ,lz}$bлy>a <to놺Qv^^0,LdLRNl='˒{墫QVɱ[NՄ$%y F;7I_, +W~&%;oG%=M })ˁsn҂t~Ԭ X1EF }Et'F,="G'rA\1PXg`KBXc[Z O-_#hr9'D5;9,_rIE`d :z^s<`;#=Wr}um O.ŭhp#:{:Yz 8I8@N3D;o6`.'U+fle 3KؗzO+>-Oob▛TE:O,cLGL*,Rp1#Ѧ +*-Ѫ?Jv .V8 o` .c fj5+gaA+h*G|>"lI`t"T2+@/vcYg_0+I0I3 }2:ߛ9wᱡ)Ӹ<c9`V1~I%ˉ wH+"?Pa13 g"^A͇VL[1Q4?\\thK:uTj¶`D;86NL`}ۀjI?4] _xzF#ay|IT[⁀ʬ!"Kyʮͱ) s{Rxl-L1 ֝k8IzWxd eF=-ғ" ^&x_.5wN} ɗcV~:?(1?F_6"[Ls”)Bh]>=񻓞WLıYIL6CGw*1V+ic)bz,?sȪę0{ AV3$nkψT֏eۻAЏG҆W.b>.E)d㩒K:)EݮF՗ܖw&M^~ /?[F/)H`Z H؋`)q=Cy^[1}Z7?jȢLX&'eU:i-Z9|!ӑxBHeR$r6 J*cI)ʻ/)yH#`Ism9g}~&W"I{ƪq)G4&U+:Fff *oC ȿМ_t@05~+C:c8=g mA$0Bh@oD^`fA{֮Uͪ4GJQI}*Dh6giM {'_Sf(}IؚziK29Y<} KuHB-nZ텀|q?|F!qeHݸKD̯gTx"vu u}:&H[qAaipYIjS2 Xp/ Y3b=m&vҽH.H"D658>!w6\fYyolA}jŭ[*:MX6[A[.y{hxCVf<*|TƍewvϴI2C *o:wo?M RL[fA-\b+B8?6W5V '!*@r0x(AJ=J\ b+Qzk;\mfKdj'aBsAZkOܱg<ԽŏlhkK5zsmnJgq*6t,2.j iMu|*zɗYκEϝmkYQ )q}#4aN=;BU:ub,{sQb6Z ,T)0B@gݴaxG4L!-8J|}Ya"_)o:(,zйnHD VO:Y n?#5O3ިijA|Lߞ0lfèE-cNJr2e;;, sh2yFu5z<ݵ!$ ppX#IkMsGhGHK)~fw!kp rz EHDŇOXX{VuY.e[z6vb2d${~'eܿpfӧVQN)+G̅u:q>1#‹Am7Zcλybo KAM o k{j#j9ziTU&wq`b2LE`@3EID;O|$Ƶ6JhiiZ$%Tggܽ߃?gӢn>n|~F5bF}9=Cy|A 匘+#/oJW-rK64L\6t~ WB5d"P" 4ͼVp9:%1F|*<ѓ3ԆBg\?gB8 9:ۊTmm-w3͐/텙z&Y^XT;lE80 L0\qLկA! 3~ DՔ*nKzF>>rX-bnqT_g$z;slóc)L3O j)\φ>y: na6 a1~Zᣌa6(gťB,;hC0 s3`@BPKou{!G>f@M6L =ßD@<2;ƚeNƱB@z$KZ  {}clՋ"fy W (FA&qʈ}S]]nnYY2L>L{K] /qEKQT&ңo?5@63/D,+hQr;z;ዏ~k``&˥wkJ5L2,b,ˉg^UU3H7N&DŽFD {W%!NSNXK%()g;_]u8-W?[јh|-Owb٦߽Z_!ճA\wqS/2|Xcя/YkW;DE3:"mor*e ̈ɠ[kfP_ _ Eʻ)u͎^wep5 %l ˵,W'Wc3N/Dx{+[dަ͉Kgeb!YX\$C)1-y3rv8tF"#E50dlg 1F U8ǫ[i`=t ?V:qKZwVƇqZWčv8|2\أӆsK"y Ԛ9 J.66!>HurJ;S_]a#"nXWЉ@0\`W?_'.oO%.Z9+=W 6y4O{Z/ey}ϑ 4dAqJt>kmio0k|$BetSкRvAkp+tozt@_nc髑}o[79QJf|MJKۀk?4У5RR*b i mNa gq_v5%NzZ^h;0!P5H6Z߼ Y^D^R9%z_GA2qxFՖ?#,^'un F^WDebvKQmJO_f-i#Tt>f}MŽKᇡ:7uR\?(!y ex~q.zNfn M7mTM*c-ONm^|a8!?Y^*ۤcWچrBǸM,{Q!Jnj yYWz[ۊ!5쳜hgĖ#}uI4)-$M2o(k=q ?%>;P3vX)pN:5VZD=7X/ NX;.=/னz|F*)TjWbD$knt&s3_E5.RK N9'W}EЪ"zCљCq19e*vJe]ugF=hƈ:) I>BIA6Luy(5 69Č˟8iͽ[TcӴF,Íƌz7@eoNt]x)#ATk~ƧxiRCF^V-1E-gӇ@*@G*Zn|Rҽ٧"(C6FAY'h]<#5eL.әNG3̹Èp= +ԑh|P`V, hOZ:?Z7XPq(>.czU'O aEе>rBNAК,ucNf;w,:ȉ 1L&;l+3OQ9SwfzUWT]Um|AuA!b9غ؏W̑ɌNdΜqO:>yb7N *)=bfUolH/hԍ_exu &&qnަ_nG0C?bThq}kƇc8 U'+f`́ZbkI4Č}U |=+*%W]too\7pg+$rD7:%:m 砨Rи`]@IhΰFL5K EbZ6SKLs.=H!eIT }\o8^rhAT@ &D̊ۋ֙$w`zt@_PO"xICu5v?[a?{gn3ww_ Aҁ& ZH~_a:2ߐ(S3@̞uK=D ]/0B2;`_7'FXe'O<.C~4įُ_0'twJ$<Ⱥ-۸̊KiK#_}cc{~5u:rmȃE FF>MT{>*o}{k8ۭ^2 W&M_#Jw(x|o>?\!u15@pcFP=)hI%QH=#097!Wq6p8"{UdCYJ662é1L[&yDmmWx:2>|24 +mfmb- IL7(~@y*r(e۟{=ǵ)N*B|Thѹ;slMRҹg /9ǃ`E/#K*b,~~OGY$ nxQ_A&I(4 +ew-*,x[l]5f!pN4֤R[#E@:C%Q'Doz=A%qFTlMKnzz㻌l"* W~K2榥'Px5V]/'Wp:gS)cq"GVUAdəP^fhPz@ 5H3Yr:/TM/0;䏔f2̊c\n-$ã .|NVڍP>}}oy&3Wz.9:2/CyI={Ibor+;BDh㋹ˌM7@`̗'7\C}(]+;aoFMxZ.;IISTk)&;KK!PKGp?.}{b!aXH{bBrOxq7~Ե&AQ-@RC=`E =rJڥ^PVALs)l=}%@T,?<)Su~Z2Q憗&E/@-h>̕pQY0M1I[1K4Bp`#y[:IbmH"[nv|V(;a[KNQP==O 9dY7hH_"srs:Hf)6G,رp@%.7ٻaZgnp- fI_ Xhup6Q≯I 9Qb( )CAI)򔵻Oo{~Z{شH^Zvka]O)gA x$R븕&dI~ v٪It(SN:K!&|_y~r ;hnNB{@4kph Z|鴡[:K7X,MToxl4^Ԭ\Tpx3,߭>c)L%8IT);0 I)`dͅ2@ pP,ˮ#GܫYO@xGwC[FFr:,.,B woAеEiHyI\ݙM%8j5qyG0X[ U/tF=/wxIr$.J'y`ЬBvxk / ִɔ1pߞ2 x?#ŝ< _4%Q16оa?n&g('xnpmV3kVϥ=F:t|ll  ުErCDJ iQHqޝ7Foڃi"=PAdyﭨGp0" xK-v@{Ls}@B:z vjоdi1Ėf(aO *Ų.3o ]\p35z=lPw3Wp2¹=(gv jY^{hT?'f~7I\R\ /$Ѭ.nK15(7gȴ^_2-4~S]6Ub#butIl5{}:WrTęsáؘ i &.ġNkفs^a`)'.6HIl'GA!hqջW\ 2w(8%tn5=C5\`NCSԜp|6@^+ 39^GEǕ7Vs!}]Ʈ{~rѦ4GxNlr"/TCh^̑;Y*5?_0A*JxY^qޢʷlC \Qx(UM:hymI!࣮*w/>-3g{_rA?Xe$,}15 I `;tu1B Z^zq~ef9 HKfH $4jbdfn"rY2(nH`E 1FR&߇ldh)btD#5QX{3RGv} l/ţT1$yxD/6E8YϔvZC;[h=\X^;a`'#G_N2Zq9N?{CrP,$2% ުU͸H*}_%X"0%ȯj|L@ J] kxOf9#!M-z547q9R35Se޺(_[C[0 Kc'[CLQ2$ZG<`c`Hf(#l9Ɍ)|}G h&yfsScj Rlz(@S"xe,DFWqEΌzQv:r]239 jst r*uV=Ek J؛b+/51j:m4`#BhJ;." ڶ:軺 BŗxǥE=B̧5AṴ3^i ALk:kͿxx6T6HJNI :hUER- RLUy4CD+*XZ\_<$F^ᒾd.$? ;uVIuvfrGRUD*>b",)O۱)=2(ԥkG1:ϴZ/^uDmTU uKFء%,S[~Au >Cbh}7Aj MUoЄlL~>>L1Q4zo6IY] lI}~3A83\+X. U@oy 層hlWexy+--I\t )8Ÿ+QyMԣB ~zY1x{w^{vBQzAs 5͔} T+JIO9zJ/% Y:\%{+k:_+쿺:QL ha쵀ST= ±a(,clV!14n7rUCz2kѺ/,, j;8 W)\77˦N PA %{^r[CmV>*̙灩a$<Ȩ=Hj]/Q.5ݰ(GoLձlb{~ n"s/c A 6t LTb*c@7.$qJꐤ4\YBovQg_\ۺ8>[zݾOuU],V(e tzE}dh*Nn s)ܜoպ  8ȑ;6ayY7|;\+ڷ[G' VyoZ\x+}="گ;< } h%}7_dQ!- _a78Vz_׉kzuɩ$Th(K2 {`^l8rC^1£xة<"輪wN|_k ԓ)KbKT'ޔ8; e>.>cHtvW꽼4ةW5;̈́pk%qTf(~ܫ역 ľRGIPK`CZ 9@KT<*^ \J"5w)8;yt9n&ܲD7S0"߰f^\'E]N'97UFdjvRLhg)<XjGZ6GwH*2]No)=tYW_m>&$dVu^[~7KXLԐ^RBn%\Xo<ٚ,m6#>go,wۗ@ fO| J7\]5#TշLUSHKSh|odsB~ Qs}vVߢ-G9((BI=F+L~gv j}w zӓۇbi.hl0Gž=p0J`Z+'nǃ({7XfsW. #00M9?Bv5<`Sr1?C4kWЁ=Գ3 HŎ("& kd]m6?w)ցc#=<#=G7ѧKeutQKXLq'!"g6,2bKqmB!{Y Q\m~?K9,{Ý2)vat P$O+-$\Y^ftܩ#B 2BFuY_|*R ԉ[<˦5{$ D< ~*&\n yNjn52U/a'.%,t]Ie nky?5>_Jz듾Mޑ{8_4?[ҼكaM Ԍ2!ʕ./7C=>K~'dYF|L\QoZt3ݳ/4:v@a2U;9RM}C18>пppqL G/hK9b& == r}Y:X?Ң*I-ʞ?^7Ffl:+!-_{$-snN  ,_[+ ̱{W[|\bs1Dxή8GW!*<#}ԌjWD*:蚧DՆiVZzPV+j}']Q0y&LJo`$)N&{݉BX8!]Y;=@3u0se6D[X{Ͱa9Y0hi==rNx#QY. f2HBӗ7PQ_ L|WRd0LGܗSnoJ\ >S* n+JD_:?T˥U HMkgq=.qE C4ZG;Jc ,,&sc)G_9\TRD7%\C-T]̮(㢡#|hc4bu;BYyLu>p3,2퍷ȮҺ5ǚbخ5ĘwܣMlVkMS9~>JO"|J^ n$r=#ʒgKˮ.򞐉niOX-l-! @&&؏Bi)isyTH?8NEB$FwIS*тǭ\Km9YA"$1R<\}Ini3f ۿ"k] lL`e'bM>-QdUcpzֶʅ$RcHJB-!ofBKTd( W}yQQl%Grxad.iQ%z$r?c}'z.l)CՐm#Q29eƙMGQeaNlofLQZ% (=܁&KΜ󦃫NEEeBȖMLQfg9b 8XU0;.we ?>I¶>B*|a/̙TM(g | eڊeZE+mr7)B_Q%s$*W|JCqx{G׃tǎ:*I 6:>O@Wbrdy(S)x{5A:&xJz鹞!5Uهy([Y>͙%n $0`qr~=ic!ߕ wTd gw6xIlke:x[BRA҂W<¢{+r3T 4"5# )Y&^=XxHs@v2fT83`&ǟF+vfe+i-Nqm#6aB*0fn828pgA ;-U 16B(rZGy3XP9aQ:ٕ u "-l uL2~e=5ϋn/a*F8 ƢˉJ@G2pΓK'OC 7O~۶dgң^>z\k)SLfvz;1gHbC*Mv1!+̚.$GGOg "m^+fq4;c^5W͛Bi>]'Si zcoνH9Zܴ &oV,l^A.(t+9`6Ttx=-߷{j"(^6=st"#jѾpRqHɂ{gṵsy-;A'1E^|anwɰ>dSCZuEJOlMI#/nbӴ-=QcHA*k hWE$I_ !{m 7Dl4N؂H ,fkq/Az?077^4&9U -qVǺ&eh/8$Aޤ#V+H 1*wuUABV}m:zZG m< i?+`k]J%1K޺||fAX 36'}s*3ѦQoʸ857#<"_ů]&#)A53mRud-ei@[M'Ꮣ"b$0pyLq!59Y23r9f~:Gh${=ǂE0m%Dߐ_; in0zr·xk Ε(_sū?kh'1՘Ws0RF0~&9 Αbo~о9X0m3 46ZwP͕3 !u7H)~y-D_Ԓ#[4ځ=*O4K.Vh/uh2šɊtȳj{M'n>Rpa$.ct-QJs10<Ua,_37*qDp@VZ4uEM\(6& A,f7O:-AQc!S.aEI+p30cmʝJU'Y4` _4e,8㲂W<2ŭk`⩴ @|~)k %cxXȳtղfsEȊv/Uju) vzIbj%l+ʾl<-fSޑdގ:TT%WwU?bz*ە& 'x 8`ٯ8set⡱7ҖV=2,U' aL>ٯLFR3J+>Ē G5x$ЗϽmn'6bh~rsf?:0Ht>:- }aYs+L~CK3H08$dQKd/<'G9&۴p-\ܜRVp >oanM$; Q{}yҮpWJACBL-`Xs}}X^ uTr5`v"_yz]OY&v< wa~bߘ2͞1ݮX$}zL;*+d j@xڵgX# mT-" t$#p4(9 n ]nx׽~k0Cmȍ}qٙF[K(x#~tEa,VY kʴӬ) y6%/EXzU=L%}hfYVbП|S>PsbYR@CPո'JePhM8#ٞRZloڣ\&Pŕ׳:.*O%D Ky;_Rx6tSG4i_xL7Lu%0h|qX#e`4xibʻ^j0ήhVR@awB!3`g}^+H# !GV/mQ ȹ۪F LV z\Qsp8ݕI:Kolt oLY%@!8sB Y xwi>i9tBwpj!^qsŭT|5Vo6*Y9Xr-6-FL]gH%j"^jRmQB~cH)#xhԓ<,V'FyOUN;JrV%ưMVsQ-+8fW؍vzYu+5dHJRlDHWMLE6Ƈ}L.T &VA箚| /SQ0Ut?|w*;ޓN[ȥ9\&܍^F1'T_wX1[*t%kWowk8&t'i`%dW3M<Ӳhnp|`0kZӾ"]27ee_@RO&{$* tݿ+ -/)Ox}9R~O HoZt*ЈXWrC z_;8_ '->Zv,m}7sXfm*Ǖ P5K` `qq_Z1FL;nqLz:( =R~+ [*NMwrb;UL U& w.\2N3l}ћ#0\M~D6`L8eԌg7.Z#/ۢɒ=͋tYz<#An㐒Nv/!-Ab: % 3fVEῳ.l7-QZ('^v͸uH<WnYaw=n轪I鋗@54jm)W<@ZzXChOd4%?ԛʉ OE^1[%ZB]52>eo6&ו? F?M/.uۋ~YRAnnʴjJ(Agf,Jo\$\<} L0j肹tYcg߰oG;x3P 1:JSdZ 5H]̭I .yKuoc+lN߀t[=8Ģarz6hXѶ*I'vɌ)MC_` I>vWD:tܩw\'x%<PLm$:6AMDlڹZcbBKbcWcbچ{dX2~ (9l '~3 vJOslt$&>e}&ʰ]XLsqNJ4e_ЄV1=H)^i79f6ʒD-4j7bhr8Zif\D 7GHYvAwf*acõ(#xL#Rs 8 ca{L5o߬6%\ 67GsCqmB4$A (*#T&׹[k+1(Ƀ(yѳw+(}^Ðo:qH@x"nVEbjBK+"B5E{ gJYB1k]8|=N! `brS,Dn3Vc.xq HaDYw+BO^$[P,;b3:*a =BoS~CVU 0|^n3PI[Y3wnBչk7 >ƭi05l ~2s@Bbۻ2i7m<[ۯ_` cc2um4c("fI^C: B:I;p+M%7RPN|2}qׄDWX´mk.g^a4/Z#?bk)'֊S8E%2<:>64,+z_R2]e3rvj hn!P <v^Z uFJ9nadUn]Iޔq`F4E^DʫL}i@d@8ao!^VmT&ǀP+big[&℃WTs$ AO`p@\p㼺sܢIaGZ>j^9^R#c 5'gi_aXZ4#=s/ 9̼td%bb֛/'t8N\N%s*] 'FBo|ג}S*SYR٥>q\k$HHZ3,QeYWg<#O @.~w{pTk^, rR/8CbUJ`D}.} tfc6y=vʧOYIw>IL=6a)ُ ]| i5[|T[VAE (g35QYBoleE %lt5N$KҠ'wׯ쎀btQX~ qJџkWjo}5R(:, sHǷؐ-qyf\ap @۴Ԅ_@BO}3._[ ]E"SN,A3t8Ϡ+GٚՊ*nmUXI^=xkdc2j @S1bw/`klnMK-v>WEI;btmA~' Y(8hszBpuV\9٪1TC[87ԶE>EK:ǸOSRmPez̔_Ax+ :JH=&Nٕ,>Խ:w!%ucf&e@ow/ل8e,HTCcu_nNL" _ľw fd+q@0vg=63A% 1ob?9ZJ2k(_wr]yDL%fX-മiZo3JpQ.~ܢ̚,ooEUЍzK[ݿת@ӌY4)6 ZKuq0_";8V^"+lp&`!kƙ1&?^ ľZ4]-|ů /ZV iBj܉e_( Eoy7SHw"D^`uh1bW `}6rn1p]DcgqM#jx) KD4_o |+_\o|sp9<* )L)OH-PWc']cHR?+'!s]rs$ u/k8gɟ[4\+u(n튱R.< Gt\W sG븧l_nh˶-:muŲ%Qr׀ZsR٪Rn~}S60Puap˞#f+ZnM7 AGE)c;~~J8oy2BZ>&>|跡yR1I -e/GCK<6Y*<,(Gn4TU8(P? Hׁ;B]P4D"bs+^3̈&Mr<{ZˠvQJ8RnP3[AD`$HfLfb钓SN@<> )JH+MbcnTJ#ڛQ!TP=1lOS s@,ZjdZy&!uz{;ECe-- OΠ+6K)6Y.ڿ JmIC~ѵM0?5hSc,_GËJ=?װl UkƖTbz <;$ hobuV{өsLqgeaLF @)e'!X&b;S _/[o97ƴ*_'ƹ#C].]7r D^LlvA20Fq`Lw` XՓA&@xkQCmMFI jZޡVL{c8ۣ3ˁX>*9j",mŲ72pS9z]Yi=8ƣJb+v!!w  T✩:k'BѼy65Bs=-WT%6DctyǛPe*f'IbT]1)@e8~tZHcF W*ps(\z?ƍV]aUjš%OB1Q"H r ޵ϚL ]H=#H Q컚2qҤ%sgHSr[ $Z55ъ.hO_U()0T<PBx`Iv1jSS cW0@+ n:/8Koe2ԚGrir,夈JzX㨥)tѴU4q!Afp,sT*I;\Lpj0VT?.+88jr&2ӌpCOxH'EQCrnJ'Oԇ{Yݯ%Dh^`5wڀLzh}J =u"4jABy,[Ic\O/:GxHນ'jY+p6\Oxzza+Bu`Et:x)gS!g&Ѷ3KV{Fe.6}ZFnnePz0Ws4-g*)Yw)Ipiͽ=wIŽ{ K:q=Eze؅N/M Ȼ:ޟziUinq1N8hY +&|h͊?khfX"FDOњ#҈=ІW^ѯbq٧E8G32O'; 1+OڋdQuKU!?h#M K֓(?01&~"QA/Tƶ.,Ф_Xb!r-(J8?+o=KEdz ه7X=VLYHv}=lĩ&yv9g< BC }Y {_B6#|ǜ3'7+HQ]/ggo՝|F@~mhx)Q Iy$J*lrMNYUb7>Sڄe cvBH= ?0ev~`}bznͣgώ,ܝaf P_t~4ٿQQ|-3Ębm}&1lH^@$꽼d~VTٸցz~BrUH$1L?_ ?6r#!4h gqudw?f'[V/􏇣<+pԫHъXx)OȖ-ip_}.:sQ0G6u}cO$= >CxJ .0lJ?͊Qeq\=_wLA3D|-[*OpOj-ICֶ8rʮ9Gag1){mqM[]{l ;U% rgB)r,Nq$3RGs-2=!3P3˳ʼnh9Zf?%%/ ̖3?%a>?\]]({YL;s^@w$$\K(y a"Q 8RFMyuC؀ ٌk2kY+DfL]uq:k'#{: 9;FV忔4wa8`$hEM &.:_-{3m{Wq#|ᄖs@=,fʦg3zLټD?915@(5k$I_Vm2/po%Fca OVJw^|CVlBKl?0T,D#̊?s_Ƞ K>{(L/lDž3Eȝk@s;1>(e1oG# [sɫ?L یa=2Tu6$\P>T= )trJ^nMH6RjvY:4Kk_Kn(.{#nȞPu2U#}=س>a=gӻfG>T; >e~h'JDp3Dd%v0RnMz?+OOSC%&]K OZ<:lҋ q`l/ȃ_nv=(5fl;prO9:o "2%\l )f=''lRԧuvM:&u] 5< i?vsccҠz!X`)օY>EŹ|ßBeK";+(fn%ngu6F໙`&4a+v!pac]QUD˴ a٪"Zb0 ̠Z/ \Vz&gHTCc(QS &';aQ$Z=Kx i/=ڶdeI޶S0f(HCJQH%,c?N^xS/5YR#SwM %Ϲ(*3wb@_iiI=ȝRVWnYƮ C/2~%;w3MpiXX~,M=ɥdbN=PGWScytnv0L>m*dv!{{$ " ?{ks,n<.u0ѳ@"y*I\-EĜ> @LSJAe1jh'ӓs&& fNj8&*v@s 4-(ȼG㔍Y{N,X+e&8SbzD+,3!l{h ߗw 8Nmww%G׉L KQ`l%++皏.}lꄼO!ȥ Z\b9Ԁ?ڙėΖe }̱Y{c`(X NӠ\ B߰$ IltQkO1[U+9]RB*YX'Dˁ flxXl~'-&b,ޞzCnԭ> 1Jxx +cO?Y-%sCWa/fs5XZ,|a f|Ij!OQ]`Y1WDeȿS٘]v6%6шC؝ yѮiozӝԫ=T1pʆV|ЎUwNlELupT䭮&˙lgDjQv9+CGT .H=yu8)B;9z n`Xz~p$f6{Y,HUp @47OizN >mj&+[[ )6#C 3^$^&w@]{ 4ْXr l"\DCc>֩U'%u f8(ǰG9kV;[ !fy5C@rp &057 )ͬg'Y`%`o~Jj5FyVFm\tX{҄RQ5v Q\ K[2#(Y2zo%9ҁ/ o$p=QCJ)fn5[e#:MZ4LWe-BDCMcx`y7–$@ƒ^ʰ9#ӛ"0a=XkĹʣ%Z'뗄?Q'Sj*B/(n_Hq`,wjI{0޲f&zG4 թ.CdKm[:5G &G@pdz|{ hcZ28eܷ<,4lC^r7X %OMnyUFh*KsuEAY1)$-+{:x]Oک؊tHS3e,j߅&=,<ͼ|dKK/I)NQ0l=dr=A[nǔ~^--w`4ŕxk w K<ԅ$\ِN'#%洽zMNs=,(+JdVRŐ7EyJw^qj6?k[fܜWFǠX6sѬ k#旸 qЃV'Yd32JE')N7ٍI*AɹrN5v *A =#ҿ r@24jl[ Hh"[=5tsaKјe.qXɪîD3] s[˓C~!t/iOKLƽUC+y8li 0;R9!AGs}RH=]W K(@w'Ǡ jZC1f1Kja<`'I2\=*v9`wm__w7)ȴC W'g7Dm:fhxٍ@hbSŲiOS ETAf?Zi? c3gN sbۡe}^2ĕC+fyFM{^D158v,L{LNeK[ k2\:R AM:W#( _mb粀Cּ_6M2\1H_E#NG0y<@pwXQݩȖ`P5% | V#PSG;C_"i=yqdz̔Za?xftTs;f-IIb%>zDp t:yjWDՖ {:2#mzoo*[F̠X&}I1:YnK$ҟyJ[ {'jl))]xCU 124:k=R4WIW{!n*oHje] (ܴ>jBMzmB} 4"NsD5{{[r͢g(8G*VΏ3]'g&Xq| 6dr \hVMiG"HGU*iT[U7JEԴׁ3# Y>Oj~:")04i[yZ*^ʅ-V!UPs_PH~C5 Jq,KJvͬ"[K'nUx&RVvv (8fH.=<'` ,@ g^ܡO+۔J1Mr;MW8"-YRzFlh\ϙ魜nlEK,і*T;aD4vyX%۪/M̮e\[jˉi3JAfSbF!"\ż3ǃ la?SοbkuB⠫LFAK? Y`ecQ{q?UY"ޱgrG3l tƑbɓ.)e]~ ]YR;w_3 s0lu'? ~Kr&)~m qƒ<NTu&d]npR; ܰ UQI~:b]^<rD.(p! dzz^No9TV;^~cUO&M|}dOLcJ>~ /KIn[2׮HH8%!ulWݩƧZm+nlKhvQTI2|(x d}#_b=ƀTvTh[4OI7[ 4>|ҙ1\-\PxgԠi(9wJ/?u׼&O YRm6Q{jGGLKV Qime8v"J*c ͞u+CLcwJ%w[ebnd@hUp z= ubhjLEKmmG>^|m zd6PsY'l̼o3ۘm^**r ~b!p1B=e$g yИ,rv4Q2n`hi#q ԣXs1rYh'_p \xVd_c`hP n*{$Է`Wr[aGU N?7oKgظ-bYl%[BiIvU'/'{ 5N}.1U}NPF]tWzFS;r!GS:}a6\H`{  e;NM5+EGȌ+n'Oo۸.+sZQ'A~C?DŲ(EϽy6x6/gC&^n;&YL5*U ҳ~}-Tow:N- `d~DYҧdTayIzP6Y)v 宊^ZD[Gzy2!η1dQfE՚Vh=Z[(D2@WAI1 sO# t5=TE/"`ʔ{:2 B'XyI9d0nm;uDr1b&?68OmMCɗ߷vvbڈZ+-@z!OPq;ɰnHg1̷}zOGj/;Q[B]{aXZ]|(i&(7>23:wsޗO^.{iǘbPdu|Mu@*m!c]ƂuOCݽԊ0aox81fW =<[`u.Rg95 5: 3I1%P7aRfw+^_i;KE^pb#<:N &`91;? :َCO:QXُ:znw5"o m$TQu+5{Bpm4icjH0S?R{8dR8$ ؅=&OiRI 9f}nAxb2~,%D,tI I˸C\v|(s'uOclɛ,h T\;۷/@Öɻn_;+'6Fce;<\5+Xօm(եoCw?;QL'm٩rD:xD 8oz5%s8$8nWGE.;hܷ mY5A=} ?\ݖ<#&avAfr8VVԵf`mk֪夺䁩=@-C;{z\V[gTf47^@ɒX@9r!vlӳe6\2ikuwΧ'`fPBCW鳇C-iӖO+eV8NZ.o^|].uUC0Pl/l; r?(hޘ`&M`h;]jW2=n_I.UC('ʪF]}S`6J[$yOg2wR̈́w(UXV53As@q|s 2)G,8ݢpR"!V2=CzN%k8}f Fg=ikE( Tf!,2p% Č@AJ1S17~l9Q:>=⭍..(ҵ聊oa')2Ƹ/LRf+`/v7Mm5dBd"#ṚĐV.`X&g"jd &v4r(툆$;8zMҁwN .ys4Or\0I *i)ڬpr R`G mӴO\d{!h! <'w'2)6ؽ') KCZM}|c,N:"hrχx 0O<%Mhhiz0LnmiQ=?RVOsE?OZ.[,+vC6IS wla~R8k<<4+Y팺`9'/"Rx⊵I*ej5}CFe{‘)[/VP`Mæ%<W0کB1 f ;!j%3倮\K"KΉڲR^ <&9qQs{Vwv/')jvenoʷ׶p0kۑ8N)'>J|Lg:gKqC|wa}k#cD0nzx13W_3?ftβ *sjUdťGG.+M.G)lƐ*WAtaNfF#Nc$})I=S ɒ)Qبg% RCm@EA5쁴0fG^*jҦfC=U֖~h3H衺p]|*t[ ghEް08)sH2 z?spzJ30 %NR̶vԥQMUDjF:@k @Vu9b(ȯ&Y .5h,!9}]cw2RZ: 6,$DE1eM@̚YQ_K?@$sʕo1B|43w^+K* ^`XU \P 5p`g[H;ImMo4 $?:6eu F7O&.Cn'c XY4Yó2T ~c: ';߸|HgJ°PxkU5h$_ʫ3A8B=.%8TP n)F Ƹcfc!v/-|y2ڱ&k~fvG& &?$W“_XI "Rqͫ^>&=8ޅɥXS& K&pd@xl6]ǑQ/?'-a{F 9pi}p>(']]/ K.->@ԩ9Z/ %zDv'}<\Ij`Du:EzAt*TjZk?&p|fY<w~8h.u)2 au9ICr K-a" dqj9^(u/f`4-Y~Ngw{$ $P@p0OYs>(SLsih1cT6#jTEN$?:o܁ k1ƪeZc[ak))fxNeEgSaqn@uaMaCI8/>v=7 ?`1RwܯL-jl 7Å^u>/:6@]a6+ϥLji"Aq,V<ӵ(W[#OƽRZ|1n&,7ʚ?&UKbhajki=o-tf*E@ZLk #j. {g"^ỵgҭ4".N?DeQj(9f&wQ)MA #.`=}Jѯ?1imp㵲`V-W`' h@;5CB`EѮBS3iIE<>k(ظ_ݙP(n%M7=6 !Ä&w ^px9 ^ldJ# =ɸ|f]w#cƭ^S_•}z娠윹Uv';U>jĠk-s@F\%H]\2sĊ*RnWS "i_PMmcOz O*~c1bNu0$ETn0-`|+ìXrc@xcF+T,TW: ZQtIi83 :ۧŃE,Cqjjah(:/' UM|!2'FY`ad-aa Բ?$]=?m6*Cd~ sO /b*>cUDq Jw;}0ʭG"Ȣm'JU88+Ud@! v!a]-/7V"4e!/m!2{ge7b*3//h]Gt`SRµo,=Cd"2O-t rpFYiryX#Vhn>oˁqJ"ѩf(\;\/0r=2)q$],кvEΥkW (s8L*ihLaǴv]Qռ%zjtZxJA--A,E"v0tZy鸙 ^ƨf! ڜnDb NVKw;.wۖXnA@ 7Lb^~F|4T9J+cuyҼurz_Ɍ!uE}ێ "U.w4d¬'b֊'(!ZT_i#w/wp#Z7D[ 3!WH∰Z$q MSN&(VDWcP[0R8YoϹl ߃|c47)<.Lsk\ w7-8ٟUc mؕv&¦@?Q2}C8^sp6.Z U^oub˲\Fe[*^s5WK/yow*tߚ9`ۮ_B~-R.+  O{D 󜑓cOʱ.PN,5P##.Q= }^eeFW PĦO8(L 4/{IQM~ԑ¿lڅPYwgiiw6s^-ͣuF5F Y4t 5@qa/Q|Ò훫A"M-a4t@c: k\nA154*<#PP_+-Q0nƇt94?=bT&.hm}Vb7jW/1c˫cҗ6JHpzOAZ7>= I48 Ьo`4Kݢ^NOmr@ *ǁ}lln+" ='667`YӠ4f'&$np&wvTV;*xQ{T7?i/_i8q p)]*:g, ~&}aqLe QhK ԡP>=EWG{C9fe6?q.,3忄P(ͅqr0ӨF#!vOv/g$@kzRK{7\T2Ӄ]1466V:,Ih\})̠H8?p whYr|1qY'wZ,O)N6pg 2"˃"l!Me {Smjmς'h~RSya (=[`YQnNf$ZX\L0 mJe }K14q.Pjbh˶,IwGɢ8J۴QE*ZS~Vxx<@@_#KZlQcl6NR._*e>5JgJPV ..$yjs(G9Lߐ,`Q jL I5=}yOAi*qaHnwn}eS6k-8]l*sʼ&(NhȤPϽP F:P)i'{h*)h |4C코M]>NG0buC5Zx ݋ =2?{*] V7 éǘ>Mɉ3ʘ]Nj>ɏS+8  qej4 8ǥfd;ptđ_J="Hiώg BƊ.~50#ULN.kVh2 :y2*.eicua.j&d,N)i:wdnߚlKslҍ=yBrZ!8׼j d*pc(k6 C-đ?+z<0!6 GPJ1r: U3'nBԣs&|0@B9/+@AOuӝ=d鷘ǦXjOvum|  {=4sl*:Qot|)}!V#-Pc?G]ؐ $;넮d ?<jk#Q@ʰmMӁ7QX::ܺSޫ0h&qaHp5X_MJrdQ*Ir_SptA*XNe ~`B޳}YIDcP?cIvpOU]D'];]2Q38*W4ug]h+ٶ+KYDtjh{F̾ X%mg[S|@ςj: H,TlzP]mE n;B|~g='^y#Aʷ~SdQ@~w-J= .9 /޶?0ӤF hӂTl$<+j_7ʷ>JyIVlqj:u J%O XBD--GS k pk]GIK8Y)EBdKpCK@EP<^ Qƛ3O!TuzǕ{oT4uj>(\hBoA7.3J]oCY>2CĆy1Pb"'Q-un{xOA eZڊc"Y T,axӏw #B/BM';@vHlOs]BnrgKǘ =<3C#Zx8W@g!/KSeue4c2~۫7˪9;!Z ]/+/iK}I,0G\j/=υz nku~'210{D'̜ 4`j$8k˼}ʊ5dۤ,m/ۀy!.8$9L~;eI4hEW֕."_,zowǭʀ8򌝂$L`ɀTM5ouqJz)Z{HA̜I/EfUIs$~)WУ8 mJV˛|%,Q"? A'N@c!Q1ʶ -][Яj?y=ꏓ3 =/_x=Yc93a)챮ZB K7`ZO` uT0PizG<7suV{ZY2UNyi=)ؤ87_=ه׆ "ST']_8dTwߍq)^>$ͶfO@#\ ʸ8 aЇtPl3'PDcEYw(vSPaR|UQ(kSdrt k@Er#|rv O@ m^ g2b˙^/RlX9晠0͞a0)v< w$”J0$jOl)^ ?f>5(vMgmG~\ ~(J+AɈ+"[]p @Mx]%;y@ p[LFx? TV4tUʇU~@_قbxP^:!B, fM9ICy\7`/i[D8 q_sF o7,KQ o485F osg;^T{r!aO 6B׵B8VYap=#:u#) Rp1e䠱2$;y=sy4 jڹ!t.8lPI|]PG,*]6XC u7̓TZzGГ;r[ {"G.Z]7:`M]Y;t++DC7csz cGC\c;MYއv;c!S殭"fސ 2H(4[.w{o$ۚxȋ*1ms`i%Q=M6>>A&I\fT ޣa_U^[՜|WO1'.VB;v\ʇ[ґl#  [nBE^O/X[l~B m^+ gT>tӽcDfRNrYp&7;:rNn*U>Ԗ1}5#႗:2Q p/eA^4Ti_.19x^k sު>gZȏiS]W9e%(458YgũCl{Y@ IX (Aϥ`C7Svnlwb?. އ^azC a}kT EU8$F@ۦ}.\Q ~NmxWsrwW6]s#sj*Y@p: e:G`s5蜟x!RF-Y1'};+!KA}: H6 c"0\>MMĶZ?ITǢHb]u{zXcmXȫ d)Tb|@ꄫ#Qt%S ҾnƇ(gS,M\cHnA*Dz {/(RdFqgolL<} Wv%ȨM/K3,s(wx*\mʴv@xߟ? {9S30|^qϰ^҇JJaU@ #)s ݀Mj67c2aϢzbSy]Kkess hU׍ӚG u2Z_f&MJQpvG$$z?b$@$ozPs$GHJ6ua:##AaJ2~Ѕ/NF(!WIe%q@lגA91ཡ_ FuH~P?YԢ}<˥H;$hsx+'+ٶӵ3+Aɝ|:2[_Q/ ӌmͭ$ǡv/qE"׏g%$ or;vdD9<p)/}@_%5:\))?áj߅GyȌ0S A!O UWF Ӱ Czb7vM̒6QQyN#B+ ۡ0 o\﹞ώ.J)4½yy'Ӭ#`G;:sKµ>atbۭ&ǗԿvȑX0mјXȅJRk B_*M͂0ڣ 2ܦqˮ՟+Tnx btds$ z `Q󾛖Q43< 01irSsv#ph8U#C%{G L 0Mae$C<)Ѽk0T ho]ɂ8NRPtIu&hZIUGCr"95$(C5gwBmMޯ{3+llH+'F,qV<;@n`P搻6\*V-tDe1@"QhA ^i~ +FUb.:"I"#\:Wꢂ X "#yD$[ݠ#|3`0DaPEcC(/אTp0.4w$c;gK*eYl> |Kɒ"1uEU-LYMoϕt:_ b %/Ť].ytx_TrzYǶif-E&^h8j 0NSB琥bi9 q60oGC>2!-$ӛe1zk Lr垌HB-/\~^9HtzBJUԭf/ٶgēy4{8K0r;/RΉnO7qLx;? *x:C`ŔgOP97HBB@W7 {cS Plf,:\yQN~kKPfhXi!١U"g+W9CO@Cľ\h<̫9h!ofqPm<@:ܹɗ19]V2/㺪ڸM x4W8yѓMH4- !OGAcW~+2EH[l2@翸1) ٘oOM[.Ay9Į zs/2up@U-8RdPΥ z=2_J'9ʳ `|:wquc(o"+KȗiE}0#B]b.[ sR8w^) z{Lq"_.ˉ-rqc4W>i" 3Bt*θPV=rHFŷn?y!]qB\GOޮ,A"q1G|Ҭ\' ?r)wI<s ͨ~Z^j~rk~Q`['1V?mH4}qˆc+ ?js _ꁚ$Q_*$m#X(¦b ~{r*${oVⰱnsfzF=3ۧ# ΜJ+H)kqfg`hȏ+} Q0hڋGG(gvk;d<~f} 5Az!|-EĄ&=::*>BmGɈHێ[7~Lrx$9X3`%~ ;&{:zث-/weIۊ5N"Fo1e\GA 2xC\ *^]{/kMe0`W}6))߂(+'nhZaEWЃ:aiXmci+'EB^pfR,).Efϴr.75@q6Úм\ f$l'ߗPWC'n i|QoOSZtU?‘鰟pYZڤ2") \lIͱ9lDAф+_&2c ]D>RԦ!j3p|f`Wz0`um m L:Du2ZSm+Z|o󹄧N'xPCS5C%uFUYGB푊Ya*ȧ"2pFp]܊ǏT uScіXhV' c !|_a_r<8\3/ouMsv 5#Hsw3L~&:t HӪρ)tn$:%Cd#tCH7[kj.i>l&a ^#ݾieC .ߓpW>+2\x"ɋr4_bInN^ 3%N&(4PcGVr%)@A%}f`ݕkAThT(MĪJf IQ'3[0bXp)(3 M1rAaA̮Sw]  dj+܆@{Oל+Q:#Xj PU4 SFI ysiZ8jUb1ãv-]Dᢕ8,˫b/q dU|])1PRO.K?vK,RV?"0WF;Z.Z_]s XFu$QW:]oɖf W{ yWI0\OAҰx0Ԭ` dݫn#m-wZ *0{u>(p]{Fw.+{*U|> nECZmA9T4-R6ޅwPv -` s$EH$!$B|b8kbX tL$N1nrpH2I==X8j~si+E(9nܠ~c[@۔䁛'dAVǦѩJūrMOSyy@a+:bECxUDK ih+}p{W+(Z@A|KO2!%Uy4s#_ q#8첮AsI6dM 5^&LF-Nu2lδ!n'?C &}MJv9gbc;Vsv1~yu:syF1rB6v,hc[_~q8n.laKG|W5igjFP M⽹b,Cy_ kTŰی}FpG] 3w ӄazNV&cgO-hk/8\ѩff c͋٣h^[&4Res.=f1Nt>$VYZ-DWr/@;͈V ,7Xy|"d/x4PhNZ_8d0*.=8Z%7b."nڵdȸC*R٭J2^1B1{Ɂ,:HwbpKݓWqI_s4ߦxD3u&eꚚSDފv~]ȮPQ{Ʀ寛$ҒSDj.$k*y$ |NpLܥs@%ڂc4Ŀ HU[hjk 9<7ڒo欣/.lh^hK6ls\_;DOd=r5]l7*D]uXKBn&Kv;\ *U_KblsWgYz9v.b$'#J@sL%j5 ,qs2;hɯcQXoAi{`Mc]k`(C0.^hf?+{$n1s1H5X8O$zKe^ <n`e]MlU- 6KO(-{~fIjFOeb/_m]Pt:KK9uXw_ 7ȍ;]G ̶$*܁_@\Df Ř&+lfz+!fΕb=95{E蹦(~F]ZEo"`.Tu5qOU_׎Τ8sQeL**@?0cl1N?p2|b[8uBpQa&|E}WelJ45 ;V; KP!1i!"Er4yVdǽ-!*qh<7o}) 0{[wEy?dZ9E[v՛L12S8iPڋ1P%:\xܰL_HN؛#@YEod& ;ybڨ`v*~L⭛w tnF'ړNӭ횒!@Ddşhk; _UQc㙝vZaN1Pd%sz-!¿z}J*̋1(M>eS$m%,MC4}tg84(zȗ}Ii%B螋o@P+ףWNjy&BڍFnqib^2H}}0n7Sȗ`lR<_{5/f1Y_{ÑBD3Z4M|ǎȮ6N[!O_')p a6T>!2 w ML?TiL)?bvR7Kb t7RS+~(ܯ Ô-2MrxBO舴UoݞH))"Ɲc+i b´w՘7lj^љq:!Ayp>i*1d2I,sg00O/7D4?v|H&˴`Bi5yao DŽ_-c(Aw@;\-nrYtEurģ|S.Vq(ޣS7m=zʤI2NNËg3B߲ё>I|[ CYTw'f/̇R!;W ,!'(lofeÉy ND੨ !Rv ,ygd ׇܽci2 QQ|GT-fnqٯE%Lc|$ܜV5w[MO; Gِ4`[o\G_( IM - 0\`O6$c 1=(U~:D *w@ז}!U6l2V2ۘ:[8J7oyv3Y 8o9}U6AXxB7;ޅS&.į[Yyr]ߑb<%9@WZjk0FBc AXTÉ:χGYD^an;5/|Aʋiw3l,fQ9c Л`x2iA}cQ#-82 .[Фߦtc;PA1(W3kM-U6n2wXvqXR]a]Eo;i^-`2Y[+YA, dP¬UBVg8O%[nn!0YvuJ\R#V+JoEgRf؍|Kx!:_/aQ;jH³OUo0뮯qٶֱS-sh1ޔ['e/h gZcŹVtU|G+uKK) yؐ8I"0EI7aZ8bvZO jYAHd# ?|Q|h 7ˁ 7W%E0n5g?sQ{)jeJVd\a 84?sZpe+@[ELB5\&G dY sHƳU3rB^6܄`UMy;2` J U]`p8!꜃oa?vQA P5( B(&v6}{cڀChycE`xb{<% AЗ@š7pmb#5 [z uS<!RzQ1luH*5W?wz!Ѵ:t: jr o]z1>y/1d DM*d]81 Ľ}B:J˘Q0ل J;2ꠔh޹;NH}A3 p`1+]9_+3g2"d 0Pkݶ^ A")tV^QsII.$M+\ +'a;_91.x1٪~̼=ץeixv;ǃrGceRV\G{"n#G6~Bf.OSM4/BSZ_qz+sNg=QaXx6+`\*_סkZL5k^wٯi >/ R " ~,x,레+N Jnܥ~#_;O3-'D0>w'H?6?%C^# DNE[~~G2}c;2s;iӞXnᆡP]"v?׸BrcQ*Eo PKd=1ZkpN{T晩}3ل6m"c'E> r$ aZS2+BT@BtLXkd-dn4˱ZQa󛠰Mn:\9oM;跷\G}޾(٩{cZQm.nk_t+ӮV> 3cDQA_Q,zhuМ Y7itXn.Fa(m57Oc\PϫyؽQo $Uy`;H]&ң/$!F>ʏb ʏj^\MVm4P .XuEi$7TI]Swq捂}z$ӣ?DeNrUux)edS.I߭x07TJE7zIp%8$4Cݓlq-.eJ(_q]Z0-v"oqCGwhzAOis"Kn0ʥdw%Dr;&w~X )1#%YK!g?7jmӵ:B$0-K'ӐKYͳT%h3qkJѧ4 )zIќY{Cq#Wbo ζG }-E}K0Qd$l]y uLހTX[G2BV͏Apn.Me$:}7f\RND0q=v^/B} ئOTw q]2s/J, VB/ $ruS8\YyNՑ̠\8a0GnM Vdbӏ.EBRoG!z@O_| #4y4*,rqmM%kT"W/kY`x~X :7zg! ɷN⨾d{!˹ΰ~wB/8^&yb\Pӿw yY] NqD?ib!'桭Q@W} U6 ).A깊&a)LEÎů|;jsg3ނ5$Ƈ.M(v3焤<`;P8xwN8(n4cʺcEh(PKu0H.7xyVbb!TF)g}ox-f< 74ѡf_G 4e0k]-z+#S{k!6Enn4#WMa8'WܦSN NWNX.甬HcCB^N*u~p.Z1E%Fq595i`uCBK3 ~ddޮzrMEm)c /Ļ Wme*"=-X-v6%Q;=sm`75O*tQ0Ӎ1q]̉:F5/2q Y;>ˌ5̎X} qwY1|I\C! {R@xyDJT8: $(5"lhl>AZGᏟ6GqyZ4 hS|r6>?BxO& Nʄ'K釋͡`C IUiP tAIAxuLN1)zAeƟ2g]Иnb }=,L 4Q`f![> htgW7P]s!$nGO*lc<"TX&NkǗ3_ޕ6*r- u ?M=v*'IC5%Fݬi('xXYW+H s8z w^ *CGefQ/zKCrp xiBױc7%Ӈ&_֒N\T)iDJ\t֋1<덪2 !8 K@H1Ҁ#t)Pr?f5T6Q +-ͯ XUR?$$ l^$tO)Pk|w0K7>,J{aJA5|k-vxkamay?df8-Ζ[Q:uMόRt|28y G}Fx'" zs;nUwÃE$Ƅ$!T[ XV↪_ެ\U~\ZʘD<.@#48lg([3rй߾QO+j_ t]f^s8FXJ4tx*d9b_#>@(楏tَIK)jz3ȐHF#Ŷ9qDF,Nb2lq!}%"r>XkQ; I_'Έ.!ekЊMYN@{`i'vEh-GQ OH ɯ[e{ h34Ԟqˢb9*/K"!"f|˯KGwH&I<`fGmhxꋓ>&fKi#2 cO+c^b*>xŇo6=-~|G{S؞@'%upE|5Z²C_t`tuf?_y>\>|LX9yݷ&f- W.^őkxaJׁ(c3$p,˜rfHCG`?2Fh~ږ ̓%~wLN#,}]$Ӂ} %.~DzJ1wJ>ZJݷ﬑YH])bOI"@ԡ*SmzuҚo^t@TE.c0Ry8ϔՙwTRI,u}$6QOa2̌,=%Ya\ IRɣ[zPx=]JK⮞٦2t#A*mtq8P@t')HvuY:4^@mtjhpW[av~=ɾV ?(XRܵ=]{txy XP~^^"<ە{Ή$BDQd\Jg>%ݫ)ݎ.0VQP7Y눷ܠ_ ;o*>Bb :UuLSX3P%*CNHQ +xd ~?6~h ^oqNE?pV6N D\>+knԨ?%׀ {nr-8a$YD5/KUq]%ΩMϬ9(V9{9o1LE}5uŮdMä,?z"v?4PiƲ \1-8r#'UN'N  q^+x\;y!sv6xY'dx.Q+1(bupFw'h}YjMn2LJY#tS|LOEvDA|&W&Z$ҫxO!Oja^-u>m"g<x'4&KݯHZߟdn'+zk)k$Џ/Rp5%W1EW\igHSC>vbMU{'$?gNP\Ncً\آTcOJ!?(1o STkK}I@KO &Mmtݿ30zѢD1;y0H{ux `AҊ΀oIq턊Ts:?b9#QH2sH? peQ)}TMn*Շ-\Wh?;psGIZ y(2f"[.# * "fiFDP TP^U+̿0/5|4^m9f%l3*(QǟAnﶃܪUy_Gk^9DP5R^oF n~0 p'O?WUXQܕcfC"p)хj-Mw4]a'Ho4 v=2ŷTW47?|uDž6Yk n-;?5^*hNAG 1+ǐ^PYSژh~dw?z61`Dv\ˊ0~$dS 7tm2)SLL4'\, ƔFt%\ 1"]E7h7a|ђݬmq„!ilk DuV.(}|-B%La?IkN_1ggM9z)OY-7+D o?e7kU>bB GJ-ssڊ  L Oz Q:1P&=Ţ.m ~Ob32WԀL7Ѯ#H <>\8b)̷nVF[1pd|LGgۦ`]'zGh{7IC6gJS)nWLᡭI8 AR&.0pi0qWJ-4rw88ۺ/53+6ݡ0;sq|q'Uè 5-8F"mMɷٕkx`4+^AsɲGX= axu4,3x02@NOxC-3+(]ɰ8z'e|>Sa d3E$HSRp6u]XfS/B9-Ǭ1|̣|I<*i9z@[Fgv9Igڰ<pq`ʏlz>Z7rDEc&ۥaN ]K>IG[P^Ĭ45 @P/R9Ar{(N+87#џ*PDȌv\[ދvvZ{c#@ʷTPQJTgy>1ף]z1睍H)u"iE=M.ޏ&Fz]"dQ{e^rvM#ePQob6On+2L)#y0KG#Gi rq;f=:,mb8~ )3G'cm̦R %w;e>AufoA0%ߚq+9g@*>Y'đW2cW&Fƨ`~z g^5c!3Ë q;IwEP<|jOF]bQȮWrq" /n`P2yN?vv6d/F%H_^2#x96a? 溣$EFL'mSg# e塻`#Cv^F x{q#fq/aA0YL2@ ~fhv[oA/*,gsC;jwa(M&҃8}|Ts;y#W}|׃~h&pI<(1r8~'i)i֕xD&)%xvPܲA* xo,ӫ$?`C+l_fOS$'zN^ɠ8-1."B;I2%\ > + /onn!MiF V g93 (}3yn <±{!3szty#&SXɡkuޒCa.īѶ#Mq!:dѵ j-ͮ$|n3K-[T܈r6`[˱nG?Nw󜳏iU~]3dv`q@"vM&wdծRPm>(ׂʟp/M&Hojpc)O$SZn@&T8w岊ERI,ù\: i$t ܓ4$E[T4:QES~nc#t4~$lS):EG@JJ@</nH)fN{t>f^a8n;>m۟ `t ^0tJ4Etv7'! _'Ccu] Ը4ED]54p0~-m 5pl@xjk ‡7׎r5NDL͌ȭ h-j%h%U|~Aeᡀ ?:rsqDBJNcODWcG=LTUD=bXy8I~X/K{KpZ5Tn,}ЇP,$?+:.9)ĝrrgTgZ[ϳI_rW?`)T=E$W+rĆT\_~R^W6\620_Qhu|yԅC&n *JO&X5[򗴇?qςhr~ʤ{7i:ָ."9 o%aȓgF˷Bbkɽm>PJ0r7Ӯ3nVf*K8ws[*ZԾ1/٥'u?9H~Rl'cp~ΒYG>u _aP#XPG\ֹ9J{BYh uA>xPdGNp|X`<ս4 _0tM񛒶3Ȯ&BNT%ƐE-pn?>_rKB *OkB@nVܷHq&>TCliUӂh׹Mj, mڪY͜H] S3)fIл ]ܺ:@ZiyU j- t&#w$&9}6I}Es_\=b?-US# ͋HȵZr ״ ȥ.}YDR_p\]~Hw`$,Į{<ʛ:= Lskv޾DOB6LRkPݿƃiZϳ(cFDrAO3ga-HӋ"1@ob% pQ?"\8X2>ߗ5j LDAI.)[]ϼ:=ulWǘ{م4+k}FT{umɀfs~r}R_6bx\`n\l>>;\\+A6Sa.^9V!x (#(C{@3J% _0oݒ-kFG!ߕoOH,:SYsďLKlQ:5S4 =vƖ^0% 4|{O$)U *2=/!U١e 1p_/G Tڒ$;2 >. ɗ4vc3] noa2=i\h.eck Nص T65 AlU&~=>uH2F9Z3zlYwȵQrpb;oiX>l>>5?\&B&~0xZq%ļ8qUFпhs5鮄>GEw';T$+}$ʀVAm`q6Y L}*Hgrr̩ Eֈ -Xl4MpGShV_ ~[)bC]VP=\OXoS29hXd*8 8{';b^ Qx;n4⣻+&NDJ$Ъ eC ^]|A܄ӎy:x7p8HW^Z$ڂS\;1Eh;cv)Lfker63D aqhzU"gd8xPvW`M%dTE6.>L; 㰲ؽi&֭ms:Y_=QR}wyE?/2:Z;KEN)C": W`ϋuǓ*ဖMv  &Fw"pډlM~9irp<c!vdH@щwO!?ʵnP/epWcx١Ƕ135O-䨦C݉ZvwY lj+TgV _@N_,\ ֨ǰv*k/,I%&"u7H5 [뿣ZCVlrTIp3z::VB^\qrO^zg͂ iRC$7ᖹoqRA~ѭw/{U.$ 0q頕&,BCR[%Jgvzgee/s)5m}MJ /փ՝寱ۗ (tx$DV}ž똑\K9.(Q2PR]bvqhRwwZ}p~Bcv 5HǰY$d"*ӏ_%)AFM#I-]|1,R'O\Gۼp )F ~W;= I&sRe¬.T6KEPUX|O2Uc=9zWZ߾VM81>EoXX<< bVyTnfalXZ.y;#]j1!9>e5eIKtCJu>d@9"4xEIf9LN&[n/A)֘X*CU- pS{)U}Qe pf+ rjG_Wܑ0&*08DX0Z)͂qHvARxKv 9"g @#uP+ .}bFZe}? Cd;:qr.LhE C] &d=d:M(r)uૐjz2@ԡD⨏8r(*P bv BC]Ԁř'U0B89)A.ԗhNj@T F'.!)㘌3u,*W|!GVV:nqz4-(n,Qoa;!Z/f[V3WnS- YwQz^q(|pk- :iĵJ"F{7nV|j"2aV}Yj!Tbôəd|@FMt!<vZ7Xbp@3-2wLY5dc;TaZ񯾢8e{I^w.21RflA+f·HDAT){]2>2lY 斃:+zlƉM)֑Qk)s_pՖď% ?eӶڦ͂B@e9lgkFSSݒ^4Y2OGE 騱u].? Ii8z3h ^=3_KF:@g8j=,i_"(ػ,|YW*#2%1gKg]ÏȄajnYs i+~']_LMin4D5@<4TzW_&h H}^c% %xܔ:=u\va5}oDQ.%$DL1h{XMLm_Xw/d$ăo@j= mcÜs֤|)돶 ; _,9aEe)pa̅0=& zF]>hC>|~i秚% sy&P͉yϑ[aXQooom*>l>(\r= dĒE4%x[RqZ)%˻,Đё]O dV大E/BënTgI@N/ME4ڍi1 e(4}/dwO#R̊LQf~_y[ekl_:{b2bnyVk n$W(#OLfmk,;8 =G:J jZ{Fb8/#֦8ԺNVN А]s ^lSjvKd rhyo^`{B#t"/[3v 2YA)!v {]_fkN=XHJ16 eIkp@3R*UxT31i*ۚЯƨo1ã+$R;p wՕqaZ'_0'a6dF2"lms9 L5fw,M0;|wcG'uJaq\x[%(UWE~TŌ9x뻯No׏[ow6FsE%U ԉ^OcC6)UDui o#VbWZ_we'QrܥɊ'!EXV?%Pj| .sa.ݶC7 xdjeA¨Fun|]hiCHZ)uY7Y5|6QjJeIڢ"mZ4#̕<9rUzuM$*v0˭I!!V;>6_ldYz,4kngMS{TW(OM`"U:݈f}v:̗܇ ᨇAjζH\ցs>6W F{F%WEBZ_nڼ۠i=6Afu97k+MŀFzrrtMՅS֛sD͠hsr46[Sv"ӊq鉾,<(`K"V^"%ȳ'l>7q^-.bnj+v~y`倧T@ss+8vuXMjFEUB ,ykxtӻ:i@ɮ~ v7( k31sՠXI|J%_Wן/ P.'}6 I ib+{Id#_Ȅ!/&p7`",~ر[g6Dtk_)0+Т'=Hj3ÂRRq#u'J\f;K1{`^<;@x7z.@KBZ8SUzhVV+a3;9 { #VԲ0\kd%؈[I_ kbt?{#~dPLF% V2tXc#%Ñ99)Q'RGv_@̣à@xRr{CGV~{Ǣ:v$J1yl.x_^2:7Vc#|87%T=/)DDF !^WtrGF!3/"yMp%3T%&yx\q~1S%Vhh0"w4out՛+Dڿx֑ nSkCcRCe?O%{>d},K(^ܝȞpså "dUL#w@FMd?~\r݃#I`~"㱡$ W $:[e]q -fnaSL3bx5$ G1?u B4N=Bh>WT5}R,Y)ʿX,cN%FT-.uMKR2DHAy߀4Vp.[?dZ*}Tr`E|aIۥ~Rt=2b6Q(][B5i55`n:ƨm1E$t!S|)_;ղ;g jֳYf{/YO=&8;ZZ[шU[g:⩨=L|gw`Dr'&"`v"eH7):egs0j6kXޅؑAf"}A7#^X gtNi?=?5X9aͰKƭ*zoO "I.$ui< 7b9sǤ5N킔}W1eCG|L3'.fϗ2T ¤WPoڃL <XeH'A3*"Q& ^R _Y?N솘1 {*V>t ?J^쒪 4,O$+߾E\Gcٗ| jqrQy۪Oar=Zn~otDoy" . RGQp[)YFvGD'bzBOQZ߿@Yl+pvZD_`F7;Y>U |Ja 1 GAeIxBD/0UuԔH^QZm`QQn/^8y!g;IX1d _a<&﬚aܑm|J(j>o<^C Xt<0S5 :΂sT_0VGnݼUO_:vgΦl:Qk'ҭwo/-(ώjd\IR|@\]ک?-Rz q%Rc zXs1KHǾbv{|x؂Zd@{Z&IZNC% P _Y75%T^j’TT~ )^#nPR$$v\R&s,:+lBl7=ItSU=Hp0URˮJ+=!?CʼnJMI*>j9&qnj+mCufS]=ʳwIkvqy6tN6__cf9NyR1k^* #sT`˫6-#wVB^nֱ89b2Kd9;>ཚN?kɍk n8ɭe uP6݅4bRסs$kiCV2S.L\Ռ_%8"_&)ZK DٶP$Qoep?|],;HVJ8bCِ<ͻߜۉTDӡdT&b|P`Vժ2u(eu5W\p@ב.nkgAhn pxnQ`tpOOO3mY Q f$f!i6q5EU[RiDBlwA ]F N@ͪyb6Zǧ,M 09#K tI 'N뎀@ߙ~H9| y^;ZDʀE~֗ ތ@ sPpZk}F/`¬?62^(F2T~6xR!e74YGKéXn 4 !d`2Q`/}jx`wRXugS5t>j?w{K\ #\`6*zi-8篫@+vhPG1,[?wDaPP]AD.#yIHXi7_/-낤U啎/Qdg]Ҵ)lNZhV_n2 UĬRCAz|Q}N[Xe=~1\ISB?/$@.qս~ F8^y Ѣß6S!XE% ²Ǜm QiJ5zt#oL(O:S{5ZPh-q捚/Rdq4#!}#1Bï:.u  t9Y9ǶQm@C=xc eHMf 6wTzIi~B,_>IfZF]mgj3ݷHX}`_7y@((5ڷ_5MmWA=86 2]/dffлp;1"&VU_by;,<IT|o"M>3"ktb*0n Z;/Q21-:5e[Ҁ(3Qdyξ D͐j /rYk +[-ֵ@cV9ꔵ Ar θU/ǹ9:gn/ eĨ]%)Au\eTY:U3;(6piytx`Z24/ 0 KvMeO3S&m8yuډv#3_nÉA'=@HOJ)Y#G d` Ե=۴@Wqi |;2W\.RO+YtӴw8}iy&B R:ø ;LS5owhUL|21u8kvbwdhm1b=6#W-VY $lt"?@B>L]Z1+,ZzhtjӃXlQ qvTc>uOܳ)bza!Xyh$ʼnm/x% tcjTT5K#x ){~.?KZ܏sIfccR( \2٠/! I;a(c:چX}%.+D^幡R4 `\@Daa1).U<)ގ>7r2M\B3:lڻ>~9wgK:O)=:_Y]7;/t8^k;c)q@(t 2GUs ~{CdT9PC2oUI˨r5=F|yTӁ,|a5|=U9k2)< n]ʎD 6A3omR2}U疴4}Aw,r벽6o wJXu44PPS;:h|IzLxTWV*8Km?;kW`ԲqG/1nW|h:>J*&\桺vˊL]b;7FBhcO+BKCtDYJYFԞui`K xW?mX;te}A^ 09ʔf[<$+ 7' ViOzToI%ZMt#Ķ]01l|NN*TWBdC~X2n{Ig-r*=cHWPW)*,*q孚i_WVJ|z V"8%S %*O aP% 6AR2&Jn= Zg8#>9]ZUsm!5귘;N45IPMohy$v \O2E%]ToBL ʫ1pwփ7e4yrsHn-Z4/`!dȨT>j} c^')PJ^LJ'["Ԧ^m(aAϖ *H/Z_2taqSY5o' |OhT&bĈۺ;C]2dU"RmN{!lVV5F ۲-bן0~kEjKU)XQklb8Um4-3>X1BQpoՇ{,Gz?͐4We7Gh-Ҩ4E" 8Яvȏ7X;Zu~Ή75o.N%W~Ҩ';5ޝYܺː=/MA?$<()t©$qʑ8lx! usz~ivݽ3%9K} 8k~)B`yhFy?`eAC]ESDsY@xp`|@l6Tmgng]}7E 9F B4XUAMсW-`4ů/_e4 T5 OCLj"1Adi8H<gIM兣ɿ$ gR6o/gfl͵hS %[[‘BnJ7YFEIݜxX3rކ]ՙ|ebbw<\@KV4 q,WJ_ jmѧ+'^L?Wߥ:d-H9&LWt? /V|3*B 25nط:e~g[c*V(WX7gCpO35t"Kh품^O=V,ӻc 2IQΘ0ZWE+xRFA|ni^I45r 5R`bh;"bzB\hS ֆ1`YFuVsUFK Фtw$yU ?F(?3}ݭe#W-1ѫYic%]׮ Z t:7 Ξ;\R R:ăCOHtC9A9iu .9`\;( #.0*W4V{PW06,F)  EÌZ<顅Z/) TCҟH[:G"k$лs n8d֢qV AMZBwCnHȻ_&Y!H0׻Cpgtؗ5n8m`I4VXxH4"e4 p&!JrG(xv}}Wf71Xbkg#*(f5e ?x* [*Zo{z5H1̕h"/z׃:!"p^k$sg/7$.HhX p 9)T"Zp\wj!~Rsյ/w%f8&ctЏwVF5 C+Qu  cZD(-T$p?\qu7 +[| .`}Rg^T̤^.+` lKw%o,TD s.x=JI*gldT"&lq}eP Y=M#z0Ecy+w@ v|w*jǶKNCXnՉ#Q_T0hƇ|(x[R_x`΀{.tX̏7//3u5gQto=4 6>=RòS<TΪF̼;b4AiDBqyX1_mۤK?JH$PK/ggqwQ!uТ T4?[~[F$+!NĚ]jGIH18jK1"Y_l&n1 8eo&;_25.4Iq}r6A@VXUϬv'K3~ xWT{J_xzgC?uv2aK@WId:I׫8m}bD >b1TWiNO̝|@uuu$ F@f5H84;Bz%Ƈ4ǔk 1B+8.`q&, 'O^J,f'ö1E:a92yfB j + `E\jJz!=yGk':j!ޛ# ǙϏÔ tj#m“&s7;y,TRZf ' NH#=猜l +? lIߪKK ǿfV)ݳ7 |O+/Sl ,q1dՆF#9ȃbZ i{_N&tU/`D݆9>޴aܖhPIY\\;( 6D~X_`&"T_<|7vmu1r+E޷8(<|d z*"ȎLe^u %ۧkds>l~(iH;J9{{6nTW.MjQ 'ř n2 %2'5So:DzYГhjкkq 2=JO)Z`D3zؾnӖ^ppJ5K|4lYv&HA8z=M#$4><s5q(cLѐ!û1rߒ-Es?nN羄pomNx}fvp/ ;:]\3THJgLZS"et6Eo_j˖HklݑgH ' ͆pތm 82@270lrdY_Q0(-wS躁ܩfql % R2AX* B_̬Wap`=c"Enq;hݫ&PMt{_jm! l"^\&wBy||JyKYރK7ΧĪ"TI:MF4吳zy?b%NfVM 3Eاȗ@S2}NIrI _m8&q͍5^dA]ȗ阱#e; <⡊}/$υH`:@E2;8V.sVELiQH^d13!l({t&hf؞ݞ\i );eG S;Y"MF4L(]e/s*6d^ 񛜲2Xtߑqm[ۣN5bġIs%ҼZxH vJSf4u(yYdOhb[ihW+߂_؏[w(HA_rJc91us)-<L.*ԃ~?쿪[U.шBΣT{»թm?q$CNAn\|h>+ 6}F⥥;^-(l[]f~nW#S@<<XR^|Q ){sH ,X/>Cڍ$C3: i>@wq*WEE|B 4f[M+F&GFrBէMIj&=3MH` 2.zW dȰ6$4ϬpT؊5Ep:`{\ţ:D3oo\y0ȳ0I `2 w#fpƯcUM9ӤRrSVϿJ6FAgv3>答ZbF)DOyy):"ªZxdJdy_7!kLnD䑎ϟrF+vP4a((4<:&)6*|wV ¥{MF5z9{NFoˉIC[mS;U G:Yt2o֐aRgio˨Ɲ|@7WPy7AJ0&?Yv\fF~jCMAoYuon8J; lTrP+wO hgmRWΜU~$Zjj'r#Xn}h F SĆFҎ$%'Xn+: ermȘg!yfYFdeO#jfƃMjHkW޿r"@9d#^ ĩ-rK|) ׇd7KgT %YD;C.N쎁c D@mÅ-unKv,fBr91Pbga}?թk4}UMػDzG yT@pWqϾq<7Măˆ%37>Q>[=4407#Jz֦ڬi<*˒ѯV_ڶv&j(b,La z(yߡǧ/|9`@+Z[ ^V)ˢ9`M[xl f̅K,7Q j6>Mrn|6fѦj/A&$uazx0'=bƩt 'JiCY=هַ6 LV2LV?PJCz޻#4!՝⤾xŀKYW4eh{H jX|(UE*7܍Fs Y{LR`Fj!rȦqFG^!-yrK%3JsC"%BlȤs>|=H䫏Ye_]OJŵ]q0C0zlj)Ud"hC\??}M+Hj+O#T?W/# YO>k5tG‡.|&g^PVxrD,"o!)GcvCBBɱɂ;%O?ήQ-5ʼn*/ͷ*t8jr ):xK%{b^P֑-tiP;F>, 1K?C:@@^q.!.ݽXqEPDJ=x?+ y$Ҷ"tџSKp'Y}*OߑN8iqO-e֘)l,{@?1Ia͇s8<{X3%YɋذkB$ʦ!5ϽD֫\+)琁\Oʪ( 6>=\,?̫WƤ^M!W;DHyUib\0>n|kjPhJלhT!>qf8F/})W(XV%#ưpuDx  TI,ԙ?JgAt\粆RSR1KΛ@K)[yՇalr[t f@Q.f#K$l:"6y*!KiJH7{03OJb“]~Dm:k 엁@4I(a:ҹ+[qY0ltE *ܢ=li|;2pAŽTʽ0ӏ/]eQv6>o sgnZfrࣵ;f2J4R^L}ZAM(gR=cpl hΛcpBvG: FDr #8!vɪ%!|7<ʊk풞p(柴?>[|NfWluFGxqKJ&&~U`(fݕPQ;2aXdD+-;))lrfEcwR o1@f-iT8p9H^@m-g57!2tD^Jv_cl4t0Iڞt ;(!!9O_]n챏4sjUx~:e|P@z#3H|VG#c^?wVX9D!NJioq l"hRJ0? &6TȍXWo<#_'6j$66>4`f&{.ϳ4i*wꠢB*QWIa0VGLZ=cXdxQUyF:+g^GjN6zx?&PQfU~Rߜ[i%&`2} 2uAG=@˘NlrLށ dkû/)lj/\2PŜ=Ǩ3K7ÑH8UhSMޝ%mŭrҸC۟hx֋ $ǨAdwhaY %c,; <$s#qY*j, & ckM HAn+'2'T\wrIPBBIVr^dJҥM W0鏾'@|\wYނZkY";k&hf Χ(j52 NL^t;_PK̰a~8I?Wv!XQ[> 4;AGً'Iy.޿c~)`)x𛔸5^)Y8voSfSkg 8L3 r.I3BOOk:OZp= :쿩f90]J$P&F"l i.L~ 'VGɠVfVuiPX42 4%PajGPh ۅr.9l<<lEo%_LTh A/nOBr@xƁ&;M,?gmN8~mJX灨1_S -6#]\;VwVq] , b>gdGWn]lq)[ǜ>٬T3 }<\s%3>deeqs!Ɠ E7jݨ,b(6k+#˂dqfjHG΂<]=u\s -_#Az/ 0 c> j3u0ɖ."; Py%nthb2U"l[yf_-4o,Q&]3d†hpRQ'-Kzݺyb{\5oq>}nt2 |)vfZ ~tO5wuc u /b%F L3I^d?^/"n &7Wf !ym ^.cuyӿngEX^j&Ȍ>r|؅bkۚ+5Lzoq`Zd ƾ:ܣ^̡ V?EvRJ!SFoj]#%t/)ǁ;e`X&(L >C![Abl07Ćκ /.)ձ{ǂFۍ9s[Oˡ4ԕ>e?I+ܝfC/Lf=r ΝH;Հy%F砨SFҽ=N_Y{y6KIlÁfYEiFr]@ڬQ\8(Np?~Y"Jw54>({88,͓7̊6_w= D^˘Hü&=S$eh#Ӟ.< !Sg^9C13@:*7_Ǎz- @z5D6첛yGs@8qlړO|cOJʰBM\P:h6p ;4Y @ZWJ엜v}"k-πPm̳q^E1NE{ei9MhqOUHyb@)[0;r2)h7ycEc4wc½™zhGE#h^0G ڇ`֢H)W9-沈_7{rی'1xG@7WgiBMw>kY-٠RC/EL\ܘ$zFQҙuLJO֡Bw7$#{}XA?-QWիx X'.n:TTM(T7j9I }P#Az8x"1B]diR]׆r (/sKôo}NA/2q1֩ eB=Gk\V)*a$)+?&J%B{ iБeCMQ3 }hckq BPင'AїSP EHpiRQ^n0UV·} C5h 1M|Af}rnoϬhv/`d:A|/CNuޚ_3^& +O{P\5G&@,h佘θs(N: „*gΉGaSBz+pP; .z5߿GI3 (gъktQ\ۥB.ܛ~JYS]=0iɬ w'f|v]ECd.7bPxb\[pOde|q `mbR<2@;[ɒ1$ٻlFk2ϐÛi0(Joȱ}@s3bvb /}}}!2®Ʌ N~%BBߛbf[Vr,E:C iv E)z`x*􄴐)׵3Q ˃uC DZ蟧, XZf&0XUw&5{zXsS7k`CmiHWZ>S8q0=d HavoƦ]-Ya /gݦlCgnMKMV)b;DqœE9{LT2kuk}#{|˴D5{ [֏d(,Ÿ(+zqf/SO/T+u/zӕq8*ח~.Z{^yUitֶxOm ZzVϣ3}/C @3F/5]C`oC T"܊(+߻F=vq ԈL^,?jĚ.)0h SQmͅCQM'k OBhөQ f?O>@œwAr(KZ( p߷ Z-il8I)Uٞˣ2e،yQ[* >xK@n)Ddn]3.zc@P#0 9Z￞csk>,|݂E \ wz6r3) q OD>ca6/۴-^Uh]s6bKKw_.gfg\h Bc1 ;/vd=my%MgإH{-%V]tb O %3hFm/mKuaX+爌y+;?ohUNְ1K9CW$D۫ ƋB8H b19j+]BH.~tP:czӚʎVZat"j^#ߑGx,5mZ_+gqovB β⬭Y2g_+%!v T;24AZWs'IjpM$=^"4$Z#hpG5h*Z5s]sˑD%=V#z*/Kl=VY^C1+FeE[4mp`RgJ :%&F!#F+>ӿcP̎ԶjӉ\n; >@"Ly }9Ϟ8 EɃH h6n[prt: `\zᬠ0Veb1}LiMkd2snF !$Q>$.[8I@aԼo))]Ar9mTԐ:>c^U9Uu&vՅgnA+h\ 2yD @j#% q ~mA?挖$(ۺ%Gc+'"),AR ک uBΚV@Wrׄ=!W2O`! #d@iǘ0j=EU5ATQtY35fІqIrxJ^tۿq^ۈ~'JHN'Q}SKdq~ Q sKintX'Kn?ޭJ+G&N2#Ĝ[/K|Dֆ}dXgSQ+w?X.oFy\pwhӪmGR e( x- ,|$7o z\ ɘj4p6es qƒe O0״6lro/]7*+g zxf}=9wa4T o32q0i/"<3Re!õi(EC̫3Tm_YFt^FZU^dx &L{tk7[mz{|4dv|eYnh )$ {Ju' nvEpwى.<"_l ĭ>CKƑG ɴdS;!JwoGZ>=5x:EcChg| fKKu/h k >Q>2*^CF9tC/ٖnX0bJ~oKUpi2}3\?5֋tn4O^dp)9:Yܪ@2\uGvp+/p> a&39[YIV W`?. 9Pnb=*7Wtj__Hxujx>v1'L#_$bȖIc%DEpm[}rNN~:y<05Ei%+jeKlHDx:8aBїF$&dwm)Q-vvh_j Q]Z^`s?r>A9{??o[Ý1ͻZDFF todz %+"Q1rMV+ʎyFXw΁K2eW{Vtiv4) \OB}1rfc,9-("-7Hn@p)s[PN1ƤW] TБm>c[JA>&O #ݽZ~U=wXЙrE|9-25C6۵cS%SxߋQ,I,>CWԻWu9TLȵsz 3J։@+Ncn5W3j6g$B)'jZBo6~U[KڸtkQI_[dW ZBmh&Cs*moGK`߿+(;}>kL1Ǥz hF%Mq%D"|0pi^"`;dH_r(g|\HՊ< 0'5;h5 xu=aJݳQ?LcRJ\|B'[5< ;'B '醞UD)I*-jRYm;_$v TPf//ڏsRsA 3ܕ3a8a AR3w8i $aZWTd<;G2uдAg^ϸߓ#0Tb5a<߬ g5ͣ~.^㻬Q::ض_p폕IE2 _w7uI=ȫ\$e][ Up\ 79j|b[@?,2nW4| G ^"ʕk@KBsuh8S XZgV#@UcbFD*`rfzv6(kla1,Pfe*si49p~ג244wQ;~T $6Jfu+#zij>^=E ,_Y JoC%!sվŒ<|zL=Ei1|=dz\mA/3e }9qcadK97 "p5yXn~zQlᬈyƼo[9j4wf-Ҥăd$c?Pյ. *q,I}".MvK4toP)(2i m#k^cf ު.%n_5H7*糭l]ESkX7o3aX+z]߼8).]Ar*[Н2Kr?&zh %& G#>O_:ha>N8́䰂AE[Nih?Jc|EVq7 J?m†Dy/BkϮN ZxisKq)P8 u7hf]_>y5/98O gB EIS2PMEFX68_ڪb!g[D.GX+ >i$>$t,liIx\RFxK1k3Mڂr_J[5%|T X jv_B92fFU{]6i77^;H<;cMknLi+I6f W9F2?TؒD j);>Ay2mR~iK=%3+Ϊ 뤂!M~qAXuOĕ"F <xtSv\<°Z8'Kz2fP:p81*F[G$Yz]nM9U{1j&{v@32 )6\}xhiMuiItZ8gdaXL-^HN4~E6`x5.݀wd L5BW<"B)M:>7ORv>|bm Qu3SM(fA$xl!繢xc @0UOt yS ) Y| G;$3:W'L]s)k{"ݪXàul iOT괇JZ6`>YگfD]^J2!و9P,/KzEyp E"z/uRɬt\t Gv,)KD/Z[twl[QWߤk&tݒ JxovG4Fs7:RB(0 5`,쓖A xf|EIF6 eq5g onӊh?39CMH`KD6r}c|BCK4?|?(n6c¨$[lyݺpi@dXYg HT7wC|JȒ3CqNeߙm?+f7`W;2%y 1y eKl0.Q};*,<9 Og֡EC,hk'0MIlzV\5f 4"s^c;tV(0RMk4,JrYZ3rl riVO_OO-vhkJClxE U9uq胡 :2̮+;FPr4YSy# =ݖ2r_A6i܊a?!baNI-$pog,hD!Tqz?O{A )mՒ̓}9 r6K`qMdL_ ]B}ܛkt!esF?HC!3/Yi7T PF$j-vfB^rݟ`\;hګW q1P:I ?ȯ/󐳀 & %N VTFsu5z<1b&LRq ӧ<1+ԻrCKE~ģ`Rp k}<tXf tڒ:oxanC~'}]%|*Ϭz|#7ǧGۚCaKٕL G sӬUb_q? 4+ "^Zb.Ȓ朤.֤ P%E*~H hk|v!I0pˑǣ쥍FK(87m:B, VkF(VIa:|O |^m&V vw^ %- IddO&GS!-lD~{$ /]N.NM0%]`LuܠAx۞HL-3gh?ѠbphSex#:zcXqeAS1yS+ڔ`L}>at0F`VXKc&'EXs_޺')7pt{ېo}Q ޑ}AZ#Ay"dBSFS<" "pOUBωh M+0W4_Y>Ѫ'vQO|ϖҊ*TQ$qjVO巯 d^Ok{Ѽ<ש̓Rl4,V,$P DK}>ܦ d5r!gl K OLӟr)*FF|8 v2:hQc8] .`ʄۯ:}AAI,r߻n{cuN³Ќu{Geĥmَ@[ W6$xzK+(DչdeԮH"`}a6@CK>pl)>4ؕY z!WahCZ .dv<~xг%QMu4*oDN/Pd־? v#Ċ2A%|g!Z4h@~ %/V:$uGmᬢ@j,ť%:8mt$.QovaᓟYt xíC_dhZ$po,՞/ZYƑ^&τJTj?B}@b\H! E!tT:~ kA3%čX}h7ODG]G%Z'+f;ٍI92^+xfF*'6֕]v'6wƯ|Fi 5g"JW#\7NɂL; `+eqNYFF R5;@+zIk\̈́2?Qb\P=C/+ _[WeIl]6*zIH⍓ o^μvtwP ,[y "Jͧ-,%Mmn`y&Vj[oxq=("dj46]_,ӯw#_ݺ\泪JMo Qm$-n9(,<)_c~,I4r'm ('l)6w5^Ҽ%7&'SI30bqќ6_J޵6[RO{ >8L&DW&!%-ұar@u jybCn W-]L$51QVvydB>~ usG?[=OTܜLi;OC=@jx}J kfM lddDG WDMP+Ā~É/ȏ]3ke^*Y$vI*QlbV&vi(ɱR D0xz=ݪ}R6#g Ǻ楃(V7Y+= VTy5~`\#PhO"cqI@`B]; u"6V,6@-p =Lՙ<xs}qaE(q`'^$X #M&6╡z 3QQacƚ 37SNⰭw 0NUQ,3Av!\x(?Rb|BdG; Sqܷ`:Xj I3Y0w5 (TmϘ̋kel,: Sڠ.K>xr$oH(kÑ; }GQ~Oe3Dy܋A!@}6+=`䉟s zBSzIS0x(zH2x$ [9}ejs1)PȻ*Bry9#*쎰m 1"|B(K3v'r ŖX6&kD*p: 4DeN,˜pZ]+2KnQ>sB:\قi+h:[u GvUox &Y+3QFJPahʁ_tZ!|2ތ(}WBkU=Q u:* =jOvӊL[!?ߤ9GR$LܟSʽgHod/4 fcJPIl2ճ_H& UF߮GdE'A\Lےlq/(sWi)b~g7 s^Zp]&sﬔ*&|A._5"iج8CkܭAB r})&1v^_~)=Mm2/%sqW' Ep_{U ( OG`@:ծ$(4 4K'%&ɛiغ^|qw\f P57,6CIe+VGS>7ީKi|Hkiy!l]Dj3'z`=b>+fX:wWzф S(zDcCF1 PSi׋?zO]=dN=cy.ȤVM'|&j2t"V 9?`h% _eߕO%yc'EߐFm]fisd)g|G#/4ć$ # IYx/Jpa9鋅^h{YnY]koo??b5qy'%vz,|hv4IʔF7S6V~<- 8JɌݢWՕ)\aKڗtZb:۴pDDAM5?.7L} jhL}g~"$ !6gf[1s>NTL"R+kn!G #",Z/:{`g ?vێۗ,@{Z2+[p, -}Р=Mq0@Yf-4NΘw]giÀlwxnȫ_ 'i#ev_o}>^B)gnVׂm+fԵiǞ˓}@fBCaҜO:š̿zN@}ʳYa:uL5bqE% RhOW`-Ӥ$Vl-%u譚'ze"`xKR" s8K46t'gbFs^ScԒ ; =BQAzGFb k֗ai#[YT5ע&Q^))ieAY+5\m -C6v!m[%r=r 4eNNw+)HU[ [X`}y-waۻ{9 zwXF',(z4%5RѦ3E `qWGeQa^uc^@WŸD2O?"V50Q "=^GbɷVD1%H ]vC,Q-Tq5 bR0mvO*,MMۊ]"@zNJ v1uh1q[ҢN|MDar7ǢWtFY' XE< {L2 ?Oc lAn0Ldž΀ba%fC*{Fi3)4eeݫִs7Ͼ4;ylBedPbcRN60Idd䗻M"3%|u V2FR Y_VǒkQ`bq ,WYaGf@^?m,S ^rR12;-+n+*ԍtfYXSљx(Q*aT΅ܾ2f)+Յ~0^m1 )Y,[<]ٮ^5ƥ̔3̡S)-q$$s7.ɨIrܾZ!c§a`>C)qĦ4`en2Ew_ ½lk42SmbSgp0܁8a4Fr5{Eh `TB~Zf..#@[zAł$`RsTmӚh)ƛ#'eDxze?h|u ì6uHgLLWeZCZYz1DV 2*.4.݁V5pL?H]a_$ Cmn2G8B:J87u:eQ'D<$[w^09S p/TOɫCx;y\Y'x;Zlwb9fJ (IrpV / RZ ĚzpN4jRouFrGPCT," 1_v Ut)D߰zH"٘"ӸdޓVPܤ>֦47Yg_(q=6}clҺ 42ސQ[;H $z!JD)mTH,|ȋEQ[,}})KGb>-``ן=L.[7b4їLʙ,Jӳnk yC$[T=O}'dZ08Յxl*Y-X(.Ҙ\EY@8qm7}I{?7[JUuJɃ}ݭVd->p0|ro"πْL6U˪5n7y hs ;@ FZߜkG1(+cB6!J;A NsnSi@ݣ0.[^E8jjGD!m0e,ޡ/@Ʃէ?BD7ئO6V/G&WPCeo[oYk3X)]4c<2]k`b)B(X0"ڽ=2 T? GpZkٗ:v7CSs<]K̉I$w*NZDM:Bu+=KP _P=ܹqEzjW])fGP[cc?llrZLH.q>S . ]=t qyX3S (Fzvy_uף{&W&|Xe"JT4)h[R8A>dgB)x.q}ȽyD[1nJSff%'%gH@,盉w;~v|Imݎ E (=?P0S,'pσWa}rXoᗝ rYOYދ=FLi:҃IH{F>2^8͡ Ϻe4`w]q]{B9سڮRPPj =c$lߐj ϽaL“QP"4/\ FgT/8ta|>7lAg|d|3v=L zc I} teYԔOx-}Y;9OTvI?)?ۂK`>Ke 8w yLhpXo߀L* jHmR"8}~69bUzQK6z^دH!EM%8?lzᱰC硧zK4DFD1U2f}%%"pfγpؿ}3_AWVA<͉Σ M~ ;kQˌ-$Re|ur/T/(O>XEeT Py> kNpRF!C4 )TifA($e=F xyplN!v~wgX _BP},t=#%jX{3*{5`|w4UA=^P1]qHutnTW2bl$g݄LȽ?|6EmхFA; f{HLUPڭVmO[ 24#qDlJeC:y>h:#.AOw:ЦQ`@ǐTf1.ʥDf ˠDd?]gqFW :Tvsf;T8^#$gȼ&jSov\>.2f`U^hRV2xVXC<eр"`Zq'5,|uطG="?_/\eb"RL"G4o8[Zhoݷ9 OTqw[ T|ĵecl[8!I}(Jiwu{a"zPL*F1s%y=$|ڞU2\7Z'q(Hـ`LJ&]Dgl:O6 " wަ @]G8[],X: O??m] 'bYgZƨPX6H秥le9,K%tmGH<,ן@h/aNTwF`].;&ah>s|PdXAw%΀X.&nkY@Tڇ2E1`,:r o02oSidLJ~hQl?Yߔ€Q)z'E؃< 75js.gۃ97fhL"dUGj}έ3A6u;tOtJ3E7cyHt$i䄆 zELn0FO9hbWq3dJtU/e<8~ SDt7k8|6cm:I!?*姹2d]n0c[A˲X-[g-wOޖZ)}(=L`0u4ʜ".0]dX,_g ^xL,F#7?o|8>4ޫPrUf%='Ʀyohrl(8D pxvq\]θ<_)sI2)8=p5-$(X Bx^b\Ky:,Q d }2ZRkT})>oABẝ U藣;ҳZn͌&נ$ }&z8,@3q]tE)dG\`~}"TN6ʂClp:ל۱=Kyr){8p;Ť=rb`dq݁tGmuVBRGPF"Rz z)zb蝬n<*9OM,! X2#=:tzmZ;ڛg%?XTXOG~K0dzR,LN4r"Ӎr뉡S}|PY=5fL t1>, &`<@Ķ6ŤN1)YZLO_֍奃Ȥ1]|롲dq{=Xi{lW4&}95Ń\|A>gp|%OoX:(Wm=7K=56 \Y~>;`Fd~M[y#ZRth.[^2 8!YmHazvcўVǰT0f Q"W6N-O+{ ܳ3lW,Et;/cHT^q[]Q^u a vvQvDpK!l?cGݜ%@<-I$tn|O5,^0;f"O0rV/+gkSҭ#e!o9bTY'#BdI3awSC``5MpՐ~FQSEq=Ţ!6x>41vULAmܑ G C ouWM>d?)8Bn/^ X I?`7 |]PhG8ly ]vIðj`@oĩv +uJDP4xU E77}ieR;ygT IXJ\:q毆ݒ`zF4 \P-|4Tl$9%l~'}E1tttax~$"{|tTt OZwqj-=j̓9 BFf}dh+=1j< CdJ~A-/g-{hd\Ḱ.^D$='ƭ?d֯XI=guu134_E K2)J5l\[hx 1iP4>L`Թve8I\ 0. _$E3,qyk#[D`&_,(']ǪM*IxuoRC*-R dwn} vS3)*wr#X6 00n%1m6 8MtK(A{1%V'pH 7Wُ˕aRRF 5S`pU7x01-0D1(ë 83Ff\@緂?!XWp2t 1(=BU0Ѣ"xϨbɹ/WŚ &$LA` !-է%Zڇ]}wé.7|.鱪d@t1Oo[2ySDNsO=Ng* }k**@@O.Fr`L)nj2 `aTzpS&TV~½nM-<Ҭ^"۠q*&̲㒐gtw^).Ё35 \b҉WPVJQH{ ;(rChLF+q|ǡ%=o%TCR*RUX #~»m߹";SSwB>sfu&S, DV*ڏrv ?Cl7^o_"e+Tޛ 2yܔlssLV:X6L>}%s;< e F )P% p"D5eqUd43`g"IJy2JUXpfJ}Tk~ɝ-_9!TDW1)4<] Oy|l96:xDK P'⧿N H:rOA}qʊX[ Wv%CkeK4)(Yda܌143d|]G_ TD[WRPqߒt 0?u5HE=+7 l v ɀڼ"a"g]SЄ҆r{P @ҳa\z{|yNfoXd>R^准vW5;QӬ 83E d m<1V0D  ' JrdS"]/7{M-lWqA+e{e#{RO•ܺΪUW J',uvnjE0ti raX]>x671)D-?1|&0E20J̏k$' fn`iqLkŠ?9-3%z˾ǚGĈ2$U8'?O~x.j]E2l-f"x;kqQ++4'rd慡P!{p[C6̖Cуƨ&zܲkk1½ٗH,_*ՑT +g]:QuW¥< K})ZbêM!%y\{7*ʰmR6U.c->vV=ӍF6RעJ{XGbWpN\/l#FedyZϷlCf{QY%$N(3jxhnS'y*wYXXИN~*a*D#Q v=Ŗ`*b [oTftpT%i\sB{˹c̱9{-Z{]AlRN1pcI\h5itu]d? |:NJ=6EcNY>3dY17]qlr[q@$BVgJzږqNBAYbo,hW_%H2ryr '.1< r 1 S  qFꑘNqPowòVF ɦ׭}anNx)gI< Ňǽ<.5zxw˹ 44#f}IՀ0H=1Z[0.%qQџ>`$W{\=X(Rd$c{-rЅٷ|鴤 { >ZYtBqOz0w c>o!trT89~awoƭ8b_)>Xin&iژOvHbSg9j!g%.ilYOjqd^tYcZ7* IK#οnC+O3|THS%k/`Kf?:*$K"$ba-c3(|" # dzd LmkGQ$)/'[(2mh@|i OH(}/)ac쥁‎dN-–X`Kz=R ; ?LR]mˋ5 PKMt KVdv:}2Aw"_m.7 V򝎚K60CT`QSoi\2W,5nJJ'(2hvGUW~Pr^0?o¸^nJƑ_*{j\mJckoSp9x!Gu 쎑݀XEOF.IJ1]ŲVN*)U5V OAt[0&7dj2\dz& G=hgowuFiJg}h`)(| Pԏ%ֹ4Nn<{YnKw A7Q)io%">&O#Mޡm+ƤOzs|Xk\w9NthF49!/}[Z|`0xT&@iNJ#J%{5Sba1rosN)i?]?^ʯ{vh$`~8_´ÀvkT AdL Ժh0盲KmylrIAyA^S ގ|*$>? 7l4 ҟVhRhsse:`BhOi t+rd=}p`;5F^ÎwkUW?T6T ttV GǦKwӷq/ָv2}Il7*ϗ\8F_b66dU=H AlgU_f,.OM1%2GkKf自*"K =tmTN>1 ,uZgR-%ubVfm,Mm-V6 aCkܘV}= y ݲ,ͯx/}ׇik^Z $EUIaG)=|q\}0j?+Po!,07ѥ8{m{wXc3QVOؔ!nSCDbq8ǛzQI/D5Nƻk]sߗ޺Į1qybW %⡪ogZzr͛6h@s)'3^w@0L yy+{:`X tjD SrD0W>:s<+(4\LC{Cj*CĥX`@ZgW8:J׮pK9/C&5RQb>pkƪO!jhdxdA$.EqY)^$|V!!w{ }#0~ʡ$F 0vx׵nulC2BJ0Ig2:}%W8Cc-4cKsé]-,2#T4n_79BCJv]$_J}](/`r.yd 5|VO\Q*Hx}H l3n6akƤ8G6L!҈vւNxP<崰{93J9[++ =OΣ] #[Nu!8Lz1>b䵃Ge##F,_[;u:s6)8 ?!+uNjt2i~ :Gcf d Mzk-%w"e+- #ƀDuo<\ K #zi+w>XdiC+z$zb?c\KltZ$jG8Dz-A07hN ?B+{4txbc~Q=CoY @c${]Rq { PWVa'ؚ0'uݴI-7]NYgu̥eTVEy6pf{!uUӦ2݌ Cw$Z5݌HIF׊!٨䟜JS:ˑr)* >3gFH4UsaE߬nkټą(8x`&?F AUq$=4Hr!"u_`9$DDJtr_SSe08$gWdkup3Fd({hyOOdw;m}{fZn¡8U3l}K|i_a6c[K5r3?SXMQ0 :~ңC|_u%шӜё{ k&sóq& F]'zt:`% iie7$am6t737I g?՛l)K%Aǔ{ֆNuM/=/ 4Ƹ3Hϑיd"t0kZN/m?Uk}8×og}Fgfh|i0?S~ė`DuRFC.Vh=\<(V .Qц! }Ql/Xyj/TEϒIjQx$dF <_dgwNj,Ф?A0mnss+'w%hhpriۓSQb̡+9Uj%RL:q%kJ!VqzD1"#=O\"c7 n72&9@y0zsB:&@Z#.Гs끉ܦ]k+"ė̫A,v@Sh-~o&bIX2}^ ,/^K|!P阗}q6̉aiͼ8VR?`xԳWN!8%xZzr}>}DaIxͷD&8Z/H5 V ㎾DVRluaEi^Kxx|4aTU0JKęH%;OJmJ-G<$Rzo@sTu-x$GJa؉LMP幨ά$50L*L6!k0AHCuRZhaܮH{Oʹ3!%'/=d \b_|"#Fōɮ$vS<|B!nR!k] כqP 5Yy uvEL<㔊v+B~ [rDSNd 2(sl ;/هo ~^@Ů#fS$AZgI lMx EDۤ{o+KN22hOs`N,aOׁ=!=\1{fp2vP1*heqH!AM 7c=4*o۵ \INX3[|RSK@__gx0Jg ޘCsZږS^jqYҌDz?rGŜ5b[X)ڹJG61OݧbNz ; f30&SŐ]΀Mlu6Cmܘp5i՜UEOw :P#YPZAC~:T#DJorZaL( "|lAF>s{W'JAKRg[EL>̨ZC@Wd}K蒴;Z=avmv ET}:53; ..0+xQIk /nq0&d{jHc[Pښ@=2B$D$&9o.ĥpMƗkvw׺NӜb[t8"(/$8Rh/}>KLuHDo7w#02)UHR YK=j:jab蔕  )})q9o1su>_;xU҉UOFL>U4r3 m7 96a,Ҳɚ}ʦJ@x<.o\٦I8EW'5 ~z?0 IGd-! ,TUL2ӽ*iUcD5%FwcCP@~{*.&;;YľrOL@igL]UQ'SPAfPyA|3O͈矊n Ue!9---6~4@R뷭ka{`ҡSN:N[e ztIڬ(њK٘)ƌ,ψ"n7:lyercrA\ I)Ə"" }5gy y) D9B* 9"ʕH y~o11Lb&3EO vUWN$oL81z} HJۍI]* xfl[>P+YO봪v^ば1 )|O)EXfC]tu dd:8S%rY@X$g{\HZ @"a75qxUKڄ_HB@ )no9X0Gi [wT!'8Շ08 ½e$:Z1UI.AT;@+fHݹ>-EEܚp  #ْ |uUBfd"tg0Ȇ\R/pKL0}5Ic'fCWw x 5'`IiM,d Krź/vGv7%𢯽>lώ D⟲yH;zbͮU꼶c8,ҟճ ]R&)#7@1R.tZO/sQ5(+;zpf$xCU+c0X=X5&IJ)y=zW{HvqHқ#SD- o[ŬfF,ܴQ5bw9n{-g->Ƥ 258YgT=3vˆIQ>HD%ȖR q 8F- VW h{ ;0:LuqZZ,xGHgnw7y|<ʸN,Ă?K.co)j/f9^1tBi1 ?ˌ#˹cvDH*Yr#šXX026*H*/c[қ?~v¯“?y>DG㉤~Ⱥ.EICQB8 «ȱYb}[GT3je+pmU.*H2A)"x?FQ0ko-OY;$f2~/~yVMn_cgBAFy|XIbBS|hҀJ5u* % {j&|erMYDEbkwLLz(*E{PW[\z+읶Wd1 ϏR"}F1ܵoV+ma1tۦP(p`|cZF_ŲC8q/M^)dρmIH^E\:G-](#͆, *V~!xNLqHQ{˖Bn|ۣ)5J[9¢L(7家 0\s%^3iR~iZ;_hD4Km?Wz'p+'fHHOrqDBjH>faxav$ EV)7䳬iIi]6k“W)`L& 'L2D- .^p=6W+0OB:nXWKM\{C IkzjgqwO -%ȎBd& %^u\ |LV(Q$6Cn9jA(hpcX$S)NmC& *Tɼ0&jtQ (13~J#zQ7h\hWCBPIm H,3EVL#V4$jP'͙uQqxA,p8y8(Hkt׼z[R4-̡MJj&, m}Uz 㾾Xy19a ~A% Rp_`>1d!4r]2߈PT0AbCޜZdQDp6:LhPz˿< ݧ+(EaledPvNy/@}r^0yFI4REI{h63Aw^A0cGYmfc~) )7{X("ugU\RFu@NI-39\|Ţ =wb0*%7B:24F:T> ?'DCBؗq/GFꧥΟ:uDͥ h\(^DVPim[(\"x[6٭-/> yZOS}3|%׍ϦzV43/'yGoβYs&A7rܿHRYC!r =>7P"䇈k5]8x5KPq*fW8$Y毓85AlZHDٰPӑy\%$*rZz[re}ʗw%Y IYw"BfK n+fW^˸|Knw^#;DDf%%m^n']HŜ'*` شg5A\x7p$-Z]7cgY?5TkOqqsJ1W ۭ; 6L ayNNg7&S3(W BKҞQ1t܎GHAיf>SV=cyژ[phϯ]xN2Q"wI+nAqd6+i+ԀYҡQ0]\+H*jXئbO&=~ԂUy-Ii6P$)V&/fڋ* S&PZo\ TXٴb@*WAvjDD&HV$^eztqc@&~kMYBn#{Z0g@h<^_$Ε~3n+tTx$=ρh2ٞ2N:BA²p 2~YQjg@34pu1_b&#$FFJiȐǡ0aBs "pYAPshV|*T. cB}_KvPk>_9vTU3K " >J䷪P K1哪8$?J˴/ @X+x9A0`ys32?Ga|vم3NBX@X Q}mqi/T sw#703yb|ao_/x;W&+yJx=Rv kQ *Ga*Ц~.xu=-0C*o [B| }pa99b4*4VZ\r57o.Y>:]Y}'TOS+RJ1o9R(j\/0Y k4(IhvXDŽ1ԩ[dWwK}qQ^Ρc̋s{,Pu\_v6k_Z?|~˪͈ <75vL\K7JyB iwD-HPȋ`vűq9;IʤW|n=x_)[Y>8>y1Yg0-XorN>s? )VNmu̚W&J_2qWg\wmsD3Zwx u= _IF'XO@ 1LXWr(\ @43y1+ޖ_V'=1: Y›6c>R"=u@j}wqEգfTٖL[M:Ռ6^6s(jvL/ѷӦ 0՝1!5;rcCx6'Qn#oj~cL*R*̹?KD ȰCj)Jo.<0T?j]' %(4nX]VmT,H4<'dXD>r\O8H@ڬ =ɗ @"F]c^j*g_{|5$l `ER~M{COUE'܊Dg`:pbǮIh٪|_GpM xT$S@{ʕoDYɠq#Q_+qߩȞ d l_ӭ3Y/EtDʆV,T7tFI9_CŴM/z}|6͛q9Y:^ڸ5 C_X4/@H&×]oJJmE`6']x\f6W5g[հ_JIPHr!iSѾY7@z'-*˭-r_aD%fsw5PidYρY@_2aOK@Aط:f{WM<BgǗDQ661%1,;nCLYgXW.gM:݆wA5Qx_uf&gNʙ{`L lƕOd4Q$0l AO Cf μU^ J$s;%36Sm@2Q&fv/)J*4m@zY Tι첗|6]rC ul)$s5!7DQE NQn`->)JvƅЄ(<<9+M1X`m}'BDȞ 襒J)1~ d4hyi+ƞ~ & #mˆ |sP9#ܣ좈RJ/B#6QFZIϼ|k{=Ѩaj3S D(L%$Ȋz V>QciUI/}WX,xPt#w/,g̈́ThH΀i֫|] iv])H`#Pb0 273p_6Ճp!=e:8XV N(3!a3{9g,$z9)LTTwfV`KhOۢncaܷ¢Y߰9Z'h\_-f=蠘3amGH dig6߹hnVI(i"*cnnEkvw~[L@Dw[ P=T+QB^1(/#DFp•γ$\HM^0jګbsG,/Q<#{+& Y+}Gd8ޝGj[2ln>t=4! G=8eu>:N!>‹#n-^OBGʏˤ Z?Wk(f-U3j3`ZJ5c+Npp`[F,E@nzG.G)W1 4Wg/x[P'D;dqӋ nݻS L;KgPmP䑥몫Q4FP!Bv03XFÇ&یȶė:d('xK~UV6-3.V\ 'm?Hn&(VV$r$;>V2Ulbٞ_\A*HT AAWq5N5L\:R잢V뎏e%z,D8.pؙ> W4 pL+\XWxnQFq[𧺿e= H-%7 gj6rvyWVx&ǟ. 79)T,T4ڇM|_PZ7cjݪ;xg^tu2 ^#e ;_Vh .4=JVqdћ?񞤚}<|VERÐU󛫵 _LCo^%n[]c`;zMc7ߜRr΍]"?PV WDua꘲Iy{tszДJW1:_fGj8J>Y TcS͗SްR"Ayq|Mw7Im?th$I=x ʝ;>>"N8r43da\'J/C.SgX kqdmP.̙+J?sKlwQvh6|QI!݋.<7]ɕ=?h+s`sEtAERKkO,B;)gfoVxY"f" ٖ$LYOGԘ&PA9*3M`I怒W2D?L$3J?J_rA/Ҿ*|V@zQ#v06fycKHEI;ae)laU0~=gKmhRp =`w%v 9}poLbCs 3`>ŃN5V-DmФh1]vkK@` s2bs<%jz: Cgv #}/6~$9j  gJ;|,|y{(t}Af>Y*UnFf"R:b8F SFִ~Ҝ&^w[ K;K >Pg0ȕ8ޒAKܠ4/rڅ1apXaavs J0q@w{7epU/O t!6Q9 r+Zk9tlBk~, ^Ҫo Fg0e Y_jFqlX"$uJN_-rI+^SƄ L.4\;K`y2 co},li^dE/.PZ0VD`m@e)k3QP<EtQtĎ<kLkM|gi4wB 3"c*WrWA׮˞EŖT64;b1@ؒXphL+G)O-'-#vڟGB4a3`B /̀|T볬]`7dRbix!3]H yq*mbMn`/CȨ'8-] rX,T`pJtd '՚qV.{t0'D}b ޔ n[4+ l0]z9Z¢8r03a"Mv$*º\kqx<]#ї?da2m+9 pxw V7U*ɵI)xH%":1{R@jG-?RoUa(&7\xڜ]b/=Ud ] 6p3X7Pð e&LЃ\ZeBpW;#> azEM6 J7v/W)gp~ bNO -j{_dq j> %Xsl[>Q0 q6y5)D{Psq%jpZƽ"mT/x[T,uIq/I&FM6ϥxn;g_ O]uedϨxĽ%`ujv)Wjj!{˥;e[q=ZpK6TMchXKkXlu!<#\YnςbeEs6HS)#}h{ 9U݉FP;P_tm$6R6~Q TU A^;'o!SPշo~ uTc~@fH^g,8}̕J*-sqʛ?0YN- `!y7z({K@XA)eWWs?mo[EQ"R<>+|jl-H¢@.sӜ=PWZshUQRԗzM2pS)|\ԀGT"MJF,Y %* _AozC(^V ˿7TL/R@&K}tDO8򰬯a+ ہڿPySNyQmHy2v Hz-}Y}s,HPjB&;LJ{P@:=*&ieFYՃ+e 1ӖSe}jr}G*еnsY?#ڔ-P#H1YxCy1ӄ}.eQV -Qr[`zݑ%~sR[y{|p4"Y &$l G_u}$B'?ao$a}AGrT>c캫tg?e`\ke6He{aqEJ갍NI=]e[^oYR\Oe8)8£E4 @Im72lR[NW:({o=NnrsP2K@2{4̘pك>:D@oTn>dD~S~7,H4< PYI9Lk5# RgqyE9ϡ`)=tsD:{UC=DvIls!>J%W~˖E`.~ sR%7j`B#cj2yKV`=Pʇ͈T,A#UR*~R<CBpoet:)+xT<&6i0|,\Ķpכ,&(ٌrERn}-I]Lkb`;"vaӃw{վ4U fUH1>}\M?bٺS1w5=F@ Ic[-RXPSmДb*۔,&vb_;E#s/lVp?c&qf F@I~dz9uW9ّ);|{t]>~f#Wefk DHp<,sֽrs0"$?ϬڅjbCGBĴ-^ƹHx=I(aU'39>FE>r4|| U-?X nY4d~9}HJ*ۏ ,KXD@Cg>5 Ҡܲ}KH~^I_Vi&`r@&MVGCR^(2h;h_z/Ԥ$I U(\F ۞! /yJ!tDQ5Xo&t^z"l;FTVr5 5݁Kl 2P4?@/Ub+3~T twuPC\r I!qbbv"QK&*dO'Qe3ӽ.#`ZQh(d(ay2Ow6љ9?5nuni[|-"45'0,5H3a1c<9Mvlf2[#&۾.*/L mU|W4.+B$w?r z'}8'۲|vI+xt'ItMeSFѴ\Afm#*Fs("3.MEu2?W C~vR˒bw D6̨<]7 2#t8eҞ%h'B}fLͷ [Q.T]Ff P|MLXA٢mǜ Cv$7*Ql28QO![L0z0H&dY ^Ӧp9`0X[\5`}K]Q$켼&q99og{L0v uz2{4U0 أ=z!/BxV‘^!ґ"00tG 715xkh;:-g>U^4%nd$;_W/m ^[דIal ׂVԴW^ւe6#ѽi\|ֱ PO:%+#gOT03Voiɭ˧s2_]h^ihgλuqÒTzzO(i2C`"e\nWؿ< 73 ]L}Ks`qx?R6>9b/Lث)BTlV}nDn\:zk U ;PnoŜ'CZ(ﯪ z`mP9#Uk1,Q|[;Y@N"[pTyHh6qm4I>'P7BA΋nFeUo[;ޑ!o0*;[H u{. qF]AOsT\ȿW*GcILp Yrb*yKSc|~` S}#U#>!Jqu#asr6+m/mC܏իLs,j  7,*G0ۓ y7/{_B#%B{8 c*^k=1,MQ3q_eQ MNWt;9 ®K?u~EJ8,2aƾ0,>4|y|QF|ue$YlE-{>3R$G=}E#vs#~$$NaMj)WũiA6ozǾntʨ,{KQׅ3Sg u ^H-GUb,Rmw^3?Xȃ8b{Sm c6ɻW+}2]GPQW9*XsGpunTٓZQAv.| sX@%L~֧j>α#{ *mKSvCK2GKvI `9M΅;XH!|sz..aPב {iN@fkcW>0I{ĮrEN" ]PMwA@,S0{C91tm+1s`w"c .P@ZcA-KYX_"J2t$Vk;ޙA"`?'NW . e6rARؔA10 r_Gi"*PzϏ@2e>o6߃` 9긒k.~&Wd.MCͺ}UI<>(0tХtx&to=u,Ɠ`V [% ֑h=VEUُ1z`Vi؁mEj4`BR(&M٨.6AF3N6PV7XkA.]`P[xZ]!MmT^}s#mr)js'k !fgqb0%$|pUO_f64XT z)g Sy]:&V&wCU bC+)!V =ĩrIkmj;zѲшoj=p#UH{-l8cHםpm8g:lŠ ~ zCX22lߜRG_rRkQv5oPBK/69m?>یkmT> kШCNCQ%!0Uq{h!{{V_[ }Rle2Nd^P7Y~5Ymxu&SC\MUܿ_ك8>8P*J| ֎N=ME! ykuw#jzHD.iXhy99'>H.!HUl6 C궏?ݝntJ\~X"i*x v. ~3/t dL'5P63==zCqV (܋By1_I%v|֙.`\a:& tU+F3hv_yrFFХt%M N=VE{"cn![QRQFoWa~n'V->M0M3/ןLTbx)kGX]o 8y|7l}I @gхpVk`kpy2RϞH[Nws% GĬtFxΗx_ h u-6+ib+0s|Sۆ}t {`̇z:߲Bfbӡ'vIrOWУfHU|M5ւ%GhrW(gb">jiʜ`M>;Gwn[-Kc8P/{y\y "&{j(RKN8C32= ۙ Ϩ]d˜B%WD^Oڭgߡ,UF',pĶ*ӓHI1$h[REԪn`+ZMhp.c+N1k5tU(lBZCEeP?/0 7×#wj-ٝ+261|k8+.( h B~ŒRo5m;̀ ^mӍRy9'E;mOQVľ0(lMIG7ȾPkÀap`u}lۼ,\06&Q {=k%GsJUSA[aJS?x`uL`u6 pT%Ø&\Vf笜4Ӆ ]2%RE@Sc;9hnΕsccBAN8S#tgꗾC>*RR9&1`̵uY^o*'QC^^VTXu"'BSUN{`ޑ)jVq{&PIQ<r]?rt=3pcՖ?{xy\B)4jzgi5Yb$؛ն@pwͽ'MpU2M^+Y}>eNiۙYp"-@!H!'\\(~y$`m 8Ia9L4*K+^Drgm%$f;Gt'RG./X4GV>qIqDC?Ly̌[{Wny 6q92C7PŇا\NE6_Ѥ0~h1M6?2huC+CR)E_iFmN!( ~,&4L  -+F!ʃDKSQL-()fR,}D627au" W%{%,B[,ߔA vt |r,%χ]VP(! kY= 2qP!=4o9&=(IlalE]כHmh1 NR3bp?Bpeܷ3k/9u& ިb{x=%GkEeRկD͠ HF,`]94r'ub\4VϴErP}ʡV򴏍sE5EOan]KgTWd` VΒ9iZ>`-WV:\ٔZAZX߻ݔд>IBvINivl3""47x1-!ǰ@6{ƍ>kV0ز'lW9Cbϝ6d;Iw$LOBבa1ocs'mrGbP"쪼m!:4ި2)y~U>ԩ49B{"m.o0>w-[=]P5ﺀvғI>O0;WDnڡ߅YMFԑʋ3K߻U 4˜E EJrɼT6tpS7b"y:.̟ͨ)\!ARt)Wk_YaZ=f,GNUtza8y08m }j冢R?^pj7,*iק)Ƶ<BZ4c:"p9Cd-7"TAzXFL==S(ДzjlZ*$MO#g@TJޠf[M _d4>}cJ>M)ȴ jlYTrP~"VrzPEf Rrt DΆ-bUZb_N^yy&ƞ"JW( PO$>iVt\ |vZu"ca9t5[0|m(.2#&&NIҾ3Q2|@ VerXvVLht?K l$@`k:g5?O(R2> i|fZ>E"| }` k\,Z7)z',A F6osn|;O&+í)~'х]ɦaTH^UU#logF osF|dk[a_5}X`aFX= DG"d If=yvVG1 @o] 1̱9J,mX :kROǼ,]E=d1H%%&Ƌ]\n~/b`տ 3#5TK'|w&G6~(O,OH[|ĐeXa#{_v.@&-^JJoUz`+VR f냪>' \O&@HPz t}<ԋV#ɓb- w&'cl,m%:ޮ}nԚWBRFCrr+FP<2u$k)]2ϸ٭`q, -[APyq+Ś{$I:S]/yF+7oCs3nrd*.zzk{% UIG2-&1_?-{Z@P3Q{z>Qxf}8UOO@UdB.*cLstWVEC.ddҠSeм!i ƒ hEm5,[Fm]wޡ_Vr2Ԓlj[) NEx{z2g!¦ʾ|wŷNC'nM3iWV#rWe1h>5]Q?$C>|3`R5?U$$=Gww8{38ur݊ L;g!N,Ukums@6Б;|yr>EfߨP;j+󵲶`P{ʀDsxhFRXHOϱ^JB+Dބѱ9֙#;^1P绂7q*_ Vn:VO0qlk?<u /S6H '*R=k/7M)+ }*Ϝ8-v%t2˰Yt)$"T2v= Pɩ E(s〄|{)$bDrcbՁ:;X?ұ*M}FHM¿CI)/byqtFzȤaɗbV.#=shiz_+~VۯqZrQfqkW(7S/[LJ2!@.BfJ6^$_mxe:*%kx*bYOIkT)!|l!k ݇7*j@Pn;e\iGUOS{`FKQ6T$n*6Ba !.}j"۳eE'N < WH['Nk.E6>#6ސ/+!+kbB!4^3葖cܟY93Q4]po~T5/0~ܹk%K7aͿO $(v 1bM' ֿ4ՠ53~7LfMݣGfyO:wexp 9})an pG(< [ԞD[s P!}/;![1Tk$gVk9#f)p΅@aC?iZv@RLBwcO130 ,yMm=*,ch8xT|2z&Y^{*1F}żymN qI ǖ' e{inrɱGKⱫAM#2ҲU3@M]bIn>AT\=F+xýleeR|SH<^ƥ^=nMxK[fuK5<9GuG$jH-t#ʷU"1ͭq-8~ *+~z+7x/܁c7޴rdz8q)'UbII ܣ5KyShOWo4`nkn~s ⰼ$ u5ۨMer Qvoy96oԗ7} 3.@ew`&1ƤybT@cZ^KW%A iŲs-&ڠHY-ԞWG{ A%K/A0P{N} 7QjAwNGSȳr進Xq Zk$;")o S1{r 3ΓvvF3zR0}oNoaY7*8 "8P]PFP"DA9*iMl w&s|la^k ^~tδEިȹ(.JGiHD"᎖&q12!밳}\[,;S2ŹQ>e}34AAKM\.Sxޛ]T':Oƅ?ȵYZl𮮎?Q !P;#e% >D 0r 1<:Sn^%p wճV5M5Lcߝ.i }sŭ|4+8jB6 r|n/o%%ۦ¸lSCGSRݩx.UtM43H Xɝ/?z"#BdE - h=|#E(JN|ғS3Am=N'\_8iu?\13͛T$YEoR `Xof,f6o"+ lG56N^'ZX! C>w Z^h&A܀6VEG+%;t3^[ e92Du"G(QY2yY3. Ci'DG!Y,ji(#Q _>ww]EC#.6vfpfۀn)h{=YحC&e "WKM?FR;#~{հbD$v p؃DVV7Fk2 81T '(@Sj*.hZ2ѻez$˂)Xs*TZoȵ &)-&~ٙ <|ry .`,-pԳ-zI> Ac@UүH+mR` .,izO2%6|.C QSQ1*((ʘm"Q!aQAN>=]}yfU%c1]璾&~u=Ѥ\=mRR\VZ]Q'VI"` Gh 2@4JF9j:F:n&# Ӧ4$A<60̹XT!w..؇Yߞj3 H3] qB8Ny4U6"u|שbֺ7u6*I˙p8"ц^2UvyF0B3a(4 >JyO} ģaubh쫮Ә $RƆ42V$6McW\ޫ+9%0cYUQ)WD$׺P/wBTgAJ g7\0ܶ˱8uj4{sJc¼|ALBڙdʯPR,W;KTac:Y-/m'EY+P[VO`ỉ!"WO__sRDξB:ݠݖoa5l˿~tG8Liid űa6G2l.qh;o‚mڬ$j,HqnwR hZ!7\*;m:x=K0]oa t ?7@(_H]ȥGGl(c :$Py̫M^>-4n~ gk xcFW)+Q xz\އVUK0u(]r`6Du6rUH6~z.HyV $];zbk19 l1>h/* !_}.<6Ju7wV kƢ6d*Ǣڿ `%=+=G>bӰXWz@{х bRu_>sn!dD OX qDQ(cg"~qq+{אָ[<^ Y+!C.> el0Uv3܊ɨ`cX+qswÂ4Қs:ͽZq꘺nTCSo Q3#f|g[)LUy&eSKTG|Lwz鱨D~M%ruQXFEfi#x1u;MDU-)w)9k Nݺ!OT̈́m{Z[$ V.]Cd[-oZ*b~4 mh4$B^]`_=µeM'a@swIjTFEgxs,lʛLHX0[y)म,LU;X]]tfQtw]-rO+[XZ~FssG!̵ݽ) `dAvjJaۅ\'G\/찔%/p&w5c>)5hdF#8Td;.+F- zq@j97 QKԋQw\!o'.7RMrS4 a1lRT+A5YmcfkFM( E+<13A9PF䭮o(c驮2%΀#OHl5[;Ux=lDG[VJҾr>lDse6,kd]PEKyÞ!pza4nbKnBwL=(.Y~<ČVv =mK }*S`8Q7;U= Ulg&oc Ҟfp($m eX?-d[Χq[v߲%HXŕPTtୄ{4O ~G90; \w r^1qh# q6\p{/ɗo6d(Yv16p_Khp>":\秅y&b@{ȴGH6qMPp7Lx~B/bOwk7/F'8J+B& ]c9{p)G'A/ '#)Os{Ҡ[OED28&TLh8ߖ=1Z=Hg=/T% @̢0҅!bZWz]܌XtAzXS 3(&%~: PY ]V yjP:.R.M==iSd #R={t6 TƺP"2̨#2`4 q 4G:McbiTflq*(!A\(Mt2>תwKd u6_U;Y#ޥ//ŒkQa9D6]\y \_eS^*がUYQ4zG|g{#Y|]wv1^|ҋ2{YADvȩ!ȫ*mu;0㙉#WgTOȩ[}9^:#7+ͩA!8i !}KOR^O<W(:Jv4ry3\JW8.SXd([\zt=EڣoOȕ&]VT)D0/IΒAm_kJ6׶K6,~rUmOM@=mmNPR5~8XWA/-ᙁa|Sx6LpD[MIΦ)zYQ=c/dOWiRY=pC9)lVxEx΅#=\3Zl[m4jX-;WC9ZP{:ǴaM;$TUʖGm: ӤX%|~ $B[xmc ZgjA1au4pvj|Ƒ=TDgXyApCbp('V(}yLM-,bءgIe+ui]wld_/U|&$~Ģ$VސzR+0)p.j7w*, FLJӇ8p Yx] r1g' k+|gWZ۱wl}}a7h7!cԨ0Axp닡%" JGGUMeijhLHYӢ4-)\Mt\ŕ$^M8]9&F)2qĮt^ZIa)1l/͜Mnxn=n|G^3;b/a.~&!K x.B@Ipg?I@l^$ĵzC}xsDԓG2v*Feeބ&\v|̐souD`˳/ oƪN<&{Ik &CJϠ\; 9Wjhi[n8DcQcGE`f0H'^`լ}#k28a~&ЈO`3]ʒ'M׆X0 ;m_mmA|7MŒAF׼nV \7g|o\OЎ( lQLsY 9W/{F};?wv%U$,*Lw'$+Z|uA<(TkRCAwbVhzLWy&D ^1wS_ːC.1c!ы1 4' iEPJS9X)qyƲ.h]i`lUN"<R-MWR 5ڜuhLG8BE_K$Q?he{x QQO6JzeoHa<53K녩>-%b8#`7/$KƸθ+!I*UDgʭʿ<ħ_M& U?lx8)s3tĂaǐkZbm#zڟ7t~\G}vvu8zypP1G=btko/]GVUA!,a6 g,S$Ibu!ww %|݅)b2^JIP_jh8n{9hrVfh\ZRy{3a6+%OT'kB)<. `B *5,>M\~7{2] O, t{ TA"3 #OEA]>Tfk8`-Z4G/f``q2 ȢH4f^ֺ&,l/gGf'4,'S=;]y N漫o!D-gfr oZc<e7 i{$>1 LJs.;:g+93V!X wRPm7f%; .a[o*"Y&덁9O{A0MlFi$Jql{l{ h3 Wo"%u\+Ry+cTC0kb`h t/!!n<:\nSf56+ *;\3/^Ww܇̴Є F\ɋE4:I[[JܨzS2S#&~#zE*g~dȼWj@A)g;wOLrLB9@MƆ,fҝ:yCfFԀx#rށ-id՝K.>=QP)!՝* m=|gl= 4v6*zT aqz,0ge|H Fm# tJ,(4_-x}+8羽 _!7Bqш+BiCb`IeRaXl*F1FD Xnk=G4u d郩-s담of[<^X}-hQuK=1-t 9;Uអ+%1|56قƫiKy{~>'CD4NxUd}=u(@mHዠbcKWV&<#.^z#W5C|Ѣs 1 H//MC?Ikƃ^wUY6Or2Mv>Bx6V$#>v4]*]'fDKu6Ik* 5Ėk; % G@Ik;/YS{kGgEuN\L`AŔÈ!ƛc{!?O ޯ{.)tEvn:pTB\ {+l|4:If1ibb/w5*ralSZ]5[/-H4G }_mpm=m9ݟ!@k2]9=;_P=}y$'&=\ѻWqLDJ|'.CDyfu= WVo~zD;j"s"(;y;̓!y+'ٜY_v/~(hC+dWw+ Ş{8vtC]+:.#?P0ǣ2SxG+TB6hJRq$Ch\: H;:^)!qu;nERQ fs2#8\s}e¤`L8̐%OSn*-KLu%qMq|eVy. z(R5XZ:+vD}M2\ۏ Yl U̮b}iP,#it: 9F{B7e2:l>0lD5$=@tn/<*IOd?qٸRQ1}ŜS\F0gZfA=x{ͼM L;5\w-0GSbcٶ*@IA&SH|R0c1rt_r1(8hۤ }!ӇBGf@tp>hF=dx#E_9SOF788bEMF΀WD+&fF:>&Jљŗ`,XF+ QmH< uzE:T H.j vx;^v@7ezQJ7l h) 25z &}g*P|kv}@ہzn՝|(>*&zfXr"Y\rf>" 9,<>j):@X;~'ob*?FYwowvpP卂ؒ }ӟX?ʋIQY8#P|'MK F3sJm^*O'v}cui¹gZ 3L;}D*GGlp܃O:,vAXvTѹk%<ĈY__:f\o'шO[@)I|/x:y?ȔZb = O8`-e Hl |9JK%Ѯ,U|(dgrEahɠ Z=t^UDoXqwE457a-2re4[dlɑϼ0xRIj0 !{rCidt Sҥ ^k:}FsU_&pg,Kytz*鎔J߇\"18iͼ$)'8-Wd{h $mHUvXBѸ*H~-zz2EHJr/ikxBϛ6#&S[<)0qN]L}C c4a$hX\xG#5-ªr\q2교Dd^PCV܀6|ی(yE(^O$zUX)5?>WƳ p &"Ak@W .e߻?Qr`\X,~T{ȨOC y8}L*.ڟoJcXQOJtZv\|OĐV=iعZ^Ξ@~R^?{ wEitծю/x$Ƚi 8:&fIS7][,;*&_t_hh 릌3MkΔWdا'y܏ΔmYI0H9ѭ0|a/#;4#{^Z5;ټ:2C# G4nPfOs߉rI<;H,@PJ;Q- k í wT=+@\Ca?lM W|Jh^unX!%i,!k'O[Z %eٹHzM!Oуy".7e &E/Iewgff:]MLa*K*)VRܶ67w-lP] 0Yf8aV0YE->.0"q ˀLzs֍t95M8!33 ,Z* Eh s 3 ٍ7:H'~=.e23 Tv|wxyy3| "+*VZ F7'm{XKjc]iayiC!m*L4k-.Z$_5È}]M˼ZݚQ>Gqh8>Pw.0G`k!2ϳŸϾԔ,-赈ڇ%H&S@1Q)ǡը ,yРrR.7mZ3ki+W;sJ#~ę+pxG H" I]t;[vs}rYbL Aw$l%סQo>vcMCPuޢJ_%v72V:n m#X Q3S*g =_bJk=yL6h,B oΏWi`U)@L\eH'!AcdSGB۪~'IXjl[ތ%lL/ > Bb=6 ڴtm[rrGV4aPfHh( ۝ԩ^-QrH1W迵c2AĒJX-Rs՗ ixnK.?%Eyj˞qט$1d1]M]&gګ,YU2h)KKJ܎bт}FSIo%ACoXg=P!Q^YGn孽ރ3Ř,F3W^`5y?}?[-LuGs nvUʮDkхupxz6P4 58[Nm8 dWi7lf_.vևXnIϤR^ _p_dp֓2æ@OY\^j# .6ۼu2 R< F/ێCW⣻|ժ B0d sPAje;X(;"MAɂV zsc{ gΥuw YW Bo  1J8' %LyJSMQ*3 &r\IpU@&CbO@j=N o6Nh؛m# 3Ew`'^">ț# /(1<;\ЅyU O ѩ`5?cRPK3z268b6sZ>rcY\,)ujHOV4ebpr)sΖ}«ZBY#0ln;{C2X?zn 94|?i %-!5p |@#苄-]/ǩ3@4xW?PU+۪E] +-` yo Fc rТI!N?1ܕ6X/j>`&T/u0xJqqXwPIog͖2'SAH'afOkLfU ҿ#IFu'hU1,-!0Gai6\^F'a pJ-ҫ}->_Z]%_bIYD3( gtTЀʨva:zȔG̼W! MJmM8HPcGW_F 1VV7/3o7 GH5Ib~|Øs}E8 5kI5ј;')9blY0= m?:\S/uH,J M;S|eBՈ],/1eBo{bLxUMwNf ،:pWBM`at ģy& IE[dzc HGgrQG0.(Hgo1`: 7ڬ,l6[l:sʱ}zܠ$ӢT64^c5@z B-Q&YQ_릧mH17"$pIc[\i-;wk喝vqX,bUK)L3wI^ȒC@{ m 2e݉TޔGp(@3"qQlFV)fz8,{iX&-/1˚>v08E63+-Zyb~YRD.`DL]HӻZqvn{Hd&Gx77Kgw+Y &Q -IZ^9yzUƹ *!䂲VNuɁU?>[ܜX﹭=CpqwO̐KXG;=Y9C=oq_D 8p>3ݢJzvׁb5Q@pQA[L46ǫ侜 B݄3x;d8O׌6VD tQ8!,Mh:Õ\6|ޢ :k)&B3=GzX2j(EÁjKZW6x;`++ϑ v)G<#YkY3e`e=^:b3P?qg6t8:q4@ ш1*2T(ըv"e C{' n-Kb2)qHیi55d:b \Sږӓ#.?="uwL:w%hJh7RVV[!.`2w6dYRJ[k#&#`|ՇWB4&1S,kunAvMvż'x7|*S$]YE/\$km{{>Xb7S 2;0%ܕK! ) 57j8TOKDMʹ<[#ٛ-`-)e~@:ra&?rM~ wuvY1!c:)ķ7p7ŎOh$ ~![CzǚMe}Ux:w"-7,Z%eWyczN0摫3vM Z[8l~H)5(<((;." u3k 'm>Q ɊK</ڳԊ\n뼖T>֑d`\c \#4ov~5L+#[ǗlILZɛlWG06Հ) - sb-w@:a井 Ҥoea81f cԐr:usg4}tthv+?p^)W%JXK#H9fL_l [6 !aM6Zfnj!,oԍ' jŽ^]q!tR.pU<7[!':>^CBtA> ~Ѷ؞uG]rܺ+P 4ŸFD$-Q1;\?`s(jN>/3sVVnRi D5AuK4^yjq .|\ ';Y);{p"I9E+GΝpۛh T}|d鑩3DZ1O\7/3v!-H332Y$gH uA{fjcJ ]+LU28sNu?g*'š|8X{v(Z| tyGx(\FJuMYx^:6 G2Ml_څ4' 8qfkd4PJ:zEc`uak wէojzss}޻TVF7]8ov"_>rX?`xBAɿؙ8&bh8})er ٧/ . i- ҪZ1zJb aV"R@6~0ۭEż]V׎ݝGDfJ7&K*|%r[,%t 15g9 $4(}<8&5-lF iNDܚxWvw\?coS#r⛺c[QhU&ɴiL/9B9!<B5raŬ'X* 2E?]3s3 bӁ6ZG؄NUzis/qS]&< y0sˮiD$w£ #ۏ1݁(M*81y8ʜ#=pq;J@g\? ہvosgG!UbcR˱Zum̢R `t4H0X.sDة9o) }>%謚qX:17B9c 0aIwmfI3G,_6pV_^a$ E嘆L2Ì-UaB 2yuT(G=ݢƴ7𹄖 |I-Gp*.EF;:Pٚ =B4*ߞDUQpl@]JG`4 L>X'TF$!o k\ɼ`Pqzwܑ-!])JT)[jr1jj`Jb1|}ulCt7i1L-\"ejxvsiTT鯬4,pu[,v˝آ ļ/쎱 9U%ahqPDl5 s01 6& [ۨe_#xE',ir sw=e+{&prLAk4$G8;R_tmQ_[RY.枉}fN:Vvq.W 9\*e6-$.v.Jqűr̠AuŮ0E_l <,=Mq"SzyMgž "j\(^@ @RR^^M[Lj_ͅMyt' DM>OJyp%`7cϚm2e('p9.Sf%z=Ψc6|tMQzzۺ"6%`k(ICXYǢ MۘXJ5]AW| -jG#E/WL5; j0of'ZDvT$*̢R%ֈ'^EyC$cYc,^_1kk}uVQ za+SO]-lٻ- Q.:a}qO6W)›{b.,J4ys[ɗZM]ͧ>B Z >a\_]8):ݯ=ᥩAJXU,,Aly|bi'i6ɒ_2e3b@)o6oy۴G؂%@Wǎ™2Ń"p/Y}Ǟ%BzzZ,.6L,Dž3|OsT9Z `g}I9|gR۹V9^T5IjDO!hFOѬ[}@hP\Ӡ\74 j[|%B̀-;zz`i^3L#xnR)r8%JZ4똤^7?&Z53ڻ:e~h"ڔR R;S!E 6?3ygyFD~|`Z2=eE*Ҩ.}&b鶔=IIhmhᓒY|9Ft@af1>]أg)@6=&(w9k@X@5c54Q63H%)\Pܻ]M~7-iIEH^Ms:&i(6SkT N't=Fl&iUk:z r|J#[r~=?$2 mcpTdK v,6H|DcHho?TlWVZڄ]͒dՍwL+wRVo)x7A9s -S#ʼHBANxQ Pb;ߞ#آK=Z,\gWn< "!bX`[ÎrnPf%tc"8Y-ihHsCȓo~Ӗ(P]Ron*T4Gp|O m6Me"ӕJAg]+( 5Ŏ{k< axVv=$\$UQ;*Xo;gT^9l?_zk H6c&thiA۰.ٟ5ܶ`oߖz:p6H;,oiCBkŠ ԺH}8{AcA#!hT8}M`5 1쟝ߟ['Л=cCjcגطE 0p) i2+2Bx*(MWoAJ%ZMfP&DQ)sƎL7cUD%oyO6y)toh?aM eIk']'*VXqqv&Q+u-1?2:Tξw0ڜ.{ dNF(czW i_u%7OdgZ6xuo44o&4 bZJcs h 0zבY8= ),W|AeCǟIہz)5X` $tĹXи^r}x;u2nz?S̤:hct$_H -:2ͫnǷ2,]SlW HG@"N>pWjge>@L! {D^DM!xF}xMyQfRQT2 +zPbq~a l2qSqP9kcp;{Bax#͗.'\D8`Oi]ٷf@[ Y^ *6=u<Nf-_G7EPPi .õ~|c944B?OG!^tc*XY.(=cThJWcJTylHf]F5h667ȑ#*b^GWYDR~ 퓉k7C8a,y}Bq;xy!xdmVeKu{)ĐUr](zqB>U3#A؄Y~Ֆ{%,XD&lU,ӊTZm@s+9Ә\t;PB(aj<}:QtJ7RKAQdr( =J1+˷>f8GG1{y *=~(qv4|\qCCK;8N:M AD c%gU^/8<֝~-'\XA{ƈMK1 ^5 _ u&V%e{ a!%$6LE_7L~?3KVޙF/e0XBe-ܶf`&}*{82ء 4+:p0dSj{= Tt wK0/OirRta/m*~m@d Gp2| NG@mtKtf $"ic&M(;9AWʏ/9X h 6Ay;La1R}uڼ@ ,_hac<3N*9Hzo3C<Z$[*yL= ;HSR B, oW` IXC~0yv̑!6(441W'k#%R$z IzmD6-WAU@gމP:TzҌɀjnJ"!"-=5 +_K p% %B;fqПe,4SY=g*ҡTcZD^GERޒiS ϓf52`9qp~5ԸZ &\n|mj3#F9o( ]|\Fiy(BtR_'☊jlհN0ʱz xOGaY>n8"}ô$4YIPr顡Nv_|%@N{E˒8y#4*/#."mBu&@1A=}m:8qPZ;=!$57FА #)4%/\Oy0Co! O6S7UVO.ʸƧ[F'my"PP.,`<;}2*t&~VTCZ341m!?JዤhDraTz[«RƩ<a}xP6U yj6U )7dYe׻"H?T774DPyۘ3Sc{훡gG0ٞ^Bex#h/x*-*oOI19<ɤ.W5B7x#"힧<ؐVY`Gf#&=p2e4fa>.xLF4]VosxIB:ؔE➦|_. /r r tOrF9^d;k$7IZC*ZM>] \$D :. 4Kܩ>PA Lځ"T37>s3sDt1 <\#?~uYws? o|ؕ;S|q S"-yeɤS[#IJ,@ok X=oVkkt,*EEB yys .';`hXO4x"[I?=ha""[[0{`&77@HtqLVP \ǟ5Q%E$WW"_|$$…b {>+)"]Ǖ;OݛCU򬌀+KȽ]5]3f?Kpʉ9:CFNis 5dRB<uz(u!}$'QOZ8劾ֿjٛ|ۘ=4K;`^dIq4Ϧ8 T&af-zԖ iSTVuc(K2,p߮Wc)%\d xbre"|qc=+pT 433N3 %`-ib\Ю14з_%U 9E_ Yf'T:^Y78OIrC.1;- aJ˺fds'/#hĊ -Έ ( qڶ:^gB7ж- _ vcvعn9WCd"XRIz>nlFe{pxLtD;GH͵kSGld}VƳUwwW8Oİe,0,60)P;]K?7/#fW$g.,5c/Ddm$uR뎵1!PDo\#a}T"%NyLЀJu e܄aQxwoO?umbxf9#Hn.w)W3mEנ["[5YVVF;ӝ~) o|黲/eMx2=( QHĒs]҈{"θgz0JdXmĥ B#5?VPBTXeڄ bΡMI4hx|oELbaz_v)HN!r$vqcL9bH5ՌLsͼ rs9d(TgӁX>b^uEC69r;4f *ke9m#'Tg|?5&`TB\TLχ' P;YXr㰣_Vv)38пOYй'l.3k lLF)<0q8Rށ*2h(3{8/mq<%P!2vF҇-]AZm%Ξj7'k P_|7?N &~<7\ ru`S<=o9->C`{ZԴdwF,x*Mxvh9%gmtd*IvsxDVhR5-둦j4Чe z_5/nM YX-CS`+ :bH)#tqd@Bmw9v*SΐD ( uG r=O@r函CQyȱ ,e\D_#s<`[{C;̭MwJKyE@͂+CH-b=7*|VՀQYʼDd["\f39oͩnq3:IpfS_f1,5SEȢ˱ϬW =Ss,`K̝=?2جQQOlrY6,K-)P}z>~WeT%^5X\͇(9jLh<|Lc x}ʞUqo(B<0'3k9sȍ? +jȻ}/}$"v:T*ryLս7җ/L Tʼn) "m;mnH&[PHaz@^!Cp/D~uw2AaA #q0dX~Q|bnۊ=VBvGlr>Ra¥"YN1a0Q?  II 3k`i-KOlxѯ !, BqY[ (t]GPl?峷kBvDf}_QwL{(!ȓ\=JC7FnXG"OX-cll&F3;*bLP"7JBK,/8OF*Q8tG|> $|Ξ {z|G!+,* mxgh-,fkP%xT"vOYtѹEذ}WGEΆ'olF<Ϡ!},hwdhPKߍҫmJEҩm[l>䭸yĜ cX*ZJb|o\w4gWQWBj1 J5fK;xT.G%lQ4(6ywp-{ PFcp_*L+ED,䧤 d̮neoDv9+Mk,Ǖ_Jnm뇪724ZnbYX3%ru^TRQkÃ{Ή-Pz8C?|ڱrңS a wFhd›ox/$]KtɡļFqM1@)# ʻoc"cZN xssXVd7w^,gN "hb(mb`Rѡ.c3BXD,idIK8,&("eGasiCd@Kt5DtQN$~l ~gPT⒵S2++!LNUߴ6L|𳗼0Sc)U~V.1nf_ȗwRn|3VvB_mzK&%K ]s2'Q0 OI'u,at_>X B|bޜ E3{8A53Sge i R|ϽZknBJx(kj>5v*x*E#RN й|G=FZ5(,M(vcz0%56]r8 4;!n弱kt)vRa\HC0X07vGG+2 ,Tѳ뀕5W0v>! vA@vxW{BmWzz56m]W.Q2Bt$9w9,<1G'CsL0,Aلsi4llkﮣϪY;kޗ7|[mw2"4f1JDu5WJ՚7Y$wK2PaR 9p/i_vיNW"Ys.Kwh>*41kjrn}4ڄld|`dVr&W4*ea;KPpxjy-RT;LDpnJ}cOt꡴b~FvꓣƦ5FwVɆm0*J(8H1 -l Šb4G5߅1 wP[#2HG?|cA&?"f|f޹x7M 9\8Kʿސp(m&6rM~P~Ӹ EƚpVCḠE'Tv; ϸI5/+,fqMANiq40Leu +v ?.ˏzM/<_m/b+6{M9\XĤ㫸12=u^iVoM?>wUh8-]/UFU#pV"ƂuNUOmsG=9" V y/K襻L&|ooՆWW21q~>w,m%AC%@}(]uWu:k@ cWI7Zd}"qN n^8Izrv3/n_ͭgRz8(#$ MnI5?a$Jֲ럌V5 oKA8KoصҘ"6t2奭8Ҥ-M9W Ĭ꽮nAK]u`ty .H?JǟXjBOt 7^.k-212|wYauX+Q~f20j ɾ5(Үvc$qᯊ1hwЉ-co!ᔶr9I-u3KǯdN^Wv`;60TKJ%m^4v!RSxb)T0K:MȊϠ*W0d>MD( jc1IؼÅUV-Z;X"D9}:,[{8nŘE YXgr߮ mvm;yw]Jk.ۃ@+Bؔ'觺Gwuà%# ןq6TaAF&LhTz=E'LNWj S0h\N ]('7xB𼄷V=qy,}-.Ù+/lHyهEqH| Dd~+h7#*afV * n?j:`/B4 D)ZSa1My@-v%LG4|{8n_gRmH@ݨ޹^;]^~]3OzsE7гODb 1W~H3slߐWV' PwvA|R]03#4P)xS)m;̪P%ZH8 h ]oմ!%mmadKb}\, B#j#91, H]!ɰi_Ud-B1^9m&RM{dh?5f_! S|謬095kwZ\țEv]QLUߦ[9Q-F/#e˄'u?2Xq~]4R={% 5,scR×(ԢDV\?u$=f jN%=8^ XPN^ /H:pQE"1)o!p;+u Ej 7b%n8҈\F;u:j&^\wgCb#7>.(@Ӏ 2fŞYPJ'мQU?iEQU{ݚ–PX5l 2`83!mUc5<Y*{uY D[Oazb&6ΜÕ@G|&eq%*q{8Zm/cXER5rye@)Ͻ4j_ q{BrmHB~mBǭ #ilddQ68FVYu?A̪@)Y&:{px4͋G'Z"BDYpha.=-s}R$$!/^gklc7#L M&3a?:[8X-6rdh EעxmC HbcL P_ $n̴2m/TH$.ܿl"Pt1 5ec f ۲3L8*[lW}e5aoWp&N2Pt_f 3pmdqkInpP|yb L aJA<|YLaN" Hab%KNƈ+ :,_YOHv\ͼۧp\ ;/& gvԐV{֚ϝ!hкJ~<]8@B`!޽G ubqHpJdum_Ucyb)9$\}?@rS2x1yK)Gj 6s$ ;$D"";VY]aNy +YTȈYPZS'Y R~i߮&ִ Nz͈kTO4/+IoRġV.N7Qm;>3G sټTj$GR()[*u|01wMݾjfqF܉ˆ*M?=R%}?Vyyl/ul!3B]$P4sg~l 7KԶQH1l]`݃c3 ix)]f9X;DaI_$!qc'f[ zih8fF,DsShr*&')Xh\1LS|³Yđ\]eȚ_a-rhjpFAΔEjC&mcD٣l͆{%&b#xAtk/A' adL_Vګ@NFvzξgޤokAW,@j2dN2Ru:CǹK͚a|Ď᷄+iUsS$nQ!tw 3|%ʔu9A˥uQ J vlPU4\I9Yg.D1IOq<㪫kHk]e[̈ю7HjSJa&Ȟ˥ZC6obPg1Z5u9Yݝ9 wqmiW7*9 &[L?5ے2D{e0Um82kfV?njQF8ҳ̣v+Yhs1ÚS-bϺB:ԋIu֡Z(B o \;U`Sb!M+sZ۶ղL;u@ %pawo``Jqt)jv}ib69Rթ*L;_ B(Ƽ$@UۦE'jAo|$վӯクKr-ɳߤM-"Gcde,x6X܋![žA;xT)g |Ez]!$ pzUN]H.@$K g;:vho>O '5bZC;1*hZ|p'0'k@ha#AXrAX~<h 0f-ӎ7=;IH|mˊn'H޵Q P y䨞 چ`4z,ĝ䞪7uD'# K1ZEY86x7XFٔݠe3eprqozf /Idd?M&o]2Apߧ uXa`]X5Zm,!O_B1~|wK!y7T֛1yb=[Զ"E#ݵ{"u34[d?ߝZK\HX?. J$Xo]q=ϰ!k'GĿ%`t06/2M^ ||zfuTǐtɺGcP.ՠvH)UUSR[Y*~<[Z;_-#z-k%eF86%9A^`,PU121pn<|ACqiKJxҕp,O\# @A%_c~k$(=ZuO5RI7 CoڢګKq9{^J9F[SÄfEOSp5l*ybX;u#\IPjE d1Hm헅b\m5),sLyN5E`MեIZWIj[aF1J6ı2S7RqTyڤ>)ZsY˱N%bG|TC205n^ݨYµ/oHgLtwT7uZFvLX~WmpL+ST7<-(a<$ೝ.sTDrM|J1|DR#5>ƹK+˚X;t^ph>Pvrr9(ڰYl챗h$XV@tB…C#SP6L; ގ‚7>=N>?fUjD>8zN[%;>>sh|'G**X'H?SA55F'!ĬBc~^3کH*n .%5&OBHH "cwZ/+B^",l,d=tǨgbI>agɒۮx?c-kۊ]2U[e3i+UtL~Pu`xsun6f,GL"ȋabՅb.%ꢖ?a&4+Wi4]9 {,5!G|5T5?E1( J$ ½h4;ējؤԪy# &-c.^Oqu2^QYn\L_@2Ž^_&R EOhozE& ]|'}ҔHr#!>!r8㉪WMy׷fIs$ʭ=0+PU: F$& +TiuHYR GH-nJʥ6ƹjyMJzJ2cT!)y3B&r|v9|ȳv8@ҮQʶ6zG8%_Bc+z3b˜pɗ@p|`/ƺ CGx-϶]^*%+tfcеᭉb)#4;ʗ*?tK(42^ x@=(m֛Is>\C4vMb{;/D͈*η}0zU3$J.Ku<7 İaCA Vy,p z\jp5_w1y )kpWjCVTȬR[)o`κ;);ފH?FBU6?N_{ Fh87Cn8 yJ<)ec&5757Lm;5 & #vi+ 637KI:ةuA<;8vdaKΔuh2[|Jax =n;FcY P>ptS)-,66$8H>߼0=!^7_Xj4S9CH88BŻs#GL/%"{4C`@b(9iA 湌Z4A_X.7^6N @O,0)Ri"n \~~{N.J&S'\Ana8NqY~IǷo&'()xԪd+Oטڗ9Y8 +Y8jr8-Ƿ4u88(U[QoП}h'%glB-c4҂du= mᡨvvRDm ;k*BKx4Q]kC,>Q0) ;f93?i0! m À⃁P:@6k@X׮ra'?8D/OWrc6+tc1y3BSd扫+VՖUMM9vx'GPW7dKn4t($_-/UZd/ǵa3H,=#K`JG@Um gjΟ3л{o'~R!1{BBY\g9 ~,}fD7g {Z<#qC^2hS;Qk Qlqۈ8jg֐VI SP}o;qXBPT so17%MqQK\磢>1H<Oջ{ @IMutMb6x!:Td6׋b]BD` Yx~Y0$"\R7<Xسmi¤1[ 8MpYXƦt9h޴¶1!9n|Fo/gn?qM5]"ȤʈsD ؼP@[pVcl ֎͏`ߡB* #coTkVwGupKVmA4 E%P\%S'(`, Sz.?40K+S``(i soaJ|c!)%#fZ'e-Rx~khS:S~@gOώEA#SP=/*{{bKme| JI"8h~%絨v m%^ 4Ek#5fd}<\q4[ ')sU?A^1YN__z%.n:.#xE T*.N`e\|<2Pzޑ' =wp0hX*rKůwVbI){%ݶ6BKs;$yU'ڲ;r5uUan~ɰLf]*智N~"rlN?.pĄK1Id?E:ē OÂKy~/¶ǭ,|:jX<4~T7/ akYً$y;m;tmn b#dmTz9M)͡߅7ʛY=3zٳ_zOPKtWL;_,+ma iK౱'ĠhLyPN;q b ($Ɠ\NR$VY "p`'nHm4G$wr#~ʖCfP+_r%z2q..5c"=ik6CiMYy2lhJMZ7d>IA{U"QCF0/6N}C#b"lh5-Wn$@aQ_õn&Iov2=Ҋ /M]gSvE[V( ଩Qa2"UҠ5&Ks3M֢^O*\G2bumC"@uS'}2iUn&]@/+'oK0cW25:XF<}^8{`;N@V` 00@?p 3H-vmAxnè!)tqsg폺X:+R"g`D . ΍fon<@4G;ɉEZt$6GL@QQYo[m6 χrn:i0yB =C9܈5T$7+#░1%Rk>'b*!j'/QJ̽\OF1G|hм\uL[UMj?Y/"+&'䓖Tlj1˶6ء#3vBM/@ܡWezJB1c3$uUrсlϨVq>hq^ՋY^N2j&yCuk򏡃 d7"25`ӱ=s9E815I4Eq)]bh9{/r&@Qd" \6H2uwt-˘XwJ.`Em/ө-&0tC''B77Ȅ؞桮d T{t#7pF2!z:P f|ieT g28P#;<[n5S I„)0ryKs_T|ac@zQV@I]&mVM̌՘Arfu 6+7w9t=98X<o6X9vRsT ri`R2IEn#~q1SVDQU+eTeL>zr\寭w/Pk`,I=E_l]A}і&sʊy|G%U#XV,lu\u}+ne]\mSP[I>9F%1Z P.f;`C.SBWP41'ZYƀ#disZ؇t"$6RDGh&`ȨH3k>4 qN~ ə2%v;k$:)6DLjQ}`KNs:8z 5@ d Wi#5mvZ~li⋸:LM_ܑ(ԉoa+9Zy!Y᫣ ȓX cX:90KO=>X s{ ~Y7T}u\ #Lƶ#iJN*5![* q^ ]mM&BVd!^薐[(qY jvMV;v = 6N[Ω:l $1.aH"uN8&kD2O;|y8CFֶgìVC5K9q?ֶ~byJm p|ҌH`H\_&rw; 'ZCyGq&I__bxnsxDZACQ0ëwM ([^{HYDiV-#ƬL.YHAp'it ;.DX gCDu۔'m16u}|ɐnZ9J! F%H]0YQ: B I؄]' QLuf k[ gjV|&4 IGYh;a?E*OW} օ|}vAZ31LP9?ǭH8&&Uxy:̦N U"<*3JߞЧH0,0*p?s@%tcة)G)"%L1KbUG,FPcqxtZ mv\2{1g Smn/OCᡟE4#1s;/ȜM'=A#EE:bXɖr8D1oFʇ¡Pj˄ O|LXSNӾ(߽`"uH|JUt޲}7 )9T' :;rYYURwYM}n gay 1Z nR* ŕ^S+I!$ˋn%?_CD2pzrq%Ά'+b(C?}x}j\Gv$# + @^1~R[9pؔ5„+\퉄jR{9Zr߻LX TRsay}*{ۊ1m_ ޿ڿVcJsWd׿nU֞f̢^hAJGpIUՆ<ޱ{sR6d:ZklȪeÞ3kVL*.›O'|6|E?BmAc]al:Fa6jTg\S3rN>djnH(΍fU`xQJԓ8%?aKq6a z: a5ca5B<*ce\ }k…8bҐo(c|m݌0QÁiSU Gg[/mjtqMzo[kF\^QڊR%'fز&۝Y+R 'ѽ$xMs7a(u Jxtz +stCV93 7zn&J館q_%sР.Zs.#fv2̲TRbk'n30n? LaN V_סOʝ<6g̊7i0abz8x 4j0c! ¥|+Գ㙛>"رYn#h#^^=ڋR01䥤n8&w*ɏ Yy(?xzџ% =Ș<HEWhYS_K\sib9$|#0TAu ZX9{?ꁚ OQ}~ GKˠQ0 ͔e>J魌gN#yV$B: MOmfg32"(݆QZvӚ[ݦ;ɭ)s}ѻh∟,&td Ht [eˆ:󪺺 00K/a*U3u |ڹO++{JsóOmGhHߔw 1'~vG`(6 0 bxxQ|^[eOUTj';J:CRCvjڙĄ>:Rc"5\p_SRX$<;% '9[Q 퐰P$otVK!$HS!ƨәeo(`ˆ1KmbI)! OVRYĊ#7ݟ% {'L@'MvEC?%J^D7/X{Hg?d=.n9教n&=j62f*;U%o3׃XҖEow=[`:~c&kcwMV~u&2(ޠN#y4Uja_ôHtHՅVĸq+~__k2o_P}m_i<ڲlss5t=-Of .]r[Cm<'պ3k3O1N-%mz e$ mdO~?fݼXac!#k#K:5Uh%3V縂O|F慧̸z u]4-9I9.FgZtQ&nM CyުG.eH;oG~\ AҨ2_Pg!c{b%=4řfx  E;-vZ9Nh$:Z< E/Hm}&џҢtae_ @Ż.#r4~8 b/Z'_- =Yf6C!褭3%I|b𙧣d7;C/,V;@HqEm{ܽr`HJmj[sOIXk,,R.0]N?]PGӗ6ic)o?0 +Q>KgQX^0$@ūO)4 Jv;ȑ'/#?=P?=NV=QԂ(o}ARd-Wm,lֱ\rA*Ռ\ySrt ]`fuVyv8oRZb_wj~j6Vn&*d:JFy?9 G Jͱe<Oϥ9}s)ɛ#ȫjջ 4 J.X0x|1%7:uh_U4=~zPMBN_(8_pوeSagG"%?UKcO'Jv D?Hiq1 íԯ6WFFm,wj)LC>Mfd1 ijw ,$Y?GJ5|{@}@wf,hɘt`7Cs'1;ry_06zM9^VHpXItTᘀ"t%\h0=O;+G&W̙T  z1ٸ<\і|#ΨBѣ xa8[)\u.[^L: QL%d_Mb\>PD{{NzG# Y DBG"}LxuP۷'@8,8`IxA,qq7b0~NVTD3)4g!9q=G3{\'y&1@V21ߓܲ!'*yT^ `AqKfa2ij-y$&$dwl֌7Z}YFA.v" @2셙E%[soS{w*q u K CBt_.U4.՘;El6:rP sS72mb AǬ"Qyߋʔ=KUcjWόg8jJS`h :ݻ.0vFð27%5<~֌_,p6)aU]^P}˸o9+C })[Ѭar52c<ۜ|~,QPgq*$ g~*?o}PA?fU8S py/cs}3L7%ܪP(K0#oCpK2nҙSli@9 FãdcQyBR"c}$Jݽ U#4NH| ߫Рi1Q4LXfc[\![{bQ>j%Y9M 1`hN=8V;> U6 [0uu~6JG;U1>TdLG׵閵wZQcppJjP#g&Z+6pU"pwF)W{;IxMP@ѯ19ZbL-2z94Ǜ;U ?"X1ݦ~lc,>͎g@%kR-r5h%|*\HwdFE!n\a꒐-Q۴ 6I:Y0u*kوbY̰wܗԲԸ{+R6%g1G+dS`f5GUw.!`,#@^ QѦܒ0qIq?)!VЏ TYg֟hG"݃j"A1% lpjDn]Y,D_rViC1Ijou)<>(븪aZLsە6 ;5y[ł#;Ek.kT!@>YRt鷨*ʊrtSUm[4Lk{qk 7Tdm 'nwK![z ؙFR%Prrv+tdN$gv~ >q nWK5v֑6Mt+)? ~>08}27|DPIqЖJ﷢G1RiSM%%5{{B'nO[Sg'WC9b[7k?Vqo.; f.ݟ05|7g#A3?ƀHINyg@A_5/$+j%G>qKa@BS=c̊6g] WS5|JnkQ82 kPPno8sܗNsDS`~[ Cm_ $ф2f.3||vZu*GU}mLXsˆ޽Z ꮡ8oj!PiWHPz]f,ɪXcD~(80$t_v4(&ya9p[0yx_᎞Ԋ̑c5W:LbOQ-JLn*ԛRAp{5D|ʟjkF6&RM!6R2YzMpf`B?npcC\M˥*!y)fis$zFeJ<3HgU^/ZTG֗]ϴҴ&F4~|;'nOfL=Y8TrJ)hӫzh?TXjFh!1כ1⦮N3[r2Qd+aem*1L[:!EYt)aL\ {f@pyF9zzȖ>@%42Q`FNa"q̞Q s}%s!A-E:mgߞUYh1 Q"VX5^Ǐ-7sYj5b#9{ 2y"ʆF}p.N+"P9 B5¶D~Ns΄oS֑QRe#.IVDNfkgxͱ`ǓG3+JɵtԶ3("ShɛJ038jc%ؚl>""HZoxn= gAD/R*C[Z{5J bV{I?5'cYY=~p"Ԕ^$oKG^XME]]Ao[H 9h_o> ̵/Q4QvUW{!|s^t;] tV]3.Zgqoy܅+l%{v4~QW=U&K/p]5l?HW#9X~YIp]ϳU^EA:$Z˸&7,ΊB7dRp^ל-yܞp_mo[]J0l>{V>7r06Q H[J! GM«J 2Їd?itAB=,4n5]`a<Υ(ɮf ~zBC ^G8\7e3U L>Nv]rnoDt QT}e$ǎxZPd&PHk5TFB_`zOQ׮˘ n"m{dž˴K=':!"<qkZ9m5& 6 C;dߞ׸'nrxK<|(&|$Q T{:1lBJF}j?UZPo"56t?"G$;T[J~M47Úm5\-[Y^ϦIZ[r]=c.# fa{Vs̿ v\>^RqILSJ.H&IР;Fb~HW]Vס}(%ˉ .sHvP: r{0ѤF6)Xsx&0.zX,3nn(Lkjn<|E`&h@݂߃]@#MXg&1Z㶡ir&6b@fzyHܦQ3*)&'jݎy|Vd5IbJ3 4FfÛèLb]"КA_x_Wo#;LLyκ k"? X)mQ8p["Km$>f^BIRڹa>SkcB"P'Đ39Q??zR f]/cuy^965Fmݪj+ =vo[l|lHYlne1]t }-aT+0bD,7@aG ,T,`zg2}g28/*zTƄVr b7HXBßC%gD.bÎK8S mMuvgQiee1SoT fVM!9."J2-DXe;fG pP dJKf9Vܳ&("λ--*'GӍ n[BicWa *Ý^U'ffzctK&=+n{O7 dwn^c{^56F,2 x,5g{R%ɻCF؁qK"WKENj-TbF(tHٖšK tQ '[uqfp]!&.=q5Υi,c"o44Eu71dl_,Ih$KѾ:v36z)@u^9Ey Tɀ~B?ar7vSO* Ş2e1])Ӯ!KTz0@h_ %в[gI 8j%^ǘdUwwr=>}<_WWMP6(+g z|3db:fM@>O0$XBg):=< Se φ3 -oEu[+.T>,߬EHHmCfYɶ3u-[rL{Re} AggtuplX_)nJd;W:guc\.B+N-oy-icIyR}cuN&)0'"B#JPodOqFB vVZV>lpԙoa"H2 %f4+T% Ͳ n6Rp/zESxRU*ZW'b:b} rTS_2m~w}' xQQ1i^GW*aWP̵!Ԗ5 c& !ҚpzlthPJrХ/5ARºbrG͕X39d DS4r#:ieyS?9dK+9[#cPb՝QHrZc:ȯ%x8{\1fYL<SDfҏ:x/S,5h1w#l Hw\YCz*B+O\&S䅹:G>MʟkorJA yo nf>4UVpxً$Q!nN[sYY4bdEi5v 'B[Aj@M:h1J9!~v~@>bFΪk[g=(8W6:UNmXd^5`Z{gc[򁊞'9#!Fs2bǎU`c*G+ XJ!GxHTރ.Aq"IFIYŌa~V ӏb/ *Wm6<:P<:Ū)54r^!vlb~jdS"3=߹D QGM\g`Du O!]ktu է4j2r\s>I [!fvCGfA))xe9Oas6ψ횴߮a \ }Nؙ\ig O9FDsX{%*84wٍMzgL=HW'(s̠iJɰ}j&$<:])J&i,|˹4(3i{n@y#<P 8eZw.]w*e "jJ@k,;DeMU]œg'`"%bުR)geyn>I64,7 ?y.Lfu3ZtCOR ކ/ʡrta9'6Psy rjuxJa'5BL8ޏF1'uKƿ]izmpjaԺ\J% zdZUc+Jf?IxwX` ֻy U`xӵe_L%"KM|r/H΍-! Y-,ϔ}5ItWѥZ6F3Rz+O]+ٗ5\:;-Jh.!H~{ME(]5{s k! CMU1#@EKذ.;):&:CFr۪gOv>E!;#oPzR`6;{L8Eq KBCȣs1;[(qC8Я%%sO>C^lR8nmh󃢾6g T u52@c|ۅ<zT&<\U8c嗙]f:{h3ǻ2"lTOLHԈ@ ptmv|5!v /GDvċ )x]'\x|JC L)7x4R,9f2dY(/-u /tp& E^ت{ IvwBJڶ. U4z8`1WM N$,ݠrҰ8pe4ta_kR/t6q|IOL|_eOg!NqBT|BיM1A1˨(T +BÛ;=y(=>=HSNj.YH&cO'=1* $-"h1', $ҏ71S{3P)u Nl[4qѩ9Duh7M{)>H3@4L<-FhYoA3e`V2>vOW}Kݳ1z%Mլ끲H.x՚JSWS /CdNo)po4v. a4vvhD!W %֪Ilߏ"$fYџ2v7ℜɺ (߷0A حq 5R@!'cAAm?dfYLݤ!0Wy& _h-Gh|O¾+'쳵r%`鑩7c7=?JKZMD'ҡYI=8oLPX,h G6X[ksy,lըR sC_85rztSEK[CB\' O`?c?@K1cB}a(4jmtɦ)r^༂, ;Zk{ xꚹA_gҫ$Cnh!84th.' n,N%A, /9kˌ5C2$ s@cӊN#5?b ^`̚1͋ -F0D!dNφbd 5$S&-…:ˇVx#$9AgH5U BnzV@CNˎȈY~L[ԭvǚN.ъ? j*-+S3NDPHshrDEh7r#T # lqvwJ 噩zSY|싑8'|c_ RiY:([8FܑD j<5cbK6u8:Cp+eZv⁢v<|FXy!~[+YVUʮNX ME!S.6( @cs3KZPخ샾m~8EIxB{vS#gj T,|sRRQp0fi;G C$z>R俕qк0zLDL bUMΫÄrcМq5{' !_?oc 0U?81OجǴoxŁi>LvO4yzP tEBA6IB1o&-E_GL'zS=,| `WP<'sx䠳.3Z o(__TH{HxoH6V2As|;˄DkD`@Jgpj]-W;[%k,l}ΣEB&h1 FRJg hOHilp ν_)L0ft$t05r)wB#^jՊ/ze#\2{J,ln 7i?\Y4Mg﷝hZb~̗އ,Ɠ;WݙΏ0~J!'PD}AK`Iu֏VMu*Y|suq[57NA&Й4&jR@AvՏ|n+yvx8yM>GFИ"#[XkUa^v俈 rOKݭJh*+) w0jN/tFs}q- c<#@  'mkүs"᣽r7K.G.nRppRƗ9M+2/Y|Fc{HY&ڠ,䓚[Vf4b)L 2] RB0Te'2}oOga{#.Kw땟)6ryq.jrr L 6pPh' ܎QV]%Ets)[(Zេˋ[+X}5O>$]W$E6ѿ3П Y&-;vXiY,NO([3Ǘ` YΗcS#XgKˌϣmҷ b.ZM ZnFK8y"vvfR ] J},B3aߖqK MvHeff>4ߖuH%lRP<Rv`P@O#չb?]#n9Q|zk%hJFq+K$Ν žY8J#pDfk -ETKB= uDW0 )o6xwK XUM3g8oe q &}&LX%4B(5NPF<~,8, *N#=sf#~Z#楋+n_`ժb:M C\9kHeV67Sz \׀*}.gTE+4., '@uP50s򺙈}|*BHA15azH_U}qYu8IQ% @M>LZL/Al] Ei̻yH61tŠ )i884]vz cxA.y4U + G]S4ԇܣݾр*X" @$=\09l n$!ԋFzq|_R/{QĚ hcyA!Ŕ6rɒESƒR&*zd&V ~Q*VVl\jz{/IBJKe0?Zi(T Iٙ>N;v]3,KBcj 55nlO 9-0EFͤ(I5~JQO'УsNɻhت..aãOݵptN體ʌ!ԬKW%-١2FѥNiR,s>j$|KsgE8N`MLGB$oDȇ>` { mտwc, Wa~ԆM\}H*-}e䫮2@`5* L SuG+q fJ>A2̴ ʷsF2#!vkD)g>gܜXb(`9j~'_|˩+U"2'Iօ9؈G*=!n'Wjhgb}“HVԿ;p1iQ 9L %Ia;7cH4'yaEэ ߟ> 4AFEfXE.):l2IB69Jto0]S6D!6TLNlbF% FA(&ɻu8PUКGmRUQiGwZ+{{mUwH^=#_HF+{I%o 1}C虴uV`~$GUkJ=Se#S\vRRF1EuiDwn{9C}|]t~L|d9DPP:y KPHɕ8F5f.吹o#U9Q(T0S8X~mg*4< BN2'-&9^9 \*8dKnvOQ30߲62٦T[cO|޳gJ4ak|ɻޞ_'5r04aUTT3W '}*2IoQՌ2嚋/OMck$i}KK68r $meiR]/CٸyFw7d? lJ*9ݛfTo?|2Ty?KY8ARE$JBaũIR8\ wzPj[L2iEw1A;4I1-"#>L%O*@!hi>r0D8cƇ75ݾS}ZSK︟JURFZPl.u(Ry'e1}iW- TVγtSG+ `!Sd dgբN $n*6 yqMJ|ED(J{ r2SX)W`dNg|4|jp;eOp ygTģBl $7z`_BC0LtXo9xSB}3F2GQ#_W܈~$fjKL *++v`.1a#e5oTMz,V`V>>KKCr1`FV`dBFNAP<-To94 ޔ넕d& H&Q񯳮#|IwGJL*TH)89* '9,|#٪@Hwdxg\.cvuH@Y},s\B:xzYK=B @G4=4P=տS$n{h=Qnu1 g+(&9o*;ڴ0gN[XamR'e8i#0AWcVUwӗ+eoOrA n-O $W0B#Z#԰ tMjKMSoӐ[yKJw^MY޲Z-q>BRS'՟}㋇G^T\_kh\M>Zv+dh 'r1鐝v5ff҅_W :mk^/t wȆpCVƉs+$(xBg)H"N!`=[ A11hnnIdS;+ڼ\ [iا6([j#@$ eu&dOLokE4/ctnH~L*^2y?ǜ9Z2F +c'z;tdL0[8 UM@|7GGx !\9DP3Mo('@0W!;WEQ \Bx 8ցA4g:O0Os dm!A+H&_!#!.@OV  d=\gdA{[J#Cl\g ū%(Guc!'ˈ}Ǭ`3/-%uDVVjۏwh6 Ĺ;[Q>}w`T\\0@^EbdReh)`,|}4f[Ꙧ7wS N{R|v1WU?aE/BVo79s2&|TW:-im̀TxFs8KgBġ mlJzXzul|^~̩ ^OM=Wxz73 B83~09QE q#h4]]0ْKɻ:utvjzj#S]4?bwl:^GoDHgd[%a)i ,k!wQL dw/Ѷs4$OXZ_yͮ4Ϋ/ ZEb\b͔cJDi r&0UG_l<|6{PxzoJ[AsaG[%$UM_>e1P\x<7,.I/NCEMxR`z-OlHY%A%âGb]B%N";;b4Cp^Zrsmm/Jxi"5|FY⟃0pRDJ\0=s@xr#E`țc|w}{z!ʺ} Ī{3 )&5R$ SӇ[4JzM "0+j~J]rkDGwBtL *n/QL Ѿ/PkH?n&K#Emm#iKKc~w/Q2^_7M%.VaD?"h#AĸguZfR+U!TKZLr8It$y M-yHFIyjalaXʔSa\H@YL~2# @4|J2nwjбw}lȔ\ׁ_%ZDܬgwdW|>UӲ)䝻]9mٓWVmƒDO. e3y#a./174<&WKVB-y ]T2ݺ] p5L꼂o[нOݽ459q ~FB: F  }_54 6ܐ`J09F>b6SQmlGSa,2a˘KÉW%"h_nKL<0҉-wBB}sџ3`f!l.U&^>RHcT>1@QVjQޖ WgtḶE"CDʬk) 4J sP,y 5< *D "䚿*̉ ?q _/R}ʊ2Ja4 XHE≀91}ïYmCZ[\a| -bk`av(4pE-|_Z)^qќk P>}![)A_X8§n 5=6fj),mt3;m0Gc,#0^t Gl#e*2]Q8 [$9ɖM@ߑk0͐ͧiF->Dwn7 ?edyye0qZt=GSˏ' iBuz4V}fcФ(q>3H?*bl,u:Ɂbvp IQY6bW=mn sؐ^%^1(OBP~/,aRjlXH; 37 *^2C`Ogh PŴ,{×.CG-m&FE!-0=,CLw!$|'DdP%cFYju#GաQ@CrR*džp7/%'[6i:$qrI￫>AXْMBWWA3tg~=YwB _u-ZOnD,GseYBK$obМ ! y v̕tgIm Fs> gصsɛU,v_:@ǫdT-M+yWA>m{-@ l#3QF_(,_SyZM$71w`ɈXh^/JK˄6+قlDU\p8 v$89*{?[iXo[{?fmb9}?/=XhDi2:=z6@L6/AGj"5*D֥USmAkl^ة?%ߥ$80BkttuBppVnn¼(Yi0lxa7.cR7ْ ǗGJq+# K5Q(]M|]n=N[f$^V }s;Q0}K6kdD!#~2+=-)SBE4 .)!?L:ZkD4 7QH½Ĭ Q 6gAWߙMYWa;EEk ーP (Qd11:\!՟AP2 S FT&dWbod{[ ^j"Ey [_d;ɰ qv,߿ _6qt'˃-fkNA_o>],/7ԙ08M4mgXGkѥ ,A蕔Tﵒ$0zkN#zdܢ=HRgOmp!f3^0Ha%? ZN^o396Yk&w:h"JW;KA^QJ^B,ڗĸ.NwAa۔(BI pȢdY ZUj^E\L#(*qf7@%®O[w֪þ*n\n߉.vZ.*k5zBeFm,wDq*PK y3QFt.L#HbjH!H4>XP 3}YL:4 ۱JK#-$纤,b%V] mY4zk/N"P-| <|ZjX QC2ZWa\!@줘\()2⎞ܷyi! +Z|Z?~>l DŽA CS;`6y CJ-Tߺ*鑪&rV9nt܉ɯ=h ^?$)zh+}MmҐKDjSKni7ddH(W9ѥYn._iDZ:4X670anT ( ;H%YcrkV)k󋟢Q[Kp;h& E;",1_uBEBjCy_ybV4: 47am(g7ssH|k;W]~wO1Р55Sؿs/iL Ep{+uNM&bv| RGC2٨렙#h)k;bSEFO^Q dKxCD_4py0" gfc'0CD-ox,WѮ} xmmcF],H)\VR߷rK },^BzAc+DzySvRݼ$bĢ zIV6i`cH¤)m% 5Ϫh[ݢNVc昰O{.0W 3A)݋#Zih+xV!?FvnOk효pz?Ј i~ES61S_֒H?7)Q"+6H~+/x,`7^tINU)ˮVQFM#1<Ƌ ~߽XerKg䧵,8PyRɿa)X4,Kj$!. d4\%mD`tp*{2rG\f {fQGdC?vd3E2Cl,?'ܖ<+i$Ğ,/>1"blƷ~wSO}2:?lQo>e7c_id`ss0PB5HX% +k]ȣ; űV|,d/"yÚU4חV J/BaB@Ԕ~qyR-H~kY TqU5~!+t9 7ӮDpnc? $P$TCy-)0\x.\!oㄲ1O'N`q6pLJ{34ֆ&rLlPEձ^\~1:Kɹ@xyx sVIQ`d@ʷ%ppDEvrC|K޻:WYmdZE7u57з"Q+Q jxH3CW ߣo4>WxC?ɁPwK7oBE =+wa3W3ܲz {y͘x8) g\E֌AdbkQϏ ̓'+URWp%w+;/V(QϯG%vϥ`ѩNp@Qa`Q^qác7@KXo>) eC=YzBguwR.T{V k=̖SDud3>v ifb$yf[UgLcǵoυZ {7#kwɬ[]lE$wpJN~ֹ=$!5, d欵]Kf%A-6%ߍ_~$r!h{ޒ{-?ͤۧjcXfAGh}ɽ(H ~.T7dyLs!|9gF3U2a# "_[ޡY jkFfu>_Z2d#3V(U@EݦZʂ*)RGBj/L[I7Arb>a-nVJ>UB"dD6@E,[2%!6 㪉`蕅_?cYؔf+@$ `D= cQU܂8y`-_a1 Fx%zz%t_I\j3055,xZ}UV@< MP]A`W:Yy5 峌}X"SqYZE>ϡɻFIy4\r@9sX']NN5xG~,@6BaHĠ9ٌ"j:b'!\=؃A[~7k":1{-Խz"y^p&_9`S맖lC/v@m+p7W^a8Ф: {Cg)YR(E8`sZUpp~6b[ Q%gHA@snpI^򯠝Eiז| "в&1u5wF*?g*f4Xk׳b @!>@ j1MѿܻAglzTj-޴lS6tOsC 56^u2PgSCdPL඲u0(ݧƭJ@A=oP ˳>Bˌ<7 ǣsj}Qk1vxІju!z xa~@:G#8KT u *kU&<TIV|)G0̳eWy D?&'f/'3Դ;IGC/ acrkv*Cv析BGUb9}e^5Kw$\-AF=RD Nփdk%|'oL/b|h+)e:QbDDe\r E{%]Ja ?[lXyAnjr/O5ZaȻzyQTW[;; 0euzh{h.S1t'oMM3Oa~weq^*WGWͮCs849x3O:$SXݖi3:xG;zb?v"ٛ-P{wks(y # JJ+'*LAx~Vl9I4bVIڲJ[" oysUrN:. ߞوbV~F3aϠBMnK yȼD̹)DFmqQ5 uES8B 9d܋+|Alfg`[8RwJ|<ꑓ`Tu+Fm؈it-eyr+HeT!PɌ%l_7yg'%ǁƯhAd?3{8<_$f5uU"y&aEE(y? ov~ۡ݀vߝ74 ;TM p@=ML9bsI <,E- o*ix P!ɸʲ"B*!slfmdcCq^)J *\gQv"hL&[Rqʋ* A`&J,V609ŷKy>gPI8 s$C94e{=)F!6Tp$ ɽ0^v)hQ&ZU21>􍟆S% 6FxVa{J|Hsy e7KRk ē"wX /*L;s޵O>=.pԱG_~u6:)v 't~_~qpeiK }Sic޴o>t#T!D69DetLXc/J n,Jk^/V0`9kk\(EsPf2rEZIA+LOnNAl;z30FY*#Es:$mń,iqs=Ԍ!W"r8 z}XNN0gQ~2=ܼ@7 $-ȇ|B;Fta 5!W4Nچ۸)s"' ȃ'@r-hjHOx_ڻS8a>.crX,!Y4{o_8C@( r vTd#cEl)+*$~#l⎕=؛X |%Ԏ'#H4tNjtC;9MKOZV%ZkoE~_$\'͔ӬC?Yo:)ÂevgW%"I]ŬVŲ 9Qډ|HTf0"+׳-.l`P~T;aYmNckv2mqĎÍ*wZ X8o/ΧTs7p{߸T~J6Ơ/raahd7|d9]5Og>FI0,}"yus^k>9{.J꥓rTP]v 5 DC 55i^v-oL _M-7!xm,2b_Tf;65i+A5QBH^ӭzl /Y2Ǚ2R:%d#Snt͋NtOӚĄC{Z<+=|wyZudhHVH򪠢 T؃C0D#4THab\x=F&/I 0m`Ȍ~{*AºBk¨PZ`b܄klE <,"OoK+>\U&xT:삢ua0x)雐f6AJۧR-J޲KPCXCf 6~P)kbj >r؜|d9ihCB+7eSv~k"ˬ'l<ڿfsp)z9ƞ~F|!p2I{S@_M! K#X**n1q9s~"4).tT\]5YԅO;cmrb/=|-f0wlG45auD\v%gi)W„C;,فf&L+@duʹmm;G$r 둭2hyc [g ɥͧz"wsM3&X0Y=3pgyyڼ;BE"/ D܎BʅV Qh2C h/,gJw;^yHV<%%]J [%8癷hl<4p.>@}UB:,?NaW%э4eZ2Q{&ؔJ0θ],@7KZqlMMlh{WGꯪc b՞#8Nv*ޙbdp6;a41G#:nRs+[z3 Eȇ|tfƱE!ҵ': kTnF* &jW#+O$WI\ڔGكe֘yODFؤdao1Σ+.dzIb ᣔOH.0BG`pmiJR㵡4HΠ ,8 Cf~a0A\Ξ,D#5SVG QuW(boZ5S F=UAh*kv <&{3q%Ƿ6k%.蟀 #sN%b1voC-)l"Sl#θ,^Oٌ Y!:oH9=_/ݛQ",WPFXC/f.s4F0 W"}ˉÓKosN>o#:;9ġR8.)̵7y.sѩE>,hLi\x+#aj:HxZa"p}fT>\ H`̤5E*#5:Wn3Erd#ՐUFʸ^œ3ݳa,(|՗T|{ KN ѰYcYrsUБZGPY& )0l[}6V'cZ;=-6d^os݁Q c}z=,AX` Os7s&iS̲qՖm]WhQI2CZy~kVD9|KDt8pGaΊ"싲є5^m4:o-YouVX˔+|ȜsPdߜLvk/ETQ3LxPΎTB?ڳ|̛.N/_a*z4 cJ0@ fp\hfj-˅ECLdw>`vGޞ]ێdβ Y= 8 $MHEwV taO*}*$leF2-^c0xcfZ(}A ^-1-a8E4asr::;̡f: H%EzJz% c^L݊!DkBk쾈PH^Tw{6ɦi3՚83fKr4 h:Vp]}"!tD`@ߞ+Z3'E+ȩNķ<?qkp+8ܸj&&6xoAln+I:M7#E BlϾ(B*@0긹xr[8&Q5iu-=[m!u买RM)bl2 @5rCVk/2ncҽ0C\O7&d`uu5Iڨc=ו-QR3[O8~H%L pr-Δ:I"6˱)J.((O=|q1U~a~U2S=n֝nFǪD:?vZKVy 6V,@r^0ErcMq$@\H=/;PcItD?fy+c_O҄͵&2Fxt|.򊕥Qʗv!Y@ސ=ڕj.9sL 1XhPϳ͵OtEH{Ty §Ѩ}9]~ [G`UFAxVH-_4\kz5SѢOPIs%Opn~ӧ_>:|Ȕ[dռ78(CÃXȀh<Ձ]A}80rsv3bʵƗl:8{ꅵ)A) ,C:Jb;"Pac;G}O٤eE|ԕ$j Avsq dynv^&:JGҶWGAFz1:ga".ȏ;^Q踯S[L~:"Om1>m7:Bwi 5]r⮤i^CF?s=Ý(A71uEs9CQw,M˛4R3=xOs+Q/'M0 'E5o}Zzcd4=k3{: _ԟT^~t ҬeX^KgboLu cAXLlM*籰 q b8򞴘9 X\uXKc󟽏/Uz133zO3E .ܧr:o9^bj?wm 'U`]pk|f'@jzNdp>!(HJO.:l2DŽxzIjT7~MGBZpCS,T|;F!#`|,r p'wXz2p ,ym GLA9>]LQ3f9Q w`M#H25A|._Y&E1wV bl sJFmַ)#:a@2>u`Zgk~UE'g,C"$+y-Q0½g]1>go!THu[u%w%jW,x5 Rpitrd}m5,^hǒ3ڐnr~)>yVF#7~7J@yW7`]"ղiQƗO37 Lzx\r,g/{16ٱGdB]>^@>'IzѼlsX77dBkyDĬ.mn_Bĩu@>0m@h ۶v"zO{@ܲU+urzT@*/!iYxAwJ5XiG[3 s$+/1QZ U_P=DMkVwg<[*?zGƚalq,ԖT-֍'@wh12ZX1Gv͇A}y)6;$-zC[({\߂"'hW~Q Z?YR< `".m=x~Y?_0Vw[ݎX'5Mgł6#=y, p\"i6|\"ԔW5! QͳR:+y~+0 XD'ȡN7tLBPe>{m"&?ww(1\jr:!ygGGx\ t÷٣K>X-&;nt`ށԊ7[ItB<~LxZ}I([3k˵LKo/ƒW%9:Z8ZzpSwSʀh]3}ܩ 12k.H NYc3=waR/ +m{Ǽ H<DN+Q)I{AIz."`f^]_ؖ:8>z %=n/KU$`$$& OGVQ=a<&F5М C2ґLZH<>}B˶U%nh*ʑAW;M>x(aaO.#r6UN$6XÝ>9"GС+Al0cr_O,NmCJ?:\Z.H̑/RȷvϷ<%ixNNS orrp B8b"f^0nt7c6J_'3UN9|;P=n+Q)D 4NS|y'N?m/X;o݆z$3␰~&A3gMhl{o*pu%/6Xy#BAY}U$7wYݷ85{fV}fΒ]|ɰ~lA:24qM~1jR[ q((:hmpR3e8^U$ԌGH{iqD jkhqM 6*DC;,g潤lu 1<ʡbzo(>,wa)ۯ& 9T& ptCl7ԳOs߅"EP4"|~c8;׭jyRpBH"ujUSN۳mo\Y62A5YŻ 5ܐ_bX' 7EGp X}Nz('HAo9Qj i-QgODZXb Tz#ENYR&[]ɷ};]D[۠S) Ca#2J9{<ؙCvA|ϙSܕٺ8bKgmBkTFDtd'6no۽\@~^.W@in2efRdp(U87;_1Q;Xxjh,%i A2 K`T.OZx&M Y0MʌU'1x_;@iC}WÙH- 'MT/Im'ۉ^yD"5P ѫ?籵y!^?U}EQuh4/:qcTcڙ.cQն2A>xz e 2/u@ȩez9 !6]ي8 |\.(@ ~tKOfqr?Oc}Y;9jpR̶>Ak26{D6O[Sly:+jk] :0/yV9UZW.k%60.&}(>5Y"nGs +h2ȧؼǴo әL匶y"W)iݽgMB:V:ޭ=Q50RsgڎK+/^!ObJ[3=F7o|qmxHl3#oI-dƥ˫?hh6kۄ;|Y(s;mӶc?0`?7{ʪPžsPZE P+;=D gśWnl}܎o kt1E WV{+1ݰ#_EѲ$ t=jW9ATdWc$wQoXr@b[@(^g0[:zh-agPWuɦ5|p޽/LR0̯N?~p3T^24I*"rډajEu(PA_Jl(oap.4 jlEc>N _:NۓXfd2 ǒe.*T5)5D -ouap4T^K#d9bo  {fոv'ˑ-Tf~.qzN!6~tR,-y\(^i_Υ)82z]OV/KB&hЂ, {Se_Ͳx]'E:-ج)W֪;;D\䎎Z"ar>߅jT'N_42{>4}dɼuXaJ"حd3'ɟ]^q氝>#]1R~hk;HLjrklBev.cbz;eYT5ih3O|ɐϊPoEu#,xO|::|qIԽłjQqs刯nA/-:kkW{:fc-1?\ 1x9j<ӄOPBP͐m hlh>!Ǫ@j} /.XKhYia!!iCe}<}- }x(v=yg jrsMEMY:吹K-3mPGAzH UH# "dNlzW^dnw9in л6pc02/qPOFBۨ=E-#O&5],{̓xt0~Xj44})$`h՟"›Dp3ԃx i*}Ugz=DbVM?|u+(h->ۜރ /xAN5_0_qLtyEvfqVVRgY6ioZh\Vfid[Vnqs;5X1|L9k%.M`@\uy荗e>mg4o-X"BQ{'\uaP|UD9LE/o *˟%jY34Wk@GP5pyK!}N_]Ѓx^¨_շ:' ]P'.{.֩Ҏ3u-`nؕ"ݡ7АraguF泘&UJ=xͽLJXF~WƩ[OﲄK mE lYP1ba$R߃mңNs$Ƌqժ"G?=@)Э u(LSGTLMU QZ% T %(^]ĵ )@hq`Kh;/9_4_Mq ~*O#f)Ğ7MO@-oGcr1@I_6im`oTV [) 9Pv#c3YC\o ]x[5(M97]4hr NT&9ɦ{C׿@?Wei. W JkMӿ|NC(u3ތPwTɞTz:ήr+6Ee1u $1`rYW˘=%g:r#2be##:{G=Gn ѨA_u1)'i,!I".5@5}P G,Q9:hz9Vz_|1\|xsKPn$Q7 +B3R g:2 `cyV亮]bm0[3/k5b!Xb_29PˋW`?kVfw@C@75'2w\fr1@יLBLOXycɖtF &Xv%4fNV{lZZmСjarE#7R{qžS/1 &yK^CA T'Sz;,;P2T2:p~d@ۦZΣNQ@1(cĻFvA'>om8lP(%CX5,@GU+yCO ss0an,=\V 璼G[KS܊xy;.3wbc1 <[wf,)R^o{ec ;of'vyhIrղ^/dܱ Q^XVQ„BRr'N"a,C_6{9YQ|I˛,8FF =whf6u4GQe,Jtsb/qr:[ƤB ~_g9!j2Ns|v\7yp*)-Vh:x6)bgL #bc<͎6#LSQI{yQoLy{{No@,t2>a4 ~ G1k}LX = W1ݥd8x٘_텠bXgi6ޱz(QmŁG?IwelsB5?ˏ3x~3s%uu5&" h?xxi\A\p?`'37{ *?닫!'">,gQqEA/vQͪ4類-dGe>M" Uae2=G4)O-z*oI'보^k1C@(LcwnOBx&4}oRAs ͎*;|ґcO?|vx M ?%&gT4sY i]e0u3yŤ}u=.C t+ h^u՜~}ݭJi`a=޿1]/* GAY)|7.$zm Y_w8.q3[@W$($չ"J8>_%bsDCG)WoCbҺy<ܸٶd(!rDK|KJ5zDwGߪ)`^ 6CY$ b?wEܐ=x3ɛP= :T3 }ekdёZg.a$"QC|vfbAbGU*9p~R/w˿ы4I}U5j8*9lvj_HFTT5JQ ?pqbS-5/`~W揉2v8QUr,)y$ <KK}`+9er͔>53F@^hRaҾfezzBTeK3T)Cpi k*qOnӭUGn&W pjRc;l-[)tmvB kܗfSU8۠)uLI7x^lOοJɍ2"u(NZrV *F(S-m:#e8:}ABV0R;&&d0KKjl*q'4B; NV fj{,A]ĥC KrT%8|dA\ &sm]ryf|p1Z(3J[M on LD&{gA1{3arઍeڙNe鐇*żB]Jgu *F`Lw1|FCd8-.>j j VLׯRj _Χmҍ RNQ@zqrylس'wƉnS3&ۚԙv/3Pio0e%7=U! dV #txq~2wzBn/stG2ҒKb JꑶGR,Guf6hdE6n)rv,Bp}p \X|%wQ,EG^隸?4G5AdZ I֊fTڊ"_2o#D3Q~}aZ[4hB1pw*jox)I)=EA'Lus°Ty_$N;u,:=]Jf|AvWdϋPZ=M n/cڮKĊ#!z*=qHm(yn_(ɀ8nN@wH5BPe46mO폦:ۼ,NKӪ(\xOpeXdM=A,fb:A. ĉ_ ȩc\Ԧ=91}/%B|ape0X/'rs0t e5z^)*Lշ<;;Ӑ2uz.,q~r2eшiGA_xbqYgD؁{*+0Y6d@43΍ljOJ:#eOb]"0N<?BvjWk>UV)jSE*1=^K|tj~~Dpyci`_O`W ~;Y†NI.]B5YRKm>=bnC]k-XGS"g?3] 8>O0,:o·\{4bD3YdISkku_OCqCN9y_G 10z>jK|-<ZJ~6bڰsiƲMAzA D2h0*b*]'ץUFih TNFb@:& IVws C*d+SLSc 7k ,FFψ(_P]|b @- ŁeFMޅf}.=c˔E2ra e@Am{-X^ա<X V؃qU% *h\Cr'rк1 X( 34(h. i>V}УLA3ִ>`W@8E7,tх,j.FTѕd؛+E0|)u@wLV8CG/zJϰINg 'u6ac-hCtQ4u)byBJ,\DCqA^!_K-9*Ej!}T)3Qv ɧ&4 LZKdX/#}9P;pz9 1.CX 'vXW|oз C;Z(NČpm?q""v}=X^T_cef?USW}%$W=g*Q1n# uP^vnL>OpF1Q3~`)&z(bs; |u|eAb+MUÒQ-,6-xҺ d-9* mAsHe;7p`Pu8&[]вc԰ ?d1,mEn6Eȗ"Bd$~!C{6Y,'fݕ-TaQ!ϼ&'M vɉOfkɆRfKJ^'g&L{jШd+ TH^As$]+l7jLֺzN:B0> mt3-&ɐgCr/[\8vvվJ.RbKly[;t۪ \S]5ƾ=Wl0*wKtmipny]Iz Few|)-_YOx&KJl ED],VՌI)M:fv.+l!Rƹ#fqiSV &ug5O*"yW5ˣdBK Q!P飗5P#~ކ 5F_zvb:?B #d-_5tn15[ ] Jf:bE9K,!c,@z+Ӡ ,vv&x`aj*s4'Ay8' W)mZǾ6z)!Vla(sR{Tye DL5::km;h_}lU3ƀ{hM k|3D&0VXdn-K$dWʖd{!u Ҝ#*=Ә-j*4yuT:'=DnZq맄;BQ#;D;9Msņ3`$HoN_B-B'do~l6{նeצ \m;7eZ\$1Łu$c+_~>-)WFW4DA[~cQ7[WIMUzԝm1)lbvzzm1R:YU|.lE21|bR!ZqN7%A$3{/2xSx|hBC.2QjI'L*DNoD}ejI/M(@zf@"YsN SwTz;*f744y Zmh8%fE'ht49/'J T]NdJT[>OP&a+Ek W(Yg#Ubr{9dY>3{SS5Z1P5bl|_b1/ b$K11x> -5=!=k<$kNIVAKnbK;6cĝ9AM@~t`y;21vy%4 FNo7{"OW#5ֺ3֦5/΀EkwHM`ΫïuWʨMe'|?2j xp|tQܚCHt_F2;7;,ʀ//f>7|(g2fYAOd&>=+m}`/Y13,ylhp*9&ʾVNީ)L-{]`s KW^v0cM^Y7 hef{9TL-i6m+>U* _7z114qiKrDDG(/ݧ{q{aH y,E09NVlH@Թ%^Sߧ%5^59ck\'7_h@,x4;#݉ lH3)דk@ol}BGJOajTrpa2Z_|=DR, γo'ܠ{dZxQv{[g+B\G#Jfq(׉ Xq&jxYMB"X<|i!N4!HV{鼣!M8<@_աV)P[R 1=yG3*w^ >'"B!ur V?AÈTpTO$2WOQi㩒~J>|&9zzxy-[3Yضg BȧeC.F(^@iN$H9R7IXh? 2IS..E\Kǁ؉oT0UasgвXhXZִG6q?tb=8RơE QiN ~€5I;^nzLDHbexwKC)i;2K!CS7%d1"Bhct >@j M!meϟF֡Qc[Y(SLPd JQ0' .q|/ fz#+0K0WM75Ų:ҙ׮tdo>rcQkbbʍ91o&:8 " ) Q} R>\( p0 lr]M2ZU\Q/Ll#QifwB.I(,lkڹ A>0 sAK^wţ'(ؿnͨ5"mFn%b*4RfV^A_NQ'׊+9>di.t|n>XC7Ax f"Cvꂳӳj{V^6 0 AL(S?ѾׇlIk20 gF|OK+ӖE{YGpI2o6&y|_ظ6l,:/*MYf{F?Z@oMOIYS5/9߼Z.8 S3WaB$.-t##<\qc؉D"2S;JRG J$zM4Fdd *wA˦.4e?iVӠ|zbYV^U\$и py;3Xq}]-+2˜õQH@&U_B\ Z|rB r䚙O _֯*ZRqInbPhqڟCՂɴa+&܎}M8٧>|cxo\?_v';sH;yE^ G+]y'QMmp@`]g}z<~C]WY 㤠ͦ,GalJf\GG<9ƠcU-Bn:u8f7QS#kjsLN$jY)F&mH,2Dm70^C#sD[yQz[xeL~n*{MԲ!vOc/Me'h pk?X! 6Vq{3CzWlŶI/׉)Ka>77INڸ(S~hwoh/ DgO/҄lB)wIx|~jUn6:jvg2c6x~TݴؠeFO)hk8w蟤dnʨ+OG}} tȗ>9}ʄ"hR1TW.YuWwhl#5 |Tb˛WnD̠ s"׻56m%>ȗ Iw]c+&,,LūzXR{1_2gf?$߫4.4Z׽;2FA͝oQ@ʚ\@Fx~q~JJq{ǣo>s$'MuV ٓo頖5\:HJE7u))܉B ]wa!n2V,m6LԞqqJfCI $. 4d5߲x#^ȼBMrZZ yY{߆~Ώ*wAUVO -E a,`Aڞϟr,ea{Z|,l Fi@Ʀ&v=We&:.CzR/Bh<įp_-7|K(i41OdoNyʲɷf"-㉦l;-1wQkP҇h.RBtRgS>lD¡qa>F zl#+BzَA)X<{+nNORmsf`Pj-*F rjBdTG$g΋CvŲ%:M)>za9{wz(kU픡^7 WnڗȖ*kabnE%P3e{fQi BZtUtF whI. Nc.?@9=mfYswR%µ伥r7Y6k٦\HA! CE5)* w 2qRN9qH1>3m _9h-#d'ޯr%Wt ᾁG g(|+?Q)}}TQ7 `gԌ/3 .1ῠ[G"q#" 0;^-Lea avMAXY^Aľ`ϷLKD.vHkm6‚Rfe/ ?.S&3ހ@::K4ezR5/YQ c23s?l|!V* -quxbrn'eF /TɐE?2# gd/`x-! 0ҁN&L>GۇȒfP $^1ϻL9`A4[MK'ːovS.΢U|4dTrHp_ WkB h_nJ{ )%F kdK}E5HjM `xΡ<̫e [?978*Ϛv5,ژ;wlB!Gtb#+|U߸$g׺"LǩWN IsYjG[ @wxP3K(~Yd d):Uoyg\dL>/wՊ/x ?$m8z tib{~ϹxA`Fx6_F~j6.GԽ@-]L=WQ? 3 XpB:Lկ#?W2b: 4QBj]<[n}yXz0 z;9M+*49'C C}"ߖ#QQTy;sKxM6xcנ y hU@!fj<2Iyď6ԁ)firO@0;Z`'uS ^a0ioqupxmѩ(v\̯A[Fzn2Swo<%N,# ϾzV-PE~fq: +\5UcDqw$Myx 7t_&!y AVR+n9%o% .|}a2&{]|} mZy  RJf$~CY ?k=Z6a_s,M+QRF<뵏~_:}('/f} ș[o02'| Ad(uA ׆QŸdc˷;ҧ 􆫵mqԢJՎx/7o =VŢIEړ B+Y_^mӼc-AN ojkg9Օ\?{I a7Z*|xaB;$.},Ž D/Bg=!aq3FD08Bù̵xMd=Ctɠd|NM.a+o!{n@R< (MO{QB/O`e F6e]U$Ħy-/AĪߤU502?R']f_&+iЗP<풵 ԏ.ZO\LnKs7#M.:f ^,yHڔ{3L긤qJOrto_ Yb$)YlU& T5jw÷PXƖ_ӾV_j)}|mIGfDs\‚"e Y{B0`שE͍1Y!3!y>,penh #i:dJsyQ5;dgNɹ+ЎٱV|]a fzP,,!@8Ms0t$r 㫶DALyf׏* XRDđog)JʻC-M}(-ʭ ܎BKkr[unt9O镱8송awp9>'s{}ȸG>=ވІҏ_6 hyj0*VH ڢ;+ nw'K2::aovo*#yw.Cٰ?f.g[<%.)ӽ\TsG iw^o_D77^z y66U_[H\qJsG}E=lNUܺY WeSDih. ָ~Tܸo3Z*NO~hr^>Mb:5-~Y|Z-.EoP%j?yLT9d\jÓ악:DW6za`1^yUר)䌱%Z7x,ky;-Qq\6&9n^: qP:aø'NK:(T"^7"CyW =OTf#jA1{F/ikA6Kn;}4R7կ6;>|̦V@I Crn@}o\FV ;DoJ{bF槵dɫ#zjiNU4p Le#jwmmEx7ͺ"E5|Nλ" nD=>FEtpAѕmй7wzT͙YәUiDCZwSg!Ϗx-c`X ǟkMlYIuG϶!v8/8͂݇`ћ}exGUk{?u*X`wTmPbo@˦Pu5XRB"FSU~s`9A^7+v%pY ୘t6G]l*>n ctJ$iĔ^9>Ώ&n-S΀a-J4dǵtɃoSh۷?3wL[GYsx^a 8KGj=NQtVU9ʬN=F*^(}W8e/#=, /, 'Rƈ550Zb91OZ8mS Bf% cޚ*eUbc 4s Wa&i2ڎa^0L:WIq{xɤ֑*Ȩ$`p+  fQɏCOGX?'6$ũ;ZD+rd~]}5ODA&Iٙ~f}V-,J)z(r#(K7?L.8TY[pDE0ZT1q8?]EQ\*@BJe_ٱ oΝ]k+ف,=wdb׸4e;+f:7[Vwl5nF|\NnEldNe|kۙv0t .JrY4E- (r:#/Da*Eue4bJRp{a[AW {p)Q8Bfl8jOXL!j%;%i H_QBNF#+ﴏ.֢HKeIbyYB_Ŵh#* bx2'j?KA qB_eK9py0ω g՟ zcG($W<U1I+@țjf_9ll]Aq1eZMpT-dv}mdݞktV׼Au QjyC{>(eT|&lpqOCΧ1)[F%T#VÅS"3 z=SbƦ8rPNllA83c z Nsv^LŢڸգ겝<̭TxW m^#M?ȽIAtK'Ne5=, QF &DLV |`'8ZPafnˁ*ѽqqEjt"JI.ZQ0$teZb^N-El1bPųɳ %l7ɬȼvHKlxUOr\S`ACf(s ·6tCB"͟z:&leoFrD5Ajқ}x",t=<B ߴw?4P9bH_7|^0e!_%ͫBYeHH+ꊦ4uh~˪ͅgq)ɧʖ\wգJ~U"k8);$ru! $~ HNG>,F ~5!N)V, J0Q]nִfcа*sN/o ?"`}>B1m~)+A*1v2mQd0W C@V> C Ts~;rߊbTY8~YA:]}w]Z:gȡ@BvO;$ŏg&a#sm󑯴t_%jree^KЭ|AP_\H7\ɌMMfb3-X^Ѩaxe͢%\I[:j2ܻ2ޞ^ŘֺR_L8izH aWx^"R㖸RY."5v֮F;̘Ygt\'B/.bRqy ڧZY@ \\{ hܔ#sA'͂S:U&^jJɎW-໩3yǩI; i¹O#(f c.C'jW7ldz`Y믕2!vb #~<鵛VRNdWv_mcgbcR1c5ƎzFJf,!>2Y99 vUʃ$`!g%xbVFx;h 8`'9)wy }PjvCƔ%;rTEMl=E40TJT'I7P Ūn%ڕV50j(y w+Yu?yh3\5:P -yK/Hlni뻞и+U Ӥ:MލE@ BTf' $P,m6Y3d`!sV=+&,^ՙ R^m ?Lkb'1<4a_ )pwz8 L:ιcP160p*$pJwǓeW趗T7q ?ُsnWd}E'kԲn@tF11j!fpa,%  φ3\}2jIQuh.l+34$JW5~EM:j 귤GhLڄfgw<5X'MoCҫ-Mjt/O?7!|6)"*{%j]ĩ>bsԝv51RS~XXG&,ׯҤ8`dM!I.M=4~Rԃ y1w\CJ_^bb,ƨ'=o,XN, jPGC[;m9M~GongU賈Z/=cdĤ?1<?qKj;&{I`a1@Z(F"&GLaN>D̮4fdgi*'B8GPo4g.kgeGMG&:4U8FS{pa}E,'/],U4^}鳁W|d&C2t(r'NЦ=l=&JL^@fXkcPnPEԮ kWb(-_\,(rY`Ơ.Q>~0Ht }**6^no<"=;0$Moź3%?jsTT-E|o+] 3}rc1Ld67EvaS^"XV_{ٓ(di>Zv~!y'sLs)\$U_4H2xn1!G^PƄkrV Zkaa0 2}6pnn Ww#LtC-2ڣ"Ur Kj6։}P`..^L|윭F%(5a aR+le0sп 3~'.ƑG'={O?1.7"䲥-[*p.6/a۩g!,%Oc_R"p1a=="dg+ xt?p~A+y$3Aȳ9Kk} +,d = :/Jls N S z.nlb}!귌"Fw{oFyJG/nV1r&v~iDvۇcz4&@&=򐪎&SJS{W\4[a_%#V8~ -E;@nOw0*t\looKm#yMI*";.lkuvW{1|Yd1#zEBDQTMl3~pѮ-Vް)\(=lIusdUQak(8ei䓐 N$u Q^j\!Xn<'4gЭUOyf@Go_('z/|z$Ju8Y3`6Ӥm%m'=&)4!̟"Z܇^Gn +'z'҂9iu8cJ!/QcLF/_J: ҠԉY&;"aN 䲈zzŒ(H\ :&R*[Pebr#X>#_A^q/ oTY3 ]~"V\j߬AJem3Qt0z;,(K<ʇ _F[aP1 *w-]йodq ٗ4ΫŋMgdE;IP9Bҁ)Ok"KP| \i^WWV6gPQNt fb9\\FX;GΛumXFֳ+xZw{`C sO3HX{6x Vȃ֏ۙq-Y #?|3o Eff::}e;E#!6Ќ7'i^vY5U.yWh8pk(mwc& q9BIO)[rE8ǎ xJK>iS=2xzR!PhIgҷozp0 ͯ`1vyu[S>A6wj3L֣lao63wPm[H]D86HXGrS͟%#% X:uK=lTTތqU%Ѻ:N.'-k0n8G#zh޷d&򿎑#3|[ս[oLaxj0'd e,fIdF]op'&u(v<+6Z"-It0†1$1g q$_=\eD$wf? B%3Y=f" Y6ov=A17N^>?MA`y~mlY3`K:gPe7Z[Nqbj_XU&3õ\G~^pe]0 :oh O^J P-O~V"F2WT }O⣷ x yREy7<Io^& `CG)|}QdL T j, 8KD(bWP9ӄ ck;Xr,h;qڐp^,nQq$*Ȋ`=bZъ6.xU$܈۝Zq}i#8z'),ύdzqR'B[넛bKD{*Z xe8M&A4k(؅~~jAq+par)}9rȨiOIeO56@Otgb-0ʭW%_`>,wVk4ƛ_ %PU*d)/y?M("Vuۣt'@g+Ɛ0sj #Qi9`\/mnPxfg!mZdxu/YPڸRΒG`ea-Ss" ( 4MDWF/* ȸ}&ӹ޿<V3P >ZŲ K*G{?*_Lp`D;_|NXd98CWtKsJfq\+E'ʪݡgEtͨ3TD#ôU@$ `{1n{Ä_B^ס&s־Qhog98 r"3[fz⥁X F/ūii[7-2VG,[zӪ2kHp::w:q[W*A L!a&[ ~<F% NU{ߊ#Uƺ:x1]߶lYVNmV@+]Tp`%BB hBtpq 3U7Uا9PWj[쟾e`eҬVvSa2n"pu(fOuq,ۣ;0Ζ?0Ȏ7Q-q1L5 A |?Wc_I" 0N+=)(#9 Yqu/Ix' :5 zqh; էd-'Kה9lڃaTA9Q=tDA_fP %"^-fSڋWz ̄Oєl+s0߸RpsqU"̼YMb>/O]v"hAk_!q\D/)'FTo.hx ԛBFN$t8#ZRƢ;pJ|BWNV嚱fePoV՗P*ZN-NLiaȝUV!hvuVg0t`bx<@&tb?ƽl Cٽ(EJ_r #>.@Y.n.E Um<=?Rzf>9ۉ#-Ή±8%;eRʏ22'h| %v tfڟeRS,7$Xɒ`X]B춁pD_ WqZZ+*<\&3?9Y.JIia@Yx[ p.O"Y}*JiHg?X43u"M;a S0ɍ._ 濽zEC9%>0 .2O*d$,2,oDДZN RgEݴDص9ES -thl-LQ zZV(50CnnMމsOvduSv ݤLޥ20\U7=hbT^+֒͢d]Nu OPUJ}d)fymL> Xfp\#6\%UxE@33 PlQ]SQDģOLij&j\lP,Ue7Re5X 7.ֽ3N sKEqǃD-x6ӜqPǥ'6<=,pA Ű%3>sl{i(t+fcP\O^8~>4 {\",@i{ю)!w?o]䱘*:oY9̢Q1P^gh,xٴl4-z 㻊_벐gNJgfJ ۀ G +w^Z?#ݢ>~\&zfZmI:;O4"d*֪1kn3(ٚ6>c]m:rQDj-ֆBzB>f#?AH)7[؍ɄZ׻08DH-^zjӭII}Y.iwE?,[a$f9+ pkq~yɀ}MPa=ݖE^5aA'*xLfω_9|Hx=-ao46ӢA[G;Usf'CdONx02%:x}7zOw?00.k4}5䛰d)Bg+#MpiVgW,栥dx]atsՁ9$B'3~7[ #P 3]Fo֑}l?p(-d|&ܡ^ $Ku~|ub 18.7 8Tklo3 @ۖ}5KϷ 3EO^uN$ b^7An3!,9Ln'Lqqw1m͘N ZCYa`}/?Z`' ߺѳ ʣS"Qbe_-J|@xAJ^N,ECR:fvbǸI4'OĄj%}5,cĮ b)84r,t[%iUFh7?㾼 o =r&T!t5)%}S*, Lf14Uq~8`]YV6`[ Հη.{j4IbOQIIL %$^mY % .%^Ä^=:LLʫfk-ָH T`Y͞O0ۛ;$t͡eT(ts[=;NV蠦+2ͅioz/DHWWRlW^.xKuWuXj&Z']1n`6Hx9E;Hfw5Kf4` /PxY:1]&= , Co{JRnd}}V0Y>t^3|4s׌t֘ HD9֎@lő)y`O4^z9Eags+} r{L &;%z& (hUHDˆ͎eT.lf-s=Яure* IQ=HCrhԹ$'$݀z8.C|D8_YVuO閈, c8ed'mڌpL=a<ٴ]dȸvIB[v. w"[B: +nS'x?\N+V*0K1+ׇuAcRelrià' &Hyk䩹Q?"I1ZT!=+yؖy!ōj]s= -&k{\m##쇻*/eNNaV E^rw x>/ ż1qͷ,t1<}FOV&&9QV>ĹZۻ&rh'eQpDS2zDd gI4yͷ 䉪oY8Y]%o^PI;כMIR#DӻG[YU.Z]H ΐ3om(!WG"6 9kQo24EtMLcs\9b_P}Ÿ_^\B倔u5ۉUDR$}[BgjsȷFYRvSJ M?p:B3'oJWh7.ЭV}; t|7 ^7DVZ\Gl%4Pg:NQS< 3m3f˻B(nL 4P%ዋQ%ؼ[Dd˄x_(]=s.? Zn^.n"]j]l5lWeQgsk^MhXrbZ$j"c2wB;Q*? I.n.o؞|˽#/eYlɓ&@2ID5`,T G-pOپUtQ4cqkvbSn<}cg kcuߜ.,j(8V-[X7 K;7 .y#=TM?D BxyM& I Ne8q},}ϺZ0`iF; jR$n@u1ͦU|&ڟbu$S, h$~fmC+UDH7˜'ǵ~1@>x^H&\PP=X=GHaw !}/Ai T=y 4!hY^ajxY7C7O6[؏F_-dAK"} #=6w*-nH)2> 3 rR-,a"aHxK6:&*~HlU?pE. Ko8pSDU ܐ4te~AVh:ả3Wdϣy2inn4$[jЇ%!@WzU6 | ,P[QsT)8t8Qҋ5,G0N""VJ2,y#)/7KwW2` ˷uҮcP6^߀VVfί|qeHMal,cۇ&Rfنx)w4NijH.dKXGbLjL՛!⃖^;(Ewx T(!n,2aMAܳbo `Jxk OOrgLw4" YHyy("LieDVS@q"PLW|I' *ɛL!4XnݒXN(q\^&rxʇ:6r`Ȣ2 }L'@ Ӯc&zeRG {6&qH{c6KB4 ; MsmS1M|Y,U[)ʌ=5PR f ס{X"oCwa?w,\˫l4;`7"ANxyj T ^x»&ܺ\.O rB7h2eq!\ۗOo+P#-DP"XHEo2!.ha)x"=~aAh .+U̹,g=k{).JF)?^]B%Z1h4{vD U2Е4IjyjRBfegJjVŪJQB bMi^o14)KvPTw)84{ɩ-g3VG@\S붇ux;Ri`Rm~smh*yw"qU%F^sȷK G |6bdBV/>BRLE *Lf0b2L r1uIrٌޘ )znKjݡ=YRb .vgre;环]d,emЦ@3#T_%br&YFcH:*feEK{ lnY=/@$TcAт}e,>|+/F2,b 喢k_M8 f`xq-prkՙ(ԡS *֚Wz{ wc6NAvUgΝXW.um {`\&8m?kS?^Z$>鐽SD]z? ٢:]Oө'J9T$l8'Ro|"EGN݃p*(e J[y8qJ5)V@L E٠mO9/'=~q҈s6D8+OP ΁8To{kѶ?H {NhKRxE(eQU{)VK0e#|`]6t#P S> :EÃ9H?w\iМtPH5EXϿzS̸n|~-(u 1!|-Zm_{W~et͢DLτ^ N?=+%Ms_e>k /<*qa Yw}TbH^Bmko;XAn ZymS!f/. S@G?%_Q"!hXSFK(dI@("S}&W$4)2wGòBJIPAĸV|a$4bxzGtw)EJ3[\jz<84{ .!g]:ؕ%Dr -=Gtx/W.zO S۠Q=k@ql/aGyr)E`O-gY}Ęj5`9/ͯG>mk%e*[";[| p1rUmL264%"]:m,֛,_J|4&߼<&~o,Q~rb8[x` [6WGK'PO%\v^5|^ 8ZnlG q?`ΝݑfO10f4 nlNVFPx'qݭ?K""累~ЀYaF>[_pr%YT, %QBݭ_S9nkMl zS(ŗƇiUϯ ^ȪW9PoG/=:@oMf?~~"JLo`i6IY 2l%<}z5kǯ~`##i ao]A6"ʆJp%`Z]ҿCOjo6 J OMCR ~ڡh7L}JI3G|L2zNҿweY ?m-.d_X6)kp^BNN#\;SgX(NWG}+ ~J[>m-x o <0̯&`PHj^ rWkn W 6G|d '{n8&Dm &ͣ'F-nط[(}@Axn4:Msnf(+k I/tm^-9tn Z1(0,# ZTP>&U$ڤm AwONgS`Jp,ѓY~C^Z*Wka^ј0sNJ9μk;޻'{()cBC@ sriACjr>@3 _AK߉C[_7jS#K.vh3 pC\AK%Cs6n-=㬓F|QCaVPKq7*6/Ҍu$m3vC?1a E_(h@/d8bmG|ܔ ag- B&]GXϿsUE#V/[7eeٲ_O*-bKd]+2DgRJH pJjS.{94-Fbu=c H6$}>d@}_ `Oe ˴t|Ma}H1 s|Rm[: j|0ZfQcU`[kQBW7.19u8TO؃w4ɗ1L&c 4&)zs6{}G^;½ܝ Y3JblTP׈Bm&Ǘ&V5t8֊) Ě`mX1 ;yZ] xMqy]?FדC*esxC8!$942mkRe쏷&bMK;Țz^w<REsfyggi!sU7:xzdŒӾ(=5rmJClb[f%чw\hc]P'i6!*=Tqw?cΤG$zXPv ?<'-omA N$ղR[j9 ̶KM6*(cq\ mLx@pHuqJp>j2y&50ۙSw*X!n3 D ;z܆-poql*@(t]x=nctJ]!ApIH^Ew_ K/9TvJ:d(,3: a0IZD*J-{40,O+:d43HN^f# hnbA%/C(x{G$ѺAܸv ?)UetPsį٥؍YrHxXaQhqTɋ*'Tl:7:AiU=y<>+g|oVi;> EsyUڔ8;hĖ*6m[f!TxZ 9{(ae.sgecjI~Ѷaxr oִ ق?n:!Y ,jvzCAe2v9WX!I'k-mKhF_$G똣ifh"_0rR;{{E~vQъFv=_ECK__ֵgDC`Ͳyu&)V?~QN=z"'zG.v`/5j5|R>G&O* l FaO-/G.K s&= @?Utfh.[_e2k n̄nݪo`FFvcy]_wem)&M~Ê$#gҚZC.~n=! 7dUk1؋L/ 5&g8L5O\:?ZZc  k tna5JVĬBrK|8Vl=_#q*@?{s,ri[Y}߂1]b[ŸWM~^&zwpp T3Cu} bCTE6` U"ˠ#G,u[I}h_ȵtZM>a-bXk=)F%""C@򲔘7"ƧmU`JQgh;+ch[rz)9}/F' g.M OSMK?  Sy-4@nC|"aƕ#)'X5߁S<-K"f"/r< `՘!X[*4F/9x"+T߇dCDn8;) M^p`KRJYFڶrG:jѝ/VW߀= }:K a܀to\"=th/ V=w➖"2Hbe^05 iY[Sk/^6[9&2(1F r)=5脳NC8C wm į!CKNUeSV.|MyI:\Lw[JxnөQ:dJa+𖻂ѻC`MTMo n/voxt4g67zy@!r+J ;Y:eNYly0+QO<Μ\\ P+j - -"&RE*ѶK$(=SBj~p{>*5"IѥJAP3q}!6kyY+̐F{OIY4H{#LiV$OD[l7cqímɀ ]pL@EX]0_h_w#'*=?)JNg}mY](fo  FWa%{/-þ9eٹ=焚vt< .:A֊*E?[ kLP wOyBUCO2C!;s.Uv tXXԈn(|Áxoud}#SǺޅuPPQ g{9 EԲS@F*z1ƌR&噹<+!!ຌ̤ƹ Sx *3æH^Dca.E4Aណ:IB| .|\h0X"s#cw Mm?9?BMNwV!IH.R[_hQ&2b\Ӈ\(Ij~?fx]F۶jdZcFFz!!c™J%R7qE04q14vɐEbZZG˘aCBi=/NW1gR@[ c`0-Dwj%?÷LoK%Ϻ[V2aNMDy@޺Λvg= :R)4O J*&phr:g)oOyM]2CZHrKԃ}"H7#SC"fe+T.l0ei~'^3ʀKY#Ny  rePM&dWV{ִze*?rLeƿi>_Sd ?څh] \xJ2gnaE8z$tU04.IfR9d `gCR/MRx8#g pByskLvѳ 7w>=# 'ږUw)i4vg>.X67J}>R@vJ:4+{ gV|7KӤ_x&o)~Dov(ynlfϻj>#ZKyN~[(P9a FvɎ~Y˲Ԗ>CU븇L&5"#T@6Ki[.ސlb`=ؼbH,75$T#t_DL]\UU ~Q(T{L!;MdMC4!YZU8Y5ZG{m4U#,;g / д2(.H3o:e||/a.~EkNN~!k-@EA]p2Zr Ҍ~3 %\'RH AG k랶J5K_%Cl+QDO}Vrg3`;_#<(4~7WEgۗGťG]O8z $)UNA 3话ZяLmV4W/u 6EgWS12Ԭjr¹/*߰jjdgoǸ6}2RTkq+!qY:XGރ}D9DN=WDmgb^?9hqPy㻋Y']>X1XWa Y8e5kD=(qr±]ჽq&'h ` 3~u] E{{ms<+d:>;,֧e[V)"E( Xq "0&w}ҘVh!8FS} Znء&x5 l ]Nj2KFحKJ7#7>KIlBSB jȏ{ck4GjJ2Ų:2}gl!V>K( Ύ7 |B.t=Yzu{"b_BPp_ɧJ4HCl4dDg/]#''Eh^,TRmWces}ōꃵyu D\#&˥y5[(KjI͂ yf ,|h0V4)v3#fKhO4/yx qUP2(NYWBw^[BNYs􁵥-0Mm3cMu dP.$ q` BvЮ8կS i~Ƴ0BD耚}nUW70Du xPȽj@Ù+a$a-n6Y񊰴-9KX@,!Jp)$"e *V/6H8lp ھY$n7]i=MB*#a'^*oi)y>@z&Yҩ2[L58Kㅯoj# T_ն]|d$rbIIl p'Rx9VΑh' B='"%R FgZx=@zaKv ;m#p FUE!@;Ug l|K yc{҇@-&}<3^ArC89#Y`ZǻE`9}|@SinDDH7F$I]$CK]g}q̷.&j0$\}t `y"E[9vg|,rO@A8Bյ=leMO*PH*&]! ȂcA` pb=< Ӷ"؎,a(ݔ}]jpg-){Ⱦ ƞ|FQr-f{׆S4//>`VA2cH,gAe;~6EmiY*XxQ6srh!Q}Y ~pD'w؋?q'R|?@f1IFQus8Eؔ%ggF1[ǔtv"s.ϓ( qPXKX>oR@YDY4KyA؋<ɵH >Wbb8z:+'{EXJ32, #'5,%*زe_NRN\9e͕1!DZ :&VMA@/4q6O bRlSDQ  څI_UI:ڥU OeMY6:h#}.oG>, LxS"YQ=H#8G;e?#O֡.ͮB|l%_ 5P2Mdu i9 _2}ī"T`1 32O1JO],bj1Q}/6Yxd Rtft\=*Cw A^d&e٫(1\mRLDז 0[{+Np}<,S3yol6fN=ѷ~lٕLmACSGH2]T)Ya /ju,:W+)sU7o-/z|^`%rARe/頸3y$2D5Z#cjrCbU%3(9BH_0`x.'Ed@]t^ &&/B(HѶsM`n*/? [#-Cmj-h^r>ބ9V$3`8F(.D;RV,ص3@T,B=ח"(ۿ z٧>4Cʥ/CxK8:37B3\d ڐZȆ>!<{n_*YHe 㘍m[ލ\H0Om#E aL:-|i%M95DoFe=^a3u ~ 蔢.}_Lfuv*wǔ=E9~yj_ qǻ9SҖaMu4ha] 㟧چ\ d۔'@"]jv|P1ힸ(ӎi8 Kr2j n+}4 Tg9\i: ҭ\B&vkHo!)uՂ-2U}^D9"гa/(5WɆ%30lYsš^Yޟ'd0J^T":0k`Beϣ#oo1Q-gJHke$hUw`a!+v Ֆe WκqbHJ"놐eU%'dB0ϻv" A(ta!?l[LnCLiDv U+( ag*:s%i.fvA,#LKA0oRB0XcWCSSヘПX 1 .4mӫ8D$7"ctn?&yMk~DQ5=*95^fuc5OмZQw_[MV̘4{P\j8fLo4E\VL#")Y'&_*ZK|TֿVײ)*kּaW]K?FA<=[w >L'6^ST $4ou_syU`ϒ,lw˄%{ 1Ж(W2BsXF@}n[W|ZɄvzCnR|m%e4)ۦ, %$@L.ZdVL7~e0 +**q"r{$7I&Gr珡L|wbA}/yF &߾P" $n)<)m[EZ5g W'd5@}#|ԲO鋳 O09G9NUxg3]1tAy:@sܣ?D6&* ⊶_ Jx+ȏmy _XΞdQ u83+V#jEB= Q ː5YB Z#ֻ"Jicq6]2j!Y4w-ܫvbMHS~a!:.US݃CPs_H;0ah/!6D>`ÉVUQ/]4I HÍh jj T`-M//Ib:X<x$#kŮ:Cz*^?I>19Gntl52YB2$ N.Y0ݘG4/bʴ$[8Q"{4F`T) o6 &|gCkt"ӯP)Uۡƙ#s]6vԀw{+wÞ ChQ9F.^Q~YٮDޙ7j?|օYn jOm %%q$gj)7dE]Jqm 30$u4)~˾Xƒ( ]K3]^n?sxbzRik{߿tTe)}~\:tbuZ1cEPg4%]SkF(cUi׌b(_'lDRnC0S+V^"["LV)Īgf)KIC6,Iyk˼ b[3"K;@o2nbz -~SwM#2Rj-aJÓ5!' h[2i@ kC{&/W~y ^Pn3 ;Pc G] ZօW[KlZBn`'"ʋCid,rE:Q5J(Tvtר5~5[0Յk `biJPS"cZEBTؓa#5miCq|Qj6*--!Hݨq([ܧ`,)]Tp8F5о}pHvJ3)}4\|G/#d<a"PWq;E k~H0N\K7,Dôt{Ǡ 'k}bRY6bm(WWYȨ/`sDXkS.tmӽ}/Uhs~S*;i-3e cTk+tFe-( iX'2- 82 (^ޟw8lѮiekJuu;!U#CEKs2ZFV3Q:iLq^'olzXօC.eV=4\0 ?p KjmOqDDM?M#TAku!:#(Ԕ.XV`;y;tZ4cG^:V6Og4 '-^[#-oMUmT5W4bdFS?]l@"n9IW`*棒?IF0'bUV9GGLbRZCGlp7e>j>]96 ^͠gD{v7aK}PI&VK%DB͑54͉ކF.Qχb_ Tܭ-^RqF H- r /JB|%5T͚Gi<I>-TD+@lqHuVU?(;d WH82CKX; ZIl>BbxzY)qWՕ?.X,9 [4V}\$N+E_U =5kfL1XDчub C7;pwIQ=$}X F҅97m.!:_ԕ1lD K}Y@=U_ep?FIUt_ISڣBpt8ki@U`u"m=Hfu>- 6 ΀҃'ݫR }!Zz_ Ңs2vҽ mmE%-!AUjT$;gfG(@vA_`|ng.63 Qx0'|?wn40 +^ j, ٍ}uQ!8 ȹ8Zb |&ޥtaZf6]I\Yz]3_F8)ut'aWYŲߎjڍI96|@L9M1HQ`iHP#"5Dz/6f (撜FKv:!;E0Zыr^g؊{. &F1SC=[7=cˊˈ;RXcԞN_˼1 U@Vt=Ƒo ^!SMc*akr, [mIEcȎj=SQBi"Snv8,VP]  g,e m!E/Î$%b}v|wzzٌ"~{'_̃)uJ835g-:[k\;$fPlcv{gFʮ{ .dNPh1D$LrV%S<TKyTꡤ<%w Õ7VGy$qO;G1W+(1:ʻe>~S<#8: sX. s9q a ĉBfW̸WCꓗy~Sd 6/M5*2K3jgwoF ~odM3$w Wdf}ԡXCɆIqJVD`05[*fȗ;L 顊!Bw|3"5xFG JQ߶?OͶ@}~#k/YBun9B*9 L}p{XXoJofw2ݒN1LDf Vz F }ih̫Ik!%8 (QnY{OJhV=m5ʹ2}@'H_qTT,TTٺ^O8vs_8>Gq#P'ڏ;^]\AW'0$@)hbJ-c-mbe-R'߿3;z_Up(0xz#%Ls+'Q hJ]W.Ňjh7)#㥿G` 3MԲ+4n m=#BYS'ldYz!vǍb"Hy*Q7ׁ&itOg+mXa}f.3Ƌ+rrj&9pspjܾnzE ~^~ʢXR-5tR{v}ymj>G*%!YVJFa85$ګ?6R+8-FHD`k1Ll]ZzD]yy2ݡ"F(8-ͮwNAJk}9P$0-2`z/oL ΋G*lz/o+ E!]!)kpĹRLEVJ4dxS Ӧ}"}#ltkv`Gk%*QKAltKB80-Y%BU5T9ƧZDz< ۱[&)'7;:QLWLB6&Bnϒ427&߂ؓp- W/@3PI86 G7{>[|ŷv 5$do;uO}s9 xU1{|ڌ~wDK0]B.|mn]s(ss:b*R2scK[wu_ 'PitR|Vwp0r-FFp1+MAAa櫡&xzY*S$ Íj&=p57*yvBf5-wXƲK) 2Cz<mtJ̄\d`׮ɟǽj2x:$ k X`\[׈E瓓J?&x߫W:;)q @aa=giNˇ$}ʢh~&\[UAZ_6櫝BwIGSoSrnj=zI Jlԃ~8띡ɼh[F60GQ@S}&|9IFxWv D+)6I~: ;e- {#R _ZP O`D7U2bP/Ӊ-z!d; hڏ@bϋ?л =x7`KNj[sgC8 7gvuWDi;Ӱ,GeXqJ;5 "ȦӰlaݰB?KUwi |Sh| ˌ 44&svInsl6=+kheL>%76ES\F+|GMY L}oV*еٓ>m#uWr!߾@$ " oMr> 'x3 қT4~K3'!~- ⚐!iyU"YtEBTHN.&]ƥg W*PcD^m7I(-2i/;ti L 15d+Rsp]h>No(!KIt=ܗ"cL.1f8W$탌/cX4dmD(G]7矏a#JDǍ KA>P.TTwW{ p?bTU5d<DžaZ733n3 $4/IBNѳpks>r#)7Y(#\פ`nВ8.MTٱyKlwdYlsy%qo?1JP).MWXNΠdhlz⛏ bd~6,R wVPjP rqF{B#k]Mi̢x06-# /N ;I"R4% W^Poc{q4%Ӻ6t 5:m{ @㞃hzI;JDיݲ Y'PTg䬃VuIGaq…SOh 0rX>&P}g7`\təpvGF03In\HD˩5 NiyOؤy Pv gJaTN)C^zѶs2j{[90R`ph#SRkn‚wt@Fje#ݡ ^ F;"GH(zrˉUPi:絡hOkri;9(l=3xoY5_!p&>|\j\GaRv{ /K6bLZ̽4^ӌV/,RݬujB;_a?ܧ%x-ďҎ2ꗡZXCVJmĻ]&״˲UU 5=?bsdD)w&>?*]VǭX?#.F|C lWWޑytWTo%m#hJB+@xR~u#kk*#UGwODHkϿP/A}iɉYm9S@RՅ䛀:0GY:o&HP<7>j_K x $߲[*]5^E])wxKAݘ+jJٌ0Nܪv_ /@`DO)i$Mn2Ȳl{-{RkV JږIDJG_PqϚm~#Gӏ1 \ nR)X綨0#1KVh$zeUa@=P~% 4mt A@>":i ȏI3y`]m%!'s#eř/8&T6SOS:BV#HhmDۚB-0`ŔJLr[^\TY^lb#aw)a?yRuNψ32EӎTOb(_׳9UAI_(Qa/Rw30  fh)bl#i Fzd};*Nk{"NC)"Ɍpu&cs٘ATS CC > B4 tA^"k'bӵIE@N"Qvi '0샟OJEScnpl.Àu%=@&IV&f~-'huHb1&/ ot';AzUŽgvf3oH9nC=荈Eh"Px4@HF2%Wp.AJ;%?/(/m).c8?;kBFeµf!+rAΖnH2䙫X'}} tNhΊr{#,>C1D͖"mm'[=P\B$hdZoRMESzn[X43KYD4x'Gٽڨx dH{_+o 9C]_ XXx~ED UQq 箣=УzQ348Q9!)yFӟ{I)x~"+"u^Q%a:[v'Ȏќp\S2/d]$_MNXkq8pL``%I"4C-n](f'IުѭRtF90_QE|+%xF'&9%D9ysFG ,VƽDʼ1':y4%[<w,7 ]dAk/ ȣ$_0;?s@@ *^YƋ-Q_fnna!ӻD6j#-Sgi>[ ʚU5ld<^PfYrxC3&ٲcfqg 6/*` aZmfwH*y7,9q]˾^/,>Ka%^IX3F(pL?ʂ,:62;uR>U8ɢ{Y4P7"g/yy3M2_RI=Ek|bo Z+t*M>+88 JrfrSX3X-Lct=|3}. Co4T/pI $W^0dx`/F#j.ߔ :_WZ~2@{yaL*C9  _6! [F*SmPC0_ИQ5!gQAow晥.O KYkֳ:6ax ffaIN$r6(AvK b YV&&[u,YPu𗎁# }'miӪ'<S޿gaL{ ~;}r>$b.m%3=aCO`¢σśo<_:ZeT5hr;Teւ D!tu 3)Rk\XH f ιv 7 y[-  3]X.D—7T \6*OGL{5Oш5~ ?Ht꧎Ё~p($.G1ֹ?%gNF *4a'HpZ<*U\nXM ..;Q%*{@h^i_|WoHy(Gmh^Սc`y9q"BiC9-p(jmRsmUN#m8ǁkHmҔR Hw%S '#;8ߟt6dl:qT_{ G; s|dZ$Lf\+;iLfpadL"nΪbm9dLJ<2fK:Tq*8U8j>;_B頞x-\te 3)J*OUބi1&." TS:sζk%lB0q8\Tc[ȿۂ m*}0rWv\f[ZYD9;ݖgo?$`"= [>BcO3'% _+~P] $V#aueIZ1)yTs{;C1{4gBo010<0-b}s0srW 5FlS?IMISY{b lkG |=#nv餆B+_䡁~qX" }bҏcIÞIfBDsBn"~9%(X'UȶZ!gtEDa_;5Qw%cfFϹ^1A2EV~ϟ9.um/LF[e"ĂE89!LMK"J30XDi=y>gy=?I|V& 7ļO">xS>oryWU\m̢٘j@1a罪[+p DqrxwϨ"*EFoCUM3`o r2LY G+ pô`MP ,z0hSI*K?xV06|tL7ʻkӪї JyLH_ &NA87oZ2TR8>}24ЎLAv7/]e@cd!qux$IX~!& ohc5mG~7@<1]LpW&hT)[%9ǐ{Q6-qm=zu_v eA bH}RՀCH3{cR6*N^Փ@[ M+#!#]8nwvlXK^#0 6{$FrSFu(trN$XR>7k1ӊN3bCz}q-q2Ē*RJ9m56q.b/-:FK\m1me< ;eXaAz^:ΈSv!#yWO/~B1+?@L}PY73e;pO> r[얕z3,dz/Z L"A:muGARu_Qd1aVO٘7V`fG7m[Rk=m7㷗vT rm%2R(:ʀ >kaXڢ=։~#kBCTTGOij& =b斀WgIvqPts)Ղ^w?4(Dcp3bntua!:22NԎ$rL-qcrO/YLiOoQK31h Sre35675"/!?7cC;]h}RT $qKD{6t -`oש>m2"(Ԝ-ɠ$ߔ*l1ܲA~dCAntx*;FJߏ~'Vf´mB;+e_|)#0 g!ڵ7 py=E/R}`T5L_U了r4]4-8%Pĉ{孒A0VaEf@a߂#0Ǭ 4Ab'~id3" )3D0(GFRAx3I~AH sv$)0M}d뎆IK@۩̭Jv+9%n;Xh:f RE)F6 հ;{O| <\@e+Sn.ȿHC H.nv AΧEc*vT{aLFA򫝺\2Oo֯#zn&ԝz @)ߔBQQDn,~;73EyA^G*8FH&E9[/T iIeXZb#uDvan.Uh@FPh6E 3z{E}ESqhv 01a}韗랄ESHq߫C%eg+★& ?kmVkřډ:cr@FVJbY!Rn'o8ǨN3+"'}C{ lRn3]Rk3uo!|azyDu(a6h.wôk@,A3͘`s-˞2l4^=~0)=ZdQ7;@i)s0(#B.6æU##4 3.G*%#յ x X̄tߺ:~!rؑڛ0Ae% ?/[67˻?5 n)_ ;:ðQ@O.]ׅ2nL-QNwe0ܵYy~ 6bi(|H,BT 9u^ߣ u;!4&""Qd?/i*DtQ5R(ғ7qcq,d17O]tȏ^BjUۖj"KUKD: -y'G9F.E=`۾| YFr=7j]7!ŸTFq^_ߕYvB@7J=_)y\%vR";3$d1/.7~n|B]YU>> 9]+m+%<° U9 câ` Ix.n:GGxeu EN/L.a-f*e 4bdmF81:(j}KU(,^.+*@_tt!6H4,q%f,hj>FƳoj;SP±Ah3e7'NR$MvC+ .ng$C4 G^K5^>dǛ[dx9IQd<:VHG[w-Af󎉗BNJa~*6&rpuTxX~4fy5>$p6\xg"Ō5 G]$j0mے?j3P3 Hix],$s咀ʢ[JG[!g??]8~\dH2S> "I8.]oYΰ_x# nK4ىǘς?Uy-Q쎟 MFFOf!=E`AO4xϠ\Ecyt1h#F`˾o[Q3 u4tyz+!^ҀۆAS/sl}adSђwrBego丙@,V0G%=>{ޗ}3Xn%b`*5_[Xb|<Ԁ3aba?O/tRo^IoeZ]F%jTj{.ciRW g%W2, @' %^G oS*oYZ/`Uꇉj!b sE.xe.a@S 9+cSRrH>ܥKxb0/lN+ Xw4l78Kތ{*^ߘ=2:S*;& uq:_YV7'ȋ pm~ߊ0SK1L .ثzQlEm %A3&՞.Wobڥwɉ831QX81|BWAwشJmYӡ!W" 7xVmh3z\ب%LΩؿW>ѸPDY)bWJB"y4{KS:eڞ"ϸfb;b\zHdZnK 2-$? ӟJRg"FZ}suě!=%(DNN2,B ;3d:%Ғyyȍ? Gu`NP6mߦ_5κ۶bSp nWf?GFZKzBS]D6D\|[C%n*ɏxcf CYRh y^<3#Գ]fz!t\{+-.54ߤzDʒ4|`'4Zm9iD-Yl˭싁J)D 8]aFV'Zd>8Bco#;r%=s"u% Qéɻojhy*yߝQ\=x9Y0|%Q7c)sxߵpkY؀mI$ B>S?e+*k u+7kZ$-dɏ]IӶ Y* 8%{![.9hH}#G8Jz1X3stzM"& e) |0ovI ay^m[RG5LG~|R"AKv EE ,)7h$ȑԌ+h3=tEDn+ZN3G.5(󺃆xg%^|;GM;9I"H"WaEňbmUJ>5zJwj1‡Ϧ)z,f5倸HWPg%@!CǒAZiz w7TD?KpKYئ$LƑVW>aIh2pukLPL2X\س,aEA,sP(l w*/OEQ,lکE^1(X+nݡ>ܧPPjR.,B^4cUڐ-4 {@s0)Mx dH cMnd|y5{F@qGaCij ߪ/ q Gsy.@! dž^5# TVԌ9.K*I̝@)$+aVؗ1rd&۞n[\v8 MVsI`ؾ j˂ᗌ:/ C$}gfenڕg ns-4=BKu&>LJfH{ / zl37 a~ny,}*樂%Dz9.ᆔODStQ$-a+I|Yر#{9@Z"c  aoR^*/.mDKGdՠCX*o%p.ѶO†{ryqы/p(?j0d7C+=',i+ޟV2wm3o#y|l jy)Tf!%%~Iܱ7]hV.Srv9-%#2k tK `Tlty9s}<`V&}YSf0q>Wm=Է ?, fBTk|Ž ΐ' L߂.o"DE"̳NSĨiIh$;.gRL3A8'Q6)AM&2t"c=RX6tb*Rawv+5|fE2X; Qw2h ǐp~-c*ȍSZ#/K[vyڟO큻:SSH4Gh%Í7Wg!AI (|(G{(0NB^]Ugh`=P ;eQ'@GHCgaCHBBe#owȽ帚&[?y{j&,X׋KqXꖎxX\[UCYU]݇P2QM'5/FNL6 zREGḁ^$P2Li%)x#50l/!Y~iLyGթ35בl=„6ۘ˝C;9PnK*% W+ ;'զdl«GFJ3gvljvD32bO⤦T{pN$ B\-\h&Dc=نuas65zG*C%ʔ˙\ V^7<CV}L̃ d70gH`aeǹVL5HfV9dFq+BAϕ#lt0根+~֣+l}$:=N? vYG\ju9^ }k.6tvXfR c{GnӭM:LV)S(@lw[ӵ[>2)ŊepNcܤ޷ cg[bbvJX2n揱z4}X r8w4&|&#@t!qu6Q+ӆNZ{f} n L`KF AH]}X5-TKm-1-y80Oߢ|pM%L@?eғXz0k'>zgQBԴPMpQU8Yhx7\~ʺ:-YwT:8=SAd\!T7{Z/tSfqD؅b9o=֣Qɐ.n7=ySHa#>|iUӘ֎jp%c,.?uT7w@)h(wn,RĬb:W $Wx` g|V%+^mG\C@Za뷜Жsє|_ef2.<u T[~UzL@1Itڔ4zΛ!+CmϞj*iF^낒z[d<,.qnQqV6Gռs!6lG*rO9ȹc;vKUE|ӌ,q]]&|AAo(s5!Paֿ1`mì\<ܲ`M\fz?C⳥׾u4{*o }Ш P>)\: }["W>gZJ;Q !wg:=C!pP,yOgm7ܱLîK*dV!V%= pRwQv[^-/YM6VCQd*޹,t+_DDNu?=f-{Uf!@ZwD sV2Ͽtj-@Ze!> Ĵ{}F_>\"kRz Kܨَ%L:kn O,QQ$ʶ7;L=)3m99.TMęmSI[H"?uѽmD :>v#Cd4@>HTjp?~M$'Ai;Ñ*8XV`_`1/45aFA-A VG ie[oh,^O+tΤTB2bmP&g&" BoZv6 Ux!%"W'|^Xm98Q#š?+BB ,U.k}@U>gZfT}`9OC Qtxwe=%/@ObsP.%`d}B;װM X3Zh*>c8CHlSՈ<{)vqh_o먠yz-t( B+Y0dYigڣ"(wG\T:b `"zgqW IipZ .<@S(G~q/7}&z6Q_87:\nSf>}Kqx)']q׳G{g[(Uzyѱ-YYRK'5Y B]ca]s}5|t;hLJ4ȫoQ@D~GDNھ vg6j&V^t+(BB nAĂ`C'V( B߮r“Ja[2ӧZ]X8樯KhZ0\"NZ Fjzas{XHLs`PA -wuP] c =Y6); LYJw?_88 O5RDǞjࣺ0[J$<!@ܭNeLN0c7go_Q#~ؖnzn-ֶS٠R[Et`4 '-Bp5MbȬyVZ~2nb{,pdӡ:̃.rί#!!IIlV: ! }BJ|DA"ZY!Z,Uæg w(Dh7i$ QvR$ƦL-oős]f-.Z\} g ]DMыoFo2i,/deN MSJЕ+59{ufpgOK񽐼1֒:ănB]D!郏zb~w:xK3H(HyB}ylyD"FlhUKt.:9}bp2!cg i"ЁKeQ?O_U3KFeqF ސYx w3fj$O*,AR[uɺB5"TزVcC 2ܗy&ù$ɠ`Gt@sH`.P6 Kr#'(I&skN74"zzG0D".&ssN$OɃEK.jp1Ǖa/#Ŕ$a){"G Ab}?o=sXA*?OTiR̅lux]g &Rh.>fsIOQz. Y"ƕ$eFl4c񘵫¬l( MǮEhN[luQ#cGrz^[ i3Et TJR]ky~&6\%X}Fvis'FkH!׺L9I#̏7" ^9Zr~ɍbjÝ%E=M]i}Ӕi<]nx_P Ok:%yGQYi-JnC־o(p`E*:sVsN!BD+/zυf4yl˕n#P%^Epۮdx,5ЮXtby c3(r,W2vw$_F+iv:*13?kAn,K¶'?^EK_a+U y0\yUbĀg! ;R2a؉B/rŢ{/@jl ;F[L&楒$Pё3FZuI,%az3/+V~ypfTP1jwn wKbV&]LkĐpslէSAj޾Sv*ҠBDc}2 Q ~f?F:`E?6 =!nth-PueQӼWǓMWvlYQH|c‹di\wL@w: ߂qA2PXpwFTL[ $m}*I΀_@~AJ|fgf'(Kŗo`r :~F, qMHib]@Yr|v7V6c 秕sU*S Vpt7>Z@ܨE@s 2*aSg3DU/d9 {0h ljBYADaPBIg/Q)5~.,Xd}şV0n񱰿'@,t5D^ ,bSjmO} PQ>,?QBk!fN0|,?KE"QA?{H SJ>nќP qC |@KZ|{9>6M͂Ќ;8,wI߷i4tKve)ufb|"@-=?Yh%P])'V9r; w^TU`"ث'Rfԙ%k=qΙ~ͬ>q:Ua1M7CdlY{,(FvXkր^7,s m z ٞV,s % ߓ׭1*P3<"-pO.%}F!CWtAw89arpQP7&IL}Q5{\氨muGU=%S?iM YѬ*2[HwK<iGm i=dl|-xy0H":,;l _ZeK#OrZ LHFF#>\HǕ+hE$'b!,m B6kdT̸G,#/wfUPkt 8 uyldD+ @ڞ\ZݿS='G^wT` ^n5.H0 eu(@gs! <6NAHX`M*l L-YRn#^ /ӧ_k ;LPR^c%7h} l"]~U66 X 7nPʘb*OFF 9lc3'x1v&gܾf!0||ڿ7[JQ ڗq{,!,==AI!jpv{e+mng(~$*/`iXAk%a0%̅q#y+ q4gB AJcF@}S񤖺E+5ε  =-6+P|0l.G"v3BTi[eOW=B'0#ڽ;Զnܥc ìa<3[5wʌyH71/ԛUDȒ#8J5B>wD#> Lgg,d-̴CUpċ",/1TE]oxa,?.\w1L^+_>EFgrH|tU'M囲(Z|aem/!Vt2]w0в?{օO} @}|h_pZ!b'2pF /'I:R+b%P!rKb4xKTӱF`"seȥQ1Hj)8E+M잂pYo 9j/`$eg6)t#qtM)%G fsx̫9?#7Jn-?d?!5==tƻۂ:a{qh "PRdAFTSƨTH5➪pi?[c8b'&59 !KMq۩9tXHŅo TH rj AAaeJya\-6~,|0!t&B'T rZqI.} %PD\X4,`ׯɵ`ʰke E1Ѻ9Bm~t(aHH~Ƥe!nb1VeǪf aːEd(RXӖr Fb^tffZ>XU :/^`:~mv wY&XA1;;"uǟG8|qrZL'8^=gf/id-~Up-ŵOHftQ೼7]<8ҋ 9gд tGB?>LGY:gMLU'G!5`?XP>dU,!y0's8*~^P phImN=E݅xodi7[;{,Tǃ) nTNvZJ,N3 8JH( U[?}NGZ"XF!~3x (Bg*!2=݃6c#3:+WS8Q` 5!VS* g a>ZFCRԖ3iCp1A$DfJ\[1 :ʠ Vp}@+j~.Bf]uӳB<(+Z,7~^n fU^9W(2Ν,6Dy:X>H̱3͠O.u^C^:] >҃b >7;jmR)c ҫ%m |-FJӯ!Y0e4k!H ޏjCYQ87kB,IH3n/a$l]"̘vlfڟ*:3VS&&D"T+9HZ.TRD97: Ysߛj|]u"O#p,y\rz)PGT?ɑ {團d%g]Wu,KlrܙXA8u#54tCΉŠ#XsB'Ȓ3|hFC6S(;!OP1}(dpDz_ƤM#P {LJyܝ"Kn7z<3>t8y>a0&LP,PڞԺ_Lͭ_ 1DGֱ6R XK5һou+d7/  2RP:ч rc;MZh gX >ei? DqP[ ;UT eV4҂NJDaZkaQml){%ߩaB>=/kмĜHR$kۆ$!v=Iwg?# Lsق77^g>=yUt=0NpnUq8-Z5>9?@\srrڬAtX7f8Dl2+Ueícͨ^{~&֕?+<}r=/7VdsOSzCBRpFBx#*oi*i&/ά@[~E$zF #FS&{%s:P9o4ߏ4{&bQn8fN1hs 4K4T rvيq5?#>Q&=]m /!Ќ~i @'@pQ c@XO>U\tHNk癸]xݾW d N ds! #ovc7ʠvpm[Yd^j?R&fvLң& dȥ WZZ-x]Fi zTWE)+{I} Z*oJllǐO.]p6cH(˦fn{Уq\md+㷾jrv`͜5ė:^iNί~2ʎ_F]~xt+:Ӕ~v¨jNky) $TA5AW$ nP2A ׉=3"l:n|0M .lo T htuUH} Ϗ.ai|p0ٮ,z- ק'l^ ouGMy2xO̙(P >ٵʄX vGC:tK,mK!"Le,tdYߪEwP&ࠋow s+B)iL4ky!2}GZhؠC$].0oog0.aft&u?c(cœ)%z|CW mjaԩ!x<93Èr(dO OJ~QHsvk%9-EŞfT3ɦbQ0--?EEga'[O oiA+yzU=EeEEONfHZIlT5_ӫźn⧤ffoƆYѡcVW`4|p^ I:#El1dx*%oO"7%[L>] B`nE(꽲2`[xDgw8u, [MЏ=Rdz{`Ā1=0/̚ԑLE|8>]S^H#h _)6̣T́w?`)Fpd B r0 mL!Sp ?L0~f< ǪkSs>Zsa䝙 _Auﱙ u,ƥmtrܔG\@ٱ]JPSOqݘS *S!3zEQM[\ }TGO )7eHM>*)SOQѺ 4Mycl?/&+ 7Sߟ4,8;T LwLˠvI"egwpQqwB>DϠp.D^xb`zܶ:Gmȼ ʟ,S^>awIAz׈UON!F`# xM,N-zB yUMP/N[p&t k r92?-awk1JAJ4L(Z·zR8aVdK~1L @JhUp˱핺' lrCcgfEu{AT3.]'сs&O ]_m3Nb(<58xD8nVGrpZнZsZw6{\jY1 @ѡŷwOGc# N`PR);1gN32dagF?12$?euX~ gvL m]@~|Flmfeeв"pLU(1~ѷ\DGU=``pç9<߰UO L([h柟DMF|c!BD{EY448UFR>Ml%\> "~'&˭vC|R&(d%V ܒ8 e Ze"6dMCh,\)#;5 X"ߵQSqT@bR0QznKUVeN#&XWb9D=G?$Br9~;KCJ f%6,) 3f\69\Ȼ89 k'p՜p eܹ"$.C}P2 bVVŗ[l@ښCkG?frٵG<SHp ;#` v<5񿽾fh#zéjg]S׆zE\T2C?ˁh5HU5=kJ~}0x\VLOC,-K /}PԀ )!$:*KGbяdӪx&Q\gօY,+ޫ2Z=+1m*o_Y&vI8q˷= 3N j%I|AՏ=/Y7VJvl$ ~ MLs>y2s6$׳@iu8hyi}_b {8fʵ_ Sx) qf%KÅf,dw)B`X9||)& xM ;D'Z# żg} a@5 Yf'ҐDwJ.96cwMcɉ"R@giXEIX0KЦ!m.t/}'ޭ`Mtdf'{`@S_l'ZTF6N}f +L]iq'NKG)-V{?'4 jYErt:ަ.DWEYB"HT]HP6e( ѽ|_: @5i9$4xG F9v/|WP Q\53yBeZ@{H4 _ɶaIR z AF,ɥ׾O&^OZmA`*Ü-璀k6K7|'Cg1Oi){!O>t&N\8wؾ YS}H*YGĜZ lU#RJBHtP75, ˖Z[F&Qk8YV'ftd>wYsɕYg[ZtՌt0!?Q6ѷ+P_!@?fO3BX֞xg0 Rp)U?=S2epHCZ&Kwf4r#mbqM=\\*٨"NJT\1S/4{ɕcYf-yF]αzH>~Pٍ5H2d@xhdZP}kmLQ7P4W+$i~ɓJ-!oS%QcQlu/ܱ?*5$$:mƼ2WIH'>.,a+4El y06wQ&JkB\dyԎr wy18 ؐG4Y6Yt0g(j&J֦!Mw渌U2O=bӞ+( km2Y]Jzf]1I];`f'~ vurx2~ 5$Q2+ܝ^|!&΄b$y>o#/߼z CO@ѽwT} *fq#x_ݱ)=e{H,ޕ4SB 3d3Z3D $ vixw6 כ}X7OWnpqQW:yQ&"wj` a܎QCYA 8%]QJ- E|\i&b ח`Kb01-JvXN3ޔv.$!3s8~~'*3 ԏRvHD qE  -w"[4heܓJV} ̡Z+b^I8zWJ3[ d\;cSWߝF=m9<uDgJՖ{ h3I 9XkYQ'U)~JJ_Fr{j-BS: M!ٱ&9mb d}E`a9cZ?Ы9`P2䰮^P v&66h9w(jN13Yr c` `4%K0)2MT~y=w"oOj ; (^yx dM kNRzrS3$'&wc9nW˥ _<u$dW- &9NBN 6\s5t0\~A֍nZ5 {>kEKGMVP`Q !WJ͑S(I|=ced3G.FX} 5@YZQ1WW^ɢ`Rֻ8hJ)yO,[P+ĉ 5zEAYqP) G:RŢ3@<8tR, Ҽ2r `)9f^K3tþ"[B f}O5/66ќՊPuw c;I3L4n6#_nQQ1lFn赌-3|8ľruKy-La* 8lTKɨ32$̼`]\zOg S e6呿p[Ks6a9|_rўsJ!Є2߭PkD-6(_^+ ;!܉ j&aI WRUZiE,*#@űYBM-ce_h趨B:~+WQ!Xx݄ԏ]90 u;b'oS3$B)TͿOnX2H{S1t :'V0դ:Q# "1pO _W]/l/*;Cjm$AE έaulUgWwV5;,+R `-=?4O5_x8cVr_ @MnJՏB\87AI+epa{Go$t;0N߄ФU)p{f~-af-_lC9T,^,(L3; ޱS$B׸zz7U,f -sx8ƬjNA@ޙq~]l"BrBFao(ߺ+ܺp){s4D`LҼ-RѪNpWVצaUD.yW#`fm|jDgJ$HSYIT5ß,6loAah¾& Ʈ!;gZ:{v ʍ.aF?h0 B%TIld؄B%:+h'Z3WO }#izYyHH̍݋w}f}=fKŰ/EwOni /kDޕm_&ᶴ4@ U #/#(L}!O?vޙ:󂢢xGylV_FZ{c<^Jgsw61ǠNxCy<ʛ31]ugC0%ӿtaNZakɛv{YC7o2bQ|et/0 CH}ά(s'N3Ke=j<8>Ȯ>ֻt/֝Y[`^?ư~]H(ˣ_HţQ 7mG%ݨI9-0i: U`}Kt'On+Ns6}Ay# b9N  (B A meSyl'ff[ո}+8e< qc;NOh RSGq8n<ܻbRfd2fXwp J;{YUX\]/ܯmu+g}]|Ǔw_>!A /JfܶqyXOz=>Z/S4ބHFG{X-ĈoЈ_.0TiaW!O5u^9P=#|`Hif >tkK&]P(|UHQ#Yߖ03Vu[e^l1:wwSmg'Qޱ>N ħnZ֎ +57Q&'- :r}|a{Z쒶o*䑷PWK\*:pOY|-P F2]vq\I$G?E0"$*^,,&}j;x>ͼ/RyT2:;b`rQ,g XET? 5B[ڢ ܃uRٍDi6CmGB.>-.x0^pma:(ˢt6V>~p)Gޓԑ'W} sqݿgٯw5N."`fw{gcoP"Ql9.-:tC}4zys#JH,ېG\d)!N0eםl--MrLAc`pkmij?b(O7fSuuBIÊ!Ú,qԲa8Ml)]^0J"QH\iW</g`ޱ_ >5 АaFXEwÞNulX$[: ƺr)kh$:WL3gHzwZ蚴lB}O`ӻ!op2^ kz,F3ԎvW߻@5$<5) NN W#tȿmw_h=⭢ZXKfpN>֪i[鱣e$b7唵cm"|i0L֏`>c]S߇Ͻj bdY/jXb*t'r1KM&4'q\ ]b PD鎃\2RQ!@-wȿ'^UW*jTlވyɎȬu Ho=sv0i}JC^EWG^M6imG@Q>E|{FkuI ʣ<.r@["ɸ,-tMEb%Qh%I>TCԳ[#5G qUz:W%KoD90kU=+ak^)F\OD'M$N1ޑS#f:ޣفmMzY&ʲ#`$QEu4/z=a'=B\auԡ=G.w=ޢ <GVȅ!p*7(8x]{u|cl7}JE^`ʻ>3s:x.b!Lx͵j8ڃB$h:"MiLEVi\٧3nVd%4tpB+]P[p9B|gITn)3) l>^Ta=[66ne1A=!"$JJ!@+!sSQZ_m(ѻ}ڧМeNɨdnD}xErۀ] ,ngڻQγKvzlE\þu cД &9#?6}]CNJyHBGh{6+IUI ˥'vh=*f"(n3J3#` 8E5ui ri׫ņ.MFF`% Cʨ@=.NM2B۫X[]kL#%s;b+.}W xbD!9&nTIGLɤjҧ *7&.ҭ4 \ކE<?ޡMMn4#aeiMNBN1lxńۻY}h8y'&rG5T A oᣜx_:,) -W5ApWȹs9ߴ)*o^&^0e 0)?scJv& J,3aN/S[tZWBMwqIX~ V'^^|@C՟7U@;rEEUJp9%yXՀAt%벽5DʨWR]Y!UyG=lTj :<5&Ė[؀QzB?sp'VN-Â*bsjCnu~M kfF/ A[Z}.vhRm`_WW7X UfaA%;]hb/1טOw678?ȅd|¶dƘa z;,50P }+|/ CT)`W兩6R[yX, íxr>ՑȒ5,crQ *1=|3UHHv Rq̵ZJd3@(:eV0qT0bG{fQ ޔQ^A2KAB _j^HN K*я%mHεJ񥗥k]>o**r'ըo.&k-wDg娤|p3ѣ>01ꖏ9;+8kv*w|@ވ׺䪖\^dj?Rǃhnj{h.4XU^ȥu{aNJ (O JHuvJQ, ڵ34Ub scphb&i]? dz5ں|}}2\|4AEi7o{|<H )Uf2ގ!C"SF} P:%_nM!NF Cp.φ8?ec{Σ"v9أjmuy%]]6L>ki]jbL2`n?|DJnDZl㈺/7`s#qp` ׫`_~@:yTH:l&WFӝ d+]IϰtZHv斾Xh[A,pϳ0Jhs@(A.T7Ym|}%D< ^br<3$60*|12^Wer.OC mQX݋/J"5!1 Nl樝[ɃQUWCxb_X;ַ}+Q"%ǚ[}U ijANҙ“Fdz{X KU)h_$IJt=s7ݶX֗SCzܜv葊SQh]f׃?$ gTW.N+1& I._BLɱtz]nK@^?&ױҚZ GuZL̫Ga0d)1X/|SBc'67٥Ğ?g#VOESx8)RڈyWGDЭ7ѓ큸fZl^j" WG;OE@IUC[WY80)[[XFܧg^1UiN݆Y\|@ILP(,B4h)IFfP' "Aaj)G˩1LQWc`OE3] *O6YeczPk߃X0:s?"6f!k8Az#L lHoC|q0qhm,!/%^-8kb6xh!Q^HN20GTcacuY+n ^)?g WmK0XpScފg\X jhɒsnkaeђ.@\b3U]zДB Tk/h ux$zs\E- G "'Jx8}diQ'Q.RMuF-,kdmYEI[zxwZqu@c1FtCSGS˿+qk@ʖ[P.ux4rmSң=u_%)śY,h Ke}'ҭ]\&ӝþ3K|N\u&h|TE_YQ`f,g$i7пx/N1'Z"ՃCN].<wen\ 9tc`XF~NQe˼!5dCZ#U]UKXqY*;)8"V>R8[,Qz{DĪΡ* eոӆ%-1P8WDU cRtӅ% Xފ`Ίyz$<^M.ʯ1}+r2x xNXn_h47s[VjW+U4ZjLm ÷4پ-hZ_cݵ?54 FWNq+/;x!d7fq>xA7ܕ3䍑p:?F<;J,*TՌ7rw7uT_z,݂Cg{Nڷ:{˭sư=`vi6q#EצA+D5Z9ܳhEU\a.c‹vTĄ,:_KQQ/ aGZCRԵx1q|yJ'nۼYG]~+ɟfeFAMÕ4NQgv/ʪ\㴰  _MSra `X,,q o0Gw p F*PxBݱ)]Sٛ?#ƢOt9g{9\?%*b>Ad2o?o[ҷ5j.ۣݭsk3 wM]1D5qmٮlah. U_p'74u:4~GƖg̑}'_{.6ڤpc [lcօ+f`&]E9,x~% aa+i x6؟偿)r6DsA}V[p59pڑu5J/LGaON箣l;;v_ M~ˑB\02Ȉ%YAeښk6 GP8Y͸%5ڐ;,mM'yHC}:Q΄iߞq=Wl Nmn =4q&N3X%Z=faԳن7%"̢^Ҟ5,S rCSz{$mE7ѓ9I#}@ V+S[Ɨw)j|j^?5%I HgJSZN.g+x2x2_oSq)q&mU=!>`p]F;j$meA֞|Jc]KXbsfm%ܺ ,|N"qղ[Љ67kIGgOD ĄÏB{ )AD_bqPq?[P W4 ss} \N "M}|Gm89.'eyD(z2EFP[`vD2+EmS=y)3mt!a8AeP A v 9RrϜXՎMr `m5/S/ #ֈZ,%ɋu]=f@Zlc6iS-y.`26xj64Y'WI1 [oj}!b3Gɀ-f9!; w!׻ Fs٬ bg&m@e "Q5`-?4\v FI`W޳f ppe&{?- pGr ٮBfϣ{s {a%wDⵚZ h̘0W= (9;\u {c:;/M NGY1ϹH ֔_{  o:xAҊ-s';EbT!:dhE{ w]ߚ칳R1 4杦\x))PhfTȭ0Fx;ѵK!wd[|@]BPWZ'<ԥa7 3@'=.r XvKˌI%ի荚 ClkbLK#hO5&m{6E;P½uU0mKKk_Bi݅I_l6 58Q.ub_ZBaК14QT8/ qi# \܂K$ηڹhoј)HD:ibӠ%xΙA[!o9[>2WZ%ܨ#ivLVov" zxm,( b0cVWx)\vBooUC*oE_b!e4YL^oRz6N[5%U# 4*Nx&MTn4@k{«t'e uL(-3(S2*Osx 3#em` m9p:'dӞi}lT!ZtxQ5 fS@Ž"쏢d ڸkȪ~We.t.j`7l4݉8yVɌMŖukÞ&ՈC}K .9hP>AŌ냡fKOBO5=$vo{Ġ-4wmsYD0]ڌP6IE \3w2:^]|KMg=ZKT8У C|C۪~J86~~eeCw o8dznf)?N4 þGKH'b o@ȸ^LJI(4(}u EW ߗl :GSk,Jr|{xrيsC]kp5V>8 /1A_L9=a||&ޠEF Ӆ1xGA~/f= ]0Vx&VS1-HgoGGpR >?KTKTwaː Mf0uc7%絕EA0ήΥl* !-inCbTN<,Kt7POE\7#<%Xݳ<3NĚ m$O:OcT.~ŷ*N Q1h%3E$9܈o{qر6tH&G#{kg%3C)ۘCZ1}Oܺ'JhV#E6}2?qzMbt+֌QSk0Wit}6DIS׋|='u $n-wi2p"9-߉=_o/}뽼aNLM$UܧS M_d#"+9d+q6hH FMUN(M%'s?56.6Ǎ j xl r HOt\fQg:j<%.8 Y~e|`-Kgg(1;B6 # 7g4*S+p54]Fk@JgΩ:&f]urBdLq>!1ӭj@_><>4\>&ZȲmN"0=hRP@3B=_3|t=f0) VϟڒJ8X&δ½&[{(|Όun1R臻Z.;39 M_N`ulh˝9R")=c:n]*ժ,{vКȞLUGB^DFL9jn/bkt`˹=5,%[4 B_͏C\xi;edsv>ss^2&lu}`x8mGc |iRI/81l4DhdK 2 f.TM_)h#H1? FcBc(pϩ)z+=]ukpAT=~0(`nQd"`H{hk 6ݭ:Shn|ȅ ]a憴m#aTHQ2ܥ^ g|/?W$pEC&zc]$Gr-t57TLl_I$Ӧc#{3t0P_>79WŇ,ɣ|4c8o>iQY^ό!!P룄z~XT.Kn9P|*vkFe2 Զ&vv}!ESV1 !<K"4ZlCoPܽ4-!5?؇Q,9TEݭXF\`ۤU?8X4d8LԬx*휽Rj`r E+qڌbYk?o@Va] lV:o?,ɮ zʼGh73={eD-8(%FT8:͆ A3ZI~o_P&ۏ. d nW٧}}%(\-8##Iأ\X*y19TL(ǐGaא%m.oOyWrxQЪdl}d){C'$<ήK `.4}#{O{Isn!}PuYӼ.00 oZVک]xЄםiC7c>a:> 0c=FDa3)-})%l%#mLCq8 { 9lj"V!2B uV-,J/u:ts&)BEU?u9"RȘG>@EsAT@()d{D4re "lE`EW4ĻT0 zTrVx}0dqTH:Me$=-e#u#k㠹f0Xf!uܓPZZ*>e K D㐔 w$`keAW4tQR v>vvGK>x FwYZ@ "] І´|s[XQᦇPaKXHX Mo9q-E|,p#FF/ĞP=K>d=4m82.{Oc­s[ uifslOt /fѺ<® J;q$3|UO>^ʛ% @;C9U' ) :ĹNCb/m^)m Ta><ﾐo)CK NM( 0f>nhƉ=F]gFu~OAOmQ֗oEEIܮ {d%\Q\4NF( fjjvWvE~?u&@[}":N\>e g}_sZ O'4k^~am?ojQ,d0.YcL@~LUI=[%4JQcmݩtmAvɼzkE&u5]Sׅ?LKAHGݨ L"Fڍ?[=G]OWJ3b̏!(!Vn2oQ!ks2E&Ko 9e+M;p;9jgϽ[9Kw,M)fU ۻ F *a]}le80yib2ۗ8u\&Q!]MKDH"RyγX!fET“>K.G y:0|iE'HP\6{*/ $*:" Ýo/!x\܏~|Us7T(@珞-lKE~W @:D2sdARt XE!{!Q84dK'4!OCSRtxV0#b2H4R}$~)|ۑm}*+UR%?yèI#9U #J$2Q8)Ga8 :w!Sp,>c)P>ɰ[q4Mv\.1ǎƮW!Vfo)IH%i~."-73 hbXdihr9\ʣr1&nJmwi_.m(*WNX~G{*~5ҏDʥz`ƸL#=iT%@xxŕU5ߦ2D|Μ '殀-WDLʓڭVVcY͉n/=GwQ1 !^?Cb( 1hG_@ 8Dfsbs>[4?i40L+D1ǹ+AV].[xWw郓^Kjiu &ü9^Yn144Q[{]8-HSa+1!)֍`k2\> ns~E.ڢԒIE0;N]{3K{̤y/ P(I1|X̅BGbE<6UfPԦDr?-*bzm&өS NH2;3&jlйB^T8܂/r8ܬ}BUڑ)3csII.JG]MJ秪XdB\v׎ P>dq28:uK ^W"탂i4:ͷj]#>4'GaS{a¡m-X~QholAu=dvgRs2XH\Cm)e_vDS]x Y!T!bxse&-h\W (*CjZޙnX/lcMbܦFߗ6#1Nߨy1lh_k} v#+UӖqcBIӍF+쳑~j `!b(bY@Sf8c߁N Q f %| Fm+9XCz5 )A'|U=$؛qC*Hճ/TFox[f:#+ HPdA~uOSJ)QnϱE oѴir4[:<AdĠ fAE*CNY̠v4%9`y-&تjb.UhP-ּ̻eB$bN 'OoOܷJ;WVGq5 ;62z=(z08#:"ءj4;$]! @{YVU:7A@:ί9T|CLgFE/:n3Ȫ`Qj?3'j@0<+xգ?4=_ O.x2]{$ O̩0wӋԯ 5\0CMj wk2T$ K&le#ή"Vu2 680gku[PS¢PBȧ3!_)s+ Stj&G`S:90Vꡃ$ڋJ4 )W^YezD<- 8eҟ։͈̃]9IFx|tXB + [hM2JO0raq蝕F{!c! ,OlemgF9[U|FusFy9]}K{UFbʹow^ţ!XMPza1k[]i犭A5aIDNI =揖/(*UWNhG.Vz@8,E] 3E;@`qzT'˻ҩ$RhZ؃[{ꨚV p}YrIN?;Z$9 DtP7O845w_<^LlItU%R;J i6#Dd5pEDXҦCWƑMa/\$iT-ўc۽qzL:cO-P(i;߬!(p;ۄ;XN>Ur t.;?VWSrW>fDG$("Q"ALZw{R=ZZw=,ŋ|Dm**3p^k1Sm $s f9Vn:_DTBJL`SCeQ#J&uKli6'.N6AM3>hi;0ATk懗?OH>d#`Ffas~DM@(8{a{*g.l{_U<Re^A. P))35p.݌\(T@;(;vP{+ 3 ̺u7Bј{ay? c>1'J`FIcRCڎ"dw3BFF` ^tGHC92a _Ǟq_9gw[I?KYWa@Dz} T1`w bg68n6s tC ^`ThI6$T`8\I~0{exnEϤѴ^?t.Y-']/ @VT9MDo __NcIٌW."KiuNH M/{=&j6w[.@E胍l%5Zel |ll/UeP"*撞{Ā ޷F")1rdk:jguR1<6Zj\J"q*Tߟ[ be4Q"^ /(K`@LB)gbsJ3&1eiǭḣ?:{cF]|PD)N\IBT4L,^cj<ю/K${݉Ju5ft5|ܒ d2Onx `r{F!x̢TOs,QU 淾@+F/Dnl&a~ֆE$3.wL5kD*x0Cje"ѝ_CWpy84ǘ'd(Qb^9&x*$Tq}!ocB gI&*hfY*7bM%h^1̚Px;濓iYP֙Ak=l):ج/˔)p{02i!DRƲ|^x׽A_g)!Mn7͌DW7A^PbOF씺]۴ИM{ryKcju\ 31AxD:g$9g|+'_6gMc$ Z1߀a}rG6QM4V\zr`'o n56S\ͯ x5]Nx>RGWXGSPXB–ft۽_BOCVuҩ$Accy4E7Yxl12Zڹ?\^_[fvS5\nlzəC ȣu;+*%0Y[9ztD~3qpZcg9367^|rM! "J^LOzCL;Noƻ,4Xl߼Ky1 'ˬc-wf㹠q =6(ְ65O|NPkr&?oJ*LcAqpCVp`3>}M5POue|d?^} q&7Gz٭J?䈅W,c$yלz¶qߟsn8$_axR@(Z#zR~BAP jzo4"1&BK,W[ Ө_HV2!pj̭ 0rW'RRySN/nJÉI2}GI BωҠ[L@I!=)b|HT" B.r+g$1۶3sر8e(@:>L)d%矙W $^Do4sm85#OBpܥD!l2rVsg$#(0*1NmkO; l_ 底[nQ!$"gwX~1A*\}1~T`aizFNP=7[18 &B|.J{l@'\_z}N;4cK_k5UhyFX^ x'ϼ /+T=¥KUOQMl,kB"Fu1cNA+z @ y^0ׅ>H\nD ǁ5plq=!q*yP(w\ܵXoᖇ +ۡ7gô ES|J '#mkw67*j7w40Q@Q*5kh [쾒.-b!&$2uHjSINXGT8z Y1HaV,e1%lTAno˵I_)=$OZ :;" /:`&wLBm TvQр뛗h<^? 2p$D"\~,>&TC&{{#~c>Z4 >as@S21D ATB` 86!.0G܊9QlS N$+e;{5~7) ]~MB,eq3Г 0(|$Cel8M_wڃw" #16Cz_X*לGr=/0r7 )h<>7Q= o9pK0 {'3!\l҅ѾUE7&yC28i&@KhR j7tlr,b+^^ۉ{ ([}i1y9UA)H>*ߺǎ`*;,k:cDc nN0W9V5Y5R4uԫ]MyT(D@+pj>^-]iCE?logxi#bI6|pD@LT~ToeN'7]TE*Hh"@oh)$B}J?.G˗?<[4hoB kFkE3F.ED?FVJD ~(Z>p}eG>lHjKhI  HLEPCx43p*ewR*fh]AJ" (FlsS~.RrD /p6aܐ嘳#@c&lTH=gzWЊvA0n*-k0ܰC6wʊ=M GE!^@`B(y~6h?_3zL&mn3OGЪs&w5ǘXA! [a 2ynb\JtHD_7`| ,]K8hxw-}( Gj{[PNWmAM'~.!p:ϠyF9%[Ӎ>YjKΌ0b4aksmvUce*5j%3]ȡv^p7QE sOo حݺ'ULzx&n~` ٙ:$J 9kn*_oIqj™}:aE4hCܹ@fۨ.S<VF d B~t?vl1pEOSD Yu{eRޣM"I1`mAt򆅣Zgnu2Jc.D>!,1܀_&2v4_k;TEe5 ! &!l@p_%s @<=L ]mU_1sB*aLsQ<$a䕸qN+@Mi/V踻}JSqd8Hf?ooÕS9r40Zr-C~w26^lGFGƾ[$4Ktj\@sug Jbdo37c*F>ydV=̦W} )?jP,TU[ƇJ K䆈xb.$ϡO(Éreh}N*dDt.b-kCxoøL66mwfFB|bW8LL j_L>lY5; fKN5-2 lS7EJ\GWj-삗pH[O>/ | `TiTAe9l'55 =* XӧF<v#zǕL)[~*qHECGpOo5 ;L0m 0UBx^ ՟9K|RrM5~jJp`!Pj%dScr_d,sp?{*rom)N\oR!W4Cg.fYɘvFzTq:Gv"gn6%F3bnH9}6b90 ;BGZcsip5Qlv5zTl]:Ӡ\]2AX7<Z t%wmU =}Ct{,WU1*zh/t+AQs:$"# q&¸Q H̸$"ndE,$`Rϸ Ω`H:=&^ fpo@f;_$ o$/Ћ\(=\P!DmEwl8o!)G{hbf!sdP\aQn8u>2`"le ;X?i##F2=vLnakG}7D9fJ>fgLKzbXhDZ8<%2AvnTRx^aIijCnFA֞QF1 ǡDŪt<1cbI`,LK#f{^Xj@7CvͥEڮwd(3= h[Vljتj*'EjR-pxD|j!{-IGJ<j,6h*wsw^4㊄>f|B VX{)ԓ=3:KCȺrzxt aqבn2D̑ԁ"y$^N4ku'lyi\?R9ЀfƔn1mh$'RNr[^-Z%C;AV< o/<|̙Id9<6ވ5. UО_<^%(kǨ1.Kiajb݉@sj*LHZY-&3&T 27/x=z 5EDW˼댺*';{M#;cn7xD m6FALaj˜B?\^gUC]JӴOt*pf6Qe:dkS%#&Nbvح)ح_ewP3PC\%ϻ@U/\ƒ[ )E<6j~E _vQ6 YafmK_Ib$04VhպHq̊5Wa `Q'§<%K_^Ll=T O1a!I9]Y&4p>12v󎈟"&8׹xk!"qԓ(n"ܣ^Iq CPUg-zgyrոy+ٛlb^o+/qC.a{.CRw?e/;mM!UDΧ5vj-1 {U}w XUGW*tyr#9v z_GvEJpbbƥ1RDK)r}?&1|+e޷F8>wD@B`Z?dY*7ҵ:4KllK:ЕPMPdfi%inX5CU)BDg~;@{Վaۇ#s~~oi.Dk1&!LK+ ]oș Vy$/GCō}*GE}Cdϼ9m^Wt8ġvJ߀NEr+],ql~O3Г6xH2X_T ]8>ԾVη{#]_P{-QQj Dߧ_Zn\g(%e(ыxOCV$h}ݔH@Bw m_X(9$7RXkAj!qf\!~t u*o= TiO;h\u+OvL:s4~Z:ź8No_?edOvRuxe{]=֟ hΠkdU)4HC:kK ɲ1?|ȩ3e)ksoW+WB0+Fz1iWa#! OV}4k3߂Cbв{-޿na6ٝdD_h)*i_U SS{lV,&/F3=B&6̫ѫhz?U&7! 4 &=;#)))8UӬ0^t. +p+fݻ)/?3>E Zq32ǔ9 ŇXgL49{$1vѨUf1: `qj:KB00-P)ADXZ2:@{r^ݶCEr 8=yV3.ɰcťEHqL@ ́M.5V”C%D*&wYȢZ%D_raO o]ʔ>w cA4V #F܍*kE^9&Vʿ @d"Ǫcr$>R@EzrFCpG=! ~=<WHJf X۰O =>g.L&)P QNGf憟 ?|1Kep)[(.U} >\Mb79(bg3`wx$!t*@UJfEszaDf[XjŸVd?'J*5&<%R[5}+57\u~# zZ,}G-jf{k:l} r0\Cdf 1\zR<׹F"@R%bQ1ԝ<f,`~z_M#Ei4Ώ6[:v'K9}xf4g`S^c>V$ng` (:?u9p-|PV!+/ g!FL\F RdAsȒ1K(Ģ@ HUP:"qhld k59 yxawuj[>@_@{QGI8r?1Bw(o -XclݩX~>\짧4zkݸF{?7Z"0Ja) HA-ZkļT,Kˎ zLk n\mI;[~fɻjW+&ܿyHZ,8N%=eIShw`Mߥ,MϕUIw:͋kcpXO:g'iEO{dȠk x"#IҊtP/om=l&Zx!C ?\5wUV?ko܏l bׯ/kj-ÿ4pn 5=gH2<7^K.`r?]pu P?n{'ޓ\KyeA/F^JL,"^܈6mx״ aoLVJB5aa0~[SP#[DpI-ݜ#O8j:ލ^'JQ [?1vqjAXL()w^ǃ4rm6^-O '5Ҝ%TW(Sޗ'Ǎ͒_^a@HV]`R>L/Bj)5#"ˏŘPOGT(ѥ籢.޺& [(U 7Z^"*MΓqq뉈!lA #T-(uy7u¢iQ;AçPo!1Bm4;8;E Vt'T~3ϣo)6#xA@; ^6SAĊ#7u^w9nJRi3vFnD?nl@ix<8j^NL~&Oیl<85XQw{A\.1֮kw @b @-Els"ҬkcI6nzr_Д2E7ϴ%tjzgZ<8Oؔ-E ȍFBN';$c֩qev㳖0aA[΅%b`CSq A4#R͜=Iz4G::g|fc/×Ii@ l<BM؇~.k uΓR&hjУvXk"" U(~,yud_vH=zO/I"N}Ţ_uv&H7͢R.gI^c櫥E:/%ݯ{ 3B'΁*y+hEV$rh힧6wЏŔҹv//Nai/ @b2)R‚p酵heهY :Dq9!4 Ný㻫 ZH =\dt4B| T#82 sPi[Yw=.9 ruLUv(pB+ TY˼ڄGX;huQIu} Ra{Dv JGJP?ȅmK gl,؛u}Xlg@rr1|s Ej6In 5JK4+q$ s)d+T<,:c-8Wmhid{/pO&oN,0a '8^ȻI n(Fpt՝葯rbpS5;Z2b&]ӻ*Tr BDQMfվni\eKtNu& =AGa8KC`1l'$hM`!S<Cbu`)COB6ts@fݿu@/1ǤZӣpF̀,ܰ#W^lN٪>;qbLXT"9r/ಇkq˄HR(H8ɍÙYUo\GX[aLޯgw]q;5xN>i)X\Og.6AIlhcXMFA EDd*E tZA0\}xM2-7Uc 46=tl6s'6 C5AQv@ O65Ӄe٩]"hFߛ涰Hu.N|Ծ.බ<ȇjab+AdǞb,s(,%R'uI?=" V}4nֳa(_B?eд0;OS;N0`ZsM&sm+썫Y(@“&AʊQVB"}IS|y>&v\VVϭ~OwHQgNE N=+~u@};]f \ݒP8B68e*9W9!QulaKSߟZ C[ 1h= _+-#UxD,LK\7#Oe &06Ι!CL `tnF$ka b~Kqc? B 8(ŕXѥ-=8g"/ Zi,iS\yn't<p"OIӥRݨDCI15 ٖȰH] Tߓ.o` QneNZ#B$2sQ# CVԋd!A`Yd6W4u;jH]FdzٿX7 vhN:'!)ܳEc L`Zn@W8zNi!31li^ QhǦYe*29}\ C#TeYp4XfvRM<m! ?rT=2=y7ƭ8okŅRչR;H1WI1!6MWʲJo_ko'OE 1토Mt29smHycFCV UH nxz==~*?%gmHd'q؂;Qm90Vr[JbsBB-1ÚXb%Q$1!k*'֍jC5[L(󔮇Uj,&'+L/q:AbR!~=l {7'< zaP=~e~589} k $uץ~M ZYI3l0;C#zL] Gd6hǚf@̘K7/IGUDfOuw:r؍2wal{%TxtZ]s1P^r^YpD!;2ʼnyL=ˠEk'΄opV.Mrv_E翱ҟQ]ƠmO:A=쩝޿[:p_j 8= 3zoy/E|GK3#B<ٳu-EwНMf `G@yܣ^9y-U81\mUZlL0'p4x[Ag;xGwZ$㒓A ]G£h.~/XoD+1tzjggvW;\C3vfybEvR7j^ek83G 4k_-;qni\*;? 1|էA!KaOk3x as@qɪ"߬3MTx%:>Dt.EG8h|o2(l,!7k9j#_]1v3['R;c 0X$I"ɮZF(cz h $#jb%R} PuΔZ]Ƣn̄/91NGǸM#k'ԠǪu/W2^?YFS^~/V4:']ZO6bb=aJoV/,RAeBb`"ȾC5΃yITw/*J)w(w \d4R+t! !PHtQk ,f+T|;o`drɡNNOca uϝ._@dF:"(c GǶk&u4Ck y^G*gB]X7RFE_dmSe:́a7Z~Bd|ѵFx.P0|qqۅU>dp^Nt5h{sp e0S8쿁RM.@VeG{<nomIaiRr މ-'꽆ϟzAeNQ^LzGcbkɩE!V鎝$J?rjy>tϕpf8\>~l^|M-f0 ڀ_CJ䨳xX?Y)+063:NJC:2HqvsurmۇN`nU+ow%a\7+k 9K!?GT9wG&^2 F;MBhQㄖ_g\;30 hO ;#ٹbnð{)_/+w=PNht|\G3y] e}zuqqv++s`Py\/6"F38*Wn\|L g#8K6B\hiuHldKBqc*̐pSS芚 HOcV6l(j (zNs֐;ѭ$6 ؗ|C+zGkϐSI+hھ)M!/mmIKTZ u+kW^53=a:Fʛ'6.A98p 3|shi4(0, $4$*JuyaHpJ=~ nYɿ[s-ӊ2nVE 0n\}8e})S? 5ʕ>Q+?nb?rW": wqgZM%ȭI{$U&ior&1odyf>ϥN.L`GTT 1ڕC'I^gYqY.?EhM&7LN/i[ {&ÛUWޚ³}3ݑN?dn:J8' t}e{7%19WBE+im W+>VrjiRRyDnR4ʓ ~ALC޹TU!N ,oyn̫Ƒ6EP)WN\ V6QޢJܹ Y[;gX|gYHkSiF1B7ݯ? Υ$&V {686\ŌѥCe?Y`E>Z+?9/XH~JC9KFYr-a40cp4Lَ/r0200ZsXO:p-Ti.Ð_[djщ3bU #ܛ >,Dӣ?PߣQ6y()ZסμU{ox>3kH鎷?֘Fgp0{ZTB@1u5PU+QRs'Z#lC5T)QF~ǪͰpzLY\FLp,ԫա81˫3 ySX>M#:g3j"eO ˥(vfs`mMf<5WΈ+&'Ș|4ίpz~o@5{L܇b4Y8)Lİ9E>A9ݾq/͌TӰ[XHVśg`ٖ7=} Kƻ4f}v6݇{6Js$!/ yz'i3G:g( 8'䵏cҴğZ5ʃ~21ЋHv`b%`nLu,2/ɀzn*V B?kbocN3,29 q *Us+ T%g1af}\dnUB]>O{lkyL#bQU50U#|c?=#n٥f#Tq3حoUeO:&k%$򙮧M07&wQM!X~٨493b{~i`2ç LLu^cpO7Df7Ml 2< a; %1dy)gN6d!<:V Tcc9Lz5c,$uJy_0k9%&-G--oUy=Xjy޴UC l? ۬E%1ϥF ɼ )=;ri=04XzNkm0"X2>; $L 8T?D8n ;<ֽyeŒz}O $X͜C6ΟbBB\x`(O:#5=HTIsB/5SkJ CEENZ;ԵL|M z1+Y;a%U?P{7<QK)-t9=n (:6o hƓr5DWVh%ퟭ(}d̄ g=_X HQ*z Pł&` @ }S-I`Nn.DXT:>?D-aY>Pm6֊A\kԞ(knqb.}RƠ#gq}P3OW/Ma}j'%yBkvUk*_ʛDN韴[ch ǢX{1 Iaj_w"pCnXB-~G A/B)u&L6JrVBBBtMٯ'23s0I=t|;r}J(1/Yɯ)uZŽ$ f1 HKV 'HւaH36ͭyڬ/~1<~6Aw ^V~K} ˭hr&xOSTjDSUvɃ9;e@hABo;¤Ȓ%7ĂCbx$OĻ ltSl⑹J-$e^[3 N*X#}"첔 `||%!G&rDsY2^j>se!36( Ah|ۉ*^TRg64 t K@՛8al{Vb\YTOFmZSʍ)Ưz)МE>'.z drXKΕ).{B:H螗,}=!+Z)˞|1\|OM~Ej "'2߮'ӎhqdj -lnV#a2U.MjUj ԛVrhQkCm TRt> լ,!%kJKWy&IA_6\<V8Sk6/.ٍW*/]ܡ@|{e6Qډ- G0ok-Ƭ 9I; $OwU(3~^z `NzmJ\YDwӏ@s|fg7N+v0Rry uU2*3P[G8Gc'4ZY轁%fFiq[;N!Ap;cJ=G7ztbO}C;M><9 49p|wxFH"ٛYl;1L3ӚAK1tt8dڥ Q#k<5i6DGÿ0!svgy&Bσߒ;&-E-^"VEtOM#uf`~Acܰgj"qNkF,xI~(w<= P ~(;}W$rvQn:s-:Sd7{ xQvjѬ sc^b;JwWPH9v9̩/aH?zSkpOu蛉w+c_ ;4މ4(4W[I*:p~yUcjq8,jOdkwv$d2cU"= Uy"_u.| r A!3cbWD'w,`4k;WR*l10aidq"mI\}MmEw }[})}1BR8kB;2` _s tdQr` cm[Kϒ#"m(݈UY|M)?|9H`& r_'wqv?F"q$uxuōu/>xŇL< W&mOoY!8T GD/^dTC0!p,믰AԶ'jQ?P\QP+8߫4Rrg b_OS:Ůll3&Riq;j5e;*-z{笀"ⰳM5ӛ%D!0gY׬4=)2!:\Cܘ陰ƄIy}g耇tz3W.s,>q@x6߹DUթ;=|j>l4i[;U8a2-v8H ݉=kl[=vu ˍ%͘T)j*>Mԝq3B n;:'* 7W\f~!|\Y]AVK?ÒC[MjK%I0 H2iP#~Z#Sj3KoT%cClGFjW@ ?~#u7K^:Oa:e>{&2XD̋fCfcu}8xfpf A~_GpђԦ؛5Ӫv\1M|#Q|2idak>h11>YcY|@}Ђi'+pS* ^Hǐ-sݻ] ɡۏ Hz",D"\@Ŵ2<sc/M& uVZ쥆^S׏^YƀSVPzYDC8m"M,0{ͫF]CA@BC3+ԶeY \~I)| IQ`?b-??j/8c B?wqϳo?zy(AN?ju:?NM|<Ca웅"I/[$Q)X@7e$҄s2}ԲPG~ak®5=Q00'Ę1<#dn!OQpldg~J`=r~Ur::z 4ݍl~'YD~Y#֨D>G3eJ?ݬ ![9Fcw \)!+GvV@aa4 <zJi*<Ô1!ZzvM{"W(@yx 6lӥ7=Hl.qX+pg OY!5s,7ӸA}N^co;* Ov9#5G[ڙykC忸Yy¿7Lʴ,bAϺbF9*>o jƇBjcq4Ra<^vas1t޺ΈF xi`V&"ׁ'&"$0"Ԃ>9ϾniVTn1\ -JZf2!V匓 !ijgg,_Alu4U^wܤԾf7VqI!(Qak_ϟ`*'#8*]hE*~v < ~BEZ$DYt\S?bc1O4kdtL k;µ 0ZqSgX.4?c2gM8Ԛe+̦leηb[Gr"= ߿k7:dÌp;[e;a{f9¥<@)(d[Wۛg:ۜ 4l+PǮ}Pn5TWP݊YT. \pa{> Rp{3wS)T ꖨ;Z [pf5//x(JNr.:@=q~|l 9S҃$hy7pNOOhlݷPcn|n xܧ i$zs#r F{BdͩU/j%%]Sꤶ)! :}#ð5~+M֔t=Gw<>0ui̶#Qd"ISr=U,oA~,ϩUyLSoiX\~yi_S9pF*DJD K},JAY8HzcI0!oꖈA:L$ Κ8]+}TQBXXZ }sZte4HAy߾Ad%ŽVǝ}6M@ S!;Tbw}hr,beHmV Y0Рݑx$4k!2)_f( "">㗺SGpxH^ΦZע  B3`|TrȩyV9qMp=gW Sw/( W3oQֱ{)ZR˭eQ!2IJϕƼ\B1WShRNÆZEwtJSky MQYA93c|%w^3unA)TM OҥoeJpAedԆ fS\ 63 aL?6):P0!S^y q/zA&?+Ob/4C0y^Z̒O>k'"`u$ ّo UW27+p0ݣX_uBA7h?FuP /ސX䵗WYg I9;4t긛>JҐ!թҲ$F`-pohj43)Zn}wTN>Da#omC` 䉼aM A[BEʞ8B_#gXdp]bd$ȿ_; L%gf33mu e؊$\Csw_F%x:= ,r6. 4+`0 sI. ]b $;E> k:JRyRSkEjCo{Pp[o(z#V{߁~RHOmmRX1[k@aƴ j9, Ʌ, '-3ón(J絾̛.91i6rcyjR3ct>p%/iy=Eh3wU?`N(fh(.ؐ2N{J`&{'#T6ơW"`KHmB'N3e Ğˠ lRW8M5 :VUXQ/s Sڟg$;߹5P17[7?qV.)d {rK* /GGFe e[p3׏EfKQQR H,-RWn- $HD?OLqIx2QIE˹Ք#z<ѿ#|ȔU`xeaOF IpC4 & 聆*H!{W B7 tͼQrI 6W}ҩ`4y1XAH]<,P^Dp"$3(((W lsZ&AˉMzڂ%Ԙoo[>'h.^g[D'0k0yE a &Iۨ=TvPō`bJ2Ko6rM+%fe$,W.8D$@ p}u쁦XFbƱPsߪkoD+'6{Pg{?$laK_sd0o/KW<]P_ݽ!?/,vJYU&~$, eS[c'ߒJsJ КiY|^ȁ< N>hFc =mƹ}06w`xODJǛ]npwĬN_=ϔI;kܢ -#/z'PڣܑnZ J.HxRXMZXˇ5u(k?ussG!TUX*idȜʧ9ERR.elB5eʙPDrMaYkY=q'Q/D䅽"Bf`aKIzP6Eߪ wW,(z !W)Y4y%PFb0wfp瓞3u7#0s i*^;Oц#s., P*H4_-4o4k`FSt3sIwwLԢ*%ՎbQ`o)E\ӈ'r䊄Q)1ʒlvR./؍u}x̵sh~㴪Ot05u T8 $ive( `Nu%~O8tӷ>^}dutũ0Z125'{8G=%CQAjhؿW-g,A&oGo(\4n0̣OhubWjB/U[R C/QXm7D~ƝJÌX1kdl!V_ z\?gdc>Pji]сQt9-t ͚rܓV֣hMPvtٛ% 0,&bĖk=ڴ 6sZ5&&k : .ޠ`rO(w]k#\ Y6 UXN^j.egD :mtueX%n$^jt, v^Ōܴhd[9lc@j {59ʝpeVo;aw%zfūHkŗLlU'KV؀o_Jɬ j8 ׌I S~جz 0X$D*M{$_E'eazLYB1pY( H9+;RNu$87v|) O]!ʒMJkxR:2ZVFitBJL)S{cmbJzB=, ʷB) *FŇW2*B4dCuN-(iLnb(2ܟ?3q3yKA"Hi0rA1`<}qJAh"nۥ[QvC6Q9:џu_vA1sPVUhGJ eAs xk3Mv+6H4x(S2$ϲ 6ȔQ}2c#(nĺ&I=yK/?B GSF*}֊zuBr%]E} @4fs"f񝆛c):{|ȷkU`7bk@N B'Vs-s{ 1׏l.Jvrnԝh>$|;ۣJߗ M돑%ò?i]* O v&%+%Ɖj: cy)Q:,fȶ K5thvH*9 q RIjE)j{dD/B.5`BȚqv_;ΩpM]ƇRmRk+3!![^ $%G5.T!5"w. ^SR3_b*GnwV5st*Q?Tgθ v㈊{cGƋ w4N1Wu2)o,J lAttowz {c|qjA~[QDU$m=Ŝ.zsP`i樼II-oK%~Sw#Nψ$k) ;B5rF<*qቁ|kbv\WFSK1TgN5}lxcǃk4Q B m4VJg$׏c#c8/~2ux6~YS bE_9!6#%vtJVis-J|9~t9 _~<~M+]93-G۽ ǕըߋP螹#&i_)DZ"}BvP&Cdz]¦x {jQ8ݹ|3lWȣC0'H~>&'ofj@r1z:;rP91(wVF'X;Iu_.JC8?:=%&xrx3 68߂Mͩ Mi \Fy|lb;O e;nKe@"n[zV.Kz&ٵvu]0-=UM '3Ǝ p/ُfSW[o+#  YN& Ӡ&f#}Sw(:4USfqӕHx&3uLă&-„*IN`{Wgv3O{B+1u5ćwbHTt C{{kn4Q'!Nl*KUs(^^wœ^6'_0yX0UB1P,I1̾Nf7Cmޖ9W5_V%_791a.0${y{*UͣȱI7෹n`OX9sQvb2^_ cζGGwBiчx/T=Ҡ"Wam*;Nbdvt3]2o#ZD$  [y%@Xi~@ZpbN+ǥh,Ie^*)4gK£GN`0ӣhEv 7UotGMM\F9XX],KCR9cY,yju1n tnwr^-J,+ η_>_cwJ*NU k -/.{TM'd7rK S Gļ[ؚ0ma}"d6 _P! 9;$uDJ#`:UIZs;:=i5!GH7 5m%#@񹗫L7yBeB-̹CZH>Z v!>rsS{Mn{0sU ٱhh]'`Ev Z3C@CCZݧ)!C?h7A^v c *1/+c xA]ECnpd]U,+{֓a1J|[ζRQ'(X 4)pv <0 UՌs(jg'Q+LZ'"mA~*LtxB*u/QQ6܀3KL bp)WCS&ُX GX6na(VZw=5ר/rSZfv]a2׿dGgMM yFUWfퟗ TbFY%5N3g2;8m}?6V$m+qK%bߌgԑr:9C&Qn󡒽p~C9sU.WinI#C QcJt}1ѸFg/4~Z ZW,<+Q|xEM :AL`4OLw`WY,Il pz{A9c=J2K{1}{65WxOjha@&ZwE܉ic֢k3T=nY`8w[o mlϚ&[ iTz3Dj mQLMSXP'%uD|yW,6 %vEf̷9IJbܰ߾sw/hcx c@}!W/^6b%REؙˋҥ{ d%hJǒpڃS|sʢZ n TjUI{j"$'JīfeU0!ò Yzg$hyg2Qb'y(c#Sލ"pmt_ƼEC;<輻Fךu}HC(F2~eZ,bD&t7oI~Rޢ~-S.Խ59h̅DE0ж@CFl15E$>aYrlɰ>#IRzXUcJ18 C6g[N]ӺgQu'uR%ϑĔuxmCLY;Ku,6wBS8 CǛ<8"A"BʲgгP1N,vD9Yڴ.((rizH;uKtT(#Z|[U:dU OhL|ǮwuXS;a<9c3[7FBRrkc:=fV1h0H;׷¯&GkP{L'a)*"O*C дx)SAg~ufB[5ɁV_)gL͵I\OzR65^84QYNlPv|΄vnUk #jXO_D2q h -[%AE^ F]$ TiնYRMeV8@ڊEEľZ2kܫ"inLڲ}3D3fD&n/^ɁY-jO醡wFb201d̲dABˋvStP XSSgx5:cd'ܛX3"jn9hX 0_Dd]9 JB+ fw;) [Ua6Q. J>F;H㑕 sFN2YMLC PYy*y8b0BU,) Qx2.It Rg4D!o0tr=Iqj"cG1O߅9XF?oz RP^δDŽ~-sb8 gv8*:r?ze@͈'rxE~:ocqv'۳5<u^;^' |J?@4xJk<~&&b\7nK28"Vlڑ队Efi.Ce;7jE?L%:'Үj*j6ͣ.*#cG ɆƐ;Z[B{?Jڛ:-v)7` 0= ղ {%⸸]I$qˉDH:A@@- !1BΘ!x|V,dV0e!d6 ;=u5vO\D2n6>?Cő&Loƃ)&XMwK0XvҕFNHl$^0ϧ5goƪ!x͟% %JN~NyX?d&=0A-#mΕ_N@e uvsnjM{# xgӎ !1TF* :k 9L28i߰g.qClxK\ѝJ5Ƞ#yU5vkM hMPva) mc5Xv!+MPSȆ,ڍΰ5x)Pf:!,.D,FCIхrmR=IFJwe mzt 95~^'1A!S`ʆ1[C7DNɷr=bSo]Rđ;X^~0.I5}8~NxgJ13=9c{:Pު=7m!?Vϒzg*߸ `t+X?yJcmepKåԷҭ}O%$I޳X{ݪ@xoƥ>_g?`a,%~wPw_/-u\m8v9\]f4h4 %s QGxvLlZxnE/ti_9EZ[MKWhv֩ALBBag,FX 󟵬eM?{Tz@kK!*s!(E喦f8x4ӵo!DA^ gؕOW  ]¢f*q~Vn !` zY'kq6-c< TʟSD_ƫN#Vtȗ5񳸃H ̄;RݶĐY\/Mv+7( /a}CH}oA8٫ ?$f#Mce4օ0~@jD7Y˜zͮygD}꺒gR.m2؏ACi 8x=u w~Zwniw8C`uO*'N5L$ _DE$Nȓͭh`( 7xݗtj6؝a=:U4!يp$UaC\TrC=(RɦZaYuCW}IAn¬](9M 5oF#CB *ע\1-I4uXMm.`d#[dt Q#.E֍Vj(Sl8vׁhASɽ>mFʧr[pcb[gmecpL7%\5|0#8;WUbOc7 ěq 0TB;22_@b甦bw0l]y!#6 ZCE˸TX}X2Yu x=5C7Fn" l'Lg~d7r\%\@fq.1J­u؞8n#a+5Cv:31y$SWU 1$a)>>Ó/|1Lg G3͐WKJR$AsSp”Q-TML2Ejk4UpGn YbLuTDv3=#Q JUk/;*0PKY-r!ۅ6Äwd=Y/3Cf_H[>sѯL8Y SThiSiMw %!3j G~#J]> kN>#Wp2,ѡ?SL]1Cв ̻ay}YNLaS NopK#QH7PӪ.4IO9l2%סּ1JyhN5SQY@;k $1w{y7{~KjXd/K 3)ύϞU |Tں=y D>]: lt}j/%Ȣ,$askٕy |V;Zo J0Fr[F\]5 鴁_QrF2yd%^!K,/w_ǠұGK?|;gPf^dZ!!ԙm.Bdhx9Ll +[6=~CRcp< v;4@ڨԪ`~g^/ dC#,ShVfn&k4>SGޜ+hV`".l\*V/C<2Ur$CZTlQq6g\ީɂRvNܾơɬRLh(W[XJJI~Z~a=L#u2ʢ>WЅw S5 I޳< c7&YUzڝIJ;C^it亊XF 0YOq7ԱT r_Xڟ>0CLL3prn8 n3@}Zt?䉢^Da |Ku* 5/DpuaM[YZOwT+eG^M:WĴHT9'>2a5 R43ui`e<8K󗄋@&>vl^)//Ro zPb@ ҃#Xu)ӵ_>Ff֍m3kN '9$ #FQ8"F0~mZ󩖎&ANd1'~]e0O?uU\$iev Op0YTTLpW]NXQ1SX}*j&&N$U9֮= ޝwH˔q Ljc?h;=sY 9qH#2փ)HibNB$Vl]5tHw\Jx h {IeIۀT0!Es IyE`p,٠-%Zgڔ*ԞN֑`dH>}$K|JB>B,0`b'g̰Pg*^#sV.(YD~ձ}r5Qz`sT+@ڦ0έՙ~u)YoXfǮoV 0WCQ*=EΡnŃ<# RwyЮ]ȉ&l mwVv&%Av*jC18vꬳMLp˘!:T4ҙ2<娘\(04my@_?3rĽD+& V1Jk;]JĞ@n%0ʃ n[+A%umZG̃d}wxn+d2ԍ9 j`+p+wۇ`X]%9MF燷9=8S(bNhbMpPݫ 3ʉ\)X]_x|zs-%<bYv08QI3"PV_ ZОu|ob>䐻*OJZO+Y Ij h#;,eg1e}㹀(]!D-G+AfHXzOY=W9gctYҲ@ /*Jh{Pl}(R;Ĥgf %cw2MH"Q@RjtqɌNDN߂)( ݫOg9L7f[OJe ]O/d~uw q$r`[-o:\kPģD;$teNY~2DX+rfm}3%Zֳ~mQPFL#heʾУ6Z6i'G10__좻cl[jQoAGvוg-w@ ɓ/ nV S##Is\b~x׷Zi 4D@>7I xP/aБ1N#t >DL5Й(QZv;0kU2鋕Uܩ- -&SZ)\8F/YFk6 yB̃9GW\BhRIe2/zIT-1c,Kǯ N?ttO&Nd#%d(}cz-p-!m /Q5|ݗXvxLSɒ@2d $I+EHEf VϿ'O4Vt]r73u<4Í]Tg%05 j9Yl]Grxt\{JӪB<`46 ,Bd^;7P͏R2 g@q&+0yPʱR%@S36==bO{C@-4Ӑh'SBJzͺ]Z)p-F HnX˒<qsYfMm$HlYԘGn I?[B[oZ[J:Ǝݢ40/̴U-xWƣQL m(DW.,yAIE֪&c4-WyaK(7r!c{ArkkU5_3BA:yXo1bltԩ;=,c-C/<?6TCV ~iPڽ}tB*·W_JwVȓHGP 4wM.93`KVy]vwa7]ljNT<;AjVD윕`˕[k9IHMeJuIwZNv"Ö́xסEﻬٓWZ $!L8] kc|>z*xH6RD*9k /+;&(=Ǐ80vr`:S > cЙ]>jH@4lO=05 +v\-/J;ۊBE\!y#PX@GMv8rU@Z*Q}&/12"}lja 6!wq+4 u3zܪ%v=d|R' [偫jQVRoE'3E >*br\~DU N ȗ\4Z5<:̬MXƽZ.E 9a"g]%V4614~Pe̺]f9f }yHՆje{.mKDP"TFQP)*a)TUC˞-'POlυGuwFi  $D Ir2 RxkBcmӎ_ګ!"[%_Q8iWUvW9HͭRl0[NtX\jK$%|÷3mxoi̶*(ʲ0ʁgd5dFm/bG{I( 1kПszT@k# RͫT( gcQ4ǝ `~3SK+)!vhog+Ƴ1g#=*x7}yￊi+60YSI+Ċ7LjW)MT*0̪VM8e,a9ǩ~ö7Nte}4~y,33#:LZdCƖ8%d ޹H3X?˹n7$CkMGN6bϳU !&lF (rQ[Q{= YnUzVЄ*Skn~ǡ޴4_&dsEgEX<Sć KVn|N)ط0G>v׽:AXT^]ܟWxp&ϲG[sLSѩ|"KZp3`"J81ƦnMsb{=p pZ4lnpr_!4qrb6cjuno0r;~~Qȳrts^_Y\ږȟ]?g8*#Ebp1ƚuwzGF&ЮV8% +sn T2Sί3fI؜YP-%2cbHx\[,[etgCkXGV f*LF-iN9y^7Լv1*GY:[JKCI^i=:m[pVy`S]M&luS0 }9K+17%niaϦi%/G͵n%ox36 "`+UVSB<թ\gT +CvIjO^-56rW^gVwLo d F()M6O>[(U} #'Q& hoT[M{>. å|ze3镵7uʄ˦|LrMyR|X-u6F\t?U>\,;R7`' ̾!ʶ}Yi_];ecjSWs.c(%*_)`a{p1 WyAv#?H&Mh9NXs֓k$eQ9ORcm*d_dVX1XG%0:31gEaM/5`>J uۄA ݦZ= (|6nKw7W ^!hǎa_(4 Y? miB+ɧlQvV[<}t tG|-A}MoQ|q)(P? \-Y׶E]SZ pU񌗧(ԼՠO7#=jCIK1F ^7gZ _áQh;FU c0s;Զ&JFq5I|qT|h,~Cu2J'nn-xO4c%]vmf1I\zc`Lzʟ0\g 5'WۚpiA9kZXFt(7Oe@bu0_D L3U:ukV6NAZ@@d${ the1s)m;fl[*uLS<39V<g\"kUhJWᯀCQ +I΋/[A=_k#0U8 ѓi5:va6~R1uh> =.W`r*=fuDuȋ: Ra덵@GQ^g 9P8urLӲ/C `P;& I:*vTp |좁 Xi]Fjwͽsk62&G埠YO"psgL_XA#Crd^A=- ]X69-A { Vʹ'Zy$6LhƋ=9ɀtC|@%6t6HF\`Qv βe쿮M U Aхjh%D=Y$w5WGO'ШЖؿ2}4[¶\4?\:'P u|Y]096)*݇,bM#I (3xFB=!`#ĴuWrPh#7#"zi3r Z<^E&ц-8dźv j5 *0}!(lm{hvfw ߗQԫA#pMTq n0Fe _-g9oLk5 oXjj33 .>$DzĒy: Id]ީEQf#|D k BZ/ej ԻfaʶLT_ ɿ)"U]zὗU:sX 4+%QJ\1M1J4M7%+X*V%RLn ͅ<[.!Fx5-nؼXM@Zd& r[!˿+~dR,ͧx!w)yܢy:$$X'SΫa%gml‰ (OrD4bqEtI!9jh:ʻRfc_^me'W:f-\%*uf)gle| ?(F*{sõyk1–$:@>T =NGUX0q1Qylc1&Uց:hW(RtfoQIUc?JX J5#:M-$H[rN IJ&3cr"Dz J + 0@ ەkz~:AmO]p9t4fZu_2#:X{a-=-UK>gjm7+ - Ћe)!=j<-՚ iSD^VA+!0N}1MUi{Iw6)=|8zlBu!na=6}HB6}8*jJu\2[+!ڽx5|F1 prнkwt,)lWkl|7;lVjf8t0J 4 HMrvU7nvD1tTzW?4BE -q/WzV:+%徵1aOU[#IvazQfywj}z8<4]U )VGh|x*J:hPQxc OJy `urEq oG[_02a,2|;DmЅy< 5 aR;X ckG=h" c]YRf@v,z3ɇnEԶU$#kICDNz2+x V(UMUQUz!Yc?AcO~d48CpJՠj S:/1ML3`pbB1}zeYx>|#d5EǶ';?LA쐴Ďdf5kW*l Z-ïIjr>uRXaڪ"q8vZ+F D#9(Ű:XJKk4]&3^wq֍Iׂ&ZNrVPGmSHucPv>鐢[)(0%Ut=0=b9̣^a O_Ǹ,N)-F.LnƱ=.d qgf},4Z~j9݁Ga>ŵD4'P3pЯj&Ùd0 qvF:Gnَsw[3PИ;*z,UVIea ׿X?^9EVy'iAP1m o9[cg"Rʲ̰R`}s1w ND8ϊ ,Ąk0jB֐ xhm!ō5Ô ـH@uWIC=+aY]&QIX{CUe$yH_ 1}z [nΔY䔘f+: D5O@ 3E-p(_"{7\u28 r=lDmdժÑ~2lt5Vq=gV=GKGgydˋ!m  h'ٙ0(x_J$,GpR %h2T]笴ޣ EBG8G?ָr 5#G|S?ۂߤ׌?|<įʜEvF' hzEF@o³-58QP05{0 ld "n"/p.d7?h=Wno͑²Vl+ܳ8D dy(՘e(q9>bv?dαLhF6GOQ{B]!Ib〱,@ecjaQ:JnܵCȄfZľyVY\^Ϥ׷W69}UA=b⨢VuBRɹS}uѷxw%SK{vķd@Kq߹(!5'/ _F?LFi}i_A؝adaۧPτbZI[|}f!ƥzxe鰤(i,9Ps,|GdG*]I,֞mPOs9Z%\M=8 ߚ+M H]A0R|v8I33Οg =`%._ҀmyV\kl?_Ӄ75ч8%w*dC/4NLwNfH⳨r_7d2@F ysoxLZmaȏcNJfYJ.X Aͦ.yU+iҭO%Kpkp|S %yco7²(Mg(P͚q K9ˡ c07ZgpҬtKQ> ܐPވ&,pK«pUE(D4ZM+|sykxgiyUlV.k+&a"bS E]j2wR ["):?ϝytt5UL vYH )Rǵ#13wоnH4Ή`BdC&yBw4n-~6|F JwQ}F>A1G+>qtIdUBe6Ÿ}e'QLT0(6tPȟz:gzʕBϋ-*;$7_ս?hI >qi3JBl{CbgF@\x%%wP*2 rdE fR:#|y[+k>QKVݏO~gwK,_v noM4P)hs H~L9c<.qIQ y[,r~ W81 Fĉ>%p}Ӑͯ~6lQm1n)^J 4A3q0LRľ96R<~lJѤ>3}*OwuyrIQwxJ^&qO>xz{51s ΋# 0bc mA'ڭ*s/"FLhV~kfLK6QK(*`zEu35,XA37[jϬ+}HΉHY@Űgl.K/MThUy}w@@l|;O3pswV,9ř, [-R.4WͮeEnaB|rbj-DƠ|J /ue< ʍa9;o-O­X)|[8= E c:uT|K+̋O/@vk*Ual[̄?1;fU ED&)B$ir's-滕 ch.Zw,)boXIz|1YӅ9Y/Iȉ :U= ,mrG ҌaޥBp|Q'єٙ@A;U7,+OjFr~6S$Vk3/i,qX)f3EF y*szEQpw,2f#K!DxTMC-';Y|)|iYVϵB{/\te T-R3Mq@#1] Iw  u&Ŭ4g jsuxycv' .jWtmS/exی~~ݰW̍k2|,/h"S7BJqdW>Ћhf"q>\]0;M51tK,KJHsۍ~}h qx:2uÉ.B/XF%^j$HE_`zEJwGM/ԝ,sCd?e3ƑkjNo{~3uZī5/4l?)+|ޜokRTx\zzp$䵱ЈcR^d٦c{6D@t2Š=JRɆEq#tJxGmB( Ɲ>8.{d3&#-I D?UY1h# h[nCɲ_/wSzQ]7*So5^XEݾ+hoPAh4aR_Һ.4vv/.%HAWm˔ª&&rq"a"u(rb+FjBw 7&YKS*rე]a./5"Ҫ]/SfFBzf?Sa }͏o% 0K.xX0=p@ ynH`NTM= DFP˴(L$ М&,JG ܞ*3*=V u2mԧ*A27 )+*ۤɔg_MCB 2"bDX[}%Ť.P״,[Or1_<Х};F<&(-7/F'hsw8Of$m;[#srcH'\IHH,0~@ =_&'nxLQKfiiN IRVl!+Q6LlNܵqc<:qObOy֙~B|E=uPWBA5Yu/YnI7;4M0Ҋ5~~\AᙦB&u.CE7Y4z}4ԛq 7*m," U0_u&B-/*o3W(ޤlw04@cRpeYQ(Ž~!}mgjN\)%DLE?E@%B E1K(OrǸ$L.mh=I^W S Fd1qD$/WlYb\"6sq擉. i+^. ر ʕf?=ǣzf@cחl9@Tu\~dž5]';j8nݴ=PΪ΂$i_O:֬YOeFN#6yYy$ѢhKAq3~LP`n}qASH I ^CSS}KyHt l_q)zщK3^)|bveDkR& 9T5NdǺCt{BiK]b-`;JzDh:ƈdvײ0T]@1?7e^n8ͤ6 ԫQ’f$8Edeȱqhy}U9p%AG abtv*N z9GL͍&# &ZhEMMF~^,Rr`,?}b&kWV #G-sb}> !0E:wuqTq^PzV GU,M5!"{}="ΥN_.Жɫ_MSuԞ.x>ȝMi̍"IO&diEӺ%ketujwo]1R|Rn%!!?ScϦ 9 rivhBB,dSʋ&ߊWکI(H![b%mieQí0V+m23p*K yA h8!Vd73q>9'``FU<~)d .ZE%H;S L! h46q썇CG`h"8tVhJ^+4̗u]$xE)MBW=I3Me[|fH؃߻bqUrc63P6^z_02EDvɼ!ۃ| xv Ti-2&|YE2uszO$QkQRjG7R]FElZSO]M2W ]^iE6EʄݫC~.@8pwVզ(!s/* ?^N6_os"oQ˂!wy+"ΦW 6sa@އbUƫ B vE"!XdFj0AY%[1?:)fv`GBMFJg&5^ dPoc|jRO'D/&d?',UeGG/$n?O,CГᡝ{`+뒴IAe7hPЫsw>`}}!2U;\֫}#1UA un3ɿ?t -?ζd ->-Ǜe0{8*Jm{%tjo\U(G)AWRw'"TMȠ*K{J9]Uk`,'P X v {n3FЗWL(`E-%^~ǒԋ_{=H 3=*acXAJ8Ҋ[{<=KW!c5 ! ubkov`΢~!.ju)lmݗ`BݍϭʷXV=y>ަmcRL L&A`Jy#1v&銐D/Y,Ik%cv>_CE md3+ji& b%nG>JݺDr |W'`%TR݈wpɹ[`d0WmR! NNV!O*:P&n,=K @4s˟La%Ptw>x B%Xs/wF@ g5cuǰ=qd:ܭټa#"TQ;D$w.U A+iT`A|to)+۠~}q\2=L ~a{:VYZh:qNXʗWAa-0ҥ| X-ܳv!U}<4_ŏ-JSUnJ˲+4x:ynY4]?5>w|i>.8O8?c@a=q]47b/_,lĸw\jTw/p2OinO.~bfG׌g193uo_['`u?/T?1w#SO/HۂG"5`z|%]2jgOGecЦn 6 `v?6>.!@B]Tpri %b==\xe3դ7 Pe#̙Y+bܖ3 II ;u~Đ%nm~y@g1R4.<Ƃܭ[DY$=[eX@u~:ldԟźqEACz}wZ uIžV i ,'%j.GD?`-"^w_2~Id6 WC:r\jL:,󻹖׮;]\(H|(ND*56֒k/彏.5iamZN{8OgO*y(mĺj1vS?41UPqoEvG3 z.e=DxP>fr;ͥfQ&V|{!f<ޜp6x1Nj?K#%mT`hֹ!f﷪l' VW+^dDRÌ`hT*_$ioI~;]eQa'o˩E!ymN\)FuW2H}ϛGݡ~女mԥŕ `Zaa-IBkRaz 据U ZN{?Ԓ+YzSmQ[_8YN1/r(߳ެ&%68$?R9oIrfZU7ߎ e\"3_8҄XC'8&bUS#6-ҡ"`P_@Ӈ^Nx˾.C}\1Fz\G$:" {dKiQ\.Sf.-p%"@gi*8D8-,患' IB}E ښa-awE&dp& 32q}ތg{?6G3mf{A1[1Y/w!=.tZHYz5q!瘹ߠ>o.QŁw?Ud(?7v\i~$DGZ2"_e/#ڤLF,c'QE~i )ۛbCj+SD% % څ+һ0d\-=2AހjEkg}\i֎Kzz_MMV]&,й{ )X '/$D )w7CKIl6O*`36lA4Y!=gc9#d?竮9lMtžx $m3P?!P~oa/(`>.NDD/I<ػaj[#&:f=\J*ye=w<[D*ѭZxeC=䄛Ff]4X6au7X9GX7ͼ$ zoA<9V #:N?c=B.Ò|Ūl;啕G3gQF<$%QEћ?5tX 'SVecrϽg%gvQ.r? .[Ӏa+QLj$T8P{~dCgc"> gyEF.xא6fi} ZR%y20o:Fk(Zc7i3y=͡6Akǵ Q|m:l '#35`ǚ FvVj@ŞMƐz~W:J_ k;I%fT?Yu^`肵e8(@.~L \"S* J3DxEWikćdg_UB i$U`L4nR{i͂Kpr<$F>եyLG rƣĢR<:D큭lptɝ3괮alJ LNn\L? Z-5^vn,>(p -}6u|4Ҹ14µs2*r?%*AxIp-fc!U߸ѭ= bJ$t-7wcc3~N1nr,s'zJ ;!lp9>}(G#KgxwޘQdq'P&NmⳉŢhGI]zMrJV}\B<2;Ģ%"{7p K}UH`0Oz<!7hHpTm:V[ۃTMZqƵE%LT *srW/!$ 4,?apSG{b`Ef'VXyBCD#U@y%X\il2}F3M5݉^@o֭SŻ*ҧ;C>JNxƜ[$05qָ dy@:L zDoJ\zbĽ]@E5ɖ$`?5 NcKiup +]?ߕG ~0e__٥y2ޔ}Mc}G=\Kif=S1ېuyWn8J{4`d5&uc*&52Qj G%Wn Tc\ pͩ1\\.Gԑ)R`9Մe>!gԭPazӵJ_IJ#Vs4طm𨃊ZH2jnVxfg#L׾fJ1ZEvuG!j'JWRBߞ3y?SڝkZu+]d |Q=zYa}ǘ?|2]ɋ^ljUI7MUSnz ~Ff 9ej23JΟ14C! @]u HG jy[c)'HiZlMn  =j? s^d䡸* 1bXHlJp̴[W??Ḟ7O}Zu@ـxn!. #%@UYK`WCC]6VHu۠\NNagYCVJF5?Md;2yh9.֖e5" ~P_hVq|4o-Bvrq)Ĉhvgs۪j_==ZZҿuvx1V DD6 '{oq䷑^ywN=Mg)qj7zg3ʛ,D #jNܤE :]Ix]E@ ZV󳌾l̼:PoL}sǀ,o x?{b#--[g,%ls6 dG%uawGc²o- -8e+E|0Kr;IcFhXTRopW,XQk} oê?_#2S_&D/3+-I}2X{l0ߔDwx w8=M.sކ]W)=KK++>rjDd.NogZ }滴x7WJm;=$gExМ&+M{"H5x?(tՁA{VKUX`w\?Fvpt4VQ ̆gNY(Vdh@p278ֽ(;#~/+\x3aӷ؉ ~_ɚAagA' 6XmYpw5P=t(L)?a^QLv9d"N4Wis ="0U&Z?WܝT Fvp> ZD6Y$3VUXG5R-|/dMLI !绫 ¦^ՠwDž _ ˾1; K;KzG-P?#R29pnk8ڡe.Z 4Nye[Zl|6Ak:X ;9DtuT"[9&]4BǑl{gDž37fx[r^@Pb* Fp^G*Fd3X՟.}9aH@e""]:48?J|{:ӟ>>t{) F4\hxE56 uOڮSrQn,"N.Fc\,8zWTKȴnX#*uˇ_m|Zclȑ癀FG0d\[@PT> 1ADٸVL0Rşձ"UQDLKbvU/6Cm䲯R 5 8v5*fyc %[tjBKGrx04EU>957jg?1l4hNzyCW"s}op3@=`[T"o/6 L0SB~C7iNb2 '{ ־tZ85:YSL|;JWÏT>)-'h"rF|^;zl8{pNJuo8/֪WaI=d Q7\~$n4iq I{J&fBnH|/v<^d2/x+ eJTVh47{.!ɤ*+wQ|az{K>oJEGӞm3Ec~}وM>Y{=YZKnsW~G7E\jio,[*s4igEBHYU)͟!9s}QPIvQ*<0h\ #OOJ>hwz={/ ۛ%w'v|{ nV񮝡kܷKq.$hֽjӀ`Unmf6n/`*ހt%HDS=DH8,ː<+jM)Uiߋ˔̷ IUKq25 ݆y|+qE ߒGA,L4'm9+7"";G*9mns9e+RIBaJ)O<՟0Kі;^ |Έ V2LoB2'Pc5FgEm0#pmz&̻#3j: 2V"P>'[}V͋R<b{ TSƻ|Aelq_Q Sft{奥x^AXexl@풑@F/.`o{jڰ"N$zLa_֕kb<KEDutxy^p8> ǖ.H#kB1gty/9L>9B*y;lqڌ--)"@xǣ7g!Jge< f4lj>_OUQgӑ#<i0kʨx w~LJZeo^v ;UUehy$>m~sFn]v*0&*΋Sy>iC pi o˛)!vzÅ <|ASHTq@,h>W"ʯ4M`KYHx??tiIQݷ᭚C pt®*|>$QdgaFǁ7$(BHe1}A,T'bC>x)T܈8jRJZJ7Ncw_{ gDq,Zdg\rW&PYj䪇 "\JaL83y7>vܿC((me#J )D4Gvݏu;'$F&;\-;Fv k_Oz\Ģ\|rE(sv|bv\aDz,a੷bkjƣ{IhglDSoluŶͼA01f)sgX>@u$8c0s-<8q-a'Yut}(Y.nfQBU+CNQ~8/ڗ"r;p2%8Qk:b"N,xYN\ H3s#IOMfKn'FMQOR&] cmroy촕țb%|7usGǽVc)žqn$_*^\@nFSlEeƞG{ۈaKS hD5g٬LӴd P6k;5y3DҚc*uPjA.]1E,5[x|\.ëw Ds<)d[#> eNv:o?6 Q\ ?/I>: c#Ӹ)SpklV3|]0 㸴^(%p8qqu[wtz k9ӵδTmA */?1< -_i%HJuELZ3 lȋ-iG U#"9jq./7U?S.~ B9=,~fnQl\>s2AFu ڡwV/ceT}3̭΄ /# Z%\W\Oܽ g&ӚFܚ} Dqc)!ǃS k)#M[:3lzj7K9:8v)YiҸw<|cuה \>S2zcs5/vxFuފړY 5rdDEPDFSUI:`n"sJ9!bр%W8񴪐9,{|?faX;bDž%|hx%GN-P"+ r,Qὔ_eC⿁e=BD"Ά@85u/,1T8oHz߾ ,Mqh <Ն$I@y h<RfE\Ue&`PZͅ_`-[xʢ#"Mqʮ{ K0,y#akiڍ+!\Ѻ yK뉇^uMb 4V:'^QY53u<ࢯOE(3F;#֝E|cƪRfl3)d'r,IMEǃK:!(g} CԯSAM~`#GEc.ӂJ2kܡƚG~oHDU"s\ JfQp-kBkіFG '={=|d5G"! ݹ4Xe=;tOPRV/olD:E-: /_E)+eʔ*[HH.}jPYV_Vt,#u8JAe@OK A;P (O%Jw9I7#EUTMC4::9 V6o⛕;/`ez@4ly @I)Xq"Rk@/Ń~[I#E)e}kLP'o/D:DcIEsbT\K%w;)و?ƒ/JXyD,['gtN~+ۮ[V.W&ɎQ0HߕhࡌX>ƣ0m{Ԑ[W+@ m:Lzkt># &зj`@ܤHzmɃDc;=.4 PuKԲ|t5 Ė;"9]AU˪2` V2OҖzaU-^t`>όж{K^ mTJ mb3oI#n5|owI] ,hN>T*|jtr eZD$N-FZA 4Ίf+ Iht4S~#y3bahm UJ%B'G HCȧ=sԔSomdLa_vA\/J\] f+V alGbe S`{xNp31w};7 rXk7x>AՇp[3h0BLU0dG)م!|bHСF uFSR4#ҍ o'.6/c=^[.CLT92$Lv<]8},k_&a)ܐ옱K]̲UT4_,%N3O-Z:Hre](a9AkZ=9ԻV > pb e\=\L|dT lQ}+!mb܅z 񼦍NzdF쿪-LY3lTq`>\yo:m8W9+ԺX xA[ - s洔r <O,( `KJ,/ojIev5oґ0NĒY4{ z `u^'vļ`/N](Z%HT_ͬsUWNŲ&G$3vf(p q\w)P={$j<1N3i pUNU!O&sev !Ճ,8B/Ҽz)]Ϗ^/\!0 0}݀ߏ)[0ݐn>|e쨅VC{f6;@?[t,?&~ҩQDߋV$t0 o ?cjD8ＸOV;l#$1^[ԄKDB4gh8aOfcK:ܦQvVfyq>o/$#)Q1f*Ke߃4m/[ؓwͨtx/wY{K\ri Q)C[Ubˆg PdFL'ĩd ˩<}]PL tӖrda,tBϊ:W<V\nD[3; LvѶjx8;3yv.Si޹඄f.cMh%dr@ʑtkf@&Qz-Am}DO c4)(s%E5^\/G?+S\&-W9|-vWdw !t:|q4O׿ o4U_* b7BË>o%KVun#ru'uz?o#vUV84':~/ϩ QM9;KfbWN#3Y# PEU lqT|xFfC5JF%(KHfXqgg|?ć6kl3>Z{H.T w⫩?<>r}_yUAP <k, )5SrҶ:1#Rd!6- zK*$ŀ5y,KQ .2c53yi^#7VՇ5@Z&?DN&SzΓ5\hx,G]7^jtZ\s huVz ͜%c;U:mPZIWKّITΩYȾ0e JgkFqmi:-OSoॎ/p9HF k݅Vl֘A`Zt&[^szR[}gxׅ )dj&謈T8fwx ނ0@FOCD;!BT ~F]WM$Zp4p:ywe#nC嫊UJRiokDeY8& G]۟|HԌ]B0o:&īJ >z_K@}:GҢ_^2YR ?d%OzpY5H]|k]J%e/-g§Єj8=*tq4F% JdPXcqG+lr+U솉iwߘdQxCk7&jI2a-EP=>a3 ]W|a|t,i\x FTjƒ٧";$ Yn$xRȯ t0(@DI%ٞpzt P?/X$8y~cb/V яfڄID8 2MY_З+m 9?z)L(MN^X:CnaVIH>wnu%bƩ8{j-.GTJ{wunO 2d.x 0ޭB ^e]EǾ-0=>P}}=ctqz}TEzr"Wh}E+-j/Θ`>Q@rIXTGKIbeYbұӬ~T׾~Qp?&f2 SAnj:oXba#?CAS؈C-笕_Xʓj) .tٟ[[Zp +s籹*qda-[i:cŠ&@\~qgMPGY(RU#>f䑆}D@eYyFRaV HWYER)')7F7_S%?24CGÎYٿ3jT(ӆ`@fm "tGGoXSU%05{g?F{+M7s=C~ E};F 2%/}šntWbH+_M;Q :vN rmsoa!1Aחͭ+: l{ J;%,Y7V!Y2wHK'mUK OΣ,^ pףzb~zu׽A B2~,dy9$W,Ͳ"X)-bwQ9xT[v;5sưՓ h3[uȧWԃQ_3 ]x>A)`r*}ل .yoe<&F;̝9tda{tiS~bHB@PSh]ؖHQq'(p*5vK7CggkMs_$Q jYrɱ25<ɿ2+q9'nvF)Ė;DV|P.?eנ(wMW놌uå4n+>p0$'dw@6rk^6(aK'~(_FQ;'հkDFV<=UikK:(4)ɔq;8aeNI9HqU 7dFW^'[䲸-`Sp<,bP&5a.߳YO"˳%ЍvuPQ4̗"vpУ6Եڤ H|rA1XX 0D餹Cny7ݽۣ'S($&E3ހ%XALD{Č-=_wY%w4oU'u.=9OQp4P|[+Y@XṪ0?o, ? e:`r#Yb4i0 UR !UCon1/|qxg&5*DUFPT-ZPWjIʠ88_#fkܸByCnƘuJa~h5ZX_ 坁Y1)7uzϱ|Kkbň]PSRjuUtwF\fj䞩:шVLcd8k!4s+(:hMl%@IhAG# 3$xQٗyuE \]T厛ٮ}:1Fiqg>Fg, `|,@@TX|lE\9&R XѶuvCQE6MUpﯭC&/uwpgWЋԦ޾ V+YM_ֱX{o{=cLRfMG؃iƅ'3gKkuz[p"٫= *S4 [ጟcz=eoЗ!"<;P1(q"WfQ%`*yOpk'' ^E@ۢk+{ ZPQOu"~nQX F/%#t+-u(}a$s>@=hfX!h7Ge:Ľ@fk~Pr>a_)m4ׄu2zDl0̜q~/9x#.y 0rKU _xmM TGVb;~W"dž[픃N@SoPq؜tLy:P+V/*eМ4ՁD)[ ʸ{I(J5\!cvzkKm ~(Y{)&ZzENAwvCEK~pv$f]R9翽ӨY :ecٰTN/bC>0-mXd:;*=5O;[$Rk?%}yMwKc{F`0_*Ŋg`R*AP8Z=/qZ ,V?gI*a3]^*a!$١i^p(|- JNWcOT *u,PLt_W ?=ir@dWiz+u .T j~#ZJ~Uηf7*`I.\ 5N%b /hdiJNy!{,=Oy> p}2=:d#>hJJ.O1[Ayjpkt} ]<*_fI{x>JpPUݾ06LP8E,Tq6|X~LY 'EUl rP 'c AسU9]Gg%@'YQlNء?u }n`EU~[陁'z*&`Eftv2nC'Nt7Jrp%= =C yJ!%ґ'h/PM~{!$ wxbIr]^͚!eVfRxWd M`'h9xZkҳK2#ҕ㊣&] ٩5L;ZgS[dbu_ŇUtUf>]'Qqገ$G Giڐ<hvBbK5# g1Hو:‘I,+Uk m 8eZQ6vKgXzq Tc vtDwi#/v?%d㴋M^7}W8DV=)|S 2T^\pg<T Xփ&Yp=02|i^LN"g+?= m #7j45;fNkF$2݊ - ĽL0vu8A煀}vn:ǰK/_L| /[YKUKj7jXr(c| Tmrw\]yܼ Ifo D!V,}'"`5 hzw<]JX8E`jbO<ܭ?&ul^l frjc۹w=24 /ejuQ}jpVc6ϕkpћ-n]_D@H35G&YlUW-Cp}0D&tFVJ@Ky!QMaXӉӥXY,\BP7.V\5dAI995Dg"#9'R <%0;P_KPq7\B+/3j),JT':m= *uL5{qEk<gSFwrB|_rwF'u3'+ mExXv/1Ar&Q1k|64! ~ ^[zL ua;ۓdew/~RTzMI%u&L;V]=`LsR䮮䴭6bso|Bl*5Nָغ8s赐Zjњ/v r0;2uh?fU"cj,@wgI> e]$\$%bc̋\YOW> DDi<7?|p1^o5lSaчv&ܶ/ߔmbJP M̪c淯$G_ 66 aˁ=g[e Ii9AfȟH#h.1NܯQCslӅ[Xj\ЬTMn! H؆އ@Z@uOe YZ"yx9ߕ)2I+eG K<wP>N_qt;YF_=.:Bm^ԃE똏z Sk?AQO]ѠETT#EYΝS}SB~d%,ϪM 'Ae_dgx,u0y xe]rv3CYjg8rM;zO{C%n͐-RJQȺ}9`C:Vu Jp$R*}aR|׳0A G=?'eeNd2ǟHV( c*i.6"PH1\k&ڑ[LC)*nUIʈoTk)# e&w39숨%]6i մ |a}Y=ˊIJ;WI'k$ H(MgEN`? ߵu`'!]u kWE_E mשSNb2<^9,_WʹNYڒc`d^[_5)Xpqn8W DW7ݱAV zz#BVڴyq*[-CXQV´ ҵ òsI?._MxR?h}.1)Y9r F8%EW!p !":[9OnC-^kcA>@4XaNo W%u=Ku7e += []0PZ,(+G uөhWֽkrG"6ꑲ)I+ u..e.M VY+OLi !@~n;8S6i =`ñgòzY]ct- È zgrt[2@S7VL;wP~c@Ԣdh"~T)CT _KҒ@]廠>pR?TfS&n$.;N:%✑u$qQB$|`#=Cž[`} Wvox0G޽>N{~Xz*Lfnb |MYgKKctްj<-TXtppC Xt~-VY5ܰ*CisOKγcQN=@RB{uگ5%r"իdĪx3T6G`,4jGtʚT=r4L߯a(Cp܎|9Wak~?q7;i 7)ʡfmnoxreHO,1DFX_',BOsD2s ^C{4#yJUNPMy)c'~ZI${~c@QޙryN^t F|*'˞>UDZڵdS t٫+~wSMM:o=Enb%~~\ ů۫sB3[PE)E^;! O|<03?|*t=&PJ03~*FpQ%]?1)3,{q%=% '(!zx^It\ ѷOQ=Vz-5e|pZ.E"2$Mh/Dy4{ ,0 4hhUBv Tgr13#[QZY#jȱ.(z0OFw,x6)BLU@Mu)SVqNsfjY3WCt#5%)gQ:6ɥV95VO%5":<|ٖI~Lltڲv~R2@8BB#i QW e8PSȟ#bBP O+>2^$pGE/gz̧>E$#;uIo X|#9U2NjL_0:4j >S-©[y>g_π/=qKMAveYJϬãmY\k6P0$J0eEFgqFsR~#w}?/&r FK>ؕO:M3FH[)g*)$jhShU9R=q5=&n?wg;r T ;F Z`}\)B)M[!GJ=VJRp%dj us/R=Ƚq^j+<³y$PB7_n\LpyU6TLݔw}I('s$h{~A=cC_f'K.sE-=JO7$b{5 DzS }t]"ke8;H/oKweYa=u&KZMX#tX(o>_v}9x KD"ƪXIq [c:ZTi|gs&ߊn/MZJo9<_!ܺhFw[Y˲ȣ/O|n:W593ㆇB'֣Fes>&ZK^73byrwu.^S.y㕷{i*@L2 Gx\Vn"uW3ڪ 0B \2vW!yC}4QhtERx/ǹ}ɃXӍʾ0 UzN{ cQ^0'e {{6G?m;hE _FG0W^_)н>]vbn,f*0ે/£MOKQ_mVϸa(<&,UգU#iڱ;_ (9YlN>[8')'Wo )yn7лvqn9gi 向vZ*d9bY!Gqus@ 0T$Zĩ6Fլ(:Jx6ށ=sͥZ -8Raf$X4R^:pbI[4c/uf+q땋 ۔ݦs9fZ3FP-vYsJY6()`*krc/]=ES)p5Hmw^ Y\fee!l[YQُE}:TuY|uHezE3N:kOlV4ͽuP!H@,ڍ;qwgsvJ]بI6Ύ CAp/+l-:1&y%'*F~!ZED YdrE `m*ќ{@aV*.Zt>] ^-` <="GeH+5X%f$>)Q*($NfkMHs*u#/:-Q#ާy ̹~\+q3YnIno\yzzxX>+!vق`s.\K#a+X{]&,{F"g8Hӣ=(G~̟H( _xs 95(hhٔxJ0=8|-ʥ=!WU]%(g- nA+z;&7jA9 B~C4s[DYs.|qmYa0O{!1wC5~ G %1>pW›KCS [iGD,lۤJR pB)[覡&IzCULivMc^A.\e!HL1TA_:4HPх>M@d+rH\ hN9)םZ3{>L,[Mz Eh)-]-ޠ[c!RdRǚ># gyX~933~0GEC/1{/,1öX P )Yכ rVIks# |Gt9 Te; ~ytmlb)`/\+w([sqAF?&g*UAq%ݎ QqDw'"tL ,8URR+E q 5˰7S8qmS'GWR](fdyyA^qB}7ށ{O#4OPru^3ޣȁ)@[4O&쓗zN 0|)kOz@Έc#pǮP'anW4,Ӛ(-{G̼ȋ7.ŗvfs-ҴSJ&&|U7yh/Ӻ)԰[ߜΌyO **slwIG YWsMBSnZeBQuwLn_ڊZepJ͑9\#OF %a&TkL5c%`obe&µ"Ad NdFf&:iFox3ï9\k{+me/ =rVܪ%0`)h/}@ycƓyq&6ٸ0K敡a.B^:z5et O5R~hã^4~:,yxR6y TX챂Z^]ZkiO5\TKK>nU(  G J{|x%u PA3iOe2m`ܨiEWOj9uCF  Q;bTv/$)Xh-VI Xׂ1?Ŋmxc\)}̢ 7`IԦ! Jhx# qj~0w5`;$ﺴ3^!bfox7\Kh(tCl .eXaUzڴr.'T+rAd/FXG9nank64C|Ed :=1]^ ^1 y9"&AE 뼿~9Vmȍ-1IwIUk@JWMŬ.Ihƒ}"ho}cv5c'DO#I- 0:`gzNc9lS';_ xK2"ںΑ>avMχX{GRǰ xWb'k$7eRm$ Kz4EIBh+@TRRkxElZJy l{^8ΓNMu|,FӷuFG=>;+%ImO{0|(A)f-\V:A*8+č!.JU1g+ (KE"~(k.t=蘑f -̨Һ]Ԯy-\d<;h45+jDa$2|vAeuX3C߲Q z1E銏5zM|4iyEk PQ ̕]=*VSh ƐBlryd6H7*hd+*S°؛ -o oCW`kFk>'s,9ͭ;1_. BTrn WM qQ/QW4 Z6?@ϫh43=#=6lOU~}b -5X1̈́e}fU8Zɱ<9] %A7v $GJ[ 83dOkN9 ĥr5ą1J~je҆QQscJ*'zb8>5o. %\U1N07 x]I{n'?])=7nEA0Q9)+u-s\|f@bұZMjV9`Ubߍ`){q;cn.oZ5Z}:+I~C1܏c2GY`P[# |,GO8ɧ a bv)TɎ]f"N`m#B5Fh߆Y)?/B[[*V3+rP-/1)h;>%ph"R9{060.SlvXlG̏bj"{t)& F4L35jQg"{DY}(F6 "mwaotΠ͢FrT-J#ey-׭vXQC0N]0Hn*.`pT7 =d +&Ȣk} ]e[S01 q=tm0RHgP%$ILl?Q!rP1:/l)1Wvͨvi+*_/8UG)(Ůs^lR܎Ki߰Dm_{W\\@"2BGC(a3b;NzQ~D.Jj@x୧f:%Tg+B7!pi*OE!hPHʔ_.N@{nɬ;la& Gmܐ˪jY,ED2 ݣ!V/([#!BC"\GrXo$ISÁoś0xd3X/0&C3@Sf"{=rCꙺ}%Y1<93Jv)5 7׳o=R/9@lz@RpnK0w?P< ιUIEM?>-Y, /] )6ݱn|UM^i-aVJӿ~=pPeP>}`tgƱTx9+N{\HA6>B$o6t ܗ%$G. K{;Mj 4s?\]? vH%}hUBWge-)4Uy4EMWF &x%~qSO zko7Z ׀"ؖzDxBf80b[`78ln{К C7%P`6\}z8Bh51E[MʮvD1!(|2ƷBoV r٦土|^~D>kZL'f{Q4E) ^;jfUvs.k+u/Ys!$&{'n.6͹ҷ{Wք =pe~E|Da y%lN(f vHF#e, C%}a &~)X{ȍtgӉ,br߀z zE ~U%܊$c1ˇ9>Д3q#lY; P1[ÃHith-!yi {Fs=9z Bia?KH"x ) 5y!|4˞F4avcnkႝxnYpξ`Pf:k`[p":lmm1 a7vS@`y}9ƒBX&hy긫ITmMmF6tlïҒgC,ae|B:ʧN #6@I2[bn9*X$Á ?m*)|Bx(c_\r[D&-M #A-g(3٧}d,6:ލjDϾʟ?r ى0& Qm.X`l܌RƬ{ ߟd;H0 |]!*f̧h{d"mu3nb|q<#{$&m%FT ;O=b܄($ȳ`sir8Fc?fe]7ύsQ3#lÂX?x6ݍ!cnIvE6[LZ8/,a rHOԿ\dB,?X+L)qgHX)2wU28U_a>SGXܿb)B ,yZ ]G1vBS3J2fFASL_ĝ= -м6vJ[ҭ;] ;1|qA橤\%?du6Ϡ9a9"m) RSIᡂR~,)e΃Z頡JGWq J&!aRRyp!)ŗ(;@d}@%p=27xn+U,B0;&4nyp{n kb놶w\\Q $=[N%y޿pC'vB7[S]b&8h,63+0>rZ $ XN60.z̡A)WΣYխ6.#cD8n}}t"]^R]lEy/=bR) a&&8% R3.2ޜ?s9vKt<딒l}#nSn_%HѠGғҹͺAIvWxK id۳AGC(s@it`B4ov'=t{VcR߲W˞S!vvXdp4qHo7ޣu$MӨzUО1.W{{{(#zyӼT~:=*$Q5r|q(Y5%m|7qfr8yYߟ@g/,Ԏ`W8ɹ5t&J xD=O^3ep"]\-Հ!|SxOeW*kCg tgUh1cfLQ+v,h <O*ﺂ5ҏ(U _Nqf[(l?JcS- d!~Le݁*͇t] y"Y+^BN{+8&|;@}Bcs؆T<1&hh OUH-PjWHhAD\S._Ki& E"gOVnP)j=9)2. eBySK]h"N\_Yν!] K/o0O1ْ"θ #>/?|$[A@eT|5A;&%w붱e.Yyʅw&1UE2)6꟝~F?}#cIWpdw hEϤ{'al0_:0G]1O-waչ4(2OrGjH?!f_)#P*Z\{_f10n[ynM|u!w8Jx1n+)d0 ɉo_M~ ctZ"kcxj9׊*ȫ̡8>99Y@oF.I;7nw(֏TlXoj"Tr5i2^xBߎy$T 诮 3}1 e+NXv(K-8Ҳ[#aݫkbQӄ4@`_h" >Gv ;g*-rq,>;<,.mmx$&N}LBQI+6Hv:m+&(/}C~l.?q,߈_SI1X3@Јެy\+9Dՠݦw'JmkABT\<`d5Ɣ3 U9`c u񟈰RO_?R:JhPuΗ%4!{1F5-W{C\t9@@siuNd=(e#9 =Ϣ>D]CC7D5nOfU; aʻ̼+FǛeC+!AR=YQ4BxB?>ĉD`%Z,ğ#><^=Gd?$KlpB J%*P 0YxʨD~x5z'YJZёwYOtsqh$kknb϶(vF6y՟-w=?xD̛F75{|m*a?s> TYk..vQp Q^&X% >[; t~:kQkp-ɫ؏IRG'BL00(Zٜk5 =Ng$C i˘_m*y! &F9 `r)51r?JFb7)r*\LNN/ffUn– c47;R&c]},XMt6 95'UBZ"yf2k`<Febyy|4Ђ޿er_*`)^&9 Bo`=ZO=ت_?{Hx.=;WEYЪml5+DcH٘d2Ơ<cZDWČ,5j k,3(ɠG=# +amA6xCp(MW+Pc2tAW|#҇DSdawHƯn;Aͩm,W_{uD NulZ@UY"hُSq$bz@hW bs*-mLw:_rbT}M^v;CsgU(\7wBkJqi! UyE}D5#"9GUov g-hRWvB$;,*1)_}CUķ1{edA.r7Cʁf:y{áa@h*iQ@k]BiT/ \1proitpl,5Y 2H4݄f7TTS'j+\őP [tb>K>Kn|‰r?H{1o4ӜvxEUW̹,rN,ZJ39s( c¦[u{ڥ<>з w)Y >96̜~JV? l7uKf8hhi8L%3a:JY_kajntF*$%Qi9vP(e8o~$5L"˵@Pj?-mj4Oxz}3۽kKK|NE޾z qH,7ϒ[8A$S c U_ؓo VWeRmSD^%UBQ0qz=(! -fJt%qsqSv('P3Bj.'BruX-bxcCJG{A~RDF Mqv5ArXF5wǺ8&\ܙQۢr\<2SC'r"HCe2hQFЅ0֕|xsHZra,+Əl<K!(E>{<}5uC./,#,n nRg6; I!lH*y^+\V{F*MS4?Jv{R|F&c%|0#hοݤu*w/ԛC5jAM9+Ơ: SeC=S"46X{ @ă5k`Qb+9$qƦ IqQC8dh4d{4N+ێT_.*1&RsP 2pAԟ71v [H\ʋ;xdjVLˊ6JH7fTV@ W@ 11wsκ:y߿9K)*;/QNè6bRdI'hJ鬰6DawÉ&#xjp:Vq$ME|mE&;;ҫwHBLQU4OʚXp܅ExYcl~EOVkd'%W/yd<mR˿oR(bh7Uur HmfU9TXuqdlRa\BCؐޯ.h ^³8t&-6b.δ7%kGWM WXɿ9rXFJnp>#4 oOlBkG@W,ҩf!Ҙ^AFSms5Ӣkgy?H,JUD{;`9HՓʸjnE:`o'bu^Wvn {MCP ^guH| qOfT_W< }p7-U{QoD ᡼t\Qvɋ2UD}ty@:Jh#uECP<%0ҘvQl<Puo d<Y]ePݚ'd^P9Ĩ yQq|mnŨo,[$̓6t;q{Uc索+`vU #_s,wxA7t@Elg8 <ǘ%+w'B+Y<sl7 n39@>{M192nqU43\|P .,QQByTyS^'ߊ^_cJ=vs^ڤsM"bo)4Ѻ8L/( )̶ /@ dTDCv =i":7Ey)$AO<u/.z㏛Qo˯qBnv3rٿ*JN+`i_#s 1L(:B']1n?Ly!_rKBh3^C;{҆o< o]4hb&n17]T~ӦΧ/)J! )a $~>NS'`ot-Ȇħq殾C>I@{ʃM Z6b 6usgk^PL}CA>PېU gV*HBYŢ]Y^ :Yd&>hRx8Y@IA龍EJ۔2GR6Y;Y5_D2 )-Ć"nW67HH_T^yb'|ʼnA+{5Xbz#4Y md8V|Ct ЏU [ϋ.;"% 5'=}7C>_{ܻ\OO]ğ6@A~nPڨW'ªyW,z!Rsҳ:BĈผA@KBrZm [0ߌ@jqyreqK"RRBKk6ܫ!(jWUذr U(ͬ"3+iqߢB= VUM.@*`!P%ZS콪 k|"!6kGtx_ hy8N5Ѐs+XEDAJ;!eF૴ 8~Sj\HN&Q2X>r@1yE*R ~x/f!ZjyJß_@#OeqsyB8ؓtYTSNPSb^$ BC:̾~rM̬>IgP }H$U_@SUGy:h|&߀&[Hp)ѥT{H8x'ɶ"| iz-_N(,E8f'sr ejxr=v)tg ]A)HAnl J)$K}PHoQZdLYV|1sCBdxOY2O/xu7첒37} G.&91!J_];ӴAV"QTUGW4i_z]w?a3*L_Y@m$/*-&^3:HRSSG YP*%@˸idStƒӏR3bN: Rh\cL [y!"Z*EԻ[[ e"y.bh cFάZIeP!SRE?K6f$y.YiuR=#h6\ m?L!KGL"~X߅VPGl3/ѺWfd1dI=2iPA-/k䘃4#.,멵9I2щRliYn6sUY/J?n`gewD;'foCIY#Tc \ZAxABD3)SьAa#8J'6bE4?=6 BBN:&k|` }/cL㨼1S1Z ՕpsȃB?|ηFј/F ׁMgtUjM)+!lXSbc“Eې{GdsYbKJ_R6 rprc=G vXDvlL@hu=!}Ҧ,{GGw(\2WuZ Tq'^'t[X Q/Q_龻gG Μ@i{o7fE!"Z|cheڠ2HK ya{mozċ|u;}U"@l>kC;yO>([dԔT_<se_5\415'nF\˪7N%#E}BK~" Ӯc_)6mPp2̆>~x ixF[Oe3 !G B'ηFY} \qS*~<}L>!`-2nɦtYra,r] 2+5P#DY a!Cr35~-Ӏ AS3H} ]c.-M vֽP :K <pxjB< Cj2s}0"0,~}? P(?dtCkcܜzJ$C QEbY'|-IzޏMnt: 6k]};!^v@k?$5D@{bHIr KQw#SN/)Ke"y+ENs'-IƋ59Is_Зt, oGbѺ_׀HBfUw=D?q';OWړ::1~TCPRDh/Ʌإ~R.Qڶ{d|.V2&PE4Aa!] E EA+ƮWA,Gxe8Z/y 0Ls!縘^bU]\I$AS߉8nR `3<\Cc~+~C3V lƥMШ˕Fxy-gI7CWX]wfoA2]dEU˂^ay`dc?Jynپ~LJwR5 'L+U+_ 4.RڌF$HC'7Ooܞ7b6d'h峸 C/#h P5ނE'E5ҡ5\znsY>'كZEK>oa{xiMxe3+aH۲Ei@X/OH@ƒUk-7:#Diʐ1^PP}c8X}PТ-.M۔w p$7 H]tyb9ԅ2QWRxBo|6I}"n*Ew*0UلQoҜtU=B9g)̛֥k:vOs!O ؏,ħaB.}r~"o0K˞2i ' rङP0)Vvo``vP4ɿK_- oL~3垸y̑ SEڪ3W ˚9I+}-ưߕ_Y4u̇^(@ Oz߼KӤN /[:ܽ BH9p3| Ea7lvin9PyOPQ^p{<@$|DuWXF _.3 7 >Tm]žT{' -3-Z> Sq@e21Y{~c6h7+ߏ^!Sm SJtTަ+͌|@MŌ'=!_ pTzfOTЁ߁Oߑl\-3! FWuY=*PM!?R-HO<"[ȃ@h^qyH+ǩi}IZ MWFPz)%Zϓ(NlkMI+l=F:nKh9x nl7k:Eۨ^hٶ<6tW|\ J[ x*M!!nB'J1Svgj1vRX\k@߿)1+ {|؟o hCP\)2oGfXչ&nYkA%;잱xyg]i$PJ2b벚Q@"@xE Fa Y5VRrSyߎ6%C̀p 5 KÍ&P)$kf;%lӸW-|/v> ej$x8mA+GX s2sP4&({9n}s<.;W\>G-hb4g.iJxwe}%8_ǭ =9st4m62o N-$q̄=oQ,_ރQ5"D,Uo E R}+$#CTCz (O\݄By- k\zSoݜ; t|p=%6&yǦ*Z$yNA=QGRG}9%6YfH4`-N[u,V{Z"HuQBgoħN?TXFcƩW%++Db=oÊ6'hk,g:AQ;ίiN BX+0&?>DFDD6UXDO=0›&EV/vd,d02d˩1Ø]73]b1 FؤFTGIh77_џ[oS(DhĄ&&R Y BZ)6f uq0hh_7;w14Vj <ţvDF||Ml{Ι,-}Vhb"x7[y;9~!>6 3#ܞROAlKE9xn,]HdřQUq82bf?@Ӄ*Kҹ鱄).,ѧ_JGޏDHỶSq~2ayE%6UkW4 `z7hds1 d#Iq5 $خl4lj8nOD0݂Vtc;~KLq]Ke'qfC.Ms @<:M0nQ4cUlkEdsn6)#M>*qe-unQ{𤌙ꔧ5DmloW>N階0qϫ8pWH5Α' &Jڭk<Eոwkˆ~J{Qkdv:8 *Ǡ&F5e)ha'R^ rXvSy<hE # @< _ɥ(qPzXȜ%N<%6?+6V~|J]LsCH+IkI.5-P;y䇔f/٘/ f=0R71KD_ɬ]'?_xq({ KHc $cAeyjsaZ3v~z:W~oH/JPcx6L˥;J#wU@ W6>H˪a{["%.8ZP[h$>"P\bBrs&g{՞O>}EAc5H/Xާu!wfݣ lgﶛ8~#z8Q|-Z7%1+)|cNWӓʈ7Qw&]0h""+޼cƯʝkP꼸c&w!Hl9vX4F p:s@qM~KgX-nF-d# V[bi!7wK/zbڹ22!8YlcRe7!řJ5rfA#eų&>}3?m)F;W*l&߀4mSjߚtf)T؊ea[jUޥ(ٹJYVtZ Al_a xh#I] o8갺;[EnU<CŘ ,n)ζ/x=i} C3lq#>,ϳp3?dس7MuE]@ Ј*ށ,٥kFa%<_VQ!Dc iͰq gR<\K28{P YVG,E9З[m%AK )h OG+T v[eW& ѹ[ؐ-ձ o"qN 畛#k!5#!`7wweTgbTI!i< yD%fA@|G'aȶ zQ02lTE硭BEMI-o=`Ïm׼*$gSgZK( \yKIZ*n?D*M(w+'X) ^cPcr2̨k'.N."LV ]Fw8V)*ĝ ڙ0Ew~-nK}2GD!iԑ8 Cz*"|GNYL"4.ѣbam 1T%ENc^TLIB=ή1|kR0qP1٧z)GϿW4aU8\y^ j?=ԋ; #DR|O~i.)h:$-yA**d{ \:GT'%"HY@D=mE#OBk2_Q[S Au)>_|y0'*C֙reL29ĞN՗{ĨlTiZuZ*/u[J .;Tؠ`r|" Sc±Z*XKN_7ܠv!LD?: WLNbUمj7z+$4!4!4~ WsƏ`X?UU`7}{OZrWN5VEI,sYD+ Y= {՟fV7^zXiЋco$7yr0Kқ ; ez_Q*,-R3of?Xtav@=Dj0v9/G~TB&wHZJ`jxQԆm!Y'EV+=.~8o "V[$3WsI~)XPA:+F}آq.yR~o:w0~0pЀcK۲M _͎$w `mvle7Cѷ/zkP^s*v.Itg/Ϗu# +Ґ0eCBgu$ GU邁>\nA+gxI`&r8t,NQD_>F|`7 < )6LNjqy[_=|E$ڼQ%` Ygъ;|F…"!>8f\ؔW(ʥ\3oD.<^k^A`"u|JV|{vٟC[7?nJo77Ib.CdV޺bx7?T!Z`]c#@諮. yG0 i^5UP©Ζ61Ӣ ^mJٕ"N{LDsZǰGdxbRC!Jn\DŽYx]pQ5*L7un7[pqx@90$bD`~3RkG -P :(gadtcbDʉ/έ ݡ@=y_-[!ggu$4BNOm_I}=S!"_I-:NG M6`zxzm2Ks{I`:_ "DYn}p%1?x)DŽ1.T\s{yn!u$D%-`RsMVؕTNZVefN/(&{YkaN_fo/ 5F&u-FC3Io\BT=cOa pLfʰLZktnqJ"<ŃrdBʗ=VЙ9eHzɠ -+) nJ'L7V55W&J1_-ԡ|ōͶĉëxc`GEIVL`@8n\*մI%9px"ZrF?S5\6$wҴ5u-BǞYErd=:wwPzT"n:,ĭqқv4BLIGxs;x}g:u F1y{ ζ! !_νU5]~WӮ =A w^}"(Vk4."qnwfga*lV%$IG6UZ!M41zb|臭XE$jTYG+48. _.5SOjޅBj{6Z9a^>>. T*Vmys Qh{OTl<"`]S` UJ4d||:n ;YT1kZ-.rk{ wV7t8yaf\2464bC(xb2 Mf:OHyKFrבLY-Kz8.HF!A=b]uTH]BKrmJ] ,S9VzX4 H6e ,GH1I3oxðu<66 p4l~`YXz[4;OAan"ڋsl Itۖ[ي,'2L7V܂>tǽEG-uw F:$3Ă&χ/fsok ?=E:Ҙ4L>+91Y䁒)x73DKA) | {^z=l"pĴ}z>|ۗbm9id9:??-HCuH4,?T<\\*jץ zIȑKQa^H Ӻ k s1UV ͨ[^u^*o8dG LX±i2Vbs Ksۆ› hBՁ(*~7:(왊dLیt/@~~/@+ޜpD4 #(g>< {1_$Hx#jſu B `bmo瘓t/hJ uGrՑ)ݤ8$;ơ$̡SyϓI A_# 49qM"ݨ×Q eL$Ⱥo;'#S 3CW*1"/ClsHu(Ӕ3= `V@N_4Ý>P5Szv,o5 2Pޑ^^"`@ߐV|@4f7OH]}W-pJL Zj3?ظö`MK2 jaMoOآ&n^dP Y?J-V!qou@Nug{:E4mdXSRAM.KsRV/o f|Ec sfxZSH/Fi+~b|˰xh]DҺgM}_d<o;Dh ,v , kVna2rjp2bI!EN ɂb뾉B& Wu?TiA0Jrc۝g!"TWh!Bk\t&($է#K:{(XW+i{J1EaDC:NdV/kMnYBmqZ5`M;M#\+|RE`ZQlNLF=(XqGϿ-UO)_dFpMj_y3j/gߚgP?o܈#WLy饴+%yOrѯw%Ab#VpQ]?'P|g74R!x4l5 #d0-,KM}'Y= 9v2=w^{14iBl.CQusC Mq1#ǫ| \:M{aaUj6->}_k,hR8Y*I \ݜ̶0meeѲ "sx2=wW Fs*av d . 9xF,ҒڅΒ, +lZBxZ>yC .h 5S GPܮgp ^%$^E̱[]a݇f͕-| z/Pyc?T1@9vdc)aj,t3ҩA0M1 *O 1rX[XXM<^ pfs#-&Tkc)WY"猩@Z? 2.qw_rW:b Ij,Se1tQ"^މ7}P CKN'+[ `/zUM|)H{L,,_R9$DHm3LܪrR L^Hk@"5 L~F d"U-)/nSk3GB#C#L~GuY4p9u]btl%m%MSz'ܝ9@3\wXdsɍUoT} AV!m $tA줢grT2s9¬A(GS7lTT5kQs p7^n^97~f^vpgAzL#GNAW%E͈8N1.?4C1ύt.ЬzlwPRjKj(xZ5*{V Hf!P 4F%[\5"ơTZ5w0r'^FYNcsR#+YUخ5OPDCw " O ecQ Ukف#:躒;vA3+g@km2%)E6)GT+[/d'&Z f#T;?Z;?پI?|w*{L|qZpqǞ)q}} hJ:(U\]˿bn:,[@כ[Zʌ E{W 'hk9_WtGa>#!`V%O1psn[ /2v%I(ߢyE҇-,vηn%3n2@KxK^-ou@U1NZt'2A[XWOHш:``q bwcAeX5^8 WKEOLEq [*Ycbny)ܦD|g/3jW 8:K\6Nyig|F9[^NRBk[LiF5{ hPUU GX~h:څ `ؖ3Io'/#a/3S'H5ˊnw3` :-@2#(Υ+u8)J):Lj7!c FMǂИP\C JlXZ7rN'c=ۖCr9aVm3ZÙQ6xj͐+PVDMV[MMC_lsF::TNѭ c!5z<_on>)~rT?J_߷_pd`KGPeul@z XC}oT:" ,G g\ z VN//;.%,4RB[U}ȑ6 lKc2!mO"s.*Ap㒴~G 4mJ0,/==Ui.~C+:4·"1o[f0IN%$Ak?ĽtC R"[PmҖ^8I<(ך[@)^q,",;Y_ӑ@A'=+:\<`Sb[CH5f"ſlـÉq9 Eo#eEoj7)`E!&+0)=E" r&mE0p{f$сpnA#%}g8D pC)a >ǩ䶠riퟌjT8,Ĥt~[ࢿ|8Oypy*c4=s+3SW]R7oZWYJjMV= 2UK̡MV1{M) z r-GBSR8#B+A4#he ?mp#F&bjشOhľ I&Vu&"?Qzyi)nbm(v8`JD dE$if|2j:VQ.n ]L2U/^[m qfOPBo?\T~9D' OR71s(FZ*](Nk*n},n6jO6/YfĆ j@@L"&U7j+A%ـ+9 .捻AD&\1qN p@Op<"2 O6 > LO [e]ܕĜ";K?xї3v\$TJW%"ZFd<كC5KړQN; 䓹2GV-V'g_=#KV@LLH,IMVP%ȇã `]lhwʬC~iN.!LhNVkzUKc,M_f]0k~S>}[\vK|oOklV~T` KL@"Vhxz9J^'S XIP;8$=3Ȩ-3CGEq[c‹YRXW\ͩ[&SOz6,Ȫ!kAcGVC:#̀Tѕr^{ '%k*k{8zPo u%%`v0 ]&JhtbQ&`<׿$dLB84gxqqNփbi!eܮX~),dy@-5Mu:A2.?'53aji'l -3wVtE\>-X[шITDd?Zw4@7uA::SZRߠ2sgڼIZSYw/G:ݢ|@jщvitb&8vtso<)` 5dZɻ;X֝ѧ͖ |dl_pߣW乑KrKwoG6et,sم5ҵ03>~HϪGJ+0:in{b% e5H=Ą r'~V[5BaȪ{xĭSJ|G;'enau^ة< =Jz.He}ٸ&-ql'(8?yW?j\h빊VT`(dpSTڸbB]M@' E :мtd\kDdcQM'iɛ2GGS;8+U BB&sj|%Yfh_H.1j^|*ILhF_#2>:ɸ;k@$׬L/; "͜ꖜ!hZ&K>?b=*%q!5E@wV2("oixXKM9 c62DmliBZ{;8Hl(W"dZ?vWK/VK[l+Vmu`-eT(_NK,P/zD5^EP>eusM!J?s0v8:A*BVCSlNI mǂBo5RZ62 +S)z魫8hA`G};A B5HUMH0$'Z"fW!$OהCC~eVikXkQ:Y;U|W2On-[Wi./Naz.8&v`Gĉz9_6\͚:CqxnFe# YAi5#QWƚ}HB%(E$*w: VjJ|C)XCe$쬊ToUH͏Η ֢T Cvj:Q3YdJ@ LJhjC/iWw65)|T(e짆ϑGן .)Pܵ=|Ti|;_ /=?SsAKr}`|o1,1j?(pqNgMR ȖƆY#1GRx=p{p[vPmnL2=:vaiKCѵû3ʓs'yt0)eVBV}8tE97Y.-Ь*SIȟ1Pwym0Wx :DH*NQk`SB{82 C,# ]% 0dUܤ,IJ *]Vz% 򾲺f-=v׷cQGݚS#Q6-8^%lYጱ=SQ<]veMω s蘹w3Dȷ* &o'xkç J̈N߷-aP֒oI9e܋z +`(Ί@]pAڣ?zdؐoNdT`ǧ0sМ;vrĆ3~+%RU{^U一 ZJofYV6/¢XP H-5["2~y =1ZC93fˆoALr63J*ΊUdZFo3@0}Gɍ+8R: p6fEV0Trwh V c Auk:|ȂDCv|n͂i Xj5b˄6.zOIk`ZĀ8禞nfs_}u ,zOIh=%wO=3 %p%p8Cen 8+zF=nȑ]RTĜX^.i?yB6ʵUVݯ*VpHu0 OT '3XpPϢ\WdUa2BLFd z࿌]T'J(c49+x8b;6ɌqA}dˆʇt,rƸv;=KdT$) ᙍG;mYDREї5O O%Ő=)LZ}XL YT{܌-p^M'CfvĨߧ]w<@R0LcU|96}{? `|_ :,1rR?-XsSnֽZW q׳YH[KZ]g:oL6g9֒/ӪR@$y&SP\;Up (X?w+%~. jm(b.kꔝO1(Z?!X}Mi䮝W9{ݰ4,\@p8ŰolU;r"WQbcRx;|r1)K;_tJTMb ܣM[26K 8AQH~GYB_[h?LX^̦{'I>Զ$7\7g^j.jڊ1"y*hATh!D@T`d~cA'WrbA16!L\kzU:!Tq$乩t%L.@.bÖ,Cػ%xy:\!o{ bfH7^H|I=JAҘi%LfY9;J/~vptjL4|ݾP@;-Gt1{NWH1`VR쩾 q2'z&o$$]UOINDW2p"{[tQ<8ZSI*<]0mI xl9.S{HG4d;$WɎo`_Vn yh}BtBgۆEV"ׁ;]q[7NXo +ZlP]Np0Շsv>cAyw,ӯ;+*W]cp_\@# %p vt4\== ͣDYqAk * \ƹ';;֛¨!!UIR< Nϑ2t_ikO2(ξǁ\Nldh0,QI__2 <WmFG~2JN0 }AÞZe"[4 Էi6)U 0;I5q͜VzBǷw]BCrgx;dO0V&Ȝ=FT1ڄ?eEX㘈lT1ͤc1 2U-d{$9y՜AAXt֋UZ5*T n}I9i3g~DRԄTMMDkTW; tf 8eu9w:4YBg\Mӝ !Ty_8j9o9by7H.Ak3Ox-_%Ȩ=t׆J=U5 4V1Kwbcq#k)3P®2n_ ]q@5FBlW0cwk5m&o5nfiY:^0\l4δ*I:0(;)5o/, fK!{r 肧6f;UDyG}6X+yݲc<ϞnI&1HBms1K4`M(g'F˒ٚ76݃bx='|1eU}jrS-;v6P wCȮ>.ofaޓjoik%F)[$̞%5֚wVMNiƏR55޳˂cRĭZ8T)L$C_mR#g8[Xi#O\AYgNnCCXc9 [_w{!Bk'\J|DTHd &[0ڣ D?yѫt= DQBCJrW-C Ks&a^G9p7B%,C>O22,@8+1L\A7veW`QsDZAZ¨"ZGYnQMߡK ]jRckjwIcwpʽW.7vi<1*mˊ s8j1vSX#5Hq -udGU Ru#cM֊DL5څ _3#[|kp7 ٖ` w]q }Y!8;"QCgrF6B 009h* qݓq 8!xᜲ$KAon }`le,fZ"heG_*] %u _F>/d9/6o3  yǼ9@''mmG}}SWZVhZ'mZ8 Ԝg *cl!+·3H~q"}LZDLh)1(R;W֊' Iճ_͈%y[MN&}Y_f璏v u (wZY_VJLIV4L/jF@]~~k|}ӌ/Bo2w U298 v0hߝ0 5sPCA@gq\;V51Pc(}eڛ2: &vf$،d2$,F8kjTqP>`RDV+hZil๲ Fb8_= e'?ݳoA\DI>0V THS1z5?n k슫O;gT/cݱUUM| Ù:A vjCYŭc5۴)3Kxs%_s{9GE~WI,r2WeJGTrMؕOc\tz}Y0xi+e*_b99Oc#tTpVǒSG'A6 kgl[\I Cqşʌmr_^#^Ag'yBW52xXY$jB 7M>z;*8w+ޣ7i?a-4E}q, f~!#tlu# +{uJ0Qsh)^5?D.eG?T GY̬h7+5:wyԡ$h[,eex {geHK5cd;JMqV=+>п~/ͱ,&4/RT9u|oz?&O95: w+ň cQV-c.0dz \A(2Ac)!h^OYϧ|U Dd0 ؂iG@S -^4AYU?0+e 12СT+%/f|?g#6 (/ ;{^%@ԱvWՍ6C ւ 51Υ؈6vWv&3یi_a{{i˦ew-jV5p {Gu~s":]e²Rc(%1L=zɱ\lB-#D5W^#֍,{B&L=AL @D QK)Pqa6w>O;y!%X.Z&vř GZzcv 꿻z8ޭ2kpS g,Sl*#\D~э.W8Β4h'<p/~Ak P '{ꭷP,W+]nwF@'Y?O:2>y" Nj["ktPf5;ScĪ:ZsDZ69>n{şi>uZfAg8Is)dE=pc=|}z$V[ęٚUg]vHnס3w0,&%u"q%#ՅJb Y6sC}E7v1s KGOl7`ntIYp$GpؿLJԢo3X6FqZZS=|/HB|GF/CjAń %Zwlhm;kOW3W،IKm.=nMKbI1B9>%KXGBؿ^^pH] n]l;O׉X$; ̛y͔A̡~j%jqg(l#5D:c L< e7 gxK{Vi/B%1$5{SDvQ Lc_b_B@L>!'4߻ xY|=Ғe:Q:&?2]lǕ>qsNȭuk&$io6Nr+l`ÑzJ}?CMj'75];v0rlm5Y"u7?N5OͲHmxN(T7]%ւBv;6ƅ(Jv.C_wW2١˭x LBw[:笵YcT|zR+&3&bpuybP(g0ښoMaB]Vߠ>M{9[B3s]/ g6hSM6lb&hki~'V^oiOHf^őuz .h܏e vyC4W1NR>ȿćإ ssSuv`l-@t0'KaCN2c@:"g`1Q@ђbx<zD ݈McF(:}п`ЪwU^l&eO]H3=\{V T*xGS` Ua1K>7,DpbSȝHJOYrLn'TͲUg`Bem]ibw1&t q2? h;_O|?m{P4Ǧ>ׅ} g,+zDQ*)/N7,.W_8ɶ.YH<*2w 3I=$`cv2<_8U3zF_@w=P*#$~= Mj,KuI.>rџ<Ȕg}4U'GCO/oAHviP<Xd% ڲ Ln,f*6A wzE}tҺ23:Liot13J>0G f\L Ճ t;MMxn?_6'D_N(B(Na h3?Ϫ6Nr]62 },DwS(t'9BU0_ـ*ʳRwjz]~,yQ>brYbðr\%tZgX"kf_G SmY"t>*]YwXZږAv (d3ߜ#i\ qvCYps~0- \Qu: a)&Dv`}:&) P}:Psɾ" abLtP_lC,%$tɞ*شNq#EJ- A]߈Hwe5<-bZ*/Th,MXD|tr ?u|DArQx*T%'|VE'T?JJ8zi̬uȢf7q_1r5x9GlVi?z;].eԼIHؘSI; %elW/(}vV-Atx$[ɳy av3 ;d#R1>Um+/1V7:j0Pak|/  Pe{"9lX\cg7e6|4f\M0,GXҔ-a, "DzfG'aPQ)IRN)"  ܅20$a "kclV,ι[D#]DrYCThRZV` ҤbUֈieчYёK)!Nec| EYz#ύo"KNmJˣUswÖ0l>5$Edfjr\сft@Hz5Zh2wĜB/#kR d Dⓨî*IudiiaFv"/ۚMp⮫'Kwv5<bܬeh0תx({-2)KDާR?^"%׏>7!4J"N*2 Poa2YE"6ձ8L`y)KDr˸ 6a#U|FuI\l0? $hvʳ^kjP [k|~=|_P'-. *<¿;E3eG'Ć[\jCaju  FE?Ŀ3 %qш(gP8^j(|vEt,OΧjl4 (Х7GnȎ@92FZC\gEE[' p +m=q%O^?RDNU}#ĆκMĐ4hNv>n)ٝhQyy}VUWo2/Z'Ʃr*N'xP[".cBK:S_HޡT@@* R>/*S7OH^u4J4/$%NS)SIzŽ!4y^GWKpI0'#[Rz-.CFՃj '}9?*C.\5dkE ?w:*Nj&(dz!ADSꈞH~ kן7 OiG 6^Nb\.z]ʻ)>v_X"?`(q uR+{Ow(@'{D)`E/2W,<̈BY \N8**ĥ)oSeh2V1¦fx[Dֻ|jer%)89sUbcCΒU/$+S-'dt|3xr x5B_E¶gJY)˱S2_a_Υg"%tJNo/ zd; $łF!PW̫RZS.K 8hulz±Gc.k3=ޝ{uï-~֖峡6[z  b"JOnU&XR11J6 p-Die.|:ei#ᴩ2mQURXڒ{)̱Qaœ+"n_wp RҤ(j_׃62hb+;}ZI ZOm>J, դ߱nyF&rSn-v s Į%'hWIMN{(}HreKmRMhF~󲶱zCda`"1tYD#Y;2K,<8JٓG'Q}K&UPƜM*\ Q4k< L`MFgZS91!d?!d'%ɀ> lUp:JgJHY Z-飚((AYthİ]eHr[+%C -HKs/\4 )?Z>^cnF<4oF[&Ipvq0thy Ä(W6 f9bec&QTB:xàg|mЖV5g1~ݝƟ{Uζ. S 9\ VwpMg3R1Ib ^yt>TwGG˶w㸑E[oAs:"I|w{oTwE!kZ7x1WǗ>>t&lGp|w&2Ѽ@9l|(IJ-Pvݱ6t"-.uYql5 b?_{OՁ,̔VwJ'>y[U ޹SRdׄS8C_WpIh)fQ@? (xs*E'P@hH9)m<4 T*aemncpP]L|*jݎkyOL=6H+Pbs7tKy_=0zzM /b9'90Wpj K;FT/!UMIx\`SjUs,וlx0J_Nu7ܨ6A+y.^_2D'x>Ͽc"܋Bh2m2 4uz_J6{9oe&ՂБ[,b X.bzWFI ij!%X+RPӫ5(Iek}^Xv,~[kADU $nZq>e#R!(4z;F^Buϛ㥾U !4`QF\2xܡsVu!S̈!v ,}LW K eLIM("R_rGP8ƪDv uQ|gH-gybb60tJ }롯e.8 j>O9!Y_HDIƋ dh9=OgxCS-JhWQnPb:tLV]7m"!MV d\`w:SڈV^S_]fq=Ŗ/tbQB.EK=!!+FeŦ֘h o<yRInA*'>60yTzb8o]Ûɕ]$gd!#K43xJb08 ҕpF3hɞ̟q >JR"DaBZbZ )i(\t+1x )m BK-Cڳ gGgh &΁]wn$sˎ#Jwo կpn0Y=Q}_* u4+ތ= ZŰK^*%&fG E)! }&i `rSdd~J`vmm z`W)#sA}0/ѻ=Fc;];;.G"걪CAwN߆&lIJ3= TO<&q*x{ /I1^Lr84ɟoBFkBn:xXd櫕7Np'0eCN}ؒUB $%Bbɬ|[ViyUݱAgu_YJܞ+łgɌ!Ci3dw#"@nEቶ *x^>:X[8+Xt\ϡBˁ P\*kSNC>g<%R>hYo",36ɍp؇}lG(l) 'ZK7o80@x Osvn<h%8IBD@W!4ѾjޖFT#:brq4c\C``ٗ[=|iי"'1.yڎ: };craw cUKYB6מᙜ$3z G1[nO#OT2CK u!kgsFWLM"hR^ӽ'K U(6@֓9$:,< bM/ {<3emx v1TFb ʨ&yɐu~/(R-K`kϪIVP蝠euj؃ڟ1%Щ$Yel͒1[z&Ԣ:F&~Y^Gu`D/-亲3p*d,yh]D=ʲhTQ]Щ  !je LJzAVÌPF;te.Ϭ>ƴv~'}"Z5xhHL$hZ` JvʐVX(@TA %,h*Xi}ut:(+:]&u=M"D~92F0@2JGH~ WNsc 0fܶ/5%E@z-V]_xN;7Xgj?sԜo7f!Gu1%M74VZ{髒r,'&wΦ֯e-[S9@r?GmcF#]3y+_jE u^<ۭ' w88NY9=y;%K$d:glP}T&; 1L /c-.K,+XXz*!vڪև /g 'DU)O85GofA=iHzMX{c!w-H |)["dm`s-fO`Xhsw)wWZ}A3ЃߦOU8Ox^Td=28մp)IqH__&}P@K˵#bXeӏLwdfY&δ2HƼ8"W' 4/݀)סVSdf1lPc<)(١ M1¤{oe'k-#v2 )fz2& (Ҽ Cngr^X-U9lqg8!n'\r{ By~mjUvTM9lId0!(R'c۟=y.1y656oUhpGPK8-OʒSr‹8 SwUDs5j>0!UfIBo<.vRɪ /LgYN,+m#iYU6{yQ_|QS9@c'Ƹ/|O"EV%/āXf#My2]e[hs$qD¢ ![JNƇB:e *oYцʤ }݋j!ZpPDsl⤁&U+pnҴ<56אwIg/s*r~ fޑ͕?|XO>;ZCvL EeSaCe;TXvWEzu˼cgCgiR=U9iQ&nEEd9.4g0VȨ[l-GSY1k{, C2 t+m}|1+rMi XRFx,UNU9&zB*T% !~|O\ZZu':hƘ+hBAٙުl(1/Y5aɿ_QmX$W?f*MogA/s X4c:4, .u!SCFfF=O-ޛ78OVo)?V=,בzc >&ROUF5+EE\3t@ ՌL^0M$@ķ\Yp&fZz@긣qG'Lr q08"j'jp80a}?w&!U><_u*ic=XnOaIMe 7v^ [ 5bŋLD(^tzZ#2JETL0_IQ\ ˎ\J ,PզZ@Gӵ5VqkFt)s:+PRT“< d 4|],.*"x^g*tbż\BlXTiF(h~(wץAC?Va8J|7عN6o*D'SKMHѐ  F:;{GC`!6zuNs,(aqf/1 kX Uq؏sMGG'A qWsiC؃>MDZO%m9Yg(8 S0DBG4l!W"C4Cqg=wsQ8'Ȳ,Cvt%{s\A$c8!IZW95n* d'E 7Aܕ<|`"p\ G, I%}|, ڱ)e%o]cCMgɥCmOL\AWFyz׳mUK,+MR/eٰ#H/}> aON)_/G$ N _~H #T" V>JK3]c ׺qxޡv),i !X}K)D!a%I% 7$gKbR$V6dD6 T[MDZ p4f:aUH*~[5 N] k٥X[]°U =FO6Oj;lƢ+kA%is X03'@)gO:ml/GYSiZgqsF!dYPD<hUʿ I(cgl=l;dDh.NiUk׽uߘHH|lwf P_j}9UnVVSٺ* xW>0jc?(tV3GrUj en)bnUO\R5y ="5< dĉLMMjpۄE.ɺ3>:ntq5xz?۴\77F$ev⍲m^鈰$J 䆼G*6tSB$2C笚ZV7o N.y4LExUɥXF1Vb5qSDq)2,([j7a2|%%,JBOlҝm L(|Jc1ڣeX'5z\}&a݇%ƲGsϫu61 ]797KQuTok!0cףaB@#u YaLbOh=Pց/ Gd!)^2ƬM:ܱ@v.gJ "DNIڹq|h:3 pG !$qi? >$c^|,lUO$딑4aaFᩰm]cu.GOJz ,:l=8l)7n#_ꓪao4{N?s/c L#0*Ef*3S<wf4bji۽G4Wd)̑h IX$*1ʙ#,Pϔ+P}MVF)+lZ`UQ!a}akf4]aMWw@"{#]HӇ\:-B?Rʥjm~;"c QgW3JA|NTzfPNmHߩl.oOcf f^hnjcAm3h鸈/8T\>Fca'6ъ nB]ݓiPSF4Vo0ոW%ݸ#L#ٲنb$_wHl,If@cТ^CPv9&)lۡR淎3~@V`4pY)"K|/,Qߗd:Ēlk}2/ҧ}VvA4`FnN z fKlr}y.f?Tt"M`Lu4 $iG\q~2 }+f$ddxA1 m]-8 NMDf{g4 fbe2 CuՐ=akNz-b֨wQ4'6SH벌ݴ`M 6krZcDOP8w4~Dڇ*HJbPu|1ܨKhVwjPt)_:STOZYy@O C@)e ĂV[yTgP {V 4EnW{ SzS>[ChoIVyTzuTJԐظ F\G0pp^qR&ν"ٯ~rE̹;-%LeYܻŔ.^nF#CaرF® N"!e ?LAFu)fGGAHl3V bO6Sef]ç,ɫ?CG`EYGD}XkٚVf]ӭ`59_/z-r?.+4 %*%2%tKv.qNJM-׫0zXBԿ^{d߱BCӁ 2)>]q0q%xCj&nelвѓPSGUPL//$ ]1NWF nb/~%( @JΝg)7L ?DũՀ*6 +#HK"iCt)+OI!fnXe[:nB!G 33aMSc+`!,Tv_f§7yo(!jO=2 m~&Mn {^j e|ҵӢUG-,edDnAٶJ@7罊/ퟂ#6!9'C{1Ai,3d#¡a_o"h dӱZ.*_{Wy;ujpĻ_qI.qh7~sBO]CUuɱ^Q!rb񻕝h_: ;,&':_v*C$X>jpvzEPO ؾ!j5IK7.yηs4Y_w,q߲SJf>?ܞq,@,qD2Э;eQqx_9ɣ+|4cGxkKuy> U;}ķ$az] xL&dt56vPxYf2MUC".vc+i(*EB J9UYAA 8UH2\,~$QH뗆C|с1VaITe5.g3QSr*O-Ė@.ֿaH2ȭtĦi84CJ&FQޮ0cdWpn,ȯ#/emm6? b1W&cDC9t4ٵS cbi !0mP{jDrX-v2`r ޸d(*ޫ? eN㚹lmuӿЉ{Uq\gK4}: EcM~!k JV,D_u$aB* 8G0b6 uV2 bΕHhɻn2 yI t[͊̕''+z~Y ۡZ(p!Vp5oytl' 6a>pGHy ӂ0"BGu2EeΗ}0s=*>1Xv*+%Rs,Pś)̿' 4uP5& D&Ox%BT,-I;:'^ORqB#Ρ̬eȏNAs B }mP@k 홝8Y"K-_d2%&{l N6&]1t*ZAL5ckGl#%уKA(HQ)wiu D6(/}Cgҁ 0oi%fA(_Ck|\2 OWy @ ='rmq =vQ,lxW@#ɱW VBrˁD1Z=syo[jne or[x! ]DDݨnWG“⅃J"ͽAvձnVs?PiPI_v^Ë`dp`d'Ѳa) YY:{׷[zYe'Up耴X5Fy EJ-8_I;L5(9ϷhiނtYIݦS0?rZ%ĻYH-)O>׾`]gR<^@eO?:u V^0w~[]7JX]d^xǯkN/nAr>Vr"kqP}uHVP7܏l nΨufZ$/+(Unwcz~?N._׈#|N|y!Ɏ'2D (BГSmfg&&xG6תf'ͶТ,;mLݺCˍ#"MN `-jVR' cgn6$ʆ̓hz, ,l%a*unnjW IWB|iOj!4%O[/YfqDItCb-!d8nj ӰyYFٔ|ҘZ<.a*_P@,^1fFovtR<ꎼ5%jBeZT7ubZFg9.`9ۂkُ gS`\Y x7eI,(ł~]-bq8@0HD|I\ӹhtF|D^0\)F&rϚ` 8kFldF)̓y<ٻc#"p&U_ Lqj7_.'['6r[&wc s6kͱ #\+ @L%+*|BsJFYE5|pinJ5PdTXv{0`>( hD ?M>s >~( k>ji=rYXj\ .=zt>; hv~O0z4c' lopKpzff?{n\ >Pf1ҁH@zdA%U9GbE$˖aiV ]hmϻdq(;6bAdpxMw^^Eo*_6B$n!^Jⱽ(|pѮ>yТ\LlPz]AZ$lsHD3 u.aV^p4gOuW 'U%' ZV~"ʨϋNQ dNjy*,oTuUhcO.1Q@GcIE:_Ey_ Dsmİ,>Uġ$90ښwF WM ӿOUB]r +<ְZ|B`S '/e:sdG[8zx=&Y]e  U xr}J#XMGAy X'e6u*,=qsγr0٠eEQ((f[< Z\Z&vοOSGqZ~225J Tg]*"A!DszEڋ<%6؀D()8Hu]#ݵy 6*&P;dVl^)۷OU0M㘛Bɪ,S9-^vA[ !ܱ!8vT8Tq}2P^zQY{Pt6^QLm~ " f4BXKY;0k+\cd0;x]i+5pw\{%_2L=n$y}頯rW\6AZLjqr4/ Rm4Rg@Clkcd.%YHىyJQ ٺ+Z#&Ll  2vAOԧ &(yrpCzxFvZ:΃l^ma᳉K?[ɒ[ti3_p҈ _n*Og8׶y&~A Q񨴨[ZN%eg&2t{E -M:5Xu2@m}…iHgEApز| SH|\޼3yʪ6c*!7WTAySM*&mø&\l)@GgTXj%[ e? duWM܁[U/l0}D.ׂ3 >%"(bWHm.B%} #ez$Y{ !ܨ(St L>!F."SR$~ƼC۱?&]^XF?vs3 _DL}]|ܸ~?M#]ԠO&}4]?f/Q䬽3g23ut:WwegO mDqvR!xt1"߫&̎zSg?~.Vc+*l;.k;u>}$ٽehm'[ 6PQaj4e#YY#դID6lحz{gQ˂OV#kV|  q:F:;.tԙnf֥ECXH]' ~$9`|C5fzX#p L45XGk2h&03X|3v!F A}bB ##fS- )5poB.+rb eh㝪Ć"@g!G$ ;[?P=QOd 5,ԵJ|%C(c.%R!+sSՄF6L*7W%I&plfC*q,Yr\ٰoE4`4ξ,mWnL5f4+G':p1|_= zO$T ~]ft`]nTnf?(nlS@IYq;|`FbGq#1r/Fg 6` byCO%VxHuY?a#+?/ |8uf4B\7ǔβy.RPRkÎe[t Kn&b A+R;wmP K X6kӨ\a"2䄝\ ;tSp&@L A1Fٮ"DNs:Tͱ丆A]ۨΔf0`K||sCω0S'`Z"@CС7 rUZjfFIchbR^]t/UjĴRqV{A4į0%,,0?5D8PK( :(gM'/ڀ|*ȋB} ƤI*a2gp#2cs֘:pwcOZ"(B$Xyܮ=%R>Qr-t.[V:Tl//'$wXtyneErW2Hb晏Bf^+1X^C@an}WQc"M2j< R#:⮳0<޷ʶE(t 2+bK!mJwTۏ(cFWbg'lAfFȾgqzJ0&pM Ft PFuetH+@W@3AD=AwCMFͲ8$ےۧ;}FJYc@HXxHY&N*n2ggN+0"x6E e҆Ss7zlF۴!ȞXvI&]*#X r9a$=6J:^|&0 $>;E !`t7]jޟ;1IAHOsa-sXŠAS_ Drdti:y䊛P,\zD 4ۡSaU !&`rJ˜Y#\uFmŞ_:BkKHm jU 2nt;ucGB#gZ3rZWgBd_ oI.*Xw#*5}nB )R_ɱRP{ԼŊfgTlsI7aLͿ.Jyy$.%k(SwœH UNs,T>WX aWN=vo?átN?0*a^ۗ2oTm-w;KI TxW_}2M輳EQ3C]58g5|2,evSH WRpA@pΜEL^˝s0_H:жUfgv,wӱ"UI|I7=6&"]bg;s|0s;*B3ڝ9b+c)fv6>SxG5U:n­T`3guehjy BL[d8i ^C,opl'zcΌ\ql|GȢ^zZ"3rK-\G`,a ig:-4OxF;_A65E Y"ĤF6Į&W2N]2gPqK6DՓO˩٘CAi,;G @ #Uit4<Ćn9|ǶEǘ(g)^Z75y[z)X{{k@O"n䟮?j"|mO,PP"fв 0KƥM3mEW|cr{N9s &+#(KA4jmCd,ysyQ4ng|p ѭΪ-kVfK5uL"خ?ߖ`Uoit6.-ɫCXfߩ֢XgɄT{@D^;0*';jV]_߇JBVkSv꽘`N<|Rnv7'X( m#zM#Y޻YB_4Hq&шoض|B9 2=e/,v?ʤΪӟ,vYbUHD5p,1D=IJA0Ͱϩ=JlFq3^)~u{MkyDdž櫏09ty3֢C h_xs-.|n@R,?zҀofCr (}Bxsq'~P҃'@e]B'gY{+xU KIX (h+4^;RafEu'Ig%&WxΡ_Ėl$eO荚;l6 ZY!KҎ<61C.49>#(Y+=e3cfE/{fq_,b~l<7#&fp$)dhw V*OΚ0Vٲ-D^rb/Z|Sz'%Ϗjv>(ڹ-&Ux\gXԱ^Xdp +> )U)2R'`H]X@HDԼw]w.EY;"r4g oWp\F? VhXMxqG5BcPI{,_9u'2EU1KAԝlӓ;ٟLuF <; {U6xqnrQGoL a;D_ D.B BBPpV%}L_n_=>IJy-MI!Pg3ks9f^~v֑f&qd='ۏiF%? -5 PL,y/~ÑE9mLYy~Ԙu;Bմ?ɔ؃L @xWHdmX>;B>E*gθn٥?RƆ,DOz47 $6X.Y$nLհ\êƔMp lUY4G'P^@OcFzʁGpv2"f^ a @`*5"t80T"ݝ$C{%HB"/n&f~Io*OnD40Cu3}^x)e ^Y|VB<(Y-! ʫ/& }ja1hL7Y ױKBa&a챔;${2TYCN/j ?53b엾'7Ki4&V}xƾG8rA&j* nA$ '/(zW]upt $9~O}gEY4 ~yn(oO(JȔ_UbNd<V5}q‹,bC֘fb8wQsDSVeZ6b2_)m(v;uӋߕ ~QBe(sh[f:4G .-qZϕ |F [0nc9=b>VcheNHX7a]-md7|(*:// #\PZ|q4Lvo+k8)$ݖe==hW}aovD+(Uci/I߯Hx6Jb-f*RL|bG [ky;хх]灍WC|]6i]|^ 61TٙaBw>#5A >64\^.։/c*,|>Up2ĀIwIH[,TfLD uapZ̸/"X: A_ =B ]*0螶IaZ?sMC9/탧yPl<ф9E?kKr a*)ZL)I<_G.L%)0={u z )Oku W\/o\\y[Dz+EWD,}͑> hFbO>oZ l-y lVOH2/oPoqITpj,}HRU5b \3B2:Ls4QCܗ/J =1Ĭ\GDYupW LG]W?ֹ?EGCޑ)[siW""яCVtUyCajǠ|dQۦ4ܙyobǓGC^,XROcs4|k*]ȴ"5Z|;R+Xs}J.\Gl3R*qn84|J!JRL#ɿdsg̩R_hLN%x%t1WaK ՜&!(o滎9-.\v:ٜS8`+ atpsl#bv#&qxM8.:쒌TGE$S3g9}_6xQcN1TpLyR{Z,}X/|JJPs!92l` Ⓣ9YȧCZTy',/I_VXb6A.LQ{û\|/p=1up\Nc Hvęd̪r1RR|xvWXBb_ _:g0wySh0@[r!)Ȣ/ k KzDxB'(n HRT,u-(g2\‰fdL *,H&_ b}q=W#Q@lCSU\ŵ̅y\oqZLS2jLX iVl/$fH=/XW5Ng8D?B%.1 r'2?qS❰]u?:>(*ifx" &xǓ`+ : 0gu#@/ qa2[yT[|R0ݿS'&,ǦK)*UJ欓d$z#~v]S-}ᦎjuɉܛM@HNBT݇ B-NUk7/U}dV߼.7pbxfVkEKc(*̺||&8N-@D}am>$ pۡz7g)̛I4:/Z gT;bGcr9eX?7 D˥Ut4t 4t>Cg꨹Z*ZK[T]lE(wPΑG#YX FF3n{oaLD }S ^ EX !CmRvww 8 z.Ƌ:=fT<F q)T@q8GT6znoNJcWX_k^/<(:!ц+5f*mt|璶#:QZwN~)?,[%j2+ گz`B© g&LwiW8c3dvW@~?H)B(vjd&afeأ5߫D,nѯii6Kx']^~v\0]+73B1 ŜI^^sV:; [P+o$]]NhajDv͍iIM.zsx\9B` ~H:(/aIJQ'?bwfR{w;_r܋Wu, r9+=zT `/ygz-s$-Rs<#Cf *J r=U&SP2vs/f|@J+h R6_`.;B u.R\ 78l x}P96OiT 6p窱r(mњ[?`}2[{r6ǶYrV䶌]nQ}N!,6nt -1isW@b0mD`#|KoB?L>4lR7RhІC LW|W;?voeR (A*ohc("+_mؽT(jQ}Ȏ|`;2@y`P3gPo[iCK-%N&"85(blFwIrz-`VsZͷ|}9d-ujbZcr^!nNIP+oA",xHئ]۶KW\ڹw \2ZX'Z" gf%1NH9χ:r6׶er:i\aFU\m1/gώmُ$$ mQ¶(9<`@b^Ha%yQ鎲~_p3nJsY'-d( |׃f-ˍQpFa%y]&Ҡ[ J9ʝB5*I}=(\hyRa,t #L UJ,҉稓aӪ"ѡ1%ψB 5q*#Drr1N`vsƐjU^~DW4+I,|x||&`l ŸIt˝Ȳnь]_΋rP|>mA$= #qƞ a!` EFۦk38Z귥-9 C>ԓ#U%+ d):*7 ,$cax_7w_l+EpXw{9Xc^On^h. A/im9LhAkGZJPv;`;w[V&"uh^@Goh_a.MFi4i jG^Z'sz$Khc$qb(,("Hbe uvsg5D|w uexdV&vT*wogwg5(`O&m:?$Ygޓ?6k>ހzmm>d<H?R24Ѫ9 e;oI;?3Wg70+p+xOCqŨzSu3-Ѣug@h#w7ƍPWVS)KW;6KyDۛ?UF`ljd7}=1+j]H{P+R f H- % ?.s}8 wwPPYgGuA7#eXjkqT<̤L>]*XgA.@P;.エK45L\M,餯n%ZuyI+^za)GN׺Ϗno:d7/\ԠPF4"Go-_72ReK6Hjp%7:C{ûh %s{0N~za[>Iw`EKaA(Ya I+j@|ö"ʗ` +Y^ G޾Ϻ C:6H|h$=USeJlI$~ |YC [W(ObW/˗Tlq/`,SrSxS7X˴Ql2!yPPդy:F{ܞkk-BMYRǵH{AGtjؙ67B(ŷPÏݼ㻵m'b֢~c5ݗ|]q]ͼ쌿 isyzA&rHL`~%f|U]?≡AۈT>H ku` s=- ƃ+ШXFWhDݏ;GL*WcJTx,!P"qrVtz-9U#}e 1DC,Hr_s8":BasC_/$k^ALle#+Zn=ZB F!]Z0/6N4[yt>6T\`d PpЛbE+@b!BVfطL<LT95 &߲RVN9)`h6*V!̇^ ߪF^:=!wyh R<k.mJUYYB Hͼ@!\prIw)9y(հ[b]SԑsqrV*OIB}dZJ"'?|gxD CIN*tj !CX]q2(`6mq@E^Bbg SZ4| T[yϕ]>F)l"2ڈt7|DL.%rg TBWW Zvm`5?qo[ac>1`v]cya#VYE8gY3w8ȾUNZ!RCL:)H<z#.5kQ 2ϻig7kT\ u+H5k'&Nk`SF)7z3kԲMCfï ~;msX&.}D|/L(A t<e=2de,dahXUOTZRޭm2GjhP^x"Y V0 Mz΋yhq =3:eAA{ުR^g߰%6Yv_%Iԋ 8+]308Lb[J@Xx*B1!m 6N I5J4>˜sBԘ[S4*}U^/dN~lR*2O3| {g,-.˜dTV^ňPUق*;{i 1 u_=7$k"ř@Q*Ƌ|QbHwR}֟j6X}j Q L+~1oH$;6UӟҾ滳B)\nMOuTP3hEh$ם@"8tTÂR+ 9&t<_$L A[#Fmb`KǛT`S p`~0 Iƞ)?QG݄+Dklmb)Xg={}WY+Ūi3 +Ϛp?ȘN9Em6%X`nBmEG$WaE[pxLa,k{:SuSPf#Ҋ6;)ɧC@A|Tg*8 T5/F?ë/3^_Cwl/ jgj%koljQ:ث* =N0>'= D^nxtyBonD9ktxxVK7/tJLxo7[]Omu\jSu-iiǎaW/]VINa8 Dj砊X!t h9 PS 0S{8$Ao/22T7>Q9r @Z;OM ݓ*gԖrƛ/|seS};M)P;BAfJ9ޖwF& &zvﰥ:zG_j=0 ԹUMԲ?=vX#0JFaZ;% ENX_3˄u<>gKFiJMuaH_'"Oi\[xf4 9&@ 1K4Tz:@͔AWRSk$xn 8~8?fWUZOVPgY:zC`R8P;ե^E1]xy* Pu~ {tڷ舑P}v|zƆCyuu1Y[deC{  cdhi.2@9yc ljydhV%U\d<ˊu^/N:qO=cVUJdT ~FzGo3\OD('gN/Pǒ6&s/FsccRpE!ʍډERЖK<1 x,Y=dorx}2AX)KSM[wqTl V֟8[ȩdrvnG P(}= rqRE0e-1u^~cBØmX+[۔ɢ?@<3f~ү1O}[B J:QUPȨt*/fBg]\!:!eGf2(:]t .0'$pL͏W%uqPr^Y W. ~~ (TP*2Y;4?f'TM= VM.]4H{2I^=ЈL+LS|p ɛEVӌdQkGZ(+Z|H@Fx =!N<_4ΠlGЊ_}8N'TP?SK5A c,3(ʐ ' bR薇mD c/+ iLxi'&<)Z2uX~Mddat{u"u]9d +X.v7qGIPic%#z|O6]6 F}7V1EL( “?0;`MbH'(镂$!GķNHP_4viİV(l/ZjWT6Rp?2a־ؖ Ǯ5j̙Ҳ a^LhvO]%w6r~Q05x?B#FM77BܽIazY8TkrR.6Ғ14Ia1Uc Ao_VmqB ~u-ڢߚFդGdh[50*K~/XG on:QҾv,W0';CFk?Tn>na.D.tH 2)qEt/Խ5>_.nϱ0zQ#9wIPyn/B{YU։;~50xW Dh6QB |YXt|/KCV cZ̊,#Bݔ}-gw$#)m2a,1cl&h,*7A$&M]}C}߅%Q/0fyAQlzQ2^cj*B+Z];#0QV:oX"" no k)&Q M_t^kɑM?Z.-Ot .J*z!|_H: )13LsJ%4rpeإǛ@M3[`bM=M'd( Sgt9"n9ɓsk5^pܿZ^ӃU-bMSلM;beئx%1V%n9k%,v#02~ /PZ4CrIVӷƞdG>n>{ dz1I~PtR 8kLS%9.Z)g(lJAg,@WQk^?~ Z+d:jLwD|sVtʺHJR6{r^K^W7x%BS y.+k*SfZ; a[7t|rf֭i_:MpH#O y.WVDms]sz*{I99A܂I'}'PŽM~|ZJk`2Kt4措֮K3q7$l@dtkgeB<=20+r8aQǠlj@ߒTwŅ QLJḊ0TMr)Sq5`7 2@ 0+84.{M||8LmqGfa^W(kܾŪIW}yY|΍ /p!#0OoӅ34cgC&p\ǬmۊoBr1r@ZT'#n+H0Co !q᣽ (Rh: Z1 YKlY|jQ<^З:ȧ}LUOS8p&7uw*t5>x${n$e ❦Pl8T]}){9-q(C94"pyh.4.P\gaxa~FwUv$I 6>uMt8έJ ^ۻJ2ǐA"O奻&Zb4V`5F7x*22tӿ/Sm<<02ѨPaGHZאD2#o͸6-Qs %Im5{1s3U*8o"qjmf+ĘlC{nP%zx$as ؖQ.NzҘ*\T_Q՚إ(#NRyvM|$jmf÷XJR {@>XpW; nsCJ|}Oa)3.M||tUsBD_$on4;ԡ]!+zv8;B?dKy+:q˸pL;τObn,lȽUDzy08_%±r.mw߷I0sVi 1î:w4/!0:?>4DEZ"k蔄4@5f7(2jn_9 .-qq#?຅~_5?6h>b1I<$z}j"mx ֆ2XNYv7h 6I1q;wH.($$S/25]u,kػg*?k՘H,Bx"88wR3㖪 !=SH /2 q<ʀ#F`)گF}ޠX9_d2u.d8!3hb#\5Pa3d_qpKBEe5wxy"Y,ĕP3uN6ݱ8HHxSȗhŠyz ?%`ji@~PmҋXɀ8V?رuvpKbCSrF\$ 1*n!fCcə~HH?NFڂzHW,wыJёTAcQ\dMN5mdLFR4&t{Β4Cj x_qЀ"V4IuVDSbDڥcͱ[K8Q֓Ro7⣧?\t./YQD0Pp#Ám -tf,o!+Q ϡI s՚~0!)X7eLޖYB@/!zbeV*:F:__1{2Qu+ 1jyk0VSe(C[z paZ-cý - KLS{Vn|ˡaw4ɂ]Z,lҎWsbSKn¯恵i 剨}^~ G)/gY8ծb Zo(rx}k=kF&{w7'HJb4Ve`x&2$8s8Sa8#%ŭl9zw$j +]ϔ \N,]~䀦-j tTexi꟥0 oQDrڕtK'L3:#c_arJl)k [Ox(#=?"Zce20!L I3Q0Ji*FO"~;0 ތY#\,2#޿ I\υ2}uL]*X - It$C1B edbŏTgAMM6M<@f>x+$'V\Ϙ/V=mUpa f= 8ڢ4sWzl^2N#I wy$ŸROQ`ِcw]q ֆe?Hϒ\\M}Lh@{G0 5iX/smGXfacQ267I+OY 1 ƒ,q5ݜ4Lר>au2Zc9g$WK8' 3>z&nL|΍ H0ܛLpL SպCt5}F+R*A%ܽlP4 iPu\H>P&@?b2I?$` Uyyg5b_J6k3ɘAbmL&{6q(DS1[-i9_lm Ek]?s>]Rlc{C;kK/.qF7VvzڦL5󽫣X=ԐuSSig7ׄ$a3 O)ALiZ٠LdiTR}JqvJ\<6[ؼ4` dS ixj*/n^ 7Ƕ$yX@7vupR/k;/ nBO~nQV(zd7 ʵ%$2Φ.}6 |/__Z`7l͟bPцi܁E@)DY{zfXSo~EQk5kV8Oxף84 {vzPN>I, 0l|82HA2#nP=%8wy͆]l3Р! D;j0 ו>Wr ~ z(;'ǺYz\_n,߀"_@`K# R\":GCCe|ȦQGӖ^31ӌ3jS+_*ÑM{1:^׌4E~Trb$E܈pͯdB'vx+"S û;,JNk3O7co\\`n4p"ㇷq!7׵![HJ"#O=hA,S< @(VA-3xeh^:KGz6}由mH1icykfFL2t)eh88UXt=V:@`V߄<-$YlI&㬏|YSp6ew*#F{OKt#)r(b' 6' S۾6ȽtMTQfͤ"sPdy94-!Ȱ&y]$.n~5TQRXk'VdNGgҕ H X ְ͖- (az Xy\Nm,Q&Z͔[6}{4Y?:dVFpB-ͼQ4;oCthOxT5Cdp=)eOi]I`Ըo;EyS38V;CYa而nUje*v mLlƽDpLD^%9X=w⼯6˖Yξ 2,>խ0G' -WRJ - ا3'V3z8즮1c9j 9÷r3EA4 Q$C-Nbzs~xQ"7 J+#u_ Ab9I|KR?.UE`_#w` jT#vh.QXT_"'E18ƼȥV˄c:nKh%AXp)l"D\Ze~ҼDgOјSġfSh8-3ЄjǷDy[Ty`TrT]-- Y LOʰ+_Tloͱ\+qAF512\ɍ4O;OfL\m JNywo:ӽQ@b@ݙ8ݎ:UGBΖ ,c(e 2/ n2rNR+1P0ii/(M0Xc_LHUʁҜזANn%$)ZcPoh XəX V%<żo@ܡ8MbjY|n+@TL@<mGǪ[+pyEMK>%,x'&EQ[,r'E9'EQ'ZP,M`tv}]5ЛDBOV&:K:Dݷl~=} > u,q:vj[GHWYŭޏ,l ';:˿*Œls!FgK|`}H"V=ɠ԰h'%7ҟ5ax%NzP4C?^?onڀNɸ*w_ySD /%4m+%1IUu V.O#Ma/$F ~5ϋz[Q?}$ݧux μ"rfp['u c^j<>㹐^sV<>:n_fHJrU P^? _-lIԋud4¢.ܳU0DDY (f{} p.y(gw yx%ܽH7ƿrEUAb!p[=uci (^tϲIy)^MuzUq|,6xbJ?G7FbZ! J+ܑa]iwb!ɧw}eDZL7r $m?F0/c:ԝ=a儥 F~GC`C,7D@w>VOPtg"j=& Dl57\=ٴrOq8pÔ:ޓ2aB̹\P}WZDL܃LBT$zZENPz#am KyETgkąEUy0z,[ʔ/6\[N,ɸ]ӦGԯUQC\x$KPA*MjJH }$}F{|5Q9C{C^X04V^9ȑ˽4T:$ &gN+kozf~Q@ݔțtmVӗ'9iA;y梇Ҩ6Z6lWu1Ha$s\T44'[Ro#>\ʺ^PXˡxHm6ѵ3HG UDw_uF RfRXzS+˂_Hoel$H+ &e *"[>95lc( L7i7N.@3"*'5JmK.{tJ lD5s*cڭmR猋Řz5KVJ:1 8"艑뗝wsDa5?}f bgxfj+Val]{ę"6 fqƐBV& w!JጸY6IƮ$Ƹj8 :ykXwonӽ T#قKEfg7Hn ̱^/d8KҖwaq(.K mfU+umi::vPi4$ޮ&:qHj-z?;IKT[F$ D\BuVCRxЕ)꓏% Zi).|ɚCŴ@e]OFꅗw߶81[軔fOƘ>|HLS >NsŶ?*E%U;`8~A*A]AA)B#`p#ń%qJ7 ܽHZ@w%-)xL[xA!g߳GJ3ZKho3YeANE%ϣۇ65 Bwz#{ BuGý(_8_N̏5R2qkTx.4<6୹i1KʰlcҎCa4qj6|_׮*!9<'TEw"FtfCP^[rYLP?#JEEN9d JG5w]F6MTjz`,$7{,k|Հ!1IRp@,_~$ˋ,i19uPx5_zΆaFRɎdA}^Mw>LF]=1HfR_swݫ[?PD- ^ȭ ';w*vVw،є~`ekcmnA$GoGR S}N3yI x8oXq90dobr}6Ov#kldmn 2؛AwW_-z*ALUKג>t8?yA: \Ɛ,>':_$Z$ e;} hީdם$ PE@_qZ*)MhT.D3C&XPޛpl)ֹ"GoV-'R`RRNyy-ܪ9"PN7UL+|H!ڐ(["f (沈?ZTR,bQ7~j`'&Vʎc?/Dtp^thg@t&Qo%ms`Ƨ]Jv` N}r> |T؈:ڞy"OSr$0wqxbƍd 7bУ̘.7P$Nx@/Xƥ pBB"Z' )DR';6$b5TчEp{ ukŻ0!k,:6Wc oZ?N !sKGU]w͒t|lJXb0=,J͊NBodϟ摢7OZxh#(u{tMCh^IƺU1Vm,~djK]ƗR͟ rȃ_l[3*+C$mj *LH3(Wlm` V29f p)@- B}qE=Dk#Ħ˝XRQjP@8ey4fՉy^ʒGn6y<;Y Mw \_GϠpNbVU]X\:ܾ;8sU7@mqK4(]-^YF٩8S-{dhbA##F$4aMخ_ޜlAAL M|yщoljRP7X&^w hxؙTi3Z:w68_ =Jy ajrF6kٶ;SEIY}߉7*T<*en zV J, "]d5CɉQƏ$ѵ1;]NBTɎLq] zӬn} 2y04' Aeh|Yun8:߾J:`I$6(؊=]p;+02hN0 Y:nEիLGύ0 Jx:uGqJp]Rnvc|bDFwM{ܜ2C]ǵ}5f2L58/tOajJ+ $>5Bol y8 =]TZ=# 腾ޔ ؿG0 њ6b ΒdCۋB͘(R"X|0x$Lt{q= e/تInC_r_ULi QZ Цs&wGlցT{ >~K lwg#&|voNX-*c _SR%F<3os9Ymn@oZw{Y,A`a]G)L!?ɴ0EC _E!S;&=0 bv`R>>BqX{ްw~x5 Lf% Ff%Sfi @]dRWF4ѩTlߚiNW oA^ w6={H~'>HvTYFbƎ)!qy͈ yWM(oFuDi/h_r`d#}I2f$s7HL@8] 6,&Q=>gv末:ixVH­! E1Wς4]i:22 PMy#(a/D@/ 9A{7.)]6!mh\A'k-y]<X:jnj5s ꔒQL_MyE[Q.swqvdc3bPT7'u\`@_5gOhܰKWﳞ?d麒!:5NIBa6r~XMX"V'?JyaXU?+z }A`^tG_'+qR^޹S5{)K:'v~bs{X T7ct.&.[)1Qw3|^R.igTA̝fݮ>&~yV2zi=poW ze#Żu8J ܰ}<w(rDȿU}r,IH̚[pJPbYn->; cڥV NB|"W[eN2z:\>y J1fkab6G)tp:pKUHi߱زOE*jR $|'N} @"Tɀzp/ <˦억 !yke9A%'7O'jt?aEaVV "RѠ<;e!;o(3. fE j?y%:ҁ9PPy2T8{45EF5 #^%+;)Rꪓv?)\Ŕ,#6F$)}ˈjk1s}[̶$o S44nnQS4Hcc)|mXA=Kuvn=BMBC[0,bI,cHss/rtB4)%!RL{cS4_2|=wVl)9oRzQL$A) s5_TL&Ym4w$Np˜2;%dSj?Qt,}o1x^|*2E8$K@~M3LQl>)߃i1ԙk,!,U𽱊ڂ.|Mb **Bqam.eh;ƑpClml"đ룰uM j`p*.J +;Q]0-&[~xdF4$!AoL*OA'q hLh{9.^AXνWun9IxFR՘~H!1ނHȥ5e2f3~!'m`PT񻼞d o0봵6>zMCA[?耈OL[B"1yʬc_~d"םX-9{牞ߋ%SӸdx[n6#<" v{\DBeR,聛~4ZsVwf"'Tcse[ʙ7ȩ4:+_"vOZ0VDy XXs(b? Q/bY 06RƩVI.}bڰpN6Jb{Ja&HݼND4Bq.LJLS\H5%HeTUBe_:,7MlDCbSzɕsʇ4+`=(5G6_  (G 1մ.Guj% r=8(P>tx4ʋ|,8GG'АD5R9 mn6qݍAn|R--//$p2*~ {| +ۦlcSR"^O/-sGqrYdb$vǛۣ|  l!dgN,;?u>M;m.nJy,CrGTLlDɉVΉ:Z~tIJAA M̘v|tMt:S6(yc6Z3~p [R}+G%T| LtQ1-(?Z09ˁ]fl7nĞ,B~P7 Mo,!~t Whx?g햸(iwFQ  #D{ mxalkE)-To4LBxؿhĥƨ⼞gixeW^ B\.DZt爙0pcZ.R;"lBKƚ*&]VOB#Oa'$b 7Afۼ;GO-m q.?պz¾eKp7mcD,+}oF=W(Hrgk3%pK6ͰEʌCr^}N/@,8:FhGlp%Yb2F/^]WZS/İ3{uF 3e*>] M )M|W.Q/ k׌<,Oʏ _*ّOh4oXgD}`٤E@W$Hܚm٨#E/޲`>bM5N9iq 4e+髄lxY3]V̟݋5E,7þ6FV()Jmr%FkCi^/ˎ‘g? Υb{[0.L.LXVVo~G- V^;m(Wf f} Ɏ{#5}5j!𞉠1GUPpPۦːld*[)l jENq飴}J_)/n6~ ^9@꘯ /)58 xdV۔6Ԏ̤.OD@JX<qnsJ;cCLdy4[V-*+beퟌvk!EXO$ͻNkC CE9,a)gB& Kh_1CyB~\A)FX(.Z<"> j)qBzAXFkC],CQZ$w"s [ h , ?igzKC6$lX:k#orʫc,W_yIڸd|Uo=O`rz[ipO3pXBv/o,ʚ<\`xYØG,j/q V"Hy[6nc4[NsxϨ+HaVP\-Z/xwUyXi/ t+kT~Mreha࿁phIS^\#/p߬~`[gn݈l@"'掠l¹#Kzkg4$Ҥ1ocSg Z9 ]CHtD4 #H遺:!I_S<$:D SC w}kYOsNzRClH6|FPe1+deK@9}4%Up Xpp}Yb~v*kkCNhWX=Qv޸ y&ՖTu"yc2GDv9wٮm,FLn4 6%AA%ӧ4,nkS'"',E= L6d Mf!aYtY^ZYobwlF3laxٕwKL`Tј)D4LhO㴺?] JVHqVñn$(f֡lR:Hpx6`6Z^{}HcY !36DB!MW%ڃhbĢ-t1S~y!d*wHlB?I`?crw i~ZWt29- L܁"/qGJ5 4yn{]Jcm@˧vbweGpY6̯@`G D>xKޮΛ  C{3PSs6U9 'bfjVtFNw 'ҏo3ҜHLhezOׄU,ׂ&R ;~ŷR ZǺi4K!l"B/( PEgtb)D }j%T8c.D%Ys%"b*NӈU`]XJ19ki ^h  QCijgQ(hT gei4N|zHdqVvpW=.bVUGWN2 Nr3tFc1 ބyuI쏐.LI/Ov)1br}9 ͇7T ˧j%m|yz#CI*w_L&Ngb|{@meUmnMQ䄆+ nT*G'E&:hej׀t"U3ޣtHAؐKdт/x tB}u`$RX!@`I0'屿`ؑ4`{$Nppwls D(=Jtga~+4F12 !- O4 Ճ+낈lܱXcKI8r,!*+["+oi}`L%Ux؛JMр&"os+arK3+]BF;]0x)beItOj!UbEMv!%t{o7r=/2HˍՁFsP+pD½i{n6ccvDC?P_yqdrBx( ZW:#,@!AhvZ&[@ (dr3!oނ}^"rMEXI>+1ӂkkU?65@!@3H$p`pT\_)i$"+c\Kw"Yʭ8&h-z$z]JoQIZ ANblO4zC`Őuy. e1yu_I)g)n_G@bV zdgDIM}FA}eV@?!ÆGW 5(# UZę5w|ڠhqzuMno9Ǡ|P#4B;Z@RǶYPh([mBb?Rc]DkbW*Xi#jޔr9Xլ>{nO@ l%p?UU XH76eעObH1Zɮnp>E"3bFTko5v) ^m=K8$'wxŎ21k`Cv sf1ȥ6G;ַ.MR+C.GK@xJݣ 4l X)fY#I@0.gv"Z`jRމTc݋&WʝPMR&4_7d=}"YSm d޴_u 98jVl6U'>0 3^f/ں*/|1[ž1`ք|Nʊ;MylM5a5osͪx 06ʯr*Dw[fUeG,&OQ ٛ!7_b"=3(lsI3*a^qӓ$APqTVb$otұJĨ3r9(<噡HS⬰}onM$⚳D7|(h?]{n,dܛQ̮|*~QaSD%aEY|]E3֕uc}xc;陠!H e z؀XW1]Dׁ͠o>Ҭ.[15eAWB$a0K%vp$8,H 9~..sTFb^?qKʕ+NiKao՝l]p)3k aԛ:OkE[>Z.,CDV_s!>T'W](_@m:R `1mW=t~TpߘPOrF `jHLVɴZXa/LVwzN%ҥ<lF~t;Lh4,1E6uIfjj;5`^^\,\pc]+r@\Ӆzp<?v^V=Cr.%;PX\Y4R1e0c r遚gh5z3f|{p7rWP[Bʙ^'3̅5sլS`t􄖄+O&Qf1͇]d>ߒ 9f54o0ҚRF,Dڨ77gEʨhxA^)cm;XG}|ɾVzl=ToB;8k|^:w{5t" "hJ2%Q[K&8h"$Z)b beju&Y^Y] UfY6~b  zBLNx-2ڐa>ZRFkC Nw[Vq @ebsA7(4E&3~x+qxCnH?,P7EcDK픧W}1YٶVTn45nۧUJ=JʱL1ȋ'h?{LkF %lcelDU>,g~(4OmC*<׹ "¸w噍HMg4] Iꋒex;b3:ZH9x@4ԈE(.Ma!-}2hYJy9B:"w{B0y{@57R80 5hq.OnZ UIk;)Ϊ;: s'6 4UP2݊<*:6OGs숫82I2q{(bSCHoKhE pp_FI/GGg{#gsO$(Ƹ- oNyǭ܊>[H+FW@J1پZ}͍At'q/χC~B6È9ܖZOX1`Gu橣7V#s3Pp4{X~f%Ky_t)@)1'iVՠ?a*\k8RNyim'5ejaEeR[£[)İNjXqc =)"R1[ڟ=H`ο? ĎM">! 7뮅1^_NX^pÀ<5Κ3l{`sbVg^uS_'s`@ ='әOݏ<77%XҴ0wnċܾx:GV8? ](]?4O CE֔x@'M/ɠrYhJ$Ntsx,w |dt R@".,YVK4nD6bL|%D˧5m| D3ո\'Q?b޽a/oYxN:@8U,XZUjj4%jW[> Ʋ.QO*e&<\{RzoL1(c\GpMD?;-]6TqHbbKHz1!^[`YP ?2I>N -G ˩5tHζ3ū߇/"ȹQTRpaXٮnv M]a :X=RlQ{uo62j ^SYK0[@-r'[ƒ3?}U&[d)<^WkiU~ub ˙}@KyfC-2 *Kp.@rtOT(DK,yH~Z7]WrE)-=&{vk}~~j0@ ?4>[l!m^Xr\2 bUBhn61"l,p3aD́gr嫞UJMږ "5.ReoZf>3S)EI"Vї=jh<&`:6Cؑ'&t17T,gwmcc½νT + N qɱ@)>NX6b6.f?I]ls%=o&[XQ;^K`W7'>NgM%ag+'493Jp\ Pd],bRwfk2U蹃]^4s4`;bFm_g=4b#AMnʲmfE F(c֙O>GC(k`ŞtS\<@A40JE8hu.R]C.u?f';f}]Y'eѭu"߯ZZ]]^dF۱N-Mg؆]N!4#'=jEC5Ok pb~6w~Gj([}yBV.nL*@4ŵX2 I'8Z,#d,1=pt=UgZUbj,SУ 8O%sxfEuX7%A \f[AW-އ~#~5e Cgrx$ (̅؅!J.=7F㨸鸫/v>dfN>M=ݛ})i?mfT:Ө'u BD C#8T+% Y NYD+bqp@9N렏3/٧m%{fC?7֓ uD705mSXl?d*/4G¹[7ovQ"ӃyHOL.YAw ƛBHݵ!Z|^LӐf(Wuo}[nn\(tM~`|t4XB7"bN`u#B_k4Lt]M AQ>N yʕR6J(OVDl`hP/4k?bֵj|uQ_itsJ@AtC˛[:F4>u0E>EZtoAj[g:Y} 8tNƊi[29i*  at^CnA]%\ `)Ǻ1ygha߼9X+{ 9, (fQ%cpyU ϵ:*6+-^f쯁?*5"NVl*kN>m m1 P( B՗?ge#$v_b1h){*(I6nJuVP87n'pi+W܏ɕU־[_%)Mq04b@| [Ԉ-D>^%Z(8 t?hm8IB{N<5ѵd|L !ĮB Jd 2mb/ Z;foUo7?s-?Ob3bH<"iT;DX]M DM3Q葜oCDT="؃|G.RpF4bkbS 5l:;U *p5i#]:QoCD)]-Y,hA": -M@%Td+ ebzRIB$,%YSA{&ٗkZLڻ"v|Q-W0sLpqlFi٩o"| 4BZ@ n?^9CeaC _,r:8M &Lȉ4BIz12?w^ucsۡ޷ Tk0 ,mw2GLXω.1Q|Uc}VRPWR[wL ipf9Y_j/D QU<4RҴ.rحBMGEkh2\]{|{QGZrItc9}Ƹ.@tPÓ 杔E_->8O>>[,}TDznW#aYA.5: yܼ)>nX A|rRq7g8ت%'쭑Il8Ϝ|y vRvsk0 h>X:q1N&*hS#`7Dx\u/ .t yBjŬiBdF@ܘI?C8 sVɬ NE>4 QD9JJ[9Pa\ԃMCMm)Bڈ-@CPk 'J"]q.,YWjnvdԒ1oe'6jNsYUl-^K vۋI+4: θAӝ1Pn+bNP Lʑ+]@]P{[3:ڕ&߇q@-C49U.Wq3&Ur0 bم@̫jbXaѴx(2C)p+U #6V[`:5Ⱥ.CrY3w^02V HF-:6Ab SSҡnbi%:Um./ɶ@3Q7ݿ'K1q{Z;;cZ>Yc.6m!qA-,Z!U2 0ŕX] /yDzO`aj Jm1Vhy&-cT(SI3WA('Tb1JXët!`I;Z: X|R.~nE/G|MZKfȟ̄oе)=(jQ-2_2kEsc[>b( _ lmxCS|9$jq33\E@F9Ih 7FWVP^n)ƛpA"l~\H\c\9Y$Qn un?2ko#\(o̤oAf)z  et&7nJ=Jbֽ0x+]:ԬCQUs6:|'H'dAIt(KBPGiP->@pOƎ]Yí%m6!_f;([2ABsT JV?qS5õ3[}͘ Ik/]WV$\$rhhG/\d߯r_s0te"_L@h7DS妤Y,/lr3 Ŭ֥¾A,Ox`ݒ{$L$r!%fNo5 ."Ba4!R ~f3K!eӼ< jH=mu9KY>[. "EU~||يzݎd+%y-u ~nGfFh'Wy6iq}>ɺ0_1`iS2G8D^XijlDJ +?pxyyrNJcu̳34.>? {~Aܤ#Ҧkb7Е|@FzڂZ|und_"z֪3e.v'n~3S)qYr^P.b[wުL}iP4Fw PXVVXa%ΣNbmt[=LjŦʰrhBDn=;O̓)(LrE}1ήgmUTHA1lHt0&!8Vli?dwu( б7^e ~BQ~VUTٓr#adSn X+ Z5Im]sb@^ym\9ڪQh?j9Y( \A=CeQ3u6م!Lkӣ|-%?3WbS R*O, xyw[-}Uޜ}>l@ UrKpS O`:PX3RP5D.:覆 і;'ˆpokcb|h3]sfYW|D8,mJ_lfCrrFOFc:'ze4- .xi1v7&}TKlj4U5 JEKoA^:je٧GN`p{24ӎ@O&zvZgG6A؀ hV|vL8w2m * 3́SIts~}Ur] : H SNmb._l"enp/JCެҚn>^WFnI&vm?)">2JFEi'>vۅ0Sq0O#Q+)vKD 9~< ZO]J$LE4qqd|bWo!5k"~vwt6{X> {fzgw>}u?J7/8uNMOJ:";޺mG>TO n  &^#l[!Hۓ`M7^&J"YB$dc1"H=M@H '49ZKܱ_iыyۨ[2%p,:#kBD}~L/Os֝0ݒj=fԨ[+7.ɕMu;Т3&ζ 3&O)D'ݪ 9zx Ys8NP xKm/jzߖN< TtghyE$fݵid+1.iR;_{sje^-1U)X;79'RӉHI9 z2T]u=3ožO7r?鍼D7!-LO.ǬPMԇuFd9tFu;ؼsWg-r>`MȮ`0149ꃭ aYgTѷ$71x4Ĥbq{x#*W*Ojxz|F}55mY2n#!b=5h qZCw+caUd6,T3&ps'>-&#pMRR0DLwңڴ@2SC=-cBet#~.Mo0UL<c1il(iL1EƲ< 8%Kl~8(~,(+0DSvs/K8b\7$W8 MR AI^4}'CEy _HZ~3ӡ̢&jϑ 8~h"-G_sC D!VLCcċq/{,)+3`Pusm.'磙.$6 eU U(q;gҢRcZ5CA+(ønģv >izy-(D#HSyiuTG>oZ-|S2؁+TS}% F6PE<GOc>!99x/{~Kh3i`JFnܺ o OZs2`8OeF|0j5𔣅fEo^vXuHS삜<-l]a;)k8:рȕarq@bJyZ[ Gϟ0lp@0E2@,F>y= !oFJ *>*CΡX-udUe F9aW9x& Ϝ6<4[Iݺt~g|my^ Rz lnYj7_(Hd{7~P-CGƩ%0[;9gA\[GdDuƞF*0@Wd͚βXJnMyVM V!xpbC waaf*:L[w#{|'[d.hQ딁Ԩ`Qy߶Jh`8B8Rp&7:7FsP.Y)FiDZG;i֭qJp.s (K1/1x,31,/YhnQ[Jh*A|QHF5mm)TI)-z`uN++G"*OX#MN-Ժ޷u>?3f2P'ӎK^D$G86hStAN6aBJD\Hς6%ɒ.rĔ^{8WF}vڈ]-OebaO3܄%[1*\~y\3bIN [d仌/'?nCq:@bċ˴꺹s6 g~scQ]‡Q;i),OPq%Wx]](ujp~#k.hSn`2DS9"'RȳGye'C눔5j۩H530Gr^~-6 ̟!}2l|'4f?aLX x*鱅ܧTXNo zھKso-n(X6XgΒF?8H,]CK:/.W(z\X-o*Wo2z!~A㥯-6:yQ3Ks iŮHOȜ !}e1'ﭖHYm՞@V/0nќYTcPbM8R5 2@E|diWJ< >)l^d&~d3 қb)`K ڠM{6 Eb>@vZK:cġRO3:.(1pkgj|1~ 0êpBu #8꧵]saˇ,I.\' "לpл%M#p7,@7#y<^98S+(\WQk:NАoYi3g Z4RW\u^:VFs{+RߌAc}}򁀵h.#M3,XSۮf@NNu.6~sv-fMw[MX"U@-0#q&n#){>Sa@:ϑ?]۬Ye7#SvOueT6Un(CKC^m{șbޖߦϙ/-8߁!q}q^jKJWVrԈ#&xzSE'L8b$0/vOCy?>0)qwJ5}Q~ 9)RIn+zK׷`6;:#o{ɐޠ"z4Ϫ;# /i25z`o#>Zq\b{lۃHʆk*KW}P(^ijm1s"C+oMw ;:Q*EdJ$ס)hA !1,+nEOi.݄BHL>F,hmH]qFǯ:NC=&6uA 6jn_eW+ KQe"[)Iujnv#*^P-;t]eˏ ~?Fe ]UJD8ROB|-V@B>%VHSFE$bʣ aRyi1 {$'N8Dyz^AEM!,Dl͌SKg,LjA48j8l еc|6 ? Z̫ |I ٻۺ@4 - O st>$xd۰q.O znȒ5SBi0$[sZ(o|% K0 xj'V.StqQ̚(7?T٨<.TOA {2hm!@Q*>啴C:BZ`C˞ASUvm4<VwiQvBHU]RUH'׭#8}=hYvhojXb1 ӨPjUy2 ZkR{ӸMi[rb$ AR 4ٛf.! عfꡲSSaȷ`BX2Q"hⲡjJ4K3{mՁ4,kr4qý.Ѽ?uڠ-MnCgU`iH*Hr5 m̥4]nOw/+]0DB.tQq Nxfk!oT1 HCN\ mBW[d/߻HZm D ׿߬V|g=By}}=]NtO52^ewcqY7Gbh_Os[IWl/8gɇ(e6\ Z[qn}qf;;}VϘ3V#5⯱ eAףySF"#.}:j>S{YЂmFX%4A$D/Leo@^,OZs sCNnF5u"Φk!+irSM1J&+]cs{(D{h䭵y\m3Ś!cBH9]He(j3 Vifi7u 22갷c=I\["D U#2 'ā!߈b"TMgQuhd? o]HALVRKpn8dNzsJ c % A(FUHr׶M>할q:K!DD֬Kْ }Dm_m%iR]3+7;,\s11 <ҧP2k8NWJ`Z = ~rqs4 ߜhDQUoc#ƽ+e",.T< WCشaaA^ȡ5 m3Q= cʎGER)< 2氦9YL OxQXu;ʎ1bp*Q>8b, zB=#-X^u V.q.zOgL>8RlSR--n"nbFi uOvLDκ<ƧgMF */rZ#cH 1Sut`٤=5rby^WȈAp!kK;YTyF[Fi5iW럆j#9ST"l"3C38a=>"8 np'aFmDSm7\ɮCQA}{ZאA-ن.aF(% ,atc}Mv&/;.NRRۿWFKN~35B, %9 oP?mI3io8:Wl<\w}`%Dr PhT;=so-^xܑ,5U@U"@5 uœŪ<8tBZuFF;4|*ޘ㗼j'-\PjAU3.'8Qաl<*'m)m 0UnLւ(޼G9̜19KI~6G6A'cb(` '%|G*'h hHyͽ&7@}V؋KL*5ҥP9\:|)i~eN8hZ"ҲM3Ff((]<%}s7cF1\݄3Wy&J3aXuXSPf @J#\RwZc <;НL's'L?|vfj~lV芭o'D\'yזOI>wN?F20ad ayrՆY'e$w FxbNeyVF40#f"1*rE k] 2ZEZĦ"`3Yz6]Qߊr='M/?6cc-M|/u-$J514tXdg$W>/q;A]O{Qan:"> MO?˲vR W'>ek\Ni6mq!Xo5$d?-y"|od)2U8` s5s O7A̽ޭv7R7A]C&6fͧ@ T6K7X/g}[UOf@o]گ)x;ؕCUZ3Iry`12gem%"NO@Rצ|VUPb3-3Xhy4 &_& Y΄M[`~;50½>nQL).2q-:ԗ):@[,YΒ3[>L!9 }7 .Z&٭uO┊L6lFW2ChJN6:~T1ļgx=ƨˊO] LxŽ@9 nm8Äka  o:% U?3p_y`ɱ X򩀕 o07o V8DDcjxbњPXX~[\/T2eqIKCHt!WY1pr~X_>SZzŮu:wn͈EP yώ!) -RSAInuD0187v{u2vrngVA8`۟nJ،z4Za p[q?ZSbFF;K?Ptr%t"ymP֎ya%P_ KR)&ʼn)X~@JMvqC{~u^g$ )0S;Y%]0a78}OS(eᖁ:N2է|"K[- ߋAoۖdBUgs(D#s&hWDncU*}+~1D;|wՇ'Ê$*}Π[!1%`v L|r?KQJԱ`g7 m,T%c u}ǼB3=΄)ϥfOarxZ_YM1.nА'_\~}Cc9lbi 17£9@3Bi[:>%a$ZTA-|_m_ aOczjy\ߥHKsLbhO.OeWr:C1-i;]*YYwʼng=5@yPMI/vXxHU>bto펕$(EjqBVSېn'ornqIsTkbYsc?nXZk5GJ6\eo$(>MHyV :).םEќ'x,2ڳ!|ABe?|%!:C(1i}/Pfȿ{fJX.j]}Dٳw LIl; h,kvIf{Ķ__ж5'6xmް!cKWTvk'yE_1~$B(T,@C ٽj;1~r h3 ô{yĊQQCdږ qS9C~FcgM0h`fi1H#t 1ÅBnwH!#Ht:J_+[|2P?L8Bԅ qyxY Clit1:,DW"ԉG,X;a ʰh2XC/"',FDrfqgWp43;=$;sd$ x7p2({:L޶'nF}2Gd)Rj^kRЗsHx0ҾY 5DAp4y "9ogoє x~D]Jj}G|9;WK܄@M%RA«,G /dC{끶ZEqF үST+;ar2[_|fs aFXt@n4#db7n*a/|+ΠPNb*' /(mT׳$AӳCU;,'Iv>?]> P*y\g#:ד#̎lv׎4\om儞Fm"2}֐ŶGtC8 ,4_&r'_N>ftCH!k5(oOq#xdSm8"IP&yuu}}d*65*;gmMZEwzڮ1hRE*ND6kuۨd(_9;IsЏ5\xftH"K& PhJWxA mb +0Q,Ͳwr/]-<$S_Gk̜Ah3oD%&6=׽PSҩcoYu :hm#xb>~F (yJ$`g] nJ7Ýmdۚ~ǼîzQaxу8DO- ɽjܲR_d~?S"'\9*(E(bE+fm}( m3@?&p<ɟ؞D>n>@ 7ҭmF0dz0hTaeJLL RCa:-WScWi4sg>H; v^<C*~(K萝͸|vm _+苄~)ni{]荇wcٖP-5%dH5FA|.{ ;''q|Ki\des9vU&l#9Zk{sVv5ՠj'soޯ y z4w"+OHp<|"獺 }f¦(c'Wv8N"wEi6m\1`^0wNIz"8XiE\Te2#M d_#bϺ;*1s-iYq _xs|%K۫g)[T'#Kq}FWrxZ9y-9q,lЌ&c vG˿~:nEMwM2:y o =\Fꛖ,~9cю'p`| 0C\5. 'ˆ obVs<Δ*Cո!kό=GT^L@H| TC8|x1eX5V)o[7l={)2#syKE' K&:k}#E@HvwƎ}f?82uIn*R`.ݩkڷ3H qC"P +7WeA1V`Rx煅هa B6^6J{<0Hw9ɉ񗡁BYI}7fd"sVcz "Κ3/~ψܙ}q(qXUtvZ.dYǨ1!x 5գ{G4(%: +hY ;uo0S/Jȁ!U¡]{ p=S^ (уS;X{%oHMzY'NO{B,m WodIܣWk ݠ۰8 e-;( +-tqplyePKu* v ~ϻX\KmiLjYZd8ZZ^ yhgq:Ԋn !Ls%?'b MisSR^Ӓo٭4Wou=7MS8CNAa8}(MZyDW|j|Pz̨fnL]ƫ ( |E,H^ lkg6#Z=ݻّzCP"-+Hpᆊ h<ˁz+~]7`F~p"zE, kc(^ow)N&v֭Itxh0ODb[ȸٱelWQjΊW3k 9q5l-6$tMx+kjYz}:Ui\qI'o[ŷ$uuDX3 WnIƺcFGә:EFuC6P @xSTWU\`ʺq!GQ T) ԓYVh;ףv~,n3K8O~dt?5a2fuJ{YБ7?yF:YE"t,㸻 gl 'zm~H _.{gnb<;D$ggޱ`?7l ijKw$p-ڨ "+!h,l/`ɟJ 錫6`rb?jGL-lgZB`W.-;t^HZ4p0 }f+UfÒ3U|zswӫX|D)VW '@G_."7L^4܆ e :OzL_*e_##v-h\ Ϝ=/` Eƿ_hivb?kS,UlٗFqqs֖X 8FvIqv_9z}tQ(ؐCQo@Tƨ5 ;9V@IdnXhMϣ?"yndAl%З}푄#w;"ۦrݨg禗\n8Rՠ-{F74gW }Nhlڹl4NѨΦ\wpVM]<-]Z ]9(Pbm aAZ4A%j.hNS.AvB`)rz $qD&RGNDZu [Bk>v=|LZĴt *1Ńy7{#r;ޝv2!0E1p-OqG:`͂[^)/a-:G-;35<.qx>XzFq Eꦔ0 ?otx*B7&%񊀬Eh|iK ,oBݴ!*b`V3L?;n|mP;RP$=xFIk6F6r6e$F]fÄg23e[DE՚yݵ>җ,6ݒ[g#0_1ʛ Er ضB%.TG[hpD 6=j3M TxzNeQ`fE_fS17g1tF48F Ӗ7D+>oҟߞ}7#1j^ J~<),p#=S6I/y|\cGNAeIRGȡkh(MA%8p%RQ/PB>ngpW?k*o-6&lywA!>o-X%Jz4/):Q;jjV]4|0^K-np*mx.V8?{a-wiL|V?&i]r|R/µm!:JoҠ⍩=܎3[ Ssv2AQ^a{e>XfLF~XuEڳz Cglqi 𻳸1W~q>yYf\T]Dp^>e`+;(/sMuF {#yIu_ZNe'o+d* ˼8J 6Zޗ'@5dl@c#=7)Щ3rƼ:cxuS p6++mnAa'R7ZYɎ$J:; L궟NՄR0i5&@kp(i}c o{Y*^x^m9 Cwste\v0g2!yؓO}4W??J1^\+ﶁ4N .ۚp4hK3JTW[x`ل?foYũAqBSQMs=*:Ra8Kі2pV^09lpw Ɍ My >X$vsZܖb{:؜^,cXeY.8E; 038V%O˴G/MR-0*Ho)i˖s"r}?aHLԣt'$2٘d\6 \k#y([Y/ ndA2;Ci[d7h7g젖"pSٮ"b|*9F\./d2c_8 iczrA1O’EPVD>)OW#NW1}B(pUiǃyFvmalY!ٕUZPN d@n6^V SSZ* W|R7eZ˸4o Dg'ۺm`F8baitpUb;H3m<4T"`]}paZ]M&568D|}cU؋BJ&Dۥa/"EMH^@WH si`|üie$Emv0}ry Hx1ˢ#x4̴  *,+EbхB(T~[GLb|%7/դС$ ?:,ۅ5Aq.L8͔gXG𼷍N')`l,udcUķcJ Lo)̸}U nIcC;rg4겪KWlq& !5j\C:,*Y]K?vR=?uTogCi~.TfZ23 醒U\bh%"6/h_V;a3vKB jrUpW(;JXoQh Cn,udMk][ Tc/n?H H %A !Op?tIƿkmD2چ5mgwqTд=cl dJA=k懲t1kߦ%JJ`l.I93βJ#VԧR?EI(Cqw).}cцil}wfhe HMO"L2H~Q_o+(D_B0JN 5`KNv7$?ӝ=տֆB )azV,QS^<V0xR"AT-?c8.<'&΄8eOWU`S<LA>-8iBG"f|-w ZSFgҋh +/hr2؉3 i 1g&&(S5(iyΊ K1Q)Gׇ^N HW]r OK75Ȍs)bR6#[ U>R`+&_6HO MV4$Wet8Y)i“Nnk(66QcrN'rkf6v . u&M*8WΝDyt`#lc8?F;RW'JfKP(j9Euݧ5/T@*6Fv7D8 ,-SLMof!nSf .TX`jH]D4'.}?Squ$,n ;ˣ˰`E1'ɻ(V.*`Cӑj븶R/u[>"‘E*~@5YQT+*-u/vFiE_ݚhr8`EX cU\]p|OqOPD}=WCpL-kR}5>n'i,i͉!(^PKO<p"֒ga zӣC;\T PrBh}K嶺vx]OKTXnioB:B27@bhI0$CDcDmۼMNsP=()__%օFZ]]áͅnWcSr[:>k|u7&;pvs~t,IދC]\ta3m_24`5@[Rmn;с,|.; 7}g}E^cru8n9 w~ q 4>Z[=cޝzm$ sGus/arƸU7'< ˲=e*;쒔# :Ǚkio7é'Zv@q'tUn'}(ʙҮ"ƯQq'@$emvzϧ0}~-Ra&>4BkPiʡyiH^2tۃ>.|RFd\⹘Woy>X- 5Ób>s2 mVO`|5i! jׅƦŲQZ L]^ԧv !\u\ o&)"9m>E^X~(`TK ~dC4u27%ܰ%MC`v|,'Y/8@bYvg7."\`.Jx'v\CA>!ѢT s*2VIJvvŊolhc.+o;B%}"2[^!C9ء\,I:@vY!0^'u VpbՖsÔPz0LȻkD"X`l3ӳw`ыv;ôʀ;NlF4N[K?{.=Wۙ.)闔r;,Ug 7DbPDxH(ZZ:WQdq7ccըPm!1h:] ~i lQq<UR ysJ ꝫ[5,x&D1ݬ@iJ3:Ry|BAMx] )2(msDdWӔSڽLrg!~uԻ"z4>jsX_ kКnXZ*>GF$O@RKY B;R#6ʐ971t;A_aVWS($UeqǴY(&~X•#YsyX`#[_ܮ 8狺U2.Hrtq.rnW+-:吰n:]/;mcZ3 t(p}kYMsElÒz,`_C nD $1X K߫98Jp^Ql`yԗ2 k{Y?⤂%n":nPzn`pmPcӥŇ]↵u vi vg MqZ<{iO1#cVoLY#$WȰCfޣwomOл/U*(}oȎ&n$%wZ+|>R;& m/r4xP-dC#cZ+^ijL2&>08޽Y<v"na@~7`Ijy-g$ Oj5 i6Ng lF$~H> |`@ $Aɯպ-IT`~ X)㴽k[ẘL J[yFنp.%ڙg^UJ$AQ%0K>"/N1îxw # !,ʌqI1sC{||_ LFKNN|Ks,@;[ld =fuŻ/E̜~6[iV QhK^PH#Q#]hׇmxŠPzU5HI6muJ S kEuHU>KF(m~L A&,˟=NL|3L%*q7aR~$CESQxwo)R4C}ɤm&QFX\ ܦqkG!yzǙN/TY=2O!`OV2T~ UƔ= B`AMPcרFdR  H(.ˇ1a^P,Y3J uAk2'f}B!Rm$eq!P&/´C1Qv|?艇>W Іw%KMoEQs.G?l-2~SQ? /Dw E[YGU9Os}D#D믵۷)A=L33ʆiږyKDȘܞюVyO4 y, eڋ1Gznru_-cvM?qFv.MQRvUG3Ac:Wχ2.XN1mmh/N݌ĺ(SԙGq(d얳|!ʛВkX':“>X܀mH%EV DqB%5UM-XtZlMXo,fR ėꙇh6uX0YV={:٪k=t2jk">9fU9cdGf.Whu]}lQnB;*vK72Fc29f5› 5rcXfwOtD/ܗ0]@kk&xAĵGPwhǓ_=R 8pv>#GURKEvc,Lz ]9 SC[l FFi:>JRY^[b2GtRLиo 80Xx<xqؑ Lv$ݷ4b0iLĪ`dvҷ-L7YQᩬ4(]9 pѮ}+C3Tї\cu›Inj®O:s+$'SkmWki Qtn[ zS*YS&b1\&}<<'G'Y0$x{ w\m!V C`JI y9ÚAHsx J;K;Pop%:v؄-z! M"ɵR755s60@C%V`> j$Q2('f6-Zsj$mnm^rÔeS1 M8_E_"*Mtp7j)]}Op]{JF#!r~+>hNfwޱT`n1[_Wt@?޲IPަ.9˩xM6=ʝID!&/p+8{j쇙1o/fQEiƅhF};G|qF׸ ͉[*jrS&]eh[EҐL7xJ:R/4Kޥ'L D^3VodK/bY0hp&NM{hWN.TMS3G%\CC= iHjg7"[I1Fu ;cXTLP.K?}:TE_՚l˃jeOI9)Y̮?Z LF}L`k}aV~=g|!GPY&7I* {}$DeWfTJ\e5"xA$LmL݁\ b#]oP|mKթbrGÊ#`o !C'Mik OS w->[+CxS1ꭷ>o$kei.%rI,6AOY望( SA% EDYw:6E$ц_;ZMw3ǙGT-F"=@4eP|Ls@^Cl&tJaP ]^{7:#x|T¸wtE2'a=ƙ Jx@׺$^Gt~k%pd 3N#XͬuRs-똪\=Kkb$G9U4ad4'caA}ugc^NRF-Nf)ptdw7@ t2*mτuǞ^nԁ&'mZz-1Q^*wQy3P=A[5"qѢvk+]VZ* . (e;Fz{:JSY="1\AMM3ֹZžjر U,H?o\"wQl\zג.3yhE>\H$=eI.0 ?C׋ p*=JI:&_n;/OsӣuGA=R2,1[O(`8y9Vĺ&؝?RȰSp'._e ;8Xל_b],kL;WZ)6!lp䢐 p*NcIl*&O-]14D*)<hh4G<.P"y/"CS4}I]wnj?IgՔS ʋlhkl|Jj֒K7M%eFyC+Vu2AFmJ scWÿ-of56:u^22ge~Ęh ˬkr;ִ#ۯʧ+>il2i ʻ3,(DA7vj mFk6)g h^:ɗ:ڏ[Vr ~%x7} ؒ{AG6a ]iCy1Ϥد (Kad.hIO8ĖT{B5ԥEF<;rqKo1{taYc*W㉹o[xXX1q;g}!EƖf<*qC2̶CaRjct2K)RfbZMl@'٘P*$?ԋAz-LiUdtO,ΞXC h5Xpc;}!,_&&U/Ĩkx9R=i7_}K:ג9nY-A3p7 @^\yhؿ!  RzF˭,LT p(ηMLT׿(fCw8qDڶ# ݿ3u[ iw€sWOr❠&Sn{D9>/k[jY=`6X yqHa!]S2l od3l#VkpVUie)X(yA4N&Uey< ;}hNl@. 86?ww-/zdT򯤁!\,9BC u틕&wXi [&_KǢC5} 4D]flo8Gb,d${MOF⢉oM ÁO6-ghl&REO^fI?E<8Hyq@A 1YĮT(U{eZI-,&̈́i:W^CȽ~6f‰e, qa6QQ&:n8kwQ.QhyT/jºc7 AI#@n:^;|,eJȏ[ɦV8{]HjTca蒇~8:^ TmZ >(S3/mCw¦@):*@7iQeU7#0VGnFUR]_d͔2k_77f > E-^}0pq(.XN:X!d2#i=9CZ&~g #r%]vo "xYW/Õ"5bFiB`0.^Ɇ\Y, wq'(|G7n|cPg"ꄨPn?O:9}Q!U^GuFYu_9o{J!%~6E3__JnTםA5C4=,fcFRn&N4>M WҤO?$֡-WҼG4 Qx|K pE4(̙0BWV,g ªoꛮQ[%@(}C1Fxj~lxQyXڰ]ooOP`JCq#+78Xy+ _\ic)^ 3*]{)'i,a_Co%r?'+=)Xǻ(\Z*DiHk# A9mId֓ޢhjݵdFLǡv.;g!$" YջF|f)ݟhmG0dԒ['{#t5PO,,,[߁b50'VN%+#3;K2if]ۘj=׸h! y9ӶV<>3%g+qٓڊ>þš)ⳤ*{ QyXp<$yOn"GP(5Vlwisu&[W6޷Yҹ,w5r%؃B~p9쐬zEX^ebKǂꒆ8&u K\&?rjmRȍGEja0[*Z99gl|wu2 J7T*-mLSfWiV1C6A;trcD* q7H"wuzM9G_LB^bLŖ.?_6BkS7~b,Ny (=_¹UEXME%UV4kk+>/SXZ&jhm:at]O-z4+V Eo ȹ;y684[-nT =АtHo>Bz4NS@s/ЫPXć&H;3[7+->j)$OXިnZɳ0=p1d׿܍ 1T(]8~W=(K]XȪ]ԮPdǷ& 2MŔ|h/{\_u m3L$ts̉6wgxGHP9HS+㜹!N]>‡> ]!!jXt \{K(:ȣ+S!SLOoZ`^ɍ)-h *6A /ϵ>D'vPNh*-#SG]Ÿ 4 IM=4cҕGU:1.}}0 I]̎ NG3w%`)BN$[o_OBRĞƇ#1*f#0+b |QzZ579~q 7em}Dj} ZȽ$Ȇj&GrY~:3`QJ@d|֠cQg+WgUl7HoȠGd5OOYsoEXfВ!ڵ{4O77vkR*JϳTk/& ?rBVy̽Sl  {G5@r58RldP{x-A{ @ft-.?Q?i)VuKqY'KVMGt%hr-+2(g9M79A[uC'ffu1Я.[|3<}쥅/嚽eC_l\_[aj5s <+.|)JX n!7#[.J3  [>z'ٜ{=h2?kbRBQvKBdLJ|ܦ3ܚNAFyV=""(~$U i˳B =. e6jiO9Xn̓M/|ȇtU`D〆׿eEt._!C݃{:8LVOL] L`̑pXפ=^Ҍx$f\3q tO:k<ðaPy긇7]˚O+/MxzV46v;z2*BqP%G B$7@'B}|WHtQ;Jɧ9lfB`VsT_[}ޝ hh7έ0X7HK_h$ӏ!ֈeCOk3 -s 3z#$' -[1늢yю7kbzTJ[8& {3V)@ !pYjXv}WZC@r@ԭ@{ĩxי%^ ہoADZP%9Baj{}ҙ:6(PaZ5vkNBXVe-Zxց3 {ȴ.,huPQMEI;8VP> 3ѡV 5-T}QZ?'QZ+3#·BF~|y)Z kR®cxZ R* H͝'3+%9J!¹)u#8zAGKR﹅q[+٢ eq2Un*$q:aG~ks8(*Y(B`W>-ET(FZ|6zaL%;un|Y1Z#+N;w$krWc;d-)ʌ1A򃟛.m$5;Vas%b( Ԁzӄ, df?WDq<;g`+~9FAh>l| {RKWSMEr$0lw{3Fb dlԈp!CJ3lXN^0z0%5JUEkEp=2qԊmLA${!eEbL_Q@vA[ݎAz,(xn<Ŏ6EDvVczi,cfN>؉@[csb?9IQ}o>ҍ_8ѓ|P9.ʊXs{s3rdpþ<3oD fry1tv>L!?ُ}ƽ$c9%4Sv)b|gQ -$W( %t2Gc)&ah T&a fu[NȔg4CA<NH{ 5'p20Sݽʵ ?a ={~L༿k3Skq;8i&((#XXJ1 ۿ#z9 ,laYiG\Gfnrդ6pg' gVq6"@Ş%.h)mBn5 #n.IrsMr3z/w]d4s| I`g: nW 6Zb,~tTFq.L0iCF«^]dU$+i:I6=f*T]-/K,坚+g"n<~Qߦ<4<@1=!U/qNM.LpQ/f6  Q] .cF ydPC.@g!p$9KL! >%ãhMȎ?5j1jݺB}knFܶnF#; ,)^~XRvҊ^)X >bBCK$;p# ESv@vl7@3r*iOuL5+AUSS3Эo-Zt@'3T [lBN$o{UTv:9 AL~iP2#rC {hOƊ S jlTf(ve|'xuwĿM#NMΤ?6M";m MKd@fug5OfX`HzfSu& <8 X[U(,&UohԵ /oqzQx[!8n. 06>7X]" +/2z_T@wwgxITxoU1j$1ƙeaat#^5Bˣœ!ҍsr" '-_S0jDo׎/Ӿ"=&0Qo _D6? "#wJ #4`p Vq{E ؉L8IDݻP`dGMdw`IP|lqNiE80r^?[|na]v/DvB%?8ߘgUH HTx3f*MZ )Ĩ,n&GSk T baSNJHXWof#㤄68k>N`/kx҇}g"+X>\c\ R5W~q_WVB,EtO?_Mآ/tBR"-'M2K+!G c0HDAJߏk|D݈^׎P`+O\TA>%+̵ -~I#Ek#)~Jtg'DɊ%w[ ~[G95u&;^RmsEʈӡ%O AjF]^ 8عtAL䧫7FqdW{c㇖r'߂4%=VFjnUAˏ`u*!6cU 3G-ǔfZo璇*)m{tq?YREͿZk\c1)i߅_Fnԯ,'#xdL[,>gP]zx{N#k*k[N.CbL߄x yצ?,VC(&i 4Ί,Z 5~-792۶h]g݉r)M.'ClYu `G;j`! &Qc쳬sqTvm=CX_Q )iy@xvjŚ 웱Ͼ z4{lI-v UT ` ܼ1mD֢qp])6_Lo9DT^1#@֋]scrVkK<ј%R{U "羒L#_?-fa60ys?HVso'⦞Y+WJucB"1ȶq:Nr k~Õ 0ӸM@ 0Myc#R2\..jx0]H$ٴ#nWAG혊E,Bf'LY@\ZɢcmAKzMiQcIω|oQa! xMI #|FMj׃=#†p13Ϋ;:AvCYV"ʸ ӾٝlS˝wn’kW\!|N!8Hl^u[d4 ?:R_Kpwm'%G7n8=R40F 큶e')Ps3{#,&1y' S&/zmtK$FߘTG<{#ӈ}I*5"䣰2!$?<&Gc( R.D=> ?zVݒB1Qȱo ! / S@u(DJw 4B:U訿2E9Zc\x gk@ "LKXMCev^(+59ٖ>s=-3hɎ~ =}CSlW6/syPX7S[f\_$(Zn2F׳}|/aP@.ovv0ģtk*}<;!*ltBM4|~nfo–2AͿ B.gQq/|ë=\kU:Ѕ%cU9\h-2={caʾ`evL<9K!'gF$nvOZq71.dЄ-E"ΎAp+f <)!ySbK'5wkL@̗JƄTRzt $sSߘ۵Oc|YN(ea]Z-z-zscV=*]#[^4i&%<2+e?g6ǔ6\^fМ$/ ߲AFF&ex*ƌ0[t|+Uw}޻z֦֔jp]~-)(egY >v2Bi ph'|Q.̍9NYpؗX Őϻ=[̛&AHCߦ%τrgv_/$8ߛolm:Dy~пQ=U<^g{hܚÐqZNH?1Xm n\(BDvܤ8np"k!0oT7naښ2W&iG j:w-.GDh0ifrIwqy9&5wT ׳ZyZ˳nĬ1;vnnS=39E9fZ1. +=[!qlw"9g~7v',L9:C\i,hۺB\L[r a~ğ- lV0˸obAvx88p+M( y5B!'p1T7|DgBثa6F蚰Ya!{ %&vGVKg?XxZeNYY9``u~tCZJI EO8 #Ëee'1e0.h=XqŞ9 o?߰y Z,yD[ }nomEhb%+=+Fe/yR %|޺gK*"{$)%Zϗͣ/:ݹ/ofQDX; ¾Rw5VP_: rT6<"øL9a<φk41ڊނ(6>rkdgp+d'\&֩aឦQ@Zh0GcAF st;UaxI=FlњuEҬ۷C_ؽ hԁs&݅0ϴ(NpvQ ^~ɍҰ_`e2$'VCU 9ڪu8#C);*%+-w\wN<,cFB>0#*uK\_铱SkV#*FE 2Z Y.qSuv |GSe Vu ]p'?`NN$\1[r-M KPFu,8-`#qs%޽syĘiȂu$6W?,yK_=?'Ā=Rp3B>^ץ7p=abA|i@$R5eb[#f*vZ~ʩZV7< y.aJ9Z!o\xq~y+`;Ɏ)`qfS7L\kĘ4}yc91ΣVvk!#rSKqCt,*C%ʏXk}; ?Wą*h`Icy 8l;۳$Bǎ;j1<&{†8LV. թ2+>Nv+pT_Ŀ[$vgFɵ8SՓCPŒ#~QF`l犩W>5lW7QD2Ыrwy| #kg*͐@֮"%PXCAxF,)nY0JTdD֛ &C\ rszM B@ &pvu4d|^6)EO'js/)b4phVd̨JOŎ`ˌ77J3Pufe#EeL7,W8H f[?v"O&_50@j [/'pnA.RD-daF0y{ h}n]XdM1%>v253mZ7sA_a31JAFBI#ϘV5QQ5;ud9ɑPp5}Z@ǨQ$cl!HcWgݐ ?Op}_2#ks42Hͩ٢ d֋'t2λ{Bc0 Mxs]+be`ps-!$LRY(p*=5;$F'r\a"{6MZb’]*k"E!J)Sܽt+ C|bd2А=4-]3>l@&=Ӛ`l<靹*XYiAI{trC@6LZY_ !Oe㞕 VVaR BmEdhr{{=/ sQx a{*NE55MbB@-X]w~b>G).zVy-aiHO.[=f)Oh?8*Oy%*a]T w֮Z'<.81 !pU4N:h["5_>7 kY"ft+b-Z LR]ydbozJ~6%iq*l%/yb# U F]t$8~~у-x5t!0|(O]@}Kv a2.)흚f\]xpa8ڐalS"fm4۟N &>W31Bd7d$mpY|{WFN2{]ưt`.)\ z]A-5NM\mxvK=D%,$]/WnB8 Zfk~ "yM;t(b lCǭp\ ͧL+ `DofDž:RsC l}RZd%S/(ޘ89Za(v*;Zm"z%;#yB0*MNR({0Aa@N%[[)|hJ Nୠigpm煦`8Q N|;+fe9c ,W`|y|kT L W_("40y6FBBg5j =(N22a&ɣ׿rˠ'e3%-t)OKev651^_xo=bc!%Qh-TL[4_ae܃,:KN]tb|"N /$j7נ 4džގؕa ܾ2_eլ(m7t fc:OwgcA 우su`0hY%7==ApS@@O:)EZƺ6KCF?Ќ[jK_zQoT;5Ql[~3ws\v.OU= 3̸}d\ހꉡ+yk }Aᡫ痃WB'g[~2tl`M*'2)d

9z)`I℆†In{c;j\xjԫ5؉_6t$)[|BO#v/Z3TIE`e.n?ﵢX =TVp2{gHie$j4A $UW ##UZypV$aMxp[oxYF7t>otiWq9")lROnOdߝ抏^@BQp&=ǧ(]zpZJC)TPrnѦbbjyN}ē>Lo4.Z/C""08Dlqy[w6v_'yR. n 4Շ[DÊ ,0:a,C XMHh.Mɀ2ͧ[v*ȷJ].چcxHrcB/Tq.*x;jqMQ봱tƑOn]b1'&ׂ&o_ˎp.V:f0PZQy;ZG|QMg39Ξ tNb񰤿j"D'8ZON-9&D&rU̲i_eqCxC4ǛQv ]%s_ W͑YMh>u8@Aýu} gE4_<ύ≳V[g8 M~ ťHII~S\t)c ȶTeKa-Sbuyt,{説7C#7{rE%OZ&WH} 3%q8A<35[hTd\Tx%()Au-V 6U1F)͵(mI\w/s50ϣ7^j *KR,4Rr%tkxִcj lQm(=ifx[Μ{59lKm 6C(i>)mwP[pK?\yȋt1AAQ/~OLa*iV(b[*`qlPeԏ-T9R'xZs0;hߪ®76ikK/?{;Ƭi$;鵈rUtwaߪUK$mLG(c "G.1 6<T@tJZ4řIch?TukBOVY/XEwT6kij:>vS@rzו>s׷"n^#c˥71dtk9 MـJf ʣ_Ojc^= D䯯dP؁8DEIȝxU@8g$)PaEW r_=IgB7R'B<>;ՠ 4%) ]Pe@K"Eogw 1Rl=X|ШQ"Zk[8ݏj+th %OVCRb]L3ۮ(dņ{WjA7ac|JJXXE8N 'ֲV+-<Wq;~#"T/Y{~{Cs p6 p/0nh}R| _)*<}#OzkIcϝ i'R:VQ֓[ ')aYܩӹaouMڤ{01̚r(dTؚ en>@ªNU-HxZBf+Ty(Ch\@}9>5YU}9l/К]VH0rJ΄,ᔨeiQ@.G톽uU'3m.Ut|ly1_XL 0#|Mpq%h_dq[YX:>:OD6l=VZ®2b|#fHYLn8%!N]Ŗ/ɒa!6EI%g0C,! 6c%ݓuo Vغ5Z8}s9$޲F OS ~~p>1SvJf/ʭFU*>zzWW&dOH^|ïu;ؒ!WJY1XFIin{}XY3DT&;t،I 7I"}P^8x:>ƏJ|[VpLxf9ֺ0s n@W  WLxq/BlKf'; WɟgeeʩXGNR:2!+K ńWʭR@j(3_*`Ska[Xh~_7#)MWR˷B }zQP$0'^pI,"jer7UabmW!'7fA=BL& E;~ba$Шi;$L &%t^cSy# Zg*%*'eZ4n&QW֞h H v)Mia!Mƒ;:zw ~``8K ?1#gN:o섏D=ғ{ OxRDEHB[#O߁+0BS? 뷃>@J' ~I1i?q?-CЦj(ڜЙ_W\aKQQ^_7X;$\L[7^`E'ݜKx[nKe7 &Q% ĪФ (TV= bxfن-Yy hW($ 2<2.6bhʗ"vf򘭜l,!sK^m _-~2"x*TʵҊHq߲ݑ4dJQ7`R߼Oʣ37 CUH-ӣ}Cc9Z!c΃G&mĹBWK'#6j[9M1M*.SfHb&2 ‚ЌW,O@үI9 l~?n: H a,~JBn_nXϰ]g%Pxߚ0@yB6)݅l;._N6oZCxjһFu~q4omEN ̋dh.o+RUޠ$Ep?GFPP]/R:פR Q%|_e2AV侇3b`LqF ~T94C.ƞ(|ؗMoI^jQ,qnOi1;%@R ؓ2ݏ_KBpE߬r>bGFutLG&i>#Ie4=~Z(\{|ȚqiMEr\pTFZmԝ"RyMuаnjeP;t$im3J\)ȩ mv̋$(Cf0Mpq2|_+x}q6ss"2H۬,Y;T諽83n0G0a :?+{2#sR2[Pi㈏ H'w'#ꡌ>Wٗ+i 1<13:u=F+°XmOS;6 ̣+bRl"6N (4%%^x "#sLA@B`'0JfF@XTLK)RL!ù`gVeqnvkCqYFtom <bX^Y4Cq鰱19Gq]ۋ'i6zq=FsJ3WjN'Ě6Rn$DQsҽZO3M2~ᅭT;`(٦%[Qw Puq q^F ]1Q8DH ,ے?Sʨ ":([fN 3Dʢy#,4V`Ar|tE=zyp ޱmO_P"4mSF2xLW߹8HsQP`r3&HG=rx8sD, *W1.5>MO]k+”G0tb9C31C$T(W$-ueYl~?~(XFԯ7N>0*o7XSj.+P{yb wOc)^`uC]tZtj:zg=_l}TJw9u?^iU/,EfbD'zdAU\H<=V٩HrUQ:JxFLg=KʅvHiK)ZWnj= $(P+"a#g/?9-wJO&k#+dPB5IwE di'׏FRu &n sVf@W cVbT³Vs9(WJdpt͟H ;CMRe ϼ:Z6nJ* *6p5ɖ%kurqHBJ?YvnNEdG , QkL?TP#j!JKOyͰx PV%#ՠWrT|ުxf`?zw\5wv%"T}E)ݧ`[0")nH Zy O6 [LO8+wK6Z]D S+NhUbrXMdK\]1kc}!ytWؾQ'f+UƺCۋ.wϽ p&ͼLGz|0e.4D39'؏CF=%{{` x.RJlamл*A []p/~%'bcg+V6\";Ѥ;MZ򎭥)dswgߓBjIu9~{tv` yd3s{6c, O]{F"ˆ)r6 dƪ]"l512_tP0Tދ z_>3ZňHS fC[ s@xbFk6mzq?T  A@3Kkz\Q*d'cW(tF6o#rLZ)ePGP@>epKq+ik;3:jŠUodr2R<;TwxCB n%_#u~ʆ%OBQEōPSu WLbKC1@Lo#{&Vz}Ŵ"೽dq:$8uRw[ \gA`aM]}%w#l4ÿv V-AF{.eE\0_}j|!NfS b"lCr~B.a=Uވf f%cn#8 l\eIy"nn3ߵzcBqGaD>Op` ofYSA;''9y Lãm@&mdbJVnHj(BB|LLܓFWfO`. k11Bt7c+Oy,K_ *>K-:HD=s'MPC']u?Kt-:jkA,yqc`ބ] 9 \~Ǹ| t&g셮Q됃jBK:q`31d1V;tƥu W-h}#=eż/L| zKSMO;.Y:L}&Bb !Y.q0GrLR-nXqpdU '.I"TXM_^B,ظ~L;\^&O{uv?/{zrFX^z˄?ڮwpjyaU2*S,]'HUE!1g҇ţm~$b2R0yLR -Öh{YK=vZKWb{ϾR/Uw+5P6ʹc- f ƼY!8xy5ޘ>!x[ |l [ >OWLwYٞd:g#_.4(lc`Y d$ui#t tp20)h W2@FHP:6éX)_Nm἗b0GBL X-jiUHBmw^pH,pWzW%IIV: &eVX np[X<_ RBgp-uk@C./]=7f,i%/; ?cwДm^ )4Ydp>.YA~ϛkAaq}^RqS^SV+;b !MeI F[x16Vh> Β'.›s}ǚQT+LE*'#KaQLZ7V&m= 1;}$%PdaJțv{7;AI[3ĐaIm{sE6O3jb$9jTlKjQ4#HɤsnM䷉"# s5"A/6.O,3+J|Xd cw<@ڢ"&v4[z6j1/]Brl&&r¢P',k@9a12cVmDwU]{m -YN9\Lt&ȑ}(g!eC8Ŕ Oخ( *85xˆ&7ůLj wu<[t,j3㟙SVؠ(ֻ3a#*8Q`aeo:r]@ 9.&C/z5I o(/˞Q [8$vɁh28mM_נ..?lBPhKaziJ =wmr6q:8':r3b9|yQUei3 3_b,7*  @eLy{;Pt "2!Bdk[Rison BER8ט͢'fR"R;oqFEr-wx7\Lڱ6m*EB\ŋy\Pm[אpafx^IؔʮB{a|b%7a`60({qBκĴRw>S!Tlަ8I-+mos)Pd%XN#1Ueԭ0iTCw3Yw 6C?Or՟OhN{'=}=J04OOdUQd. B^|4c.yYHtE\F:,ɷВL֚%]euWs%tҊtH HfLBI*]ajnrYLzSGAi?* + [3dItϿhiL`b#L" _xXC1*?"ڜƏ9Ǧon9Eha1-wCMN1pOR =\z N @m?>;*B>1CPhF9O%`& ~/Gr8IܳrUivlS9ٮ@BSEp7ϛ!Utcӯ;[kb!EnNPPneQɭ턎 Gqhk1dP߃Bt.vpQіn[ M,5 t(@r&t;- 7V*fX1PԘs[iꞭc@T-0=~A y0ҾYJrugtKn"YLᘪ*- judqݤ+3$)Ci_ؽsyvt-AnBUmXߛL!I5#D!IY:Y,w3\RΓ&znLPIu!]GL8MSW,lJQwFYࢱkhEG@`8&103^caAH}uI?^wB^هYf4W,ܳ|gQDLX@p϶^)ЮGl)g=] x[9[!O%Q-R`s0UW sh>Ƭv"KqSbkLPhV(2DvrxRÈH/٤5m@ &|_2)c{ VW>uHg m ?‚Pj )1wc&KȀ `7CnRl aѝ]qjuI3fy#P}!'2~ݡ lJW RFK@w9ʺh S K[ V%k#DDb1_$F\T^LpXjz_=}@B {`5&@5g0LS*'|]Cj̋8!ӗSSA-(ae(%(ԗ@0qxg{\+qPUfE JN,)U͔Ez|[[a.C&)~t{kEf-eRG+mBƏ8c69@T\u,| **=a1] ?kR=>zr;SVW-m-~ PPJ/̣PvVK%9=g6v1d`S`= ~빿w < ~naR  s,:|k{'{1µ'{(um {pw};?A;A$Rlvׄ^{T e 2ax s,bڪYjsM)ۻK<T04801Èq[yd܆MBw:ls|w=YfMl~^\\i祃@pY)(ʢ>i3wi4Z$k fqN}v\J:`j_]+QNu mHtUdc9DŽ:3=4Yj _\4+эp2 'C͉aAK}$1O Pk|31T 'a?xO]-Κb=?YUDR|[9d,&ErlV ##2@|Ǎ~w8'X ,Aggkav-V@ࢴ"иNed_H$ih>o :9C30]tz)j꫅<4&(s^fB;0WWQ{k+%yVeOOӖCa<( {]Lg5CՇ58}9J-A zJcIFz.USц6C`'FHB S0XanѰPƧ\w9vqH}Kv` aJ7.W_ĝPo׆3&kCb!Β>mC,L" !.sRᦪnߠTpoi{/N@so,aѭGwnۏz~5SBwQ0(g~SyXN FamDW_E@`^? mulaj#+>iӒ&Ϸmu卜]ˎ!Mdx芢Pii *H{Q~ڷ#˖YHj#sj b 4Cq߉ꛢGkmgm;ʏg|nv_=7Mj-Wթ tzG6-ߍqK CkOEvѪoJK*c\&/q|DN&Je{O@݉s?G)iEa2N& -+ "rPKvu]#k@CA߈͏Wz^Iޡƌio!U@mDcFtf$B ϐ*{sdF,0L7, UVU#dŒ#0@yseLp'Ρ"oJQH(+Vm`ʓz 56K~J2"HDï +ٵU:!ϩ/ơ?CprQUizZ1hE4+oNB%l He -6C4mVPz/u hPSO3+35ai8B1>Ѵ-BgͮHܦ饯։R/IBA?kwUHy$;Orʝ޴-"wB0#,޳MJ;E&{^*_st XNĿH X=0M*Ĩ/%8p璡Μ`-<0"G[!Ͽ?:)\]Xݽv}&aьBb;Yf@PctB6|oRqJڻ?.6 mGKg]cUI5!}Qm޹w1v,)%p5+[7R-[e+ 2Ǚݕ$xa͚`˶1d`ǡ¥"`60ng.׀.N6Q#|:G,M)Z1gJGr" lMlE2H{܁'`kwrׯV'-k$uqw6˗׌}\0|$,}͸J)v-\kTޜߐ1_Hpa\$9A gٙ7>cR>-R/7OzA5VnaFw*h6u8Y~Vx'x#ab^ Q#!VXU+郮=Dd}{K~Xwv(C݁ޏ uNA9;9w*֖;>[vQ=p J#i!྆ƚkS[xV0B\V ,2;%r2dBۯ{?s 5Т.#ңQ3?ӍEmZ\$sT^16QfZdJR ks^V w+Qk'Pb9 @f^ս n m=1OȐ0&I{H u`5&dD1J9ߧc<`nKnņt QL2=\? p>=' YKlS()L(rU;|{'ut}CtQ7Hmz^ WݤȀjb2hf#1b LƋNB`0<пa2JOS#q.yʽ%hdv58kFU='#yaOJuD̡5znc9Gc'j*v 1S'ˮܓ Na(Sq'q8Sd<6dAWю/ȮrLP@'N~¼O}W=ǵbu0ucm# C zY:{WZrJGN,_/Fq3؂dWyC4@G{nv}= Vnq[#H(I.h9i_8a.X0tYɇ0[ogzrl Eu,-:A|.*~ݽ+PC`i-]Uq,QCG~q*}X^;Gf'Ȫrqr]'g#k:fi?7w*d_}aEݠ51uZpⵒ,@΍r yDGI}]  /J6<  }*9-_= 3#a-~K?>6ɮ:KϾ]/d%w[_3IߤSbC&8tWly@oubzCF4 {f{*&(_ϗo2Y.z3ǶGc1ALu"4}dCz^d]36u?kJwk ǃS)RLl <ǡ"D"hq%PHnM 4:1bg;Mٻ&jcɂ0P)XK??ltPyݏ1 ĝ}d.

Z')хԞ∅h"(x`0+/bMn1NG}?8oQHc=W­? >_;dwj{s(tKajajd"@^rCaUI[V9Dz>|:MW?W`Pp܌Ҏb'AR|!cL=j\eQnEL7?sUGI= BI}ʱ'#R,j<})absb+=S" !iZQmR~q>PUY66J넸ÆXύ,Y}2ettЅ`}b'S{37 OEt<[Ag Wo7}N=B}an'EMȪiԳt܍=DBMfOpwc{6Yug) 34MڕIK;Hd|IDDuŰ{̱N\>zT-.t&D$;?dEK2py_- E얲/X$+ZiHہ|${ U%\O1-?߹> FĂ@yp2NCA2|y3_Qk*]K9)~"ʺ+.e]dazϬ;JZ0L 1Q3*˯ žaorx^-m9ۅ^=dW(9щEEpR1}kԖDuH?eF}n}:TSE[R>zk]lܨYDx\?XQSea+~u(S /tMue d=V0+:/XSq!eM\Ѓp㭣jLqU.jWMDc 錀!ɠK7.~ Q^)E4)V]jÃ"|ekф:o3ԊPm9B1/dg/D̈XmWB*=ӄ!~JKҊڲLt< x'YcӬL' dLEJ) N^Xs M2񥟒#$O]7֐NYZ9{:QIah4#$?NBЀ3W>P.irlȜ}Zi3%0 ]/D35of $ýјz#hO!ugϻ30iz1_:|U&@3 e1x{r60DڏW_buWt[%r0kK]1Z~I8:j=`T >4C=*=3qʜ64$͚;26lB_UA˾<328Jz#ߖb2=X27S>~WJG[D0I}f(R|RϽ4Y8,?\pu W:#Sۍ:P.f:|L(fU t:?;iWLI٭," ]F~3P8uM;3_A,'2wl6ݞc ^L8l!~LHU]PxnY{Lk,b-MϟBy݀B^ U]~aV##8)4Q/RLw?H`|eBlXo]\zX(/v ԤW`iʨ? DWH, =FuiQ1~Y\d5k !8ue%K‰M>`ws3qL:5$aR FrOzFŲd]|S,y b l4 V9 6fnxсAVZ!Ԓ^Zh_aSXAnyF_).)f-DVEE  lkA^Z9Zz>:)H߇|iӡ!7)l9gϵ[8 \nL]-d&e*g[.j!<&nr(bF7~1pKCtNZigB=+yEr:o8 "'; c@QG)D4@/@[,2uNA @5^XDyr8;:>Mp[A sgcG=ݷQ\abXgU{a -aj\-.[XTszD.FG3qWf3[kJ-9.Y:O`oxVI{}p&XZ;m@`"{>L_[,Z{Dv/nU-MܿVS )o*6 (0ۛq6'K4UTR5 0V#}$PljUHEln@ņkO:MY,n_ ܛM ~{Er߭T+Կ!֝"Z:q;/z" a$D3⏺_sЈ7ǕE9{/5uCZ3ʎѩw(gJa<oŃ/hC-ab,a13D27ϖm6?ax1s5n͔b;c^-2x*OHPTStNvh . ktx-0p=#〷Ww22 f{IKWw^SeX)UX̟/CY'ǧؘnp?`fK'ٺy-YC{zHld5Z͵{fZ7u ҎryIB𐍳 iBJ:fM%t]wj)`fҐ.iFqTѽ : 5* y ҭUmcX81Gp'l@& ,;CRh#9Yж7[>2H@7Qo\C`/يu{̓@}qfJXx3)1jHRm-i`zeyzq@3[sw{WӥjwC/f}\leS1( |vPUN|*EdfwbJ~#w__p죪AF&' kt0ڌb tSsُcZhw+%d,2f`5,Jm٠*ΧP1Dȳv1^& 4x^b,;ɼQrcylI:l[LH=shM37̻'{Рtf 4qOk+PKP0YؾSyWT-߾"KY:ʹDWr{<A- #o6ޢ#>ے wj͗僅F_!hu?$J x.&:q&/f{}rV_QNL/?ϖ"z#E"ύ]E10$15\%*$ u^\B6*VǹWuvڍ?ݠPR:&)~e"XPyd+nlEE3mR~cSڟygJC-3yHpRR0H`UC4^ uXx&Ay+0uTeB[ex)$L7֓w&J/ǀ+A+/="E!-g^mUp'( fj‹|}q&Ug]~10Ų|EmIuQ$:D7!N/:Kirus݅Q6BP?+ZߕhV"UR%2p ) /lZѤx4< t>>ljhpSnLk>Ӄ)'Q>ŗ_Dẘ#x.`B] 4Wj4H @*5}YvF +h ,+XGŝHYM~GpWevW@o1٧m?ju\dW;ٶfѴh(/{ R\ʮԗ9~NTYӖHPeu ^sKtCj*DzΞ6 qe;LyFieDA'8 bjtdG`XV1DRIx&2޴Y p\>w_"̾2 Z S=nV^ي)S&rɯ SsJ_z h:x.-,>#qKyD(JVcmy`"YQ$t4ɇW-.?e$k9Mp/65|8[,u)OiZ}&]mHUQnC.}V:^ITqoaMIrlb݊齏 G$gm3?l:K2WPT'#Fay]=.ޥ-y y[ULmTE6XX:1(ɁKsQ$צPEqZ˵T9fIX#Roo ROzQt?λFYfR@HW>" ty /CڕkMߌhH0-:tL\)wm4'{.V(c< @==.;;rcq*ՀiZ`5:t빽a/% X=$![q8_8+TZ4e׻ߢI@VUEYB-6qd8yVrZDF~#QnV. $E%[Ǧ 2c˘X2 f;G"{`^.$ {dC8ipϴxv^#_@@cF.w3.!U'/0n|a0$.υ 9Gzl6|a=DZp qTYC]$Is/3Цɗ*ӎ! #_&suyn2o2>;qZ w!hIZ.vqdn‚Y(ۮP\t2 Xr+6mvMYIcyW<5᫒:l[}Y 1TTwjB)|ED _b|@>kɉr>gNI1^ZT\+9ho %`RBm&#䔟,0d*#B6q#)9$@5rh瓝v;|o#͂ө4mdHFEM^)L) $5Ҕy1q8g\V*¥b*Rmp|ݺgzYZ fS0fgXkwjj,ЏG JOi<ϯP0Cц6h5|p";d/ r-0SN<} v߁b|>di| Pb 55iS9X@+y$x;9oZ RW554Ƹ kYunχؘXD*OrPjɨm*Tj̝]aHlҎpxQP 5E=P9J6To,q; L3 te;I*BIVM C% jۿc-'W=\W}Nl9[v^-@kQʢ~];~O1VQ @v;@ʥcQC=vsJYY˯>]||Y=q_ ɌĒxn+ ; uaɜvq @ % |"##†8&Lj, "VL[f]nTQ[nO"sZi~~V1B0nZ']+P8(3)מּ< ;hU=jd}A-Jwbp]y@=X6uZζ99ZtpA/ZOño͢QĦ' ⦎F̻CJ*3O@!KiSdz3׌7NO$@R3!a'{<2NUII(ɜ@ !I{T :{TD&ߛ!p4n c5٢/( BZ_u~}=pMA6<)v:YI@|]xZ֖Y37 Jcs*6+Dy#9]C\aLoF5!jr"LqƄC7̫<@awJ$rOL8.! Y;_ Hz8p*3V7>(dflIM;6>[)sβbd9*K 2@)b9 Qg4(]tT]ǐc Cܚm%iG/^"=$;me9YD ,fKE#JJ}7}8ٖA3P: Hi7Cu|ojIeI-C~xxO,Rl8<I03îw#A5\xXeŅg #0Aֶ*9l *1i&N'M%_:}Άq1wm1|?)Eމ*-N*Oqf~!ˢ #aV!;z\,&ed5Vُt$Z";fTrK #Y A5B Ţ*oq+ 3&fHȕK4ƃB~zѪaD& !8cjCYÆfif2Qb&c.!)Pƀ[+ [f"8r{ r/*gXNʁ-}UQ$<1뺧d棉u'f/ar ^)j|51mWM'SӍZcH;DY {u/e4):(eUɐ!34#x{ϯ VaH!I(u|2HՅ}uV͏|)JEbFb작EY^M2֪IU_Ȩ5ogWAHA7A*H^@P1{w璝Vi'Nm:s~"O%S>%DKU? WD6\Jpa*IȜ.kkDZJƣ:!/-Lea\=b?y KdA?~L[-L3:gK:VQȈ'cwEjhGhY5:Qڜ*7řb7U(1 w?Eޓ]BxTk [geOV?n|jR#aιܾ KWM? YQJ?< _xVT*I1ϾFg-לoXaa^X P1ލյ;P7]P]\Bv2CVa3 H mK9GĶ̫{9=2j?G/)P33ʟ°.[8`?#<2A:Y7HG'an͝EhYA<=k=#8AtG[f=|۰caשN`I'A60!dn ^5 .F1mo-\xA.T♔>} [2,f>Rs>XD0dNH.:MCEN}c@Ϝ3֓-(3y-7eUF(U|qBY F>oD L>Ph 4>d.)10޷Jsq'&0܄XA1$,ܡ pO0Q:ۯr}%ѴNA2Lb*ɢ͑R#-Jc3IUR |~RbsTݲų]b 8gw\v,d]L0glz0%mvB 3?xIL{긛~:J\hEI$\N\4  HUO`)~ %-[~cb HCWr..X@fu_ fvIP3(mEm t"('Ibwq}=*_S3qNRM;{86amYTrN֭(!5TGH0E\5VGv$'~l̪sMԸثUaah-" *@2)hےw:FZSQ$mu WKhp\LI'|C:*{5;B1 J `oӜfJn({,HMo%2RyzC6nF9z'͆% ly}!Q06]»,$>eCb KK~E})h>+c(zox(4t`N2IPܨc#NEt3TYQ>Ā"IdC4BJhdSmGL bOشzlMK8t8ƹޕXy H=o;*Y+S1 OM$Nέγ5F}sF$o~ўw\n7A0z?ԑ2l^7f.z)>߲ơoː8f3lkqDى/wVP#@a Y9OVh`AR/XNpQ/U T?)R?lq ODi LVbxb!4}YTax1{E*/$M1ypDBN1J5 դ~ړ9[sx~_hJơQ\_C!fAܽ='5[-.L H6AYP|=_'50H|WEe|`'6H Ҩ(?@rőť4:I6WhDpQڄͲF*b^Vw m,p< o  mÿąϋ|y?: {m"Xs w[|A죰Kk&cGNkwV{)&{>q3L> ,Z4/6bCõGz(W/=omd05CzM*jc|sFyy^4ځ1%^V:!bmo75.\2.S' 2/00z qʈ`3Mj=~ ljF8>ߵ94³&uNۛC] ke}6c ce(ԛC>DIN1 $3r`}!Kp@0ڶC_x#h QtEUg5K&xOWRɺWҷR솑Y'Z+c͂R*@5!yC0.,[tOg&K}Gl4ר@9(PӪy8YG/s;`9^j05lqv';oqod;SRiK_+>}+P[@ D 5ɝlb<7_ V" AjQ\*ɨ.Q=o H2Fpj3T<7K/"Rw9PXy$Sإ(yT#w؊!۸B??4$fz2peyA@c PWl޲uYk`:56'V>N!j9z 1aM\ùJª-v2[˦iw[4=;uJݓ}Ia詿O"PZ q˒v,@=mE6 JX/7L$!8U4b̲l .XvOezdž갫lhkbl@E#"&|H\Dמ cQZBYspԪ P 5ieNyΟ#@=u ۟K!82R< ElsJT;u: A~GW_70eE(j>9*̶rEM ew2?R}1OQbQf=Je26K RzT_iL?! !i: *Ӏa uqbGVgxr6@,H/_ k-6+banMh/ѓn0GjUN `5r9K<~],NYB^iѕ}T]+`4}JKi`4JEqŠfz տOc5|kQ4AQ&Ɛɺ^I^+>mĐ7n{yGbi]>XHQț;<+ze`%6|y˖I+ x?놸Ӳ5$^I11{,YR^p/K:gҋ: VW kl‘ϫ)^{J{h-:J0yu˲`ovmNqвqʮچ+ᲔP8NF}XZI0U(I-G`]rJr琖 H6 LhaԈBZL`8t?e;LB 2_=׺;6pC,6Zx?r~ t:}/bT+wœ>wq1}E{qY=s6k.+U"\qJ{4Ҋk2aHamLtpTU)Fd]5 H7D5p?yi}V;`LoZFoO+"*R?I :3K(.7wqZ\g^i  SͿqj5U#HOpdu#7PV{14ƆN0[[3E{!1WC7s1خN:`=paH'1w,wZ»¤1z@p BC&7ESd?i<%1Rl;huf;9xw8VKԙGCgEd-ݴ`DxItrl_Dg(%됆#J"D%W_@PQ)lgP\t.8. ٝBoɚlUEȴr㓲&D'&ڳ#4kAOc]16|⊬AvGҗG ˓?\[$}@P=z3:LQ^m}! 'փ!< |Pг.q]+-8 (c\H٣h4m[(!T9DSq8xwkGr5=| oFȠ*KB3_|䰒jCMa6Y\Ƶ en`0j#4MmT/HpPBpʼMzJy - b*MIS<^Ǽ5Lة"fTO&whSFٲ"ۋv|Ct-ѝgHtn7٠@^PbxFCF<^s'P"CY t-JdbҶr.3lO4O o0C5ހU3A%|S>E`n0tci虐]U6Թ`iRR,.rwJb W`[z{Vҽ{wp-Fߏz9?0n2Z"γ1&+т+2-({پAI/DnfV4 7yu{vg)w-7fu5MM>B,ƈ@WGxn2?a0NX(5& R)9U/o.i !Y%6GU74;H|af,swOzj,lII!]#iố*gk2.%Cxm6`Q`xhtͷun^nmQ잹-נ{™x <٭%$\JI; fh~ptV r0*3x#KZT+P9Y܅oJc'sk`'-Y<5e_o#yx4!IBiugw'C)&7URF$Ɥ LCJb򨬯CBF4Ž2n7J1D5n j^"-ɍ36ϋx3t'!p]$;Z(_&f.msRmҁv=*}1noirՄ3S_.XJ%`=r \1Bf 0Y[}A󱦑0?'V qo$~̧8NF0FĥA,g_r=ڨ)i,)oea+lk .rgl$}"գz5;xU Fu 4j +(kzWT"H 23v=:K*~.xK!F)"&Fn)̴ i {2 Q9WZZ:U+Xa~-n œ|+-dzH{  }'ul&1;q- }*VoOyW}&iNnbVu!^Kl4z?=!'q+vBGGJiE`7H=4~_Zi!NT'u zeU[sTma4OTn(W-& ]6Ykdʌ$^{řy Qm3)Y|\Msc *܍A֐ȔoE҈@~1|{o0ii Ang,ƶQo& &L.%# XZ{*ɠšuZ~} INE {!1BrV8UnԄɮOjIhE 9+O>{L[Ň-t΅Ri)c&RS nVxշs,*ts02չ@ SB@RMnC{K-#d-l-cA9U/ёϜ-%N ?L9d,YC͓W?ʯ8|y!ϕ"Hw:|#R8lnǽ4XKJU9WT"+D BB*7Ġ6lhpq_qٝpk6<`.DOn/ NB.jІ>D]_zɁzL`ОmcaqntxD蒯MF]L CZHJ2BhNqFLZr'z 3}1xy5omza.' k`퉛.BfV_Aꓢ`4cC} jxY:swa IJeY[ ~l]tޯ VƽkP15ŠtC[EhC\歟e>sel8q'\1I'i9@b _= uy;SVJ{M},YFŘֹP'7/q0H)ڛLGv@8F2J(>@4=Hg=CaKl7G;F eIZZE=/j*)/Q =\2*AX_AtCd:)\D~ND̖~mH;4Tf~'VicW\NA3>Gl{s[hUe@IŊI&wL/L0ʆҝJ..r9\!`'6/(pSW˰I% X4=i?֜-ߒ";b]#g, auxjo &(f\wvz۽[%V!KQ kh=3sTluVyDp3@61Hzđ Ƶshe21 @yuvmє᱁v$j8)O1p`x-gG0AGphO;2q^Z̀EO*4z i.@eh9dUUCBJGE۠_[u,ټ]Юs f jtRGzF&RW)P+v‘9Be·7+YUQK ךPJz:MÓ`ʾz=}^6j;*.@V h;P\=[`DwsՔ &xL3 4p7/6Uu_j)+!)|ϵV68 6wo! n5 &0*|phq-!.%k!ǥ{/t\l⁇qٵ j1F(r,$Ggh(jryV)n/6qyᵠ)ɱ̽yK _@wqfܭd$NVyY"C1b})RR3шfk oX1zUwg[-ݪ6aB.~K9ݘ$(\g6F7?1pD,=Ąx/LEVۊ 5m-5 dÖۣB|z_m|Ƣ6dwe8?!Ҙ!/p06B6@ [ΜZf4U\*H̑!#3I#n;ʾ7#<2]g[N|C~ z^DnOw2LMMn ɭ|2[YBg E8GX,%Rb0mЩzDZṕXA^} x50Հxۓ*"^ -N4L/lBI"P0$ɺr/~CAޢ pBuN YI ThCy^Npqf"]@^8(RW]h U~F5ciZSTmjO6 SoW}Vl'J+Dɟ_4MN;>~ʭ\B'-Ѣbm `Hd~ٵ!3~2@|@/i;^R ?B\~$2dFEUpb тt'WțCSD;g#ꂇkG8k(|V057"/*I&*E02 E<Љ8ŎF^r*J X4UFTVWh8Ȍ`T:2wH-횟r@E[ I_BE-4qN/4jFܭjL AF(.j9$xQQuf͛GfWDDLPVux$6`W1ϻ_,`X!u~Kmǧֹx&cT$zO up*0U+WgOFq [fohb%E8Rv"8i HP-CRރ&ɬb"_O,@lG˵ AɧĽ*8U7VJd/ZS{Ĥ,߽^G 2^AovxzefhqqB1#Gm!9@4߸o89 d/q&`b_LfwJ~i쥑_X:u.aG?$H%ޜERW*bTT*<$x4'2jd_4e2YESV*Vv3Go+em?2p9-i-RbTZِ;lh3 E"kJ:HB$Lvx)™\ U[Q \پ‡M#$-,9,1yrm C*H7_*6™ Vҍ/Dݚf6Ϣ3Ҷe1 $|i.>Ap7hdɡEi`Gd*x(F.<{_= y?z@4I/دJNQ:xbHuRHܼ{K.4m0vEi1v+ 3jk (jsTFok{*}ÝҜiR2Ďڦ;B{MMT^;q$knʨmg:\3`>R6/A$J4tgM6՛\;Ud f@VAol]>lWy=dHZSUlk^ʌYʦuo}8+ W¦I:!yleܵM]WPTCG- v+,8QK^!g.{mZz\@նwASMu!D签-yLMpmUCG)*$S^Ï\ƈfðmȯS`])d%QO(h#a/^S6䕮y&1A0JDjC1mb^K[g Iꁒ.j󵇥Aj A$P#<:;/n gZC=[O[ֱeK!Mg‰i8?LEuWZ F~[F+4,N_9Y 6vjD ,Z DUbD'H&mق}Qku5A<6j.LYM [%T!K]j I,EgUZG&.#%+dgN?mǗ45^Z>d23qxHIh<ǢO*:Ɂ xHyEWOтOlI.[Z[6r38i=$`iЩJԼpBQ39v]ZC]9ڊ_ǑA  Fu qXmPIIf8Cr2"lm/=~<@;pi@JVfk#jOL#Hscv:Y NiFʋ̝O>""uZ|W֐5A6=t97uwt7=d/6U#s|e y^9 BgCpR+K"BGcu v#QI{XtjrU>bZ#xYdD!F~h⾋IqI2sԊ%:xQKxbp}cj|c^ڽ3x__EF1,-LTX Y<'\ L UwwPYdl ]?U?=@gci&q/'/iSh6?.tE!4ݳ2+ q1vfZƕq;K P5!mK:ҶXS)T:m]7>QtJxg 5mNpW"́J :H"B<۔7(9>W]IC>VgW;ؤZ&QI .i)g'm(yP>A.kuj`]:Oݹ5 ^>$d"$TNSh+:7Rg_a@l<R/n1d:5R?+" ޏ8 G18zߐ8LYulb3*O0;W`A'gz]BU1 `cVcp!l^dXUA rs)($%APD<ёݦ/I 6fe(hr_e]l_|C(  K@#3~كAv{n/I YS*[ --tBnC晷1ɛnPn2G9N)}zo)!d;8Z&y.0u4B4c +9Вr1yBD~ppB3ǔj<_BXMP2&/"=b?4%I}\ F8fSMG@d: IWWbue?g!=Ej.EV.䬼R7mS![&1n:~ޓ!SpN}";iGcۤP(?Z`,yW֖Fq ϧʘ7.Z~CnFUUV;y"ȉ8Nנ.?L_]wB͍4TD ZuDIv|T9Vbߪx\}< źk.x%[ٮ|5.3Sp|m:ه֗K_͉-~9,/' ( :QM{@ʜjǤ<\ C2EC7Cw~aoahx0%vBUI_0lD_z(YN],8,,ؓX1Bܴ @T7,T(Ii) [IY*˭Ņɷ#ouup@3o@vN~Z5iɇLq]T'EgzIJnN0ͳ3Y,?BsiC5x|/Y _6!zPg w=];B2T57 uĹ`ONupS9*OÚc)i4sl]4vEǀS_2/{=IrξZ~*h@(Ha@PmB~{AD3b/J.X jcyEm}#ސ9?ZEcmaNt֡BS y2 $) 5jWh /1;oeϿBwBǿ@`DxĬqO/pu6Ef#n,Yp b=0vEZgI-GoE2-# fY]7ZȺ*\G=UtSp: &ܧ|# ¼[l]lL1k*ȑ|%@r^%k@@p3M̡9"*0]oO7MŽ56NL@B"n>ёD߾!~K4F ,)D y3q;jT6$MWXLbRBh!ߒ({ms* h0S~#|i%%;G]=H+u:i~SS~ g5,|R=)Oq<4>q/fz"ZCx嘞F m_Irm7 S}+o`ǰ46GH |ϸDޗG׷@E2*dXQhᙔ8+Mz3&e{) FI2RH |-0,#uXKg4;kto4M *7I`I.=lLWuT<דsȋo'rj% u-ɶ錞¯,6B0^Q@x7m?KQ'S~Xx r])y$9pBₔD󞉳pϥ#+Kĺ4S}h*wTQݰ֌5և b%v$!n>v]^rlcW('4n[XU*!4n^$lr7ޒڣ־B \cʰEOb=B+wIc#;#eWwyrloajB;lάU -%Tv1m~_v=zaπgJqj͵h\B;￯vтFOu"5,q#Ѻ6c5OQr{n o0[tvR(zs:,r%y8!e?\XbM&, VlZ6hmmϟOp1Tߊ3o\sb_%4\6©8O~2 Fۍ8 A g-_Cl#lwE4*/ӟ5++-袈?V0ɰyIm51;ʼ>U {ꃊ̌kmKҽEG*""W)X"J'4*'rMpB^?LQn}dbc9~fTsA8<'Gp?&}lZ Sչv|YP$9Ӎ$vȯ5~M1H/MÆpeI"HVsa߬3\y}c%0:dA㶠S_u[1e)9U~§_!J>4'ӓ~EcnyZo d^HnI_#=JPDkhzWd k ?yj3eaTCUt ̨iCzڧnnHNQjM,~⎡݋b.+'t8Tӳ9\f 'oDN~\1 HM'K6y ``gqd\A$XMA`[iEaQ7&E[*RD)Yn)M+rf)߾{?A{5"=.qZb aTT-^PS!v*tN0(l!x!Orxʤ3Fb` +Z:as ,ԩ킹K6^y@ޞR!UPJ6Zhb9QadkheB$jӡMn7횕֝]MxeM64G-V>jw5̳с,H.)$^J{<|Cma"lf}!PhHi FyG&kh. &^`:PCc}zgU`cP׀É{Gb>ݝb]UrnÀތ1W-#=/krhr#:bR@e%2]O"9hZxoOzxǮ1]0\Q ICmuVmD=qs2 C6m_o鵓;TZd>bڢF&QnG`Be 3bd43bӥh?W'?h0,"6^>eȁW+y1^/k=-4jKϻ+ը882,C>`"1DVՕaIِ5D%Ds$gދPT"%JS&b\߾uX@wŧo⦪_X:tMj 9m((^h֝<ݜmhc%R0BN*ߘ׋, AKo:J'gIiRShZL=듾01kyزYFIeGW:uL,)> ''x|6C@ZrG}1 C=e%~H ~=eILO8$ڊ|:BMq ˎ.^Gl&aoszz!R ZP9߄1@!iv4yX2nƱ2[} ܇Mj$O5}T*v!W7S7BY=6[y c`ra0Hc`'u qX]l F* R mGt=!BjMo6TX7~]^ឣ|rgEݱu3 ,]uṎ&˜'a20_30M>$FJ@yFr*=Kk)?̞*uN?% #-@NBBT3Sg?ћ><^RڹnIs] zU*a"ALpj !ҠoWM;]7dCdȜR~9}`xUk_3r] v%Pu=KxZjaj!#l=|uS=ƚ%mnbJ.xȗh b ?_NZm7w!B-f&w~YźǴ9,仁}2@CSXHﷷ~W܌M!ݾTSX']P5p65Mܱ$,`]MUyOM9: )SVI0| pܕB rߐUL_ԉ)yHI0و}%~ ehԋ`W%ad-}Y̍3afc"-( ۍ0N [çljO7CdIT\D)6UIQ*4r)P wsڙj⾑?UߦXJ7B>kxYToQ>6ͨ/H~ڠdUevSLΕJG(/n҇6R&YD<cPkqDvz_zdyvHK8pXIjqmlmi3ʩ]]ڤ{^ʵJＳQVK -,ֱ~d2c:m />,}&ZɆ5Η'W2.~nYٯu֙ī骅M&= D#gXKܓ:fsˌ2DAF#44{fQ:=k' \;tڂf ȀX^kYtDzM8X+W>7z صp6)ǟĨ ej.YdWͺ!}u@D&MfǑAZhx8' OS%$*wʬvgu J.ŀ[SӢj*m!g^07gq3\K8 %ui ;Ֆ,n>+Yχ \R}qiُ.eCCk t¥,7-pƗUKx L;cqbFF`B l17ɽH:~Wbynw^Wv3"Ta6Ť8l? P .wP{0n='v~8H~֯LP*n_}l,Aɩ PeNUIk+rM*=}܇gz3*FH秊 bP}A<%ǼyE5ޮi6xd #E5I$Z| aIws֩sARp:XkNؼt'+Εgk2W7o#ӹm{e7nc BCf;'V~v#^# 0¸K܁)s[b=D`ֵU]C1^L\T7"KjH|nWGk_E +ԏ K"bwYVS@L6O寵y[̲r+vzH0e5=F wqL<$_BnTC`b/& ¼\ޒ⠰5 s^zol#e{Ӯq B񆷑fEPѧ$cA휤l-D. M/+}coa(Sh 1s#x0=!^H]-0qBmZ/'ҡ9*2{JR+Cr=bXW/!lo+]ETA(^3jp4ƎTĄ}ÚZ1Ɖ"%jz WN ]@Ws5Y<" / }YˠՄU};"!%3_)x?S6FA[(og?}~X̿aG nKj72S7 !9硧9Q*6U5_MҫZ24qq* 꿓E.d>{N״P1)2hO9i=]>>^Z3~xl(ƷJppsFd(3/,Y^SQqiwȽl#_4Rӥ[ &FDY\$ %^Xl bmI,!_~GI2~ᱬ]Fo„t Bo|,γSo%vn \Wˁ6I <T ^Xڹ'y1ʁxg=b!zb tAg{H=߿4X A)qI4hx*I u'y-q$\bTizsNa }=߲QEZS߲?ZᲘeGJ8,݅aʁ.& ?շ$ K,% p,m5(9]%bnq(@)4«jו01ܭk״w"C!6aCLTUY97z~QYi⬨{QŲzq!Oh8V_S.ћk\MǾ;X&zX|v6qVs&QŸ^*l.,b$5h?a~ȀY|RɆՖyIԩbN]Wm?Ԓ[ i:-8@j{+K\S)VغXSqg|P(=iL9#_u EQ4L!W9{;l8@E;#mHjDd-&E}Eⴽ-NfST=|6ZѨ0!#BJڣtEÂ>AӐk泤Z68̯ryRCc=( aNS*(޷RqgvblunZBs?МCwP_;~W4kNOgΌӬ f,oBa.O5ؕG>'ϻp{uH%0ı^8hI6>l("-yFޏj9•j5iI֮u8UX?l[,'$GxjU:7N]ח iࠨ'_p< eڎ #@_;Ko*Ak*Hjo+V챶Ju8^ʕfD|Z]ȝ*EOU~s~GѲ"͉mҫ/‡I{{|z(w00ͬ uȄGtg;?ށcU!-ڦg4gTeo> `?Rot"|]K)e!x9Oz[M-ǖIV7JwԩWm%?ZQ)oԇ~{ͷ:'m>CoL cTH "@((YƉK\JP>'G0E^GXuLZfRܨ7øHG~0h<&a0JD.nW~R~#4216Nݴb`CK. 0B#t:? j#Wian$|O/<͖O_E3827=A*OՑ'ls2+W{6 d0!7nݺ451DI9ۉ1,u92[8 MK Gu$<&qxHNL¸onh rN *`CHi[ӸŨXQ?پ#/b;40VDzg9rՄ Zn {$u<QAk{LnL9?Z p6&8!**0fLm"l(O[<$}!l'0 >7rTg,Vx*&᩺y;R3G3gSұYϬ^8;k |WJf. 1z]NBr3k8;Cx\t\"tj9𧹙PwFGxVWkbx# G9x.LFM(VM4F_MbƢ>~Vg[D>]\]M4ίfͺ#1,K!R U~k`gnN/SK0fAȆjj|f'aNk3C ՗G"/B"`N]e밒?<=J7`%%fH )FIPs@^\;O~U-3 U">G_*/u1reV9/'}YcoEG;KUa `g#,E$t٩ !3RX^2QȪMM ]iaI|grM^9:%139Tc%n 0^ eRR#_ayS&StnQ yo/d9 IN)U#aSڄ:iZs@Ņ]Fڡ.ܩUP7;K3ByBd"Cf%sT;?gCkFLpi+y?jbCF;m'eҼ5WX Ob%1xIK_IapoB$?:*{`9-Iv:n)6x6ts+}g͢ipC|Xȋ}鼎Fغ"R8lRDN֚qHJ<ɨ,Ќ8дn d:u9*МP}ƳAqߗQhm?Ŷg)q, BFn9ֳ&{ߎd"x-#6a\YlMWraH69Dv" (Y-*(EfTЛ0ʊ C m"2F)QmcYE UAG%O9g=:`0%OqKI_5&trozv|o eqqydh VETR9O&QvԮ{$|YL4N4ol5$T*BXRBU˼x W_x:\2짠IrR6uJ3%VGpni,-`ߛD~;`*UE^<>{9{ɋ/TNFn IuHe-Xu;sd*ot9cv9~z!'㝘b<./S PVvӇT@>ѷ YOEKzo !D}C#AY+AI9$5L4d/SݤS5:ĕ܄*OR圱9G9G+R65%mhvhhڝRdfDla4oOZ쀼{jTzm"AORiBVS8?X 9z<l.?ɜrnL&Xhmjefub#iR)B~2g!?;ѫx`WSg׏%&{qbJfs[vgɟaA-ߘKق D&TJUiD6ZY*a40JU#Bteï̖U\p:OЖ:vxvɣ 2< N^F7pnc&UڇB7s 5e>rZ5CsWAHٷL"KzRw$j.o;Ngr 5)3CS~]fečfδ&ڤV&,DxנB L ;ԚA"#a0SpI@ȉ7K~qgh=!0lcA'WSЕNyz~l0n&m)e@a~d3Yz̋wϘ1p,Z#"#WC&su3Pņ:j&5& !/ oDw7wˀHbT;6ҤsS$N(U.'$>I~옛{"LO`o 'vGBkܯ3|'6DK9NE;Xh-'LHC$o9*|>'5Kq#31o~D>tœ=^,o(/%g(9Rt.P;7wQ7CMU\\#स b_]fW4 /ѷ;AJ+ Ȁmm/ |u1u$WF,Q{n'Mxe䂙9-9b-}7(JHg0 F= z|>E(~~Y.xyMM]-S [pX) _f] KiFv-[09([Phz&y){}xԨhgV&Yn߅;喰9疒> {gt5r FTB䓱@1GI3Kt/WrGE5Vѕf6L =X4t ڔSYIF$sƎLo]S>*DV7YT @?kv!}P^@.Fɏg4[>i,\a\:"[7?峞8V_pVBeJE9"N"`r\r r'dY{v/M־ HlW4UC6cLvP l@JKMRk8%`F{k$.v!d?`-zcoQ^A̵-IA }CQ/: Z@3!zJNZ mtG_ 7'{3AkayHX^ (< -ܢI%KE/ng[Ii(J/ތIh D씃%3i4;4%s| ]H}n(ȝs~`nC b|=+`q ݌sH416wUt2bdӒNٶ`(@ {M,^ѵZwigW0SpJ )|F<ӄkW/@ՆEeK_BäT!˅iߕכ`lDS\k 8;2 [ly׷jȨ:Hj3NdGeuMB8ɿEբn:'?Uk-.ܨJ)f}IόNKuE!8(C>Is)H&S(tB7Pר56!ChPua &T(`CA_nۓ | cL9`̷?4-rd/=V[RB1e0Y/^;R,%?7J;{dqYzCwu/HbmjGY:N+3eӱ%Eqn,8t%pS{ YQV IQ;?gfpSc=*ll d\]xwE6XHz҉V>rn@M&f /'[Ci:P'`Rq{5i+ˉog~\GH}b9:+ןAF: YZ