python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203 >  A fXW^^fm~?UvO:~zm[ &13Éus?bٶ2)jo d A>aQ Mll̪ M7޲4 rS4)i>-/eṩ88"vSi;$6|K2Kh8-J2xvm,2R|`EҾ0sq;xbb=(st$cs.cjhNuGL` 37eedd0794956299b2344e59e3366f8e82b9287eeb9b132c1e4d1e89194f88c0e4776a6f025a25a6828887620252fc350e0a40f9fXW^^f鱫QB}[6'ACg;q(*yMn `bU"g#GX-:m~yC5Q7.B+|13U~Qx/u)'H2vûI/| rctf{Iǖ3F?6Z G`I텸)EX3'ݤ|,o˷`kJ`7Egx؟Zp_MlA(t.Pi;Dw)=[Ʉ/5" ȱ.sHmDK>>p=?d  4 _(,=RX m     Dp;(W8`f9f:HfFGHI X(Y0\h]^brcrdefltuv4z@DCpython3-perf-debuginfo5.10.060.139.0.166.oe2203Debug information for package python3-perfThis package provides debug information for package python3-perf. Debug information is useful when developing applications that use this package or when debugging this package.fVpecs-obsworker-2098Huawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgDevelopment/Debughttp://www.kernel.org/linuxx86_64.`7XAAAAA$fVpfVpfVpfVpfVpfVpfVpfVpd40d3ab4482c2c3a41a3685b569f5d54db5f9a5d5d4dd41839d1b7f0bfbb2a5bbd2a2b17c62a9672c9f8d22c51b340a023c053073a4b39a0d32c95169cee1655956d16f5eb9286228398f44032845c10f4c7bbf36b40bb3bd6dbde6ee17892derootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkernel-5.10.0-60.139.0.166.oe2203.src.rpmpython3-perf-debuginfopython3-perf-debuginfo(x86-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.17.0fWfM@fDf;i@f(@ff@f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@Jialin Zhang - 5.10.0-60.139.0.166Jialin Zhang - 5.10.0-60.138.0.165Jialin Zhang - 5.10.0-60.137.0.164Jialin Zhang - 5.10.0-60.136.0.163Jialin Zhang - 5.10.0-60.135.0.162Jialin Zhang - 5.10.0-60.134.0.161Jialin Zhang - 5.10.0-60.133.0.160Jialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65- !8173 netfilter: ebtables: fix memory leak when blob is malformed - !8166 net/sched: taprio: avoid disabling offload when it was never enabled - !8124 [sync] PR-8042: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !8172 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !8147 pinctrl: single: fix potential NULL dereference - !8156 [sync] PR-8017: perf/core: Bail out early if the request AUX area is out of bound - !8113 [sync] PR-8023: fs/ntfs3: Fixed overflow check in mi_enum_attr() - !8092 [sync] PR-7980: Fix CVE-2021-47455 - !8116 [sync] PR-8060: soc: fsl: qbman: Always disable interrupts when taking cgr_lock - !7798 net-memcg: Fix scope of sockmem pressure indicators - !8086 [sync] PR-8019: pstore/zone: Add a null pointer check to the psz_kmsg_read - netfilter: ebtables: fix memory leak when blob is malformed - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !7146 [sync] PR-7092: Squashfs: check the inode number is not the invalid value of zero - net/sched: taprio: avoid disabling offload when it was never enabled - perf/core: Bail out early if the request AUX area is out of bound - pinctrl: single: fix potential NULL dereference - !8082 [sync] PR-6808: CVE-2024-26923 - !8002 [sync] PR-7970: fbmon: prevent division by zero in fb_videomode_from_videomode() - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !6874 [sync] PR-6756: vfio/fsl-mc: Block calling interrupt handler without trigger - soc: fsl: qbman: Always disable interrupts when taking cgr_lock - fs/ntfs3: Fixed overflow check in mi_enum_attr() - !7878 [sync] PR-7684: dm snapshot: fix lockup in dm_exception_table_exit - !8071 [sync] PR-8030: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - !7994 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !8006 [sync] PR-7903: virtio_ring : keep used_wrap_counter in - ptp: fix code indentation issues - ptp: Fix possible memory leak in ptp_clock_register() - !8021 media: bttv: fix use after free error due to btv->timeout timer - pstore/zone: Add a null pointer check to the psz_kmsg_read - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - af_unix: Fix garbage collector racing against connect() - !8024 [sync] PR-7961: net: atlantic: eliminate double free in error handling logic - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - net: atlantic: eliminate double free in error handling logic - media: bttv: fix use after free error due to btv->timeout timer - virtio_ring : keep used_wrap_counter in vq->last_used_idx - fbmon: prevent division by zero in fb_videomode_from_videomode() - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !7952 media: vidtv: psi: Add check for kstrdup - !7972 [sync] PR-7949: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - !7967 [sync] PR-7943: v2 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - !7935 [sync] PR-7911: ACPI: LPIT: Avoid u32 multiplication overflow - !7849 [sync] PR-7576: f2fs: compress: fix reserve_cblocks counting error when out of space - !7842 [sync] PR-7757: Fix CVE-2023-52656 - media: vidtv: psi: Add check for kstrdup - !7913 [sync] PR-7853: net/mlx5e: fix a double-free in arfs_create_groups - ACPI: LPIT: Avoid u32 multiplication overflow - !7785 [sync] PR-7655: v3 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - net/mlx5e: fix a double-free in arfs_create_groups - !7795 [sync] PR-7743: netrom: Fix data-races around sysctl_net_busy_read - !7883 [sync] PR-7773: Fix CVE-2023-52698 - calipso: fix memory leak in netlbl_calipso_add_pass() - netlabel: remove unused parameter in netlbl_netlink_auditinfo() - net: netlabel: Fix kerneldoc warnings - dm snapshot: fix lockup in dm_exception_table_exit - !7858 [sync] PR-7846: netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_timeout - f2fs: compress: fix reserve_cblocks counting error when out of space - !7828 [sync] PR-7779: LoongArch: Define the __io_aw() hook as mmiowb() - !7825 [sync] PR-7714: CVE-2024-35936 - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket - !7836 [sync] PR-7681: xfs: three bug fix recently - xfs: update dir3 leaf block metadata after swap - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real - iomap: fix warning in xfs_iomap_write_delalloc_release() - !7818 [sync] PR-7734: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - LoongArch: Define the __io_aw() hook as mmiowb() - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - net-memcg: Fix scope of sockmem pressure indicators - netrom: Fix data-races around sysctl_net_busy_read - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - !7735 [sync] PR-7674: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - !7760 [sync] PR-7749: v2 wifi: iwlwifi: dbg-tlv: ensure NUL termination - !7710 [sync] PR-7579: powerpc/powernv: Add a null pointer check to scom_debug_init_one() - !7754 wifi: ath11k: decrease MHI channel buffer length to 8KB - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: ath11k: decrease MHI channel buffer length to 8KB - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - powerpc/powernv: Add a null pointer check to scom_debug_init_one() - Squashfs: check the inode number is not the invalid value of zero - vfio/fsl-mc: Block calling interrupt handler without trigger- !7633 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - !7641 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !7561 mm/slub: fix to return errno if kmalloc() fails - !7717 CVE-2023-52655 - !7646 [sync] PR-7385: CVE-2024-27002 - !7625 [sync] PR-5930: RDMA/srpt: Support specifying the srpt_service_guid parameter - !6242 [sync] PR-6082: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6151 [sync] PR-6020: net/sched: act_mirred: use the backlog for mirred ingress - !7620 [sync] PR-6259: arp: Prevent overflow in arp_req_get(). - !7615 [sync] PR-5993: ipv6: sr: fix possible use-after-free and null-ptr-deref - !7612 [sync] PR-5996: mptcp: fix double-free on socket dismantle - !6222 [sync] PR-6074: Fix CVE-2024-26787 - !7609 [sync] PR-6279: Bluetooth: Avoid potential use-after-free in hci_error_reset - !7379 [sync] PR-6085: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - !7605 [sync] PR-6086: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - !5983 [sync] PR-5852: CVE-2024-26809 - !7707 bpf: Guard stack limits against 32bit overflow - !7636 dm-crypt: don't modify the data when using authenticated encryption - !7660 [sync] PR-6033: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7627 [sync] PR-5950: RDMA/qedr: Fix qedr_create_user_qp error flow - !7695 ext4: fix corruption during on-line resize - !7679 [sync] PR-7574: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7558 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - !6531 [sync] PR-6486: devlink: fix possible use-after-free and memory leaks in devlink_init() - !7553 [sync] PR-5530: net: Fix CVE-2024-26641 - !7550 [sync] PR-7006: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - usb: aqc111: check packet for fixup for true limit - !7666 [sync] PR-7586: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7662 [sync] PR-7590: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - bpf: Guard stack limits against 32bit overflow - ext4: fix corruption during on-line resize - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7602 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7506 [sync] PR-7402: scsi: lpfc: Fix possible file string name overflow when updating firmware - !7502 [sync] PR-7403: scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - !7522 [sync] PR-7401: nvme-core: check for too small lba shift - !7495 [sync] PR-7397: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - !7492 [sync] PR-7398: drm/amd/display: Fix memory leak in dm_sw_fini() - !7489 [sync] PR-7399: drm/amd/pm: fix a double-free in si_dpm_init - !7505 [sync] PR-7404: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7498 [sync] PR-7396: drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7596 [sync] PR-7548: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7566 net: hns3: fix kernel crash when 1588 is received on HIP08 devices - clk: mediatek: Do a runtime PM get on controllers during probe - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - dm-crypt: don't modify the data when using authenticated encryption - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - RDMA/qedr: Fix qedr_create_user_qp error flow - RDMA/srpt: Support specifying the srpt_service_guid parameter - arp: Prevent overflow in arp_req_get(). - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - ipv6: sr: fix possible use-after-free and null-ptr-deref - RDMA/srpt: Support specifying the srpt_service_guid parameter - mptcp: fix double-free on socket dismantle - Bluetooth: Avoid potential use-after-free in hci_error_reset - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7569 [sync] PR-7535: v2 CVE-2024-26907 - !7362 [sync] PR-5491: CVE-2024-26640 - !6569 openEuler-22.03-LTS CVE-2024-26908 - kernel-doc: fix struct_group_tagged() parsing - uapi: propagate __struct_group() attributes to the container union - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - stddef: Introduce DECLARE_FLEX_ARRAY() helper - uapi/linux/stddef.h: Add include guards - stddef: Introduce struct_group() helper macro - net: hns3: fix kernel crash when 1588 is received on HIP08 devices - mm/slub: fix to return errno if kmalloc() fails - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - ip6_tunnel: use dev_sw_netstats_rx_add() - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - !7517 [sync] PR-7484: fix CVE-2024-26661 - !7354 blk-iocost: Fix an UBSAN shift-out-of-bounds warning - !7345 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !7359 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !7442 [sync] PR-6037: fix-CVE-2024-26706 - nvme-core: check for too small lba shift - drm/amd/display: Fix && vs || typos - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' - !7485 [sync] PR-7476: firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7406 drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7408 backport important fix for broadcom net card - !7407 nvme-fc: do not wait in vain when unloading module - scsi: lpfc: Fix possible file string name overflow when updating firmware - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - drm/amd/display: Fix memory leak in dm_sw_fini() - drm/amd/pm: fix a double-free in si_dpm_init - !7293 KVM: s390: vsie: fix race during shadow creation - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7256 netfilter: nf_tables: disallow anonymous set with timeout flag - !7335 inet: read sk->sk_family once in inet_recv_error() - !7331 tunnels: fix out of bounds access when building IPv6 PMTU error - !7323 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - !7309 btrfs: don't drop extent_map for free space inode on write error - !7448 [sync] PR-5998: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - !7445 [sync] PR-6031: nilfs2: fix potential bug in end_buffer_async_write - !7280 llc: Drop support for ETH_P_TR_802_2. - !7277 llc: make llc_ui_sendmsg() more robust against bonding changes - !7458 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7265 Bluetooth: Fix atomicity violation in {min,max}_key_size_set - !7478 [sync] PR-7424: net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - !7342 ppp_async: limit MRU to 64K - !5866 [sync] PR-5794: um: time-travel: fix time corruption - !7389 [sync] PR-5469: wifi: iwlwifi: fix a memory corruption - !7312 CVE-2024-26686 - !7303 nilfs2: fix data corruption in dsync block recovery for small block sizes - !7296 powerpc/kasan: Fix addr error caused by page alignment - !7273 binder: fix race between mmput() and do_exit() - !7259 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5622 [sync] PR-5566: tracing: Ensure visibility when inserting an element into tracing_map - !7237 SUNRPC: Fix a suspicious RCU usage warning - !7230 [sync] PR-5460: v2 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - !7233 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - !7320 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !7466 [sync] PR-7394: v2 scsi: sr: Do not leak information in ioctl - scsi: sr: Do not leak information in ioctl - !7019 [sync] PR-6855: KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7306 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7429 net: gtp: Fix Use-After-Free in gtp_dellink - !7430 [sync] PR-3972: arm64: make cma=0 as default for openeuler - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - nilfs2: fix potential bug in end_buffer_async_write - parisc/unaligned: Fix emulate_ldw() breakage - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd() - parisc: Fix random data corruption from exception handler - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth() - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd() - parisc/unaligned: Rewrite inline assembly of emulate_ldw() - parisc: Mark ex_table entries 32-bit aligned in uaccess.h - parisc: Fix some apparent put_user() failures - parisc: Implement __get/put_kernel_nofault() - parisc: Drop strnlen_user() in favour of generic version - parisc: Switch user access functions to signal errors in r29 instead of r8 - parisc/unaligned: Rewrite inline assembly of emulate_ldh() - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers - !7435 [sync] PR-7414: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - arm64: make cma=0 as default for openeuler - net: gtp: Fix Use-After-Free in gtp_dellink - !7382 [sync] PR-6428: net/sched: flower: Fix unable to handle page fault bug in fl_init - net/tg3: fix race condition in tg3_reset_task() - net/tg3: resolve deadlock in tg3_reset_task() during EEH - net: bnxt: fix a potential use-after-free in bnxt_init_tc - net/bnx2x: Prevent access to a freed page in page_pool - nvme-fc: do not wait in vain when unloading module - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7266 block/rnbd-srv: Check for unlikely string overflow - wifi: iwlwifi: fix a memory corruption - net/sched: flower: Fix unable to handle page fault bug in fl_init - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - tcp: add sanity checks to rx zerocopy - net-zerocopy: Refactor frag-is-remappable test. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - tunnels: fix out of bounds access when building IPv6 PMTU error - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: use __for_each_thread() - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - exit: Use the correct exit_code in /proc//stat - btrfs: don't drop extent_map for free space inode on write error - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - nilfs2: fix data corruption in dsync block recovery for small block sizes - powerpc/kasan: Fix addr error caused by page alignment - KVM: s390: vsie: fix race during shadow creation - llc: Drop support for ETH_P_TR_802_2. - llc: make llc_ui_sendmsg() more robust against bonding changes - binder: fix race between mmput() and do_exit() - block/rnbd-srv: Check for unlikely string overflow - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - netfilter: nf_tables: disallow anonymous set with timeout flag - SUNRPC: Fix a suspicious RCU usage warning - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - KVM: Always flush async #PF workqueue when vCPU is being destroyed - x86/xen: Add some null pointer checking to smp.c - devlink: fix possible use-after-free and memory leaks in devlink_init() - mmc: mmci: stm32: fix DMA API overlapping mappings warning - mmc: mmci: stm32: use a buffer for unaligned DMA requests - net/sched: act_mirred: use the backlog for mirred ingress - netfilter: nft_set_pipapo: release elements in clone only from destroy path - netfilter: nft_set_pipapo: remove scratch_aligned pointer - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: store index in scratch maps - um: time-travel: fix time corruption - tracing: Ensure visibility when inserting an element into tracing_map- !6038 [sync] PR-6006: fix CVE-2024-26669 - !5881 [sync] PR-5751: net: atlantic: Fix DMA mapping for PTP hwts ring - !7337 netfilter: nft_limit: reject configurations that cause integer overflow - !7254 netfilter: nf_tables: disallow timeout for anonymous sets - !6748 amdkfd: use calloc instead of kzalloc to avoid integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nf_tables: disallow timeout for anonymous sets - !7160 [sync] PR-6809: memcg: fix possible use-after-free in memcg_write_event_control() - !7117 [sync] PR-7086: media: ttpci: fix two memleaks in budget_av_attach - !7118 [sync] PR-7080: drm: nv04: Fix out of bounds access - !7132 [sync] PR-7044: v2 nfs: fix UAF in direct writes - !7154 [sync] PR-7148: scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7176 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - !6980 ksmbd: validate payload size in ipc response - !7097 [sync] PR-6818: mm: memcg: fix stale protection of reclaim target memcg - memcg: fix possible use-after-free in memcg_write_event_control() - scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !6763 [sync] PR-6680: cifs: fix underflow in parse_server_interfaces() - drm: nv04: Fix out of bounds access - media: ttpci: fix two memleaks in budget_av_attach - !7101 [sync] PR-7039: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7083 [sync] PR-7013: media: edia: dvbdev: fix a use-after-free - !6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - !7023 [sync] PR-6988: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7008 [sync] PR-6959: mac802154: fix llsec key resources release in mac802154_llsec_key_del - !7063 [sync] PR-7056: scsi: qla2xxx: Fix command flush on cable pull - mm: memcg: fix stale protection of reclaim target memcg - !6945 [sync] PR-6840: CVE-2023-52650 - media: edia: dvbdev: fix a use-after-free - scsi: qla2xxx: Fix command flush on cable pull - !6092 [sync] PR-5921: ext4: fix double-free of blocks due to wrong extents moved_len - !6089 [sync] PR-5977: btrfs: dev-replace: properly validate device names - !6095 [sync] PR-6029: ceph: prevent use-after-free in encode_cap_msg() - !7028 [sync] PR-6977: wireguard: netlink: access device through ctx instead of peer - wireguard: netlink: access device through ctx instead of peer - !6985 [sync] PR-6964: v2 CVE-2024-27000 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6212 [sync] PR-6178: CVE-2024-26812 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - !6693 quota: Fix potential NULL pointer dereference - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6884 [sync] PR-6740: V2 cpuset: fix race between rebuild scheduler domains and hotplug work - !6960 [sync] PR-6861: media: dvb-frontends: avoid stack overflow warnings with clang - ksmbd: validate payload size in ipc response - !6911 pstore: inode: Only d_invalidate() is needed - !6935 [sync] PR-6826: fat: fix uninitialized field in nostale filehandles - !6933 [sync] PR-6838: fs: sysfs: Fix reference leak in sysfs_break_active_protection() - media: dvb-frontends: avoid stack overflow warnings with clang - drm/tegra: dsi: Add missing check for of_find_device_by_node - fat: fix uninitialized field in nostale filehandles - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - pstore: inode: Only d_invalidate() is needed - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - cpuset: fix race between rebuild scheduler domains and hotplug work - cifs: fix underflow in parse_server_interfaces() - amdkfd: use calloc instead of kzalloc to avoid integer overflow - quota: Fix potential NULL pointer dereference - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - ceph: prevent use-after-free in encode_cap_msg() - ext4: fix double-free of blocks due to wrong extents moved_len - btrfs: dev-replace: properly validate device names - net/sched: flower: Fix kabi change - net/sched: flower: Fix chain template offload - net: atlantic: Fix DMA mapping for PTP hwts ring- !6425 [sync] PR-6291: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6901 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - !6931 bpf: Fix hashtab overflow check on 32-bit arches - !6925 firmware: arm_scmi: Harden accesses to the reset domains - !6921 bpf: Fix stackmap overflow check on 32-bit arches - !6865 [sync] PR-6835: kprobes: Fix check for probe enabled in kill_kprobe() - !6897 [sync] PR-6592: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - bpf: Fix hashtab overflow check on 32-bit arches - firmware: arm_scmi: Harden accesses to the reset domains - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6643 [sync] PR-6623: amdkfd: use calloc instead of kzalloc to avoid integer overflow - kprobes: Fix check for probe enabled in kill_kprobe() - !6387 [sync] PR-6202: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6627 [sync] PR-6485: CVE-2024-26843 - !6751 [sync] PR-6677: v3 olk-5.10: bugfix for mm - mm/madvise: fix potential pte_unmap_unlock pte error - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - !6509 cachefiles: fix memory leak in cachefiles_add_cache() - !6686 [sync] PR-6580: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6636 [sync] PR-6561: md: fix kmemleak of rdev->serial - amdkfd: use calloc instead of kzalloc to avoid integer overflow - !6599 [sync] PR-6584: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6605 [sync] PR-6579: media: rc: bpf attach/detach requires write permission - !6604 [sync] PR-6568: IB/hfi1: Fix a memleak in init_credit_return - !6613 [sync] PR-6543: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6602 [sync] PR-6520: firmware: arm_scmi: Fix double free in SMC transport cleanup path - md: fix kmemleak of rdev->serial - efi: runtime: Fix potential overflow of soft-reserved region size - !6248 ubi: Check for too small LEB size in VTBL code - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6448 [sync] PR-6281: v2 net/mlx5: Update error handler for UCTX and UMEM - media: rc: bpf attach/detach requires write permission - IB/hfi1: Fix a memleak in init_credit_return - firmware: arm_scmi: Fix double free in SMC transport cleanup path - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6475 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6574 [sync] PR-6417: media: pvrusb2: fix uaf in pvr2_context_set_notify - media: pvrusb2: fix uaf in pvr2_context_set_notify - !6499 v2 Add hugetlb MADV_DONTNEED support - cachefiles: fix memory leak in cachefiles_add_cache() - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - madvise: use zap_page_range_single for madvise dontneed - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm: enable MADV_DONTNEED for hugetlb mappings - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - net/mlx5: Update error handler for UCTX and UMEM - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - ubi: Check for too small LEB size in VTBL code- !6413 [sync] PR-5510: bus: mhi: host: Drop chan lock before queuing buffers - !6264 [sync] PR-6103: riscv: Sparse-Memory/vmemmap out-of-bounds fix - !6537 [sync] PR-5273: net/smc: fix illegal rmb_desc access in SMC-D connection dump - !6528 [sync] PR-5468: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - !6545 v2 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !6496 [sync] PR-6407: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5802 [sync] PR-5773: patches for CVE-2023-52617 - !5801 [sync] PR-5772: firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6516 fixe CVE-2023-52498 - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - PM: sleep: Fix error handling in dpm_prepare() - PM: sleep: Fix possible deadlocks in core system-wide PM code - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: sleep: Use dev_printk() when possible - async: Introduce async_schedule_dev_nocall() - async: Split async_schedule_node_domain() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6487 [sync] PR-6455: CVE-2021-47182 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6440 [sync] PR-6312: fix CVE-2024-24861 for 5.10 - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6410 [sync] PR-5195: dmaengine: fix NULL pointer in channel unregistration function - bus: mhi: host: Drop chan lock before queuing buffers - dmaengine: fix NULL pointer in channel unregistration function - !6080 Fix CVE-2024-26764 - !5966 Fix CVE-2023-52441 and integrate the pre-patch - riscv: Sparse-Memory/vmemmap out-of-bounds fix - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - ksmbd: fix out of bounds in init_smb2_rsp_hdr() - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ksmbd: return unsupported error on smb1 mount - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect- !6180 [sync] PR-5093: wifi: mac80211: fix potential key use-after-free - !6218 RDMA/siw: Fix connection failure handling - !6236 [sync] PR-6193: uio_hv_generic: Fix another memory leak in error handling paths - !6232 [sync] PR-6192: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6186 Fixed CVE-2023-52504 - uio_hv_generic: Fix another memory leak in error handling paths - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6196 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - !6188 [sync] PR-5466: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - RDMA/siw: Fix connection failure handling - !6113 cifs: Fix UAF in cifs_demultiplex_thread() - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !6172 [sync] PR-6137: vfio/pci: Lock external INTx masking ops - x86/alternatives: Disable KASAN in apply_alternatives() - wifi: mac80211: fix potential key use-after-free - !6125 fix-CVE-2021-47101 - vfio/pci: Lock external INTx masking ops - !6135 [sync] PR-5717: v2 fix CVE-2023-52587 - !6148 [sync] PR-6101: vfio/pci: Disable auto-enable of exclusive INTx IRQ - !6141 [sync] PR-6047: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6131 [sync] PR-4923: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - !5419 [sync] PR-5317: KVM: s390: fix setting of fpc register - vfio/pci: Disable auto-enable of exclusive INTx IRQ - !5129 [sync] PR-5113: fix CVE-2023-52578 - !5120 [sync] PR-5062: team: fix null-ptr-deref when team device type is changed - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6117 wifi: rt2x00: restart beacon queue when hardware reset - !6054 [sync] PR-6017: drm/amdgpu: fix use-after-free bug - !6122 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - wifi: rt2x00: restart beacon queue when hardware reset - cifs: Fix UAF in cifs_demultiplex_thread() - !6077 [sync] PR-5973: EDAC/thunderx: Fix possible out-of-bounds string access - !6046 mm/swap: fix race when skipping swapcache - !6022 [sync] PR-5970: fixup CVE-2024-26751 - !6034 [sync] PR-5969: fbdev: savage: Error out if pixclock equals zero - EDAC/thunderx: Fix possible out-of-bounds string access - !5848 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - !6057 fs/ntfs3: fix CVE-2023-52640 - fs/ntfs3: Fix oob in ntfs_listxattr - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() - drm/amdgpu: fix use-after-free bug - mm/swap: fix race when skipping swapcache - !5987 [sync] PR-5901: CVE-2024-26695 - !5980 [sync] PR-5812: afs: Increase buffer size in afs_update_volume_status() - fbdev: savage: Error out if pixclock equals zero - ARM: ep93xx: Add terminator to gpiod_lookup_table - !5947 [sync] PR-5831: fbdev: sis: Error out if pixclock equals zero - !5958 [sync] PR-5884: KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - !5842 [sync] PR-5348: s390/ptrace: handle setting of fpc register correctly - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - !5856 dmaengine: ti: edma: Add some null pointer checks to the edma_probe - afs: Increase buffer size in afs_update_volume_status() - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - fbdev: sis: Error out if pixclock equals zero - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - s390/ptrace: handle setting of fpc register correctly - KVM: s390: fix setting of fpc register - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - team: fix null-ptr-deref when team device type is changed- !5942 CVE-2021-46926 - !5944 [sync] PR-5861: ksmbd: fix uaf in smb20_oplock_break_ack - !5936 [sync] PR-5911: CVE-2023-52484 - !5932 [sync] PR-5895: i2c: i801: Fix block process call transactions - !5927 [sync] PR-5863: CVE-2024-26788 - !5908 [sync] PR-4928: drm/bridge: sii902x: Fix probing race issue - !5782 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - !5918 [sync] PR-5870: drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !5903 [sync] PR-4931: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - ksmbd: fix uaf in smb20_oplock_break_ack - ALSA: hda: intel-sdw-acpi: harden detection of controller - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() - !5907 [sync] PR-5811: Fixed CVE-2021-47037 - !5871 [sync] PR-4794: serial: imx: fix tx statemachine deadlock - !4907 [sync] PR-4865: Input: powermate - fix use-after-free in powermate_config_complete - i2c: i801: Fix block process call transactions - dmaengine: fsl-qdma: init irq after reg initialization - !5896 [sync] PR-5808: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5888 [sync] PR-5832: CVE-2023-52467 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/bridge: sii902x: Fix probing race issue - ASoC: q6afe-clocks: fix reprobing of the driver - ASoC: q6afe-clocks: fix warning on symbol scope - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5748 ksmbd: fix global oob in ksmbd_nl_policy - mfd: syscon: Fix null pointer dereference in of_syscon_register() - serial: imx: fix tx statemachine deadlock - !5826 [sync] PR-5785: net: qualcomm: rmnet: fix global oob in rmnet_policy - !5817 [sync] PR-5780: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !4799 [sync] PR-4764: binder: signal epoll threads of self-work - !5790 usb: hub: Guard against accesses to uninitialized BOS descriptors - !5797 [sync] PR-5788: v2 Patches to Fix CVE-2023-52454 - !5820 [sync] PR-5789: perf/x86/lbr: Filter vsyscall addresses - net: qualcomm: rmnet: fix global oob in rmnet_policy - !5775 [sync] PR-5724: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - perf/x86/lbr: Filter vsyscall addresses - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !5764 [sync] PR-5642: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - nvmet-tcp: Fix the H2C expected PDU len calculation - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length - usb: hub: Guard against accesses to uninitialized BOS descriptors - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - ksmbd: fix global oob in ksmbd_nl_policy - !5704 [sync] PR-5507: ext4: Validate inode pa before using preallocation blocks - !5708 ext4: dio: Put endio under - ext4: Optimize endio process for DIO overwrites - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag - iomap: pass a flags argument to iomap_dio_rw - iomap: rename the flags variable in __iomap_dio_rw - iomap: add IOMAP_DIO_INLINE_COMP - iomap: use an unsigned type for IOMAP_DIO_* defines - iomap: cleanup up iomap_dio_bio_end_io() - ext4: Validate inode pa before using preallocation blocks - Input: powermate - fix use-after-free in powermate_config_complete - binder: signal epoll threads of self-work- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 coresecs-obsworker-209 17169408005.10.0-60.139.0.166.oe22035.10.0-60.139.0.166.oe22030-metadata_list-compact_tlv-python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203.x86_640-metadata_list-compact-python3-perf-debuginfo-5.10.0-60.139.0.166.oe2203.x86_64debugusrlib64python3.9site-packagesperf.cpython-39-x86_64-linux-gnu.so-5.10.0-60.139.0.166.oe2203.x86_64.debug/etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/lib//usr/lib/debug//usr/lib/debug/usr//usr/lib/debug/usr/lib64//usr/lib/debug/usr/lib64/python3.9//usr/lib/debug/usr/lib64/python3.9/site-packages/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection obs://private/openEuler:22.03:LTS/standard_x86_64/42b9b04cdcef3b4828cd5d31d1a07923-kernelcpioxz2x86_64-openEuler-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f204385880be4e023ae2605508d0274ce50ad5c, with debug_info, not strippedC \N+utf-83c8ffdccae67e50c25ff648edb90f4a62443eb2da77337a82d306c77afc5d692b450afe7940ff8d2e107197a60b851d04a9687c9855e44ff6097a31dbb5b4079?07zXZ !#,7] b2u Q{LY2ꚴ8^1%;xk]p/5,[vq0:>#ǩ惂ٲJW=hg*`LR;Q#F{/dU W Dϲ}/!b-Ut*ۋ?!w}``AYBhleAlgCH:S6X'i{Pr$QDը$k=x{ӣWjYE(nr ȷeW][mەB`T>a|/.{}09;c uG,68 ww=zHkc-O͵cAѤz/.4!ϊ"fp/CpDrCHͨFjbܦԌnl8%zRW9wsZ`bE*mǧV&X)(] U )T8_'-w~b¢WBefÊ5f/ Їv ݃~o79 B,Q#\5 ]G$uhNKP /|gJ)I99IqtT()%ԕNWm$xOљغ>abѢ8 o /G"]c]v>D/u#l+^EY L Dm0 b0̓NqۘHVU\Eu+$]8ߝB{XE#J؎jSiqfHKkbCW愼2{> ZeIPN-A;B׃|^M\YfÄz;y L^h1CEx J;JҫM/۪ѝBW vo2_<ٻmxϟ_7JRuf`A_.=0|"Do,ndA*nL<,ow\z߯Wj ?'l]Q vhp>AMk}$_D-^K\Yr "Wt14@䱮Hh7'_->X" n醭° ]\3V-@m<')gTf١cM|kD/ GL{8> ΋^8blӜ^=>b@\7@`sK| K:i Z&/)i@[tNA{PSE&:FR ?QlCv)VDCh\;x2-k{ϙO]@ ۿ !-E0V4Aq1[{g:01q)HR( }۸"m~ $8i?Tqᢟn@0)ʐYHSWE0(> 2 @GDMuAV- {?̾H>M>=EudqAZhx>䄑ƫ]20jshȱG6*x!0*)(p,Y\]4eIBł7V|&(-ZwC;dhO6{i.2Wĕ,7 P ҃ 5l<%ë*X׋*'8eЍ a5PĻ*+3d66jlĂnUԗHcf"Ȗ$yRy.'A}JqH_Ik'l?yTգF¼:f^n?1{ S*wo 0m:߄j59o1*$)lw;#<m{v?Ǒ]4(#I=V>ЉWG4od~scu=~ԟDzdW3BgBM{Hbbm'z6 |l#ɾQPU~/|Ylzxb f"gp0kZGfM,rڱVQR9cW9wp !̿w>'ld~nyިovp$ZyΠkCKAIJbeO3ܦ,F[?!;HYl%ID(>a=,[= u_6O lrchy`Fh6'.e]EۼBWYmʙIad1SK0 J,&͞ L4l |JX!1 's %8aK!|b9Sg:b3;nN~Ίrt. khI˭V%@4m{uyh)Fo N+d% U, AR[PQKy_JI%K;pS`ACܜ-YWrvr54sY:ڑ7 v턝 GI$Z) J y{QܵB+֬C@/3Hta0*'GY.tio& Ǽc6GH=T8W;OK%IGakCђ|{k8f`{S[ Z* qPa= jyx1ƺjbe<ڥ'ܼǞ-f~N{jEҌKSdJ+C` vV J؏ x|usLΒ9$9텁@mƒYSbS"ƄgV%1JOKٹWPrľ<7 $c4޸LoX9]aL$YV!c  yGOO_spE?mTVDs{9 ]byP)\)°Ф.WTQQ}T+N$ҜHzu`G&$'dMj?q8`aO-7CƢɔ>Y)<3 9_: B) @vttO}.Ҫ,E=]k g'emX![7s_%`y~b8Wtu&t.V"3?Jz壙_-ML;&/6XXEk|OY,j8@_U"խլ*Y[DW/7'ۡߦR ps*^DJ[iw3M>J%@{Jӷ}y2r U !*ۮNjg*js@=8eȿx:T? 9l X1#|,g%;# \u,Fz%s}Yv`zAÎHxjLHuZgZٲѫNZq [p:Za*ڻus|v00/Dﺺ2i)$|n]-ZY(yM.fJU7#&6Wޔ3`12xNzbU0/7LE)_N) ~ӿ !\@|m}AD:H@(H*jZpJm3vSŽ:j2(LRkT(ւ`Teij]ht;@x vD&M߄Y >0pMn>u5#%ژͭp|36@,x˙gX@M;?8ܳX`ZxUzQU̷+R^uDڗaY7/X{JaS Fh,q ]FHG_(f<>y&Rf˨-h=ڿ/|q5$ _E[*ڀ$k͑r+9udN4ؙڇmţؽ^8;7[WB!![hI˯ALx5^ 81l(Pr TQ׺1!2:/)bWb,""kuK%l# l*] ł=,/7Erɮy#ڱOrυ6L.ɏ0&DI ӓ)vN;Զ)k-`g j z$WgF9] ]ƄKKrЛt[t>` "pf{$  M?tV? 6pN 0K>$ \0%Z[.9s!.ȃɄزl+ON6?F_>gE DU)jYw"]/5E0na{LjdߪX#,TjgbΒJJY; f}tB-^4t"JxE cUtBQPā!ېdA*cq5,P:Zaš$vGPdo`ކio>0Kq' e`W\nkiDg`n^&O d'b"y@ ř?(cCSS5hy"5@4Dh_.coFqҳ+ I(X%AEI.ƵiLǼD1Vdsⷫ\He%Xp/%V̞٦#:9mR:kk@G@PڕE,[a3&!e!.qL {r:[߉k-Iλ"huxg,ypOp*6o[ol4IC%^sooc5ݞ9`=,͘ VZu+qHh͏nY_-녵X=:yC{ؿ!ѧ!lCB2J>Q .SWZe1V*3_OͿMDFh$qry7on2+J_GDR-"'w# T%0a?ި p"[axk7)quE 0%sj w?uoZ_-+ƌ=9cR|*-ǸX]M)QuφBjZ٭ F0ARyy|h0v+' kr]dnsYȕl|fD c5R1:V>0r B܍ "pDZ2n@U&L3~7w UےB#oq~VKlp6YhZ.!gEdp}w<"&ΊwŠ NkXf_7 ;zeV6ux|Mߖ5i9%P2\=pf/Y%>_-yy@Ҙ V!DOÂHp(Wq[ Ĉΐ?g%'yDEQ{_\_hmd?;.7|\mDka8mjIQL5\fLq̗G3F2TP(Jfi*d,f`b+!V| sҚVUev]hycYKdc^` \d$j)2DWeqeRs%Н lYe8 xg=R%B.~E\v1 ~##nsjå ֑ b%} s\:l^*wSEp$vU:FE9wv<777}Mz̤GK'Ë<)uwUI2dhr-gCEŚZTrf=t$j2%G?[-!Mӌr)J}l~95slrRt'r#:?넉$Jjzx`LșU#.'jM$ 2uʜ3 WZ7dXFgM7%bi<,oP8O\mdPa )K=F@qշ+ WC%!aJz`Ef'݂B}s53QAd1^5f4>ײAs0&^LGF#(WJa`F3'U3>3LtIJwM8}KѕXF-Cqҗu W)egL}gUqR62KM E5iEpc&iN*XD?%ڷk׀;uf߰zIKU t(OgυNVttBŴdV} &A hyŐȶ&cE9JP{tx]Wlћ f[GM _mS?M<ȨP/jg+eoØ6=LG'inI&iz[@]E,b@yY$]g¹]pH|Ѡ_ 32*6Y{yE- 7.9k)H<;3걣iJmxI| ?ne<~fD藞;WA\GqԻk"Ŧ:*/oTӉDž61PLYGV4ÁY_k@vD6!^|E3G˼jep[>]T&2=*)ZŃ\n0*8Gl[ ;-;貯zކ}n'tiy=me̜)Z6bҬ ¥eoJ]]@V%[ f؞hͬR{p}6d/AǼʇA.0\pPYyR)F^hx߅N,ϕma&6_R *a- R^IMz7`6zJ>m,Kp;QuFLkȣ9νO*+<5][(;|ցn~Tk3$dmPfs{"=IX ?ӈ=F^Cs,Fhw\/[SHy#YoIZn׊)ٯwh;y)8^s``_Z,s)N¥d<S_}m`f-HY@h+ی+VY3@ V# _DK?>a>K`})U4ڱ}_klJV=wt?vw"r&1ᩢw;:8 *%C Wfv}#˧4J /fQl ,ͦ캻lf3:wG{`1NtB&x8I5\ם*4J %l6򣰪S^xM}EnPHA|`;iy*WLV>aXi`HQ;7sҟؙKPnO r[x1&65a$|Z$?3uA ",iyJa_?C'q6xĞ^T#e+H' ['{FI^ĭspe]ϫcSg"qtW%Iz>łt b#yJØ>Bߝ'N =rVF|[?)6=u\qd.%F4i\w&`X|9K$ldB9;e݌ ﵣ آz'wQgaϳ~։ UW_G`u?4qԗc ;fŜh~-4mlNk` :J"at#vw˙k ƻFX ys*a8@*-mbAH' "xZ "۰c&NAl1eM3xG켻Y5 D͊Hҝq*G7zahjo+-sޓy]7ŀ"?h!1 Ͽoq,t01թ=V~n21ur7(K"{NYA\ͶSB;ߝ>3G*D/տrC*gX' \F#Kތv}`J㝑Ih8*` irZJ{t!4~ 0)Ԯ^@m6{4M}dnm {5Z\Sh; {+ߗb GRciIwO9XQ‰BtH7FFlԅ΁eUcGop{u΀g= Oge{2aw饷ez>,D/dA0?|*裹9g -pNĞlD|})P9Ћ X [n03D&=N^d]qy^T)TvS4 RU-嵧np6'3wmnA}/_IZ>0 ognaD*ts-(^$zs l ]s,c3} /#Y(*_;j( TN5\o_YGJ%nLKo1Ai\TeR@<YHqo;PiBzΈugدHece$Kaݏے lIj8m>!ECn,lm.u"?$k8,!QwVg}(:X+EPuL Ƹxĩot []o'SzurҊ$9t1ÃRa%UF (_%} ? 5{l"^[ˢ&15Q?pQJ3]]7jJ22IYn'>\_1jZbTڦ_z-o35%0(wnSy l 2ךp邙otl4i-?rXoL<+ԛF1U+rS fAݞ1\Í|eQX;`3̉c~Kn xс8f`̘x`')DyrqvfuL$^8fbJ{?]2: y_75cBD0O7(ww~at Lpf]gI$pUV\W }@'g6Af6o)"yS+Ѫup{` *-9ԟP Q?pPqsy↵,)o3 iѰH=¢G]AnPG(qU%7j: 25,LiCG8s#wPdCF:Ȁ$TX=AΜ荤L5(*e|FGKw\iߊș5dıu==zc2M6aœbx9Qxwלa v5S૒:!cqnNOOROmwuD!'Eͭs n'μ fyS@vst17jikOo:0Of=CrG 8xr8- kj VÏ#U&bff]g`L\Ą[pclg p9q17]{v)T/+6N1( ~Mݹʒ@2LmI=wf99mG 7{ҶPy5KvC4.}*οM醘q"&#To*pQw;\YՅ3D㉡ xY>b.jAunhHQeq N:Th\gkF׳h<XrAn ΋yY?,ERȹߞ$ֈ:᫏)m)WӲؐ@u FIX/TL+tR."jt/L7Z4puԵZ. 1ڠ2K W)F%~Nϡ7fMQu%ܞD+ @N`=Y{ ~w.2h7+\/9/_Ň%#p# ;ع+xP-Kà "y7m.iY*sqĕKmN(TBտPX JS=Kgv:pep-#Xô |1!X2p˂"…< e8"W` @48 N58{:uYo| m_2 (d]ru @ :a.16Ƚ&,),bTKTF*ɶѫVcQn=i3<1`AZfb:( Z& nHJX^oyR6G~Q;]1΢?z?xï Ox )Gr "Vv O/Pd n @ X%Ćgh* :V9? yx䐻V.-3NS֘A~[4' ףDڙ.i{*5v`HzwCĭ|n̮d|~XoME$$+29Z>01W>OWR}.Ыa7X|S sCjm] &Ғ ͡ȞЩk; IJ1VC.JMX Tµi?Ia*45/o8^͍@cðL OAǼ<69?,; BI~mm[OҍLJ~A]!gX!5*aǹ-M$xY!T]ǼZL L-7R}:KH;{>&fv:^'lYW6 +&7܅hpGQɊ> dO0!9Ph}$Pi||fHCauB>'=_zS*?/$ȐkILi'F[^~yx%Cߏkv3JG?v$>Xi*zEd E#qB4Te IoL2`;W<ՠK|p%o?ީ.ǝvZ= (rL/k 츷= ׵r& G;[8ovwJ?p]T]h4f a: vD|,n۳w3 WUwDqU٭>t'? dU=05:j\LD˸iSyFBHAze5Q ) 5uIocJ(YMpd5.1Z@8Fh9RnO#?@%a6(@fe+Y }oǁ Q2Ȳ-f}GggZY"Π4VqAl e iwx35~Y| Op>p"RC w6c?$ii+"=d Mn.#`im}S:O*ÙR; )lG -eId0d@t.8ܗywb Z ;`e>Eîl*e;,x._9+2Kݹ/A.zlI(=;;Iv> ^ChDq?|ƮtJE60q+"*_5.xug'CL·px9N2)HXr;R FJ$ aKν8c8kMz;tN H!t۽bG2zzrnEɆ6$Er+/fZips ^M`o/ ?nLl[zm6 V|㹖) t@{G 8o]!>!RfY%=6Ҥw YU@{W&?U9b}l ǬD#ߵev[u0kUbe$]VyT'J;ktvι&1S0X0d0(GYg4A3CVf/:,qCT}…Xx6lS?iqW:߮˅s(HIgm4;d 'rqaOI񩬻6z0r#<+3so9ZJ q J vXD>E+OSݭLRԶ4/ŒPHѠ=RX{ijOe^zX&2-r`F@9~mS_Mv*BƕJ'K 98Է 8d>p1Y+k2,*xkcXlQ  :<WAw"+sI536mih,5KP{+;@IqҠl4,H}CηZ:ͫu2C$37B4'y=Nv5Ug@/O yQaݳ0fg[ C\YQQν~zlz3[@S8bɉndP"ǡkܛ L᤭,TR-(]< [ZC6_(A6'K}hL'bC`e=T98qvR0z,}\z.ofMKBHXQDƘC[UGX8v021-h KȏE~6(頲'ևF`HYl56Ȏ3?5D@+؜*ɬh{ݕa]?~e^۶tMĪvXfC͙nɣa\ \a۾<. 9u;sK#zz`ҶW|^O%>k5t M.G%%wgWeL9 fj&v쳘JTsi{ݾw88u P6 GM# 6'_URG9AȽ `g`#)bU="06ZQsh͍v M0aԒlDݒcVejFK>#Xn h]έs@[KwSyyb~4X%̭Rt.w>-(?T _w cQi;eAd%:@c [ZEMy 33 g q;#(zU[JzFz7CX$ ʾRHRy_'DK'Aj۠+&QF D6Ʋ>3S})EwAmĔTv  3 ؙ_(>J68U!CV OaRtNF,l8j r}}%~̈́CrjpqUa8#)]!_Q u󀋫!眎d`T>SeI=D"֔2Yր0;Ԋ2?BvzjP.Fb'Efd%YTI/?+Wj2Xê꟒1~9D]d OBok|SK^O#: T@9b XF)l圬LpΫL:dm`6lqԩҕoFǸcDP18}RQsuAmhsD|9{2Y ܉)U c`& 5r MPf> ;r;i+;0ǂ ]=~ӻ rovdF?E>9n;b9͑.{b+fK"*5iIpoN?9;]{в؇GCkl/5jˈHΆiņJI; O5&c#E])d B*שd *\02q kP(kcēAxGyPzqKc1YW EQp~!Ú>΁)!iAo$ 0™#CSE;|F&Q;ߗPX sRPJk:O^oB,_$QL#q& ̾,c2=S<$A81 SslIkHπح \G]sOB3  4kzxgZ כ&+ +2 uԩQ[Rcvc,Pv%AOl/  m@5ۥ=F0DDj8@dneoTY,>W DzW <͗? >}P:1ANFL?pD+FHh7n*:Na]a$vZQ÷hHPGRWVJ;^EQl[-ҿӖ).[9,=p25 TAy1NS nxڌĺrFRFOq.x;46A^^Ωs7m<&^ e>h0}tN|9#yӶF1z5vimzʢ8'&,/Rx>b~?C&.^^Q7,:1߳,J6.D\,r#CT3Fp<|N%5}^02,^7^;A8"ϭfةG>7J&23G6كh]iU !k 25@0sSEAƵD_t$/Ѯ>_lL mT9 *+IŞv"%HҼ1P#7pZa* K8Ed@,H9H96 2JM)z&Jlho5uϷ)75UI@b*WpFF$>J4ɍ ̐Âs\Omfϩ¨۾ro/TD%20`AN/r)~ĝYǀ5!o&BЅ4$?ܚTo);4#=?MiV5A]golcY l' 7(c'd#5GoVkm&e Dg^c~#Y0-ޚ Ul~?/zdd؍Ord\lѼ)ཞ>gېwl}Ms!C[e f`h''KfLLD|ߟ3pr1jgfyqxX$8W]ZZ/w`d%fItv2{4E9I]T'so-KX$y*BM.|]ːNtnE(^UqGͱk=VV(Áy*g(%iuNcs4"%d(Ffd,>2M'fi6a AGr6V*g?P&;Zy-tn@lvCWp붻T s{A ^ؑKOB9Ի)~AN./ZWntl&Yͭ#V M2 4Dիpd~n4>FYzg>dzQ8?5&}MQ%^X[|#_P8 ?VF u$f4N;3wN/JO+ls(yioti#W==hl\GY9gS+2?qK5",Cf#-1dniKsH}Td\w!ѣ_ 2a~/ˤ*t[\#*uR9 pPwy"7JPJ3SpQt0D.ZJ"2rco)UsP9 x#dYP7ۧ5ɤ˜CpG)OFRo#M_]D52'ÑT!RθJ8&[E,p yUQ)fM :h ||UcG2|=Otmv?l4q%/p >D4BPTlK !!9hm'qːuV(&#75 tFXgRjNj}ߌAĝ$\ytw{p%hɻķ;y.ו[o%T}3~N ﵦpX f? 3o#]} u)"a"⤰."NO_7߸]lvoݧuٕPefqIN8>?."K&?SJhXKfCAɆ VGq+phDy=¨dOVp}[[We4}mtǕ8 )}`FS`/?Ep1J*\i' ڱ!ж!Lf:㈜2YRO EwKnӆbiH2*/Q>=j#P +QU I< i%6KOބu܄f UQ^P9;5XsuoM7=fݨ|PP7N!wͻP=ٯcY7Aλn˱CS8KJ&k\g;Ԣaۏ S͓Sl}iB?tvUq %;{Xk/r;2j炛SÈ@JJʼvO1bS`'mF|4#3#Q$jX/hHk0ꪐʷ‚%䲃<M/@ʼQ`b  ?dv6$_zM$h*B+`')LҏͲJ$lSZfM]k~b]PC; &B6oIzϋ# Wo4H|Քy*mbL* ;,\EqD#%LIMSVyM2{.KߡkF,Xl1k.~8Qž8$'^-ѭftXݬenS7o]&'דJ/b@WokCPNBK-32rtC"4 ^o~G)*7KuF7Ѕfҗ!q0I|=2t%` S2LH1< yrn"!ƺ͍[P} H@OPIި32eOR8$VS T9Kugr p:i R\.{+z^Kx4㦜o4--?QȋWTYYN"MƴO2>!(u6vAD.(72&!牗' bѥuu Gqti, R Ȉ[D1'2u#~Ppgq3akfoWSP>\DC0ox1?t6R;_}f\`|0x T)E>Av쮶B{Hdbo8j`14}ohGYH-#zf!f\" ?3jO -e')C"9jvl s.-OyBYEuV&y~ׯ1{NY~bJZ#5nGWga`JMŊtq=fQNk(;I^ 3s}2GF=fDCͲ=J# B@wfb͹KA~\v*t0}]ȳZBV[1 JIxQ؍P_cH$S1z; Nj0x6*iL(NPdT $yXMw0gƓ vTZ1M׭:r<{\ )2$4w=L2h+B!H<2<&U-`ȩGΗ߈pK2|BY9 h'Ū0bA9Etj=)<:: Umb9=JmiL*)Tr-́#-Yoq-*4JU"j=׊aTo9;hNE}e<B&0ZR8J}goQ$E]fab_RVDS NuMI- >;I~;JOc&۝!=yq;+ݏ哳_+Z(SeGBm(n^?/C**ȦΆ Wffć[fF`(fXTZ^\L0d1~r*Աo$@ёꅧ^EڍᙘY,ñF2U6 O-,E,U>/@x)7^gcfS pl=Ll?2kvaH,Z+}ҡjKk3»YJ\9'F>5jEnaGeK~t!(" Wvڙ Xmz'".wS$68n'8C܆a|stD-D;n:0dhmXr>:Wd=(lo"GB{I7*yi|< %,-~ݣ Ӯs{=2g+ TBJIHZ!\!.`2T&U̐*gym?ǃ#̑Bٷ*BA/UCڿR/YWLt={ /oHrV0Z;]sff |z %:Rl^p-bEV1OqR{Sewbיft`fUc\*6DA i8]@[uim^Gb뗂6 LUSR݇zj74N@đao.>s6A6,Z Y?tz}~)4I< ,TN_Dv ȩt>ғVS}}KFw6Kw*yq5\Y( DK2Qg v Hs*[y,A]5KG`Yf%Y?*f%LDUǼ E~S]b!lb9hUuf$KC2(Tt!2GG8 el橄`[xX\#($j(Ht _ff Lgxi q"ohx| (H J?#YBCV-X`] 8ȹ.0>HNL,%GD $} Fr: Tb1c :C0ăAN` &\7 ޛ&+>7D,߀c2)u.3y,9g@ g{ev>fy KzV HVg$Xuo6 7TSUmYJ/M&#V/v櫝Gs= ߰ xJtx8IGaMLM%טHĢ 9@{M2̂O{6Zӷg d'RR2qt+NφEͥ:pSycѶw -Z s{I"xݫ)PPism&Yå}T(K}A9 Vӭ.N̾?9xvJ}1/Bijf . B;m6wS6O-~Az4WN,F [ULť,ll,JY>&.[%T R,2-Aׁ,&=)ȃ30Dxj[4h D%}aV ll.,Zn[a)-Q}L]<Kدpvћ_!=p)/Mblv̭5Vm01vP%PRQy>9 .z8c&3z*?a\gLW-ucdӰc F9 a-䵂7p!d?F<9 >Pc᧓`s:~ owtܐ`UyMq1պ{ܘuqf׊2t@͵kv~YAOhPVc;iy̆5" g~g<lae0o?{AՒ㊴R[o?*zgޫ!  \R3Cm%'V@ ?ԣ$uP٨?of[GVHx;Wz@&jK. t_mKr;(m8*Kq4}\މL`ˍRI4W)-xJۉ$ljnlqO)wM>KxH Z]9[h59`Ӫ*GO -=]*beECL dz-}S`<1̃Pd:m]e4Oۃd[N9;g.,e_CihFZBwܧB5&5;:~L@RueFY}e|N~L_2`:5 YYS>rA?F> H6hli}s&Tv}k<.z `bZu٭j:I15PS",' 6*3FǷH7NTOTUH9hUOS^9-·V4i썝bǦqG3)A# )D|fDx@Jo+.f.eS3[͌P\a>[(`%a7B6/OC?×2%uJl8u=6G'lmFauW (oKo:`Z5Da^ZQ8pChWFN-؅ (%TG5{A7o+xxJZz)zEyM_nĠtvw%.5; jt|le`7^op]|#1񄇑ZF;]lLX85P ψBZ J-1_Mj|Q` MYki*l֢#ܽ1MY,iVkd B 'b Sݜhs6ʡ)3 ;ס9#qn+v~Y ټ0|*`r?:AH8] nn5^' mz,PƑnQ!Ư,(=+yepιB 5[,v5A>?)?#/A夈edGߜEEprlv&MAܯ9Et 7IړBjgjI24iȇq'rwFY>R a[FLr7Pwޱ AS:vSd$ޡˊ[^KG5#xvfKw;Bo3'ôC)Yf(-H lcx%JLy AX};nnYlDN!y=$7Oe{!U %Il H/e#y MFxXإi9wv<mIO) v <<1ԟht%ipf;nÔ(5fUz vM3_ORYHZQO.͡)y^pfq=c&Vk=Ag2[k L=(u\U"}82enMW?UF_8r:0{1ː.4*[<秜.Ca_iM-83+0b{1'YG]8O4d1H#fkU׆=z4h?Tq0/BxM>I~ l1C̰lˀDX !pݘT4U+1'2Q/6mN|Zi<-C `987C ~4eH-U`5DjP{CC{BHǘ]b,RDimzv4W :4D:`=iNX^MvL n?hT@bo :@ AeJ*mu*MRE#xi'e{S.GQXs<`RCPZ`T2bjPHe=* 8Wf WA7ޗ/EZsD1D]WPV pɇf8Y`MY|-](bK:/G|aR ~Jf)FhAut lv9~"k6_ ]\EKM[#GG~f F x<2 dN|rXiׅ#b[ֽ?D)UVNĭRH%c W@gfB}GB7R8* `Zc娮,T_=i+]FWT!Ջ#Fr%>6lO!PܫmFq'Bwߟ/Ub(55uiR'&7U!,uتs}/K{.bPyUޢ:ڇNS=S=1p+ <0VxNDlv Qm>+i\;1+Zwב _CDU+c5hsޝ֍1:t.dvؓ63w&a([[)x21Nxr;YqF4ژh*q Ԃοj6`:+]$Y/.2)l)3WeRAsX8I*Y%-(wMQ ξ7. ]c{JmC_K"ZcZ|FOE:<%N&~%S PUe8-Ht.]JhI_nZ]GAI—AJHew/l lQLJ{Ųp. 7GnTi#}NB]Xh< Y ,6s{log;p* }r_kz"S,=i}X,ۋi-ۗt?*Yz*BсY  Q!bHkF#ȥ֙4@/\Hϴf&[߭ v;v]lxc!]#;II :E808 CQB065wQe}C]t3 YVz['؊)n'`L?G&]5ꗲ<+V<.$8lsLaPKR) yc|HQJV 6f(ydEsJ^2+ՆV`q_ڍZCS ҃%MxjM@ Dg+-YO2gK.qK`I7NrSwl;u>˽8 Z-%uƉ)X}Wp[ k8IF4z^ZaZ\؂j6Qc={4R ioM:I>ߕ΃ 2 $ D@#3G9G#UhDX iP¹N !H)i Aѻf IGJ}L ~V@tx{-RVxL\gpbM||AuJL}(vK91]Uf=& &!יʥqVDn_Z1Fny4L,lQz߂$9P!qS#@j*R)%EhϨhBC&Aسxu='mE@9=/5(1TcȻe%a?k oDlUWcHylux/95AV3p@jfv:%jL\Ecz 3F=dr#w(Z'eu+ba3FJT`~=vgV3Yz=tF]tu(w?cy?pYzUd̂Y!=iq2C?Tn=lA^%RvMR&`{'v{ʅ RX6_}Dߨ9NMr2S^@i>% &A>3jҷp~Ea}vdϑ\ ȪTDUIf# V$m0ZE ! %s,T/y_,$qRٟi&J~d UTWI:RbFL7&60'p6϶+fF@ hc2!(}FX,^kˎ]rck8պ:Q,Vh;\iox 6|]i>K,k<0)|䲇lUkzqH k1PI&m &gӜao 1I~>zT {B _ߏ$(Kc)8xfO|)+!bdFdQS:}7aL?$ANnث)q9JsTbS5'L#)wn棄9Sy&y\IrHl4I+U+[ $AӉWd;ƕ 9j%ayNU~u\P䡹U Co4aGj,'%ə[Q {@e-t2*v6iT~ZAak b&&1`'3mQ\H *anYc Pq^n6Fd1K n9= {;O{Cq9;|uFڰ5ǖڼ.5T~~VhSmk^v1]9;;wDBY=#-ԓObB.QTiY& L~&U  :t Vl6=õڥ$~=N:cQ8p ÑvOލ=)QO؞s#npqԞȺBOTgKꓲBk߼OKrSϹ;n]R2]/h.tºlf/į RU|v6 "iw6OQsTzS G򼎴46. {*e=j~HKΡD`y7":AЀՌ>@W,d6vuG~EjdqDsLkW<')W3r8fK} =GE9 HMv5˘Lq$xo71 eWB !B6~yb7ā:8ajRBOIƉę1Af[?IdzZSxwh`&5@?>22YwX0XމU`/M)dbH,:܄-`>v@#Ɉ(pMs>F6@ W~w`ا,EHN3O)]}wiΩO39t^Kp~ IӫAnŦm06@j^.p;@,8՗c*o"@1eNzQ5gF< ta4v8CT2;)˝':f^.E7ܓs 'kZB04^Ꮬnnv*4`^[tMEYSaTc6*sueƬ@"8!BQ q3>!EhnQC{kfG(V|qb%2$_EfŲ;Icq e`<1wGMLx&s8鐿f_\?yIQ2]I}<l1̀]vEoj(%pJ/rkτ#2͢рM`c;>4ql<(GM36E׳#O?XEú妉Qo )96x`0?GE|ʡӊ6{9G dI2 ?NH]\#ܬ+HLKvadm4t$DE mSAC'WA# ڨj;6,z6٩ंZ1=C"[}̡MJ/ *QT.yE%n*pN5H~tA,ݒ}]m< ,G7@T܌3VԿK?j>1 E hQFep&nZ'1n! ^x|E}}.h]9X kE~D?Nk<.T|:!#C[DkIނ6%sg@D5k䒽] V!3~</^"ץpx0a0&YP]~tƞْN]zޚJL &X/\;`[9R$ "Q1zV7窰$2<:;ʕ]3G*daJI;t=x( ^1ϐm /GgAWH@+Ko}U"s9G~klPLϚDLΜ\Wre3Xe-e=D!46jkԾfЊjQ w&̡6e$xK[##<Eo5*dBCiW''KX=nK*S"u>j~TuI}6f l$,́q)B:N:Q.l rܘbrR4yIzrސj2<=ZBf[Vukf&Y:g\ws`BOI) ZۻC>b^:N5ϊ 9ХŊE LS&5\]\v.*(Pkz?<'fѿuż׋7+uD T$wMgdƔR[gs0e,A3Ih 0Ǿow&.jdnR~S h4 2a6 >d 9f20L ZЊ@8ZZsQH sPĤ${]OϣJF I \3K}*-lzqn,Px _Dg(#К)P6H7p7i0}MnGR4N6eC I̞wJ>i<WC׭?W|*ԛt"Bۆ`20;Qy%tڦ B.R޴Jo/EyI'oIOUN]KcZϬM(]7"jndKh\,C+/D&'$ h'cׇJ05<T&]B{NF 2{ ~&~W <:QcSOiSiG!Ȱ.yff$[$b!*K1UkO>?t&pX06dϞds='p]q#f]j`5r)0JɊ$B5O"D=p>s& ?MP4Gw֣Ͳo.z~ǵ5nD0-FC7,~Ʒ }GhĆN"xIM+ҳ0g~pi(أ1 ΢y] yP|@l6RyKmH+="Uiͺ2O.4GRSR9nC72eٗ⯀nW2 zM#hTV}b;8G6#J0 < |m/(t[MW[ 8I֟#gK; ;Sj46Wri&L= w3#KW2&}Дf `E ƫ"zEB<16۞ oԥ8&k"xcyT0Wź;Uף8k%`jt.`Az8!tVN@Ò"S`;3j7AҬ7,$!|9)QRu#F(vޑNH.|&wLrsYu|ȘӀt-J/K, 9&N0)EJ_ZE %;LRgY.A^KQ7)`n-[z kQ00oFlP3݌(\iԶb4n=$Lʧ΍0m *Pșpnw@`5^TU 4R G~d/ğoXBj/Dz o|oԾje OL#=~F_R /hzݦ}D;ǿW꠭&f-E2M jeJ|U-59NGOqjd!:}%,3T.2=?r63&zJ%Q,oPear\c:;163oeR|Q$On*w`1pBcMQ%#j[gOɽƾ9Tf7'x"]wmQ>NYyvI*$Gr[KLd͐I nvU-aM&dܖO ̀bGAL~-ތ`Lʱ(qjDP\&":Ԗ$n8nК2u ee f˹eªء瀋E)ϐk2ߚ;6]vSp&q:;مf#;_&Slko ~' >N>3!Sʵ8}I}Za߱h@0b'b?Q&K1p0Ķb%8,UUKnܓⳠ I7W7jupX% Faܕ<9*2t@9ej9_!7rVf)Zlq{> P$Ij¸ּ\x&LiXU= Vlv"|C\LıAN $AENB(&n󿮆[G'\NUN/ܢKTpuh$m}n4i/&ȺW)퍙E,*1nPsPʧ\܅1݅K]A|0!C>)d~}!; "K@'^<Ķ+BߢM% ⌉QW?. 2VuadN3-oP- Bb)~H<,E-gV([г]Kj>O- 80rbüxgKEBYilSIH(1&<no-<< $F b\KOsQj_k_wVVl/uӚ_Y\$N6DLb5*k]xcOҷ"Uj $50ҧMAz|^b`ΧSad(g$ >$xim3ܷ^~rt]IS)RHqOq\v@9sza*rT;8OwҸ Dsvs9uR/:LyfZ4 pPKDǺN6]^[_NN+%n# 7Eg~liIUF; =}YgjS5h@u!T=(;=6[.Vo ){|/'2c$TGϔ0:iI!$`=l`)#>7=ojҙDF0<;l|YhΪѩ/ vmR:ȼ8 @o'd.T=&{*s6 ]Z{AR )C'L\.ekg'3qF}q']w^S6}~jˊ7 wpoWj}T 6z:yyoT)/Z~ fjҤ!RF  ¸(H)O>[z#dGjuǦ(v-k\D9ZfۂŲ;O_l#_kV&;/7~[PItzugs6DdVڠaދjRon[dk99&@=#\GOo+1 p R@oa%P=T~*qÊ>!(Pg֭G0lt#/+x0bNaq}n"Əl;fV(:kVfp]K}^*i3e0U];uct>uSh'4L=5iUG})pTɁHW#7vszJf-lŎ;s"B2{yhHHC[l.aVBޔ{ec ^C cɾia:Tk6ۇShXbWPK^ϩDf0Q){brGm|0!fo>tͲ+$kW ,F֊]R7~DAwK^Wޖ >+bhoY ZYAf vo`QQj{ ERPCnm-=8[ǼBL'4sթũ9:@]pb"5M|=?l4+1: g0: -HUk;Q?"&NSwL}rA ,=*)`} I ާC}&4*B,-l-?[+/߱!bPoOoZ!)5TKgIxy|Hr%݇K-Xe':Pcl4q'~vPbuOCsywCZOO$9 (ڄ*лNJA }M/u*97YeڎZ =X5JþćK3~ A OVO Pd/,-$^N.;x.S{ p?UH\V̴/˿ɝb9FFmݏ AąLQj',tg_ŔM2VЂ DDyVOsK/.nyFZ1`p=wĕ/,ELyiWNK̢ {2pO[j6}X VWO5zH''1ù̉i* r 9(AzˍYp;t41۴X#X{Q"Ρed*aɃwz2gW֩,Zb4c*kԅfl$tJpun~{t.P/uRogJ^-[~Nȝ$JWۤt,יJ8 = ړ0jTR;F.[*|4=6uB-̂ai};HM{(vM m'`B]ЃŬmipɑ*i:z {h|OǢ2\Dh7E@^fb|b*6[4R,Kʷb{n P1eJDK w Iux5hH)즃rdNޱE c,* ?zڸeh{!qA}򅀩I] uP +N=paV }<el#G4IY{@vG8BﲚUpj>ÁryJijAƌS3nF*vZ)fuΖ" ro8ڪL@uyK-Qӏla}@-'<S{3[u C3qOS' 4kM+B4~Di!nڞrNںbRDP"| kd:]ψwιm6UhdH@Sܒ!.MԸX8=RYTw,'3?]Y[*H !CN,LLP+9rK64^$( >ٛw&|g9hR%6DK} 7sv|ڮY Ny:O;-{maA b)Vz7 c;fM\[Qg.7k+r–91KYc. 52u'n/`Ln\D݊W5vgDC&WfQEװQW >tīE:Dğ;|ޣ$Tյ=>yf %!ٻrMDkyjR(j+Z!$)g#7rm׈Vr7hg#6" A>Z}XƇ@Ն5[H58xyԧ k3̻#'w:MA)EvrQbW4CAVil ]rwSW^T>;yћFWwuVG&n/u6G#Q 6J2_=w~SCHY:JzRkMnDةM^}덧"[=9F"q5UL ;5 u5D8 ~o^V`/}NF,ee6)U;ӚmVHCΓV H>1j7>hJ`WMO5CA1ｌsT[!K`CKXR{17Y{.?[p$3@4t^{.mM$#Q#Mjhmyb@A=T[ZaTC×t,'۟"R2C4|A]_TKz eLI()\UwY)Yd3W(dn1gm2v?1\ԉ5n b.|~ giP d6`Ώ ĴnRאL@QI"8s>ʇ\=nHM%6 휬eqPX%BcI+I]d wP^|UW1=Ӻr,(g ?|Ymu^BFՌw~]^T;Mx-po]LX]xM㓞'$5#[L^@T+W.c4ߤ>R1F~0p{iz,~2ї!%Mnl6| : .i1t~I&9*ioȎ-ف> Bޥ˪]HF}3KZZAJ8C])>x}‚Mdi%ﻦ|f#ś$uNC,wKpj/U'xl <̓.1k0ƪ;tBَh7jBgrڍoS@`B#C_UcVdeLNw e sNmU=r2>۽ֿEe a>0Lm2#CҒaccYlv`FQ룦!;XC2pԟʶyV?d3ӵb'@Ք|g  -Dȇa_=_)at$-V|R ǥb{BQN~f4{`` T=VWTTxYRTE4ǿyܮޅ1DIG߫I#eQ\|pHnyC~r6,FipSё7{HlVH޳֕%ܼ@oo:jLȅ bTn!j:;2.ċ=GLW8,$da,:}^؅@Oif '>ts"=j9 ɥmb~:ĺ7a>y}**[3Iݗ^9J"4tS ICiH8~43>V^e?osdxòs#t.CHkQ;wҍ I&n) ] w偮U쐶)Bԗ!~Kk 5֓F-WEX&'K͟-;jʢ<:+sG쥤6oD0F}\jUznkM ~V̙rdwoE0wz C!\MFoVu +#j[ GU| dYm.tZJkc&@Q]pNWf#4u uwFfYL/@K'8BMÀCF U8R$ R+FJ,] VV7@T[ $ .6%L:PngwњV×z=15trkq(reM'pRSS8.iDU2ܽTg~0@=i(/F$3?>t T O*'CRd 0\f‚ZuK"l7zPש BEt3[$q.WFv÷!XA|J⽥6N#"#o/cwH ;bA_{ڞމ o0eL}(jd5qra#t}*eG&"EF(mfMG)DRM ѐ\`rY=J(D /d3;K*ɲW[ʐHU~G?LjR0I2] a~sTjZbһ^OeAYpDa&4>3\FYN(±$K1E)wS1!l4KC{IS 6ߢbSi3o6FP'Tg˂J֙/bfekzH8k4ḔQeT2/Yx_ƻh>Ũ.M$7ycNd5Ѯi%?;HQ50m-AR04W5,\RVկ0U"0>q1W n6ežJpu<81&t[v+g#Aq[y®(4`T ,45 8rMh)@o< 5ܪ/2]~z2o '~Ux82P'oGGШx@xﯤnkmJ6/VrC@'NeE8W1͌5XG) 46ׂ`3sAe ܌2BCMFFkWϰ-3\;|K%wGL lV:pWc8zeA e2-NYRՁٗp49kz`ďS{HHJċ->*6݁9ngpsW T(Pcƒ31P)1 vs1 6Axe\E苑59"kh;`5T57y_]2{A0UԤM*tw+.c9i͠\WTZIJy#T0mE^E2br(cp3.>OY=:#1. SbK{s" -rgSE65~ 2 ]H't| 4l<x>"jPDM*Z>(6!CDh$x>{fgP3\^D#G %Bt={jsEdM ]%q7 fʷ!_% ;!Pkqb 6WR O&U-aq yGl爸Jݝ"e$MDx[WwbgK{&jH=|ŲlJyv0vs (`=< |ȡdGM7)B ԃ BO,VØ%rõġ 1Dlh+~YCGẀ'xDrI?1CK/IYC|}Vz(AU9-@- ӣEXYNPlqVoA;E 8FN|¶]Mjye.=U )v_8XAT杫jbD\ݞK Rr+2kh?9@GK bddçA>Bt̔C(ȋvK H }FX^ޣA.s>z"Fn>?G4fHeavQ =<~+TN E.7ŭ±l:PiŽON;h2?OIbB*&B }9xNئ2ē̃֜r$j[Iaն  7LeT9*:W*~Z>_VF$5P6ur; p6ˎ%0c[;C 9l))=;E yhD6>pI`O L',4 pJ #EQ+g=̈́‡荽g Rd _&!eօc*o0S᱙pBZRj#N ~Ɛs q L> wiu=wGغ۩'pc/61 ӑ%-۬Lr/ J'GK}l5ysX<:MkW\4̔Tr%4z’*2ѧ͞ c%Jz_|qܠiv++BΉZ&/ê=O:)13q+P2+.Ă"*]&T"KUf=xJAV`%?yU-P@~.130#pGk6`sK-a:NpPE<7_ǁr@ S#B!gQJj:IO( B,$fJ-(%20O[n݌bc 6ZrԪks8!HitI2YτKQeQ͖p|{Hy(V}Sz |~Sjxq;^ns?E4rخtw>R#AsDtU-QGEƁ( ?oLۿUsk1#P&ݔ8[XiUNdCTEd'@O9 ,E2K]ǜvUWU+k'9WO=Ք#μEԢGϽND<ʾFB~H][mYhsvm9#*xDqCr$]΢]u{jnŜ(8i笥w Hpd {WC'Rl(+;Y<փmGssvy*Ç^[4{tGyMR^Jљ99X_Qh bFui>Z$#!5G3`@\5ff;uF >!􀌅h,ww`_NkB zA[ege>ZmlAa8b"2kmE# /AD&96ݘjNw ?|vð$;H7)2Cpң;db<0K$\ H7'%%VwˬHS5"fDŽW)_HaQ0m}"mV2ҺC9aֆّFÎkpb eI{T!f.-Ԏ04k=4C,So0h^^ƽHX2(RUEM10k1o%w8bta#rCѲDЪYEEfX6]Pڤ9v*8Ek"'I mi%f/MpJww:^H3̍[KrDz˒KeGH~ܩ@Di(xI]$+ 7[o7F'Aa3A90b/86}L+S$kWN9鎸ǣ!Џ9@q;i`6  DL)Q A%|fX - I4ۨio"= e}\׷(N1fB]2ZtJ L->Xx4Ѱ!Mt_(bvd_#ErMD 35I4o_L>'juߥ'PGdJcw2(wiRwKkReP!~^]KʝWE+bbK>o u|=b+G(K7Fyx4=$}nh'ĹC|y;)r}]ẘGrd@N"`R@FB>SKV'pr"rc5k7^* ]0}{ɤA` sF&e*%FH*13r> `+X*άP- u(ăU%2R. `HD0i] y'q%Mz0#1?!s͓dnZ95?\@t՚32S`#ԟKga/?Tt:p2bͨpx Whg hn0y!1]"= O*O,!Kl]w\k[8H8U=LAZ:ai6ӣqPʗN-)):e@%djv`3' =MĂ(֔Hm(*k܇X㎀#!o,coؙr17 @Rs%6FTPpa}O۸BB{-jߍ[UF/ ^7M(YFp\++@@61/AxucNeT/Yh$aaw+oIb2 fL;Ec]ƕ:GOHq -*,Q?Z²|/[ƑT!\PAbgOvbݙ oj:gp ~Åĭ{b#.FepY<B[햫_4Ի-9.] lC0o2~:N">k~aScY!!jUG\pB4ϝsݟ B,s$yr7 !S?):^L*UԀCkK y}߀@p0&g_9v֮cQ #$)jGYT+sG(ȳ!?̡oT5 3“g4 ߆cx31Sy_Xˆ If"I:6bUn\{P$.A QuAnz;l]HOgF~3.*hX]Sч P h+͋LD倔ʊ4WSվjKX&Z5X)[l`!!H#}ֳFm|KϞYd H^"?Q d xZՠj0F(Iq(7!Ĵc4>b#6@.{Щ nam9RVR r.>'g_07خLr>F9Q!M(d{Բqs* @e@m< `m`E޾J PT4AAST WcQ˚cZ ϯA$~Bm[ ^[ Tqgp\íD ].˻ 5ܝ甝Ht7ՕiY{U~ߜz ^IKc/wL{SG7ʊ"a& )"w1Y_4lP!b韟4\F*;.*m=ܩޢ.oVJ)43( p$N2(LEB#\Xy>04 -\e<rv,saoVE Z9P6^~G4*ЫxwS-^h0CO,ŚR< ˝"pb~g%eNUmGT:DrQWSJ&P93¿oւ:e$S$r-KAS1$d#*z/tqßԇ cS51JES*|D2>6j(UHI)zkC48nU<\=5ñz3݄FUZkg' Eɟ:rNoy7-"<$vUxu=PQβ2DfUSS6vcC̩hul(Z*6%oO LJZؿy *8ޙ%,lJ9̰sq۩ca!1 $@6}T`^Cy}G#'߳a[@6= xU n. wK ?7 3$@1°|^ %~&\6$*هau΃GvQSw"YYNp $$*ؗhlAwbbt)V(=SJKr]8]=IADlāCE9^3g{~Vb54ۿ/T|0:?z@H6{!]ˣ`jZI_|3hu٘.f;44\L5-@r+%QHCϢAپl2LxeK~mvoQ_Xps3w+d|MJזGWhVvA,Z%*Dzyk}1Xu<;BIyd5>3u|a'iwD+umk ~?7Mq! MO`@lхh;TG<ၦVD1ԡ'ٻ7d:; Gț{C?d?:P*] 7y<{ԏ59#3uPe<}gbZjPcScY~;-@~$k3ڙ͕X MSuT@yA{*qlƋt$=Z7aѠ(,32|ͣyV_ё&56qP^6=@Ø'w]M'}ퟭ;eG:黀?R?7 tU_# ޸>Ȝ\SqMY!@gN`y_P@ ֟hN !qDv͒ N٢Td 2hVt:? 5xXz3 %xͷ -hX#dU+[V^N״);հnhRYm/|A)  bӜ'1)w<[9{a&UH +]vbeBkM$Q'ZisNT`PBE|h+YX8$jVMb۬lW[ºȧ'u|/a̤$'n1"7\FMlEvsm<](UZe` [k냴}3Y\{=n3n~Div3kB 0:{洕$/kSqǸP+~ZJ\DS,h,os{} %bpt^NW1}3oifU*>:.'ۖe[f>W^SZj9>ec/ŹuF՛6594I|2iCvcj5J}WvUzroii7P^I /2F*PnFU|lr 1O͛IqǒdO:ioC/yu'al`<V+$--lpl#ϦcWԵoN cY$U=LWy<:BXx"3E츧YO'35sq8?(ϖ&0v)Xgek2d*rK4BЃAwxIA&ۃ)N֗wx'3aWAn~5Ps.AE':1Z?KU_7t^Ά]Xv %t@Tϡbr;nU 56D2 n\L >貼5IV_( oz]Z,y5|$]WmD'ɡC1+j3nxTˮꎙ>Ǭ^W#B:tC l^\N@ g.bN~ARDk'>gF} -+>#A$" 5e t5rPTq4&Xz$p -'I%w(9L7Z DƉk`Mcn2HY W28.xgIn% ʪ1Ĩ,X"096'i̡:ٱEXFu6Mj[S+\LxRVbpZ~mpKh˳3bw\x.>0hvl(?&j1uc;FȞ&v\ο$LepteAߋX7G5=Za0 4}ݷtA{_xU){4aM[Z nF)X9nxMxi\#*%8[]!J:{@r_ (ϤyghYXmN]r4t/B瓥ng@jU ģJh+|ˋBjUQo-ףҚ<ȳ-4C`NLx9Qeajnx{^rH| c@kիj|}u )a rQOB2nP1dT`*:FAZwdbV\5]'{;Gqj=fLt5ȃ1k(:{f0ݫƖ 1ԶxĖ\1Ϳ,4hYa;ǖ2y}cC"M#jh_æNqLԼ |G0-&K ^KJeD?ձV{BSuQ)Sۉ=TSR"®x 70[?.ΓWbwI$z6yӯq> .ً 4heB? @St4{ ~>6QZ^ `Byi昗)v!5wK{ <ǿy ^qn0:jOP'n:6:":#QHؙ:`ڄ)3kS[و~vYĘ ˆs:S(z٨. +ai 87ƙa拣ٴ]98ɰ!Γ?H\)t555B?(8:)~Su.NBհ?,l>lv*z/E7H@R}AkdnN a4rsz& j"7&0磶9UHj:\t<!r){oȡw5R>`160*lxTX)E_x^X0&]xby2kIYyOnprnHchHy(qLnSrA:<*9e G2Z9Ij{xexSqIS" {EG+g&'NH5n@<'Έls{*ZX,PV кo?Q? y(hV¦XD9# ~;;jKr cTs 9I@iD4^ZRtY[ug!f&Mō0ᙚl37tޢwV 5sln%,AV]k (ټ4vlejߙL *:esbt΂.`Yz8O8,m5 Lqϙ:; %Slcd}Pz e-#S[V0!AZ~T67B|[tdsRa;/ *J~NC8<1 ۝vHXUic encJd; $eȊyI>g@,f[K.= 8 kv(bSkY|d!J1d"`NѰREEqSX]T̼9`OO@'ᕚ wꋔeDSU%ĴCyCERX]K$-v?ƭ~ J[[]v$MHk05.`!(7Q Wz`;79Pw-)Тi)GiӾz6Ă&ߍ⍆FX#_u|HYXwv*uVxcܐX1D(IRq 2bjeP7|hx|E)ӵZ fNŎ04B,S/V@|ZXs8.OWQWcm; K '-V,xڵwTYGS?CJẸnBDixbxh&)>?3sJ& Qjzq=|Jk.Pn7+hɬ_P4 ; 1[s򗴛Us4kuSfЈG.,!]J:k@Q [hz,t *xHݲ? Q h_};%s)KݳUv^e@:Zg X%Wr7inc]wա~yF;~eR "RbN,[Ce"xbzp ƹ46!A3jkSsRptNFՠkfFsdKH[$dr#iyIC_8pPBn'zFagtn/{#5I㤣q!U!_a=|,+eoluAn/6vs6bpFHzR߸)Rk F¯G"5, `ă?PZ?W GT @m蔱 ],F l)[n;{N?3-ߖEG[.=MC=%@"f#fѢn<}_}4OvN\WkY3KHS>Fޞ)Vyg Jh1f)ksw^_ qY\I Rxli8۔kvC,Uhv{&b'NwąnQV0!/;DjdQ9!xe=gjyBp ]Q"g{ V;8cWdrW;:\9d1毀N7ħ4b#Z*4:.mvѤ.{̷Fگ@;12P+]IN&^kPV paC#64! شtl!U"ʫ7%dڦ8yOuq>0@$҅e(|8F|F6 ^an耘7t4GE5Zkq"G9P;#`Bf(!Kr|n.%| A yvjg45k%\o>jut籍҇dm\v?\|uS ?3U$=F4|ă-[|7"iEޔh58 ۩8j4QeHs݂PO-{:m)I<(G'D0 R ZG [?jd9oѻZ4Ӵ:ΤK5b)0&OfPv -gki#bsq \MQy̆gxR %Slg <}!:Ixbf;O+p'--m{O]NQ.5Ϡ&⟖mMP+="n#ԎJEA5)vҨjwegvlډ&vu靝Q3Q4̨ݗ?# :!D_tWdo=F_m@~߹ y1xV[h|,~Lf&G 7Rh!EfXp};ġ,q`vxy0LObirNÓ/$6ۋ9S$\ Yysp z"]BR"T%]q+їny샬-FkLϏ>f`1y_"YQSvOӴy&ZתIY)׬#>RqC[[¾@Չӊ vذpJ $A}hB)WBcԭ -<]SbOsw┢rATR)I0^PN*X5IqHH[qb10>.Iڴ4ڋ~i}hM`M~Tӫj2ZP̔%DҔHYFTP_H\L30[kdժ5thNCjjÍ<9ŵߔ:M=WC=B!Qlj(&S_E?#%1`S# rE' < X%Wǟwb6P9ce%Ӳ@L"c?g:%E37#C5E72daq5 ]+(JLoZ^35'*LK.wzi=!DV<LzVi++Huܱ֑uD `nbZ,;x_`QL,>A~u pfo;7vvLL2SRܺRA7+W{0cx Zp,t:|aScV \9c'\;qyF1k=;hms٢-7^w԰PՌ45*[_ /kp'?]JrmNfj#5 ,sD{Xbܴ\Xȕ8\55QSez lk:DCa,r'}|Z͒<":"PȷY֧62`-V~c乫oR`Xj9KByK dΐ6NfFEסACf.?'x!p}Urj֪B|Q67գ b}'zq[귲Dp!1O2 ! SMZ~q2C*)Z:Z8%srag[S|.sDvZsڟ,h;$2Usr]P7;5hF}I+SVVahiF=ĕO>x15b>t28ו1 Ŋd c)c14sͩ-AX6܎y:h3ԃI-I'4#i[Y 4vICV~=AEE *O=2m^ v]{f} [ ДJ*OdUt&-=&m@4yL奥yX v#|f݈} !7û6^DJy*𮄨p =S5Q[j”EsCHn9"h('R]ŹeC? h3ͣ3 Mf Ӣ`6|a6ʉH _mI, X>I* -?xVzwJA0',5^ZZ2&~_"xO@IBK 0aci][557EOF-%-#C7:k|Z5sbQpa;-J1ͨ?JH>"kv$vLw6[ߵr9M⪻2F|fzªt،{Rԕ&hdoZ RYM55\Bu)uit`c*! 璨%`k¥}˝+I3he& ]]cYĖ mti!NsB@] /Fn8V$EӴ̢]EU1";övYe0݅ait/$8„y\>3orNt8u[w\ ;3\Hаp;9=To_I((p M5ؚ$ Gmr*ZTT u8Iu[H4 ''+dpG(F"5D*u'c82`7@_^tg]|ὤG}gۘHΔ?+I.-}hiB_\~)bo}®őR"@fYT\zL"BHL^| Q$4C{Z&MDZ }T< n<ql-[cfjBۨWM]e\XN/׉?Qʓb*ʔĴwi47al|2˘8#(: P%R+ש#LI=k@}1Z@R4ϼbJt Mr:[}5e;> wƄoUݘ^ξ\%r$C61q3`{zPkڽ6SbxpAe5Ίv3&,.ֺ,+̝/<,ˌdmߗt]EpN};`1v 3H"_Lr< e(̀?,^ W敺%+%, w$ۮb-abdd)#! <4Ϸt+voF+^-<[g'I/DKF|!;g#E8WC㼊O8pCqe*_cM9G#̘cs(i<,2ƒNh9q,egj<ۆ SId؉WQU"{chJcK Y6RV5G{24<"G˫~]%[cW`W6XCÈ:Q?Xq+'@t=K:glb %Ֆqccg->y>h%qT9thFCئ1P15c= >Olndo=v/zs"dt=&+8jLR$gwǤ`Y!YpOٓ3'=i[ȧTdr[?Ee2Xӊ W*sϑi0y̎"h6'rh.ge\_lR's=s |7e[%-|Ap)pHhSZ!_vFൎ4ALm%*(@հ̍hc-SO <-Bؒ1 2'@pgyY(||!(qa9,e-JVf3mJ9ߊn_ ;^UUTo;d#)n@ž&HKƲ>:% GR4v2 ^"/($=5`/rvRRV<<ԇI `6~/DvMӉ4*NfA~GaflR79,{5k,X%̛ phOAR7Ș'=nr/31;w п=;&\j b 6B~CańR0a-t+˞Dt AK=gΗ6`X}+.)/b5R:]>^mڦMփ'K TAs8Ei{՘DQ3s<,rhL.N1A*%ǏdNEl| G]H ۊ$(-HV46!漏u%KpbC+C_bzlw6+K[3I,Eʠk_,vO1Ϋrw0*45%NXes\=U!Z?%;h3 ZxALb瘒uK6!t:ep2|sLX*C/L;ůgWb)ڪ̗"ueRLF n NM!OLυL=Ne=A%!_SYpˬx+m# eBf:ꄱb0XPa$LԻ{ XkN}C=)0Ucs _0y1&y46沾 6A0/>H^L_D@7տ>t})D ,JAЩWM&erվU*L4"5(6?U;ҩ|bT+Cmn? KtH{r 9j߲5 ]P<{Ihb z˰.Jمףgbpm tuK>M}ҧXP g2FR6UK]\>#ݺbk{Ҍ$f< a>,QA[ +YR<x<|k=숩zg{OǖYԪsrUI\^1lLΫow |0/$܁—iT%m{(6D+gs=H|M 0yW2Zq I ?ԮC|Rp%X9kY5Y6S煑˾Ml:QnɁzE'{'$ϤAoS1҈kUZ.) ^KK[+hN1D Ip@XX] `BYT14x $ڶTE1Amj Q}óۙ^iS8{n䢱|.(E"?H-/V_Iu*6P0=XXH[">4#rg'/Y&p`I|5+]G-ih:c^0'89ف;W̶XU4OhB4D$u22F"lAseU"/j@'2~@vq 6(oGM9&å_N/_vQlCRUyU3qo& \=N3uVpX#hGSC(LJ&.8Pyx icૻrn}Xizc>A-m_ACJO nKO2C c8MBۡ £fvG'L#X KEl4E!">jScUU"*Dl!Hs7sV\k*#2$tf;n٭h4ɻ~;1hW_ (6JN&>r4' %Cֆ1Q;> lkUJ?^yUhY::IIDFdGK%KEWVe,iբUSf8gY' bx0}?/}W|FIUULZwE^.a+bqʎ~F"Чfy]( ?TkxD~Q۫gjq C6{ۡ F8树>R[ ÷T)PEvMhzX';o'SOlolJrp?|](Ȥgjd&&t~P?Sm]5@D^PudwI h~R%B^綛e.KSQ-D0'Y' H5DŽe7Tr=6}`NiŽ?}d31^DWi A kK DW񏁵|RB_P[.\0oGˌת$׈~.u|ԣ P˞<(ak'ފ"̮e(gs{CB Q8싢4e|SW!( ;Yy# =~Rnkm8fBK5#:U%,K \,>ۛ$%/tcvAYΨfD)ךp1Wyrito|0>@s4‰%7Mo]*E2p BJl>iViG:ot\Lѣ߉11{ܮkH]aYɋEH%]ob#wc9Nc ~,mW! qR]ON8ja _M>vG~LO Y8ur ox۞+^"UQW6{Qu2ˇEx?_ռ[m 4E r&I4Fy%Cd5}Q$Y".mCv\ z$D LbZ99\Lc81X]l &#~+\0L4BlXr-Fh:DʂǪxhD&HgΈOjW2AD(RO'O'&uiQ$Z*izךEdzii`gP"G/=:g5 N0?mؐiQb!]AsݳI Wm!,rNec"7y> ٚ!zQZ ]{Fs%:_sMM$a maPD|P`W.Lb\з\ j9uNLվވy_i >ͮ_V`.XI·"e%:;!Tʫ Kö|Y$_B[!b%kᒧiLwF|D[Nv >m:v]غJTf bT[vІ*~.~;5қPq g YF1$ҁ2 hC$: ]`U^ք=ӟ/S1st#):qب5Npt/d5B&J\X4.tR *R ҅} ΐw3:yB~\eާpyh?8y/#Ds-[K|f q݀rqcz@( 'ÚWxg`3ni }%3))jل%Q+zj }. :!yby]_{%rrRRʅZ,LȞÁ.ΙtlLT׾SMJ0Y7b_<МIF$\UGXGzA~kk''n,ǎf <` Ğaȶs&ǘ9-ps5yQH^O.ReK_SQѺc*EN"~*=nv&쩹JZB*.Ԧ~Aoj" a]Hf>91WmJn.BZ8PFuz`NZBl d/ңi։9#M~2qAۑHͲ>Xx&yykU ݬ5af\|>?п,Lec G5~g(G!/)U@ՠ~cl[Qr`Hn"j963{job i{{Lvv4)KCΌggXa@nS *W55eFϲ\Mb*uz/)2d}_SEWŰt3Ck̬l ϊ)]7AuԺHsKY?H}K_Dtady-Nk廙HNπ, ) !W=o0Gqaz֓>BcrY&fɜfQ E s %88~ Pfu4A W5˯8O)CoOSyp*Xr/_4QBQ>&)'JF?228A j8V{%BdR{+ԟqfHJ_ɲlDSTRkp)=r g20QR}=n-$cU~TwQ 8ȳA_J3#A@q!2%#uUyĀ+-N\:~ QnuƀJ%f8-aXiqӝϓrl{*W巷qEޗAm'1WyUD$2*WS7Y9]XUM8:5!4%k3ƈO觲8@z{ZNpW%w5q8:3]셇8X,M\{+ Ҧ-;7x0ZJ_gh̔q W+yaD;, h qZଌ(3_'g=q$v[?QV3qB3‰J;,J_U*Zb+52ǯK8U)d A]8Q 4+n*hP@8b1#)aQ(1&Y]P9DD۸Ӌq*ʇçҸSO{i8c4Ga_d&"ja,\ZΕfUn#$i ;" qNF($JP*%ðz4uc'bNU7ꔸ@ԙC&p3`:1btprخQi.vOyYx=at,[Pb̑To!btg^}o|AQ3C\!]Z^-|xqYѼ)eCO'*qo!9K eHTxC1ky8 w5F^Ȓ+n IxUqC_kZnd΁N l"WzFvϫ.;0jHSz$3?My)SGWzR5jB[KTnfӬĴEVtwن] uiA.aQ߅@(4Sc4I͹U}+4n(ŷBk<\<^cY 4QH@,ZQa`E9\gu\K$ɩqEɦ :YδNo#V9n B_;#y9>tf#%H>+3nuɅI;Z_ G[8ݎNIG&-v ;F}Ӧ*cjX,g0s`1xdRn ]VLyI=׃G^<i7)( u]q'pϧuewi&D"g^f &7u<|{qw-Vٶ UxR{㋕,~ aLx= neKjweX/Ky "HJt%j-О&eVx9Ŝ{l,e =)VSVYk(0;sL=؁^)EPɒ{E[ָFRʔaLBe[V@/ZY 2}eb+~V '1:ftR} d%ϻgBN74'jhѢ;qFZI2oVjXK"\]VT?w>`58C=O brH(n\&%hI#lŪ=&:6+71CƥcN7(l QnPmJڍ-."0MQWF7$ apoEΘ#ˉ`/n mOp`sL>8'׫a8L X6w`3lQ"p\ ݭY:$ 1'H^(5BғX/>A9ü_ cK6lFq?) v$$s]NjW!bW5r _&fþNC@^wwY3T,Nl Kk9ʴd_,,92W i1!zk+bM܀L7\n #](U|(WZU, :Ot3wtYd uXqP^'ma"o*4Ucb0&qND0Fݙ_K(4M=4^IP+P 73ڸ4v|X*p=̺oE]/+\Uz|5eɣݶA+_m .:,lQ/j>r2E6dr^V׳ zV:.v.in ˮ@ 'xCs "WkXw,Q.AG ynlRncS-2hTa$h M(c>= ST|N.+ d' >1^uH~r:K~)J2Vw9l󾡷 uPzc'}J%j"vxekIh1y}t|f ɷKC6oP#CY 4Zc0]窉Wj3)rζ̄ʅX[_zCc \>;UF4>^b9<1tUY8S&8~j?v t~9!oUᥜŔKr_gm@o2^(_v):`H eS2 H2iWPJp<q=ً0bqP1 z '쮞eϞ,]AnpMj{=guⲀ { w"RJwrڗÜ$%5_q*xw')^%ѿ.`+($Yn9 3|`W#4# fxN+3fAt- ]h<5QFv)J.Š(Sb,W靄W_In K:TVl{Čϩdhuu) i:)4V3~<x)a5{0Ǻct= uZiJP÷P,7bB:;ZFj/^i:%|m Z3qm;_"5cUMJWX%O621NkݖEC=Dg\Eùw~xBQ_QZ}&D׿"Ovrߖa\\/YsB9t"pTew@޺L&^JQOݿ8q~gr6źWV#ܯb,ٟvԱ-,"9e`PQDž xd̵SvѮb_nyNazp <3KMb: &BP#)0)ᴌfǨ{m{~Ծ[StEp*JoKf ug`{ug̸SE''Jmj;Tbꎕ1i{I'_2 x~"q 3}ɹu񨄽޲EGUOжDrl}3G4$~k|VGԙ'k{o6G !v)[=Te:8 4OI5nag#sdY5dds9{;˟9Z?\8`6KRǙH8^ikZ^On#$`/sh;ɂ>..8%2syH|~iZ#eSْЩHǬy{5i]JkI1OB28& K@ + %:Hgdsm08ejI7q'h'EQTXm CCfcݏX?le& \~Zm\݂ IϕĦ/ p*[-J j*&ޑd^م)_ ̒YHgvn&䘠懽L> Dek4 _Yt/YR&3Iόc:$P\wioT<ˁT#sfrݕM8L1'T*XZobsh[6TExp|4~NNP\weXtN"@ E 'Oq_F3_{cjpCiL ~Uu~k"P$82QYZK3]JX67'G- [ep_%йCul*7AO-jth ߻̼EB)0)ٴ Txƒh.10?W$;u%A̸ܵ(d@#V>}D/EC2QJ?'a_K|NXK(-ĒÆkha jTI ɟWAm˟Tl.*u0ݢ{^t"fAyI($; Z58cm/•P;`68D=9?5乊60T/E>c/@H4PQ hu\T}pG-6bӊ-/^G`Ve!uMcaq3星]d#,EY)Xa{kFT3igf6=M~;4; 8PEp6B?gf 8OpWIRߨj^; ۮՂ J .kA4ąåmR:7kIA$ =5N{Atg :qqgsHK>w.pߨ;lT' /- }d j,yLwfj䡓6s m,D%qk3SsӷɶFNW/F9|~jrAR"'n ܲ&Xux!Rx~:. ׮ᷭkh ȪRWLNsU4iTY5ɿ̮f.x0G g eMj}=g \oL.k{"P~8]L R+@3.RFdv$tGe6JN/!Èmr65k^hoNQЧ,594 P@ A&Z@)Cy;@h8:\$?oI$՘qӆ(ޣqe9 tg%=.5⡲W0l*U,S^6uߦ ("D|yj*?8 dIVzMM.9<\f`O.w\~Z-/7o/a[JOAy#9<^4~p@RC=\fjP5W!n"Y uހ Acǂw 6ckڧhMj"Cc.30rp@ozi#{W 3 K]eLJpY['NCTqSfef;lO}ѪfF..^rTTq|H s_mqqx f[ůNT z/:rxyQ~X8g(vM(`~g!V^;,t˃-8kCu5 .nׂΖNUR8X_ج+W*LRQZؒs`$՗wZ׷g\L\) Q;vҌ<*{A v&;ަ81^ꁾN3z8[CFi9D ͊}7Qq{ FS_<{^BgℍꭒKrU}2VA^:xdž+N&i8x-BM@tˎ?$_0̬5/7_$dB&a'?./]d߰w摌Hg ,~FV3ى8סHEc$\~ y(A]ںpq7};۬I& ~ GoUzʦ衣p{ި 55b (j] CUsĕL] (;g*x&iU6,¦<%"Sh+oW:A%R$xCkΦ~0g/3Smf&"Eif*ν˭) 5fh/iNm n/:LHvG#kHXWuE)>ig1EGy]E[Anbx?Rk }'G2ؾsI`ë\1rN{kOXY:d `ū2 P/C+ dx;F^s`@nsåixv?sB7!0wϕjx3jUgUR u]{Cz-b" _,KDNbƅPpQwqXŬvsBˠ;XQߠRHO+=gA=ᐲgP՞.ېU `:_N7br<^U>?bm9 5$蹂cr|by4[ܵd%9c_(op2:g9B"0l8am4t~PLQhX\߱э)8%$PG|4Q; r1 b)FE v "mW)CDkK0 ˶HN /ٽ|>19TXLɿU z;VH$4ɫ9yRaBx,Ik]W|>n R#?A#(Rxy\ k:⯧I719je6S+Ә}sC )_-&:_̈ɧ11zi.?􀽎+EڈUs(5s撏q0q6\x9TJYhCz}A'32~.F {)nv끊@2MS8| '7ÕRڕ@.Gv=5ey.JzUzOݙFo8;#w"X40 t)uMCpt*bH[#G"kbusqȊ2˔e"^gIM>`봳 ӽә.Se#@h?bY[9 \4kyfle v ~D&60>&za'~|S rEC֑chEHC[bS}ӯڣ ;0" {3UXkLDTb$E Ne5OFG%Gl' I]k/wp/WՐ쳑5n_)% dSb=smqKeqa_}B:}w$?|kݢFࡎN~Ě\3((*ωҰtqJ7:5j#qҩ&m/jgbA,;i la+sXhu/#_jP>tyTb3nQ#3(s%xV ,wU6"UiÊ(4As~I,1ǥf.zIHW&d@bٵ}ފnʢV5R㵦5ߢ2ec ~f2O1w4odd L4-)Pt~)O%3?E=% 5 呠@L*E?8R 㜨y:g{gέܣBq>SFEA|4r0_% R$]_}T`țo{T2Yb$%OƷd"p `8{M|q_q 1L۲QQ"JTg <$3-쾻g/IHF`U&%ӼAtRҜL+,V2^N,Sf&b9 Q*i|+G~]r0b5(V8[Z;<4Q5j;v~UtcNQhXyA׾n@kf4مҫd:l\ZB#kz(`X;}-c;嗡LSf|}!#ޠEܷ-5e)~3:vPzUm. U@0h#las>ͷxlG0:=K]:zj.c<^z?N%Zpxqtʓ/|t䃯JZe7&`L0F侪 iBx*qi 1ZX;A&^}-H>BY+Z|0W4±T{YFUƔҶ=ƀ݄vlF@*سbEhQ@WCzд۽\W”7*=ݜs5F!Z<{FF!-ދ@"/bXMኋ a!c1@_h`Q'Wadr/qORI[@v-N {>ZyO܏J+~A@20+yM4KFrBCkU^ Bg[_C|t\KuY^"]k5+ϏepɍaT)G1 p][|e6̻FnjZ+A G`E[7BlKm}yW!aЍ3e{sqc{l|]l|N$V#HYA$6=.v㓦HHQ93T˲G 꿁g_\pCgf<2}oAUуB4N^1#cj v<SoMWZ획tP_jMon5 vTcحisLD,>[Wਟb`-Lh8Xj_DnCʜqGd+ĺX8tˌT9/W R+]nr%Kq?IǁNn䥌ľAV.IT)J`sGWOv}Qwʘ}*%Q9$Pt P Y`$y<먒O?0 %GNJft6duzm9Zcdagh _jbVHbM~كwC9 ِYm`/f  PO BT z/!EyFWhBb Ƌ  Yq%xujh#E..S a= Q.*n|h z E;5fT p9ʐWٰg(wa9Zgmu 'ާgZ^\<#K?͐wgh:Gv'7 dw ϠgR2'DSM(@k2T>RGMץ;b(<+ʆ_ W$t95}tK[;?^HHeH5։3~ 49#K0mp18u"QXIPɶ{>0p{X`Z\BFZ3)6wKm(Ŧĵ+Wj<]36~pvI(BD`?ǘ5׊)?S1nfh@f6"?l@? e&ʮK0ΓF85̙`^gqu 暄$%`\BŻ$ N8ڷ(wk:CJZTa7] Y3@wR";YtK im۹?n(SܝIbw7ֲ~ۋD`TـjXzyˀ:uk6 $ )ūM{!?d*?|(eɖYڜg5Q~/vX$_V̨|t0@f1n,E稃j2?1%0EXHnurF7+ʴ?ՐJjEM87r gժEݸ?`%%jUKLib0t3;ӊL]/Yt6zM+PKo- /g:m=awcےX38Muu{NOgʩq<{7ǠmCz'J^]$$1,! >6 !8I\}!/c%*WC9u~CT݋`I _$%f.îp[h5do }%e' P$'g W}X{l-`;|5Q[+-VaS^GOx Z!xLвyrH@)CF?9rdZV*5*ﺷ5{lϡ&$FIz;"7ܻ3MĦZN ak]-,VVO9 WKpqVςo U4[X` `_67^=%ΟWApagQ4&ntKjf)")$O-КV)QUC䤵9C? -QA=ᶣ󰭼1jחԣL4u;Tg>v~+9F,򤂦mx,=ۀ=rZ-]>eA(ip<6# D}ev y2wdd)Q||hi$˓C0(=)Ռl <蟜O֣1|MncC6~(c37}XmӉ:3=J2:ãbi6 C3|QDoV}8x{r7D *4 HlDüxXf1MⵑaX`ڒ2yJ8Bjm/ZW#BI= `;A*7q=r5;C5|8ā n 79j(=7{pE8kgj?R C6XYؔ2Nʏ:nbl%*;O 5bX`.x)[F"\:"!RiT^%[p`t z,C;<,,⺠U5 99&`ħvMƬ$/(L.Ĵvtg0fΉ$L•9Pt@Ѹw6sL y/] r>Jm* /J\5>C~o$m݂ R2&!o"Fˆ'[`Han=%Jl>3Mh3soaXZ[yuaq|Fv̚!4%#q)aevveCxiִXǚkmaҽ-z #1ڟzqs:#ݕC"K2/k):⦃L7/0x ClHMck !r,`CiOcM,v^as$)~ 8j?w/\` 7<F[ W FBe,Wʓ:Δ+(V #|ޒٿ8]O0dp@\fJL>+z?Ʉ&5k^one&@9:F6w=ɤuK $ c IË  isGax"BJij.&T@U?a ȯq D2z ~aa`~S+v;%(7TsT!cWⰭ/BIl0=esL| o6}ofu uȋ7d\ >L/SY Go'u`թE3P״xtˉ&7 YNiϹu՜U#cuۚcSz{79ybNr?.cZ z#͉ (c,k/$ⴰ{rɸҼG.]fs7 isN* 9H\6c{U _ԬiUyjC:YjuQ|M;1'!1fM$0cwpOh{%gdLHb!d^/rWbș7> lIX:qdWT)~^K`J*ͽh;НGӋԞHGZrM)6·RIĒ݈N]N-zjgi.pb5_ D8wzC:%p2 ٸ=p$W1aTE^})F_ [&P4&@$HV{FR\Վgl",B{ُyY=jTdG#ZFv݉lIo ˤxknYk=?9qDBk.Lr!9#[V#eS*n 6@HbɌ]-\B6X`ZKReBLvGRwC*4͓}qf#e-t _. Dd+{[(_xp7%yihs P+i,-y, %7,~&RrnV.kmOmc&7!VG2 <5Y:1Wa:`I&}ҹygy a]aHWAI²{Jpsxԧ.(5 PQV;:!B%p T2iuSla##L@ (}9["L Z,e}d{ Yr.]$Y 1Y-8Xsθs#R}`Y A2LƏ Ur#;W|ۙUfi`[H r6$\Kp(Xǂ乴"U~Ek[,;I\)" HC ETA'y M$]Bu I)~]4i^vU(f”MӔ]b>3q7;b%DXv^F*vq*4С~`&%2,3S瑿"yl>."n,@cW对2Wn𠛈o)]ڒwDKn!$t˞B)X>^Eqvu?zGƃxah]wYܯKJBx<RWs~t8mh$PKh(A IGh~u8ЄWqQFzy?T˝ NL2YШMP~2l;YKv†w&QYEA%)5 L<vI.( GiSMR l+NyĘRu9/yۇs ؿtBa; 7B?\WAQKqܓeVG#u3 zu}H&^b*PL A&|pCdE Nj :E:Ui0 Rp۔3F)Oi"5 cDսGI#L0~|8JAUKT%h6c"'nm) \y+};9u 3$!/iق%f,@xu\:TWB)/0^M;6?WUOXa3ySs{nOzJ-CBz34=ȵkH˽\en8k϶< + cI;>L4j|RꪽDž,ETie@ҳ( N{Z$JVǴb\s{I)PZ9k5\6Z҈pG4-5| i7Dtª D^Z_ǎSfND[:M)b7O%ltٍnr*WÌ'0 sXn?0K[gX\x)LEi~s{GFprO]UVnx l=4ط)q'`NA&+fU~lW>R F8j` rU`%!r\5y|hi|H1oz}݄ʤ2q n]׷섛t?egB̲L"Kt"d^oVb@}$.oD;|ճmMikqJ7xPPŠQ /;V-P^ 񯖊p; O{f50;ǻWr/N8ߓ&^X\3c64]>Ѐ wҁ7 6%2.Ó:=ڙEvҳ+bvNBSC[VP|JQ5HExu>KۿmJ Cm vIۆCh[7b󶇙=1["IK-X][&b尩}I*1Yh;7BCې~Ԧ b-K{m;,v{|PSF ^\ l[ף#t:piptT m%qewtװY'+/C ,-c2qYSLr@$Lf%sRC=i~7$UqD|WNۍVd)~Gq|Z$_ ucpch!.{%F_`KVP[{UqA`8~xlzFś928!^>*B(@HEXyV I!~8pG8**pO<Yz|ޠlGo,B:d4R`*nANVn?UǫNevǤxǬVN0Fdٴ'7b;#MUof6q$"5b{G%n#*ORY L+V˗::| =QRB5)TOp # (q|m/$Ifg##)̍Kvg鍌 ̗.qpѕ[}erWOb*mp\7$]ֆ "φ6ϓ%<ˑUg`w8z!f61_UVo'UcEMdߏVnhVnkw~RI0݌z9Io31EAq+aK H Y@R5=.H̲Hr0z5!->tLynŲvHKoK&T݂ie/x0(5d,vW±VF4C49U@w%sel>,M-U mkd@3_Vo=w}h0SD/EP-ЊYNGrT_!rVqjv=\ ` b*lS<+cO;{UC-@-x֎Je[ںx.Wg7ݮYtKa:|ս~3$j7 d0ԇ8*nF\֪LՑ;JEA۞k$1C9W^0 52E Z$UV4#OuKcu9ykxEԋOpB^(SQ\=Ug#eإUXX7SI:-`#Ոpofޝa:f|J y!Zwk,mخtR;'N jV{%hbPLl Zl0I͙Ú^rGm(9H=G~s6tZ=)V"lZ;>%oIџZ#bPC[Xގ 8rk cf[,(/D7 xr_BUR]I)5OwRp$2o '=E ϟlZ75πJR#S<}i35!$SLobPWͲzwZ pTf@Fnh1"D"l)hJ7e+A0?"|W!uZ:.2+PR);99 7R9!ěC1mx"E(k_' W;r]xQU8Mw!ZpU1;Y64dhF/*] w58JO,R*M®U:Y0A\GysM2ʹ?G!R/ˁFZR' ˝Z7T~2vlXЯVמNfz;݊%wo&z S4a kpg|_a}2]sWUâas mhsN`a֎ riWjD(CnYC,"]Jy8H6#shyv= 푙j /?9"gS})ͳc؈0&Hתι~a$n3nRa(8*ױ=}>t4DG1l]3/kïQ+(tn>9^⾑!lHIM%=i!e&7|c$ ي GB:"tyP~>;phb]ZPDs[JY~QM' EyGW L&_.QBVВdԿi'*/ Ǒ\ѪBiB׺8lcCH\5 9+^1B` aG- UEmkEۅI8>p'$a`^΃ Q͹U}}ڤzvU6 ,f).P¥N.60r^%s5pVk i2ϧ]l(h2NchrTW*#mvݐWF+@뽱i Y$ u>`WƸ+Gire"G fb!qn^tlUBq*dsMe;~@S!ΐi{g~g%Pt*eEv,olgdt}fM "p$ GjNӖ.0v1ް3z.r],r>}KokSeaC~a`=yo4u<8j ƫTpX }p]+o Nr H6-CKNUc!T-NM)/V@`jqcA4B^8+e犆lJtb;\g-Ǝa4`ZK̑{+ 2j 1z(7=%ӑ,$s@4ߒ^iclV7uym NLLBfO+'#S\lb:BZ.z+a{VV E00gf<cfu9U/jKO%wg0:&ɛt{>>$D: :[*K2i: 5{Յ/hzx" 3ޯ"D۶HLm><߇5ۂ)!q5uR n7뱤_)0wD{}sK Azxσm%>eޙ+ԃ8Nw[H]'g8Z:P ]aݨE,d|3^AECL !8Qݛz" rɍ3!=s-cIE_Jdʘb;)ڬ p{)l&V~SӔ)?M}!$qiAvɠRS1{є:Ul}t/Πs^ރ@by B ̮Y \v"ȓꇉQECqV0Au}ΜX j{nId+6eY辝9 6,DdCvIǰ-Z»sU &>:sc:EvRaXնer6@`:ZQoG My GŶ@x4*y~O%@ vY*tH;+FaP`Sq=cFHq:o U!q*|C[wu@?q3SA$-ntW,k߶P ~ɖi@ePΩm喲#ZBMmQ矢.oކbT+wSJSl1XN6HVdhv+$nv.<^r#RUy<~~ za3V:PŃ$#ZDUi(CđDӰ@ iMGJh.D,z硲CZ ƺHݵTXj qa w10cJhG+eyCZNԲ9kLc7?Zli(%xY.٭if"U_7s "ʏO")'`CIPW cYas8*ƍB DhuCnbR[RET=?Ğ7dnSW PC+7^] j0c6yFKy!FpjDKe*gjL ~'3o#k߻ ޴.§M;&Ϸ䀆.J/u)¬㰭8-8a`YP8Q騌]bRP-ad?x`)!4KNl9FoZȲˀ$[-qrLN'+^BEK13B=f7%_xޒ+ch۔RGaD*VPM}0qx*($ z̷kmkpJߢnQ&'2jvl_ηwE^;zwgjH0@xaxYK6Ou#yTN!x3d' " -~PP mG䄫 )eحm1tftjt_reuЛ$줇}9IVl.C`XUxѮ  Ba^m8Aw!4Ucilk:ҚlJN,S%3{ZG6m ~|Uce_tkՋ+p,-}Ov%c$Ls`L]t7Psל/mEq[<\T9![ȊV39sGews ԧ$ÔCh 41s$ Olӓw.BM!_Mq9g/Q<߄Lܕb&z-6Oe0#lט4خ==;,G@D%|/uV5*-l02<\\25!=c^ l}edQQDڐ9(t@"]T1Y]uV$:bm1I%Q ÈC _/ylލ&:>;B;~+%>9s}뺆a^#mF{JHf&uoa)+dů[IYNYnBBe7v$<(]adݭ 2i>|,٨jj~%!zK,׀)|;*Ǫ]DD I'4 QgI*AIª✹ā0~oO1J !8Ҭepȫ 2}uƃe_L&)9`X4_B&;*SQ8VK=*A"k.,.5*:e\D 9? 0CbgZ+YG.p?A68F}?)gg\QhW{7qq$de^"_1%=L=sDg<]Ȭ)Ff[?D.TVV4ƝIC$6َ &R }*M{vߴ5RTj"`4u1hϬ|Η5r’0'a5 ;t0uLQsBkin΄+5f(NOǸ@Z#p,ǐfBf*TKD$pᆝuB6ek|Be=ܟ<e1OVDCAB0—oBs젵VD\-RA|IiPq2r^mZxL*TQEq~v" n]Tqg!a]:{͓{{ju + Ṟ =8qX/st"dK}W4Vzp.~wZz"fБ͊LQeӚޏl1">K^b)z÷ , T48Y+"ꖰ8"oJ%kn}1c03%v$G\UY>u m5*}n pWRѡ]c}PKC]]C_#Տ{ +lgWv_hꞭ1 ?}S#E"LKi5LYiz@՗=(U _NrЬ AjXYM:cY!s˱3Bg)6-Z0M7`8rWtYQڡsg՛roW4 AY*70[KJu ,^IVQ*W4p[?pAvb,7EJY :VDz+\ mګwL>Oj9vz-#J˃E rv H{.~kDvX A.Ӳjǹir6Z*{>Nq[3 A|8պj zCL 3 ؎j෉J8ij|>M. ')i_g84#hTiF{#YQro7a2ʄGY b<!U,ޏKoPY`,*TOOoHFIP#&) 6[(_7G߮LwuD/0Լc<8Brꤛ]b8ִ#ȖaFMƃY(F*ԹG.!P0QPVQ.r_̌ ,a RY:Vd U[A草%Buiq/8 !N"l8벟{9z x@@exz#:oVzݤDZ%vqe ~zL{8BsѸAc*dzO6/ 9g6bC@u/)S:o2 <Q9#nV5syA}P錴[73-c]b·.`גiOĿ2NM'Ѐ5@(L$s*Q­6+Im{a w5JG]ƪijQ&-5_dR$0`N BWN!@9.UOMGGGBl7wYe(b~?#-Q=ucbRf2ւ;,SS W>ƕWQ]Zd ؈?&Y*j ɬ%+46 $NHshoټ»3VAL`kt`Ȩ,}c03M׭:d)6vH"q;̾A# Q5Můx[w!L Toߢ69B +w;|OԲ"xgBaTYu0~"鑈Ʋb"9;mo0xjR8od=IUJfpٯD.=WFi>-}3,n' ^Vb2[ˠ]Y7x$ZK@NJP۟xV A2HltSZJ=q1T}}r-'J6le"{&Zw5T5wOLGu sd<ddVqҒGIH RWl-t3H,U J'}{^ o(8W/ZH2&Dre&7.\O)np23 GAM-LdF-45 4WzZ(#()^L ؉шb],ZZoZ2+f\#.paGYM̾^ה#SJ.DZANoȔfJ OLc9&CkRh8E63Un'$ qR~pe!@4|x YRvRJ`+Ѣ>.H0SYhgH:qK\ ! nz3 N~{n݃/{EdR8uN]SK㦸LaVF?H}U|iX6 dd;&xx#NtD3UQQzޱɾ`=oή0gU$j+ɚj} ٜ]vat HS<o-> Hvjj #Ь%E缢{X:]Fr?((jHyB0f9?he%Tvut䈢}7<%R_SРּmBjJ\¥UHZԲRBVO\"h2@c(9re d{0s<<:TYzd.q;^ eSx)~Gּ9UL8Ot!Q XJȯT LfUM nX(rB͠}é֥qzr}X7,v!펨fex3P~K jeS} cT4RFjlD3";ֺƬ7Sl#mUuo+[xXM E{#"$,T;x\s8S6h/i'1T驏4ݽW@;όok=l6^%P!_[`˩(弽*|a;$[ hhhsl~:~CuDűg͓l^#vU(Ò| (A&\k3 ebʃ8 Kav$;wRXU_1ObG**$Z mp"2)brMHURuZ$>4D*q R8™ c`2~HW+ /ZݾR=-!o mdǃp` IԴW\*0OO::^]o&DSw0apE4LھhnHcډ<&@OߴH}ڙ3r%k[P\] zC fJ@VUW- 5ڪ)l;et"<shXi`FjZ1ӧt R#6p/:_+-1[kȶt|36Ʋ0]tˍ(F^+d']+= eY  ^swU;0_NX\q Hƀa gwI!Yqw'ó07F5 ْF7 5-t&= m^G bZZ4 lvX|c mr/<8N7vv?OsYȬ0gqNw=.WU"*TrxWQ(^"2*bTgm@U?ʋiz;tMW9R:d`gQh'zSr!%*/jHt* :6ù5;H`c Wx̣Aɦn"m_$d{m,nDd$=L5ԻB2*emCwwۜ5_=dEkYIjI@7+ eqM{V'/ayt \}F'ġB~nn8Exnqna~mT%3^a!F2zK<б D4(0~c6o^74:q}yhg,xP*[OOziQlmITRY;e'G3jqj)o }/n>53hRͦ*"YjFwYUP[x&&x'`t>J:/&#'[|wH|e^ۄmK b3=_4NsIQg ;3BmQ| !{G=@Kf[C0b\VYd]y*8ѨЫm-U:#YB]'eE!D5[_ٹLu``%os[X3 [[Ph%o}Z?xYzI𶡝ƖI[2-nݘ_NK<a8m[ ~ќYVc#P?qWr=02rV43e*fKdB eت|H 1 B@=h'*jݍ`D*P:#&kzG1=YwVa}'joDG>-1Ӓ>ތIԅJذRf1*K*@Vi4-6U% YY>fU rK{}'Ȣm q_zVv>+~y)JļzK2pր4#[ dQpS9$Y@0+KCج-}uSO2R$95y1Eds"H zUASt)8Pm@UCM,$i9{<|j']Č:J#T ToGD)Ԟz=_NrDblg߉gd7T$@g%#wJv`~)zƢ5-4˃=ӄzStHUYBa":Dk˒jWn'™j{;L3-d}r.T@X:z_IE7QXs¨}!\M^A="mRnc"vOsU EIւ#O+wXĖ>  g_5򱍐HeK))߫Ot7BaĹ>.6[ʮkLkЀM.5X&51B uD|U=b:>ͣM<#uE%K~q xYc:[RQ˓,۩.XG(D{Wy=>žS'MgvOOP{RTWp70Ol#:ߥɼ!2t?ٺc疡ȅV' ZOVs'CXֽI >xoA5T,8+J#0}{^}MЫj~-5 v$$%o|CHN$ ֏ATw΢xr6(ηFT0Xʄa6{pY%( -' 8EZAA V?KW-VK0RRUy&1y[.EaGMI?(^:ŷ( v:t&>!ՄD8y7pd˳BBsjևjHPx|W!s@ !ޛr3)J(ԃ7Yo ?qV}Eu_TӒʟq!<g+n)^Չ?Y/9|[jo_@6""{g3#^.s]f-'!AҢ z[@[[CaE!&+3 `|=5P #B*9RY񌠅J+D(d,~'{( *d)5!NU \Օ mrÚ*/kO@w?;lkaV*QQUg^ꔀRꨄN1Jx Ix_r`sÒ:ɨoԖ!hI{>dwﶦBtճF-EJ˗i+R'u0_[m1.kdkM!6Ǟ:oq$?g@;'k@>,!$^w4i:Fm6l:9[n|n:>uh֛&caa2@>ݚ VVY%|ݥ@=Ѵ ^3#l,].< +.&>| H Mki)Tb)CK!%x Hmq{'K" [,ƸWa@s x~ko!/d2 /@ ,X"%!Edn^x{(kx;X$4]ێ 7r\2ֵx#s 㢶q^bF^׀_pԲ32ȡ*T9D+3#t6?p>+F0^N;ZG2b ILn~cÇȮ;_[+j;B4H0=,bޔZ 5] o?ϛ2Pxt w}R__HQ\f%[RL?5raP!iwFMLmIV|aa=_m A_jOh kJ;l'xP6)^HQxCc`ɩx?Alwb X zML6[p=oRc!tuޫђxS 3"9 M] 2AF(%E =`rbpSتp*V3DfSV޽jw=F*7re {b%9WƃiPsY\OAR}wLwpuhTqۥ!?c_bmɵܵmXBXR簳l3`8 3$ d.=*;huM: t-Wd{Hh!Cz2i%R}eCb v]3%X+x)XC~eٴ'ԱU7\>RToP.*3.|~ru7C*^98bd"y1G uh2W,.^xR G;p=}c0i :,]_ln S HENp_CM;0ߛL?paAWf&Bf|[C &i>!Pg}b+,]Ԗ3["SRGqg_l%D*c1'éhA*=B݋+|Tgh$1ŐilNavKZm E>%_OyƯ\A㥋hYuscj,G&ņm@g0Vjxseξ1Rq K9hj18Nɾm)N_-&9%<̫ kW?%3Ftv+ r\i^D3 ]ؿ`u 9J)űp֋x2mJ  Gk: `\Q̬21*L1U ;|偑օ.Sx?ҴYBDChڼ) ? 8Zram Ofu+ϒ"/9TYK$8QUKiBf@bho$klbߎ=*Hcz_#=x ¡Y@zq/YhfVI~0"6$&|s EEY./ A'*f)w[ᘂ"G 7IV( LQp^e%4NUSEq2ʨ/ZNsD:}IP }k!'.5:7ʅ bX9^U$x`ȷmE)GyxlF'v6S"`zpE7O}̔I/ bZ!l+*q5A;x(ʄ> 7@X5@{?-4t5WLZ:Ǖ9mfaIHruOW?z+YƒP>U)Gcth!x-K_8 @SdIXsQH32 -K+[EV2oq0|~'4(qp:J48k6ԦŋO79o{?pxD@ ],=x@b͢:!9`ugGԑ4[ DQUMmӋN[ GUSBbCTIseN]p2TNhL /GIBӯD73"y٠.ދfxCh1Z| [mW^Zj`!Yar/A^2l_W ) D\ - ıs4!{Lh ֝hN8O-RU#/ Z|8K%pBmHb3-H .t꜍qXqCCSD#qFk1X!k!kАzs6~ț 3V4~ى|e}^-&&W*:BDf2*aISJM:+]Kj vhУ``]h#}>Rߌi_|4^mbh8 AhƊ ]ɝOo̽3\EZ^dB[: b^<kŠ^T2{ -@R]uڨ= A )qW+xbϵ Wtw>u'oA9cU2ed_?š_勡$p$cH,1wWmCx虍\{J[_{895ОK| WZ(,/=h |y@ ¦Keiǔe*䔲d/#[E;Ej#"A3g۹luχ`xèZro9ŷb%hfަUw:[?؏Lh"Kf/z^J֙`Vw{| rucr -u)ӝ =?'"Ge/Kxw$M;$E_"TFIm~^@)8٣-?`i7G}iu^t?m:oZ9x>쮀l]{|'VIhOfczQ c5VM n$Z f4xU&E6>F(>smvqpӏ=uPrK6I& pUގF* /K:ǯSD>.(B1OnpJ:ȊTۛjS(~T"gR],!:0uOҫ\v2 ?Bg Qarj-=+2n0St/ȉ|i$ Kt淡?w*z"_>mU%:*"N&(GݹZC(΃>N5* ˭ M؎QT` >.ˁv^m1ut"V#/XZbQF8;,%n+[YߏRNԌBl]gyH¯)`^Ǵ"GiB}Y@abo7~|!x;xJp3 XovB{]=!([SʪܽC|PJ\+\>I;B A ~CK%"&'ou>.~yя3.9ǚv>t&^W$&,F_ ?y2"j %Vry9.޵;SĦK^MLI+ _35cjBi}E8K4S×7\b=7dF¤#^-halA|*ź\b7°<5Tt|;^R﹁A Dm:KBs2k6;P5rI ]}i8&鬌|!6^Y(tjMzu6ˣ a=Pex`֝㯚9г)ޕ;Uq-pՋ>l)gk9B /ZPIKɢN VXaИb)d# C/ԝ}׈-neJ|s&GV֧ʨsXL[4ϕ=8MW/zcO &wP=,-ފVb-skT8AF .oTFcG8E" '0 ;kW5}BTB/<DZ4$j0ۘ2J˘03+Ьe6cX 8M;G{v}7DV,6u槁f_t*""#_o튷.u5ᬡ̂H1}Ebùx5Fڗ3жZZ}'NuQ MQWOm0Re3u8٦eǹS>;q[T S Jxm0PorWFO02;plԵ* sT]540Pw|j{lYD k5K-ASNyKkcFKr2O]fqg$ j9C8#al}:|-:i[s!T&@|dG5y`ahy9ѣZU?5oINO#wEf%4n_0Dozfu*~]ƹ=VK^ Ө~'fe {jt;Cc5Si֫"~; -'K.qzODOyZA:.Hߑv( X*o^mP! 6vX̊VF]ׄEXpFI}}`eع\%JBvXkS,W($Yx92Q'֏Bv"e 3^G&H:Eu1_ah8UИV"N2RسDsN17HRGXm/2#mb5i@dk|M Gdܻ`AYޣZF9ىJ<0IiA lodbc߽eZ' OiɲIꊴcv?8G1$κuu?i\ T+ߚlR,:[aف 3x [\S`#캳U8$U) z7Xwedge giïz0\Ak#O06&6!j\#X7P)u䉡5"y&d̆$R/ Ѥ@l~`2q:^Z슀[Э*R8pyGB`8 /&; 썵g=M fZǩ[eE{Զwҳbgߐ]xk&]\J^i<{Y;Vu;1_QaTzr'9A yh=۾4fM )X(v󡄻s.? ֣6ϰK:\eCJۢ`~ō|+Z!r H%9 Q'.LϰGXl E%fgu. >fPrf/)\0f=:>UePLk/1j}lxl/ctIn6T=Q\_{BO8Typp]$Š!3[N{i|sSh`{|`M-%u/@DK@t7GnˊĻAc!BhYgc.G,9H_4c dQ꯫ цFQ$+|oGoxV.)+񗣤DdS}mi.A j5W@A 6vj CI5J6ӡ]w &G1E'u'}p.՘w,PU!J=';{ng |yT YWI SІKhDi0yTo} o(S -Ft~4xtv /Z `q]-Ɣ_p= g)IV3OGqELV΂ViAW;p2BD>#FuFBɩxF":jj;V^_nQ5W "f}`sUKq}娒ѹS%eC'vs^Cdd&q[0l]n?W)AXMķnQ0JDbS&zЪ.E q:.9eF Cޔ0qZן~Xtͯy^ةCh(Rrxk e IMT}I>Ej, T\267 ~~sIT@%YǞ}2uBzB>gL/;fCcyBnQEF;>d0Qܪ4+(jr6bE4W/䱩8 w!i]>m6?MZ-%̣7uv 7+l!F*Fd(Ը̣dAʜ}Mܹ~hQsBzEpN)t~}+ȯz'h,xr8˘!Gc^ю.~,Lf/g2PkbmRku͍{[(uqsx;Miht%6~H$MJ|։7F4`I~gpLQ_ /^ňgϋkI˅:#q obKSUjJ+6s_W|yC<:nl5͑i'Xӳl΅5D\z:%g(#Bե"csZtYNjV1_?%U .Ȣ?y4uk$6>sO3>սԲDзIcvt]Ԩ7_j?[4txKmPF酠?H{tC8T_sA9ġWSwApL_4]]"tEY$a|ѩ<׉'я[(bDkkSnU#eH5jؗD&)*뉅B"䋎nYD F&k]07J^a4;y E/E'Bgn;#<*|&i!t_B v/&\5tIޕtؓ"D+mf UԴ `%8Inh;jG(D< 6)!Ш0+ߒD$ "8}5 W|!H ]5ٽk-7wvϾ6 Q2k(/O)ZXŏIV\0%v)]fɩd9ق:cT~') M֊0\I w%O`r}ns82Ndڱ wޱ(h* xm xA=DS%}{a<<{9M]18;m:I~h'͓O)рѱUV/u[FW u"PaXR5zF< ,%q޹f st&]@K8MJe6{s= 57boWko!JQr$^Z2V$ p[T6 :Cz0H(fCทG]+:\ L KDe[|; E]G!IˏexeIgug}ߘCpO;X0V5'yAN+Z~RUC{ FkdSκ$ wZd$rQH,Ƚ.Ձ64ysa$@Ju<%K!#׵-6te;Y6)X5 ق2TndvܨC5 b%'\~o̓r>F.yIt U]uwڬV$$($Kx7m;?* 2(tp;xp!04y\iuC(ċ=kXCv8Ixթh"5U֥R|%^E+!mG ɩf]Ik\LXiL-d6)f煬FGlLDVg7ܑOER>lb܍b2F> ''лYzJ |!XE;J/.eSE\i"j:l=޿䟜/)oy?}b2ˆL!q,硅}t ͬȶ8fFB[v:~ H0#ȕa݆j"i9ɣh L-c8=CQB&hox4:7 hO3_mFb]#ZX% Zfc>@v6U'L`ߣnPpf|aݑ-_sv":Vu: |Yx\wxTq'>ߡ#HKT/lv7A}Y:$t(O~uB3Ӥr*;N(tdY'3=!K#OҷH9HsHH !!r-9 eQ&JK40b0Z™KDH:JqH-uwR8#Ni>T_J@ f.ra~է7gcGµHx9Gzsm-0MD-2Jw -;q[X*&ݓΜ^f8[lzVoUr?|wB-BU1r5*װZs:=֏TS\vtv^M@>6(sO`}[OFK|))OCqG$;@8O2XPKBl`)q;SPW%!3,[&.+i{K-Vd1)Оぽ/Bc(Fu}^kѓ7U5tA!=`:_=_ƽ-/oHshڄ^Zl1QE!e@$306q^#ݬmv>F*a@!w9ymtroğc>c|meAҲ ;.x^>ZܶBٻ$3Ǩj^$t/b?Q [H#& '$E O\}ց bњ7Ja5͸+sV ӚҗrJŨIX?fKm&\Q؉9}%B ^<b%%EbkƘȷtتZq|ɓ*B(\ !\/B^jvhaŽVk IY(0g̾^c[mqځOu P9P*ZsYp: ; 0t0=R0qbW\d&1ӴKxIg! Ci2=9bfBQ iVҊFjr*Ta?Q`ZG|\bJķޱ `u' Pn| #UYgQ[+?4`}!mUE+z0F$JH e ؕ?}NqRZjM SUAR&$TtFJO㷄Eܞt tEAUH3.~VGc%N`y=2t 4>>7UWPld* (Q*7yž,TLEc"7=!1-q˧0^@+Rk?a촭X֎pDAZ#MA'{\̣ҍ6C%ue,vMez"0ůAGΪ#~n ' g/,6Y܈ʮ;\\N&b3B>;kAkue2P$9J؅MބÄyMpF\џ:8t#a`;Pd`,'*#Nw*I'VXڪ/& XGUŸU)K/&I|uWvLE4 }'Ks!DmoLx"r-5n…j :5{DJ<u/1rd &O~}|ب1,wGlqeJD`OǓJ> = mMSJk nE_J?~7I<G! ׽G$|Ȇr&XQ%kIZPp# ։Pm)zx]I\p;8#w|x]Dyo RS)*&'<#E5qKT3l %F?ձmNC`PBp=+زeH.ƏnlG! m^<2Ju[:ir#X ήg2³~4L3;#ᜨU#,] @7""Zqq( ThfA.޳Umf@^:<% 5k,կ} Ê-׏,y@*r$DY!YlLi?̪e[ea;bBR'J9x;*K㮳QMQ  ._P9ErevRTkvgX{I?QQB[l0W݃z,[s&jă\y&u:3Bƨ`4oҤ^w,'\ۯY,<'>@RlcR2[-@]zPnPd#'DGl#hi aX9aZͩPi5=UWBoqL_{wtDH}QC $q Y;\e@y2Ԁ|qSPy,-8}gR* ![e/nl;.cf.8]L>)m{5%S:8$r  R%5ڐ,Y߰XKCdK/_z1{⃾ ["=>|̟U`k|pd-zD,ؒf/~j=< |y-%CBD0"[Ue;l $|;\ɛecx~i*&X yiF*1.8 SL3Wfv) dcd1 ^ԉsqJdF7WEt)w a*ڳ|ʝaO5ڧ!y9k߀zé[&8Vgo˅*MGbHhlގؾ/!plDj 82ې*yP\fq87_)7I1P)ZUY]w! J™cQR+eaҸ](Y2Ԩ [ZsP67 a/’Cgn^9PaȠ5WCgduNKba)`hwi\@ZhRH#y!QQEV_%a+! Vɱ1D[xj 6ث1  V|-M=e7;솈u58r h7vg%Pu q"@N.ND{Nv=Ѳ@V{ gw`CͷXy;q G3"^w5F<J#*q,é0 D'4S ago-̿g޼Lnj~ĸ_(G uosgQdN~w=**NDT5̑ 6ڐcCOUe;Bs>_w6`z>S]O-ko{9.7^Zr|{EzTf=y(nZrFIl ËEgqL;X¡( qQM7&@cdڒ0^B2fD3.ݵ@^4Lh mxy|B yv|Q˸{Emt p)~3%R?$08U=hk]7l}b! |-zi8;]ĭȇ-w4GSzmT$#b]\Ǭ7xVaܾv):.-Q'W+eΔǶؘ鿕~kjӱ̊{F7mqw.S>ԏJD!dӪ5g>0DyI]x /d5H9?[ +PjGFv<%%ю_l  ߏ&Ldl,;WevGӻI*0&eZkJ~Qс=ҒY%y]m1A"Og-&4/׶>&it`#tV;oG2lh:0 Ӌ'Z-t/I'*7թEvg 3,+0Tf>fx2u"b~a^/ X{"kU.8ա_zK=*DpPL%';sG4;&qL6ey:{o֖6X`/[_/p5`F]YXYf̉X{-i²tT2HSj3y }TDgؔg"b͵v eIe^P 6< :'0_ ag1N5VգTeP%.`e||)u˵uؑ*,=)˔M},L^aloq&rJ飞|+3wOUcX*%Gخ8@ ڇgK'rZ+k㻜8d ?썤Ԭ Hſ^ eҊn ++>|(OQ!g靋 j0QN1DM=;C+fsR cW/~Jk 1~aM55êd[RwFMMmݫ**kDXmtE=T'ܹټ&>h{x;3s5|Cɋ OV`!d"$DDD*~ $ CYBDWpAiY-qn0(CECİJXh}< 8:QS +a2A6>QQH~ͭB3&eo6)iJ|>gZ;*q/le; svcAsi0PZ,HI.緮{hQcྺBܐǬdY1ݵ.6>IRDL:~3u!'xV y;XtnMݘ"BM6`V&RY{+< %wJm:jv1c鏚/SsyܺS<C t)u8;3^ 'K1\o:)<'ng7lh6,XI7k*iRP\@ㆬeoF5r2Λ#lDpFf$ܛ X6dei{nalq9 /[g&cFϺhvd8ѨBUάL41 W }[':TmYH1<y_T"jkryEq?ʹ9j ȩX 7NE7ӄ 2ӿAS.NSݾ*xBw }pOگ#]&+l/Âw iؽ+Tj0t>ECRb h3&K-wnY6e`숉fv%/KX3]oh `Ti^h C1IF0:hEO{k]±*=տ*`~3&vmQ`mیDzڻ Cwx%NXz):#pLJ-Q|+|mAՂ)gMP'xDAmօA<ACѐl&%mŪp*wJscLެyl W5}9#pi|%f?DQk -P'Zx~@jais şR31@O.M;#|(*>o@+C8 IY\w.K`?TlVzP*CB =|ľR#0`vÃryxye"ݰ=S!A{b96:SX ԅ8/$0plM._i6uϕgq6}PB$艎#;ƪR>0f+И^OUS1Xqb@~l?K'e6;G(>L祫KhEǶCu^QB\Izt񜕗$?ˍ"^Wdhq*pt:70.'i[TQQ2) hXہh]rO=\xɍtֺ?!0.>2w24]2k)+D p)4i7!l"Nȶ% asU*@29Bu[0|Nz$)R:i:d~תh  m)LsUεywwGA/-1Ѻ&5 cf4["}q gD19گ#\0"n_^D5?%T*2adYE=7-eȟ"uCk#_ X[r~ż2_s!''{Q74̬ޡH\IsMhωi e@ma/)gŰf@fUwkK K@Q"ȿktL\ӥq:4\1nDRwԍYN&l YnBvٮ{J/BA&4 )zQRW7G(F=N R-El?)EUR49(BdBV}Vi&,Ȝjx`3;qٙQEltn.} n&VE/ϘDm(X`K-FS5)AR.a *|૤ڔ4`O h_eТ2|"]7נ&[9 ,qW]|҄~(A&Lm]K CV#0_Q&p qez^OP0AC4wc5c_pjZ&hn.chh@sLaαP٘,$\ߙg8YF!N; f ;X¤0hZ]W.'}j5oWL?Ļ~$YM @!홶0u'렘X 0J4Po4wMELZ 9z|> 7gib>8"1bGeaa/=_Ǘ!0092/ P=dD /iIZL> p9$cƴ#ՂaUL.s`$n.]xFy4/ at[O4xqWtn2B0*il([ZDpdb57kdf\`= BPJ$jC٫f"5V&:(^K{q=5j˻|2D bRyJi;q&N=ttuʿ{<8vSe^?n{!$3=0@h}֯䅺@ĥ@8>ckbY 2K o'3q4u=fı42Ld@Y`_Cab%6k{GI߸*LL;l6PlhͬoG]kC*E!^hl4) 8HrHDĦ^ٺ$m&KLFv%Ϫ"fO+_w6~I9\Dpz=7c:\u'Ӽ;O@n(wB!7#m-r>9s^/gHN;Z7y"!CMRZ9fYԇ}k_N=NfBzP{s]XE2:z˘;-i(!IUwH¯fQZܕ\Adpm{ٰ5$QSznM'pM!IDЀc z ^-|V} nr)YМ_җ  9mҵoeܕuM 4Vw2D}YϨ۾i8 $aR ͫWk'\%UmqؙHV_ yߦxEB o73rX1%%7Kk>e 0J?q0uwř&Ѵ%g.YAqrRq!M^dmH6 RŤ.CPVhEe"?9cZ&Sڿ8Xhw}#d̾x :bΘ2{HMA`Z7cEyZLrMY=tn<&}Ef-k}-Q$hQa#1-EN$dXХ3IR̴o;s3V@V$"|}WI"#YS?Klژ}X;P\!'(Z彎vs*Γnܺ uKeⰠ۴/=ZqSfF(O <UD>iBe|- K@T 6pV v wj1޻}RMLi$ (v=6fI5ݔƝdi8 _4>Zt/?^l|avR4.7o1]x5Ĵn>ښ3e(s{:ݺ+}q" |ZO!{,27 2ObPQ-*~FFk% UJ>1/]B Bw\^M1ǻ1/|=d<$][ܡ<<& vΩy7Gex1nD)XIUHj'& D 0Qut)5k J@=M¶$ED܊'^sDč}יq( p$B`PQ܋K<{2,0QB&&FHR J 6j?+ȷ *5%ڌA$ﮒĄ$; Xy4+(KSz֭)buQ:KkGӏycї0VwcY<Yg[κ 0Zӻŀs?F5@㉿P8hOjaBؕ|6.d-㧨rXnˊFu-LsdM,e8(ˮ#Uy9ouzo-x֔m[aC|gZ_ilfݿy$)>'kOt!$^$~BG!]vPc gAɝN&n3 D&*K%$n;u]FtL Ь{gIGqd_gP6"iC d9wW 0V)sOI ix:t.t7%1 $X%W[z_@wh"zBy#[JVjM6׍Gq6ZL/wˮ;6>F-?ڧKEPwGЊ#C]e*4柽[SE8jZfLfoP:rQYr̝3̕Y6fr4{e(Q|S3S=1](rW ѣ"0gEm ϧ]-s"ڬ%q)<[s]8hL;@*Ox_7؆ ڨ'rrV(䧓 yb]Y/:  iu;Ź8g^P iUw$Pin1@rJTf:OB&&W8'E }{D'LZZI#= )shÕ-"/l?,{ZoiƝd:WhJ9! ħ9KZEb, IݩNGxu}LA|1ɮ,$syP:Er#1F xBfk#N\HQzQh]R}~e`JRG4јNw ^4Kc1M "d@biHqw%BtRn6|ܹl8p_LG8 9xn&Nwfm"n QƑK&&]tKO?+ Ѝ'4˧$AW+\3DL nY kE5ìsſ Km o aIEUk侑[8,[)}dȂbDΦ:+W3I BԼT/7{"{t֌ߢ-Yo/]*7g ٯ-d G\e * 6> RD9ZO)DrQ aS3Fo"w&w _zqD5`R%q%y;b T*Lb`#c]P}X=6z,(YG3-f> *5=x%vl+,UbKA ;⡏JÂ(G;M_;l#ݜRi24&˜,NU|?z5əl]f)KlH;ƱM>L]nt>ҤK#*G? deaiၡL`#{MpbG; ,ـDVaΗ4Xm=vf_4bcz}a-=QZFPc+>ne2Ȝ4nȧ-\]{|sSp!gم XNoefg!?L@/4i~"e;Ƃq(ࣜowbsl79] I78 .SYZ%hF=emZtY&%{r9?vuY| =m2,'k~Yy(uq fZ'&<GM>TI)'ZVH N6Ju^3U>] %*5cTZqpΌf1^zb1 e-^Q}!W!MKUY3c'WS0LC΋yAqTpxLJsP:[ÅՔ brc% geb7s##J2%ՙqX1z*/@CPO\ӼRE ֨[;¤ /|XJ$DK _Uw}~rkR87 %ј:`WYx5I ݁1|!lg)-ֈ:}>F};RYK^LyH,#zT))@[H,~6sB/j+l*f"fd:lZġClYiUP-C'BYkXdF䃣o yvK, >b sR1=F8yb ܱvu.C1.ME6 jIoIMÎC؂m]z;O:Z e9ܣ) yYD%u%|WF/43Qpf\RV :Fvtv `RSc( ꩝}Pm"Ϲ)R~p4oD*w`NY,Z-HG)Z@Ȍk9XBF~ $ Q[*ΈI\KbפēekrRl_-Bvux>EƑ٬Qjt:φQWB oSx#CȌA:lo;< r5^!w^P,i`N](\6˻YhbC@r4$(v:DÙ ~9&2)6B Y-qRvFaߘTT3's쮄I\.$3ᩋx\VM Y}mDRxw<,kxm=Η3Ʈ?} h+:g^^Hz { 4g~gjK}N06~'>I Ty /n%*C8U lhWl.>I&A>g݊J`) ( 4kål AQXsHL62\z} }"_hѰ7fΙ& 1B^ܬ(fO@eON9,27Նy*^ R^.McV9uaajYTI[|1}vn.Vfӓ`Xn**~ CrM ;Ib.`i͔B}*eהl,pTGmuM=:Er} lqCٗ+;Ͻ(ً R8,ax\'w[Zr>xu~[p #y"TdP&%%*56 ~C \Qܾ3i95V."m#pQ軆Ǟn2բS!kutַ\_3C2m&ḏ gFɼUiv"f58s{?(Lܒx#iZWtͧGڣ*A|V!9@t{X #D*-H,*UjtsP*FD>&^m|MULe߷xP_îP!D}\5(ʕ=P,jx ,d(zm!Q_4e2eFkk*T=u$; ;VK r1AbG}]xs`IJZpq"h+Ipf;!HEϨ52AvUc߸jBJ2M?!kδEp) ^YcsO Q1-hݨ ׃JZRtΡ᩠YFByk='X(b>_a֏Z8llLZk[ $)Jiqgfͳ NNp>7r *MyL` *-OUN`.@@˞{i$4nфE_<ۍ+c?z" ~鮒MɧôN1ELO6E.v\-KƱ^*)^2K"e?Wɘ1  )/w*foj?\u9,'wb`ňVy 0&^k硦+\=|lгd{*P_Htb=hSηY謈 )jM>&ZާSKm֐xE/U n~vnaeS ֒.GqNeR?<+*| qSW:kYM<~dE:,y.G=h4az5.M&Ӏo߇3y'Eou SvT@Bcx`ʘ׈"c@ ~.L_q]ϪO,oLkT\G{ !ࢌʼn3}JL͟G]EcGȾxh`؜E[T.&o}j,Nah{7ji҄ݮQIpeC-<= gcϨ2Md3*F-vs|DSz+q9+%.Qg$\-qFs!MGܶEQ5< FR^d]/m@vRKh/P6Q{$1ޤ*èSW>˗qA]KJۏ)ӯDt0xgfTKaVsJ|dҭ<0*E-γ^^2?`/j]ӹL=UxW ZզgBߣtqq|#Y5㺣-xb;_D?>1y|w0rYBԆϋFmJWJ鮱uD^ k}97<0KȓxI˂8Np .>P`a JJöLLTuypWvq0@H6eX:]e5iq%1-Plx[C+p! rS{BJ y0 PvRLdsmR[å)^3DW,kX$ruCoz$WZ{+.f]a$dxs l%i[jN "mjdo-gtt6۹#.K#f8'Q<k{Fw]L`L#ZxRV~"i0! VC|o Ǻ {n*?/%𬙐vh2d()[74T{ 63x"Gcwķkzq`-9)p|(d e] -bq>y.ӎ9?zIe0o+1|ܥ#vk.C.W}!4gq,eoh?7ɜI<8WQ2 cKZ5혫?9Vڳ׬H¿Ƥdq:x,Rmq\.Zb*r جVlM`}}F <\Qo 4v'Ɉ穷R8aktLF>owxUAW0WFVP]93<[!p Gs,{H#Aqh~bk*,#GtQYDH#v^w,4'=oҠSa}"kR7\VE:S2部Ґi0ųS8_Ysӗ&+H8lgmqK|dmt!`!]B"P)5^Pص0׶AӇT'KC9{o ,L4-ʫe:fkWkI@X&{fj?6܏{L%1.h`Z6 8q.՜Ky0p? 5%.gt> OTp772g9ga}9p)>Ml6 p&TU":CdċaCp0$%B*V+Ӛ'%'}xpjl9;T NL\0 X0o,!~> o*W ̨틈I'?=>St:9ƷTR%52eQ›#PggV;܋ OZSµo`Nc&c=sӧZaV(kad#_T k@.V]aLړu&K}ѪtL~7_t6(̆YIB޲,4Mho7i%(䬣׵-hcXEeqQ)`G7qBI#/SE$$n΅?H[- P^0tdpH1 /!>WvmZp \SQ&31+۽9* ScZF4鴙cj.a*,KxXVFvI\AA_KLX}!Ԥ$}߼^f5{n#m Xx7Z-'D&VgDt|W0}ƿU 0N0X|HS6<+aD?ھhԣlꊥmE*8̏(flKdeYFјE:~wz~=`fs*l´,s0| z5S%X|(I)o$:K1$#sͲB`'R^MaHO3;bNOI@J\:xO 9i"~%X)ڹb| ȏu4 Uϔ9i$xYnDDie bʯ[x# ?huh$fۻ=sf|l뗌CBEr_?L_2{3Bo3r/+DBV!2/ h/Ս?~) {|ݦhҴa/S=iHD}y Ghh<7 rz粮:㗁*-ak͙k%@}xđ# > SnF<3HI>9G,ڔ n`L^Ym3{ IyU\x@v@q RMꁿM{C5LroO29>שּׁ\֘:`fMZ&lǿa}&*R]֔ԉi  Xқ[6 R0FeɎ|XCI#QT4Ϩ'gI nV!wP'[USxȕXsu@|$0~LUVJ 3dJdC)DO0/8kΆ%4ß :m~[?BF_$P]B) 1kFTnZRJlSz 3y(KES 菝AR>Dmi+kp40ې}⭈ KH$N,I d6[a*9&pezMCNWq>JtM89*g3.qLߛ/xo6 +'yrhft~^\.5DӬhj] =ڐcEY+~/P裱Xc54 Ix;\pj(;#C{e,C tjBˀLͧ(BbdV&ӫ6[1u&<ڠB V3(n, mKfմ4d)v.ErD/Js=|@ ׬!*=5OW-[+;Zqkҥ&Xp`@"WOBT/-9{ۋqV\=Ɩ'wOh3ccd_+ժk0ȩHwQ'?5ZqTޫ L; _jxc%>jGr2WhB/NGH0]nȲQ&?!,CV+so!䟦dQs@ 3M ]v:)ծXҥ}Lz :ܦ~"uYk`(c1B7䲽0h!@x(b}m[ࠟ>\;MƎ2]3 ?֍d%z)[ N,u|Dm 0O cQ2~k%-A8J]osc?~۟.h*"W](FI4QLސϥ`8Y'#;KȌ󣃛94JU|J }WQL^I]Đ5o~Ѩj(^GK[cT`=?wQL5?p+M9 pt=kM/+\}i&\;}4 헀a}u/[wAeVltK;)~G0Ö\U`x%4MzuMSzb2x 5֤$F'u+cPw=~և{r@]Ah7NVn *qXC mޙ^ '}9ݷWy{8TflOt5囟IΞGG˻YkZQPXf-$ qe.ce鲡_teu72ۭ10:kT0uRcX/] (n ԱUbXԌɔޢb9'# b%z :|JBkJfҠ h#Z . _~&]d i(Io@\ХXąNUY߶s~,nX%ĺKyCy {{1{yV5w(Wޟr_]i4]c^.>?6h.w IʎC 01YV<ktktRnn! 'c{`e[ <"z/2HψGj7$SYzpy`¥&hneʭ)YdK0FdMQh;CwGHy `B=g-^rܠX&1v<O:+sL5uNIAI:̳w.d9rzgMYBNhVR? paeBJ3L?@1i'x|+oÍIՑBۘj(!jUNS|Ϻ5{J77GcYimųklwO4[S8vGE2m}`I l)`Mbҕ\&Gn[EN!Ji*_]&A*LJ0)0dQgP+E}I&2M}躶{PC_RJ~(Dr󺵧.56xnnZw+NO^<7!pʞ_5$Zi62w6Gj$NpiSP' 9+;n{#L1p1i:7El&ڻP@xIOx]_sm57|PbV:wD14nevS#k'-XԷ+C۝󬭎~>9 {`ގMڬ 2 }4es.`HImvmr"PL+BN҈*m'C!Uj\趷Ub@?LJ#2 Xjo#Hd4v2ΩY*]G]&Zʌ:*esW~bD{?墍!f&Wҧ_Ž*\[Ef/뼊`}8 8!\CHUUH Iq UEFNɐs )ڙ"ETm#Ӊ3aNjD 3?'N1sJq漛0lqucg 1fٞ.$2a,ZAHM){ \2X%1D#qK!̭AdvKq5m=h_^+b\)Bzz&~*rƺ7U-pƘB$ R&B:HF)W gx.L3vot#1b\ȑ|7CXKH: Tx(u-vB21䙿?n ;#7ҾܙB1]OtC໢j-OR]#,yuPRI.[߽!i%7_ozT|R@ ;V{2*fp ?z@ )ӍpαԊhe5;Qם%']_oy2UX_TZJ.q&X+k#oY8:VP!oZ/`G.z{kA>gZMЮ#"Vpg$O(ꬌR~1  v` K'~*r%@'w3{JfYg1x0ީD-|~_쁾ptMŵUJ'_~^yQ=wt}-fg=`> P(Tj~ߘ U0:6,.>toan+P/LI"7b+sEI`N=acUƔG6翚VvŽj-P,{%ݬ[%kH6Ѧ)DZ"9D::1>"*b>Vzirͭ͡ :;%hyb@VC33DO |#2%OmnؑlNy\B&+Y)Ki #.} *M02M$H&~ع/@Ɯ-EՀ LE?g optGkq9o74^u)% j^M|;\mc\Rn~ZH*u*yCMJ:W$>Ɨi_| B:N"P&nn֟`cY%(ŏ̕- 4YMRr~ZnЌ֥pmd=eq/ %35jLvy݃RTgY[-w3Ū^&1&f8+żʳXpiΌlOƇaZI hj}z=G2ZӢ9H l6Y jvI΀&V0s=+tl&},˭'5=l]UyjGst\j77X;j55"MDܦ4 ޡ#D*Cjy?mN5ǓJt^Xn9d[ &MLh~lZ.7塺}XJW.6G(!Ix#WQEw*RcYVmy4 ͑b5#L).KIX|N')ԤNUnSꡏ^j<'/ͮp(a($UjþStꎀ96W&Ea4C{ 0g?Q끞A.+V gy}rj,cl]n<"͋|y .:Du:.!7Dj寊 _8mM%'p\{J6OZSwݢ oĬèamSs-k#R3Ii`ҋ?@DW*kv㬅l$`ѩoD!h֍d{uo,yGz+P#ĻB1u3!傜N!ww9w ÿޜ 2ܢӘ˓K @iʤdzM'٢z%oY(F%d-Xi=}] sù*Jo;3ts,󃪣"ubgE7q]x_ud]SM kN[WN^% d'–dcO=k 3j p Kp|ptGN̄n@ (чA^^?d|m05+r¶.x\ ;D=uK["mfxqU ' B~ѻ3d](ޣ{A7.J6qjú~Tb42U#0O/I6匈hurZ4:?N{S &= UhnK+xq?=d`Ԥ͞+&GE;8ej09< F骑B ]<)«w1DKp}0핹c0q%"O8f@gcnȂ)/hPA[}߀ )5Żu泳> *+"x!4ɃղѰWѱk#1V"$';n bj;n, W 7SYֵA%m )f]c]N/%cuҙ [ySҟ$aKf]Xa9I^*S&>i{W<饊jBU' -0 _8 ]hI_4vhǿRl5BLE]ը6׫1&2aT;Bj&eƄl?@QH #ˆrQbZKd~Oʂ}^|OW(V)z#K(-ha!ėʫ1?MiKKz煫p"b [uiQ?_0Ae (quNF6k `>ʔ#J|KS{͐H(]CXmoD-jU6nַ\J/KLBq+ ;ϾZ{5f$*#i&x^ԆG50[Z&0:KqwT>ZJ58A%=c7IS.CxA* dV@$q?u L S3FE`QPUxI]H{+ 34\6yVtWA.AmpL@1 *T([nEӌZhra'`F)t4Aa 78AL'R:sՌK ٴ\~ɨ=wua&٨_/ax&.[֍hNmSgD] Ctxk%kX o~bDMe8gU y}i2=55RnvfϡZdsW9:Ǥ 2r/+ J(X?0tMs:y Ck/|9(>ͥAEjӚ{Zds Kc'2^5 0$Nv00GmCCGoέS V8fw;iE "p0kIwiWrO֧!-.67D6;{̗\1~/(VTAߓjWyj$Q+ 8i30P89s+\C507a8J);-Yw&rʭ?br#(HSaH+,Bt_Y>WH]*+w>1[яԳO11t쑔WzijOzwy*ͩ/xFe/;k j+W]KAy`nOVtSVL[hUK AR8epwQo[7JO@R A1j)oۄF\G + }T/NaW7l Ȝ' \%ʕ8^0~jhr>PM` .F# {sL& $<ό$=6sj[Up_@ah~6OnƏ0[ZLpFǼ5G,T 0iJuG4&jbUiAy-:M}@(UqO<7':A}ڄ3+z/ѰZA%lHȰ'I[`3u'?f["Y%N)M/4DMiARIj4}\zBTȨ-uwrU+hQƒeW~_;iEM1\&xC#us>r4󨤇Os@} xS,BsɺG6΀`>Qё;gyD0iuy`&.V7}͍sKG<\~);ٍVLduh!G'#c&$`hڛq"mPMŞ՘ ,{JKRpq@^u)i ԹG;thT8mw֬h$ Ј0ы0@&ʼn_dΌ~.G<ӷN0T? .飪}Rq*\m\2@|1.=<64b^ϧˀ?7j~37܄f1tv/F"KgЉ~ uG(P#Gкui +̙΃ oJa@ 9hR$o{Y1Vm4EZۓ>^ >]A< b3V4zƢNtH)źŠC!k$Α.  ğs i!9E[VԕAC|-Z|nW°< жۇ}UD4t {(ǰ"rv `;gvߝΕ`w|ѩo92F4[SZݑE+U51XU'UnSFfVțSpܖb7I\%9o? Jj7 h/ZW_EWx*m@v }z$)¤@gA[􍋲R"[S3 SMcT QDmRb(8kx?!ie݌7t~`U?"\ Ҷ}O>mZgfBҦշq%&2]G7-1=+RgT]@"AmP_h*[ҹjs$g{h:͹ NvZZ0a@ Rk40i(@4SRǘ]\eACqH љBmJFcg;\Y>W0 ?n];?s';J6V?;{}aQbD'ȵ`HHWEƨ^ z(Hk(`"4[ALj L>g zӜpРYHIcI5"]8P"[16MDULLM4t?K're ɢZ.OeGf3¸.-fbd jq-`wB%æyFPUTM 1ŵq Q8W5"0Tө1U^f(]\D~"dju<:p~ø+ng\wprwW*8E#*y"-!(fD"44@CWd1FUr)ƄC͔mb]>+̮̄!xrpŢLfB/r3G15홂v8D> T gT$EFNnORUuq뛟]]XDA Ny @ʠd' ^f? a)X.F+ѻ# ]cb79.Fw^wn ꉇa6 ~sGB>`PDS9y;BcpuxsE %O>4E#22< ioړq=rpG$d"2ˑ@Wls9K>[0t+ *tWQ㈀7Б:tX瘭$VK{D@aeU9s,hhᾍ0C<΀-)j5[*t! u\t+1+2XhpK!(7P˯玛LAR ?"LOi]\ : Y+yq,h}tLercFT40Y$ .].eݟK*.H}&`To/43$A >nhS;wH5 *|l iZT`ֵXX cNd+\_Г,)m#Z25Oo1ά g_ ̠X$b?\E|GbmalvbF h+Rm O 퀦sFoҗd3I sHG  4T>}YoU_>1Mzxu$i@1H ڋ +{T8V;U$O<ک/܋?}WdŦ^ws niHfe0G*V$Pb r5%?/L /hL6+"y|ӬN:u w7&Y(;p﷋MiOR>YI86B98PK/0&7bQ[4X˧ٯzcYNm9;%Sݑ1kFuD$~w`㹚4MgғѤOx~/M@ -=`̥imt$ Q%>dΙ(=XSQ޺r4psK6ZdB#P|;sWRU4jQu严mI8_wf<;=v+ߕ=+Kq9_`1Vw'VPd,hŁsi~§nEqE+Q*(R^g%\;F؏7OCei*qIH#P͐noU܃=>,~/6\=ZE- EY9,ے'-L$HépS6- 8c߱+urUO\Lcg(ќ,/7H"^X {?%bAa',LLˏy Dk]32`HrC{ϓ4'/-75xv|b%㴩 TL^a~نcOq9'nN'?i\{_T !1v>b+P!'YG!Pc\\Zb3Q(wz^``n, ?}nۭIaG=5(G[5qН0' R21D&)(0N{q6fSK~D~qt0j`F!J#r,`kҮ0jOzp]~./E8.qT>P#sP,b(R]U0˓ lCRe7=˗ȣdS X$h{>p>`7X5ضHJcO( D"{+6@YBK%GC$w33݆3qk&(|'0n7~Vi 7:Dyh#\5r㋤ *@Q[5W;#*Û̅"@n* dƵsp%ͽ  7 z2YwjŊ/~Gi4!+I1"` {w'[͟<䁢_v˅Q9TngZ p%XXC3:T JX'b[s@jO;"r 's5&ϙK xs=.hR{uG((>qqrXHq]"iH⪔# k0LPh$Es<=ܼI(jd KSR3÷ de¤uT E;;L;)/ :MJf-u&\*x@6:G(TD"WƄ)-}Fg>GT~t|(|}lG亴jjyꁡ A4d52+g>%2,Gzy=\5J Ѕf?Wc鏶n.zhrhY6*i mGj˪! IE*$xiildqhłzG]L(OX5;R:%q~ˢ9n90:GVadVL$> DF(r `w/c߷Ve~d gL.&eoq/faQ|r;_=th@n75IVwZ{sk+*^R &2:eƥׯe'FxF?Ojo6fGRa%y\Ƥyٟ%JVa2d#/&<%DcmVh3gR=Qx\s47 xzlք-虈»$ݢwẠp] J 'N%0 G{h(p/L&ҷgBDG)K"ػ"N} m1vwzfu|21EB鉗FһCgjBFNZbLIJQzulN/?ƅjq6C˰JA-@yŨLa e>[<_`;]|"_ͳSٗߩ|xÍ=O@J ih95ff|va Y[>+'sޒc+tt&~UNEґWnn_.cv*[Ond F(F!gAEf̣V'b#Kn=ne Y7o](Sif{?N`c;" xEKVWbߥV6u-O-= Dx~ĥys[wW庽!ڦF?!PqJL U{_g_%:ն5؁9/?\c=AwcZXg0}-}~AW]e*ym{Qo gFBEބQ>zfOq#8 cvdшv2ֲܕ?%?ɘo/ȋI0%[eUɑ&9i{N1-VTOX`68N EcR`X3>Xe(= &]J+ֺ`Y$HC6FxTpr~be~RV3$+ wg|#tòmg<PZ44aIK%UnM c)6͏>d""T ឨ 3 `O U1"$F{7!0Z6U+2';~XUǶp7#{@H֡A~97Su-VwmǙ]&J!p^u<&_~K]+3Amf$sn/q Yfk10eձ62RLf-H m%iB<-:[RP.U 5K:ԋJ GO~,) 4JM@΄7׮*窪+Ծ?Gfj;5#Eq+OHl) -F x72Y!tW($R 8ý+Ԩe N9{$aEs :9؝PB+ḱQÑ)FX_^כ]1\~G$ _*ʲ + NaSj#t[^cܔ;p8w{ (w/ T_-6t?ڌ v?%5*Pr8dOpMQ Dž G;B:BUBxΛ|3v\sѓx]ۨo> WѶx7V2OcB85F@ sͪHޫp1e?cX B@OQm:x%Ma32b4QLd&4M#8,:܁F R_<  E% >sN Rϕeh޿!=-THs^$y (,!116_es]%D"\!8cR'L474!Ir术i4EzERі@4?Ra::zgXL @4^Nl'_ă(2d;&{%ƍcVzǥte9*.ack[49v鉶bU&Fx1 ?hA'ml]@*|Mf 3ıF ~01aI DQJ}{'1 v$^ژwx&֥+O7X/UR>(BO=F'}k?u? mOסk+SG3ʭY\5+Y_֜hkg\}EJ:?+VB]b&>GXI >LV`0We6za6rǧtJ`~`[_ԓQ={ ''d%{$i|mI yX(__62dceymJ]򕸉s@ȑ'&YgN rmCN3α:Y~2UxJn> +z[ ^d>2jv@XKղ8O~惯@f޷irQV+ؖq_Lo9iwf`G웂 +&ґFS*3b{ |ro|Okg=E n*yko񀺴>@OL@i*Ɏ2r_:`}>EzbLj[.2u..o~|[9  H^;ZUÛa7a+a)9kGI'Ŭ/woLaR[J71NÆn=v_a(ZN,^׶[ Eyͱ^f<$婗Q;x &@_]U*\ض%\#8JyRdx`#^ac>_/k#MrjmWO(N#p-K~w* ޒwU2<.P=B{'VB;^[,B@yIMXUb6/8yHHw񅭁af,P^)\/m tژk,~Ξڃ^DJ2kA 4D>qAWMɵ%i:r) ᕩD?խh^CG78qϋB>p"wW X0z9:33C잝fd pO$yVS,aBo()7b|*yE)E e Q`gexK7q W+ νJTmOqS8*[# *nNÍzZwib;ڵov<֎g >=4.JguࢿվŵD&vw@ţ"B E>r4Gvr\*\Ll||⋿/e4] Mvq"EWem lY˯`lQSY˱E\9HKp iNR99$ZӔ)0/j_>#%c~3(_? cz'Z(W}=ܻ0d)|J]j PS^7 NώTPqǬ%suٙ$QXySD*\nshz }a ; m͋&N,x OGB}\kF} \f0)Bb5DWa#+zcײm )/Aܥ]np.BPoD`;C#w3GZ<%RO1tu+OBK'ʘQe><8A n!'2w͘ ~>FKF,J9]``x7Mϖ)=_6>(=G;>'sF Œ8IGw!4# ΀ݻ ÝJI'~P;9O].wOM FbAt;AyFM F0Fg.]ҲEi>@f_Βp$W! }^jtKƵHE{=ǹo5lML_GCKE3^yX0ԎQcڊnM+Y lYʔ\(*@@ `*dYsW&IbMO` rJr}3cEZOW}K7C|e?H/]z~ gdCy6}}fcZ4s#s~Z*@W>40N?Oz}fyi0!-R3]Xā>RR/+5c1ن RJF]ܷa2W)P ߛL:Rp0)xO] ;Rlgxo9 䓭 n2ZZI %\k+%;;Hz7z-3/lzMy2 @Vnr?۪̈6# 9HN͍VZ3%"JJ3X젗7 P4=.-HجoWʉ:'ަzs%ԙ1w!9vd?tj/}&޸]z< ĕu}piy20fdr[YW}iggJ/C˶2EWTMH:akH*7:-̃0K7xerd_*"Clw$93x#ì?`Bʊ]Zf gXOICE/ܱ'd-oYCvo5g!*$~=W띐t߰b?Trs\ǹ\T^\]2:&(ż_3Rl/2g)UO! # L?Q_t/lR7Oh .X9#PdKqp` ¶>*YT`X]QCvll5Yx#BcX2;a!  ;?='1:c`^SkPrL+,$Y4_{c@Oٿe 3=~q=[[~Inha)oIYJϲ=Kyv续=T\Y,H!ܖ5 /Jz GY\7 /iFnyn6}̥$dzsܗfVQ Ul+ҙ#czÚÏ*9=ZqֿLLzdK4roC[|>qߒS>"^dyMy,Yhȶ_ .kO s'W|BB`\ F_L(b?KMmw'oUWIB]t]P=2\TyfOGfگY ﭫv6!ڳؔſ%6: ktx[#tCJɇPO|3B@14 eU\Ȟzb)!.j ⡎Z2S|<>"5F2`M.U2o;7GZA~P"fWd{%J *Ω}:[ó&'\pw[ޖp*|d_]8!-Z׀# İS"djXE^뀞ϿGVDLٞwjO$}_E;?!gR ^zhd'ǀ_c' tT!~̞tr@ET9Tމ~>AR!c\Xb;jrT_`)#LK藄xjSbA'wQ&<9c_Rfx$.onߒe'b[=̤>}]Wi"Wզ՜!JfJN Zi4DrP𝝕w]3UG+>ö7XJPu[1?URD$Av6wslmlu :gw! plmf3y;hl FS-˖?ϞtmÍ~DWA!us'9r"ωU(cD ;휢3tMۮe!AI$qYF:u7ȯ67YM~ʌ:FOp{KHLuL8rL!g6B~ε(bv2;9y7MX!Ë_"`ו!5_b:1크_hdU7:Yߍx)' ՄW5`蜠Ħ1vxr8S{Dt&" rc'&^!%+ AyT9oX֟ZHq ɖպVMȌ/LOˇ{ΐEo6>6L5x .dMѹYJք)}|gzj(Ӱrjf5B6)m d'J< X\F:rzm3%=CKe>~|-mTC2{7!63Zg,y$e_A<"'wuR%6St8|:RVhQUC'JkPR|* 2spa[)l,7/#U8"$cxfyAV1Ey+||֭f !cEGV󚆘jMjaџ@bXʼ35T}\o5}EB>)ܢ\2PWOe<]#e:&\Y-ad-v6j&J:Ї|ƱUxۓIb4cSwɉKոefh?ka;|?Ø#pTw!>6f2$d3y3C#;!ep2̉'E]Z8<8)h 4Za-UEBCdWl#dsKTfnn]o\amfR9[@A=14$yC;hꧪͨK[/QEƫuW ISa(w)T;U͈=1EJiU9% y2۾ 2.U"CD95e/E\dAbj^mOfX #Bm ,<\h!tHὕ 8W_+9Pl8/heo洐_/Osc`]ڵȷ]L=uwWTjYCg'(¡m` ÿ7Ҵm;44V5 V v:WftX)6肺qc6GWX% v&ho4B}kv8Al+Mao2w*MǟBkgdLʙo&=FgOB6D67Iӓp;md<e NYqDJ H1x|]F~ Nzٗu}P ߱BU2|(ޢ,<VԶA4ؑHm[jvI'aLQfT;u0}6xk+ 1fH, {ބDo^X _℉E1ۜ@9K|HI<;S PMJ;UM.r'A%4CƲkPD  a;4qg3-j0=@.ji V+IqWx{{V6YcoPo&T&,WfdjmE0KodRdXͩ~j*d6MUMi!Jevg{{ _T]z@8>dͰ,z|ֿ|lZ26r[8ߊ16wF7n/RJ0"^`{hJB+R7ir~0 XƩjtx"CD{S*R$%$oBrI%NHn2 .DYjϨ5`z<%[;^kVT>3Q FAŌzrgJ^UvbyDxc'M"7}/usD+I7 !+;Ckm+iؾJxx;COȢs4(r u4{Pbp TY7t8iv_&@ |*fg@j$j]jw-)<`q9&E{īK)R3;R`\:ʛ̅XХ4]:-.z_p*Ьc'S1&c>"-POOM7#FIaoQl!B^0Br+Pwc e ъgw kx|TRh6bH6+:"׆T١LzAzpfA/yCh1-\cww`Ȯ*$QqtA1ySb[:R'۫׻(vd;\Sz_j8g\<$88պ7*< w/(R@JUM_[::UUht\lj#;]kd;;CK;p,P4)khZQw+dVۥt9s5^5b34 .sVtA{f 1nwd,ݓ0jj E,xqZBbƻdm+\ijhPO&cbΊoX>΍oJ8]HAz^%4.  }@+ ]t"A),},/Fd׬EꛝaڰtWkrPi̙֮؜{-s2q*߁F2ľ `-eAum*b86}&+UR , Q ͒>z:s@r> j9 :,H{%OfjSD~2JQN"wC9*!Ku?1K^Xȼ]5/lQ96u9W4|Vg4[#fBa!-qQ* iݺ0lUoo^\_0y)ob޾"} 6Ъ dřWTd}7)E' .%!.FGVLWEK@ޞ+AsF,bcX-+fsjNsd- ^൐K𯎘HFyW-ruhbw!H&̵;3U]xͼ^pZ!}󧦆7v ܀T_Uܛpde@YE fu!36膊:BHk- Cb5vYĂA&Ƹ^k9`&0kKNeB#(&2.W|g ^-i=VAԋWT# F.]o  %7F;cBW"->,^=r,ZD. %,=˝z(j1g\yc皿63%ze4b->0{uʯpB4J&eŵ?@wS9N|jr/.`F|8,7 Q aI̤"7Ak}<>$%-b/Cm#%RUفE1na5P-N [Y9 l\F~Ȃ/[eE^j@=1Q .o_:wѸUˤch-H꬞o(<]H* @c ]L71)/ګG[Un4.ǢX.siq&08^/ߤGTVlN?{Uqb\w[8<~Ln"@˵;i1:[$v=gG{ V g&JC&q! p~ر5'߭~%f-&zTkH Y n0W$)@ BkfQgśFJ$`jr̷"{'7ЂP_晚}Df4/P|`$,(_l#;ʸ>ݱ9i?yC\۽5n_օIޅ V>TR(>2jW7D΃ ۶?$ >Ϙ֕8jtYW1o:1B~5އwsJz+́U{M=}&aM6k:8̑^3H).ѡC".+|?v!1T; π g14,GkCS BOC[4odž z~:9 @M=zr( (a㒈G5.L+f7r:~ lȟl(*i#[1crvURyoy4F_x 7W=.As3 R'QGy\AK_'hAg!\r6Nýnfy-ME»qavAqEw8|45}aAr $R:l }JVhv$& _VC> @L0Qbx(v) s BEV zv0XAneGQ; A-*s%-ꑷRm9BȯT`\wڙyhRj}` Lθt'T:& 6#Ā_;B y~FXt5EsXDXVYP"1L qKZe{bGt삈%#"o.0k+..* y hTyL(_Nwـo˘wvIztQ !ߑ+# ٿb e R\F8\GA<إSj,_zh^H7a]Zh:ݸԡWt08h_d.jeτ!*GeZŁ' ~3mĜ5Y.>[xjbs@m4GkT+9[ŀWWYb@Sx3b|6Ig .*:Jg̕9mM"6ZĘGOZ\ gn}] 3vm6`]~K@F\`̛ Oi'VMx)]Fy{, ]ax޹ l!LUy娟Ă(fc*wq&p\Nahϟ p Y[)?/a*1WAu( _=Kl_qI }$֯Ӎ3jv 3ʰ@A/Hv3trVF=^AΕjA _eARoalY8`j8(B7'[bIRt6ɹw< '6ڶ0WF,s{ aA%9x":+$ `O2BKR2/Z|/(C kˋ˛UAt; q59!c [NFN'e8όf%.>#|c!*¨ 2ɧ =\ӏLH>D?cYY2s-  nlElOU%ղʈ3&r/!Ǎ"!R &/sd:G1K5qPGm~ȸWQ?0b6d;x}u*`L˸VgtAP ˉu^m*RVgV3䩊}LZBH/RJMESvEN~iM1/287ڎdڄnb,;Πš$9l,oX ?vZJZ^ $ V1/ ~**R:µ)f=CuegG}%~XHδr!rc-YOf̒?=0PV?@DKI2f1aHJ&X ͍Իfs,1w5HXvIyD Z_Ց12.1U{GU$ sl)'S4R8MyiYyV; 8UpxֶU8 .@T';CK$_ĆtHLeUxouUWM9k)(rijɁ$?zdn=S0,kikRF܂p5m`h57+! p3Z?S;A,z7Z<MA+n+޾dham~M%\+vz!rzP>_KhIhݵ=O,r  O2,j>zc .ՈZY^H?(|Ծz _fūd~8`NJb61Qt#"t%AƗY 9{"\镖5hpoWueewP.sA 8*53(-M60)|SCh7箞r/"ݪ9Py(&%gΓCZX~*@-`D ɛ1bKؿh wwVμLkͺ`z=m5%-Fg H0EbA= IySc8 (ic%D XgH^ CX "3uhGzṳ`-q*UQrfJ!`?:è%;b䞸UޤGBKf‘w3LW-ɴhV]*%iL&ڋlnsNZ u!I~ͅ,cAN5f(~NlMѭ"C#Μmlj3·7gz`%+2"(^d7|X0vn|aD0+;͆ŋXMtѷnXZPH@\z䖟x֒Gځ~A# m6 cuF,%qQ1oF V;Vf 2rta y oAY^4<Few<I&q&%sқJюz18 (lx#YH视^F)V)1nj wVW۬UK4z9d7eƜx ŴhM#.Ș:,rц!@sSe8Luq|qC:4뇇i3FLT_@89\MnÂ4g%a dFErP.cvѩs^)eiQXfl_П—+|f9=ǓES=wg$f8:tiإ.[s <cy* ;D mvɯ:K U~O1@2"{6]{h5LDe2vj}N5 "l)KOӭh̑Z1,6Kr=|#,rX['ol3i+-) u{vfǜc؉*cCDGaB8;U ^!LπnM`,$owZVoyK/ݛ9q8ÊM#$AUFҐܹZZz,Ŝq^Ky;oL)"Dt+~UmoDD >+^FV )f]E(/}Fpҷ ]|XL5ayX[ʞ+"d wu}5Y#IXѧ3MЭhO?!t_6@ۆl1>6[& 9I<P tXt "}\1`H!eH3m&Ry,&ԉरxJ?Q˾YpͨjS_@J +/CgO,mxs$s/#b`δ(,P!Ok6GB`HGzf3_Ͳ[.۴-d#YԄ睱pd^inj} eU)vTAů+K`  xl&xC߻TgS2q%,*z5ݍ@ \- Lme*V՜,'x 03b6ZgTP~@ovYӤG"ԷG#c.nhlJGojzQK`5(4(ӯyӜ@Qfb!$֊,O o'WH^ph{y!+,'u~XG{"'a'|P ~t;4e4 SN\ݦ\~&3S3ş~WOSczg9u6FlD+4331E$˞Gӟ+3rExQyx'G#7M[Ƌz[BK`lbܲX[xR"sjW݈\KZh-suyIJ+ !YnM]ن~дF2JL)(JZZ^BMցs_4yfkic Q;pb%+B~*BPj8C2'Nyi'md8glʅN9ߢOld= UBX=3bG–Õcj (Mә GP d zR~ǫ$8::-vx̾h@K7F 9")N+%I r&uNxZ0>dF :9/e a-56d[yx]/pHN ]KIpǶ ؟\iqՖB2U{"!l[銈VR[sIJv!m (O`MUBƦflxa tD8-yJx?ݒ⺆$SFe3̷\>>ls~G֔QXO]U}$0'+ʀc3!Ub\m 6PpSf䥙fYDMZD/xx4_V_6܌M^R" v,衩vʢI޻/]cgt4i-3,)ەD* 8aR|C3&WOT4TʼgA(ӀV7nPU? 8 n,Q|= =]wKb8o 4~B7#9*aȺg>ͤfa@EL8 X4:t7x4jغMZ`-aQvKH0:dCvW+1Cn Uff"6_ S7 坎jq QyĒS3 "zdx-( 42#o_馸u}rSlɚLρ /K# 듖1|꧊ Ll& lTIu_ط[(TYnB(,\'<iy<'87W:KSѮvvK"'[iSQQء̚=Ow!阄E5ۄ䊛 eWߒsh!._<ծlkz:jNc=!-%ZW63 hOfGV^x2;H.c=윙ǹ CwbV ҔU#yÙDxGwjſ̳K P=A&.ʣWh#og0$8%6ESqDph-G vG~aз7%} sXC6Da/f6dhD3u0^+VǼ6t)N79K%\m"Cj+A:TefB$YOmNV0ɱ26,1kb" .{1Rr}ͤ(>+pbY'ERCn'ǴNQ!AEUm!4rTNS̷j)9m:s#B|HD~O}w뗽|#I3Pu53퍉3'yZĐy*ubΕ0{J!Ì&M[PEI+>{"''HFY}-"G$d1CypO&%q#]i 8D4nn^mg :bdx )Pz*?_h഼j– ,so'J7}UHKY?q~,rG"*rWzqVp10c?#6Jp". wg¤jQnJJ]β ]bsFw sɬ-Og&u;6w@%*Ht2\7NEKl GmA^JeXhdr9 C^9B¸] |1vXG]|F8<&hh-*܃ =3*&]ϙھ$Zë<\lP1uXys-v1LR#nj*i%PJD:"4=&S'$G-Ui1jvvKuj17=yM YwUgOsm@úҢ3R]#RǚCW %+e`%ij+ l)V}gW"I!"O OD~,3c|x܆>!>dm00tS̤HP0^ X:-3Rhe=7] {* uƕuj*VH*cz9y#E9nGkV>fHԣܽW!(H;O|yQ:SmfrQ Yڅ8n([E=`u>; .gsd6.jo}&P;B}l){OO]OҔ0:.+z6Es2˞YR,efg5o;a^B\fU mَ./%-lb1!iNʟK ;>|ͬpbL[aZ%p);]Q]<9)zlO3pFQݸJQw .2 cFdo#g]/g% FwC /#4vYW{W !]yt#9t{4KH 5f.KcN j%͵3h3fJN;Ğ%dYɁMJ8#ބeTѣ(kn2t:0d|vcAeBl؋m=Lɟ7`Za (G-V4%yߙyR8-o5/(ϗD(Jf9K*Zœ›]"Oig5ц}w"iQ<)Q>z:Vp0lC尴ƞ*%.Ko`@Lf $j!SH; #T$qQmU EקJ1k ? fzlz21|wo'8o SRQu09Xo| V`4|3s8̎`?HrW._? 4c KJj8ؘ)ZSE픷d~Y@H3G h(U/#ӱ65 x$3;_vD92-Sj$+p @mcLqyYs77!L;~&C˱-R!E:r`L9 *c󽾻T]R<`}&LF3X*0PHFPt{a8vИ1crh3o' b|"SmѯVXo$P5D WsLlӼgƉlOPzNoB95PqU(4PR/N@%x}:IqI"j ҁ,S&BJ-(Э[xgϦâCH\ %s&$ 98L by00HKtmˬRSy*L@@!g-=Fa 1"G$'Bar`.B= 7P_Ig\T_nW!r>I:)UrSke^jEul͕^8Nt+"5ʷ"`?hM/وhuCR_jK+9Yѽ3&Ukރo fHZUrb')FI!Vx3 F6'Sи&clHSa8M 7=*r*gC9IpJB:Sw7'YЌ.-/\ 0EL6x~nXoVvzc=Iy˃޲zYA?MK۞=W1jSt  K>_H7v#-|nT4 1sIP` aĩ>XvĻVCQC _0LJwϴuaM\!s![oޢO nx4^-MK8mgƳ SBmNK" z~J=>nV\c^í5- 8c)q#JwmDŽX8z ,XYtsjjJ~p~7Ta+T=%&mB\\G!Eꧾv欼/8@ǚ@cA 8) `RV^v EPĈޚ)i˽k%]6 t~Z9.,4怽5X^zUo5ܝ>C}oY!,tJ5vty)/wH/K@`xCJn2 qH -$2-H* 1PkMWώBv 1"Zhp^5e[±/}#)Wlj5 b5_ªEOP/iq6ZdxjTeUAj 9ZtKM.1{c6GT9y#wqN~E4Df7?"XS]u.qdcd Ŀj+q#D2bQr:2^QRh&ٳ#aҦ,QaxCH@ B:ÓsM٪gp^BX\'p\3 q#s}$;p>Ӎ7n{Q_7dhJ`Q#î$/ g<(BRMm5c19\0 t8⺕Z(V-:XKxH@i*aqQ˩l ۹r0/^6@zA~ jf|5Xa a aOTt/g-PiM}*ޣ rE1ЌrH-2zz~[ CJ'!^LDnt\wM}mF)f?Ž,L"nZ*$u~u^zt%W:OVFrfC̺ s' K߻ 68iY7[☻1wRZޝbp(oсt{=otj#N-vuB*5+Let[dO>#'LMf>4riА?ۻξTӮ**6eCFc+:5B5e<i^.9nRCNyǒȷM.z([VHރa,srMBe,ۧCI7Ye}B9<ӻ8 FD"$n[2[pRym7S;Z/QŻO M1aR2cF\j@,oH| .kK!7 #.lzof.}zo:R OBFfW%H>N}z{!/HZQ_̿9{"| 6}FHQGM!͈6dF۠h"f:"<<0{I#D W22>mk=RٱS`*#X'hЏ@i2geqmN/K La# vɺm2g$-ztEJuGUU%>:%x tIkw"6k:?,?V Rm^uO!jXN$%ZIU`K #> CV3 ~aVCoXi/B/Fl}1喴 sŧHL%MB VZL\`JQc.&jbbQyfB76C&66ahn\5cD! /3 ջ7 9X{F}>ݏgAO5DA>&!+p,1(; S\σ~aй'*vX=~U;<< ]k|Wˎcor-C騴}_d1cP+F`+W<. G;GzFQ‹\?ZCkMz¦HM_eL/i56?pY9DFg?RUZ !꒷yٷDUw_~8qOZcRTfvirkPPb`Z=$\Z02mB^\څѹ۫E+N1pk$Y6=TNgwK~bŒ+5Ԕ\Yk0GXywz*?PsU p>n|{Tc,!!?_Ƕ:#0&LLȿMȋa0bbXXG͎d un<`ξxzּ .Ӗ>aI0p 7U[΃8>V*0h+B:f lDc@qk>NQ4.v2lb9ta8}%+ M >v~04"qhdة1&x#07ک)e3s@w|1BHzۜn*bZQwQa3WDkgִ˕7҂m$<9`z nbG x 'w1VPAxh gdYH>a5 ɪv ZQ *ʛJ2,יxkao8wLa ^79UAev pX|UΦ}gg1r!Q~lVkη+wp$$:e\FJ"euD%Mgb[@S Ag J6zoYdY`Äi>~T^[2U9-{9o9[)*̔HGqm9dtbc=bkxJulɐ]Ǵ ((š`n5d/IiW+xgHkèej }H?Mr_Gr=ES_ #۞9nh4HĨʣ c kԶ"G{!q<7 C iMklUM#rH )詄}#?iiQ0R&2ZQ2ײYVٺ4)蜱zTH~s}yFs梉!%eU-,=dϊpz>B=JVv4dsmӐ 'HfN=w=E_iZyJ;(4gCgu@ʭ㠄0սb:-Mؾ5O&f(ӿ~ef.F{5w굏rhL_2fk>R~]ARC 3*O75k>ĥԸAղek5r@86g>4eٚ M)mdB/mHLxN:=6QbE/ ;n9EbIp IV)"wLe)'$]3ܙj; >dTVl&W b>n;Ա|!}^j9/ H=6 vm|JZa>nTɠFSOF!lgex@fc͡.r@rȀ)P'#b07)FBi@Z$cvsshS\Y 3W1mޔ0CmSYd@2PGlA͔ ]w`T]A(ƕ x$s4Í o;Q-B YCq߇˴0a&'4h['HRuM %Oxg`9q@4 r7G:vð7n@T_:ɚ[;5{W@B:=)E*j$kǪ[/oPdIޫ,o.Jf%[s>v=yv7؄\XF-Ae_0BADrs>S?N$wљO͓KS)K=XZ<<h 'ث{o6TqS7Fu}a&JQ<0dW DxZQ@`,:S>ǞBv`]o5|Qiyo42 W}>wYߔuKߡ>k\5I8TOҏ06p8v, Z^ ݸwp)h,B`/c)L'K+7#)V^CN7S-,DjГ|՞?k'6-$wn@c5uٰ^o:\2GBY/[r1=^<r#=p15dDTڙi)6ro͆OؘfAQV "7dW6o&_i^.~`/9˩_7Mkql񧏿PQ)3z-e+U7{(뭰J}zt-2ǯ3,}F2\e>4X3!C̏238D&5NIOSENhB#뿂Y?WZ4;Y fM]aXOyh.pbV3Ǜ0‘d}1s=LUMe)sCwt(ꠇF g=)3)t@V}|1XvZezTυV#HG}8R@1{/G&Aqx]7^ |Bpg_,VVO~*ǎq]ʍEU;DDi̼Xݠm٢gE}27t}'`Ǩn8W Q9=jɇZv } j'K1jև)xmUXlIZgf^N\h@X%!7o]<:W\p:;3Wh9r:*oҙ z)>B6˓_F\n$2$ %icdY2Iv`#ŔQ=>RmƢBw)]nÙi*RVu ^fߚKL?;ߥդC R0th'+$/|tFw.ܛIuC߿L\ BVM`pRЀ9@,5CjIɚ)&_  T e腶חEF]IoK3r暿dόD%GC;8 aougQWmժ!э+jZ;6/PF RR8 kfx/n}I&EYv7a L.áB1vH?S"֜5{?&%,)ÏC0׏4[ A|~BB2-}i6"ak|1bHuw^l$v}ʕoQYu(-u8fC^L+xYgpj 􌒞]`t?J+UHK4'.Di\{N/<՞ҒnA8 Uу0J)]K5 |>/{,ު@j/iew*Վ}J[b)gԐYx!@C <U2l;^ߋ bXN>7 Qiwj.dXl X & SҲCVe!G4$HS!TWTx'|䈥ݲq"0-ws7-X͐J|0ZdIc݇?4`HRr3^0%&HurԥֹFx9g¯|8W@|@r3oEcR]zd|L\YH BECUmpWДY*\\@`Z?9 b+94*f A VuO_b&XNc} J,2ΟWU{GoA8%QZϜ#oa֌WWjSbRXNi=@9f"\<qH}0[ȱbdsHJ)=faΗr` go,,6R&QhDwsxoc^_굔5RIù*qeK] \b+\N6|ۗ2W]Jll)6;JyU0{i^ 1ѩ^X}YnIZ+X2 ٿ˸6>cdb9[ԣq^o] ڠSqr"yDܑ3KeWԀ$OY5q^;%{x0 EswK@Ճ%4WQq@`eW==Ql>&`K38`1t୩OUH wN=+F֯OB3'e9?< G)# *@w3kVθ;Uة0jInϱSY3xK8oH3O ٛpd<_ю-lHX-w>=rai_\gĚy}:X1x)`b)PLn/rU3JSH[=C5j/"ThsҪT *F*]F|Z_ap,NK8+s2Ɍ IfsʬEss6mOn8A8oIT)թI8bu%W«VőAb 9DCwr\jV+L%~D!cEyX!T5f2#r|` gbI #*X=@%r$zc&0 lt?(i^~!PB?{>-. NbbL[WRu[Yh2Ȝn^ߗk՗}|&0sipC^|Xi*Hաʉ ~4G" V)NA\%DXe톑gJ_$u߂2_$[Mtlc;w9i\aڐK;im,hОYoƃ&55Ca2S₥h}y)vO~ 4(-vLgo5]Z+C(|\^Z௉ CZ_NJSlZ|?As,xbF.Kf`T8}+hD5WAc)s ZKWw:TƧhh FKz30wa0Q0I|ĵOR*_6v縚 }/iN@Ñ4x[[Z5͵ו3ag97He$Bz%tdA ASRx ?3+#`s6.71u$AϚ0ߩ (|"~DXp.oh=?e2ſŶ1(3Yj/3RH2ӇҿH@@߇\ Ƿ7LclʢLXK4G R)喹Hb>D݂OxE+gF*̞woPz(Ha~wȋ5IIWQS°R\U ciU8ۣ'is Pj ֚HYCMX#vaRlmVM_iWtEFo#L2[+`ft;5o.M[E‴~&OA `$eZ4IBԿ٧zD'$Dɓ)| D 2^Odp^D:G>%~&>HlޭAZbpCN*DfPij_9@c։yIg^d_LjEJNojN~2sl 3hQ%{ .ݘYW/9sj~38CxnbŽH7eتc$1ht xGhIp:Õ0M$1hcgb\#FABF_;X;bIP *\)f qfS|f *ZyY+g߿8ȌXZ^Wh%[((-QFD[YgtIDc""Q[zk۔\4wځԼbWw*Sء1 WAF,,'ZOBB3iPa#uv;t|_ WOb2O<$>X4>±Vt ׆m wmMˢ  ^jПp@& L8kL~3u:U{G/e'K >3T%jg (åC?+2{Sȇ1G8JVEx(:\"U̢rƤށ+2}̥ONO)]W45՜oLP<R`@GVLN&R %!7bPH6b蓬.}黈#T7U*}*߇˽t.O3_04_>gdV,<ҫܹqN/'2Wb}L`t}v;`!8 +F-2)v 9٧$*mh}y$2L본'G|ʽgqO7}Xm=Ο&ˏP]eQ˚S:<~Ni 0N7/H`Y~xyvl汯gT<Xt5uj_-jn|?n>X-rH~/5=9rڽ!G@S̨X.9c܏T{4ȭq, ?mi٘56pO$Y8;GZUTM^5~-wx7n3{'D'f7[:HꓨoVb7iN+e61-.G@Ab}_|XVˆwQeu ?۝Cs+]Wf`"đcoi콎`XջWI`6EY˒T1Kd&e kACb$HMc>YS,<+%69:BͣWd6Pqh%4׈ѝv.3Ǐ~CDԮ9q<& bν?Z(xV:;캑N#Cݝ@lzzdwZRh2~*5ⅿǁT ߊx٬ؓ$XǦIoIf]9P!Tsq:V~s![U1Ktt8.}˞M\Vk]4L;+µR`8ݱ3LtՈxeD_NƄp'h}5=0NݷHbx^e й@ϩ)*r'rb2lDn~C[S.U ZuV+) wnHsS*XtU!6-|1h6㴺"v)";-"Ŵم4HIACC)1vUL|elRd zbq'5Z `$zF/ݽPpN[T5RTҖ5Ilbr`AiTZ7kujt}TT!-<&hnF"E;7*]ҡէy|KLThLjiqɽrIuRPͼoVB'_޷ÉW4f,C]-;G[Ĵ1HR*DVmI2.<7;wM {3fw涯|ge'6x?פi7OD;G`ԮWeءSw(suNЏkA4p) J"~C<k`f!) ˲ͨ՝G Y*Q+Rd k(d ]ȏK܆+ҁ@6P/F ampƜD:N4~l+U$cd֍@+=|ªo4 ߮h:f+*8HHKtUv KgRFLzd6I˥}V֕,Ɗ 4:nDHGEq(P|g:ZX*C>}1gf:1?nCו{7[7BҥOiIJ^D$+)@ZQ^jtSk܍}xH52kXN/͎+ aߏAtO GVs(җ~5)%z/8wc 1!&[Xh(@~yŔkŜܛvj?)Nmm;(9CԜ]} oLΗ{a,``3d10 %_` %BNJrExRH؃ݹkm3 *r0(Ǥf#+YJ 'S0sU&w&Wz;枬K8X}gSރe?yS6- b{^l~`3N:Eyۢ*?B_Sa98mq֣΃<"4æD]]ƷqB9[( [14TsSCgqމ$HY=[*@ɴ#fkj+c( '^P"Wcmy WAYjฑ׳!A|ONP@}Tr͐gPz_F{+epY[\kR5<`J +re`WƥYKT1uj0JBflFO|4Npǁt(s(k?^h(CW}\#&Pwf}]GO,E#DxIOyKhA2ps4k 1cwmfU'nTFe3b,HG>M?P0А};=r e80#w"}bHuRV1;>r'廨(gwuõwLIH[A:Ɖe"r/;rF./l/ ̓-v޸|FӸyΌv"f@5fȘ;u`7{L|~cs>=zJZb$xCMgcĘTs#cRkL~9+2zJ)d:6LWy^gv5:y]_]D G~+5F|*dT]Ө8.]4Ykʒ56FWU2>6ʮšEyvpąvh2ofYF -w8 ZH'%r`5J 7]%O>.2<΀%NR^W\^8X#D;.?VTQQA!)Tv'FUwKFg,_P>6€:6y݊ qD%Ju5ۄҽi2,0mR*Y1}2܅5L}&)׿^-YW}4]r{qbܠjqov0BhD[c]+ f^v1+Dj'ݪmBd@%bTVSΨ8R=l!K*JBMHXCv^s8 z=SnUlNɿ*6 +E->ًU$ ;T6H>NflNdO%UzU>qkj >U:`lRpoB ± ,2I]Xkf`]ScpO CA!xB} ]N X2]<6\Uqd8^okET6T. Ka4-ׁ6? !5Z! n?oENHȊCMqb@SsG|T|k,7)6h_`jAej!bx\[WO!k㐤o)1.k^[y }/! X eчJl[8JRec045zB^?pgZh-`g!/lۀE[̅>%wuR]%w7Xl$-Եa0Z7u_7j؛:hnqa]veUvD Uvd1Ҝlro!.zDB } @0|F:t4 ITlv'1/ B;WC廙2`#ÔĎD%gzW_%uD5~및|9+#ܻ] j* y`-t]`A]ZU$Kӄ>?Ίw?|Ũ4nB"qH?g ՗)nԹcf) ,nጄk]+N!1@r/3 x ؙu燇&!5mA~F4TW!4YZJ3?ĝ#cvM٨0 u+ 8yJtr:'F ;< ~ؠ ׳1MV9gyz)TVyvws\VW2]h3e2vaI Zd b|/0_f~(:-:U1O@a;(+О%vuݫ,56t.[RĺsV凜7++a q&t\ QaO/'#w Wv zmq7nL'/gAδM'Zo "\}X1P腖F ͧ Vp|[!Jpnƞ70ඳc?Q*Tm!ZWQn,aJxIrk#vc:88k ?SŰѧn6K?7nи9B !Q=Ct-.n=A~ 3fԞIvZWl"(diI9Hht&W*7;sv¢#i篰/8jS)(Lwc88S`'2E?m MsbbxF:$q^{5q&Yc fAhymCn>ŤIu#CTK0 Y&[o0O2PSh"~"[I2^،cwňz@M'Sʃ UG'c,ȼK%߈LV0v8,~;N^$ujiHdjC@#aN (V Q#$A@V2bWsǏI:"\jLn}*/y{5pJe98ؠ0uU2&CmhG70wf rlMn "RnFIOzZ3^" W2g1eXaft&p{ ⬦BLMghV‡7-dj4O RTK1= wlC'?Ok\DE//FP|!d o‚*jf t qg e K~NL '%`>b[ljp\&"ԍx?G?;Yf678Pϑb#dW ̹$r@03D:i> AnLHb \5/>'N85a=AxwMۻ踩]˻Z0ze>" :T5 PgD%2r&7AsCAŲDUq9 -^aDWjR3SCإv5OųU͉K4}yJ#fd,pnC:$0QIlfy2HBaY?nJM*7Qe!Vrka7Ph @g$Mra5O/B08I բ;7|{bo^h~"zCy$PfImNbCT}q-hW j<" cH1.$QX# ȍdsW^R/`[ޘ+#׿ D9_ijᦙ-͙)ٸ$udYV%[10kIKDV\,Anzh>LG[M&"-90cgre M-(GooL @ۊWK'+HUld|(}+%yg1q>KzLk:01cFѭ^T]1sBYa(*6ӋqMfLpQѓJd8\b!T?w y\'3DeiayDH#2Du4巘RȞ6mg-N ))"f_-j55K2)<&9fpKI搲 ^Ld#zFȍ>bXhGw\*QЍ߰v ;J{@#LF3hb Ơ5+AmN|T^\~L9Q7!PXB| `"}~2h3QNF8 2Dlc^ZaEHD72L(Gkk gt|J8?ole=!m ^D?bYoq3՟UM ;^HSY4-kcN_r"*2\#1[~̩.Q_aƜK;Lb(٩y ˤI].;6W'<8|25d] 4)A\˨R@6eU@ya=y5Xk8}U##6-J`PE4(E M^֪de:,sʤCcҢ1g*UqQr6GH)A7"w,ڷYiu_&Vj/`sg* «)=Z_8*.*Nlw)NG݌ ],G:Д|0N) ˁL-P2N*M6 Kb@$?̕e[JY4+]밆[GWaJut;eʶaDKK>񐬇# yᇎpΩ>hU :݃tԛ;.5&J{ x^T_wDϢiDH`TOhMk<"!FgYCO5!24Z )μB$dqp+U)s g /1;aZZ7v.2T_bԙDLAh9'>ie 7ҝX__ڹ`h"Iτ>'A$dd&ѦxvZ*5: s\Dm,{ DsJP2ŸNӳ3MǞ9}Iu+Ό7b쟔;[h-GJģo숞ܔ)0fVA#XY|s6!k;=n pHcQ_#sCm\4l@DyOp_ /_k]p7y#RE둕Z:4.JFmZ&ga B&P9ՓaS i<>3' 0 ` K c2~Y}Lt||ƔhA RG ug>:P}XUPi .4P7iߞޜzZ;guI!ͬExa`l z=(Lv?eVh^Px{q6f_,hwQXH (S@*+}4_ڶ7pttġ}*(  kJ6-+J7 S a')*pQXH-AEG6IJ4v c!z/2e.6*`*؞Mt+*&A.P!yr8vkr2Uy\o_#J̀[ >=k,ޮIP": Qv-rSey^n =BW9rE 7q4? aU;J`Cc`dn-iд {F}#c?Xa 4·&E jf3 d[PPezFMКYXۻ*AC[LJ yLr̓ď~%iKDţ;nU[^6'*&UTz F=jǿVKȜOzѿS@  l=Y>#k\iD\a2u eDžj:1$p}<5o7n6vnܳj#W*-5m`#tFٌ}3wU Z9P-̓+Fz|ѹ{in:Rb TvZͼKMM/]nӯMgvG=6q#N>k 7݊'ɿ5Ʈu[aGS]I86kyGhpY:)BoxХw@Ao0߾y?fj OJmmjj/g%B!}"&* ap)4S WP|A3^Hھ^F?ΡmmOh}`a$[u?C7bDnǴZYBųa_ʄ[ҷf窞StА@᷋_*@xyQY=SCWm+Gs.Ŵxv76k}TWQn͚ԭ(\^v:Tac @I4Z'(f5b/WBY7ͻ߯)VM\5tªӻH%;cZ!$}&>cRrd2=LZ,XQ P4nn͂ZC28SOX>-WbtjZnq ~V1`b ] &>&[TɳwaNrwW)e[ڎ8nJ2ݗ\$0'Q39eԥ!K*Tr Svf OyODz*Xx8Qi=w>QodST>лW,uyQ B'VK"ڼ1%K{l"! 5j;lܝ8.PSQ[(?P7}]# 6{^П >oykc{8s4L #ǀ?C3rVʝ2T*V߆ nM'/GYFIZ*չ=va(:g(]&(>Hz}٣Fazi1uu&3/}X瑩;S}v=3z%a mdjmsYnj ZՉO;hԉYd/Z5#4MJ)f+p{~4@sϽvifpV@#uFvZ-? !<$V1Ld +:[DjEI-ĩ{U16:ɇ(@G$7E?nIƶQA t$3GǺTN*mcҴ9$/xΰNF,bb{/B@}@5͖Nh/7I( ܦrpQe6E@Df~/vgd@|ԑn7Oa͹%PO@-c{I%ZY4Wr ]S>RiյG Sv@M^Ro!hԊB1Օ2R|[*ՅAe܊%qrCun9 q(_l=ꅪ_ #}aBd4{B:,x7 D({kvsN…z%\3`! ]=NYZd!TJCu)?&ҰU1op1Npr- =ɫ# 9J%|` K_ڜ`׆kAOsg=P6AhWLx{d !LKYӑGe,/XP^Qd'=D%('| 2bIŏK0)`')q 詷߾;9yV㊔ɇkh,y?frݮ䮒|,1diz=qTzUss&Ӗx"9Uz6*E:tQ =}r/aKBo<Cc\ wQoy"Iz5 ^+TKO]5ZRiHGM2bd=f:@!vAUj.Π.j.)J9&-()!1v#eJNu0)x]ƒ&ig̶B! D `  ֽg-wұ%!(F/du!4PJ.Ӆ",1"c"j~l;/S3, oqd E|k3D5;BnU¿Q7B%-;H6ЪPeôԥ ;DZ0z5EmrTor;ls"(y W,f\}WZ~H_ JaNArYakxj_޶txҸF-EFh$aFjr-ڌk6~E~|-rrlmxKΑ9 0r8hv֌I7ܯըv 7L\u(u"4ad@H- q>mdZkr߬N!cccױEL: К;5H~/CT"H[G-2.O*b2?vF;ŶWçЕ"WT zGTt4'%$9nB: G*ScV"ze?!$"Qo^)2T7 AllJYǛ '7"xvmRīuJ;W-Rzda7 1mX::@{,COFD; a0!s{Lxqsc?/vv3Wnt惴J Mj:w"Zk ,'& j tzq:>c2GS}݋ .{IQӝotB[Azh7 H8W9>AowgDq58nlq &FÐhYODnC.f/CZ m,Vn|}S=4p7Q 9T(%ර g9䑞if62cXҲDD]:-gDԴ &He|Uhߨ_SǢ&,4|4&襓^c,#j4%]G[9+ј~P&~<$+Y:rTf:"? -(#˺>#G`z]@ԽxP5ZAdPk%gZz"Jqdq-lW!:Lwan/>z aT#Sq ߵI; ܞo5ƹFJE EYDPn1Gc3Ścj.lmc]#\^oDI./Η*}$xI1ZT H[X DVGw{ W`Xfvkm& ˁ2qt| -V؁tNS4N؇̊|͸IF)tta4~n.-k6$ Wo8.gz ݡgYٮs^qĩˡw\K [aU&xlOhbpWU [z 2I ]ܺ*B ?[(No8,ۆ\̎ćX7E75-.su]!ܥ[ 噟s[&)OΨU0 Yx)ˢ6]9c/P%9]0CbnNH.{ЪGK6PyuA%9jyOQcuOI&ٮ0:EvQ(x~荫B2g9n5Z ,tVWJ<9l=<)+zV\)M@f0-|̗WnbsY0l=Ѧn T=<8{!<&&~irYhXw#竗n WƧ)&J }w6)L⓺H^;q%0.՜}U3x&ֿj&;HT#vY((0E`pnTRfkhR#f05G,NJ(;PoаoPcTFYCSB- ũ7:We\]кUZvmT˸ U-]y2U|KO<95jxyJ?uduu"TSb}PL.FAYc -i8(lT%" QȲ+HZ*2HCͿh>Gݖ#\zag I8Q~?Ywȱ}Fn,ZO27ޏpDwCdIg;Q?ݱوʩ->JKe\_W5FUO%&y+.Dzִ*ǺᕎlZ@ڒ7wanv1Q]e :[1!U,LJ2X:_T=,Rv[kUgLGfv^vq&;G;$Xn+pџU7(dx8NQp|όZPbpvel\٩V4,B~9ߦlJ3}kپ4Ǧv_gS= JFH~#C0Wxr"U{d4][JK Pw{J}ԽN 4;CSli!lΒu0Ҳ"2fU:DrhqYIb.m+ -l[pJwډxsWp<}Ф(b4vv6ʯT:w[Dw;p@Fĕ"xFJ%컿ſ0 P"3 OnfE]/&g]BSr.I05pqJ)GNcA< pC6>9S]gsgQ;ao]7f: 1k| }+)JDNFո$ìLR8'X躬MvœArJM"@]Bˠxp:2RҰͫs6Fkuub f1G Bƨa ~>НoTYx<ܣ +pѥ A!GXp 0N7xs`a:Q3Cz`z`F> ٥(N CWN; .f'O:TSX"oH<%wHZ"k5ԡQu>tvs_Z~eTKlM o0h/ϱ T-] lgro#*9]< 3:Z ض̼YU/0mibf?PO&C<"[{buc]z~AfHuHIC4416BjOJЯ2/IG ]znG4G{~ cu=j!BFS0ipLt(Ep=/GƍC9.0S g iZxW`-g Ni2iV]fu\e <llq4RP{DF#a`| ݖt1AnPe2YPZ"is4:) Qq;a j|ISO,8ǤbBaE\GK:8.>=%lq{E`a5U7j9̊ˡ0})^4v4B!wқ6?tI!=WHeXc0pDSNVKFxtNIS7VZWq+Z=x4͔Nrx [w)t[[,\Fvw֜+JBU=ϓ9PST\.:1'{/ D";,ĴDf+g˚xP܍mۙ=Z{9E"}ZG3]w lp~+?&fe/5qD4S=ly?^e:Q=mc{^杨 VE;}p~0fRpuWiikd,q)`Q:°':t<Pԑ A>5pY;r&4@`.vdYypc,Qg|?Vz<۵#eg'cZŀeۗd^µ稬F+p8ѕȮHu3~xT$=I$˝ǎ_PrwL v?Re KL9-,b'(G36CaA0СQBkqxݖ]gFE7X}J`>VŜh2z,FS;.bƵNcej Uߕ,F4г4=BP8v- 愼̽^]xFjnKK.D쮈@.<|dH dҶ/ۗD906Rse8uJlԦT,rL bxb3iijQe["U3I"m>hZP~&67gQǽL>,4> ' ;Dէ'r܋)j=ai"9#;h̘w7E4|MƂU | WˣNߡ;pTꜽ5Uc¥y޾ tWF eT]@n66 wm½Փ/6 QWlky\T?r*F2޻;Q| !ѓMN\MeҊd]wap)ay|#dԺbbgp:)%D%" 8bن4C gW6F.l<1ҳ5H4?6,eTح!$̉G֧w^kmGkqNz$K}ċcAqr<L.<@~^u\(cCNTKk|uXU6$U|9ZwFKKplDi׵ӍTfэH\OIʽ, L޾lJ1Vl8Wy9/U^u זLR1 ai8x_Sq vF u4{ VǹTTEш:>/bC&;JOp!5{'\,y:: OmRYKH~Ǐ KN%W yWw.AdOGᖀZcrnņ&טqɞAm AXN1oi"=7_h;pGt!Vcޜſ0)w,\]͵0ϫԬGn+ú8VŇջf7A>I9K"D+AMRIQ_v5Bo>͏?y"OWS݊t[Q*%XS6Nl/=f/_36NPapvؒDZ˿aUK+'m-8?2ɡM|m[[YWakWOe[G .֊5lB)j՗s|\wa~0x)\ Ɉ wu1|[L^9h bµq8EqjU%([6 4:29#xX V]p&.hj#fv]2ȭ=cA@vV6L2̞m9mN N9DE+jfOvWD7Хv 7{ORbY<˛~h…f7c͍Sz8G]bB4^I7 u2HcC ]ڱ%b)%p^K\6:(FX Ew2 ACsF_\§ƄM=v 7iSH mHpgPl~d $h*tʾ! ^oK5Kߟ 81= v$pя' F~] mU~ p/K{]R#4kksۛt/z~!b ϧܥY{tR׮K2ùLK ' !ȸTv=KjpKCIfO{Y԰A ŧӷGq).Exj FuS_p@SAː= -t}VJr\H{ K ?sJ7|B"AܥS(`KFsVFf],dϓM=vp F@k@x Z|{+!ȩgGUv\;C})U})'5EzAm1iȪ7~|dmL*FaC۩1 ;U !`a)!TtҖVpKN%eEhda\$*^!:1:ǹ+u$*D95eGE<w̓!in`Zjy8-38? 6,08a"-5>M {{-7v .\MoV3\XZYGg01OPQFql%An%)fq xzL;ٗ/?9;02!wLdHp7$zgSSO!FOo$R^s7 xjE%.Q#~;M)5Fm¯ gJm>1;WڳF?!#)ߦ'i߼t^XSi%z5ҺmMo]^%GdꊇF{і?Á(པMHV&_,ڻh^6?ӼJ!0{D r6i_+i~zHXe,fi {UXx_$pwPe>qRfZpi?, D495Sd&QCu4>ڋTI޺?D"_<79ʶ#~KU Ƿ٣[>Vޕԗ ~/W/NŀD$/ˉUYH~pDj`.d]ڠ\&sҾAEK{ 9 l^ig9:&e1bcDڱ ד&&DPJ2XފQ bxP7{*]N UyjL48.flLf8K%+ڈmKL"L"fu VXsCvicάRu#,aC%aSx]'0K^,] o>`}K k_D.$ńtW9"B9K(_m-[Ze!Z8 ![g&o.ֆ@['O~HñzkT_/Ev_e=%>y^Wq&gR UpWZR28E# QwyjHo{zMv{%fZ7_:0s+*04ڷLzJ3b"=kyQV3K& va!*+l*5TV13k sM U06_>adhtVsXv?7Td;'F8e1;,5cLW]; D'P&d-lGT8y͡4bۏ2\f&>LeO vޓ41^h' =a]gqҧv=qXh={9vـXXc ':{o4ZD[MS, X_%q#IO7q,C]3nG1&辠O溹tx̏Ya]FaT\7'Z)4%);DCGOi=_ed lP5j"^uNln.m8.>Vc5R ;Log2k6OrS\PZM_mHgH&-3X׼m2.*}x<&m5&is^w*C0FX-*4x+IM~'mYris4O^r=\xThj?V5XW˧tq|VZ]jd׷r=!m '(R4? ww$:.c*`%Y=`3N\F?_+O:HRAݳS,,v*3B \!2=RҶn5"X ?LDD7/U1DM?l b u~+>CboR@c4if?MRIMԍƿnï<^YyR#SyxaR.ݦ@v>n31P@(\? X dWrMO{ 蛕շ(eZ! y|<~rߔ@%^// ߶$R(4&e=_\̡ J^+QˈsjATqOs4f-+JX'06f4CWō;0-)1,pfBFS%w;MmlF|a,HP޾z٠X'{&Ja uv(GǒPp5W)2ż L{txUҲyXMlVeWv m Q"P%swGc(m Ubzl[}tȮ=$9bg_*nZFٓNと?ۑ/f{BɋX=0\&Z2`OL}GP@눘捾g.RbV㊇eK\!pM&0ոc5 NIM#8zb7, +P3o&ߢ!?HPۜ{T mv$cg@i c,PX3BFKY,C30>.\.'R4JEnhixt[7&2yScr4p7qJM8R!Ue'N%eřZNq]bT/#`|xܚ썀F( #~{*؍L%'+y|nH,`-Xo}Í? :s!sV2ezڵuH"bsWͩ-e* i CV +^0NQ,G%r}`>!nTCt 4Xo8šDم&vWrž`?Æ/`- op:~9 5Px?Q'6JO4oʷi_,Z jUX$ 2ZuR`'C=TۏG &>,Y_7 X5ocp٬isMQcu1d$:zM: bq B<ҥ/1b{`4+1@,r<@bQcTBXVe5v&mkچ)V|Qks,N8F|n֏*,zmgUx}Hnt+=IdA=]iC>lDʈUvcH9 @UˏhV,8#B=GZ{ieP4a}p*!̞TqENG9 - ]EubI"Y9k2?C$3*ZYlP:inĩvIVhi!^P$JhoT? EAֻD%p^/cRC So90ZYfKMOMԍ?Ak0tOjqHpbs+2  7?TlMEOqQkhRG6͍8q5 =m8 [S Oe<;)X| Bgk* u fIE%O j#l} k z\)q4Uf$j}FۓRI)-`M"k pWR ag:^QrVϿVT}[}LoS- #MoZ M.$> Y6zQNHXUmՄ}D!R |}/r2l*QLH"Ic.rTOu:Wx #[3dǼ:3Z6?&.C)5L! |/Bi+s@Kib$gOhC ,]_,t/Kt ͭW<4"5S=w3O.Z{aV7+Ԅ8jٓ_57N]賠fM<=m2Ns'\`~@ %jp9vcN4 ib*1pOõi6JP6tMsۮ*,}=*BIOT8'%q#<Ͱ}5!7bVi3ܠ*L^zVFXQkӰ'堓ܩ{l#z BAv4kLJ/>wȁ }6yIr:S06xZ 큹Hhiգy"ܶ3f !waE9Ԟ$#^,kjUm^K(sxhb*A*шaiG g-'Ļ ?C|Vpё3]3LI$C|J?T!iT!f%EI )j8? N&˷F jX'~adRejuƏ`Ons7B >nZ-uf/R|v5JVKmV_LݞJiHefF n[O%~=vU{,2bOOyۂ>gZO(IP3m6!g_o!H bBK̎ >#9S!F<=g9obt  na4k{AyJEGRNzvC W^CqGҼ*>8~vߙ3a#ѷ+7%j#5r- "v$@N7 6҂R>[įGBF0n48HF >aOX]!jZs_OFSТG- ݑ~b9ZJz yEu?VCusr~90nF.Ck3ߖh#X/E?,-ae$=QHZy D(`\*?jHv ^CK-҉ˣ*^FqqW)*8C.,fҔ .,[Q%}>w<ʏd/T )Wt 6'1kRۚ"ڐ:!aM,eHIg'z^ir'2 9y( Hp? @03*X;ˉOGKc$5ch@,~Y8!y4NJJ ORxr{%'#e/%|b|] @]0(ޯ6?HjwNߖ GxF9j,H>) )+zl &^:hcR$6ߊ~p?nt!#c]2L윏@.MGҠg5`Yag,a,,Τ757|SEҳI3[nLgEj@v-o{*_8;]kƈ] ;;#j}J3D*O?^"yuwQ+J],5NLgF[36EN k/mEm#|Fi@ۆCy*"!0%0#=xpvRF j@KEdaA֚t7Sn!(=23JɏaOWO]̗64tU/ޥȿda'@d90,>/SN/W?[1$ea b#7:Kll32l,ɡZ~9mR͢Ȅ'[,(P7]>\Jf `LwG)Hh+GC;xJzÓ$msE`t;݂r6C(l#֜QdMX9c }^ uP ?uMB'=W-KP5 }ft/:91H(nE®OdO2f_C-'{C=JXx;L''հE_":P9cO]FCWU™'IX V`IF)=k3U&ڍU6qe9ӥqzw,F~Ȟ4 fgڸ/-)xCS$8)8*֐\y3ǖn ]n8i"_δNtg /po[E^[f3:z%}r~jngRF!|Wua/Z)EƝ62GQzӡ AjMpj\x$d8L_[=H;^/ag04 J!jB3TRT}NI!%ci IğƨٝZTcqb#/)Q4eu{]=9B[xZJ { GgGE|x\G䟕@<"bN@I=vY*<:)P:.%^ԫ圿7r_dwsSa>D:?xHA)+ ռo=jf< P*NM,ŖDYǛK#,RZX+!­dطcxYdC6"E ղJkNu/K[+'.lHvaLG,N9\ oDk""999EyֻfFC@\x [qjO|2zkQ=kk~Ls4;@eV :ylܭ% ֠j:o{yxH.<8Uwȴ7@Fh5rڽPЃ%@o,>CEB5`#Z5c.9/q^ cQsb!7X9Fi?XuN>2?s}>MeU>s^M8\ rf[8좒͑ ]q99oCELۉ@)Yoh^XB 4nIǯT011Z)v]CK>Lb|p~3O*p H$ Y+A,|҇2Np9PG\tGh^0m;rjjz5cK86zF< vXUDz}CĞݒ-Oh+ʏ|ӯx^@3BbgzecUb]_>|#^gw{jD`T 3WiV D ͷ]4i^?,>oSŚiuA)\ùFoB{6|}H>XǯSc<\ؿuTr*PY'>nԉ$f.=xxz<6E`oW䍺or͊@s'Rp`mw.Rd`H/BW͒4LS_:׷:3-)D}@R\m_ wŨVK[ kCNA;Tͺ+=/8(\W&['w;4qw^_gWW2z^cqyeE!N*%S<&sBҼaŨ͐v{C.<> @gbO D$/ówlֵ^*H˂E@Gqtgx~Ale9Xb~Ų?prF7.%BvPauXM9MrgSm͒8;. fSo֟ EσJV\_v8VBiuDž QB]/ܸDF,q?>x|] %xPu?"}NNQ=qG.rM847+?u#z )}=[M`/G1\?가[( o:8Geޟ}! H {Gvx/0Am \Am^B{?y|B|&r 2*%6s#:=edTGTz- ɂW-H7:|3Xk2 8^tW"h`WxgS7PSމ`?ͧ8UF5Z )yةv#d 6.m3D!x/P{q=@Ѹ|d'H6TA{XR2-ގj K HvNSt7VQ{[ t5t̙H^W>l).HdnHbaUW ;pw {qTK}!7C&dO#  er j@y}[|r<[2$UJ nשe';Dx$RL͇9V1"38Q!bOSvBVQa{˚>:<P]~)dd8TƆw`=֨W ]vd'}Lcwn 4lg.ErR[Qm}/=n 0{,@1`twF' $H ShɣBDjm;(b+Eqf7SR1VEU4abIKͿdlvb/ ;n`)5,jpa}^1cc:1 Aj oXƸX;o˜PɥKʗ7Q=ga l+9CROFRג^1Am23䐂Ͱ]Z_\u-("[?5 tξih@rUp7P'htHZY`1ѱ%/|)"OT3;!oRg1wVLi) 9X`Ǡf1-:Oom8OM*fe i8׼Ƀ>QھLafغTمd >*Y˻&ڠsٚ&yXDm>k=HVEj3̮i3*d*稰|NR촭:>5|M_>R?Ôvn ^sZ'D(%2^Yh ?ZdA`5\PzUtښ/ {ĖTS(?i,Ws9I}8KȬwd~8V< ;~# 63iq+g+s[ Š~L!ݽ8?.-|֚Ǩ"JCa;M/jwT^{T6q 3[(48> ~`_PiN73ܺ'<-'s0t -Q ?ǿP:ޅ#?d-)RN=RE[L~DE%d) o/Jk1{vtpCUhJxbhe"x7C'D$%a '̄7nCpP gb p)7} nt;G%*Tj)bgeV]$aWBJRC/ѣezG`Ze-\} cjf!j˖j-ԛ:Xou (dgpc\!78.R7j`?Z8r Z}o!L~\hYߺpxrN1;*HvbkuR۪h붴?ƈ&E:ExiM)Zdl+2K803PuVAd1g$6pE-Ʈl!Y#Y\p]),wC*bM_~ vR~Q1r%vl|1#\[#BϪ,F?+~WEHNA660o=GUΝ+z0@v PiO٩!5 g-:@-P[ <2g] .D F7|^#C#I ׋uâ*(D@G Bj?N[H((V#kG`Aii4B'⅕$JR=K ^o~} &0<ϩ;]ۿe 4NH"WCVYQ`TʌB͛J&g"rkV::[qs@T` 4->Vްwߎjto@Uy&?uԥQkEs"1MR-hAt/:ϦqС/mhQ7nJSbyKJD5+QR|Exۺ哏ᦉ{²7R!27{ei;)^@f 1*[u2";1c/\7o.@t=>ֹXAIiǙOUksFKډ8U`QJoL.!tIuCm@=gG-ɱqӺ(bWuvɅ.dn2n1*s50PǫߌwST`*Y=#pp~p&mgp g@ vR⿄~|V͕d@BMLWG O 3:_٢f*pt !BU7i0nFaw9m&x2b +aF@ U`:L>kDd (jG_P-]K5gN76R 5HrD .?he~*4S|U= V!Ϙ]򃷊i{ Jt-/Iaҙ wA| {2亐X_ݶ$&?0Z06Րe^%F1.,??,TN% ImݨZpONCl;?)}=1(.  ٙϟrg`ԬKɊYdmyd%Ef]Wz>*/~ qk D Rw$<\-6FZLѩXS2-r V@V\GCI{kym̖sG$1QG@#|dԼմiw&g俰ԑ]YW,MrEAn[9UP.QEK4xW~)?׃_ S{`?AK/B'6^"<寷μ/㵧:;\'0]B|s xwf^ɿNǛZthѬWɫ" #{RZYFH/}ʆqoS^A jf |',wJhmWtM~Y;\rǠD!fw ɺ v;g{skX?Y}MՆlPz]׏'#_\N, |xZYBvϢ?aoxOKU6395]cJ5h\v^kpV,롚}sg o ,%Z]F?0P5XL߰:&N_iZ\ySGq6F]Dmo9K3SyǣjcaeufUyr #GX #j~uQQN4c+<,SŚ8~Qq)"t<>32OXU}B/COm\gLvwu$Θen3)7֭`Xm!,u5J!3vXS1ug =pehb]p'C+"ߒ])@V[ <)vHhEG6ث 2F~hˤ z"';iΝa-zNphsb򴡬H؝`x;- DGV[٢v dƀFr'yA ? /rSωA'6 YP\:+:9{]NQ7U0yT%Qƒ|*Diqs2شBэ~79'Д`c,,2%q2p 4 \cR!{I1wLkrW3ᖨXY,2ԓ"uLϊEaN^J 3k5&!^#pD&غ෷RM`_(;j0)vW- 8 s/ZKWq8NȒ|ziVf/ y_ԅ!+$,K=‹4ބu2G3l;KpD㵢v[!\aB-]C\'Cgjn+#-X e ָc+X~PȳY_v[|a`#O讆9}OeTIp[Tm#P$IHX _G_Ip4XU'*_5 \$h[rZ ?촉\ThXMhh?l0b:TRZ}~3R <2qM݄&Immצ=0OG#?Q"]R$awg5񨋔-髻xzKr{^r8Dr3DELV($$tuNoS" 鄘ĥ+oRZzXāJq ~"pM8y:OlnZS@n$qHї-C;f|}{+&(i&ydr<[hK?]~77y$"eE\ZF﯀G&pN P@YǂgpX@&k*c2jwC go=F5٥;d~s|^G/ iB?)`RwU 7g=qy(>PϱɹNYh$p(b> dQiC/™zx )ےu[BkJ^|jezK) %[S@,(sKec < ԁ:b/NJfR{eAfE!/L_ta1)nL\=BoX!mp^pmZ:/x힯QmUO )a(q*;*v:Na{.10ݠJ$]b+O _VrVYPhq*);d7hJ\Fy?t`R=iDVdXlj;zOӤlBJ/n[.^ת*$]*O] &ᮊe5z&oj`o6ķF䴢oX;kZşVR<|2E8}X bb(,ON ;N%tW NDR"O@OCm}44d`-e{7wuyџ8Zu+sH ۇ"ˉlZ"FjbW< ,ф5: )P>B`ٻ>;y6XL Fw#.}+fNA 9mh8]p[1"#p0+f}MY 犥xć% :9{a&k0 4PVUSߌqe,h_mt^L hB:?h\ @fw@QnU˼yJ+0A,HOfgkɖ!)9 #ods8Z"3;*-@gA!01Lz8 e@Em~Hay!~F=S]c$i|= Q˖-^MaMU2 ,=עfv7Q~)_ua-n")*!iۄ,hcU_*rTڼn3ɆFs f<\c5v}Ԑ=s'px'&csJϯx}%w65Sjvud1N%Aܐ;>G_Fq~o3Z>1%]"ILX2j3d5gduUHng@ @"?g$ Gj) w :&zPl-pqK$jC:ALV5hXNrK m:h_:& XFݏ B:he*yj}i =  03vJ+~@eXPPol5fy!#E9bn=@>N9&o0+OO2ڎYqq.$cMngk @j>utZ0ѥj.k9j,dX^í W:ʇmF }i%ʂQ#"TӅj*fVt[W,bDRl̑Akt8p,0:K*鄸(E\݊W-en]1? +,g1LmZw]WE Y]H%Az/zI)z1nym+lQ lƪGAַY]q)#!)CȻEmF~.9b)[m#3YRD0rlYT?EE* 'yq{%L_KǁF'kDrR jw2bL5U#V!Aű (kv6 N$cSB#I{R46N|Yï:Xa6Lh!$3L-W.LlP!'K,l*7Ɗ8V$`ɛ"B;۠XJy} 7s{ao@&:q\Χwa0z{{TOgLԑh6n(9&4ץI %S`OL ,FA}dֺmKLrgBlc+ u{D=xV8lŅ-unH^ €$IwoNfvM!E8+/iRAwDܴH&YKBOXԆ4 ҆)exYith' !KAΖ+0R)u;~;T?_Y W=out&(]lt^Ywը'" osy/NSqTscu%bWj̃bZ5ng>zΙ;٬]wZ+-ם_FynAhv5 |UU&zeWI !Asgp_T>x'tQ}SW :r)J 7X˰,Ȝ YG\T G Z'{^d&Ցf\}Fd.Zi2n8{ypNi{Lyz xLC|xIPJ^n;B$𻇮Y;t ^G =ԓ =M%JۘJm:i+ipqpXkU(=>[J.C #pSz"ȃy:XbK*[WYuDfmKNrÇP_[n*3eTDZύC11ZG;A l}]˽Gg JI1?SsM f,qTM=}mkfO.o2C(g/uf8lHdުsڿOQEq'3ypM;8q@*g﷪H H H}E8W~:qFɒ6[[o0VHHde0Jdw3S p݋keQ) 5OFHaxCady4Y@.UD EׅDí3(O]i,Z,몮;rH A89WPaL2ڝ|#ѽ*_4p-*vLҴ搈}9TTAx" ,"##e iUng90k\2{E-8 :u;$w̍cc)v/S?5Chfy_@ښ0V}3eYZ@4aٲd!U'"b?0fzNOu8KV(d #6i bMU4)->TmiHu|.byI_ޢ\n1`^I/kYǜ4]<͎DD(^?st Z\5 A}wg%ΎΚZK\W*7!]1*EnLДdp fW!Q(ݻQ$uܙ o*ys"<,X8'cw[[bp7$=Xa+A[RaьTQ̎ljH+Fr'8%l\!9_>~(6Q[1ae -I|.~H4VҺҲ;hj~ Z-, ;5 `:^KЭ} i_1Erl(8?fL{")OiRIÎ<{JG\@22E$ŋ @?eX * &yro9ǤE<4bH_0׾鯰w Xa mgJϠ;25fMIP]#Vxd݅bri#;7zϾgH h\k$4~q(lG@_!=u h@n?I;H̸1̰9F )EgP] +Ȣ-atlpPG9:lzi|汥|⭮']lcXw]NGW ߠJV,1PI ^ֺ%=͘99]JT:ƕO&5P.mXD_Owh냆v}׵~VDG%'M3]0SS+"~>%O5`U|/r&oP('BV{UxKptڦ! sNh[j_"e96`"+e,A䐫򕖱mZՓ1=VK\,K{F'qB$HǕ,oDF5W*FoOtCOUB $*KrOPZ ":$&od!yގ'>(o 0:itVX?0UOt6K:ZK0ʣ!@s5a'K#-5&w8Ce>), ϩ x<Ƞ|Ct?i#e(lɌbqٿ QjQ!Gfl!9圳/ l}g-HdFx!TR^pm5hঝ"6AY.aϗh9,Ov9BUrJ7'U{IWꩅ|FEU/[6ʉdZ;E7Vmvj<I[A*[@%!B #CpAA˽('OD UkbPͻglMd'q'odj"pK ;iN=]5[B7W?Kūs[BmӊtDYJtϾBeyM5w(h<ñSJ\Mu::ޚp(^K?VӠܒgl5 mչYAH0ǥ8SQ7yX )>yM M|'|9m{ۊ~6֫V3~3jGĺV (Sb>HqאZ#_9NW \ t("}[:,PUm\q[Na(Nj@lXDnmC=Rd^N3TTd2[.JA$|PlhAn$2k%N\ap/gn~z#Jo%ebI_Ve:N=mXBiYcă'`@Mc[sv,q5bf&'kav Gl{puѡ/k _jZ^6082 JOvu_1xj[9G &#\{$(wbO]nHɛZrLYl^ ;PI,3ZWl8u% r,":x,Odjr:Nk}0{ >DbFQa!`{T亅cSm_ĒXȡX_+Nh_T$jNTܓ] +ij)Ʋ[$W\(s(ykH—+G85@A匧69}t̑A{X@j^>V=_ a5TlBԴu 3eh|o ~Oۙ/lC NOV׶R.kDXQ=1 k-U>yetl~ ۴7=l[b}йK&F;Ф p%LTE!Otㆀ&DVQD~UyK3]ݮr:Q[+#TZa6teѼEP̀O~$h9WP : DuS򌘢H.d-~ViŦDWc穡#.GY)K[ֶ(F{\oDšx/5ɜh.bts_vfswj` u*=IqhZA@@x23jC)Yֆmk~L=/O#3mƠMqh7ՆLd=f^6U7ÛrE>y~50q0:G&-{/ ~jrIЁu] U JzӘnb>J.+w#p1wLfGS˭xAWY'6S9 !ƬM~" pu|X2U|?-q^_T cj&U aWꦞzf&D$M܋$u,qݤGs(魷7a>3%fQtU%X14[!xG7}USmbnUX'Hxkkt!:_rϐ1n2p`{i<*mbQ4?YTScRr]L`ݑn|_Z w7%gק"TdqxO`F+\P}JqS뤴bcһMO"NI U#8SMCخ26 `,s[MQaQqiGPbBY EL6 h.lDIy?;z2gg<|r}I W>,opRx{Z=F/ڤf>VYa.ȷlװlwc&y]wgdHx8о P {A0dSpV29gƒ%$tp+Pxm'/r w:vwPuEBkr-@|]3~ShJK!4k`g bA2?=~ֈ@G,T]sW s &2({߭v姺]CHgQL!xm<U'>Zpo'BN'u<$u xQY7+Ґܭ9@S̜ e;H)g T3W&2b^5d*uwHSsƤ%cG Uv8-9!bK y`ې?j6ȍ$}2,ɩ6Ulȃ=Up.9seL<7Byfl}%+q.IӑbӥbL,U; G݃)Y,a+'2RMJXÁxbfsbBKm.R_Ij m$0H\.b;R,b3q-~&e Rm@J=e|2 I*#< wɲCo%-Щ>5ܘsI8[C{Dj{3q&:;Ք׷6A6Iة7owl^~vzG$y%̾IٶR_D-W8$G|*DYasBOvw2];6M>/u'(F:\WbũrxRD}0uF缸`#Lx^5먊\9=xiqVA~]KX?f8;KÔ@9šl{CkR". 13 |6)Ǩ#mMw3ޣج<~RgcfZ%CwېBd*{^&퇥fqJ+ڬ{ >;"EUv&[dOp((6 ,>mp=FxE >Fv]q̥S\ojhT&T ]pQOu/BMA7X$ĎH?[H(2ci8,3 -njt=`~NbGKq'>oۇʞQzI(L SW` H+[mҽ~4Z"?ʡxgG!2/U̱0[doV"/W(Auu*9UVsf]ϣTa^QaR'ŝϩ4悇Yd\`8Z/]Tm$H/0K/?!gw?KO JzAf5O>s eayޝ$q?.W \( 0?fJܗ *F4Fֶ`eX[wiqV? 2 W4d_gd']3 )Gptou-+b]ݣoSg3 0rUqsEhB ^(!$Sc8R[ͦʨ)+S٭Y>=Z]o陵yS2 ZeV[t/yHVt|B\i/N AINWd!F-D3Zn7XB)Y-w)$ՙHyO;i"s-06)L 6Ӌ ⎙U \7Fvݠ;aG G1ljp],kׂi6K_eKsI*^ڙH¥&9"g/r}Q09In"!>kywYlȨV(pe03/O,awzkKL׳B"R./Z2 $dW.X)uE ~Vq#A#c S= l2f3R>8As(e&̙~`P{$bYlM))8j>+ywe[.zf_ ߆OR|U'1(b9gE (y[],(<KDR>6խڀ]h-V["(<'Q|Q!9vrJxCG?)5hӉN;ھ R +(j`)W ޯ/S9&\.r1dYØ޻JH|FO kK:cpG9T=X/9\o 3%eZX6|zGÛ*b{2raIy_ׇv~fꜞMmQo׮V\1yVY}c% &doc=+K)XO (Ĭ Ȁ Z&:yYƓU q9mĴE3WL.k7Έ89mGS)έ{]0u\bO #7{{aoM-q\umo=1hIV՟ՊR<I%?J-C'?z(nw@D[eϭFi}&ߦ0`c Mp볍)" ݊B;` _Ǭeƣ]f8([6fe!n:C#|uRHKu&99([b)3KD.GYN"&ZpeM)ѪMc]W&?jcoxc(yu>ʔu5z4^wh5կohpaMju<E| -~qYܾ8IQxeTɔ{>%(/mɔ3ApIe2q,@8nOviՍ& qh}o0W׹cw,j^ʾhAz dE|i1Aޒሴu9"ns>XjawH30lY3F~fۛ3]LoRP{* 9ݿ]=aBX@$paA,ڞy?'i/>kGWJ65ٿMCڅpPx)& lC؇;C0S;~~&3.1`س=FaSD½ ӛb@#)ɳRO*$< gPnOj1JX}6ϡw} ۨ<::o}j}Vw22'U~d_s>d&hT(eDyPԛ"Oe=IcR9)`m239 ;c(2`ԹiU5ksn5u V! y"Ib#u?.OLC3rp(olof/zSdG0 RjWz oGQl0/1"C 3bgΐ]!Hd-zijlwJ؅t-}qg 40I1Jb9 9 H-'J '+=ljL-)O1i[9{[ѪBUK~dmOJ\; 9C&s9lXF,r_@v7X%a3|9$&JP=b1߷NE;j6vQF%Ktڵi[܅6B #Z/׎] "IF`pc`KTZX2yFYJ~ ~|}c)2~r$Uu (R35h>?PMݺ.i;Λ4qLDcծ9EiRRaB=P8xTQ6Nט^t$N+rB@art3E J2F9J{YtKSt"/$X͸EbW"qq =sHy-ͻK?;d5X(MRe¦P6A8zCSyii+8m3R_$`Г?1.p2&t=SҔ&A΢7t-3/sĨ.ȣ%I:w RDw3(oz`*"isnW^)qy-iՃO{V-[~c3yIL*{"t_:gT$,A_-DT#$bt$9[SᅚA[~jB ga{EU=4Ln t@C[IƦEWA؍3 t6@}<ufO8[/ G !4Lio1уW]Agu-'T$?W7sFݔv?;WPơ7P!E$ 6?%:.AɃ=|,'_ sݿ%iǔD3W;ѝG]R&K׭_yr%LT; Z| \l!m'.qr t|s$%!GSBĕu!e< t-9)l!"SebCKѰ%.<R3qvЧ`\dV|E} _r^3JN@a3nT< })Ւ2 P*+q0Zݹ?ЎL}3XA|vEuw#grw3#S'gc7xn'Shl崬+U%v9\^B+yʋY;o+Q(J"SAIgIFA,ʦP'`(2,˪ƙA21UP-52MYph4#BΰO68.=V!?Y- :6U9egSnAitOSeee))5G71$ 5ip7HhL/֭TvEN}T7tbc"R0CuM}%Y$+(ZbEے)(aAvpY4L&C2R]W\-<ʓojBF!C!)XxP%s_&$'"%;k [!U0ԧM߆NpN̻b,G_CqѻT [dXuBݭB&w#f*\7Pߨ#EŃLkĹi]`F8W Rө௪bzN% v,}qNJ7*)S@yis/]~{ӹ͢U}ג 3yn&_I2 q&cN\ˬ6p rݠDz-ftP$ R\ZlHY_C;G1DsfIR3$ Lvy̜frUSAR=jܘ7pDzJ|fImhZaᎯo]ӵƐg™s+lD rgCo}<{8hφC 'T+*b Y{3#UłpuF$% o+z̢~F7bNHgX58yp9)FwJV(aUXUWk BcUsR?}AiqCe:DŽ!\YP}ea KWڭz]/SƸR94n+)gǡhnٲ<;P=w)EULS: ^x4IBƥGH'[VFYUS'8"YTfSt. Z5hd IOf|R~8Rt3:1FaRt-AE[#zYCAjo BL6@$PV$+IQ-o:i}(9}? ֙/(W=l?a8+C'O5$O #%޽mf$)znGkC$1)We9@sF@UhY[JDқ 䉒O$(,.Gn2@ːoKOq+,/3<1_/aFT6~-Nup|jzeFz G W=ZZ/PG\ :u6r ߁Yڏo4+.1xQO,…^ZJ2zR{ctAOkV,>A~#]B *if>/<3p4lBF\bs%c#kjx7mRo.r4tE}³= *'儂%/ }H׭/h pHE2Pk4K6e bͭbI7V}ͪE~jLB}l.`րWvۛEۿ35~D&'ؕU Mb0 A/n|DfțMMq~b9?{J T$V45mZmN1xoʠaZi +GXMvUJ?Y)'}[AA+ü}W g)戡FcmAb{ G(s7^`_k%;(qFMF0̚ 㥁xMN/ǧ K{R,P԰@9ƫ 8Q vI!햜T+ #G٤KX1 yˋC<;.TbQ>2NN+l'-g`h4IiBH-%#&$4A~YKqNE>!ט)M}^A#$62W "$ge0sUBe \ߖvy/R`BfM,䢁dog3&7Rul@@ Wh?61_ x(ժ53LdZnlEՎb6LkU*U+9*V-p%O:ؗ1ӢKxkT..^kUᯖiW2LaIM]3ZFs?M'ܐJ-d7Kx[;qEwo)R]qкǏH#:rҒG ja%iHL>J vQb\9;OQJT`7vX:aI m;&j $sِ$Tiԯmy|IOJi'v,Ni0\N/Ʒђ(Yx_2C!qɛʹ}p813"{6 !Gˣ{\+Ien<Mm2(Y|3`"h. l,wv0!$?9l`]TgwqCL8d[g{ON̾M4kdW#p}S ֗C@݄H! ܌')$Kx.5؎"plV70 =$^T, Z `$p\Lא?@("ӾnV{KJ^.*F`EHWE^&m3GھQ`}aGHNwW=e֑ͬE{k/2𯵬ʒF}ƮCGQ$8g7HdOWCErnY}hc,rA( 3hFdpo̞+ִ'!]7e 9X{>2P'#Oܨ@t:8|9D<D !F|lYNF*eLLʈ$ҹ0dKɕX 1y]0ouA.ex`%aY<55 |zgN^gݖen `6gfw1ls!r9JV:;n+YRXcj 7įڼH> J4{"\i,u3<{1 Ka'>pX;םEHnO]awAЎv¡,K뜖 G/)i}\1qrHi=9K>l[+Y)z #sa&g2kR;&< ~H׹]H r[5{)q]K>M<-АRRl!c5[a %z(ړOnCn<T,/>y"t8d"Sd]fj1皊}Mcnzqul˵!J&Ob‡U-k/=E3 k"&N.풇yN[PPȔZNmAŘb`O튰>W0ι^腧]U|uGzŎ<q $4kCr$aNz)^a>J}qJy KsCgfXV ;/32akqK*p|xRy9ꭝL3Dq W`x ר>]jh,Gpy7=NOs)afE ]nC -}\(4g5M@p?D$qui?ӏ+a46G3 Veӈ1'Rkt moG5VںcwSOxDGT[M&3"՚ ݹ_d:$8ob`)Axj-og1Jtd^@d ~49S}xon9DoMyG`#{1<,9揿P3*j[jm8-3,`Vc؎#5,j\q56&{蚺kc.YUDe=cI uOYk<(ihwc!ɶZy!@M;&Aqk ;.m8vq鑧v6- >em82ăogeސ?ZvAҳ,qsZ?@v*@fa!g?Z*3^Ė"AэwANGiY {\AcF!޸J7\N+-5$CYfq||[VETbviqqy4AEra 5]+]WD]mU`8?ߡ'8sny8'eac[!]eR5N" + U'zZ%0ruH ;'Tqqjc"5=Ha |=Rʜ8UߵO&JbWVl ? [4JyԞs 2lJlq[v>el笡ڇOV8s͋M({me~P,3a`^L1GP-AHwSˍXz@x,EmS&ѹtx:^ 5և7&|.Uq= m-?NoRhBHgpzVK Jlzm.:P#Ie94+cGZ S A67<;8R( =?0\CQќ9kl~qmhs*,X¼.5I_Hnt"缲yW!_w_e)9O3a0oPF 0O7,Q(ov罺٠?g `$!"vb|BC8|jZBe 'cDAj?%UTGgպ?Az] @-2 Ir}#EC0PqW0 Cu 󶥚Yj|{-LĹ'#[N{ޑ$4JXLn|Ηb lxwJm)уqnhLy:«Mv{%Eܩ-*ө ָVόNcu_3!xa(8wP[:nxAg#z #:ӤN]$Dw%YJL8UWB+_xL@HܬZ^A`$ވ^ 3~z:vH T_=qkyfD2CEV^/r!}jqTa&lamxȔ9= 8{.R: yb[@saEs}fFO#fj(^h #XDS,t &گt0V&<zdNW P,d `!8)ڴ,gQL }&s89H&1y7iS7r! !v|iv4=z4ꆟWSYO  xi ~Hgvr Ja;.f0Ƀ=v 3@hͭ swӅGqEm:EV๪[ ܚT q܀[dy뀅045QQB{qZ " ;wǔXPl';^9kN@_n KW : 4~&}62mTêfMAf*P.bxXn"דt8Z ^aL*Դ⇘O`fۤ,1 hBʎs{2cRӗ{jkuߩXQRgt;BsasTrC ɑw.>pP'S%i;`*kԌ;i¯; pM3Z5J|9 Ptc`UI]c؊q!5{.M‘sHD1KU`=v9IN >yMvx -Z^uf~-Q[Ϛ>sBc8L:Xʱ;$=~#o0f<c$pȏp_ R۱Y6sd^,j( 7-Қp0n:,qߔѲ#t7!TOl2?-JY-6P&EFy҆hovqR,cZC HՌ &jOч[3` wL K$y/F XihU6yo+`yG~B `ꉣBn{7pu1Ksjr=uzϫhe j΍K!أ|V)t />(%v8{C_e1"ϓ/CpҪz3},7.4YM!oLyRJʛBU  # KN|+P|oa c2Du\QGt*Mn6Vo-}ISX&a$jA%xu*Α"Kk \VΞq. U723BN"o0n8iz 0y+DIRt;xal>49\ϸ 4E]zB"f!{OhobnSqW*b=' x[![%}ThQ Xl Bk @%f6ߑ.D{reK,z3k}CBA@e^E_{40Ϭ^q;e=4z6`y:Ϻ]eC ץp5U̷7:4`_ P 9ey7Ɖ`i>v H$ "rHªFUsA=aGQ$ۻtٳ,'Z=r p2qJ=_W@İ{Cg@g ݩ`~eL? 3d6`nA]fǁfٿ(^v&ah|!A{Ptxq|(StO,=!T\J\ * ^Da4ySv[>?}8&aiI erjƃcr1SѨ7(_ire:BݫrAI΂=jbJ?af3d)B2:.R]a|BPOcZ-c2-'ҧCB ,hkh SsrC(*klD]2ټS4K -٫d2s#Ime+V5Bc|'>s6r#>[wr6M̩@+2ɵc%>-_/j[c~%-HH&rpԇZP!AAZTe)b*A0F/CYհK.Njճk~}뛹6s90e9T>b5˟ZCz5ըIx:g;)p TD|ǭ̜׵*? Q~1W5IUh2If]KcJ4҅ǽ(*ڶJ%B!2g#0cFCͰ~gV,e(D0vbt[-TvrdqY?e1/nHP̋PBqK|D?Uݎf6m!Z}Cۦ{hC ڪv$~)uG&!#G\u~~gvDoyfn+9s7L ESY-LҾ@ )4+05T;^I%=cӓ,[}tdnWxzXa(|. W0*m[0[M_WT5't)WfN+go:`^.Cir3%U޳T,)E )gt`4G1%|0}c,J2!zU.!'bR7b^LȉϿV)[DK^oW^4v0I;zUGdT/^^,h5ɫ[jt,= ekY܋AOGXXOrM$gݓm-0Sv`WkyD)mD=A ר`83&nUSc#/ (|kc.d@P ںq A}ЯTxk.;ߦeCr݆?]:]Ǖ7[#M M\*ep:jWfRXnj Di{o5&(}&.]k Yv>ҏ;)yoozh XYۻuqܶM}y%s Dd+@pKAu~uN|eQ lڔv[Ьb(+zs* y>';Bϱ-Z_St RID*/bYrq|Ta>O1u,_UjdX~GYb $UxEPlĶ< jy-z$]a}ӳ7QKeJb߷%,k'݀^ }Zܶkoۛ⪍b2_tAk+hǟ.LnV$ oSSF`w̖].ŲVяό5A[ϛ`0-.l [\lQH3=]ퟜʤI&?44a0$&YŃ $`c(,E d&nݤ\M l+ڀ5GL"ϼMz|  Hvwַa,bFI5ȹ߻%DJ7Ɨ;[ ӈӗ-6,)}obs%U` :g"TOQB'Sk>x1R<}F8E85F+pR,P,doTbw:rYriyBa')HL,p1Iˎz; P˛WqTdؗJnYBu6&=C[Ǯ`O1`^ c)S:4^ D*6]~ ZɈ!jDGTcG%-wKf2Sg]]l 2HFOb0R(ی7hmN ˮ޺[칑`ܬ^IP07Ƿ"-= n?KG(~dHЭh } ;>`=3j#9WƮ:lmi? 20#h 0%v 5a܁vtMa&ɅQ)yr ŞVūx3 ]4!:Ua 6{zgTҜaeIdL۴Z` ՓhF#4njDunw0!|c G}rʮe%qbb9`EP)tHӐ)S I0;5u70w_:M~3 ˱Ik?͟,P_`[X/"\?v&7pM^/WINjjVnƷ<wtR&14[tM@d>f4A[0 sȐÜvY90U`湄 x8rם'0 0? uR,#?, Έ:P۞:Ԣہ"n';XQm/} {pSeu|ivg7tAc7+T;a~~q~gC/);[]H( /("*?#Zq$4-=B6Vp.hgD!mDܴ9ym85=5/0ij6md۱Lͺw:KzLG-P.ۿBhq'iӛƻVg!K%3G0z~+p9d:k*%žwS,w4LN&Թ,wzLoDW"FԄЮjEpg+Tuz&~3 5ù+wc, @JLB2>ILnsPɮĐvJ|Y&nsV6Gs]j+C0>l~x5^[Z?Ѐ;[Xa]sP D':+[̀$=.Hh47o򪖽Cw 2mWn6WJa޳Ou_z,aduL XpMFV:FMz*/MEW#4Hq& Yg2r if@6`h>նƑqVB3טX1dXnj|]!='yF:61ooWOA]_;]х)ʣͭ⺖~EN]nZA$uH=#R-ƞ&ƽuI#Y [w`RyLdN4qtIL{Iy;XuRy]u5S0OZ`45L[! yUYZQ+Tc<ԓQ3Wxۢn&lb |18Mke`A.r>vwpo`?8C=+"45L~,4Nb >0)8n Eqӻ-*RZK-'Z"P Fz{A42/O-0Ӆ2J>;=yjylpAON~20-4| x.) q }K٭V>GʎLyhi'Eji +W>9^&@oܫ#ؼ8[m""M9ψDIX@A4O+0eBH1W\^]ʇ$.F(CoH\-ZzϤ L+* =Q-vY-; K*0\/Ԁ8,:4F@e_&5 HVzj)>'^^Gzňgŧf( H *0QI G.<&~KC^,/LF}-cocjL 0(d=iE R2Y/ Q6t=5ˌ{/8ڹHᲷNuAa(p=(ۗ󈋄9lcrj>_ .80Jӗ bFA &i'E'b򌃯Nʪy>*6liE#G ' @XjBEE }un'Fc[/kl!2h}7+}Oqۈ:Xث(e,ou_hjFF7D=OД y⪴eeM!4K'_&^9yO%nA2M='oHD#'LVeSܡ>WgZ6wR"js21Y'Oz8?`qEjka#aзoMTzl!OPՉ/4r&J<FH]l,;_TK\[s!T_u#'r$­u7mlEtkb ф1 s G]9 jFB4a'1~%;[w,klkb_Fto8}q7z?{i P8h10*-Wc A' x]: *jVDaMU_n,Mye6 bS-,^3 <4j !9󰭤 Nӧ#+]Ť<@ӌ-v+QApt9mp[E]6pD 456L:G2?[ wțٻDzbV华ˬtXTm\%1!pQi;.8~ֹ}V'!ύO*/L.i׭V|I??(n)v%/ɭXE3G˒ 4%?R8}7*SwoĿ…hGBYbG5"z!ֹE^!%3-|1/- H2{Js 8j,+ _J[QbrG j%sC6Pd E^\wAATZsqˍl]JE<{!-qxUٿ'*).QŶ;,|H$k>N.U7-Xَ'/ј%c,Xƈ!CXl{nO?ϰ14/k Ӥ5fhUBDU f@%(&~=`kϲdE|,jJ8$M_M3+a*PcBH$yg-?ca9[ @H$x1OE$OmHȻu]qtGYU.!yڐL ˛Ah{Jִ4Z}Kxnm?;+;ey  s% 4@&wdЉCvؐW.*ʸ_݀ùS`wG,vUNT@7[%BH[XK)1Fz1tuX 8K,"X=V'X갪/B-3Lϊq9 E٬}ﾲ dmUz1J=\%Sy٩OXH22}2F,84TaEa3)c=fr>rtq=gĥMb55K2"5ay''dR{/dʋȔM7ݖgDyػ w^M6MײE9\"L_Áh^AZMWspS̽ SosI/ζٙ{VϮǔ:@"_$]3 wi4n ^|rüˑ~VBPj;:˂؀(b|5LlJwƻXIHIZj;2'%"_(o Yͷ&?vw;p+iFlĈYYρx\"dPNmB0 @HKxŹE+(QW_l^z&NȦidu%cBhnX3Y#t7%0A z׫ $yܼPӯ]PiC0 0w06{E͇W)Ȃq%{.{}6=v" !+ i4s?֩ (-y6`(j J'>}9 23]]'lR I;8_cpOOs},-.9H?֙]95k{t2ST¿de.|`͜*]^Zt!3} N&l)LQ%Z\&}BE U^0x(%rMZ)BbMkLQlAtQ3dW Qam\h2!0FE@gKwf`2`Os@&@Z]\}G.$ס`w@]\㑬3"A0<3 ]{cMHK8h1Sw!Hh +c3nLr+xaS\*בWXIBv=(&sadK= AvfAUkѶO*7/2Ub7$㻒C):Q!RJy + ;s̝ ,D]#2TT<4tw%c]Zx>2.ѝE9sd/3/v\@a4Sr aDskjqVuav ͮd8A j*1Ld%`͊r{gYKj^r0b;#6Җ4H .u8F%*^4H1 L;eCX9Nâ1Y=ȅ&T5(X3n:QW zAZŧBmՆeA]aUxe,J&ᴭr$ݤ¹9,UMh0kQ ƚ2ޟb}3i]r"%KM}k#;ϱ c*(&Z/j蒼٪;"m4%)N^6>HDrB1Y'5W*p}Ӽ[DN} V"N֗a ֜.)2!չ)qGossv /1p:?D V58.0ci<1T:+KܻL3@iŽX\w,1Z-A+j%U(]biqdZ\śgk{ǝm rIIH:wm MxC5i.q&6`B{ȡ3Nf7a/ϟq(0Sب1/O憲j: BeJPwj^^)Ēߠ4ǔ1a!%UdNRiXsӌJ2S@*6%4~@2QrC9.GV m~C刂BVo}j|t2̦{,|a u*[e&hE/+ eo%'?@%,{_SNW\Fߨpy,PQFg/L;>؜F |>tSwhr7#2\c\2'm4z¶*Vj3ǒܷCrS0j{d&u=%z>m"1̖).E4Vo ' `N2zȮK~'&+2JE۞Z yHpME/_$/P8;#T]VUvy 68zdmnް؞xcA3!A)zԘ^x :.\=!DTo A]*LOV$M * ]A֋%ODZ"FQޑv y C;xJjlkNEC@n)uU׮~_@=' !eWz,[esv#Ew6t#z\Yv< M%;JDoОTzc( ?~&@>G3@0߳w@#K L'#<|=ig~gOԝdmzjwddƒ^wcֱY!߻3bP V ¼.q`¾+2}\d 'G{8Rw]{"Rf<[VyxeԐէ 4rlקmU=:}sJ%y»q!K9cY_y\ÜI;s*=)Rk_*Xn$aᄦ6_0ge3 06N^2J$.< 1(g8Tj*J.?^ɮʪq Y-x9 pf:,l=1VMmR ƭn'2' 6oe;v||N۽uod_.wO1 QҼ1 /Oe8wm[Юʂ2 ,]13U"p9s7b ,Ye&#p a"+2x$fNa clOz99M}h +'8<Qj #-wuha>f|޺a"t{O_ʗ7Wˆ1WS2 =句7X n] >|Oe rH|r/O{m\܍O̷օmE HlQ$u=P;a K[~^!tڍ$E!7>T,:ppyϵUtJh480SR:H2`Eļ3apl GN L&\}^yD%CA)t0LRnmGZtfj?._TXx=q՟ U830,IO jkvTX|^+P?bBFY4F=`-ƿMl#n몡T^,aMDEcA(4&Z Bcٰ&]LӋ9J 1|;=wu7&S|=Ӂ_ޓz9kάLgۦO6NVgޯ`C ٣UЫB!|BE.g6|(^N7$_2dNl)Ъt/̃?GkgA IlWa {>$ʨcj6A?iKpGggZV>x6 ?xpe :GBŏ-|={U/k"&a@ӎMެ#9L Hu66Y}{Bjo'8Gp)|KQESdtSDJbJ0W8:KmO}K  ,w0Y rt Z% n!}DŽL C:)$mb߻1;Cac d? Hk.%oG[6[#狈em`ѣ7TB~C1 n=Tw"6 #Z+hF)PUb<\~y Crr71'wF|qnj^*=<*F`Uh!U[ZNk:T(a=G1h `)`|$onFR;a0!<+ jFiOX>9"}j8B^!˃^B5{vKMXPWO. j%jux_8]Ĝ'28*#7F8T?r˹ֵmU {"QB93pjQX-6pFRtkYՇk=OjS_ϐBEc~w[+HF`7go2Cgw%'%U9ZWL? B^5g 0vk>>gX!ժf䛢Qjt ˇrLdO?KRl7$B|#"./ 𲩇>QξȒ8)lq%L7, 3PX' f!nRpz= 7,=@2t~<.r SMzWX}#r^E,Da'X%3hrM[poR9^NܪM^dz*TjHͬ {?`+:fMbL tR+ dԱbeXbe [ܢ~ Ȭ~Ki<ґ̎b  K5cak*65oݾ{8f#\Pv*]1VkήCNŋG^}e,O6ՏNq{Ƥ9\O W zP[ED åEٶģR>ӬՍJZ4O.J(v Nr"N!G(&7ka\ÕvߖW!(T#ώ5ކ[7tÇZXTAkƖijp%б eB yTm+鹓#s!OXS8;2X:LӆD:קܨ"h5s"EbIأh%ۏC.5tgRgUH"%PU Y$ݐѨRkM =ٴc3}6ن&2(mͪO2C'_vӜM)D^D^-_,i@gY'ܭ9T\Y)) HVxs9)eispc 'زQ'6rQyAs@B>4FxXR B]r_!z38hCWHs)]us{6ms μ$~v@=xxq8jw#4fP^-]L,A=.}ʻT|ϠlC5$q]=.0՚݂QAej$},e3Ȩ)H)=_ϼ EϣJqЁ2躨 `>VڟT ˉƈV;%es>jr#T;ka 4!syt1!_>9jPI(350>X:(ItI-h '78 zu':!54֡Pe{״>Sp_dmOx{N%U}l!FH\G-|fS=OCOHr(ua210 0USAdo bE!Z6`-RgC9Z1De_09˘2CcƄol1:Ro *K34Ew1(s|;\لo+, QPb[}{ĩT&DP y2تx4xeUJ͊ ə8meW)-g Qy3~ E-D21"nA:6~,U%90dåxYtOST? cpf/mhd 5i+mJ? o`x `fdHpEȽяBoK_L<#u7އXXT5K4ȮzJ-eem |K*帩Ϲ;QWs{sUq䢬"OށT{_"VQ0117N7dXpG!?~QZJLy;#᫩N K[vNuv}̉ɺJ3X"т[SkyΑ Bm׸ZߕZ am03x6mQV[PMTxFgDMTK$@NV^ugDѓ6"7l=I+DFdպ]"[̈́{mj-cݝ_vl>Q1Q V(>2h:H&%$ujPn((w Pj ݩ$#+*Vzz#4Aˎ*So1ܢ6 de I6oĔy/k8S4FטuiOn@~xw|?eJY*%ROc.elHV7o^boW^CvD`l m6ܹFQGŤW@8ź{3˼jQI[sc 9{ *|RNM 5# _V-9uluK1 ń" 6Q Ő0E6Uj]cI} 6^bR0u 璊{aNӞ}~⣗x罍kck ~[^>7Fՙ᱄D}|ɔII{oӼY^h"*?a\_s%)D"Lp[w-ȏGu064:xg*vLx lKZ f]ilrW]}ȴsԪOVŁ;|n= ~b*%9CAj59GZRI7<޷&a9x-ˣˆkK4;?}1qosqZ?g^(4X@+CNs5 oʍ`GP\1Ui@vOQYцuB2v+'w' 5w%7~*WcF|)[ <3lEWtgy5$] 9VjFLS^ d ?nS Lw8O%5jY@ILWLt %C-i Nw2g6te=&Y0*w-խJ~mQE:Ij6Jl*[2pY){tnylP<Еڭ7.9W4p´'>/ti&PЌ;# kbҚk0|lhNxɖ4[6SC{=,C SY6yZU,N@QhR:|!:p Irl!r|/޵:p4?.kCE%u-sWOgey!1+$E&&Λ`OCdۈbId%6 # }*lu4#ƛawxrC [3gl5Vީa ('|YKyA2M{yM،⻣=d͆luMQZ"mJu,sb -DQ~J+VI`1N|+0#[}R.^.{ N?6L# ز@ˆ[R(VET=4/Cfg$jÜK&LTuOszJ(qWJk/gr.JA4T^@d'Y˽<:-^j#s>[&#Wۍbs7+m9. 62E'$%N6gC(Heb-ꯎ!*T<0[_| ~TB1:?i[Xsnr ˪DKDiEz=97QKt WЂ6es͎'`|Cz1joxtݑ'QsZC˩WINƾg%J.eV.Fb4R[I~f{ R=ȕ'_ Ij?5ßӟxZyDjr`3ijNϵǛ`BO'+w곳\ں]'sk~m`~KB9()8{J)A*k58yx|d:.Ϲ@X(Q@< DƱĞoͰ.r,z}&ߘ`~#!ac Ls=}[S51_>ZHVj{# v,Nb!w,g7BScB%ʡMJ`3zb!F7伾g, v A?E<+1k r'TC.uY?4c/iV<>r}5΍[rNoكqѬNs$0`*B^_W1#Qe;*pr,Y; ? ]h.(l>vobyhW&!\Cm}?N9q h1%6bXK7LTJsD/(h.^N1(N55:M4PJ^|GX@Y[7P|imjBf⭘,d6o%) v:PNSVC|g-D =5KH6PB| }S6 !-D\kP!*3GK fHNvupex SO^4} vL Ԁ)t, C\]:܏T2`} +Yz 8+чYx)\ 7w%!n*%d &UYa/RF*9*͜'gJ7618DDW b1@ ¢~к`8ƐV/͸ \:a<$߫55Q.L#1g4^2 zV _0?>* #R*{aHry8MH-N"'1K(e; ' qyDXI87&`mJdMO]wPv5+6qEˍ0Ĭ^z#WKj2/mO$%)o[ OEWEP2!?඄[h LS-Z9YǢއ ,4HԼ:AuU > ȸ @hζ{h8\FȤl"Hd-EsL _3c XD/څ7ElW#߂?h6gT )'C3m|Z0j{aDz:mӶ-T!gƬ•/-X]~:N.EgNzqM~iB1v3xs a"@~*HJ!P/?4bh4L+.Ak>_h=ZPб "-~Yt?8!6'vC%Tp냻IQ5C3 dJr((h \<`!E3M !}kdݕ<8Ƽ#+-V!D Š!AW…χ,=N\:0qM'%gUg[{tЭ }dx`ZYty*aHfRYS\e_Aw׸kl*fqY9oA(Ils3 !?(Vyndb'ю/1A.JPU-ch-(!"zlioͻ|y{+b GOr[DӼl#j#=.SQ-8`,*_2eFGy GngXq>dDP{ I93 >`őcr(YV֣*D)܊ܖ)Dۦ60ʹG3YDdXl8 +Yc l%+206x?$rA. V&XV)>^]M}S2N הk6gِs(HrD a Y.'ѭe2s1S=߄f?䧘rK 澑zIVSGBC+.'S PQS0 [ Do ;?jԛ?h|xP[g(#X:CO^e0t~^c4PK(0©q%V*8:0@cQCz)}I07%8(l8~F& @ Q>ߣv6VYhA)8_JW"³ୠd{*ɱ QVד`-^7?6 f8K/:K#DV5y|ƥn2n!a72Bswe)Fҍ6/5ʹ)ۉ= TJ0!EK'L ??LHwG_[ ]))?/}FZMN [4 fX2ےcJmfRAM&vY:)ʱ%rI])!LO7x_1z:k ~Rojҕ͎3R-b;_8O3>W=[߁ƾ(?8xؿ1\/C-i_I6ŠɸFhHX7&h jhu hkޔ VY/e-@r[<;jBZ%m.$T?>drע ;sgmxns?Ƽ Ҙ7ͽB!|`ke&)H?{0kXPI1g "7lVUˇ]-/rlOe] 3 W ]3# mGI/feQ<'^(;rLb?s1.9$ay~m$v`5}Y3 ݨ&Q]Q/ʢ`%ߺ )}ẗO '"AZ=k8b~R[phІ!&MWR=p{0'}0_x9 ha VpSܖ娗K|ADZKՄPV։ `YR"_UC_g'K${#ux2 dZU(,낟\g6iŷiR)ױ4}zg,h; H(n^"'6mu]$4 ԓP9B`5Fr pVAc'f\ +SUMZs8̝^ǫ:dW:{$ R^13FUq6k78]\MЈpֵI$yy%~$?36$ʹ_dьKW IDͨC}`l!pʁ)PJ1Ľfm<-~Ņ{Jp=@ة\݅+\͙C= \2 *JUw%r}j3ͮs^#VS!Ll6͉8HzH {%jQ`;g '6{u?*E27t@fŽ((UB.D"gtE!!sHrp%V ,7]d >ov"ס"AGlY BNADx$f~igqP# y/p'eՙJSYRѦI)Me^tc;e*U?2g}~ϤQl9VYG[kojƉНQ f0]!]}k*nm&Q<&JqATQ #^\ʫOU5ȀωQ9ҭe]gj枟Nggzbvo(OMt?D9&j!KZ+(3WInޜ-D#"N>q MwX,z0.;!+A o8,r q0 M_2*~Mb DDC${P?ʤl EtSǠ8jdK4*K:E%4h"#jsL%3C)#;3pyJIm8͗w2nGC0pxbAM]zylG>WwA(6HZVVSC/EW7TugfkU<:kj+1q qaTH \4`_}nMrqӡ}6´.f#H_a {D͜ft(.9|e4 P^wJ]Pۯy!bs\ߪKDݜnwtњlB`(ĵk9.q;Lvy(Lu 8g6dVܰ9AX%k0mO@4ӶWsp3m0a`20ž\_z{my5'6#%hDzMfdEqhUN3FD cTɁs꼝1!pC`BW2Dn`moI0>o8<}l4ǎiaI10FHAU]MH ;6ղ\p5UtQ :EQ$6(@;waF6'Aۦu`m %8&n/곮3eTUJF%s#=dj|+{)_>LKOg9@Ŭ.t nQ֣)>-ٴSR]qqjpVJIح1&rI;S"ػ>ߓfY8Yt3MA)>d@;ɽ/=m%LbX[fZxvQLY5&%60p\j?9wI,dԛKDElSUrm'ԔkQŋa:܌q9!Oyjh-G7%s~~h,&-/-iWw{&L/FU] ΐl)༮$4g~]Ifr³6tO _Y(KС!QM`iA?. $wj۾; ࣆ+<&ƄU[ҁ;kfbuJa U+, ړ;md@j>p僇S|h>-ONM+g_' K.pZCT%F'($r7%i_j.(9X9]-ճ.Ev{˖C^ACP\mG0~_rرK84Z=߇6 ئyv$ǚTٺHU?=r$+rsb,?Ctޅ>u:v!'<ŷ Zh4~b&KM;(j<l"BU4'ҸfEr )@.4肤~qOy؇dPU# V]ߚټhh 'jE2P]}cp>ebǵM Q(=FmoyP;"+c_;L,—:QA tتA)F./u|lWY<6)FKmhI#yآ*ߡ6[VJK>ߨUѹ'[RثJO8&!hLҾT?aGWJĐE.!Ŷĝ#JD7ϷO{Er4xKϾX4d>+nj.9S0hXThG! |B|܎3YE'htmHDjsџ2%'ώTz 0ΛcAbCiWBS_U X+ˤ;rϬ3`}djI) GԺ@;, }O ?y~\Sfy*0MOojm桷XIUs;<5INK"t1H g(`yi/}Wt/L6 * r;I 3Q~;yI|B'4_,hN;uСo'mg]ʬHCesgP->-g#6B[Sa<ܕ\hL %$!#Ů]kk1Ҝ9bHuIn$) 8F\ś8bYߋ.x7`$b$;ξğYED1)ʶGO VZ,9d!#)6aul1fiz);ʙ&(Sݬ0 Z~icY Fُi(U`bSƨ0CBO]nVbo|kϘ]IE2,M+P& z|{syZ,zU :o:cX倆GJXxYoe$ZZn!)gg:r>Xr=E0TqA K/0z"yYt!hPwi w^-y'A^û s(cB$v"WX,d&!5PQ[|C&^bozg;45R0I\]1@2{#оHjVjqTZ|=x({:Q:|N nx,c?Ja'J/eDLczq !s kp؟7a,q\KFp[Q0w%j69{~5SY }X:x7ۋ^yY΃cA#|$UCu2pM>/E?K33rsi]![@B+<wT*Mz$pMCSbN‹^(zX-(^%exv8[1vzGß , \=߲.D^R v OUJxo jh;\zS)aAi*d7vbe ̎FlmH;V&  "M՗ R;ݘR1݊Pzkwgu@v`7g>rӴg%9)61й{u|&v|$6u<'S,@8 ~œ=F.2yǤZt5SMaÊ,^mP<_N zg"] CCv 7?X蔌I$vL<͌ 63Y.(tNlN/߬rƟ%؜RyxcGY&MM!L@ヶ )”wRda[I vb8.!)$; id3B<-Z=t/QATW$MYLR8>d_,tI2(7TfqyXdkp ndÃ@_l3>F7f9y{Qa9tVD! 0%a E!|M/&4<868""2k6酞2 }=jpQ>?htۄLz|+ @ӏ\w$O :J)dv l @ϖQ:P@D*XU]`$#3tZ]|B$wFl?#P_ƒmd89Z>=pSۆq63Fp20u kG@9m 25O#|$>4ߴ&] MMKSKE{0ad{cĠx)Fm E UXn/e)̈zX_~A0$$n MEd +yc&+k!B3ٹ^/*tDA2A"fm?Ux^Rfu,%DTJc:1^WH2K1aq,~9co 5/ u,g7KW"W(;d9Zo[;k!;nU`?%aR>+t2\B%ϰ>gP  >؂4Fs=F_gryF/ +tCQ?s\=䔼2[Ā¹}O4\3N\߰ +ro=uo,g0|6ܓE0JnFG[8x8if JWtg6t_;znY!ꯢ"Pbk.b. - ?@AΟ*0' IAr @7FH#xH%Pz@-\?E{b'w3f{ ,)jTN1ěj:[EXjR ;P-5FCEoqV/{af/yԙK⌅-MS=˳~ᗥ"gm?`S#)R}4! sݢUz? ]nkmX@ÙSG63vȊY9~sxIe4jVZGҙrWbKYdRLyAq 019Eif=)vnr`/Ncl^Z<L!҇b雭xT],NYYoP-AhN/v7#U£W5@ 8K)46h(ac <\Υ\9Cl55gF'}9vK퓼vH,=yJ9AoʑЖ:]e0jd MIbjAMN'0cmɅ)sޞlG ySvt<PV_K(qq~PH0(R !FR+onV&9h[2iGos-I.MP.3gBmu YR~afX{~clE>8~YTgo-)&z OL<3fm,hۻ7acF*й^afUkdj&9 !?(MU0#Dtc0~sJҡәu:L͑d<{PƱ?zmgV $TotDMFوzL*l,]쫹Cz%nwy P{% 0ϩ j4ŭR4=c#k0]2=T^g;1*8vl ,MCc,)kJȗ#E RaW(Y-eM/-܋cU?螅UՂaV" |S57'}sPPA4>ڴPnaVgk+m5q(g>v chĽĦJJ8 Lt{ΎVbFn&j#Ķ!T&SmF/v$ _{Uϼ+buDj;4å8(*]`P2咫fѿ0_{@~y/)U7R~8uQ!l))@.CA]>fQIeΕ3!.: +(Wg+믆X5\-s撁uJ뮦׺BdTQԴሖ@^xZ2Z`FOق/MC )#T"ʝ"U t` ei`\GuG ` @6X^mv GB.p"2l4;OTP|;%̎,Hd| N4jG{8ע`t jRè2)M# O^[)ʉ;+v疮8G<3= \$OGWF\h U)W7T՝fMBU$"@0H;?\?ikڪU G`CPp=?+Xg1X%odfhظZ;WPb6- ]P 5&S]BtVkoD1֩uOs$zG q)OH yWR?A[mOG+;\xzh06-47;[RJ3rp دA;a;(X}AqޭDg 3bHK) j*J$+H/|^lkD>.Th v6-)yy85LW/%yB̓ĚDwoXt Qm?02( m Q[0$k0g`\똛 A/y L$/OZ.N6Tt.+{e V>,C4t@[~{ ߩ{)Ф0*茆m;GImȢJgN_Po`<޷P)7JZp,r~*AVpKug]fYM}l-$M0TGPNeQE$Xw a}mͯ^ x k+ˋ!Y.Vr.n)_s;Tq=CǿHpW) E:0+D#r`~x޼wVm˿ U0Ȕl)KM.7(>y O|x>ՇqԏDd5NtyK"W5%?g^ga7׈/a <ը87+WӷΞ)(_${5]jn [;9cFV a-// Snqt O7AeFr46Q. Q5.8sl0U=2őE1yPYǑ̟)xIrW$(Emeg_o᪰ p+6}հP `^6zXCGҽ*U#ټ~*;;{ꀄCNBĭ-w$U+ %d71]\$bhw\L"V7bEsR Z;_3"hYrOn_QA$|4 %;˺uf{܂$쓘jz.'A#Ӵ$Um'Xb>=GEar_\S*@wIFvL/΃MBb g㟧La;##҆h0)_(&8hFU82^ByvX&o=4(vEL}-eR+z~ؘo؅&J4* C*^Kq{޴ՏW+8Qob\7e&.Mn~4ʛ1mbh2Jl!񸮼b` bN|? .}}pu{]~EcL;(:ܰܩskͻ]"Y%7쿆_iHv6>;4֪vѕv;+@EZnVp< "Rm j * M~UDjj8>3Uh ‹u90Ϡ`83 j ݿ, alHi/SQ}JXNN[&2!i,%}'s۬#ӜŻ)k,-h΂Q (Le`z1v!|^dN2L_Z.p ^m;2A˪pAEk.2 )R,@i+@QGRJʕL@~22qβ)I̡8> Gt [+ljL8EM*U)Uu;l9+ܾGVnjRٱ='+etƍtP3 6h}&gkZ'(h'ݕm|FHčvXwˤoߌ1tw@~Gysoe|d#v9"My_]nB5E] +bz3#тoQ5b 54ΩM5@QjA 4l+;AY [C^wBޜ8';.>E]Md fs(ԏ-TXl ޟF >z#}TWe ' 8FC16чA0  5"+;A4H ZndY/7fq_h<`7~b bGp 4C X <۱>'νqHr%QS=̨s`rƝέ/#b)xp#DZҟ4ix1N%nEH$8d1cXȮb 4oq*5*h1,#r¹].:+f0&Gwǥ|QM%~MϠkyPK^+[ȃ3dU]=֐C -a06mrl#n$s\`TrNU=ũ?hw8^ hsYAoR}00Q$Sm&z)7cn^-bGS_fӺ wjZc-Xo/Qܭgw@k߄ZMyR*$y0q4N@x۶aw[k3|ˇ}h*乗1ޤ .x{2g8*u<n9s*縭frA/k.M$oQholB>~!"x7ij•uOI]wKOKgՖ3zNĄ=FH5 }+xgͩq6![:kw\0l4;'EEXJ5`̯6l2-88<28~:+Tɼ;O&5z۾e̝ F=^/趗La Ai45&&qs$-n --tVn4}pca&D䙐pxΘO=V$GS/PREm6U,j(yI4l2V?X>yKVF*J)^jY-DM+:ڔ*/?-%:Mӧ\`jsaK^5oTcs(/a_+LϹqזf=:u..f& Evx,[T)}+xV@L$wǭr\2MmYx 7N*| sCWK~k: 4hw#X}M5a݌YU|uEn:͓+'p qe3~N"ۊxU|j% 3?CH>֋cpu}hGp;hQ UH"QwN i>؞&STiJoC]%!%C/C=ͅYOXQR! neQdsz\}Strm ZLGS?>Qq@(Pmϙg3T;!UM`  dyU[R_=efܐyCXvﾎRaS~ UMXNoM3s@·x;viO1&b222}F/V>t+apo,i .2EL:e,]MQwU1olZU1ztّwjG P*ѲJx4J\8>oC?luQϠB݅ lb"xujO)7r[yı"e.g9vˎdt'j)`ƿdv!@Mߕnn#vA?&G 63'?R-ACdTyT:+O0rea"Y ͥA% HƼYmy478-cmV𽡽\*eKe sѐtί{ddy(D/2 6R"̇!sCrJUMai|'穯H ڦFjVOwfb/A_m+Op!BNp:̓tq vy]' *+y.ɑt)6 k_3# 6jڣi/aRR;q>b`&~TreqNR4i;N \hYP\dģuM 5,W"EC Aoki+v'X;t7gkO!V5pևdZaDk AY8.lp( ㈡rH- Ⓡ\gFzoBpQ :ɤ  ymJZB(}F|zm<&Zgݏ83M#.D4/;۷1ʄ}-.T<;wI n,qp8 -_ow~MY X#DhD_3 f0EK5!O#L7hĔhbr^u!͏q2hPuIn50fl K6[kS)~bMh3^x$a QdFY^mOX1w&w@-XTjNiN`k),u:ycYқ=?ꮔ4+KC sؽRvg@}iq l{m'fn#[ [:s |mz 5nP" }z?HrYa# ɭ`i&55LÕWɳQT[A QFOlx|LG#3*C"HRqI7Y\[Q,[$yEsN'5s=;7wXEl-7MbਙѤ'g])uZ" xOfK"`;❴& A}n:ˊ!DōW{#jqnǢ9 `5du0{P'am1/ĺٙqЂBC/;k_g(yD,``i-{>& rP͉D™PQ?\Ἡ+TA0뷮 XbjWe]MA \܍ 5̷V]qD%r''OwI9X_-͜F "S-: 'Sf :ySM!5ZBQO4i,/yS-p{Ǣs7> Ƹ>ZcH1b wdQ{ߤ.ԅӷLj(OeTCy}`?~75'-Y.jZ:dO J &DyI!YZci1'χc`i] :qZb\WU\˒* p }HCT(SӠA9UPe%rc߇Sl٭((eܖX31 +bک"?d#XŅiI̷jM%`2 fĭHЊovm{uqAU͎30k!>*`>g2q/-NJxP=2,]8lާ+%oFXۃ]K)@rkM2OS Kԧc |nD:/\)Aۛ97,4dNA .yVW\EF.ƁS[z@ -V,>rag-072^ְ^KTFOeM.2BQ} XD\"}SǿA9Q%?h)ۢVpJEު&; Jv$J U.͔M=W: ic`TZD 5X8˩ ^?Uኑy \j˨ jf@;zpxx O?!اґtnu TWX_H\+@x|rɋ1$mzXN27 ;(ƉGͰ}|VET/ \yxd&>1b:k )n`N>pyǨ04Xb01yؕ㒇DAL_7oGyvj gt :Od}4z1]`)&Q2lރFv: :Y-xz:% V\7G2hڮiy }'r,jdkD7""p9VHzxHB9 V-[Ok7=]hWq9Kɘcpz)⛕ٹ;[0|I7"slҬVM.Oe㍇uL|d 6_2mr\mowZkX8H c[Z\.Dx[34/E/rwmH:*Ģ + D'͹XA>5(Qz8dNDbmL_BAZD^O-  vx$7hW3@6BLjK8߭c@ʴNp\T@ӏ)?g6TGG~)9xS oAEQӴi;B״n4@r|"B,R zO˪k-l[Z{;;Ry;qWpB>&>???2kϴMdNp|}Iw4@*HD n4>"G?U d5[,I{Iuy,R`?*MPkW 9Н9`)ThLjFjZ[?aj0ෝUz $/{e\}Se ]ZVһ 0#$Oʁ+!đj,;ʑH~:u4349~@lGE>fNIRl}džR܋pHsJ9&fB#L9u{ab' GnzԤtoiN9yľ3/uNk7QpboQlس #JF~Fi 7'&O^6Lv*G/\aH1CG,&ѣ]9^YyAP50yEr2' \FkNV @mrP9*g}v!}H-=- QC8atOG02]sw 8#y8a+SIz6*i XH$[z]_6ȓ9oV@C­g|q_Г>D1V 8 mfq}E}wTҨDwv)u5Z% [W\NkەU^סX;V9zJsR$aV枪(KWN~}7ryW( ykY=ٰCżLh֢+Y4HG VqxP/ghK{_VuWb(o܏߿i?^;ĩ񌩄15EY7r^D`䙸 x.X)ƵhH|w= ycB#+F0q(MzCT&.GeT/g{J 0꾥B.My@mApԿ_ (|)<κ#-mRg C҈zqV8xtSS}6eSRR32:9_+b-v>ŦumQ<ɜ8.% &i|؈i ;wlG?c͏shnEG>`Ƿ8q؂t9G~ƓC r$tYK Ƞ,C:-$Ӑgd9I% ;G7Q_}5(09(F5CK@-ʤ[2ZuلOu1a;a9!b(a&i![Ώ bftNk.2b&qA'M{MNslvv ձI/;鬅 b'+C I=+ࣨOPǕhLkzƀ/~sMx"]5͏ [vIvap"V@˯A^58^bp٤O˙ e }Zh5Bs 쌿/!IH, mT"7cz46ijl֔ZW MilMF=$i,--d>n9 |ŃZK3p]Ɔ/NvoVw[E6@H`zNmGHsէc)@RΧf%+ P~:1qLa!VՈHGzoIc=mċ1Ppk -'}WݱB aRzV^L='oWa{VX6ZلT䵜QҕB@!B>!gԦdD,s?AxjWY1G$/Q`E`n*#DJo ΘgUjɢ26oȤ!a2S*c +3Iăj1M2.vi,b|%Ds~bEĎ P mqA[=fG&RWZ¾2тuS -rHЯEN.5DxMJK RNPtׯлWȟx*3= g 9Gw~&(&ҲpT@33oDJjeY{Ug㷃-f#RO 1C> K錵[w0π.K7I%^7n2V)].DvQ AV~Y6J.:H  m^e28\JAk~`Vc 9BK᧥wh "n&8 *2f$lsCúR1X $ ۾^o}feh(!"0_D.فjlڥ d͜.pVcQe5.7U7!O돔?RL-Y&l׭96{!QxEēRMgcBr)Ր §ef r5PMgi s;̟򴃀v7gД>$F3X`Ę"ٞ?M>Zܠ7i:BЫ<N0Y4li*rȏ| HPS@M ~2s9q"q &-g$0oa]۫`}LT|UՔ!.mGȹP'/%IfVl.8 {/6EYp͔5W;F(uUsYi!P 7e*^QϹWZW'*rJ:s$-2jh+kq%D{CM G 9ytʰ?hԴ)mce,i.Γ5>~)1ݿ3EvqgH\)k|9c"c[v^n^UQ,B(fUJ̲H.zGohvU!)h>By{?E*Kȳ>tr&GV _9o8#wqQB p{91a@!b~z#6Vo_̫ ?sQLYU[\vXdeH1Z\ym=T fTTkUahyJȠASaLDSƋs+/ 5Yyh,|unD%bXz?ڄX<8?9Ǜ( 5R@#bƍyn,m?v뤳u͖Dkk[zjZu1Tn<; ]=7!< %P!YB9>,ҍbNB_d|%8o*mLhD~\[c*sCkpλMW? ,7 s:~.zYHm"33R?\#ڴ~{(ي=F|M7@-r>u{TAkw GJع:QHܫ3 mVLf:+Bx݄7;k ,DrHacyGsDcd]Sh5So&sPr'/:"h1r'yoֺh.] w-}zų|vslMjZd 6-?8 e vCb8WNˑbtcpD򦎓'Tgt&ؚ+ E؝>pOHR'or XP$I`nE1U  D05'#[SVL~ jJFiub,Nw7h8RlfmN Yubjit_wY X1ֽY ڪc$!jRxd<0"FIzgd Vl(W+N *BbiK?\()ARjjxu`+?h_<TYε˩1m4'.41 JeKC,X]i{9R4?#x3a$}|%= *Nheiuمl>]vI8u@τe!wRY\ ѩ5I^. E:n,@bQBfri4 UAļr=SLI_'nXnig-'R6ͪ |Z¼"'>f'NB !!.+(}% + a'ɿɚn E֚Oi5T;&KmZc' pݎ ?S$i2P~OP9uȢl6Cq~$:1ݒ]Ȇb(tY,~ePxuic&`ͪy-'#AӗJLFQ?Ͱw@ ~nBɑ!318zPY Q;'+f5k5x Fykh7N?c􃑈ssĆ g2?i0k ^{%`=>SǤ] 6:2;V+~xX z8H 96sWPtAi|sh\[M=4Pk c:DAa 0Hؐx|u3OOGU>q&d:1qg L}]:(Kb)㬟,;~O*f`&Cd"e}A6zd}ȧ?@yvF -FIv򧦴PbQ*W}~5]^-̢sYF,0%~[\?mK&Ta[gxiC/㲄P9 Vx <å j" hHP㤺?$,8;J9z-TLWIc\0G glg3V !TJĆl^kQW{f:B;ZP̋3y!uh`>`s " VyT2B5q(b ʣc뽮oQ}uQN̉yP*M^a^X}#W.K$)sr$g#Ԗ\)@eʂQhjvd Dhbüi3]ڡXji;=/ YUqWrƒSf 7o5P+c.2op~R:]! T!$ ŠtdPz(8*|sNb9~.H"ARzzGʼE8F+Da&!l4;^A$uzoz9Y1G"wWҏ,Z؝kԬ8| r;߲WgM<*`ynI J#yUeLoӑFVqp+W\p[cj%*Jۊ͜2]+8Y~ROfg l, jˁQjh8T'cXof>r2 IJSdP{ޣ2AGC6]2%.qAa卺j&狋!jHRZCv XNSep#.B.xE۵.9I:އWOwnm&mD9XH/$iDs-2E Di$Me ||)~HKR C-w5fwg IQVo&8\2.#oc0s.B䘩 ͨD8DO'C}>m~Nҫ+ ?Cϱ c Z`;캶wh㝲S4? ȷ'?)'Dd_y6u "_jƞ'6f`{6Kotgͩ]z:h9qBCS zR4 YM]d ?T7ϭ/6K6": ,z;Zmp8 0qt?BțvBhO~ Qe1m)8Ra3o~WqUnG`BEFEqݺܚP_Q>PBUVIi$u'qE1kL3I꽇\-qtc)Ln M{eo59;;7 :٨%( cF|ȼd4"h&:l9}yk0瀷v x2]=֦ES 7gBل5R9eNbah0U˽C/"x{ݟPC*-3p? eKtLoEy(kJix|q>aB=EkbAEqdSw>B^ GԌ#1KiW4 6-_-r8RI G(?gi&`fYI=jk~1q,GJQu jZn#ن$`.JG]$Oal&`]X|N`+,NIܨ"8ኯSoFFHL2DA@ ݥx0xAU᥿)5w݈B=m7וB<R?u~_uESX% -pb`ԌZ͙(J$|խhG ^8 $LԐxY`E{ZR0>& `n]a<u2 s} :hNll(i~-o0Ҁ+m1Re^WZ6%B(fo__E3&6ͲvCu"VW؞z{sL6xt8bo`lߍl5l<(_o"PP ze˻U̕h;q۝N ͦ)Hjk1Hwˎ"T:Lr"_Yv_]{l3Ԧ ;jI\DL 1‹2-Z i |ˇmN{ɟ,ʪԨWuC9$n_$Z0`L uʚdi(Ayb dY_4F#΃=S`#P@'ERs_ %_(>lt{ilak|b.|(doFʞks.[OJFWOᕔЅ跠 O4\oZT H(C/k/Eۆ]Zwgp/ эh Ж +BI`$x$<~(_DZތ-Rec`û RɝT9Q/ώP@t7cfq|s2+P3|ݩb[H\1҄MЏFgqʃt|J1?OGck *ENۅ^9G=ց]np8(8'j']p{ l# PS&:Pp0h9TJ~?1efb85u"`Zڽ"~Ĉߧ:M- Usv'1Q }@sjWS56͝tjx8qL uk1oKݏM 2F?9TS\Pb (Ӻ(6D|i K*VX>v, %ԥIw/j{Ϳ)*|>-doaq7]lQΌrq`vdv˶-k(BWѽ{uMmVի}`tzh5c4ƙzPmsX_o0?Xc+HY39rz+%lziV}B L޿9G |Pl[^ =CɛI໤0" {e&xeo,#ݕsuIǼj8-H:Z6E~O4~eo猗NkA"1U{[StYy? h.+mTA2Sg+ƛeWA=8M\ƓKji\̕vf-Ab!OsLH:Y3lc9C,T[[[oPaU|dfH VfRo: Uݪ4ҏ+u##V9Erӈj2Z%r<}9`l6Bj{}(:;6MDxUw1 X%huÀB>(cNf횙"/@MH`(u[х,GtN@:/HglQp>c&fyodf=3m3( zaG̎" x[fqFKtSci) tQ 4ܙ"t~ /XpEp?J:;[+GUO~&Y SQI~o_Lh Җޤdd=v#+Tdቓ Q9vtEmaž`u]hg=];#L%y-Dl5k?PDW ڴ`{O{UO>SKDN TzQ#Hn:AKtlݟۭs+0O8cGQ.^^6Z\;<\,rBaeEZ 2yj: 2=6ai5u-$D8I=[Վ2Tmn:3 Bȇ'٦lZP#~Iƒ#+dl` -W?`7TC?/sj۾'ZA<V"ϐxu-CYuAIZMtEd_+ŭ1u`c5&:Gϫ2|D8EI}D 4y2@Քhjv\~d`zޘ8ӌz)EүIbF5)O6%tTRvRG<p*x_M@u+d<ְN\H+މ!4I~H v~1apvf#-0vD Lnh8 t2ao1, ܛ4XQ[my4sFkV;EwzU;p] I61C]mjѫ`4+G0?<ƝҖ%1bн]~/*`AO|`;kn:66p+xt^=+Yզh0!.wDw L50[ KCQT6!uV5g]VFO>'jUA8ק7ծ<41ca N#yeXe񵱀l; I6>~uGJ)}/%TH_E.sf1)yGri- ቕ2 rae#62–Y!kp7 B6vCESQT?wD{ɴ-2H\2],kUy3m+e3 %W+-uy v&MDC⛊N#*\|X`إcfZ ^})I2q$rYOMۯzr`pyK)~$|@++j QD wrcVц<m JVy1jMOe{9  ϊ!0PVV/eK.6x0ß10[Tpm2RW&՚Zjhy Z}lfIl _FmaA,;AEzI}@ @W1Nr Z#<>֪@\mM 4W+r}X>ZFǧv'Hn.:~k}H>"7a$苩Q 9~ĕ0A&*\hi|HpI6C_&3aN@Զ;յ lNDNKe1(>^q =K&@9#{pZsv:"-2H^E2D`ՊxwCxQ00f5;oqnPܠcs*e9EK8M3O+srn.LAMۜ]`B]/%s_aT^Q{sc,DFUA=x&aҳ^p %޲E5H:.O`MPCS<-l ~n۶Ixl 6j @X[KָZO2CC4RB3ݓd IwGjUo42RlѪ밌F (^O*C >*_wXVcl)0lO( { KeىyL`Nb͂ꜞDܤ[H1 -e m$i@& Ɛ w;>:]]|2`^q$ڶ]|AUfntMQ3i`g(%uyAYmi{4tO$J&솟iuL f<(KQϿ+b^,|a<`12;ğQ!%hmk7^'#MqP"+["H5Yp}647u,sT\j(B; UVk/Ỉ<8+@bĄ5!k2i3 XW[5Q~!٘4&<@Z4`b9 ޟ)D` g;o+)K;0A)RWO:Q@6:6̅{E~q!  Y;Aj!ƖIl{(=:LxZBF?.ZЪr1K0VK 6jgUZqK@& RKKߦSj"czv{zAIWGkK2JDꮰL[nhAz_Y3=4|=$`pf~=|ܜ{F$=k]=DX=p#+>xHϚOM'Gl2g[r6b}Y,򼓯D4~YB3E ,Qx BJ ;|2/@z)7‰<&_Yӕ1 2O&OxD~Z%w0T_6?SL8eF)fjqBJGfd_Qum,t?Pl5oe@;>T=Uu0W3 ](\8Ľp3Ly9(άdBQpvleJ#]#1tXPjM4n&@C8l@$k#@ ]&&'>FB\TF&< ɛMX8xi4DuL0d|3V~cI' Ta ݣU=1ZMHܽfM5L%^Tjrd&C@ڋvWܞKW±)>3][ I҅f,  mcg@)  9?+֤,Z҄Kt2jLcy% nOf);!?i@VlBMWʡub;wbR'_wɕM%J3 6߮ħq]xZ?NSr5ܱ ˉ~@j w1pjm%Ft._5ߟ Iǀ n y$l ӊb іyhXY ]KH[ZT#4=& ?&g3AuEjo[#|aod0НJTqCw[OUDݖZv\giH?;#td\$ܯnq]6O Ʉ,ִ^$ vGR%im{tI7 <ߩujjQp*9\9H:~lPQݭd }H`z|!&paPٺ ڢ1 aSMD*\:̣jSM漻% HN uC=KAƆ[+teLHaVpd_el^L x>=}zw[N/j?9*"_p2*kyKALPsQde" 䯧ql\wMP4i{]݊sGj@=c=KwBŔܣܠ]8{MpS&L?W κ>=nyB`fu5w;M@._ǝEsI7Kj#Ld_> 1zB[#N ʫd\]gbS^۪uŒfRi':ASbnkff0Jx&%M(a%3kiwx W q2kpkHC1%OaE96h QbA]ÔO9w7ՠhp2lt*ŞmF-@`h?j4<G!s Sɬ /2.ql"ͨ9W|Fȯܝd:MW]eQ}U[ڗ]w|{%D[G*@m4drׄz7ϼd.Gj$fr z-o1d)뼿aUĜgDʟB{}:6釜ˡs۩}{K]RQZD. % p" px\"H9{\/RĘ@Hdyy'vbٕj:|L~&u=BS^]UySNRCa9[2V㞠fbCؖ^;oۆ:!˺X'$34 ;R),_APULY?ˆOjʿc /K * Y[MrYy[ [X|O"0o>%R[,Ł7n\~,5 (LIzI=S 奍!$GCxg 'Y|!jt֊4ڿ5S{ue lɦ #\qw1J}`%k^˹q%%Wby" 6 H~rʩ !l"@1WpMc]EUd = p@:TKA4j^D/Æ r k /o|mݪ &xJY4s8iA~ Z|*Q ۅ3h`O)sɮr-|n3N̄;mYZq!5IUO.BXde &r߇MTM~4ߗ1b语w|paP7{3< MUi1{GpX:Pd1)mg9'/}4:gɗ~WTIQ`KH2 r ږ|LBJ[ݒ{p8$3ԍtFxdBj'94e])b 퇑K~nx20؜P1,k?dVTCBvPJxڏp=~`̴j*KaQ#nESMIG>Wm#uF@8]3hP$ZaDPn>}p\N6D!h:,kΌCH-/6+qs4Mڨ5W:`\X'M{h,يj2~kUrDPHNOF'E Hvב~!OKg8WmdӷV -|uuFW*. Ƙ Beh^r$ z7BؗAE/jgU%f">#Ș ghN CVb'6#n2ڪyVuz7"b +uЁT,}Y]ZzYw)GqMBQr 5Z.2AzHα*Y^;;P~!Pc}rɋ3BƤ1yP|ϑE1ұimM_3ĺZj t"CXv-^KJ#rux4Y_I5C#.7`Կ0m%?hf='M;2*xG~wEsߢ8PA E*oiH2[Ni9VlhmS whm'i 4*t+{ik3}CF .C44hۏWG52;D#tv2Vlپԡ( x۴뱜:uh*Jc.=&zYm(FDMs dsﰇE;[=ʀfn& ʋ;|L0=nG<ͭ1Τ?267kWRA'hX+$OB]8;@JaqwbՀg`v>kԒQ8%1ۚ%:u0@샓xc jzT)Ƽi4}mS`Z2$rH 0f{9Olݳ ruVUQ@C*bP &$D#0j,J3,js-q !)yQ7@P3KS9;$OHJE?DZ 2.I3vd!.µ/Y8;݆9 Ϳfp{EJmcW j'aEO^Q֨^T0G)Dž>8Lh ?(}оGҊjCxdwX'v UJ[W!imXx=ޜ يkW!QX"ծc!kCÏjӄuңHɈN4s- 3zH}W=p}7#ܒofBd餤Hk5֗,CpۇwjZCEhB|'/-|켸Fu*}dH "T(a%Ağgƭ;ng>BRVP,#VpDeO_QEa5:Duyp\9fVDHRqOZ/nOqw,oX#/$:5,4JxS= :TA9h@21M zaD]cr0g9 K9_o!vjq'iRXVPXݧ ~f,34=&0jݧzO`.4 .13Oj?4ЇKXK [C%x3nJŠ,hT(cjmg$j2OT/;(h?2 x@E71'vY. Jp?f9E~+O?X/h4Ac Ait˿F\U&̠\٢ BU:`8B`tj>LqЍG n·*0jRhp7 +*oyЗ]_4@?Iq,&w`t'뻅 mw߮fS3m(71(ÒmC'x1nlx4hNN ğEP11S& F(G?)Sfbk_U*Hpv 8㧁~DJ_ߴ! }."a_+Y!lr"-W.p9$_IGr HPҼ4jtz) -2U]#?h[՗ ڄ¨Oy$T]83ū1*m;E/y/?YlUcaBX)]=k!OriQ:u$3 *F]?]|F_H0Ᏼ4e4ʆqĄiYV2 זx{7\uYd˄ Bw0a5u`n,$Lٿ{t m,{ S,S]҅a#qEx-oG(5{9a}sU?\{ ̣N8%6{fCj[i2E4N?@EFmjwL`?ڀFZ#7mF2xɇl4'z[$jsEHC!WwIIݺ'XE&*YuHNxl쵂[ cIlIr;I Lz:Ne35_*fY{ZRU:־#WsCRGPSV z{[;1럭uH<|Z4vp89HsqI噻zUr73&T^o#,C/xOq'3/&a׿h>8!\{(@"' B lY ｹHdN]DE>cen *ދ0"֏^`GN=z.wtM8Ȱ˲G1L3VqrH/loE$C"PڱCviَCgo/d ĮB9OȶǴҕw;8b}l]RkAFJkJ)BŪ9AA2ʎiTu뼏"傠VdLe|\ǜ l=hU3*38U`FD5iG&hmRr@>3?F|T+)+2gCq!74ɒ "fDS@1(|,u=݉qnc(k=јXm/8[SmZ9~wǴʓ S*tsݕ}g"d`>8 hau(3l1(gLg]h/dbps Z EeXW8I K;J!+?NsHd81#ͼMࡶ E!J"nXK%H6zOvQ5Ns͏.־K+^']Rp2RjrWMf(jb7C$C&bൂS{ ΎV+@Nk 9N햱JR."w\MS#Ȍ1E}1O4:&!gm^K O }׿гrPt"o7g2ČEY>h 2?q? _M2<,|~cY6MWQIVw#\ES8z#`~+ (~i"%F RF CblYꥪIꐼ6R "谄%Eql ٷPHjBhTX Ax!OOe:ǪT.^>8.ozJЯe~ovnߑ@fΧ yR\^!˻'),u)Ǝ^:z8.~R/H~Y10W;3fc)?\P9x'vWω1VI6V+Y{08JoPJDT.[}̈́1+x|_*t!;^#i"\ȜDHsUvEP!bmE?s] c%p+mᐓ;2A=CRˀʇ{`tiD7BG4AI|ٹ$I!iK^]8e޷(GFB7zm ΰ];K:%ű}{vބCM7 ˄%uxkjL܋l؊>VȞ-畢y\V.*V;OvBj`(QQ-`N۬X]]Yr!ޟzifo交~=j` @S^8>Y\x@}@zj%YVP%VQuxcZ۔̱hE~c8VANR|ߔ61 FAxa"(W&m XA/3T__'mh#zUB&kS$|bP. I/@b.hؕ7PZ4"ZLufŠe,'I,]>SO $YH![%eZĤCj70Q$I6|`nBYs.-(:տtFZ ̏8Ռ+ o^+K$,5Thһ潷,pZh^@d=e,3C87A11ƢU5V')bwMъas;Dɺ mzeF$_Sb+ޗg=]8C#g$Jߗ <1"q4{s ||tQNʖÇQV2@ח9,6WC+z*0!c;̂fbKmoz5g;|PKPl3؀NTەTBy}UlīH$H.wn  短 #pĄJٿ~j* >V'ю`ZՃ(82h\G-, ݔe > ਦ5Ӑ"6Ҙf%X2oF>4Qg(c"[)/+YT3>%F&8uow&?V,qO *19Aٻ7mz(T8!L'o\O nQq3qͣ*|pZY=4f*8kwOj=cPl[߮FCi^7J2ԲLUK6}ƒ\ʚ]a,x:ָcn-3OI֮ BX5ʉ.hv8Y1$- b9bdyS䢆,7>}~S6i_lU[VCi뵓':l9Lq +Yߐk]-n m!]:{=oO 3 g̯*z [y3zk!S =x"LnBG/KcC,Ű L:N[S_9OmBd?S{%rߗ>OGw2#޷2Xvv(}'(?~l>~~ʷ#Ob}Y^t?~'gLt9bV4HvS}6%/D IoTJw̲+Ä_T5#~wĮ'+H2IhŒZ6A 9(k ƙ K} $=ke7ykoQe>:Fgƒrj_^vde}`w"+#wL#UYb pԠ䗷>1ӕvs1 xo{mRk T?uY=@&xQPZ49a-pka؃"k$7?v8\G/x89cs7^`Ejfn1O#A]_u"@AmU<9Od3LsfwKl#n##rD#S/4ԽzbkÑMϣ$E3Ə"Y%M. e?aOw i\5JN5b &tB -=8:$~|hF‚J*yl3c{[qs̫wQMɑܮQ%}(0Fi"E7# T7h]CʠzLhNm 1O@2^},S)S]ZfDi|M5i u 3v HS 3,L'JI^ݻ[aAFK!቗j;xn]#+{`+;ԼCY!Fх*-:pv҂Q1%nF+~5%Hs@7&xiQU-6!UC2(I^ƧGY$|0zрv%9vW%pk* {H6Z$тπy?V; QE=gOGnFv7'\v%kBsbA?Y𦏭(hΨOqr{3,u>%E-lި>!z:%-.Ng ZZjEW)Ɠ%^1R5Q^ _rx,ձLY4zzW pf]};hغUGtM ]xsôWa;Z9.El ssgse:ѷPT|21% je,`8vnIG> È}>6M@̏aâw93_gX&T!e;wy&u IdQ1e[bĮk=ZU1ЪP$DNڲ02CqCG̀Yu t-%˲B=inlao9{esxoP2 Q77S4NԓK8Uq#%p-܌J]'EiPйq\zyZ5Rm.l k?܁&!8`fǿ]5)6 {! Tf"ʼn2_!eZO\Ch"v&qy+X*mTBRޭv; CQls]HVhp޹¢0Vl(\>c`6ɉ*gL[n.rq LIȫ |L=BpU02<7I׋Vo66h 3o6|WV*$V~$RWXILSDs#(bFs ͚wmal0, #܇v5>n1ӗbwS 4J>ڗ-M($+0|:)]vٹqN#򊹃s-:*KM;Njwb1&GG)m/ \Ar8`zˎv-q]NKZHIf?<yI>f9&ZV#\fO+!R!!6@1` xՃբRFm&.)YLph075a6cSw޻ģͦ /]jiJPCj tʌ-D#<[LW~Ja˦V0Q3Ea2畚5HDxh*Z%[\ ޥ[&yFײrscEΧFNo$MBKVO"t9",,.p$~!Ƚjl}5)ߪ3OBygMT>B@r܎ZWը,5%_eQX[N ȆDY\Oq&y&F{nJO. _>;[Exj(fs x:LJ^g oߘ}'tj9QJ &|JEx˕k,{#EX{`.9g> H!@/I!=hοK#I<g{D_eMwak Tq^2HJ hQK` pMWS uSU`8)DWI̧9~72M'&t/ ="i]BԿ]Tぉƺ燇0Ak&My倬8CCU( 0!@[7D/jCQRj%_9TG1ɦ{)-By…h*DGͤCA;#<[Яٽ>R0:DHܲ2͋t?USTZ=Գ'ִAMwϒ "=r1*Q(rI>{oO&M/#pG(MT :gk*|63NO㬶,VrNKbG~ œ UCbX1ԖgO0mBTOqà* VW }x;0zk{ O"20ݪ7:`$;Ϫ.6' p ã"GM=zU+ Kibr7 Ù[j KKS`fINnUvlYm1uшI;%l7pauS7  H_swPaqC ݷ-v'3C`uI]fɬ 3Q1=@?ZHË\J#HoQ/Yc9Zs!L3Db|h,iHܢQ7:XDmq:LDZ8Wu ccdwm pXHeDls9}Ul8+2p662KtaiХ%Q,r' 3jiƆ Y|hߐhP-DJ؅ b5j\w.t2_- +[A;DsX 2GI *ōRJ_i\ yێ?|/UQfK(~?~`Kfbj%ogڒ*&!D!k2Q^@3¾}՚mU jW(f|UH1pkdJF`<&q)!3MkCW:4.#-4My#czFxT7A暼@<>LeL|/ t=7*&J@ -0|'^8iJXLqy/M~GTK v|]:{@% h&'fs&B'p,H WR'۬ɝBCۆq({0G#CZ]xMeHK91TvIgQUWjh`mBƛO_'*Ñ:Et$`cii5hw_ Sr*0w_;3v+{`osD?T&|| l-KQbReSŀJ!ޅEnkd"aB2T(;GM̀'$Pxu/qr|0XW^M!摮})t\_Mt\yxF^=GH$As}JǼu轹]`:ˎ^ y-ANIuH>Ze/䱫j:)YE98rB $3@ 2k%zA%[+!]Ds7mr*EUvlFp[X|=U}np&?TM > ?大Ss;W}j0F`Oh6RӒڨ/$BKK07aCH6vOv0\kg'&q0 dv4/-nǙ؅ t{H]pq/]*ه|1=wҦyliGwph "0^zGnVEMn@A =>n)SYw)S?[ *ҖE!D#|QDU!8ܛr&ho?PǐB^LsFblf!6;p٥v`_߁)ג|땽O=Q8_"Ϲ[(X?v-`~~,*Yu(ʵ3& B?#꨿?Z7E>KMrY@LGdW1w՜"Q3 t@ 1W+p Y8=φ **ahwq2)nJʜShG4y¥z}$W:teDDA{1Vӑk-@}fD$Jkeӫ",S1/S'rs:2* z~n:̗!f`'xZ(=)i(6KI 2OT+9\i mg"탸]"i 5IjlDk ;6dpGTDEYuYxO1}9';qW^̊x:Yr ,ZZ$|k\!<4!}p IũFt:vS,?=vȑCS4 p߆@S@8-ggɟܔ2JW0+}L@g+@ ,NeshM0ܭ&=urga+)\;5:}Tm$ @c2x[*A:9 c .!0LvN뷠D*¾_ 9:_+J{k.=ub09`92IYN˞7 WE0w)-f- qIjnϒ8:Njvb6ttM<.fܝ* ƾmEtƩ)4,+&& `ӹdveRX#%mKY\W5?QEÄZhK=U~B|i[&+Gӑ% ϸG0,S^,u9X KutafzWͿj=GcCANm罉̙0\P.Ͳ'}睑4`ns{&p[3ʻ//翀e /шr=;/'<R{ѭ{-ͺyOƆp掳NسPT1,ѕ>lu=jE y>HiLsګ0 yc~4a)';_dTuOKZeXXMժ??١رZhf=86N]F3|t򞵮F(ڟt\^Nvm>幅@a-iŲ5fZWp~tO;$V_PE&&R}-T&+ %G7TAB3N;I^o8RaǔjdqĽ(`:9VԨT$} Q!o-|ҿ!pTCl1پ DYaZL03s-gɑ tʱc teՄ B6QލkTG΃z Gry Z[8,ayGmMqxࢧb^Fό -.?<>y"2)&@;q灩'V$w U75&VZ}4(jgTR;a0fnPd =^h]l ڳn›Ԅ*&zdGZ|dY5 3RLlxMn"d!ak3vCC?;+/Ӂ ,!v#K0K8';:Muɰ(?5yS̏Ƈ([ -)Hz'Ó3 {M!U=$rb "z[ ҺB{$ wa#Rq:B'z1ި.dq| %ήt"`YkS{wT B\3=ajf&g!:j|i+ۄ ʴc-,Ye7?$Z<y8r|I;䟏DV1vn[t) ?z݇>_l%̿=Zw[h kۗF3%e(4rn/;vd~ߒ͞1zGU] !0~R;i ߕ{_(g/Mtf_!Fh!ܲ/liF]Ql۵; 5c&]z*)\ vWt;DP\akW/=a`h!Ოƛ/TJFrўCj4]MpR @{і M}*:ak7=U/$72;~I s4IS'ٴ ̀ɀuQ4g8X[9 < ^SU:k>L҃kjR;4z$_Wz[ָ *XBO#W`0 u`QJ)/a2(?޴15was$trS]z!o~ͨqz=KRDZƔ f[ev Me*?hL{V 1;%N`5 3!Ndv #T2raZH2'l%."d3ތu~5t?@Q&UeXaF_fa[][apc ә_2n60ѢTaM2g9%gbH=ZIV:sw Tݰq`rX g jLw!?qm',V"5J .vB|+p^JFs3nbwIpFn(kCr%$;PkKvnt'-Fn< ! dޙAmLۣL r55;'OD(|\,pMt9Pe㉘-{, #%u 6XM*zjLA,B* >0xw?NǐbɌ 0p}Xƹ* ?sٖ\̣h.M졈ݰQ(0gg26?hWzF#To)eIt}a? ]N׼d -?{V'-fʟMK_O;)k &mTi@[Ղ@Z!$Cf͌XI r5rko1i>awJ6׷` ]@!ܸGoEp`0ͷM DNxC0{6^:f+st$)mr9URH6ɐ!S+|+rR0ey&DzGל:D ]d/i:{^>Vg xu\҅#9&\dKHgf|6LBЍAB/ss 2q?z=u o߀[5Yؑ]#a+hJvH`Gp9ȏ!(\[SFK'?d= u0OWbibU$QO@cyw9AQt'0j wuKˑM @H.3]K.r\ qu=RUēkA ϡx $-n@;sW,Jq|pѓ$Fg,5+]u6wPb3n][rܫy<5ߤ.o6wT-ou̪A-+'QFs+ce{jI698Ysץ[مEw}uy*j郭8T54*Q# ߨ_[#'ؘ]C^W(!WwJ^OUm15@0혪((ڍv!=#KЮI(w)I5&Xn=@;Ue4ыUDo|$84 g^iMP^+Ɩ8Ҟc;R=|6V3}LC1Z)_R"x^=K:!ܧwkTu%Pg'O!^ƅ~uY Υ&5 xD> rS rB!+͎XBҊTU^(k#"?N(J^OJ% Ͻ|>I dkTm?l=3Y&N<pO7FY憞論zN> kϬtǦYkYT{"|WQ/itg^N \ElޑUYp:f6> NeX$;ZX1C=%SQ`(!wl6+*5X+1*)c5)ARiF0g)x"Y~bk;-.qr5'{g ?¶CDoM,f˓ ZH8З |)1.5 Mu'=Fl<9uq;E#6z./W1%s^Fex$Wu|zP8؝M~i{*f׽"Su1 @{ƅ 0ZlǸ͝Uܭ&?k,AjSrPb8K\lp#Ntv{_Hw!Jѓr *D%,eX]#3X1xXLM5 L|2 13%V+ >j꼖;kDqC …_A:-XMqƄO &b&:*7l7Ώyq>V@pF ~v'I6rS"0B/<=BFR|s23T6u۹'ȯ ÓJX߲[/>p4YZsI:呦 -`tUybK_~~#£*Ӵ"3Bkt<˹sj(;e g>E[4Ca[^blj~xk^R`wF:ŗB 99o"%VU!CվSþ',89Pl|S,6=,3:\Gx&bК*2$ޏS?g^H (:q0bKIoxcϾ1Ugy0 cd!lh:ύ 'x]8ô&ٹx6d"'C0S,\%"Y|}K O [_/7ϖ;.5aRU5씙1!mƲX„5ć:Bȥ!l`[[k-G1p𕀍WL:";3U~swTڂHtLpI?Qp ᭴[`L9knWF=1[kY"t~\.rou"pϋԐaN䮽/*t>E&ad[7j؂='2žOk,Q4Wv]Tg :pHn 8qg9E%6i} \A<3Ess D/cQwtK$R.SЍEɻ3zl?#ms쩑єcKsi3꿑zJMf=v9kx9jhӢPhHi4ۖQȩk$2Z#{Q6\6 2mqs8dɾGqq{d, ~H{r8oUN(AAEFjW ;/Bb?ŷotuFڟQV[*"w\׻h.S:r!oӢW 28K9N%\sյ%]7mRFg b̮'*^S[maYE"Q<5u]/ƊՒ ܬ͔]΃ɇ|ҕ&Zޜkgv癌{oe5M|KogE\SL{,O+1/̔ y4$H\BOCgb-wG@`#8Td`ѻ[\)%gxzn4'}@DSF&~_AlYY;Aw16)DIg8Cz& B 0hQe·fi/YO[)bG؅5<i_CjD'@"~$撗OA- M8>Ƣ,K-]D0 FÊ[U q6k5Zk2aqhCN^ D|e$JogV d= jLxKF#Q, %aU--#{Iy0;v{)*nOt9fo㭚bx˃% ̻ѺwFlfNTV\=(!Qwk8@oQ$wvޙuDʍ+,7!HJ6w15nYcanLi{Vs6bgS%9EbY*߷s96'R:P};NGpG9<;N{LZJ=Or \\3d7AR/kZy|*8 - 壨_O+J ]钮*>8IU\/O«Y=Tw,:_,Q>rA49lftwƛd jBWʲ[հW dgDP̷xdm<NI+;,̄y-O@|OZU_" /%ڟ^R!KIWYvi }{J5̙g$][kLt~,wq QW-E,Iy %ozF\SL(g௥M[Α{a@zc!LH-MQl < ǁ,Cͽ|^7'.m+jxIah=xABC55o8vI&p[k8`ؘ YtgMD^k.G<^Vs(iڒ`[Y"I$ρ#{Jٷ!9 C)Y^0 TV䛥 u YGPPf㺧-_Mgpʳ5Y1fJ^2as&:u&) yaC:AB]` 5o }6QC^trV{K>Vʯ) +ylJ eETYh,~_4;ZK 1jIsz 2'o2(pj~4OwbR{P8j\<-2?AЇ0|WQMӇv}\ cW({K!.{ڐK-E5,jg bOb!Izue֟`+2rB@&h79B7 7=lpPJ9tQ{pa~Wc^~deW77;4u"qqm>ØH}rfƂC n< 5VP)s(liHxEθ^tws,eĐ$S2Hgs:Qx?.,k@nݠUnQOɧg[g}G, Aa"d_&8NTU1qaPs.Xf|HP06- '*lhdnǁ"fq|q_Pv$"4|G6ŽNQ~2G*fǦ+ax%գG*=4 йRȗ:z^} /GA9﨧 _3jp7Pz0"𙍎pto00߷I;0ugu_c&;!ׯXԬqC.͔km~]Ɣ43 BС6i42glFyAYbP23sTcup)&%=( p!ޞ^YХ+,|[$h<3 6lcu1/J}ogr7uȁf:Oʷ߁_ȼ}m w=-51):؃]3v~}eh$nYQrU:K(E2鰛}Zn8!jDZ'O -T}j5Մ}E~qyx_rpbp&l A7Pa$#1Fm`*B]c+ O,n!Bd@\@ \7 Q-Q2yzP><%YRitI7 T1\ WHQn nwqxt5)q{wz=qS'k Ǚk%~%$`';J~?Mbf%ut+_<2 ZC4&cB*+_YyYglhJkctI5A-[\vXO;t2L/ -t\ܥVj 95} . tHp}縜G6=ײrƜ3~y1[z P:zr( OΚIҖ,%QmIe~U=F1p s `jlKfH^al$v8hdh_;P--FzRYF 97~E$.wilkFܒR1%dZ24ԢӼjlE ʦ< svBX6UKS/\YW'Fn&@hHQ ')ҍ~9&,o+/p pH̸/Lx_R0P36I,P}ڷ#uˬkapbd>@4e2]޿+4zu$՘'r]ر9|`=zc!%:VMjJ7ǁTCSY*{P"v h ؏sģeGVH8CB!5dEV6W] Ma#y!;䱇c cVT`{kfz'"T͌M8e6mi#AX pooA ]NׯitI4,ZV0;2ݓMסn)pC|#LdIf U'vyg>a[2aִHz? Wk \})|q(jl[rcmmG9-m;HRBt M1S=wz/}3@k$ à2WѪD5P`) ltu&=z>`Vx)L1Lhh1 ͅb)9T:r`so))hm1k'{F51 q:O\e DLYkLhWXmv:c1+G>nvǜ>kXJ^M2)n.\9fZK%>˞ps:PLnv"XˏA1MH)@eǾx3Wvk&{W9!:sQ#*]`>epR&fs5*݉!zXa}=UBJe} ]qВWs]$"SZPG'mZ(,`ECޥHDU,^Po9g#~*H8q!Ap!^1m{r}l/2w IqQe㢘ZCAҺ歝<52Eu@rb bPŞ{C QЀuD ѐfnP|2* i1|J[Kb ^XEf7"eHiiuB!7yR8ins Y tRav{ @ti+,>Oz$H/UNÿw۩׼4%xSVj79ښNjrZ&lx{v2X3cs@}i2Su =OfV?i!bݾ?kÆ!x>$96/1 sSszT%(]9ZB4}߈\X1fz (|H љcfE歂 ipZ@|=GkM|gEj3K;ڕV#s4! Uz$ҎDz,/B>UFKsejR|9)qf7ݜƨl54, |,,7HD1JL ܁#0=64mk=m X'teZ8 5 &i-TBg\{qz\kףqJܧ8v`|]( yweY+d:YGHe6ף#ee¾n &I@"M5:U = ^a+&}$Zz?$z9j51bZ-AmZK`k>,t\])ekjNnLsU6mm3+7#\0.J@_|#jp7~h%V QhH@ 2Wr"2駳pfٷ^;7YTe< XRT7D5\+P4p4<|IUgE7 ٱxbt浚Ё`~0[bmDٜvKߘHWE'(_vt };iŪ@LȽWy5.a~}wˏZ*UnkoE;!PMS @(+tl4p/8dKu+$&A8$T'm*\XyFBJj$<$U,VP` Vj ~we/D{/rzX2Hp=[ |8#V9ML!@] g"!+-n 9qƕQaq>˦Y;!8Uz` 1 N֓ʙSy@: ȖkVCND$_2/,xD}(~cvUO>($ ;"Sޡ @{@IͥeCR9>Ϡs 6>_M-E50/yJY}cLPQ^FtO*@5/ g8 bH_&@U' gM0|`_`걄oW dXGGNn`]?8pcJ*t`Ilh6b 7F Qʾ&c̷H(ޚ` +1g d%-\cL}nM4f<يEiՐfc2Tn7_TlHDL+ X])mkUdb`T+eb0Trܭ tG_w>ݖXӍ^Y+ -1Nw'$"!;M0g[U m3+*{3ニyR+ٮ;Iwm0* i/j%c]KnnxRC#h_|28` n1Q4]HVJzv;k {Džܨ ߛ!pUa{2s輿--)Ҋ[07zFo+?Ы?K.mOtfF,@0xZӈ+7fMsO[&- 7`Br}J˟iƝцx 5jz.\ >!O!eՙiXu022ځ>9()[R}Iio'[Vɼ탼n(d!lR09\T.DM,,e:zrmrDH|=g܇ di{y3dVtvnBBB/>[ECw( }{#3{< d?iԙҿtAEÙ %otߕ0p(?_7Gß "㏐]%!ɘ= ¿.f*"e8yri}_l,ۙmXiTRłXݣszL$0.˽GH1el2Al1! Y 3>0hF`zpzPzƊ;8˾;J J eWXS}o%~^ld^x cBI]vmmEbynqyK:fzl\Z%Tͩd8 q;"u2O) $v}bbֻ(sHN,x62@dkHnݰ\R3yNa 8 2" wPnS,fĔ8!~]*XA4A7T)̵e!Lw6}ܧP=F"ŗK&b1ق\ 2E[Eꉮ򴴳f<$-@%?޹ȂQw_vloLѮ6r VY!ˉ]3mD%΍ĭmt[J߳KxNKDPb{zryHi-sL(Q݌2.Pt&;#>ΨUw驔i[4JC쐜 vqP_}j?H4mtb6,;RuJ?g #r[)NRTc8Omp6!v*sV8\@}ٵ@r=?WN5}B:~(y|scCN w^f/Or#.'9"E<.lA*kKL);`>^gbUEe*T mő_h+sbGl$Kfz7.4DA=ak6}1`Q}~bwlui9+J\2i }Vȹ_IXIN*HA[!fV6dkFx`~bjAT A:w k [#IFu *Ay#/cbʙä^SP-K:2_3H/D'SL\J6ZRaK7KNH+_zג޾ Ku&hFck׭vKV$J*% L۴"d|;Ǡw/0.@`k8ѱ1p|stad Y!I*i eB'xݰ;l^M? !~~i;ƀ3 F\ϨYH<]{=wC#Z'iap& an&.>r9cѰX!΍!E ogwQPYR7#S'7y.AG[m~;A\-!$~PG5!TƢn,*rxt~ev/URՔ[ؓU 0W.2'zÝg֙'fY~}li5q<}DPbZǦ/Es)J5菥&̊j?Mޞm4_x~ࠎ2'ʚ5S N4v⍜Mmo?m)YTe.qz)/3CTGtI|86y.Z 0|V3wK1nFђ2ԔR7otFZCe4QxDP#xwgyf\06 $,8hfHyu{W%AU>∠nKS#aB/({`z>IfԄ[.-PXba" 6h4jN+{3A햠+ ix$Bidt2HyWXd(1 k+Om`&G8͝FWУ/n7}-uPc^%h%SB*y2kU8[GUn7ӆl/OV: =^jbؚEʞk%BXa6aLDlC(7?y*;{\اPqfq oє\2+[jOiɂ`!PBJ+"꽚 ݤկNRUj0m\|Ƒ*i-X Kb82^gDN1LqjfR @M0vT͕/ LnjGՀ$D%TMCaK^Xmn(YNV.laWB Ch˜Hcuv@OJ7& ޔKPybG ŌO$ݤ+"vX*X=rHKζKU{&5*l4>(lwoVTdnÞh f/E;(HZ:gvg{JWr&|;Ц!7F> &,DKck#$}D;^ehy֟(S@8NjNP1gl]F~pɈF`/t,%V3`A ],^ ;;cnv04xBq4O9F虪gP C!y`8FOvCe6mu԰/<%bkl;>@j=pcZV(]HU60B1[" h Z6"$i )I7p.a6 j'4&sJE54CoCH "vrpQR9Y0pJqu `:g"#O92+.  `~?VNJ=gjYɶ,@L\Y"7j_.%՘~)I>m f5cՅ0O\8ÝaamNS,z"圣 JU$2Ũ׭'S[B8I-PImԞohd)I͵f1>`a4~z+Ԓ !7Nj~Py#֡:b?xfR%˻sv̝ Tʻ6xKø:S0 ԤHKr+˛9E\BErGrR6/޺Y:uW[ExDI*X8ߒM:&Do# 0 OP7,^aߏ?7 E[?A,╤. >d؎idRձ;=zmXv9jO4/ D?ö̖#p j\m^uFAcG\SAkqWWk08^X`۹*%DvJ$nS@{1&KYvA@ScVBߍa4)y6L^jĚ@w8^.iޣIFlUminPC7:n7S[>wB+Vzd< ܸ玩G*Ks=="5rϑS2%!?1ϧ&P7LƲvpdNv!BO!;JjUu%Lfd".._(H?܌Ag<_^ZA?9e"T!܌5m]S6ZB`G b@4 #!M0cƌB H#Sjqss(fW[~MӞtwL{Ҙm|-j<5ҹa+DLt"'i PztߋaT(\֟g&5Kn8╆M)rUγIJYEfl⊩v\M&@-!S]\ST t_Ctrhޥ:U)"3AI 9SoUڊ?d06؏$>fe6}!X~Ҷ lg"o{xQyv?Mo5OZٛ BiN+D^-Q.73EE¼@ƚܗPZ# 7p mbA?QAl^|^y. "6W4Dp,^l-j ^^7Y1+4ANR` W/q|>R8̅[%$P!͸)mjN]͏2UsrUXx:cYB4Y Y3EB滯"t ` D3{'.ơDsFRp2D徫rhN#uuIGRY<G:V@/PA\gNPB)R[{YީҩB`ղd['ʝC:z!l8xa%K9Cv~q ꃪ 0ȻPk'=t~'bĝŪP^&ǚӎ 7bj~4E]0eKK_KpXdX1A2#<ɫtjCek]>v#e _C-Z\45Ģ4do]!JEwAUIڡ ~@GãI Bd}kRzNFD_AAx9?5p3 -fj ʿF],zЫ/QA@7*ԡ;**e.#j< N,nM9ltMÎ!LbQ0+nݠ˧ \իj *[?r1 }:O g۫ЁŜYn0xTN"Ll܋\" _VppT<75MkJ6 ]Ro *]]*I>Zqr +̵fHma11KWfFDdRi1h"ʪޗ1 j?Q/پn[?gM]HSwVh*خ,ˋm,&D(uTm=ƄΆqW7oZ!1K3J U"M4L 6%1 ry.oK/o'c0a366G2ӣg^`iᗍF E@C% %"1 ^"춎>X|:.P aȴ"  #iaf-*0A lb\M{*e|HdXW'N^jriȑls| %Xў7[Ԝ3 iO_TM/ WdH66O#/pz蓐q |b\!A| B}W~O!ۀo_϶ڏ?uQ>h;6cڥٽ^DB*R=$} P6*ߔW7l ͮB9455G.Fj0e~dJ%2@:90{[pta )daer30prȹY,tsͫ[Y|b[}\ aTeoMFV y\a:Zb;%Ϩ2y4>yT¥9S~Yf5a<y!4cq) / J* h̊޲@Ei4fW0˼ĺT]c;"LL)$,NKi~C% лw{GuWV|ŗ_͝V#<B,|icra>wƝ~P:J"d`콛> X2TP&o@nyRWCK8͖N|PŠ`p3*شnI,gd&J%uo`D]̈q<.9!j& n3Ǹxx"37ؙ` =W{o;PYiUzb %`[8;=dF$0(+l׏` .ZgI+ԻmcʑWW:(%UG]˒ \+"|%VWKMq8N"kl }#Y'8*&|*\ L~-cꋯuB2ukQ |a,! C<pHI!g_Az'R!@a?n=J[g FLݚy#I2>8(-AT7Ҟ< 0#.xz#\e7V:E3@¦?$Cx}mh\GC/[@UM]r4/]AQ&>*ìfTÏ^"knm7G!7 A>@A7ڂ"^Cwo.)s"Қ'";|sAw2GܺKiv|%|nrҝN[/RޒBԉdpNEdo ($} 3TTy%!R{M\EFiʡ&Dd7 ӕ5&'N!28t`ڋ>sjwTTϔ5H)0O2P= #)X%lpb*+{՟,vHΫCTF:)Dv09"qm"+O#U[q:H5QwU L}='@euu۟UD7VP1lAE2k2BܛT' Ҫ]%Imߎ ĭ.{qmWF$&U|V(H!~ 3Xx' |!&g]NAϽ>$BHK|Jj3я#mOM~t?q&dr{rL6=5,oSC#!Ǵc=h~FoXpX`NGPF.H?/DZVË^h*`hs[Wڛgw*rr_r9MH> 3{<} b\j )P8@,-6>cuz^}Ks ɡ5QFD)BkKP_}GI)0taRf&Rh:mZ* w (6"I UKqC3/Qg-4N3HK Tk>D}/e5Fk6jVWQ,Y鲩4Q2I]z MOMzd/fxeuV, E= kr;n95~79` B>*dG"U ؝*2ͼ>,>]A hK* ),kEDX݊cK~\C-t4u +rOɆb"z-bJ#E|U|ǯ&$G(ݬ ;J|D瓇f3d_Eù#'A$Ӹm6[[`5Xū'/ǶFhcaCM (d{G~ d\&(hP2D:%Vz·sDs[AԳ,nBko{fG#e ۸rWƯʻd֋T_|g 9VMZ+DvYT2UC)ŒSq<7j!;5.idx'}Vga}MY8lvS |ѡTJ_#?CO;—p=Kj}C1lb.% 6b @"pB}1bx9a\̔GZ[Q; Y\6%G0&1N@q>08ovPr=h˘POCu9ˈb$C5&/p 6fG`C$kag Dd v@Qĉ0(m7L#`1AWbԼp;[3my&.6@&z$If#B*~Qm8=`k6Lmˤĩ4ޱZnrDMʖ ƤcbA&ӈy={ آ[̕~4_㽿YEX qKzPH@$L):CB]dTq@T D(m6^4N^'Ge{`ͦ:Ԕv@aL=)">'F2JY>99%aa&`Ҏbb"D/r`]k28keP .k$v2S)$a&oI#|8Vr1_  nBh ׼Z 9>$gy?~.ɂtD@Ԃ"8o+G.G)J(7$ 1YfxsQcTW߅[Qf[V'poe2 UQ8SG':B: gzՇdCwm|g@x9šf}$j 0/{2ېJ.~q⸤}iT {rmqx[oA!0rL+ڰS6! ]!r"tVBހzWH U'hȽo PYm>iipFK+3}VXF8gqZIXhCna|뉒1utz,BGvt,p|Ʈ&M<-~ῈqGi+&>SIQr=p|Ax"y4&Z&۠XqF}B"eC'N[|.( Pi{vXK~N9O2`̺y ^4;]fXo@|4ֽ&֒Ӧ1ZqB>nC}B݇ܵػ30v-a$cӋ I@cu6iJ`I|2̪GnyVP(x j+a8Vv_@> ~,>59"/v(B.J+qϩ#A#m;"Y૙BMNJ.,x.\$q+7{{ ;Xd^@-Jx\K("oC۞LlM*(Ko |'!+d/mDP!gP*?eg_0p0 I)'.m5I}{+ȑ*s6m4_(0wR ]]^{ԻQ$X^Ӫʾ!^ly?qcJ$O{L}Dvcg tUC!}Q˻wZf(1ה:^G[{&0;Ƴ@g9V d7,M]8x%AttݵuZ ik(%B,#ҏC>4[/NE^GAH%ϢhN#s]/4]:IY [y;nxdx> v '%eXL_j婂U;hMG<_Z6rH(irO)'?SOaoiblH Qۧ pae@sBhwW*hwJ [L Y:˫H΋n,Q"C,ө`ogfk#dzPJTƉtӺϝ [Uݾͻn`Ou[|LQ33kQWl< 9ؘ13Nt]wE ߡ퉳p"6R#UR}DQjԑH<%Mp߬l7.))l\>UCuc{*ueƣd:b s+@/fPG4YRPeKb\6]հzYJTpP|V`AD=CQ 60hAfˉU*n.,CgkGu=~lբ%IVyTjtY=reE 6 ۘ98U/]Vid1pGC&_9.O2^[~=Tib u9֥iQQx: ,1kT%7/Edc)'$Τ=WBOi()#d> 2\N6GO 0h>^M}y*'/6]tƱZ*lrk Fh9ums׸AltҊc4%G C)@^'ˊ5zP.]UU x> vGkk7I1/3mm7m1_$maLz3(y鄏b`l+‡)6MZ":)`-%Lź"W qhK5c\w \˫k5h1+}o^hE eiA[E5SJwcFFU0 ?XR̋M }B&F۫ x`7j8ۅ=SĺQ e^6otqCSښޥ7RY2x!tWC c\^a%ݺkuWh ֖olp 8L'PfВ 0㺿R΋ͥp(/@ٹvEu'P}P`̯'ƗEKFjև!?gA"8)h[ u&(Bpތ2k ^.>Ϟeo9R #Dz"8|ng#4ǂ vV).X`"WOl t&|?Mt => H-dg|y..ʂc3Bz1IUٸ aC&8Ȉ V? 5m.+`Y>yO=<{~l"tjHQe0dէO_@ٍf7/nirF~4͆m*(у);\t*c ڶӕefŔL Ta7){2 -*'~^Ȝek$LL ^;J Ps#^!!QŽux[.ƙ .ۙ\ )ڲf| i/N(ЏG[7:Uy<D$2>[)Cw ,"Q+*uykZ>AH*GpFҕ)wnO8׶HZ3{̳.밇CoCd\.F^i,~MZ-G,aePYYFT F8Ag$C k$ZRnM(-Z3ݏ?HQcԡhg#n 4~KgZڦgw9DoL^v 5))CXF=6h7@QpCn9lcjgTMeLEKu L_(њo:nhg(w3,.b|BjZ!>w܁hgbjX4j=rbS^SD0+ 5tw>4tUR>ZS3t\ʩm}/N,J\}$U~eY͠J7Ƴ.&`S2NOr'hl@aDہI^\9՘?/J&E6ofܜlKxF&G:="{`} {$+ \]ҍxped(=W~ 6ePrutt9rWTmFt)no"P,c7++T7|DZ ч-3>דW|JN\__&~4(Dc=lz:̳+ kC>\T?TRA,Zs3|G.q1hD=œD׈W 9FK*ԕ;\OVS=K6Kogrܷ"Qi5(b5k8>/Lb+? oBAo.Z7J:$6%#{^ 18gH,w5i+&7$} g ̉7QDt1)t?NC53l>×t>VɨK`nux [~w"FJp:z|VuA(oNTu.xgR۲zRV9^=sA0 $IRhW&uuUm 7$}4@i6SA-=X=i~y:ܛV^.U@@g"ȿƇ٭6Qg| Xem.,Fމz^!SF8Aj`Z'IOgg6҉iz; TC">Mr|\"QܔK[:[*0ֿ#kH_N _KɃ]Os-DrK9aDM uzეiD~a]c2'oߩO .65ĝ'3KRU[b[Dubb6FdVѵ3S/E{*mL6&ZW,?oXGIH!N3 ǕzﬨU./fI  ebbkCj{/7 [V9dJ_V)S|ٲIUwfGֿa6ar]`+[X㲯Є ,޸P"U.RfdKj ̏32iG1 X9RZUO0 VkL33aމeHZ6{ Mʷ'fx`s5[Uƹfd75|~'VQ)OfhXAFG kku%M]I94m0'Uqy"\Hcv e'ZY~3_)ӁBqPbU8POV]6yh˕4D*(+7;ݐˌ`z T{Kk|3g; o?&[heˠ1Qا*L %,`n2zVj<)q|[)1WʷT9C_c k/PLEg*υ698av)1`#0Ã;cJ>09HǙJVZ84Tg6-"OC x`֔t62? _B=)kb\ZCDC=6Ŀ;<ij_;%6|PDo7rtKuMAude H6^9vT׭:u^vR/YWX%l(Ltchk&3ᄱ؅SVxocB WR,LW:5 CG )XӐOs1AF(SK`3ަ+ٸm_QnCݠF87+-뽅D[,$|} g$m*E@qgW-($Xg?nOx~/_|QbSMP xb䢻jͼ 8Q,tżExnwÎ *)'!xUWǣ=ϗY_Ⴃ_@AtF~^c4nj x1#Cr`Wav%ȼcƂ=0 Tx|"%/xⒹ "i|F5Lٕ'œ>חlKgZMS Ć1r2!AZ*a!oR !],V3떗qzoo/,բROLg-Z<dx۵m hfEM\sޕl{o?*,ŧ݊8v ξP6QIֳP_]C]0ѐ- ChmoTGМ@7xWFn"=TBX(#fL5]'D"V[ΤNa{ҏA !/U;Bve R+fYEi2.3jJ0;'JX1_&7AD\& jԔUSWMr*7nϟ=dxIpaDq֘5)wPiĺ!{8J1~W;Z@&s?Xcc{=Xڄi,Ydw 5;^UMDz]DX -)2CNlΧ9v g&gywϴ2Uo8"U=/I|R,@m;?C5< _ .YJÈd P!Xxz {>QJiL$^e AbT!r ~:7[QETk7'L S*/!2Uܩj~A cL!8 ,W*3QrT^ާhePAJv(Zqӳie^x:"FXU)k2'Iu櫕(7s"ZcHuPnBx;XaADgu-D&IȻ}Z<@ݛJ]J:7zH9_AT@+Ҝsb!,cInI]_ntz^/E YWa ! dlXӯ]e"Oy:<ٹzZD:Azbd #[8*0-GGx]+"7]u8Ğ4~ 8W_MaQ$ Yطkw WQf ,djD u/%6_ܢ >kߊ#me5%Z[;c5,mWZʺJQ2gA WJnylOvζP_hyr l0 QOpLƁY'2GpMdHcNI̧sգ-+'"{65OEJu%nmVd[ 3 vAF ɐu"?vkkFѰNJq fi"h>qIkW[O( Qk~.[2z)4Tٚ4ʜ?"Bp| D5,̿4O!<:!!׽UAxSKR/BmcoV;Xp  >+nt\6ٗȸce6 Uw2\ݑ7 <zؚz `|zYRA nz+^`I`Sgo]W Y"&-i~gț>5^E[K 2w[y]s*&߸~TBZqtxZ[~ˋ 7B"#dGoB>c-C ~UxZ=\z))\?ŭm /3 gB Cc\E;,?Υ>EPܧ7_ǩo/h$*W~a{ǕmJkC,c€L-SMl}.̷ uxaE_뢟Ȱ(җÍwL;8^$ br%rkᑆm6ۘ&nwD$(4xqo[esBtQǽZK4@(=;59-%ODMi!LűX<$Oge\ {YG&Pn=\܄z,$`}2`թ.>o<׸®҆4 YwA#kUþ @{ ML㣯baݏM5#EA=5H<~?f߹Q5j`HC@kS ,:FF0L5_[ o׾"3"d …єh ߏxÎ@W5F:,Q1ae 2_96SeIKQ}jzϡI\uΙf ,7peU9`(J2Mʝf_>=ڌNϺ{i1hIǘ7o0|ٚ 2S$%:<37{b?mz$pDAa)p_^׃ ;i~̕c;=+Qx#GYucV}w{wrp) $d>+='4K\@Ԉ] 1++C'X.rUFZ[QXjKp!l0%# 2ptg.kIzEIU13o7K.\ɋl:+l wX( YO=%Im!^T5@#4kbXUB5,e1CYQؾldh+j45/?3tUSw+5L6I& a#X++APZBB&Խ['OЦH&[$GVЃ?,%j@UXۊ9~+Zl}w&ȅ"5s NNW@--kj<,$'ƒ\Ob8,yA >0dss xOJvt^KCMfj 7Ym=-/f8VmLqKH%1^*[S`.RCDue01CiS|bV>j_ZEnY~vPSGn$QSEc>r_Ufs>j2>\x|Yd3k?I O)YM&t0G%M qjj9+7J-(eZ<'pvIbqk6k z.,Woy1o7D7Eh>WNk:)R*I+yaSŵCτ >2R si! _415gA1_&yQE#\u2j3 ?hxJAU_Na jI.=,Xmq]$I+=SgDayĹQ rmԺs4sg`uWQ&S8 IZ<ӥT<ҐdϘ  Jg#~2K ` TW`q<.KNjxm AHOh^>}ZcsFL YiL49$^^.ht2rCS“qBϦXsZKȬv(:y.Ka3g$_mY K#"@(kX$7}^gҖ}%HYL_e V5:7 GO^>+$jӬD JDZ -;HKfTb\i׿,=S={[VeX.`Kt,CvIr1~ I,H:kѸ}MfC$6D6#!gAke^7M^B?FmgTP]K >758rIpBp%!G*K4>ԜQfUfP epԷ|D/ȋ8+,B-o_D1S>1{Yp%+]%h>m u]:\Ib FcA!y ^Qm.}zwSຂf@.ɒyf4BIgMtTiY7U#qQuyPZ0lyFWHeFyh.bɔ/&6; ;8]ONe[ \&^h!뙖o4<iaϡG0^ »؝i&q"aK/k]|;rWC Cホ"sETr jR1^|.t>ԅM$aN ̸Ul ?ݝ_zOR S"Wt}6 qZUM8!)^k`#ϰG$APRh%q ٺQ/>C׷h&zRE =6>7Ԇ5OQd:$l|`?~E4ǤŇ>MliMG +*.l@=y@6zb ]gJAdc"M gb\9d o dl1 4Lƒar}nySjԳ ZTV%{e7$Y@+|;/@}Pnή<Ԩ͈ U o.p;w)uX- R XM24Ʌ$MOD{1LsqS+s\fnLa(Yn1{OU5XQyΒnX4<c8FJ@/p:52016#t?>=pzb۹}۴WTI>b3Wx> ͭ~)SHo̩Vp''eM{17tkiܭ^Ywm5_'|R oYO2bBRGkCTuCBgqoQ54ϩLγmb6i(&&fܼˊKNhm5b)|%P'g4SePNJ@ÕbĞ7ȯU?v~STϊBbII Tu}N|`c~fG&%r+}=eêzX{-nֻZg]F!F *8U}f!{qh9j݊DЪʕ֧4t>%12Z-jz&@Eh.՝?;al$;ـl2.SCȵ^*oE4y9pSixVPgՅ"l'̈Ed&G).|f;Aj"h_DQKnj`Jg6fxqÇ3v@+_}"pIT B)~{&άD-D|:_8;7t jxdDmTôj2ͪw9胨 $0ڬer`-3 \E}聽`JM-״vKVg@|)/+ZK]3hT:Ij/Ukr09\җm9Nq^"dԎēح0ֿYgCHzꢭv{؜ 9M1ǟ f93QTIw<`pgC$w03,P,;GGmNU#9sH@ G*Z?q.$,JVZ*T[w$+ a[x-*OLC˷)?OM,Y^5xQ=T?{p];CLK]9D漐'XH$nR!tx|#KN{LX9Yubtũ|8 @dmE΁L: qj~_ΤFO\_qPH'uGb^LNE TK{qJ>14z)l95AÛR|%Q1!XߪM 1 Y~{n;ZkOoφ//9҈!Xn1 xc,< ~#z„h=Z>7$)4TMtSP~[D 0C;PHHm_<|'LrAT!3o7&'fZH牧c7Ot#0K_gwLZ8 .L/}C5sys7첾niAPL%/K*u|aC'QEvaC7?SY;\#ۚ8Lmh}[Yn\3O+Q0i|ͩ>U_RP5n&g)[{%l<{]pH81(nm~O(n'QXܳ'PD',RcA H*l@_J 2M]T[[PVaļsƗ<.)uz^p,|M͸W3S_մ2u~%Q)7B6P!qRUy- B ĺ?.h0x:Io0O4ٻÑ[biliȽRJGY!~VNK:ODƉeI -,Pb;v=(8ƆEXq1ڳRҾyzb`V40|~egcs%!m.gJTs.}BbE4M.JA'÷jp) buS>XCupFUG9LX9I!>tS)x٥!洙|&@ T*/ zvŇULsZI.+WSj1cxeGكIWP 䂀@rPᙷѺS.{#QH]s['#g(F "v-s]'M'`EH;t$FeVKy 8s}gKZԪ[F\Zȼ5jH#IO<.rI']WYynטT#|=> IO7{ǔQНM%2JWy䤑x'/LZyHBeºoJ+dZ27hIGiҮT`mvM>IÐ;pljbUƤ_9S=R$s+ޔZ z /pG,vJ!D~,LE#s*A㬤 QNx$ZD~L?R t'8ADMuUF˚|RR>6`g2StWC X-ZswPHga%={ed6vEZ_\s* aWSh@gP~|4+%G |a`*U2TSPћ'TХŽ.p9S҅㌹*4M(V+'-0?RH9RĄ\[[CcEcXqJ/@EyRjn'7b}߷C59G^Ջ]&u p׌*gT4,>;Z򜼣O%k(2iF%bu%3Cr^60|c;:@)OƔEU .R+%yGj]  iGe ^̞In/ /60 n%?e?%I{3ɂ/Oz{T1btQSMJ{(= ,A҆2C&S1B㛠ܚI0͈5#SyaZ( j) n_BrhpC5he3̎m AoLRſY$c/? wf b"'Q#n E v I6h-)Q>:䨂s9Z`Q̗u܍͋CT`QQ9L%n}+o2h˯g)o;YZ. 5ӵ9_؋ VgFXhQIєǾ,$h1(FCfcbjrc6L%]Œeo#hq4;j\HuC?Λ?k3{0|J&V1D17nVs\8(76pN&Da}fŏ02!< !G:YASN8'W TD5f~v]d>(Ox1J[f/ǔGlL^_b,ya ZY], .i(˨J%CA@}_OBNKMN8b$&F2۽mx ,RYXI;26ɸ(T>'A oa%\Hgb^ l:oHSwkd@՘RcM}:0 Ji"~.4zh X: |nնPreeu>DxW5=,sOt#Zdi^1Y <=计S6Yz# -[pYOIrB x`!*~>p^@$25Y*lZ[Mޥԓj@;tz uYt!Lwds)n-(+H%# Ueg >j.~IcVpKY[: ɐ5a7L'CX>`l1tCU,sJ(;Y:6uFQ"([Fffƥ#k Tҫ X@܊i.ho»U(=Ķz Xtph5W}~c{9g V5S]0| H ;{j˯$D5Lcb aW,Tih`7xX4fGW}6LrO@H6!'l8o`+ɊbϠ5juU;%H~0Yݚ"3mЏٕZbY߭6晧3c Ij{JuHδ98Lw%c}tf94+ 0H!g׹$h^Нq }@!LEZڜQ(JT*Ǣ@mK*TedpmcGHռk %B;>- M;-X^H- }Srzz 0ጞ Oۭ9|?l{%qHvbQbItG!55 fr~cs¯s{ ]07eC)!̋0 d=$<̗\%BV*9,} `06>p: 4(H2A#>ή'lx~놚 Gi%| R^tʧ& # _͝Y]܄uI'3 ݁0 wf sQh?\\vaeS O n7LVzD%jF3AsD.d |@KHg+F/#PH2E>BZ6חJƼK)Ҡ˘&Ě\ݚ HyDmkͦ,gg 5 ]kIW]2hIݩNV5/+C_» GW0-v ޙeh҉0dmpP&(Cx臹W8QF ϫۏGz8JާFwk|_tǹ:X>,5U?g9V#Uwlf/7uM aKI>arT)vdO H4fpb,25A /"jEhSs=̠ΰ!UEmu̧cx5JT\}+x|PDau F=eoŵ/P4{ dn;_#u3~7 G 5XP6k͂<8+da?xQ">X{v!ֳIѭh*VD=[O(|bpOpx\k ڗʝ:8y׭=yG~p{ø2ɳnuUY ԅ2ZvC1/1z̾C'>r%IZX%V &6RF~(E@N4he9GRTaוÐw.k˜V__Yksw&[zǂo{SO=K2ż97,҂zLu´)*#D炚ˇyerhjϺ4R)B98Х7`=uHqPՙyH@(ruր䱙/&@JQ^3{V.Au f-fJ7(YIiDݴ֔4dxTJM:TPS4'm0Ev #u'~O|ɱbֵWcKE{3fv -@"GJXTF1ALI/,*EY5~kowkV!ɭFBMM`RR1JHBsOԙ.= S^m9q<+IP\MW6WT% f"nŬ0@:'$=$@sG4%&o  3N%^cBa%4>J`aM:aWIGU [*"N@Zϫ220n^BܻȔ[SjIHi[l7i{l 695dLdz`_w <ƚI 3wh$jabz;!Mi9mzZvLㅤ*-~S$F(Vɫ+㪏b/JFt%Nw?r s(44}sD'q("tP*Fx5Qb=T.)cW>Ή> ($>-~/0`rF34I,4GMݫhDTffilVCuaI~G TO<}L,ž,g Kl骐^Lʷ,T. 8C,I& d$oB"tyNkqL4%ǚ)-20H(Hyb\vjF9C'h( O)a;-*k1{K#{D(Q^n (e㜈pC83n=TmycӰkp ͮZJN,{˴3>Fb%po E/lEQ<{`vkuOpD}&C[@bde`Rޱ1/j8@igO s&t9%]^(d`cBc^?=y $# \C(X*&x:l3+r$uuԽzxFo=X9}sp+yK@V "|2줶T<*c|~]> qM] Uٽ.?mgqa_LetFu6,b ])9bgD{lXdo4uS>xQ }G 3Y;fF$͵p)|KLi+؜2$0ʳ' .A׊ ~>YFcg>x i,H3K6b==#Ek=*ҋ5 ~:~)[>wnư{Aqq<.ȘgV)Z D\,M!ZpZ5)-rJJT%SZ:k č YaG 0'H&6;D*# 'ix 9OUG[Q _uzTxJ1y9d+'N`h.̬pG҈(fݘjQӼIOfF3$1WiIzLB ᯒ8`(^dXbqulxEH\(~RlmO]x0+$m@eec)~C=ܺ&y¡#MЕ{ 'aJX^#yA|&<qY',Cg8:woFPGjRF-$\GɘQM;6 yy1;U܇ (tU\f#g~_rjT9E~c(zn;G+V>|T&O^$ W<=%Bd"4[z21L<2ϑx tK`B8?bM >_,;lI~3IT)a `,dz9Q^eQt r`L' 倄yFcMa7u=PF4$[YF `0]fN˹s1ؐ2_GTb5pS=44}4c5Y(%3r:W7^Ƭ cM`t!?+HiJ^m O;&6[ө&U$jV F'AC^0V!q63v p92-!R;R~A PY#300CvC]/d4ϳHƿe3j!9U%?ճ5Jt )ތk ]͆Tؼl ako4>>{$:JDI08bðS,ub>Zy42-8MDu7TZU 6Lmpʠiw\bD{Wyf 03N\ղ29XF u+}}+ѩF:TХȭPT|T} (>?Y & b} +vh#Fk􃆍<^6AZ@q:틲/C-*lCN:LSr_2s \`@<:$xų{hcvX<⚳/Vq}AYPUN2ViV>(>SMڟo,-JJZG7=?KoԳHB&;u%`CVjF'DvkN|S[0e\e+KCn" 8r60TDckqs$ʅ{]#f*dַ&S $č /,d8L jra ./sjprB Ҥzjv2LhLv+d5{W:%ת ,TT(ŇPS3zYH&e䥲߇]Ǘ*Dxnqy­w&>~|X`D#DH(y*Er6HXȒrZH%2ziϭ b7߮wPv+/M#\)j$MZs6p8(䫯yO/j}~uhĊ<>>\ nCŠ1}+h@7!r߄G﷈D^$9GT:I !ttPKڄza.:H;ˍ#rR ֤{\o@,[qauKm "'js:Lse'Wmapu3r?ߥ#<.] Z0YGȦ,r`0zڷu'r;s S.^d6ʜt9|oQmXɥZ;U,x&@CP$}3e+f SV>;ki @N NOn]~LGAqz˷^UpR{!ÍO@Xa{j?uP{ߕ l G! ɇ aq-ġfgہ@{fV̕ȎąUe/D1)OPE99gXF&>X~_l]ӛ8k/_CXОdvxoSh v:sӦPP4:tӔne_CE]&yJ-9PbкشfPNFR#FGfw,RYWpxKny_gSDOee۠[1d%#}txN˲|z8_ԸС.MЀ) k܎)N,ڑ(&w ,jEx ָ$~׭.[q8u(@-emXb ~[2%pB/L M /Ik_*ank{֫o7zr[N8 w7Ky=>Z&ox~r!m 5뛚 c{TwU%H:5{♞"?l75\[uS9't S=pU(.O˥p4oT% ɡ#Fd3؀ ~F-y19S0 I4]圲HjܕL(ƸOϺxZ1 O؜Y(h@2vі}H'M1xwۃfh 7$\HtlYAh_*AV+{D2F>=?&,d287^!TU@Mçg Y`nv_r ή׎"-ϾW | J`/+ F& [SSͬ<_ Mtk%rЦc]!x~8XYs$sQٓPܙݍ{U\q0Nߤp9 )U "uR@4>m Hu^(^KTQT8M^m^"2&Ɣ愥/9 ْ?ݤXH/ιTrkU7rO]T[n0֖/(!xŗ}%gd%b҅+Xu4Kc~0̈́6c`Č؛ v)La4B8h`9V/TCRaQ@f>L?N<Ҧ&>7<<-&*YOҘ`%%ǻJhf=pso5357j0bp-?G>H :hW$Փ^WUQ Hڸ#݋c2ސ*dj3AMD~B!jIjאtO6lq|ꇐF_]1( bJvNuECsJgX&e!4 = U~.0:X皒[,2bG"$d$Kuɚ9I=lö?UT$Z ׬ i#:s|†փX*YSwɵ =h1eNS`S墯 M~%\ESBvi(g-Ÿ0D Q חىtCRئ6! QH6r _>%`t&V hgN(m)n8"q.c0WyNYç^$W( y/Jؗ\a)zBw+'!oC ע}`. :\Pvokx&hȺl ѓ1L5.|Mexջ]Ό0Vף~6 ivSq)ސiw7/=Ң쭖2o*6ॲNmqee7fP+ENTBV~ dy¸35%- dUT3Tbk|2u" }A5]:`42<*1 rnCVHLQM!P!qjM*mAE/n^wA4R~tv%Ya j+\dGv0CS"\z'FO7π9ȃIJX]Yڝ`?>ГSAC=Ń-=M,B ZF}4Lp9PK"ós54=M۰`(Q.;#?7%V1v9#!N$Hy1U H[\DP UV= +S"1-Qݕ,12B6.{WqF^g<&Wɇ3<"_2w IX+@(M&T}RiyvKOnNkF8)6Ai!|yhK _jVر(+F *2nB l;~X}q ,<Hu;krԓ`B|9-nN߫V%mҩtV{rDkyiJ7z&N #oB`-Ԯx*di>-c<3ʸt*3`EDHpPM.~)p*/4 K'`475Ub9#R}%[/ЅG#.d: V\֏=>eӛ iWA gG- rIM1KŸ`|6r>X?үxI#;brhICvD 2,ky[>n|XPD!Bm*$1kev.jJT£#yCV_AϟirR;C L5Zǿ#Y4Pe!E`ۦE(O8:Q}Yq9+^j,b#VCVg1u#fL+{?Q_*uRC=˯0Y5+^`dG XJsID;_05LiU #TLOA{ o42UKஇ8\3&u#ªIa 8-JsZbqTKn3VC˪f&>qJ0<&)Gk69]Zri-["#n& #"[~q?[h($-XuZ[61+>%ܭYs yF/U:aux&pF\H;}A&`;K.bWob%WkCk)%5-pƬ cG #gGFZ˄U -Y=o52_u"30G66vۼ1{0:\G6 !t<g7 "NJ,af* 6o}\lkuRp4,3Z//Bk_*眄Ezq -_썍̶zq )qr-Z4RbP c6E^MFS˰%)#$t!鶫?網 DЏ9[I\KD ?+F"5 $tͩ*˛Ajml WdUs&ϕHa_)z*~~ףO6{g{RS:Ͱօg::m4s#?/!$\ÚJؓOqlԎwѨrri%$3>`vm$> l΅]b^oLF{w'G5(V/ؿ6z)Mxc`Ұa3{:n򀯇Ԕ)WS#;].KK^Q<8(\ Uak PKxPAI݌w^^IKt6&]CH/V^?[wzyi= ݀ĿtA> Mj4svxHSJ~0 JxQXQ֪7( 22|w/TYS[@JE}gQ;*a.o&v9}F0a$9wbkb2 E~HU!}Y $J2/(2V8Kx+l8/9m+Ib;.,|p|؅Wȷ}HSW=D5lmlX&0d^py TNQ /wvMn˟%QwաO':"_ϸz8-`K hzO\|g#r,V3q]ĬM+c(&}' LɅ@~Ho:iǡ36͍D?@0g!ԫ VzG?]8e.@57IVR\KXq{c9$;mHk yNg<=.K 1[n[nm<_HnXQ'" U3?#s|1 /ڹ,<(J!IPT\Yyx>/Y߷E]?q* V5P2aC,Yl2$y|i`mp= mOl[IR J{:^ Ցf9и) A'8{@֫GoLe(ظ/ SmEK9sd0m~5/9|O'-]w~yo+>eVtk\S%lOO qFee<C`aS?|Z sڈܻUHEKOSPq=MHS OwЋg }!Alj+;gUN V ?1F½ViL3(9E霋-%F%e4e A Z+ǹ@^i}6ù 1:@1ۯ1ή8j#|q3[ sk=H5ݟe.vWɝ~}a=K7(zGdӽ' tDs>M_6KCz Q=tbM)Tn%T()rweOHszަ'S8 {'׀U!|ȬNN|`NEC݁<3]n7Ҡ߯@yk|8,!H"*t/UP{jEs9 rWC8 T".qMB.b_wD+V7>RKFԈ'.yBV{GDq3Ƞ73J`Q^ e}Cqm:ֻ۬.J'n{ #pzɉ~1u*An ݅T!WuowߥqZ^L%"q,ݑ}b] (pʯP.RP4.ÂI^XIV1e}kGd]cu#Tq^-wyymn㵵/F9_Bx62|2?"Zv8K)Ɓln|9ƆBD&!<ӯ#uPx? ڊB%`~•7U~-B"8)0j6 _葅XDtg<>y_o+[k\3S|Dkm9mh܄[K& $0_E<ٱb\ӡd'+C5{g@nsB8.Fd_2,֬f +`5FH>ރFvlWݑJWEL :_B:;c\_4#Aᡦz ?`;/\&R${N($"m' ~JvB`0Ubw# gڊ%hv䑇ab F(Т[S!x 9wӘ0*Odv>aV&)ozz|:|L=و32DU`II-]]r/**A}Gz/$Ǥ+\eS0%2m3tNaۧ`5-Z?0Rf'  OJ}`.`eLaEaȪMيV7OQw9\]a'B4fs[JcmgGTYn_z-k%JzmfY~\8IO!F t5UK@Sܖ/p0&U?fNul,),S]Ǟ)h5ByUTz,,Y0 FQȃz˦F7zd<Ͼp:H##%0ԗ$a@̯2=>d^n@# EBekݾ :llW>`KW[6|pdLP3&@Tu~fKmDz L #4ՃS{/'D¬xyLxESgّ"o5bKh ,ŝZcxzKB6f~GiwԄx3KIt=S}t-/ފ8ـI F!7]9. ¨WEESTg5;>^٤Θj &  WT3EÿeKl`rL[t g 0w< } c$3!7_H9Qxe #xzWl;5"˪#gX0]( ےݛz231NKwpSMºyqu6Tt0l~(v^NM~Tzo7Rz5OD6(w*=ÚlTP K{ċ^t8iU=$qV* o! Ԟ8hyꭙSӌ"̈́D-c ÕXtbENtN?ڈ*To7YOG_!T=[㲜D+[d_oPe B!7Pݭ4Gv1}0;UlWNRBgQU h}Aӥ5}8ߺtR>*P8žƤ@%Ԙb\bOBg^sSB0CGKR'e6Fdɢ9N]63]S0 oET gKDFFI:hp¢&m0` c?@25j[@Gs d8ZVN poluB&qɴa DP~>% 3m 8P >mX聍'p~K萌w~scOսtL#E97ՐJS:1œ,v08t{N Dӗ$LX”$ɿ4|]:ixJ/V"ݲų!S]ih`2-/`\ z!DS8RɬE0 ml+FZq^Jwm±w΍wЕ@E8F]3@zgA0:`HjP#nf|ͽPkȂ|&/3}d7! ͘2-c ƲzC"];2rղR:i*NS^4`̯Sr|FJ ͝5^ŖX)H3y,=tՠ4}1/s۶Gu21`d.!Y"? 6|dF:\O"7^6J\b/@cf9dJrZn `V >q:'NmˆhmvfsfכD7!W pL߶8;ȺF&Un]Ú  -!I4uB\e#RɌ?vDepLU8OPn[RexcLՀ*KUMA944`OK+t Ե RڇC1ZĹMhg>e ΠRS>+b|_Ղsʚa6#9-@_9ԵTX8Y3Tn1,Y 4?9,rvZ 'H ߛɧp Q~L/7qZ xR'?YiAn]$uMWJT;Ld aܗ&Q}T=aefbR{4' Bk׋7mXT b^'y??CfPf1Mg\jyxXz />Q|j'4}c  6o'srϐ⽕Is=zov*9z,I*;͚*Vq|,:_3Aivꑻɫ$v~Η1风/|j_mz AdrG7>>El0+Ivya7NFt6Hٱ4fB*. 6钢1du\]X :v]K̰rby*=8ݚ̧0Q&Lz^!T(.1d٪ة >/8rNg#ZtMAqCK햑K8Hն4^;3Q<2A[-)87ҏ4V/I8hѯ:2:X,k^'#D!Nr*A-oJԎtUjknxRkP[(NLa(5nl+H6X?/kV"' 1WFm%^"+`񊛮is@n!Sp*eBg1-jhFQ: ;p'jn~e#)6QŨ+1\Bތ*Gٖj-B5xk}CL}]2|.[hxQ}ܸj;^#Y|"(NS L=Gx8)㶿ʼ8q W! ( "0M{rAlyc֥&v{tw$ >F6i_ "Gt^V̚$ F;D?R Dв]P-]敌 D4a^0tQw@"0İFYDT CjHG $E5ȣrH`WԵ ձ/GƖѤ5&z_.:o̵+WBnnu^u! `eBBnHpf&cjQPE0bݢҘ {kCo& kߧ YKh@O:︿So_"^$h*iT׌]-mͣ2h^/ꀃhF}i6jy9肺{y_1xU\'EX #tl@,i``+C^=D ā6mKݜ|]tm=V)۪"C okM8Qx$G !}9ҋ"(I(&^|;0k,l2stT_g[fy"P2bGc w9-R膎CG;H{6;9PAצ,wFPesp T&^5(e,ɓRFEBDꦎ>o6SWx'@(wl81o;Ϯ=D@) ,tc!dd*&5UU!C/E=d|ZΏR^@$v sPl>|G2eH  Bi5:.Q—  S1yC5Ѓoh)CXn&-C]]>~t{(M B)r=q#=qD s;Z:.xyDq6W#P]s5P_>rL *G?'̕"v|ǔ«&rLe9Wtv~nqAHTxedM!R#~1N%H0-'ƴ+ W#n$3)ZfM(Q]6 AYSF 5,B&`#WGk%2,.h&I,W֤$&DH}]G_OOV6Q~܃=vGeU؄c4JgKe9,\Mᅩ*׃FkAܮ mً}leSh/0@`R(kJZ!t^9_?pejmqeou1E{bf w֙|+[Zdu\KW@7©tI6m%B{5>wٳeu/ŮK(!'p: 5.(<k[nԢ,a[k)lX7g`dЍV]6\eM&)-dL5_Cv-F{te/Ru\ !;C8΀ܓ|x0FX;{GqjV2*'jAaߗA֧щuGJgwx۵oX,7O'&L>CS\$0j$;_Q3U^䁯ǧo5ɺbA7'2h %1dkM Ю"ğuoR'dP텒E(E+!xtO+M]rӟcVƎ 8= EDw,zWU/gVH`%u?Bj8:щڱ@Xٽg^N }y^cิa~G^4_ )7 8ގp`y!<&P/ɯDVo#O &^7 W3BNKݻL;Ɂf^rf3ʆ cHXx;(.k,Qcey˘.GGY`tY0 AgB} ^%"0`phtzSڃLlTڜ Ⱦr4S2kijhK=IĒvഴh>dm{ ITVOJB=`ǝ}\?JuZi#r|/&K[z4~tO~ )SèzyESmnO%p٪]{ywK[bEoElReuݫ^%E;з5ԝ1]7Lq[t.4H$W郤o9N@tigw%AXhQ7=)k>6WPdKU.HhF, R>O]:g*Xso'7fp;=]MmwOpr[.49T/}n="HWȌg;B|4RtHE>՝[nf5<ˮ"(#*6o3Ehwge8@u_0uFa))f_("zxCvx)73(9W(&e*;'^Ţ4kdET݋Ej:Mlrq W!Zޟi5?OVjE0!3Ď˻avV:{Vx#E K0><2CP?lD9[q-6/>=!udk=4ǚ7io7<U` j,!Rˍ;f<])S5˯' Ɯ4z`9O4u˸PɰZ%+G1ijȶםb12ʬXQL0"[98ZJ+\s 0!7̥zh[2;VyjK||TF"}:l8gVl.H $CS[aH;503h7Kg*.uk=rCx/5g{ϻLD&j)OrImcv yNJ er )زԧx;Ì\}6ȅ4 x0L&ɓb4!Hn`zɺ{b6V>_UZ& ֑a7"of\}3\S$W#ћlo)RuGjLxM |ƨ 3 &2G^t*uaO $M.|r-TLIXyOڽQ >!=DR爄m97R˦Аxv SLD[BB|V Y `s#'mg*<Ɍn;IB(R5tE1DGSFxGʳY[)V6=7aisL=ͳUz D`EtXb𠍟b=H69<*_ޫ> qkvPv!*> A W U _q%=!>sirз_TzZnג8T Tnј_Z] E/ |ɘ 3j0GT^rogǨ~WIqчc 0.Ů7+[^=YФWFBO ䷓Q]E|S"@NBXKS'eh׏|$Iu ud=7EB<,d-t oTpCGsj M~C ;?0n.}ӱQ/g97QXupOADW+9? LjvgndTmx[gyGc+n.!8/?%5J%~x &*Y,k?C Б[d 12mѸ_ZLCQ+5y/YiNfH|֌Jy;l⹝ z @u/kkJSe@g:uJHi:J Q>Mwda\@#y ="}@=$jSLo֏5;12hEQa[o8T@FfgTWwk4m$Wmۘ A@Z4&׵ܺ2K5>u˦D6(< [H4n/|MUT9Ԏ!]\a7tp @lSY;'T="]o<_ә߱Y)O(lgXP i%eËpVJ vU^Xq7*!8NLVbޛ XD.0lM'c(%OFnR!~~QA1 ͠q%ߋG=L"Y~f6…| AYڻϩRl% oQT]#> ۙ81q,-a{dwlI~5XYYv!2V?0:M 6K@uRJogsz=8~"'kK>W PSP1}96)D LE3/4r%5~"k:C i-7‡gJL`ߟ`KؑanA|y\M"Mn_)N`gMccwNxY$[MuȂv\.zg珥:ּc)UcjDɋ.+njt+h.M% p_φ#lf,eq .ȑ*ߗe+նla :YB\O^G>E{ax.Ӷ u뒙&7ˀƪlU*p;N@e{ a"9#dgyDˉK1iBp֨NX|maJAd_- ͨ҄Vv 4G$j>g19| VR54<@sX=؋~ʳ‚ԯKbNRq -0h[bs2/m;N_ 6Hn tЬ1nI-L% p7| -C}E? Øχ>IF ;:@*O]Hepy [wt$iv~F. CA b ms{ uM'xʣB^=}l8~ƺIѦD)! ~3LN-0JkⅮ3",rHZ68qFZ,,x/uџS+-IRp)ߎQ1lМ?R^)߸(owm- Tzhou<]$U6?5B=EhT%%oᨽ :oFsyYJwQU94sn$Ozf׻}:Z.i&P 2MkfDMKwLgx9d/QQJ dpI⪃ :uGtHUuvꆳ^UNM2D3l|$ȆѢGWNDY6ao\C! 468䫼G9'=n̟Zz XGjLF='َO'2GLAêH`O[;.D8sdytXiW^JĽ woථ~8*2d2N |ɤEib6'|yj&0: y59fDžs]eơ =JW-9f܀S1ԙaf55/i4_d,)_UZ^ ۯHDOS_(Fx> b{.9"¿gl\o?=r6KcR`ME3&+Q Jt_T G PwU%k^34Rr6l 94zLu5 K{fxnDZn*E3N+*k }{:" y kʠl}ݍ +MJz"u "yngz[qPnPmQ}&AŨ\^LyEB<P]3cw7\ZKm`kԡ8IԦ6RI>8UN 6>$=GP3ұ#85݇>V(u XWXkIlgX8ȥJ1V ؝˰a$)1qROf׬JBl-|kvo۰W:.>9>v`>ZV_x $)EygSM}x#aPe?ZsWa#%Dt|19SAjRӞM>{j i.՜Y1t.¨q &*@!.1>HZٖ4Uw(ͽl"5UԲ;Ui)~,szC6]Hߧ{ĒHqqB*hk*±,W$`{| ϰci>^ـVvuHq}i# v1F3d.! L>k'dž`FpIw}_)BlHR! ENoj,0N1":x~tʩ֌IT2$~qH rcJm߁oa"x`Ź=;ȘX ALyZlKeVFV.NhO\OBsX).^{N/ІP- E* &}mW`}MWU\HBD=<.R((%ыu3(8 \ k$+4hp̃mTK%n:1 聘[Rׄ}w@iA mYp {ث!))P^xAinѰ1pObg~WAx*v'3K$ポ?BrPyS %͙>ş@*} -=2VNqg:WN˽]bĕ7*H9y'@9z9`qvVݗ6^߬6_յk2!3{*,WhYt4hz5ِnʐ}^r=##LPǻYfr#Y;Y}sFS옲`! q Ugt!9jC_ Z4r@&Yu 5}H#x:H \2>tj/h QpS~P ,jnJ^(j?2ΑYD;r-#=vm McĊVgAE* o"n리@->aOAmP$G qE涤s6U}NdQyҡ`2IE/3unoM` ;N/4aj(2+1?.O`[Rs""tlfaȜ[X$];>k ;';YܛFdpc\ \ K[L)sR9a wĺL|k;x<ς N%ox#=ç)QɆJ/3Mz t[MeZ@ƛ@|XCKK%$%~%i?vt7jpRC$S-zW${vb؀g=jq [c |,U.rҤ]%"dn\P}>pZ|茒0x<(%mos%:nDr"@(/nErBZ' ~ҔEG<Fδ%tnyQ\~P^afyRluD-6kl+N{=xf@!T"Tgψ}j#T[Cj; ׎΃XN/߁ROG4q,nAX+ R>ٴzO=XFFs9\|tyxCkgmJ*lƙdZ"];Bʗ&@)'zWpY~n,w4Ѹ|8ɤ*40fȑ̳_亮޽`@,~6DFy/0ՒqV̀y;Ɏ ]ԨS,eH%&!@dY G+rЖ5EYt^u$x[Z`i^RCI*쯮`A NS$F˓ MN{+aT: g9>*(f^(qK>*U 0—Tn~p+EPE~;/,4j5C|ālW*vb"3'#MDUB~lO xX[7l=l?l?(Y #n`fEd"A9 x-E&~E:ˍ-6PSͧyG]uf୉ VdHD<#Ujss1[_sf'rM,vۜGκ|bqR0yK$WL11Ab+VԗwMZ6oC)<IHQvWd_mq-CN$$R:ΏI 6a!xvgIV+ 8S>jji~.Ev=%{2D&=U#qR.޵낄d_%G GP?I{LUsrC ia!Lڞ٨1Vs?o/Dřbd>I;F? K!#ss^?&ٙZ3O&y) n2,M$E9?d?Fiиra[dt!H81*HWlm;ME{9de6~˂iZlZ+xQ 擸ƅ㌭lUnɩ%YݑY<ƾ/"kJn!Rٖo+hSY>pt.XXR8.c n%#T@uEEم>A<Ď{PJ{ffsR /O=~x]7X`J *-cvm+@`H)BV998W@s?cgV [`}/c& |cmootL2u0LZE!u$0R)GJ~^iBʙbe5(m쫬4CH^De*H48$<a.w"BW)-ϰ FL΋9a!K dG'NڪLqoofgbw1\? -AWO'h'`r~y!?:xuS8l],.9m!|sp^L$R"}y> ꆞ(qh ՁW:K^eZJ.4U4z;À]ٷO?4þ׿7kű*d3 ^{Is))WJ'qj=Ъ[::ft蝼v4g3 󷹔 9'EX g]+*ӷOt;  ̉J[;"nll_nQ)&Nf*׍\7!Y] W? <*'/yl{t6TD ;_\1_λ*vcbŘޠbtcنirk ~HQwVbT;5ӟl,0CǥAVLzm%5gY&: Kċ>ۇhq}z=ڪYP.Dڞ4kF-^y=~fsoio0yg{,^26ۙNZMt+L@EOdǐ WJK*OT \~K,q*u]A һl'I ۫? ,GDe1vP'BX-شH'„ePm3$2^rvC'ڍu(d=bj-Ƀ9[ga*P>uCmulCq_OTxobJ0˜JۓhQ=?:][T=L(diש094^F.@h 1,@H"1v,Lob# 6nu6*UBHT-9S Dzv"Y rR@cN&uJM g?ZzÁ )=ǮZ>+Ϸd%zI&6t/UܦB*?Z__MG߭ߙ]R_Jie4А$)1$ B } =ppRt=x@Ηjy s8aRh,F?(Au/[%5#RUy\7{ %8)}XwKtF0:HB9&fGJ_Nc8 #y v^p޽ ¬-J<ƊB!:u5}Q%}=qh4C1G"ᒛ'\r/DdR'г<ȬxNK[D1Q;]z>;ܴbWhC/SXP>_ Hkɮ;KİU AX4Ytֿmg7+y 0 ?35 ˳;-- "ᧇy^.`߻GAdpS6ʗRQ@ W!Dc,܉{D  b[ ]+yٯε%@0ѓ]b<=Oi -le1oZ zP Z,bbL שk ,l2lh%&@%+md?K9oVaM{$=8 )?B`$%<|d^#B^$Z}kgSּTS&oK}XWJtkB]^K L%E?oN_QL鯷nj&\ $b-py˜m)p6J v>%K2xPDøv!>^dS/ω[zk?8h^;<p*پ3 c#Y >Ӑk,E7Zk~fD[DA$?wR!z71 v[Y"&zS/U0JlȐ1hw%WJph`t1OId;#,R0K$jK|q&SVɢKnG4yiK@ӯb5bCKmV)}f>iwN!eQ9zZMyYT[γQ~?2* t@K`+B1Nxv *j2uќeoTGHAu !Anq=Nbֻ7=T|#Mխ p7`ty>B`k=X5i5ehn gD /,V\8?gJ@b0ELs|-JP'? 5~ F?zB  ߾ѓLX-ӌ. x7v zJ*:2"z×|zdsxyu 7֑_ 8e4鮞 &S8Mbt0_aUeZ}B?6B4F P V| HS) FgbWk}vF)?<|pcD `@Cq#5vFqـ#tȌ|3 ܪ7WO_x+ŏ%?dBb٫;;[ȤǠi$ 9=Y tN"%ak7)v R^OyQ2SfIW'5]d"Oe>D%~Ga .@lPZi ?7@痐vzN!&ܵ .˺ӹ[;%ٔIU^&YyL hc7%-V:< fc[1]w3*024' l)9rܼ_`JpRDj(܏-i] c^CEPoM.X?yLXcs(YdۇVʗ R%}![{h$ҏ &Hz7 )!LEj(]tЯE/*hcx7zϬWl7男ŷU 2JzDG1O*Zyib_TBG*+4X`uF|pVw-iȩ?>so8f`jZy=x.ϕ5γ ,CѝMNmc|oHSm5d۰T7Mr!rS U[ZQqց*6=!ٽ ! ߾|ѻ}*ڟrdިE*ndBxteZ~r aȜƜN!-Ž'^-~S O&L<ߺٓgN'R݋]יB cڋPO3ɋ8%'lp!|kzR1 ORh67%$u#lDOK`O>F2`F99܎#k%8~F$pږvE`%ԕbVr1L>'ħZa7?jh[6=%d:$O3s,zKW=vOb aYq-A_=} te3J'\PM)¤s SZ[|Eo]ew^J %T?AfO62awuYҾoGlM9mh97˶X(@_=aU*]>SSPIo{6q>.U,P ց_6i@=55Lsr$׺h+89ĭk9.=憉 MR4rYfvtwo6W0#ϴ:&PL;al|Ap8j:!büwOj#,'= % Óc>H'dq\LL>+%b݁J[3MEҾb:<~  .~yk%`)YhQ+oljE%QY`hCCC9K2d&e[mV'}EyE^ٛ)6ϱ6;L, ^ҎQff0goK;K݌wR߀Q!O7p˜BpAT.tu;7 SOи4@s;à?Jڸ{`%}gْaЗaNtBA#:gXR #+c*q&*8f?a=\Xc~M= ]jI9ͲXG H3 ),g?5v~l0S^J(BD@Hwv7'emtĥw'E<@$e T |{>ͣ)1a,OiZ(%fW@4:m²_^pZ]0A`ǯ|۪1|X"pw)Gޓv8-ـ:/C(@I|ƕOgsҦgA;z}sm]Y7]xi "y)ADM䃗.p@N92V~nä&Ͼur;l[Zn&OVSF]LR,..&J ޘȁmIdZXK#(|6p[n-cXpG#(k ][u֝[ @J/8| k%" toXD / vbyv& bATXڧg\Q/mg6B_ gzNjˏ*V8IL d#Y7+ZOR! )%>ua[#B5i,{K`c r wIb@{"ơ`Y+W 5'~:W Ȝ!]eC/&!]F$ƚ4i-NW;# a6(|Ps5*-Jyc@C Cq?ק3%Pdr2/O[9Ћ~NvC#"(W}ZgȦm7ЬH;b'w;|>$2vSKR0~ϕwtŰg$36Qz㓫Uy({嚤˛qt .{]|0S֢a+ӏ[&Z I2++Op9&Pa!PqSL7t!8r3;S7mF >gQ.ls065I,C 1,@.9;p g&5]tr_I[7"/=6,YE^S\MKd]O$D$Kxnwaĸ0`.Lqu=Be' МNu%M]"|8 bjW\z>Wg6_y ~n8l<,۽VN_ҶodzM-saSQv1$&XRzϰ13V:IX@©;xdǦҨw0cIJ~ܦ4RW'L*{M|gSVJo#TN4!jŒ*ئy({K;xeCFYN11{x_8PO;G<>b)>{.CWB @0ud-b^ ȹ Ά;k֧~rg/N0.U Ԗz|,v/ 'X͉VvaeU=TW% .Ӆ\UʌBi1h젾 j\d%ϸ{fݜ{*d\9 ƒG%aS5QZKO ;%Á&+QS"Rй<" iOuoߩY儥mރb d6t0'>l[|X4{ERĂR[,Rʡr7Nv%hlՍ7IpܡBn|Qq}-a+W(6ze\G˵Dx1*/ _3.C 6 4~|Esߣ[b}KL$zC6g٣[-{^eNCC HyqfUTi;B"b3S҇mO!Hk} `[V9d MkRʊŤ &i-f% }j]#˪cCCӣ˷¯eܺ3뇳͟zJݥ26+.I-f> $ۙ/a.h@GApBWy$̇mkuZcVxc%n|jb%ıq)v-75r>|2S|!Ea({\h޲WR~АadfhuWq`ZX=0hw\0Gqn0T{PT}QSWASzڞ^gL0aާ `"}tഴPԼMm`j1ԛGlA q ~Qe(PbOiS,r58-L"Q FQ3ڟע4Js)=#rTZyCp~NQmר>JKE;H 7Ҫzl9;?ytrk0u*e)V3=%ڵ#wbdn񖤰 }7 &F~^+E% {QJ (U"q= TkgAMN`"fwbeP6B y^ zR'"bj]534!T*y\kx7i A*dTi\J "8Q˜ 5ܡ->7lVSiH&bP񵂘%^V}­@AL luLv?4O>zתx(aZD!1"W<"f&+]w~-6:±ca;,̊:GZWL2`('(n\' vXh&게!@!!CؔmQbk ;vTff *ݿA5( V[} B̪!k:K7{%W7zeѴ m8} UhGjԥQ(,\8tkgh}]~&~j\a;]S ȧ&SV?'3gQ!Q މG;e>K.Aخ2Fbߎg )*;XD˓v&c Hh%N7Oyd$O: Dl)ծQ\w[(r *W|Kܵ(|úͧg8=&(u_o1RVS鎻kgv=ɨa"V1ת]ݯl*Ad}D/BrܵIdܔKL2ww\5蚝;jxJeOCFt%_(-b 5uQؾ%=eٓPn.7٢Τ y3m}r%4~Nt<9 XE7B&PB鈒*#d0fo,+dP i95(QjFIUV oasϷ6_-_GV~݈WG sA޻8SI5첩an=1RaWıŐɢ\/@,-ȩQ3B Ʌ?wfVl c_VX1PEG fku+/vHK]T/9"p$\k.wX,qt{[ {De{^o$e}TY!t:ZL)l?kq27 ͐峸5V\,Ʈלi/`[Ɠ@ [&!8LZ)rV"qjY(QڛNP J3KNN4vEϿk+Pm%RrW-\),Qn+E Nrǃ%ϺJڍO7&tZ0)OC#Jb1]b!:g)f'Vd RW{$JnD"_ީ-YKP~ٔfd NQ88zi|jCFW `PMfk(e@pV?d-˗5q8̭18<`fH&GFx`y2pej̞; T^;~`6㳸@ Q$e^' |bѰp3=NШ'-"R'U;+s&-9L϶$E<=O\uG8Y\ɬZKάl-^tHCF ֔vDJZ(WHJ/W2wZYԃc2 _geb>j[^Thzax_&.j }<7o1O}|gb1zt!wtn#42$VE׫m*Q ;hStvoLԼ!i 9N"؜v=O:Fщ|Ed{+$msȟ}9.*-.?x7KLw/n&"%]rcܖpota0M_3L91 h oƤ-q*=@h:NSj'>ʞV}#iv@D#{/r\.rq`dl) wd%[<®x> Bryu(DxL;НeU$]rF#]#?*~_-48~ c{}tϢ> ɡ7Kt0\=xYĩ 4^4"Q4r@ɴO|_:W}Z!oRʗl{_*U@~/3;`UzJALZc]3FfL^ا|x*囸i=mӼ)7PrA+?!oU?,ӑ:qCxP:Q~$VĐX D\Czr޼gz-aP6IF &[dͣ;aQtt^,ܓS5`N)ƕlgtm8 (H 'c|3n.>f2D58_ZAgKL8>^PЙ+k1i 6T8ws.zKO@ly%n5د»ЗacJƹ,Kh5?ߣ=NwO€ƞ3+s3.M5*deG]R8OPn( фqz%,*c=Cd3ikK purvF;%RAX\{ݧk)wSZｮҔՁ9p2Džy.T_JiSAv+CB%ЉEt:dzbB; CF-F;q#%Dz>7)gu$lsKGP cT4Ik$lѢOn\s ,yRBSwQ<3ЃOZ#$ɃcHoYL|J{VTFc0k w"65Sz5ahtEY֓4s0>&.'/ղ{?(^LϺ{l,~Xؾޟ%6#xO%OK`$QvIhrk66jpzO&A*C8vwu  }LpJvi0yQ\mzߛ*˙ʵ16Z.#U0RwVv;İgo>K*'6T]13kۨ@ 5fx#^38D4ܗxerӡzm'N>Ox]ol; \ݻ!)R(E`5aDo -/j\m s"2 }#@%8׳4 ^3a ݊H^HK{ZYn@}ap^9{ MCA{L 8⺩葒 <퐜j?\)+3TYc#8j˲hq_>OyszqjMV!Kj/ y|ڦ8{Q,]EuX>FF~L1L (%gDyډwPh g(q_~oy[Y.ׅ{r!/^aGVVOO70^E=ځ:(9C굈FG5us'1,_gu@@7ZmX˿Z\)shf|.|k.{L+8Bsba g=/D5H Z,h+3υs*͕P12]S>3Q$rXK`}Nb^F\F&ϔQ<6J572a$#<ԯ'ab U $Zsq/ a{`% ٣^:pvc3StTLUHZmr`C׶D/DKj~CneL ?vc (N1-7c H jNpshke" |m( _nck]:"pJGcoݘsIĩKFU`&i"5->",7&)uh4}:NG౵H#j=;<*"y&=E;0Gz-Kd`2U&Y$PN[UG]l7MU}x~ZXh %QVOPN'xʼT ~pO>xE ]/Q/~<5yU;,(g%%θ?﷝ޢ(<; $LwC ,[{:ܘƔϭ.K[c 6~ҢH>nl]PldXe1ΆlY8t{u uUpF~#?N؎[]䶰pJM l4Y1 4SA} =5¬%6Á'n!:Q .Ƚʮ;' ]Pz+6!-9ZD\cfVsAx[UǢKz2M F %㯜䓨DpBCK!VE3[,\dhiր nLώ`)PdVf7 {-w(xvs*' o(#]cJL ߧ>ewu5٤eNzc֥nr9KԐ2K:Bs9GQۿ1Ɵ뇈Eyz]_jC:j,&e.%H Ova[SvBB6O2Dx왲Ikമgޟg?P]2a'F'`#݄k@,I*P|+XSsgû4 #뒞oJVHIxw^qp%:AqRż:$d6a&/;-v]nݧlBº9R93OI G<~]Ne-% zgTt򔜸 /x* qf@={iuZHy\  NX.J.܉z36f^K)+X>{P_~z>L"n%Iy dS o۰vHx(1mJă l-_Kiw˛ĸL >S_jsPn3W94+ 5(kѺS=z׌G.Hu }bu2K_.kUcQڢ-j揈r-m_piĝ|pnQBqKvd * y=DostNԜy i0\z|[rhn#kPw7j`%㋟UY+!3:E͚?!w[[L.fq+'PkO3r׏O.A|06-_%&x~'\cXTfƍMPTO-UA9h?oGTGx+"&duc5$&%m#^17^Jc"ɣ;>sA>`4\ =@_2jId_ p4/naJwA=A vF{NIEhh1IW$#|Jbx;xk2 il{_ Կ ʞޖq| twNOַPHr׃N[~j"ƪ s)i4ߙU}u[~'')K8P ,kie{dzTxnA$@:s}JK3 Q}$k!y48oDkw$C6h[H}~= d;38d>L0}uz=46!J ?QTŭO 27@'(YI BULR"/f6"TT'_KPXOaFMq{~b'ԡ%B|ÆE6!caIϏwp\L lFr$1:6,O;kf-?{nیfdaq)5U?X+_fe{o͆ w V+MDHFy< X\UU^㙷}l@)jV;$ޘn/2H'Rd`hrzv/^WK:jF\ TęW6_š*A|#];oVk!fغiK e0xA I| ,2h8(|,~:;4Q1I6B'0Xfx4 |+Ŷ6Sۑi:cL ϧ7iw @Ws,t?[.OXn<爢fR~,yP&Ҩۙ%n0_YCsNx!?\m{kmy>W(C`Ͽo$)B(WW[Ob~cp:cs|[ft3lnQ X!t#: Y!2cZN8{²fwY;O  K Jً#Cf C^ͳ?heZ,KڄUWy_ldNt1rgyWYxSRd1PҾ˼n(.Zb:pzMp>! *A5E{ԟ+ I Ū3bzKoc;VSxu7\țxZ搪,>5%A>t} NZ){e1k?zO&r6=L~!44㖥7І.Zbo|*`8pTYn`@& ?74gOBgU*`"-7n&zyhg3`]'aF$U#L M>۠/: 3h3C2mWk+,ݖ4$0K ;zwx}fEI) &͛h)بE'Mg蚁x%Q9 qˀYƵj懨hIn_r6s|$ > axփ|7o8:n_9:=Ə軨+#?vZ<-EJkבj*a%:ղ*"Ү,d<bЅ)vEF.P0HHphJ"]ý*ylAw%͌& a !P%=W'Se*8ΥWlO}C҉=_"U693Gb(W`Oµr)]6}{q;eJ"@AZG@_URs=Coka_iCؠA?lOI(e,#s$ɀ8hڃ&iSL`YTG"e#ߗA,TjgLO.zĄ`>5RߜW+_4XfCiL/l7&HnhL t-"{5gϞhVc#yz[:;ґC}6{Bת#K!Kk\w74QG6+$&kj:;_f?:8qdeۤ͟ _ݤnOu {K@*DzFaGd\m%kLd+=BaD@hଣ2' ĚE mCWU5$%cj:CA.qFԭ7! FQX\rm]O =+b(O@ vIja2EʋU8wAI<&n2;N$ZeM&?)gp,RֵhA yx5P4 ^0)[INEJe1*+{o;?CoUoiTPnK:Vs+s5j-.N3\Z?sZuIMC*!~ z{+U0!X<ەmV<݁<(>ϛ!iM XV2FsRYV+n;$H4L*f ZAV5dEk@ҝ}t߻RqR53ZS3/R  M5hRmy [@ uAJ[} .99swla؞^Ged9e@Hk6/-Z QIG jWg}` 2"CBZPnVpY*dft)R6eA֕sn[9Wvl .TGJ I^+ U7"K,fOܙ>6_Yf Bʹ0MvQ RRDA88#İaQ/urH8iPx7H]yiG¯a =<}+_H $Еy 6i Ma pWT4_)>?\A@Uw ]pt_ۓ1 [z{D%v,6דּU/XmQn?6+\Bá6/x sP 1h߮AQeDPŚbҁqo}yfWe}2gB!<yۓTYb"z'8w‰ȺtsFWgLlO3bIow]P@x?^`+ىӆƮt#ZafmGhN6(m됈' ^NT[(>>~4͠ Kq?;PZ#bTq«QOgbID-|fFҳVl%u8)7d8'iQhq9o2YL  Y#m . |ĺ&* ю3c8%пc (t"tqb/*r0o/o}Xrwq唟z\b.']݄4 +cLxw0`̭m 9Ԟ!Ǡ Mjaؑ_ 1 i2`mTWlf+,XyN?#7Ωm֙=1z=<|w 5vzXSHU3 $w!c&&c|&Npo~9iL ."&qlUV)1%m` \`kMxC'S'Q[]- .& zᅺ\x(O!Ӱ2yF4nU] ZŜm*Hwc'S+ug;"3$:{Gj;) k3@_* 2z]"G;qs"N=Q}05¦O{&Y?Шͣ{:.l )i,H#}g@_@J$iꅭ+|".C+{PW}Z^VRj]uiU~Y¤o= P'~iܧ6{S8 ?mzyOnH\f˽#Ί }7P^JDnx> ib__x߰ ~#%)ґmĉ0e%)Y#/XmaghyQU㣆G"Kq}sKz  IaƸ wRd\& V Bt%L{q>\'8Iw=@Ba'O b"^ ,n{#=vGh5.ٜ ڞ Y ΧIJM!f0GsޫF=OB.:6mv 7CA^vLO$wa t)X.+/)^̮^3wX>ۭV Xu ׏U)(U#/`ϧ6XC .Z)_Yq q`M_ZToX V;[N1:cD,ez!;?45oTjcoP.s=xO>+3#:y?ކӵJDJ%:[KzL[c)Q ^`o"`]8wy(~#|ML=uV^[ޘk9Puwt[GS *%iu-pg&уcKA̞+`3f2!nw.6L5VMvdҾ,ղ-:Vg5(C}*XSq`Φ 0>t`o bՖ_an+r|OE#"kgsgKXe|4҇EpeMTKP`ucj?^2Q cF'`ec8kɏ0g@(]OjOӞg,LfrDjԮҮ ;`7A9\tD>fΟvEr )"SZF]">o͌)i_ɦ3[.,  :J]ZheNLOH(ݪ=AÏ"=SڗnBI31 Mn]5Wݞw?YOoUotέ1&f j7.'$Y)YEp$/myqP_S\\*AnvKsڊY2H7Mlna;M&5]BL vqOU"a !BDfҡhfaۍ0VjGyr3L|F(鍆r4qϼ<J,M:QQp-ymVNKUsgLٌ_k2j56ŎJ2wXNej2D e7M[W zZ;)/^ cQ6EbBjLɚb #Gr'^[rU|I}=n~gk '[E|Aϑy"ɥ-4sg#*F,(N:)hVhn00' ~ {\x' HJC2G¸T, :+-d9 ̀rB (BUI/O ƈђ;rD]ob*+UsJ,1K)3]<ڝ;]t:0}-_ IiReF~of_ AK_aXb_ؘ@.!D=ɬ^{/(GD\i^ #bq`S~5NiR؉bO@޲-M{#|"ĭ©^u-J;-+\n?'W;9Z{KPeHB.b([z3Jlƙ58۟ '7̃]2 q0b20Ke3R2P+i.Uk吲:l? )"_R[2SuG0\ Mqs4RD6Aj4Kno'LwTw讓FףAdž@®0@eWx=WT{GOsg[ <ù.Mg%T `y`΃N,)~>Mfml|{+ΰ 򋕇6ȼ3,u[1PX44ꀱuD"gb*JHwPZުPTl_I`W`ET٨!PV76(mCA gNHs$0%uk ^6_W2VrGZh木7-]%G"S]`L00&b* #5G6gB?VNF2Ƿd3.~QrS^0̃uH7!usm|Fa gynhSB%\G>4w L/LuSm43ӜGO6ַ4]bFдdND`Rͣ0"/:$PwGҴpP`CYg-"4%_0jo_ϋY)g+}0oM(1>,d^bm>$o qwT*(2 '<_3h¾%II7b88FnF:p tNC;IyMF!2HP_LfP?jga- 1fSڵK->WregbkB4[w<_t 2+'sq=ԞhmOKE$6*ɜI됏'x0w^mC=bx?9b(?`qpA'iywB"i,t:oӸ*Fe!i7j#o#x=˜cJK%FW's{vx}}~$CB .Cn|Zc'0uc%".K!@ٙvæyJ^ECЀ)<\4&*hPd!Φ=9ǯ$DUf5/W>Lxm@IO6 T'O Rɝo #yn$|I *70akO,#t2b/2Ĭ@'TgoJfh73R:knNp5`xp{II6t,ߒoQv;}uT+s1ޔ@Kwc mX4f@ M OJ>&6>t]N"^۱p>;TWơ O)Yi`|% N;.sW+3U$ OmYgT5D"1pgȕaW}1,Fh{×6xqt(hqAgPbl u^Fg؛T/Ppk&Y"WBOƨëdLa=B r܏_p=J1wir8A!}" ON{Y73EoS 1&Ა(`(#|<^r[LN z+Sj/Z@ zյ8^_d\donς+ 7D$mQCp,:QΒpq)6rG:Y`Laaʦ̙2>1[V$?;Ȁ}HGn?x=j؂*7]<\n=X;rK e)ZKI (`tRVHIϏj(vbe/:&3;?mV -hR+EhB 6G@^ÓU2!۟Y iÕ};ÿ¥.:rehBK;W+};w3Fzt0]6 )q+]Y3P-cqw])J, 4bIiGC%!h5-xt5?;pȽ ^bS7W9[//@Fàӎ4 -!r.dz Z `b~j%YTyPF~̎ӖY]Q8`lz5MEe=7) m)x'a]G;?.U Hs ^ڒUnAv?7O~+2ĥ;#{;|?PLiN#=f7؞*<"me[s@&J#ȹY-M Uf\bB-I2oRLJjNױ7.gm.Puqmv:! W[K]9`U ;f&v,|ޕ4PxAQ6إ1 {G~j錤PB{2s:\CSԒ)G΃f{b(ë h(nމy-m!1[aWE;@s^"ŶG{d>.a/=.V{P4~+`1ø, W3EU^.2GU,<\bMA\PTz] _H*m셍*8$dd U&t^I KW+"Z@%fϊqʏգ)7L#|])/lcHjݎS n~ɑRXrf)5Y)}\;ғK$iS4r&iiJ`#AaZ < =P)`H ijs.HƏl2c2n!qb(9y$_)9,!UCAgn>ҥMP#&~,YMZqu8߿Z%_w74-YӅktJtQ+F35gރ?(QyBY|RmQX4{ #Z]5W<Fi& l,F<>eMt? j ȆDX,q+RҌzl]/k4lCl>~]I)4tt$_&ʪkf!8CJ-p"tP' †׬ ܏ȰAՎL-1u#z4bѣknhK4UE.D!KBV\|D: MNC@|1QJyNDyG k lς;>*cw퇯ƶHe{ȗEx2C u%~ЀVHuEL)#к:zpdFC.:R 8ՂwI%ZMרF.KC皇vu ݸCFT%B La/hwc.8$lAfڤ44pe>C2w|Q!@ M*=mX BPzCL1bIɣbYmppA/|z&}={EHg2'oRH0Ğ Ȁ$SJqlhGMkYFpuғ1܏uMs,yD?sa'YsjCiGͤ¹'}E8{ف&0WRȓ/4nnbĉ\л= I6齵\(->|Wι2Ap!EhaC|EUkS:at3z#{ v68[s8Or̺ǔobCau\w5q=l,b`e4˻o֋"m3G>q>$XNVP1&T}\u|[cb qMp\(2ֳؿgM>~imv/*Hj{ lAь0GBBLm@/g|˛?JK}ScZ+_7c>.7? a:qCP9G*Q 9h琽ܓJeN"cg1 2dC&4 I-_ Op]3<1Vv-0 ''͍8*}Ξ c NrSSPCHT@ilxFy :M:ZiU YƳ"y(J89 "f֩oD- ٜaֹѩ?)ro*eRӌK{g_K?NtfWץeZord&_:CXyDLe!fd7\e4x ]pibBݑM/7@)VD ^& -vӂYnL>D{ ]39p,BrYÕ FmV-:٧kWtlza,}[iX -`^ENK8N6= hWba`{"c5g,v/A&Lͤeԥ(™J IuQ.'oshݥ}ȿ/E1E AmC0odB=&{ODy2U{9uГ7p ]ᑨx>cؙǫWUkQ7MB8U /_0RItf:;H RD x슧rDfJf8M>)*h6E.܇:VĹ "C KzKwK(a [aEQ;'3X eT%9|ۄ0FݪDTy,Pj E3 B;;Q&58S -;g}yd=iXXZ9RptՇϗg3YCx܁(>y-Qj]1ȼk%NCu"+Mh|?qQ~G*V0K09(ÉJQ!1+V9l9Z:>he\FӃ^肓lC_]I#-v6Yֻ '+Sg{Yr;WVp:['.]MYR!FT6BXtxI\#cDsMtx"lL>ʗo^@k6-A1#HB回"Kc 8xḋ[^]3K)+1`/Ru׳s4L>6pmx8y2Tnٻz\j l0:|qKR0nEor`Ⱥ (HR1?Ū0JSu##g}%mJNo7qDR{6-e A'rs0nu6 <vW0I2 tTIOq(B!qWI[h4QpǤ;PmJ2]?[b"SL"+䨕dl+t{j#p( Y&]~xCW13կ ]|f7 kP5`x a'sYOH3)LNg3Gl=DOaL&XH!ɼ_6y-tZT,Q))=pn4idF;rfP|3sWψ%Pg<'|fU2^q71y( n0aTV"5b&%g) naBD1*~ȏ ’7,Dg,{b*QCk0UK5"))X(b GZQmg@Iz &/C (qdv}(mc+ SmWW6H<i| 1ӫLE1XY YgN`ǃsYL t=KoX9$ kuX#e,k|v22V8 cAӸ G+3)+*AT 4_ibGeȯr(>Ob_ܝmXg.۳.46wRA@v'tK I[ĨQhzz,q;:[ F12!2Z{"1[D?F}aJreW&fef\O7Ok@Yq<,#\LTV- (j[IN-r:|V,xR85WS]UZh?q J! 7T0 XĀy-,Rk v_9xMT Hۭ+npjy{* {mT=ϳ[1nڸïAblUI:|F &,RXXS;7g;FNԺ:ԪsN>_"jmUV;w"@ t/wނS:FSD|Cv@ۂFsJ_s T+XJOAt-FH=|HG""N(n#bW ʃ/F;j_l3 |5)  ѶtF OY:=5$Vs4&$\E@ VFGb}YT8nw%LF` T?DccmkyR*ClKgӨ)y{ߢf 6 $5dixq@_Ol)BkJqD;ѷؽ֫()Z3D;R@z:R){N.`Rj zw r%߂F_ۮk3`K O(v bs K%q)Yϻ:Q^7dJSn T.#Wk bYAFOr>GLtTۃN;6=knv4Xa 6 ɭ`>cN{F+ &կ1%̚h ViR߽}L0ϩ̀0;e %zlΟCV[#Df7ڍkʀ. {`"+rmڋE \˙/ R\a=txgB$!StQF/͞C~j1H?S -MHB)Ee}l{$SĒ3̜65  fno5Cv,'^#|2 XنDK$S@M8]ݑ/Ɏ& =۲CE>HwwW"P[3X 6j[ D&aA:Zb52IVo ]z鶄/Z*et^C8z_cyx MEkOX EƙjHci<\d`Q9]هCS64d?!D֣F3P |r{*[8Dk[rs=Y:u+-#1Q֚_- joBӗMˀfbCXRlH"4U#fJitrr?}sdؤ[11Y\`KK?xtJ ,jCF,13 VFIMEГvD Y O3k 瓡9,;D8Y6e c%?âL -HgϤ3n/#Aܝw]v;} #2wl6ItĿS$TZhfŀ ax KSz׵T!e7igӚ*rMDul*#PK%omRƗ4Pfxi.Pj;Bk]ĠL J`h3 )e[Ыx~>F\ @F}d m%MgG60Rs8fiWI~ݰod۝G3jJ0~)cp;$Z^Yt*!!Ɩ7J*h8p͋7je"i%P];TSz3| I6]# i {WiLYKBU(c,Kva#(|&?5 "_[+>v҈gh_elqKaU:a&$TnCo ӆ~(AsW]^ D؎6]G>>m-1g IڟOd47aNS\Y<6Yľc ]s2\[; c[ԷyO&24fzU _5ȡ'5 LvLu S.5'(ܣ~B˸{-*w}y jzTopQ͜/};rWND8K*e8J(͂z"ʧWE=s^R{ol'J?-0Gסvօ>öYs<NJ5 lZwԇK.tb C8cң, S~ZsYCd~axa/N {F)'P6sЋ>G.s8YwV NtG ;\,eFwC)raV#ufG6p"!0uL1@K^{ Z' z|-4AvOϠ5\X^:>1:tUCF hHY7Y͝|I9GKs Vߗ(6/2}B鑲);e i[@F&)ď F_+qaF-DBU 譮T =_I˱j{-Qُ)O` h}?f`] gBcBaΪ OCVxvآ["5j x ?`i }}㬦v;*Ó ;1lY f%cO1rP\Ȗt+T1LQ-pMGP(?@^ؓZS|'wf 1՟Jh i .W%30}Rvdh)f4Skgcytb`*^ͤ4bQy?-kdTOMgS\휞]3װaG2 GNVQ^O'(# <mzϯFf60r`cp$,O;`ps9zK[:YFGS%)j/U`fc?k+ ^6tۙNlWzRiUݒJ 16a[ t鮆3G>qUͪVl;껞-9|C K8l{Eh|~c( p0aNH}Y4bFN^ Uk0Kj9tnxP7,Gw/+ f UgbQ 7:x$ 2k}-DC[ V 2iTH[ #;sG;*;/ T:_|7;7E|3pTMފ80|#FˁZVaVRջ?WçAkGetJė MV ip^w&֪F +!/EJG @n0`:6k@fH=ʭ6L,B󴎋FL!W+eľES #aLΓpZvXiu1~N?h-ij$Gr۾Ot7[Ir-ЗK‹qB1ٲ S75A)§y?x-^=:)'Nkq;?j##.Rp~e   G yYOY5ܛq*}Bb.Ο䵹2:) aCܡFHt0Ş^|(ћ3!Ӊ.ks_&s&*4諲)0dl@'*!,hR-GNHCgH\)e^"nH칒Ϙ9kd=Yf=aV3a9klc{BlE QUKě4af ++Q =gj8.Гx.X쟰&סnHDǁjU zsLv?iB7zMPN?dzޅQJ&_^[D}R+^Ņ/ٳK$s򢟅dlq-odoN@Ϫ&weyZXX߼,1:cX0aI7[x]#H3sf]l u4PY6n/7GܷwEarT!v|6>2(m0qgq&Kk_)-y$Fo{7sSfMnpWǣ˕ݶ^{h&WޢC(zs塢Lo#U pH1=lvbgkM1k[N8ťUW6H:ƮvOq93XOE"oE`Eh E5~6zw5l{q1!(rl6\Y;Vɑ)8h.[0Xz-.r-ޅ d bWn1 8]תU.OCʜluMW6:J~^ٕ֔2 J{HaK n iWng\D9<&ui"&qALNV`-0-Y]Mڏz9bcxP7BzᛩFyݷ i(k.u7<\ұ_g߽9}j,wrnL@4t\ʦNB$\+((5&rb@@hC;ݚ Q @TP @uu<Ak G,PD65<Ȗܘ-G|PR0mPf?G]AD֩6(qz",M=UQç;o)F`QU\kĮ4Iz&ᘠ`nEq|51.}ƅx0@T=;fs[13-HAFE/W -Cx԰%!x54uLX@1(ެ62H=1z˜,Ta;adc3;|Y牀`5z,a EBNmQ#h ZƋ3\.%ꢲq9#)Z :b-!} Xl{EIOSoAHV+EK6ﰸknpkP bFO=NEoC]f4 5j/OrSxZjrmen>ٗ=PF{k hޝ&``uL1/;z#(Itc{ oaϜITmY0 t>$O4*hb(O, %DD+H2ͰNB"3ԔV-z*y9N+*,edVq4? F\r^!w+@z5PEwۭF!䐙Q%_A~'2E|r@>Lwɔw }ꔣ# OD<DX]+׋C0dF],M]Q C+k8w_m*¿|t$I`zy,Mgc0ӄ|GP8%ֆ#Ay;'˄g+60J %aIrܯ~A<ճ>;q]oqv3=/ ~-֘h8D?M|BP[=KZı%GZMbVks3_}%p:GˋKf+hy^k7_Nycjm2fI/̧V,V7tH)e)EOyB%s5^t>?<9CPw ,gb[>#|QC<1=MO} ي{ܣISqH;*ψ,,Ja4&[yˤWG@/5i,p hT:SivD^*L%,w< ږ{+z]_N'IZ2y5=PXS "e*@aD47 qRT&3aod3 G,$ƉJs(TXp*-D&-%h =^0n f9OdQrr jATD`W зKT&@ѯ?2U!ټ5V(0uy7X\6tŏ{4oqkS fׂצRBN]k 4>\VCl)АښddYZNLiv~BA ;3s] zCIibh8eETq& HN@ N&tvYbH}߽Ź\{ %p^:.1Ojs%B??tCp)7a2 L$%'9jQh1NZ1 ~`S-qhuJCda2.z)Sj_+ y^PؑE]@=`A'ȁ@c8=%KXaqr,Y fc|숪P`R]_JGkpa`KKvvD$=L>H24Ă_ԗ{TÌ`j̊9D"y^g->\3K:R.>~#P-܆4^v\ @܇BĘcz$+l9T\*jż׍+jD/Z H#f@RXC~~Z'{,-U34lC藯 {ֽm^#h9q88ڷESj/Yh_^5`L8"o v!7 džlF|">>vyZ}Q+:,<#]*H~%ORem ©;A ,֛p'32UoUg]YiۇRUqbcs:1uG:蔌m*Bl$+()bm&3X]%FUCWQU&{,b3L6Bkt~-Pɂ՘7Q7K/xǛ#"r-sIdCʈm$U%Y恏|;`#'2܉+Heb:1:|ď3vslB/XIwɾϕq(A8vq*37EÐh Bs@kH-ྪskI]%L -;'.-%8۰,;Q{'FHTSYKa˘l-;&MDɴ}sYq^|kNوT[fJ(F!J_Q Ek#MIUxkL4d8CBI!1anI"=꽔Ym0 GOuH"Fj^5UO!уQfmXAP(ߥ5L(ȼC9Y-j.gEDEc-l[mz~[N4|?V ! 3Ȥu'1'CBj7;v+zW$cd6(cXT肄/^Rjl3jJhC7Ƃ%x ATZ<(PRȏh`WF&y:f I7,oň xDҦ#1zT7]RTQKS{R; #P%ܨǺ<*oX+xhNZa B[kDѳO/4>:93t4p3r<>MPZ:~zɵ9}_3`nGC*0-mo rDho07҈c,ځ$XTzD{1⣭I4tZ2=pe1 KE|!=+#Ml SSDAOB[a@0/gSQ@%F12>U.s ڴ!M>p.V}I|Ѡ%"\Ófso7J>X-V$_(HE61- Z4+=()OP3ӣ\M7-\ur.03T^G]Fyg:M,N6 gFIV$-j-"$g+`saaH:Z0t/ǗsB:9?T='ot璝p@K52dc͒m̺HDP{(U⬰ '}R~arGZi 9篾*922Y Gį|n >U#2Dո.s.; YfYgrF wnb^ =؍Bt{L ⴑsp -&:0C6 o&M{h{5 yA?Y {1'jv tccj| ݾ_ORĿKɿXDP*cū_kƥ8}'@ ]A{ìpEÂT\k>=%{[%:8{kޞ3zWk&ߛ@^3<:WbNz˚?0v%AJ (㦜`W|ʜsq%k‰qe> @uZdo.xXyS'")QgGWSaCDmX3 Kwf;ieHgS M!g%*C7ktXK^ <(= p WJtx0ˆr-@,oyu3ƥM$C x3gsM YhDٹU%H]FJrSfZ4 E92Zj$1m]|8v'F~{fQì`od/׍Kִ>K"T8> w& /`h XuBl{cG< G1{!g0ыfղQ]XZ")Eϣď79# j<}dMliԊHh-K"~Pdb9>CQ"[\qqΫb`Е0D=`Kreي I$W oɯ^uuIzeGVq0SYɘ%jM8#VIr4hN@Q$Dch4*XG6L)NtSV@.Pa0b2*Y&@7ԣx$a Oc=׊|.-0>384v9||/!Uc7+4)oKZŝRlǹ +zBI. Mũ *O.ۙyX r(wBN$o5jOxMt:.8 8 f#$MۙXKMܲ%p;vf[ D'?munQ} _)i#;,9AӰp+~bM/uVd:kbY1HXd'o93?FW _$!?FRأ{ڹ@Mqۻόp˻KY@;݉|_(j^1G0!Ŷ!2ٙ/MW$Z촨B!pt5,]9&b&2?!\TڽՂ련-NhDtJ}ڱdgP?,NU"#'y. k3e݋wuEFa{RUl;-_?v.CTw[HyEE'km2Bu.!H8ľN{Z?~Qꖌd,=jQ]8V+` ͕>U12c ѺJw[8[tqͮoE% vYyY&4!K`t[;VD J%xZ-4_\]x\v~LW\(Ӄ5tC$ Q%R{`1d%K>Hj&2S,*PS58yGyߐ[| 6w n[gC$jK玟rk3k/۰/cF1C/vnN*<&yYNkeux_::KT\³&|%-}&hSi\TWV/?WGSo+Wa"`LM߽2Q#;ڗkѿT q? ^TK74:4NM0W dWwDuذNg2Y72X>Nȵ^'.viXeljx \N b`XqiWE*w A>B ↟Hbd`og1Z{4&GYWSv& drdB-/ J5fLd\S.K0u48U<mBM$MSzmqAY"'f, -~60l8WI+@S*~ P$$ޠ9'I{XpR:Li;&L1ϛ$/yͥb9(}9<4pɥb1Hj@4<$òJZkL1!X$'@v 19ۑiap 055!7HD/n"iE4Y`AX׍Vߖb':5>DŽBbPYU"3ױCs bdzPC$B o4_B$k3| @M4kֈgfRA=:WkT81F]JB(wٷ2sctJnM+q>笢uŇ~|hqY# Cc@%!VFrumKHaV@.Uo̐_BAhS' ]szyմt{e˛llc.N?M k`Q+#}YaHC/#J&s )i{Pۚ'FZ֠%b \j|ˎKGqF&hRmPLڌV@Z{O{$[XKhao6nvAf)-Xz+򑻖oP]R^KII2;]U~sZ!K_`i];~ŧ-cq%%>9Hb٘ u݈ dS# 4$8I\uoI+>_X(Y€.9XQNV[1"#5 j(]tcS Q̞˥vA1P.hМi͐pP -0V%UV6 ؞YccN*mvi . =K6Sg޾ ݃+i`C[`[. U+!$jnhϣI,dFuW#hI4h24p SO(mR pPvy$hGI885F\:{!VaWX*7`7|)* Po'Ώh7*W+Ew Vq5! i>)\82a:@Tnkx]1fj@(._yyW 3nMF:zlvT Q*'Qs ?*{Y.|mb~rt#UժulsR3CuRVXa5]E tbQQŝH@:S$(z >ꍴ7)&#~ƪ)3 Z6 W ?\ɥvB8]L!+аtNʵ$n{jєÚ=&1es2Ipsϛ$1eI.1et X&|M|A <[ԞdYc5 Li8(c[ Fcd:4jT_jcڧ`r<$*;vP:X7NʣetvM>lz[ <LOi (yI??ӊJ;6U.{ Af[{IXї5|ٳQelu]XܐݙQZ掵%s)D&Bۭ&9F@FA[Demey=zV>fifqW`Igk_;93|n=AxPA8C[fYXwq:;rhsE)xpbꒃ{7Et>_Ճ@w. _? >K><$gKҾ >.~]6u?­y\~߄xo4٩?& o /[yJ!1;/nκba_cA=[􊜰^"\7{EbcȦ7εŽdk4w3YH@]KsBg'.T6|YwK>9T@GPsN{j KI:..Ig$zJ:5b݁7MܦO")Ӭ!Ѳ@q|`n4C5">@D%)Zld~ÇGY ;:R9K #լ[{01ǐ&SyRzy'9֔SYǨ`wŠ|a:xllc0$^st3y9c.tĵN5 h‘5%4iMi%΋2c ɤ?ujPz*Q==P:ld ̥|!\ګ(،)/wϑ| ?"ڧl4Wui~jKP3AȂYp|"qkF',g.ÜK-45x8k@f83촘 ^@'B)4>K0[ IK=3I<Y?V,Q8XCi"]Fr#I|"LoÝ077L z6俚@V ЅmJ1yh}B{ aa˽nzE_$-7jËijظi:G]MJt=lގ()N$9(Q:Y+$nyjzLZ?Z V0B~;p>ޯ G'Uv5N_(ariGV|)?uc:Z=/ Q8&zt8j?J!<>Ѐ yA l:]S/qb)oЈ6pcblf]@Ӗ@/B e9!ư q,m3Tj|uV$ [\^ϡ&qL4` &HNdydzΠFQ/W]$rGK^Qf#,e_ާq0F*oz})}rp,>^^kLqyOH~5^mw}+- E*yٕܥ̏EK %,k#t^"AW)RٴE,T+_7ǚ܈i $й j(wYyhC5ݤ*n.*UшNmU# :#[`RIs|>#R"7Ql0uX*Wxp:}Y{~;@њ9̘1.29>}]Fߥ>"tZ3jxVgKYzXCރ$X W⑜QLX{FԶEƼ2wxiGն͌8v c7%lUe?!-HrcRL~^;3l=u Y|Aʗ~"srQ>-ȱCC[H^tƻPzԎG圪-"Zqˣm<٠ r[ B**{JZZ` ՇThD@`jf"uLpv>:3CȉѮIG'WMN[ro i bBhzDL@f@vp]7컮Pa+,q{:qu]I7,ıEa31 Rf+kWOn@%/"P>ɱzߋ%d۪iE L/U%DơfOpL{_nOT+ɤB:;S0#h}}#*N%Ίg1 VLrtp#y]1[85%I6EjkYs3D lkˆҭR{eΙ iz,;JWad iF21I$)4g|\׾Ph f%g(q_$تT$ĉh/gM]at iȦ-Ob .g#`ŝo\ɣ˺b\-%r!Kzʟa: f0)gAy;g^|=GWZ0S| %^m34LnCk:,$خtn/ŏ;H=[l∗'=Pг&|2$ #00k`F/ӥKMq>vEϸ_MGʺ|Dr9@0JxU!o /xec$jZ%2GRg_wIUfݡV"YE$ і#$ tfCf@^P;*=z6a;EdAtpz !2a_yĖ% U+xz6!e_c{R_ބYɎ^R.=s~~? Mw{uNMs Zr-ك@(TW8& m1=_JW~ku¨/e̒༝<7 | 1 3e!߾h4qLP `➍p9Q4}xV0ZTVP\JI3_ď~3"5S$GLq9gTGs<'C 8&v٭un(Fy0f‡Zww%@bF=R5X @9%>^ȶdUp˃[< X 5yߜORbmU oMҵ ;QQFv})gsAçؚ ߑW!(9Mo|0K0Z.3l:? Qn󋔕l]>dУq/3g@NPJNuH%-Uf7xeyT h>Ww:x ]Le. ٫B<< -T+ȀPF,*v"& =A罷_9Gc7,onK[E(zFX,J\@~Ȁ p1b2+1`*iU yPHP_ '$\Eė/~htNX\)5M'd:Sfc wW;uC KC1tmu~πd/[dcRM&“ZLƿBTF;:<`H1܉4%tCh Zs?>Zs;U P?'Z(EI:-@m(*@`@e؟7kXu-^[XK<6Ε vR5 gI}Ss@6c 2K:9g Su6w~Rh˷K.~OJivK&sjyBc4 #D>+pq K1wfd/>^ݓE3(xeRAy5iE~i Q)qIZq=*4RC{vZm.AhCϼћ@#Ms}6 \9bOgo d~a $;"&C>BǴ뱏#=MYfWw@\3_'h0T^wK+)bafkvҵB0,waշ-瘂y[79ivhdBmA,A3пʣGf~-ݽ̳ޔ~¼9VFxݰڹȷNDWjxwT.9k*ڷ9#XaBֽܶv`9( fDW>OF癲ߎ`PiC(/8ǸfHhQ_1Y>M8SPke'(1QOr&&6OaT1\ЇžCa%|#7J*C^pRݯN3&_M)'FŬ=sd]$ƃ SzJ lK@$)_1M +WjoJiA67H|.}_5a`=L"JѲæ WyƠ–6gcwGBEPv..9X 8QBH 8M׊"9sM>0mQdZ ߦ^b3&4$P;ѷH TPבߎ-NZ*]D`܍hW֣F 3"lכ1u)D|;.+.KZZH܋fg)YF*J~ErMFFNZj̓+կҒ6wKP㍤nhIRyE](_q ^|vRhB,E0J=&#.NJcm}gds ϡ^~[cl`KzĀt!u>vy2]^ª|T.dKm 5 a9"0rH݅Gy&u omyVK{sG`*snF(UCn!+*KP$ [=1@7%ʹNĂ5-:!dIbH#0R!,pc*~VP5v(YBOIWg#g}Yޡz\~`IK`[b'G>lϮhN,c!)kX4>gBL­N 6%|{hܸ_\[,Q9VڬFn@ONl8;zӑ~sN=hE蛑T+R^ Y*ߊ5`!Y}:'쌧Hi=OR9C[G|zZl$Ń5<$`.R\KfkX#1ecvص٪˝+߷%4*35'=v{Yki9ȪXe/$EqY>nʖKq&=0fp5B^z0~~h&6IJ:d86_tML)D^QWVmvd&HN\\W i5Fd~ߠf @ؼے*U7E (d f¿a AxuFsKsڏD@S1s<ܗRj?;_Oj3tS(vK)*\(F^溺Ac*+,җT;k| [%sU7eWUZ~68 qe?p+ӐHF僰,DGuI;84QneG9ݞ34kRʖyYyB[N RĆ6Yp[4\J&r"̣Fi 7@3c*Ce] 2O%yZQ;{ҭL:}x_A-h}Z!'dwLZ~9 9&ׁ u1s ?efX(gړ-S1λW?`|^kz36k뀱 geaTsm䨛l+ Les Dy,eU 5-깊td%*Jb)À#tJ&6 Orș;5APלhV XA.=‘=߻簆ܫt;[ KNu:g#`Ƣ`sjC U++b^n2Xm h( "ň냭F,kh8P"/Hke*HW31K*P'~#_n HB'sMkط%IUQ#sAI+D*r9z˽(o%i׮nH}@DPl ՖRU!򆛕. Y >gfě /4eԟwOx01ܥy9\}zpy= TEAtn}q6T! 5m 6ceP`>q|z^,՜zHdj$qLz ʍ7`YER|!‡ }:j=i :I Kۮ*f$O1 pJ8™`ێӗGªS\%geOUT1b $1Z&ߥo{[U08b/Uh;KfA[fڞHdL3h27 `L?McNcC(6 "?%1)JwzLAeRe FKn b8r[HdZlQ}G-EV^J:!/É]8\(@$жsF aViZ4l_ 2`~$/yF".}(Z 2h€gY>_Ԃ/W&I LnZFMd)'(8,;m>"xwH *}AP7Y< _J;e.p+D47Ve ?TS yqn׵>/DOfd}EOW0DAz/pR3&کgݯ:c8r_ogH/rx7Q^q;+^NaFibǴ/ jy=b? +@xaj*[OMY_U'd<%߈ZDE 0[gV<;-8EAֿ& 5F75 ehH_й%$]=lcbnoh 1!'F4Xzz{>rnU:B)`rPh. UN!No.lFoT ZfK0ɉ&blϡW%7nV~d]QhpˍS u/9b՛o\[R2 |_L#M|Nƻ@똔zlTx錜Z^i]amVFރjΛX"2x)鿈t JZ1$-G+XQ ;0P]h5>TPb.tzc08FK*u.X4glB׻:Xg 5[+ᣥ7nKgNrKfr*jM\z"Qd <'L 3|@0 ٳ 15jygD,_ĢlSA.At.7߸h(eA$FE`~ɊU'#`8:lU2#uu&L?uN4[3чB,-$u̇΢#]= {yݤEi6+DS ~$Zmvir;0ԣ4ڛRɱ{2'r[Z<蹴d Zտ,g^vG /{Ib}' d.!CKϨ2~ժq0YIwcf_iAl'cx7,ڜkm@i,דae.L3hƂU:1{tJW/# dr`kxfʰZW*7" ǁ|3ЦQ4p)+|PVʠ홭v@zZ?;)$RxL|_fV <8;Hv?bC ݥr /NX 5PӰ4y2'.ri;U-ר^/2A ĩHtٍCM@zڡrb[VO2uaИ# 4Sa %3xh'0a1 LߦhqxJt$`$3+YZ ځAj Z˻qNpQNO !CAjT?hz=R6O)(mwJrɇOsY놂*T1z:S"2ݧQa,-ϵ*N;Ј{iʣ7ҶEkT-1Dq&4^z\&e56t:#I4s!,b E ,[|"{ YZhUgdhizvt>QP+9!уAbQ.Vː:EjP5Wuk2':2bE6J afKi#lՙ AӤ5ņ,[hWx;Do,f"ƨ,yU0/O9ˠ=orv8杣a1o+:0JwI=zSOkTWYxWmuh6E^9'~oc7:U}[f mv{R8\`}eB(yq9jdCI;&}p4 W\хI9TNğnyv0DM"u}KV};KHR*_ h{)W֊ 낸һ ,YxFai?gmx;Y:觍ߏ. _O.f=Hɢ&0VN8DoΟ&sF_ڛ.g\2C6v>{; >};S9E&.veثP%m4-|[KpoVxjOE{`dUW94Z>N 0dMF}"8ᥳR `ٕOB48Dh3k|ၬ?v{pk‹1j[Nl?`tD=iHf9sp,-X!2⿶ARhMB,T)?md ]E\ֺ&SRw9 PL_DΡCph]e*L~ã*`!ȓZ +oqiZIZos;q)q]`ΦEFd _y7<@ðގY'Wmmj\Ҙ O^#3|*cmsSS-DJV^NUVG_%E7 "m KjC(LF,o'LkAAD\zZ.=fK#pTΥc/F.¼#:UޚΌmDêDP7R|wEH"8H"QQ}eDޔ.Sa.WsGw#f bf |~+徕9eX֪Feazsm~j ȇ幖zLcE}%Aq Џb8fj݅"x[3}r]*4Aw#}gK1}K50^ wU4Ѱ0۳˼A>j.Y< {A%+ VXZWWU !o{BP<[GaVh&r\Es 31n'O̜jֵĿ{<{`ǽDBLxhpl+}Li!qI;OFi1qҷXzL'Vs`wZ Ar-6>$ssN_Z*ξc[L,K>˷ҝSӝN4XDY|etY~PDuiM UMdItEW }$c[i0rJ]Z VG2dlݫ2v۵RU==j JКή+1QJ2kYWNOA`!*ʚPH4A`Η'@;‚@CQ%׿Bн[@:f^DJS gXW?&r ˧WEb; peğ} Ȃ]eքY6=o~\S}WjIFU b/ [tG[ڲ)#"GMv# ބvj*8*COg$l,uATKdIfDO̦6%5n1گQ؛$B D4й*iL>5 n>@x!в,e&M5;#}]Ɓns=&E&V̔ ]΄E} }iAʹqФ% INQJmM 2q-iK8!@>*QW@4#hz~#ӯ`#ߘ6&Q?SSW,Eq9t!=P+;r}v]U"K&}|1 jX<8CyiRG.jܥ/hٔk]%#1Eح~IY7h`ߐ>*SO>?ա}X;w=8 iLؾ7/. .ɵ}CRkha^]ƎMF-.id:JwZ^,6w8cqmt=Tfb)Pb$-2u:*>­sY$;P'-,].Wy{=s$ξz!21$N.5Ѽ)`UK `G&E*Yo2miʌ`Ƴ|{:No}"|s3?Z#6h_;Ed,T F-uIk)49 #%<2$ @\ūbDeL%žSѷ?Xq͠"?ޑEM{cI;,hJ?~ 3kc,(XFû$FKj1nIW}FX8l~@X͌1 L" Cѱ1hc&G 8c+/v-\Wx9>`M-ROjK馌|MK'qsKƫF)QTy7ܭ f.Sל~SeP׬z;ܴ""tlc]gecqT)+V$$!Ȳ=EڷC\|ahiǝGd C)۴_8e&}4X?$[3eIKJ/-öw|OU01+(d~,wF)Q,xdgE%3m*w4q,*+50 ᯶/Q#➱wd7(cIܽb,Ѩ&\ӕ 9HttV+NoIH6Ϗ}h—Cw߹{I}1Wgs 2}칆|R5I`uA6Icj'I_,mGpd7lt:6 CW_!\|d)ѩ4U ? hasGطI]WJcMw?_9u@7SaL@BJD|L{wG'-0¾aLi/G<y ҷ(3&¾FBP]1XcQ8#4O)Eؠeƻ,pp}+.\B-@"k1h^gXM`OHz>v*h9d ο$'^&kI{J&f@$*,~< bhW2N= 税j1SfѽKA0̭~R;c +f^uEM_Eoo_ $i R363!Z7fdڬ΁Xr x Q4WjfI&; `+hճ4 ھ8z{Oaxw\! 41'y;fbzy*Tx#!l cf*,Ȯ%ysi-SX\|ȞKw ].qZ_ɑ ~4Pb[zBFWEBәjرL ~ z6>`$->;՚kI:fR1SM9_ ,ijLd| х9l_(tGT.;wLwUZW3B!>X g uBs;c7Y# u|.3u:B$ʫApxH/(z!4|ʛmӸ d4)6_-Y$}O`U$}5gs:KCoOTr-.#9+^!nz[ ɾK8C2N&z-(X@[kCWT׾ҊL"d7>!W$mѐz(Vt8̓|L  5 B d 1Y~ҍ]{8eĠ;;q:k~A8Al̸9~贵|y<ρpv/k%<%d)$5E$B^YraR&K=@&8y.xnKJk;I0mѬZCu= ؁l 3`=v-8޻"YEGya`c藟7= _qnb*)lsR6хẬZKfr_!>zO:dol8?чF=AT_ i*~{&}.sRNy՝ЮڔjhhyqsrJ`Md6?OXnXe"pL:en=~Ӭb>aO}.fՂXb78OXGr^|Q==El! lv(d,2kn0@`m{kP{ Y$>ИUe@?Uy5Ǒ/:wzb>fqJ0/'ņa> M4i<h:=vG{O$gzu&Rb\5;*\IHz-~mq*xGB*'V?c`JtE_s./i`}WXЃkmʲ.V2d#H^DF<ޖ }NFV{mG,Q8mM+{l EtPv]KEtYiPODrJK9ɤܚ\ڏ%ߛd-݉)V䐬3v)lM B԰ )a`7 EPhF9O懆>j:Ƚ/ǀy33yhm5 c|i#Or}ـ`cD0 3G gkV.KeV:-(caL(Jhw6? Vd.E5KXgLpsy)!cK7TQ]W0ơBh7֖k==%7ժT~{ۯq$#J0ot-T{[#[=5Qٲ 䱔P?uͫn88خ4?)h0{ %NdsO쿞z5%lj9Hdqpka'g)L[5TkCraȜ 'k.XK W}҄46HC<%,A9͔O p)5Ln<$za.2O e†q^DN(?}>.7[| ®_)"\"18I5Ȍ?.N~ߦ;t$ ORg` u`6D0X k`BJdRl5F>3ҁMi6|ER\k+wNC]Uk|Tj3 >4Q1uPSаrXoMh2O$8:P^cT^ϡ3{3*^9 ތwzQ<{JBaj& yx/]阍mn0v:^?B }Ƅ*] Ib̨s2! eNE0veSimwxJ)oΝ"I;\BV}A 9-n>o7Db@ E)m/Aax {"SS/.SWL{y/Ysr,mts9Mԗ`LY{d9%`ESRE rt\nm\`Y'Mnj̶ʇ,V 2ǃ_vQp'%6Kn nt)i[ ?=^z؄.mD s0"=Yʟ?czQo2dEњSGQ) Eׄ*؍3oMEԓcUUe+Q>Ky eK[2՝0fnI9*eh)/BJ{UJSDzNe&SʧH_npgf-/we6- R >7aEI= ڷkO,MXprQ|V7 =* N%/ q1ӜֱD9z!]|uz3 ';Ɲ1 "# H'bx-ƭZg=QUmrU@uYt-a"((Uowz %?mS721s)'lj&ca.#log[wvl H/4D;+3r+/mh$tͫ&{h=mޮ0 D9A-[hUNtOڪ}U|%) FǨ&੭ʘ94BlΦx,IЍ^"ő>{Pd? uC`:kg~9[Ct0&+J 'j"V>?kQQJH+eW<7֩AQә~@?*s꿘n- V+(W_urY_;X.ix7|ر:jcJg }n~C=?'uJKz'-pvI 沣m9Z ?r">SѮۧN k;?Q\` 1d񆐌a_~u?QO.yEf⇢vFor Ͳurch0z+d|^o2,c=)R`\0̈v, ^)M߶1'=%*Gq[%O5O+0}qUN|:a0%R!p*thX>LF1ŽxbCNr;sMPx-۴=Z{c?Ch@MS! :vh2#F9vRT^, 毞 wp v$Nkn|0k"W9!=vpB..RqC^2B7cK%bփK*=vWg@u,wO%us KZo%EHj(ZXߊJi'=%/WV-rꗔ39d;1')6PR/ %wJ*ec/]CoFڧ6\J$AăǩAKU #nqYIbSۂ!2c#iXBIա=etu^1, nG 1OD7vbcC&MP ǂbn{yclSaC׿{ai-+-8 tEk^mv.-lůߤ7>LacA"2Qg|ya1samgܯgzE8 mR5=:M|GfPdl)XU{M7 &@=prƮkB΢^sQsu{{mj M`-eݗ@|BvڝhRz[Q a3 GL|pT5dPr [#޾cȵSM(u(n;_oIr f_٧PP8=q$PD-zGSn)Hf7aXF?ߔZRH!:X@7~DFN cmWfUo:{_t{WFJMqtLq`k#>:.\ۛ*E*mB_nr,=ߦR[~U./L3%F͜30 |r߹Jtoy)iw2|L@%OH ʢٲ2{*:9G8}ŢSٜfa-s\ͨgt?+k~kf "><- ^1*󸀚pwٌ]N_!Zs' WKP@ݰ7k4nR8v"bRJ$}܈Aw8q&OoI;FFP:Mb1!:u9)VshΙc,ZBiWV2Iv$km5TZ樹/%&E_8,K}Yxx& c$^]~Pbp|-j~Jlt}}]E; ؞;Tz D>z! \-2}6Ȃpũm4Dͭ`b΍wH ~۝tNz͂.Sž;5?>oXaSڅ|eLgԿvR9o#®&rЂ="u:.LlXZ55%S>i]o{#`)C\"Id}A~H7W vsoUW,9hyªZΰke eH;Pn`P4+nL  <4ѥx}n]o9>TR=vHEZ(M2ZHD޻L@/00l KK +J;[z^9(\~xlP ً@y z>ϞOFw3"Nըdsߨ =Kv9M0^Oae~Ig0]AMF`ba=!ƾ)Ràd~] ÛNaki.?<,?RH={U/qtEعhQE5b TIn!OvjI_;" H$[s5Q WҌLMP&CRAC=s~H8ZZ+: ž[ isU86Yoɡ*\)魮O_V!/r<V^g$v#8yㅱTna~>o=-C/9N=!bmq-oTG5LUTFf]W?ߘ|۟nw/vO9623Ө7 ~%2aeVvA A4EoE tOiHGV@1TO)5$Ru(JR)nl[V?)O35@M3kN ܙY`y+@- 1 V;]V.UpwǸIVv QDtt9%r/)ow!sP':{#qh"N$@߂ݎY $靈ػ3-UuOFs$p[)&gÕ$ !AN4t0a3LYhdz5{tZp [hd-""{(BH"$_>ݛx/o}B 2l~jwM60ޛ1iDY2v}~B=RيѰSaMF`\AϨ}Z\3C:1YOôsv{׊D7/}i/ayF'5F@TN%bs&,ώr@K~lB9V%JnPx#BYڌ̄O,ټ T j (bx\@m%_;wZZ~i&Qtr큷ORx-=K#'9̿WZf437ފȡOyY |6ӣnqV-e|3ΉnKхN=OsMmdRs:,)ҎuϲV=5H,Pũ=F 0MÔS3ɜ@wߛx5L,C: AVL" 2^t/u/RQ_$ _mf#ytkۣZD &BPn7|&ZP%5M6f +z|ϺՁu%Iupp XnTJYpe0HK|(0 #]Jv5ukkP*# hVᷣRVrdZ˦@}֭F],2kq!BL9 Tۓym=?O~\Bu[sLb|^JlA^b,0(D'쾢m`~k5n<=O^=hB0X03Ӱuiv1oސyF~2;PFH٨^ X# Z䇴I(->/RKqa"9.[/NHUsD@$,,Š5?N,bi2wWjˠ1׉k!Eq(dk;E"}M`d̃10pL/)&InHqu,xݟ\v?+v^l[CXIF*78.ݳcZ޸pO jx>?%'c{.n*egx#PBptilu LȾ<)ǒڀDk$kGTj5$=pาO5KAL\)#$;N]\:aEn0@ 4}j{p8V7%+\?ƒHv{q G&Pu[RhﯻS;Zf4,ȱnev,v9@]oW7Ƥ>Y4)"y&f{z?E!_7x@34Tt Nu#x9 B &I1Qs!;oDH( E)'ݽ ֓c.Ż^eNѰ̽ߜLXupP `ƆpNO;/7'͛ZӬ73Tey9+׮'{$P?&j넹҉UQ:U34hep6 sMʳ 5}7:avEz+)z_ꍀޟHPbo*=N8r~ƙjchP oR*cGUs 1Z\벳#< :2eWsDɐ(Ħ7! 7F3% "Th)|,`sPd:eaoWg74 d= ..KzqM2GKX|)'9v;e/>Js5U~/u^0yjITu*@%w7M8x{+^|9n|}$c[q@5BYs.ǯ00LF:R39.AcIoB6#{ѥh/s՞R_= ˫^K3hzrRdG( XO?FTag4̹}eP5pf5a[Qȱ'vPX\tR BeӔ10&g.&HAYގU]mOkErڈnJcDq8ൃBpQa~qq6t,)vufi|V:2S7V-XBbr3SE40C5KfL5gHNZ(-݅< tW{>7uF x/ ͢#B7纃,("KPAk&Z $aeR&Q~];^Ŀ>烸 Y.r[\G$ƞ Q'x= nqVAA)rKS^>u1Љ=ye # أ.g珶R.Our5͠jj dVi`:] nԇDbu,1x񵲽ZL\p;C٦zvxj/FRav!`'6$΅,N {=n&ZB8܀ BjoH'_,s_΃ig. ^S0^Xw0deDI41vm;MD8g&75r]~&񾛵 #CG8 | RC.}fAQӫb$y-t\'l;&%JMG4:}Mᒴ'*UAo4p(L:?}݋nERA֗׍מb@uw[z]^o Τ`0]!E OW&v56vm5ǟEЪcѻ Cp"ЩwX!Vsn:Po%Qo~HT]$h-v8'}h,z(aC*>b<[L|"t9]{fK;pD(ZS_yd&Z\ 3ì6T4/jj!ap$ &ߊ=魪*~p.Bw|> =5UVPdB%!!>&8(1o:b//8+|X-7hK;4'Pu^HAIyN)I4? Ȥk8}!W\N%\/fm| URF]:"JY0&Y7LToho7XG #Sbgö́[ hFӆ9h*& :,6 'Ȝuڱλ)FbI'c Jm)4=8ϪDcY%  BeF~S+! yܳ[6U=gLR$t9T"@=3M /ѥaA͢5rGm 3ph?>?X6ӵ,`ރT󞀒p[nF?)X7XOpTآl:SBMXo.]N׉K4d%| n]XhqaFT !ׁ%rV"\06Ӻ]/!}־n$HgHwz\\ 3{{:F\ˉ6m r]hR_H;5~pw1pvbQrM.*j~~0LR> DznE.sVݱ}!^cm-QԨIUGG Sѩ)-=䓛; 9"p" :xEfT 1g x4&aaMʭ0EzV3vr8ըPofJfDh! p%]~DB3Sds;Bz *ث9JH#5,GmDG0m"mwA@ me>v-\fz̳"Z@<4U,ڝ>F2~+ŭ"g?VE@lԀaŏzƇ=lPt E|!<x)t)f,0ql::meqp`MncO326ߙhUYS5_:i͍w> ARkϳX*=Zkٞ틸|Dp{Zto7M!w1x 7U٪p_6/c6±+3sB|ϙjr+h!G{BC`q2u%ވ,S#LkN/ Jzky@nZup~"@! 08Y6Dt}8Hs?d} PoF080I ~t?kzj} VzԴ՛lĒMDEc1)FR<7RUEr^-!OӃ7, gU8!F;WIAp͜r>i|^?>pI'WE% ]Fjk"0f hF&Q>z10ӈEt:oK"Ja\GcI2ZNcg!nh{i.kiT v+~hsl|4\t<%Jrus5rr)IRݿ)X7k9}"8G}5ͩeg U[ =25UA!re۝KWǁrձ-x,Ԙ>8NJ49*' hbTF@gceކ1TcȭGd *@L0 i HIvj<)Q Hmaz|u)8]:6COVj#{ SYQelhwlTDr 1Y@LWZ1I /1߈$2~U&XT~ܞ^e!Í;P wL HԤK'6>={#Hn*J4rX }.ƫ٦K#h9n3UAo'kB*DIF]!Rwt{ Gٺ9X 'ѭYX6lv*j@  hmXëϊ{(.1+9-%ZLT&oUDl VOTzX ЎOSCH:SE F$U<nD-M/̇k$,_iu|d"Mm)-I淶zIk4M$s]]۴̵rd >Bׇalpmm{[ao8SORUd|g LxP6E m$tjF+4_=Sswoo7Cʾb)kb ]o7 'r{LPtZjr/,>b&PuzS0fRy2N;U9Kw"dcZ@ȁE"wF olQ~f 㠜v'V̀ae?-O'W q*;N'G A Jc;e$f{@\/'ctlz/Ee_d]êG&b nž*nP$ڃ r@C,vxӕR"LkW%] ͇eF)  u'S{٠uU6txm);xgEatx'UvBX^(k Јt7Fu:Ͽ{?kbф-XyP͘`\rD3]ڠcdDSslwGQ ֍B K'PydrD8 kRbhJl#q7MҨgΖk2ZN(uT@,Bo9;ziµϳhrzW_80Rz(K&46y@R\J'3hR5StQbosP:OF}xEƍ4Ff1אҢ ŖX1{?Aȓt@ؠ9+*oft#򰤔d`qqk^SXcI H|7uZu2.钸 齍&b Uߧu9(I0uWx"Y(pW->܌XprP󢊭",M, |ta:~4*o9τ#$g;WVN0 'v9j.9/,EdB~UI$!,C(9 ^JC7C:c9 @%jN(); f,Jyz=C|?/P! DM\p\*.-%PO-//'_nE̯`Tǭ0ę&y?2([4%iY%[V\nTUG`5VV4ŤqNM b%ÂXTF8Ɉ[V :2eꏾ/GQN\4B#= anKw tN>qewhu7}+uR7#;Bݏ|SJ= .[nZ!U)ڦA?HӮhkxŬ'ޠ4ŽJ*'/,Qa!88SJoSټbalnFBڎߊ~o%Ѿc ȗ̠LIfK1}A/߅q3|zOtt{Jхmv_5Օ ­qo={. fziQ!Z__Vs;l5P8= g u~vPostpaR<&>/~ N3^I%`E[N;(I]n?DuO@(;x<"4ƞ=*!-@Yy.jP7ueu`ȸ';{s3qWք)ԧCyE{QuO Nt ଝpR\<)%WAM-D3puA B9szQ`{4 kYsҌ|^.5) TG?1ticl О{Rs}O睄"lioE`Kv$P -;W9YjjsGPUy$X֪#[.ӣYQ;ʜPuu^ktӼkдW0jN\3Jg6?T*.uU='x k|AV":щ% a@#)$FY睐$NYaGEtrMJ[MsyD4 ISMG8A5{N c>0pFm&X,ku bH@[Pi6h_ߝw ъQKޛ:. D2w*[HM:B!_ !,l\8?fӓ ,AoTvKج'>!m0J%KY{ &Y :1H -!|'wGDߝлE׿Xo?!n`} ŵ$gdHVThnZf^f-].;^:J"{:&)]T<RxX":)#=Vgq Q/>ȁLRTdWYUVӛJ>Qd)I:9#+V3vD-@Zğ;GWHR>D`H'K c!|iAU&$A]h[z3yC=JO '=Gbǖbs_tVsgԲsOqhXw$-voBjs^7w)唅 ex2~EFtOJxLy֯2!t!-U[mA8}Մ&JܩkqA|l>{-oIa3s(,LcMFanT`ZVdC¦ѭ;uOL$țI`/)"!9:5`W7ls<; ]&LYFSvkETТx4 iȻU;)2e+Tt]4uF)FTz޿ =cB+gqFꏼCL-[:G郴avY(Xm׆H#Nr&ȺnA< ƒ [RtMC)L#F(U-\SZh G1rB/@6(E::11E8Bq=z+&2|l|׍xF.~g{F@¯ReUjN8٠16nj[K+ؑ\MdA(X.oFp YZvT 50a;>!DZ +: -/̉Eʹs @1|s1-7FhE)=~s&~:A9Ԋv0 F ?=m#ꚪ<C}<'UE=5;gz.b+ ^@joP? .u9&, d~T~/ hCKMRyse贍ٲ V;hlz[`UсbL,i)7|S^($d+%3 u济M6tK)Wp~HlMↆ@G"Gy+grR#;PІڀrAh-P# *^ϔy9bz2"xd둔_nt9}YHkYyR󏗓|!ca4Jlr*r]2F$ި[TX*ܿq҈uXg˙'|4G<wMl7R#+ڞ 09-4XVڛggC0l Ξd7t\V@´f' aHX<Ϯ:ʈp=TDŜܽ~LTK$G!sHO] •vxS\S r v HʝŽ"\S4^#4?~3K !#ll4aOk=^N`lដrZi5HAܫr@Hb(oJ,6zu H $*@#8oA,,{+M 0k X;D-}w e]Jx &yQY ?sƾFբ;yi(̷oԡZt#bO$l#sv* xdF,ekCzqYmܺt )14vp`a?掊_'fQ(>ii}î>K9"^'(fzq?bV]S}˃MSNFWZF!z whi0O3mFN%+=8t m6F(]_Iv겚%oIٱrESv=2@N.Ԣh29 $>=\YkdU 8x4ĕd_i$5wx=)Y 1SWӡ\hK%F.fl)JHDy[w}x\>Z soJr$]t!jDi`B1q/Ď-+,.*9zf䕵" ,ͭsǣ$-!ѫ"T? gMA޸HD\Vo#/&iZ[P#XfĜ:NN#NUOǮ߶be Hee>yfd#Mr|:HOꌩU ݋x|)}ݘү2`5l v~aϔ1{v4:7_/S+W9:ywO~6Ԫs.p.d2<|c"oVEKEB?.88c67uԐT3nC,Ky)c'"_ԍEَVt(ℋ3)F:WlnuS??$Y {LsڐB)(o*?9 wr\g@ gzѸOi)S"S5rrY܏^eႶ}JHL6laFWv!cO9ps 3y{WbnfZU %51Q^S" $`+p:k (05 |f9FҒ 3ʄy \]m Jյ2C%ԖR#& DN +GϽ -لy-hOI/3Kw_,V`B͹1ڣm!/hECC(AYͩTNw~QF,<租wV2C]Z$;dQs~p S$U+' r`>zb. }24{C>Lat0˴S6,s;q.蔞LaSPkyC3dT^ 0E fYHt!RaM*S* G⎽ 86Ƭ'',~Q?{:c$tϏ+1m׷zs:4a|XjwUL/E4ݙSu{/ 3,E j䒎1ޢw`pyEB/yV$Ն<SΖx Ӗ[ 7EJCK( `Qg9U]f{ՑC.+_{b8Ƚp 3DThLlV7&tWb#]}=CoJ /aˎL_Hk߆s,Ap_ThNs[#L<_ިNΤ.GP//h,nO2r1/I([yoފ/\>`Rw_|hj?Z<ទS(2/2]@4)r`y>J| IffWC+岞 b {bK:0ŗRķp}ZWܥn3y~aC+ɘTkc&lp°|9p~>EZi`z6TPH0}YmfCJE⭱{fg(,&r7¡Dzs# pzDwN4*%c[MiS 3-_)@|n٭0uJa,~brYe9u͑س[Q4rK+e'ςWSkա/P~턚 Uq[+H^4W]1O7놖g ŐoO@ބeA1a*kMnm N7П[(,:$x)wQ'+podL 8rxj12g+)~PTJbH[]ں j"Uc'aˌV|SIl vU <~ Ðnh?Xn.1'i͟ [v͸A{/#t6Ktz*0Kfeº8K$n{hHiJ xl>o`uʺ'aJJr1 yFm#4QscJ( 3l]1kÕɭ?vS>~^Y^F8CBBtj0Μf3ȧ  KJF> n:g,J76r./sRsrQQ>pW5no!?CMYLsͪ(c=& %݄Bu{Eh[׃5zz4ɇѪ(;jݦ czͼϡcC jLϿN*!Zj +P+/pNH!攠6w1vGBU(pA0Uwe{nkg7د:P]J( jqtjmB U+nf)Fh ,+V@ٱ X ב9 $΅֠'e-xo B[Mę 9f h|[h}OΙX[~bR>,Bd^InYEaVI]:$$c8EnϚKP8BؗޏOdQNRŜEa9SƂ0'Z`)xͅkh~eg*TYE-m7$uw)2h870}w{9' dP\]@Ƃzz롱-/87rlVB11Fn ܻSo>sIq܍#~>T kNlkU0zhiOjL+(8Оp4΢uوyK>]0:)R( r JB>Hp0On .vB~ˉ+`@oBt+=>Eޑw!فUxBNѣXcN< MRI[p@ٲeFXi(%o.k9 ~9E-^$3C*G5z`j&/vZj:¦RB]lv bi4ܑ#G#xN)gCYPz2D@^ izn@\R ^0ZG5З?i ey}aiwJkG+"Ba3 x7&1';fH:Gx[Q3xtjZ";u;a78#f됅}&*.s0{*&aqJUF#4NR#č1PKR0n2䓼 Lw=tEL3|\dk,Ƥ~(%pM7f"2*tZ"܄_1}9*{Lޯu'E-.1)q /j9~!`# ^ ktHfo%\m%o,Mym0w _9jc*E[IrQIŇj.ԉ?8y|skmt1#$-.6ְ'$ ^"d|&gObB{W<-h3Sj[ȥ~4ήU$G寭$&xJ`)>bqyjIDrU5F" wɜr:w_u/}IxzR!It(%k#U5$ST͛T+`3tv\{=cD9Wk0ax_uwWPn)xU؜{rqg(ݙ#~|S)bK?P|쾏#{H#!:"*]ɜT"~s"LS^(uJeb& =b:{=QRv \B;QFKHi;tW?~]وcnbJUl Bh͠piq\"i1,{,2MFIYnkA9&D䣙D@I~ \,i67sj}ZiYe|}-^.ih.$AXwoZPWߟ10(גuv 7eM; MBB|_'=N].C J{4FRѫz{V{mHVPc 7Y1y SͳB3(XsU1_cWk|bX Lz'?5Y ҬJu4=l:M,||9\Vep*Chk͐_#@1O]$ Od"LLe;gn1m}ZT^3cd_BjcpuP$e5dR0q KT?tSx?xs V"j8Zk7$pL.{Aȡ¶~~ņjwK=*$F̅sQzְc63 WKմaGO!ԚęC'Wr.Uͺr+WN&p%KXRhlMc-<"˹Y /s{t֐n΁ʂTv]>/~vX@ѥ{c^yy jm0: rjrGf7OlIQLFs[,GARسow'{YF9  *uDSÜg('4 x `B)ah}|I&")d֜~#F2'Jg^u >G;{o2?93ʐ!eƄ"cI>:# &=0\]Ë-,GvK]VHH`xRu)NNHj?n|!<_"SmcMT.R-t:qk(4q9s8<5.3jwFgq6&Y6n@1hM<%) ujNLGu|p8 7p?\;פ "pTYv$<E ب$E`cKGǶE 7X'Uͨ~+Yux 3Ffi8]?܍B' ۾H/v^5@h_+b81OcJr[SXKkDS<z?$7-5ib'Fl-UnV`:]FX  \E?e7Ic0́d~Rbg 12:ezAjBW ji}4Ҧ~J9Ѓ(vi%/"T`o' ez*a#?2:AHipW<.GbZӐQ Ž! DӋ/>#|@YZ1l"ށ'Z\T-#㞰U˦!prF6 'K%mON+JmTsy.+X92hˏkA]$ v9>= c\QE+*&oz&дw;b;%Es7r&jIZ,/Aֳ\mҏ p>"̩(V[Us pV9Dtn:ߌAЎqhǯ<ޝ? >8N|A|k󆍮&*g8kA4Kf4Jօ\~ 4;z*DHĬJPN37|[n=hKjvOȥA%(:%Du4r?N(f7?cD~N5+=!3qC^_QD4TcL*0^_3Ρ4% n=_Н A  sr8^=ț%70F;ɰ|tC02W` ?e,( a} Y?M͋W.! *15\Tv"O x__}XN㲰l1t1C9nUC8|W@$ ͺn|8S8(ŶX&oVʒ &;!X>e-9:lp ֬AiksL+i&*sh΋X<@;̄zf nX`mg~js]DGmUBT챊cɠ:nYK$\GExqKS"X ۜ.Pw# zX7CkGx YB;7Kl9xm 6V gѼUplɣ_vL\hqIN j TFs銽Wŷ[j@lԸrV™~l) ߯pmڈӡUAR TBG52T9NK0%y'Y<"ИtkL4;jH`/G jtjK;Fbɵfo~g~3o]}^fEczjlhEexQKۍ{iٴ8Ð{+MLeT"xq{E>ɹvͮكx!]K.1l%[\L3}.phqY"/KOb g83xp1J|q XtZWz8nx 6Qip2qg=O&k$1(ŏP #pJT&vTgΞLmZ2:u- 7mw?ejYK7(D>cɏmDy)-rӠ(̄xvۤ={>uƜw.cnJŽ)Q~9 pߚL*b,$;H_ VITGKA 0 ^d[2#O-,zdUpѓ KYtwڔa2Hgπ$y\}wr==tCJ9 A@=(k "Z}|vH/$TF*uXl26E/2S1*$/{A8t!OΣzע"-౶t*eR EjSw3Ϩ؆QLxCs!Bp2?DG}e߃ENl9v1lyӨKXjbcXT^#lBqyVpnK/l*%{:w] F.KԠ!yZsK4jR뻌[,w2Uk8X犠H_/T<<[Ek:NGrbUPqC$(do5LF6H(Vj5iC|Td|&T2AQ\3?fɉQ>#<;bIZA1]I?ec"mF],-uT9 FA2e_(L^+JKCY(si@\y -o*׆Ј\zhln'FRd3rK5ed!Cͨϲ kc 5n G'~!jH@$1&_GJ@rS_P&-`b*i./Kٍ茩5ݖ1HgLñtz/ E"_sar%,ˡ [$]/T_LdVRkhI9qHÔ<_VO8 ?VkKOFrýY?!8%&͆,FΖ7>4WLSt.cbڄfY "kY%(g5nvE6;"ͳzMbwpp|[>qWR-jDE+xItANUp_#bYMCi:| tuPKdC3MuPyYP|\kQ JJ,lAbE ;Hl)2Z!ZNxӼZVpxd/G'w%݉,OFw /fU34Jgɦ$V\G3A:a{fA4VhkАl6\^e t{]#)d;]}K/4o' /,\k o8K֭W[ 0L2dѳ51|v˧D?zRI+:W*^:jIg¦^lsZ=y#} ݠ^[ @G|U,%;32e 5iJ,!B 8M?>5yAp t<= il2ptO %֕Ej!]tVvp'x Th)Y_fJwL[ZnZ)-.:0!SѪ?yop`r)@5ձap|o3{˫P慇7m}Yr" QNe)b #4nBPw>]tKw %Q1X徉`߼Y׻R0ZG Wx9n@g YZ8pN .+*e\XsE_8Ӫv(OT& 1S&%-"ZFM<6Ch5)c>wz+OPsM#3)]=N) k6ۭ_z"uB8L30]B~Nzﱷ%8CwhyP`Pa9>x⃿kg"K}dm)* xX_,i-DavcGEB{0X1.g$;OܝJ /=c'};GkV nBi) $qv7D=B8)OJqJ̻a?d0 :}J+(u-9OJSXή=KTevd3+B[f&)]RT9~qEnuZ^ppNYQ/խgî!UH8l}xel^;'_# y-G?諳)O ͈($`-]̔}9 VU̗vAܡ&a2I_o+Aie/.T ;wwBYI0h(4u/[C@G_I[W縹~_h( RR[zxbgObi>J]€ژ 1/|al63KVYo 0F70y6~: a."1=H%@ΰ[N!-5-G}I7"s.ACGXy}W!oOv34l 7*ݳse3)"@/BAyy߫ MŘHoК &kΙ*jC"j^Yk˺BnؖPm+]b߭k-zM26 Ml+Đ Q:r )9RC .bC7sؑ)ґA3o fyL&ɍFP{ZfZntR4k0/~(|,oj$j.BqZq."F)󤽒cPm׵Pz`QJɅ^D`[@y!xE YZ