kernel-tools-4.19.90-2403.2.0.0242.oe1 >  A e1vW^^f;lX`ۗuR< SɱqZO`mxq"^O&b\Ir&A28 %b,N$KvL?\ߒ,hˍJ:t(?b _]/S^]Ua20ed1c3126be420d183219af5b09df01abc4d473e2707f893695b2a686170baafe87b10b5949c7ef514ed8980a2a84d2d5df4fc:e1vW^^fGQ,t@c깓<2E]U-bH-S3-Les囼^!^*2ڼ))e@WB߮ZNX'+ՙ̈xo2F^H6I{,/}n%3&%Zvek Y1(0$Θj"l 2N' y 'cLG)Q>E 37!vO-[Z^zŚG2/A1tDϸ0d>pHd?Td ) R+1 FRiov%#p# # # #  #  $# #_#8#D!!!(78@f9f:/jf>?@BFG$#H#I<#XlYZ[\(#]#^ b!c-deflt#u<#vwP#x#yhczPCkernel-tools4.19.902403.2.0.0242.oe1Assortment of tools for the Linux kernelThis package contains the tools/ directory from the kernel source and the supporting documentation.e.'obs-worker-backend-test-x86-0008.novalocalopenEuler:20.03:LTS:SP1 / standard_x86_64http://openeuler.orgGPLv2http://openeuler.orgUnspecifiedhttp://www.kernel.org/linuxx86_64/sbin/ldconfig if [ $1 -eq 1 ] && [ -x /usr/bin/systemctl ] ; then # Initial installation /usr/bin/systemctl --no-reload preset cpupower.service || : fi if [ $1 -eq 0 ] && [ -x /usr/bin/systemctl ] ; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable --now cpupower.service || : fi/sbin/ldconfig8868888xx8XH8@z&g.""!%s 4  *큤A큤e0e0e0e0e0e0e0e-Me0e0e0e0e0e0e0e0ze0e1]e-=e0e0e0e0e0e0e0e0e0e0e0e0e0e0~e0e05056f752a9fb3514030df4696c3ac46b2c191905e49485d14ce43790cf6dcb5449997500e549ddab8d1031f4f9c626e7e6ca9460537b262c8febae9451a579663058feed7f153a9f530274728d73b3ebcf9db04b665d304c1da795aaaa101ecd0a1d3e9f78e53f14e9fb267c4abee93940cac752da967bb5e3f69decca9265c2aa73e74728709ffef9bd03dd0c5bfa861726040d4d0b48a8150134bf6ae11e862da6d288605bd73f552c95a879a19c4ff4cccbbb268eb720ece4060db81aa07b09fcfea1312d6e8ccbbdf05411e80113bf6bffa8d66e58b8a19ab57143d202a674bfca3775db2035d62d6dedf5ecc7c0af4c6af82adbebb0203cbbddabf217f1b98f2d17152ebc58300ba4534e6d9bf22d1b6582e15c7766670d9f0c858745dfca25e717bafb8d21a043464f7ea1dd9cfaae905ead8e641d29a14ab2ac9f01db3766983d92f1b7d835d8900ee2268d96c0c59f86509a10f617ca4db6b2d8a9881d0cdabeb754b5f5db67a5e00456e3a6af40175a16ca60944103474a16b10434daf96c94625ece306b1e1a7890a7abf4ec9fb4a074aca6bbe33fb18f6868dc7f9d020cec02b77e15b174d6f0a404558c67d242fde89cfbf1b2f0a72df0631955b057fe9e5d0e8c36f485818286b80e3eba8ff66ff44797940e99b1fd5361bb988ca37de60f11c080aa17347c4caa24e4799201a79e6c7ca660824eb8dfc1dbc7ee5808b032a67f587d3541099d46de34f5bec8cd5976114ba07f1299ee6001ffd6e9b61145a3f72620423c80f591b0ede49300d35a78772e8e2136e34b4e10dfa703e82ab8f1e1f62febe97525dcff98b1dbbd63e5a2afd5df708c962e6941df88e20c8927e641ad20e4b63e752ebd504837654c90ea0906ad7099eba2898ffd2a5123deeb73519db6ad3b0b46c87f35a43f7fb495e7ad613a447491f6c035b44285af9fedb132039e8b084ef8b806afd4189b6a363e2db41b83bd5b0753662d8349d3677800300978e6ac93a7a12fb922b9b1e8b33987c8810c38151c801d7cdffe39ba5a4216a389203030a652c165caf3c67f45cee8118c46e5fe0f1838f5d133dfb6d4298fbc105c13e5d3de66d1ceb33a61a39626e65107971f18842ddec585bb8ab43536ae9f92afdf0792d9a89c63b5092ca47033d4307e1c34af0f41d7c751837f1940b50e5090acc2fffacb133b3e0185d233532d7472b86b0f4ae65d7a88d687d047662e1542343a0798c831d7e711a68e3a6f240908cef9363f600f47b3185ce2590d068716602ee0cd73f6d8fef9208951139f8b89483a0d145548ab3d71c3fc408cb6a5c9df3c7f66ef834dbdfb6ce5fde4cec8a94ffdcffb7674dc49702748946e703cc17ab69b0e3adf70d3bd0770a8ba8129b5969d86dae783d96a5af5d9a10d4b55273566513cbd2244b935d0b534ca5e38086935b141614691d520bc707ce6dd5fca528bfa364b149112249f60c4a14ca44d8e6951dd7clibcpupower.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkernel-4.19.90-2403.2.0.0242.oe1.src.rpmconfig(kernel-tools)cpufreq-utilscpufrequtilskernel-toolskernel-tools(x86-64)kernel-tools-libslibcpupower.so.0()(64bit) @@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/sh/usr/bin/pythonconfig(kernel-tools)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcpupower.so.0()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libncursesw.so.6()(64bit)libpanelw.so.6()(64bit)libpci.so.3()(64bit)libpci.so.3(LIBPCI_3.0)(64bit)libpci.so.3(LIBPCI_3.3)(64bit)libpci.so.3(LIBPCI_3.5)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.2.5)(64bit)libtinfo.so.6()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)4.19.90-2403.2.0.0242.oe13.0.4-14.6.0-14.0-15.2-14.15.1e@eZeeeee@eoe5@eeeexK@eoede\eSa@eKx@e@@e7e/e&@ev@e e@d@dd@dhd.@dd@d~ddd@ddZ@ddw6dm@d_{dZ5dI@d?d5Kd,@d&@d$(@d@dadxcc@cwc=@cc@cc@cci@c.c@c|cs@cjDcb[cZrcWcN@cEZc2c)@c#c!@cc @cob5@bL@bbޅbK@bb'bba@b&b@b@bb@bzSbu bgb^@bUibN@bBb9@b0Zhang Changzhong - 4.19.90-2403.2.0.0242Zhang Changzhong - 4.19.90-2403.1.0.0241Zhang Changzhong - 4.19.90-2402.6.0.0240Zhang Changzhong - 4.19.90-2402.5.0.0239Zhang Changzhong - 4.19.90-2402.4.0.0238Zhang Changzhong - 4.19.90-2402.1.0.0237Zhang Changzhong - 4.19.90-2401.5.0.0236Zhang Changzhong - 4.19.90-2401.4.0.0235Zhang Changzhong - 4.19.90-2401.3.0.0234Zhang Changzhong - 4.19.90-2401.1.0.0233Zhang Changzhong - 4.19.90-2312.6.0.0232Zhang Changzhong - 4.19.90-2312.4.0.0231Zhang Changzhong - 4.19.90-2312.3.0.0230Zhang Changzhong - 4.19.90-2312.1.0.0229Zhang Changzhong - 4.19.90-2311.5.0.0228Zhang Changzhong - 4.19.90-2311.4.0.0227Zhang Changzhong - 4.19.90-2311.3.0.0226Zhang Changzhong - 4.19.90-2311.2.0.0225Zhang Changzhong - 4.19.90-2311.1.0.0224Zhang Changzhong - 4.19.90-2310.4.0.0223Zhang Changzhong - 4.19.90-2310.3.0.0222Zhang Changzhong - 4.19.90-2310.2.0.0221Zhang Changzhong - 4.19.90-2309.5.0.0220Zhang Changzhong - 4.19.90-2309.4.0.0219Zhang Changzhong - 4.19.90-2309.3.0.0218Zhang Changzhong - 4.19.90-2309.1.0.0217Zhang Changzhong - 4.19.90-2308.5.0.0216Zhang Changzhong - 4.19.90-2308.4.0.0215Zhang Changzhong - 4.19.90-2308.3.0.0214Zhang Changzhong - 4.19.90-2308.2.0.0213Zhang Changzhong - 4.19.90-2308.1.0.0212Zhang Changzhong - 4.19.90-2307.5.0.0211Zhang Changzhong - 4.19.90-2307.4.0.0210Zhang Changzhong - 4.19.90-2307.3.0.0209Zhang Changzhong - 4.19.90-2306.7.0.0208Zhang Changzhong - 4.19.90-2306.5.0.0207Zhang Changzhong - 4.19.90-2306.4.0.0206Zhang Changzhong - 4.19.90-2306.3.0.0205Zhang Changzhong - 4.19.90-2306.1.0.0204Zhang Changzhong - 4.19.90-2305.4.0.0203Zhang Changzhong - 4.19.90-2305.3.0.0202Zhang Changzhong - 4.19.90-2305.2.0.0201Zhang Changzhong - 4.19.90-2305.1.0.0200Zhang Changzhong - 4.19.90-2304.5.0.0199Zhang Changzhong - 4.19.90-2304.4.0.0198Zhang Changzhong - 4.19.90-2304.3.0.0197Zhang Changzhong - 4.19.90-2304.1.0.0196Zhang Changzhong - 4.19.90-2303.6.0.0195Zhang Changzhong - 4.19.90-2303.5.0.0194Zhang Changzhong - 4.19.90-2303.4.0.0193Zhang Changzhong - 4.19.90-2303.3.0.0192Zhang Changzhong - 4.19.90-2303.1.0.0191Laibin Qiu - 4.19.90-2302.5.0.0190Laibin Qiu - 4.19.90-2302.4.0.0189Laibin Qiu - 4.19.90-2302.3.0.0188Laibin Qiu - 4.19.90-2302.1.0.0187Laibin Qiu - 4.19.90-2301.6.0.0186Zheng Zengkai - 4.19.90-2301.5.0.0185Laibin Qiu - 4.19.90-2301.3.0.0184Laibin Qiu - 4.19.90-2212.4.0.0183Laibin Qiu - 4.19.90-2212.3.0.0182Laibin Qiu - 4.19.90-2212.2.0.0181Laibin Qiu - 4.19.90-2212.1.0.0180Laibin Qiu - 4.19.90-2211.6.0.0179Laibin Qiu - 4.19.90-2211.5.0.0178Laibin Qiu - 4.19.90-2211.4.0.0177Laibin Qiu - 4.19.90-2211.2.0.0176Laibin Qiu - 4.19.90-2211.1.0.0175Laibin Qiu - 4.19.90-2210.5.0.0174Laibin Qiu - 4.19.90-2210.4.0.0173Laibin Qiu - 4.19.90-2210.3.0.0172Laibin Qiu - 4.19.90-2210.1.0.0171Laibin Qiu - 4.19.90-2209.6.0.0170Laibin Qiu - 4.19.90-2209.5.0.0169Laibin Qiu - 4.19.90-2209.4.0.0168Laibin Qiu - 4.19.90-2209.3.0.0167Laibin Qiu - 4.19.90-2209.1.0.0166Laibin Qiu - 4.19.90-2208.6.0.0165Laibin Qiu - 4.19.90-2208.5.0.0164Laibin Qiu - 4.19.90-2208.4.0.0163Laibin Qiu - 4.19.90-2208.2.0.0162Laibin Qiu - 4.19.90-2208.1.0.0161Laibin Qiu - 4.19.90-2207.4.0.0160Laibin Qiu - 4.19.90-2207.3.0.0159Laibin Qiu - 4.19.90-2207.2.0.0158Laibin Qiu - 4.19.90-2207.1.0.0157Laibin Qiu - 4.19.90-2206.4.0.0156Laibin Qiu - 4.19.90-2206.3.0.0155Laibin Qiu - 4.19.90-2206.2.0.0154Laibin Qiu - 4.19.90-2206.1.0.0153Laibin Qiu - 4.19.90-2205.6.0.0152Laibin Qiu - 4.19.90-2205.5.0.0151Laibin Qiu - 4.19.90-2205.4.0.0150Laibin Qiu - 4.19.90-2205.3.0.0149Laibin Qiu - 4.19.90-2205.1.0.0148Laibin Qiu - 4.19.90-2204.4.0.0147Laibin Qiu - 4.19.90-2204.3.0.0146Laibin Qiu - 4.19.90-2204.2.0.0145Laibin Qiu - 4.19.90-2204.1.0.0144Laibin Qiu - 4.19.90-2203.5.0.0143Laibin Qiu - 4.19.90-2203.4.0.0142Laibin Qiu - 4.19.90-2203.3.0.0141- !5133 CVE-2021-46926 - !5136 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - !5052 v3 Remove WQ_FLAG_BOOKMARK flag - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3 - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - ALSA: hda: intel-sdw-acpi: harden detection of controller - soundwire: intel: filter SoundWire controller device search - !5114 fix CVE-2023-52578 - !5119 crypto: scomp - fix req->dst buffer overflow - !5101 EDAC/thunderx: Fix possible out-of-bounds string access - !5094 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect - crypto: scomp - fix req->dst buffer overflow - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - !5092 wifi: mac80211: fix potential key use-after-free - EDAC/thunderx: Fix possible out-of-bounds string access - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2 - !5090 drm: bridge/panel: Cleanup connector on bridge detach - !5088 uio_hv_generic: Fix a memory leak in error handling paths - !4952 scsi: qedf: Add pointer checks in qedf_update_link_speed() - !5076 v3 CVE-2021-47074 - netfilter: nft_compat: reject unused compat flag - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - bonding: remove print in bond_verify_device_path - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: ipv4: fix a memleak in ip_setup_cork - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - SUNRPC: Fix a suspicious RCU usage warning - tcp: Add memory barrier to tcp_push() - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - md: Whenassemble the array, consult the superblock of the freshest device - jbd2: correct the printing of write_flags in jbd2_write_superblock() - !5073 RDMA/rxe: Clear all QP fields if creation failed - !5077 RDMA/rxe: Return CQE error if invalid lkey was supplied - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1 - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect - wifi: mac80211: fix potential key use-after-free - drm: bridge/panel: Cleanup connector on bridge detach - uio_hv_generic: Fix a memory leak in error handling paths - of: unittest: Fix of_count_phandle_with_args() expected value message - of: unittest: Fix compile in the non-dynamic case - RDMA/rxe: Return CQE error if invalid lkey was supplied - nvme-loop: fix memory leak in nvme_loop_create_ctrl() - nvme-loop: don't put ctrl on nvme_init_ctrl error - !5060 net: fix possible store tearing in neigh_periodic_work() - RDMA/rxe: Clear all QP fields if creation failed - net: fix possible store tearing in neigh_periodic_work() - of: Fix double free in of_parse_phandle_with_args_map - pmdomain: core: Move the unused cleanup to a _sync initcall - tick/sched: Preserve number of idle sleeps across CPU hotplug events - acpi: property: Let args be NULL in __acpi_node_get_property_reference - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug - ACPI: LPIT: Avoid u32 multiplication overflow - audit: Send netlink ACK before setting connection in auditd_set - crypto: scompress - return proper error code for allocation failure - crypto: af_alg - Disallow multiple in-flight AIO requests - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !5046 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - !4929 scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - !4752 block: add check that partition length needs to be aligned with block size - !4735 blk-mq: fix IO hang from sbitmap wakeup race - !3864 nvme: sanitize metadata bounce buffer for reads - !4946 NFC: st21nfca: Fix memory leak in device probe and remove - !4999 CVE-2021-46984 - !4938 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - !4990 vt: fix memory overlapping when deleting chars in the buffer - !4978 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5018 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - !4992 bnxt_en: Fix RX consumer index logic in the error path. - !4997 Fixed CVE-2023-52504 - !4982 i2c: img-scb: fix reference leak when pm_runtime_get_sync fails - !4983 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - !4995 mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val - !4974 arm64/mpam: set default feedback of last_cmd_status interface as null string - !4975 arm64/mpam: support resctrl fs to show mounting option - !4973 arm64/mpam: Skip updates of unrelated ctrl type - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - !4996 soundwire: stream: fix memory leak in stream config error path - !4817 v2 io_uring: fix overflows checks in provide buffers - kyber: fix kabi broken in ->bio_merge() - kyber: fix out of bounds access when preempted - x86/alternatives: Disable KASAN in apply_alternatives() - soundwire: stream: fix memory leak in stream config error path - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val - bnxt_en: Fix RX consumer index logic in the error path. - !4969 CVE-2021-46990 - vt: fix memory overlapping when deleting chars in the buffer - !4945 ieee802154: ca8210: Fix a potential UAF in ca8210_probe - !4944 perf/x86/lbr: Filter vsyscall addresses - !4967 i2c: xiic: fix reference leak when pm_runtime_get_sync fails - !4970 binder: fix async_free_space accounting for empty parcels - !4919 v2 HID: usbhid: fix info leak in hid_submit_ctrl - !4980 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !4949 CVE-2021-47024 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - arm64/mpam: support resctrl fs to show mounting option - arm64/mpam: set default feedback of last_cmd_status interface as null string - arm64/mpam: Skip updates of unrelated ctrl type - binder: fix async_free_space accounting for empty parcels - powerpc/64s: Fix crashes when toggling entry flush barrier - i2c: xiic: fix reference leak when pm_runtime_get_sync fails - scsi: qedf: Add pointer checks in qedf_update_link_speed() - vsock/virtio: free queued packets when closing socket - vsock/virtio: discard packets only when socket is really closed - virtio_vsock: Fix race condition in virtio_transport_recv_pkt - NFC: st21nfca: Fix memory leak in device probe and remove - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - perf/x86/lbr: Filter vsyscall addresses - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - HID: usbhid: fix info leak in hid_submit_ctrl - io_uring: fix overflows checks in provide buffers - block: add check that partition length needs to be aligned with block size - blk-mq: fix IO hang from sbitmap wakeup race - nvme: sanitize metadata bounce buffer for reads- !4947 powerpc/64s: Fix pte update for kernel memory on radix - !4932 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - powerpc/64s: Fix pte update for kernel memory on radix - !4874 v2 net: openvswitch: limit the number of recursions from action sets - !4920 ARM: footbridge: remove personal server platform - !4887 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - !4918 v3 usb: hub: Guard against accesses to uninitialized BOS descriptors - !4936 i2c: validate user data in compat ioctl - i2c: validate user data in compat ioctl - !4898 platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - !4879 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - !4869 Fix CVE-2021-46941 - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - !4904 i2c: sprd: fix reference leak when pm_runtime_get_sync fails - !4859 hfsplus: prevent corruption in shrinking truncate - !4877 i2c: Fix a potential use after free - ARM: footbridge: fix PCI interrupt mapping - !4888 v3 media: dvbdev: Fix memory leak in dvb_media_device_free() - usb: hub: Guard against accesses to uninitialized BOS descriptors - !4825 sched/membarrier: reduce the ability to hammer on sys_membarrier - !4882 Input: appletouch - initialize work before device registration - !4876 backport patch to fix CVE-2021-47077 - !4899 net: qualcomm: rmnet: fix global oob in rmnet_policy - i2c: sprd: fix reference leak when pm_runtime_get_sync fails - !4892 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4881 i2c: cadence: fix reference leak when pm_runtime_get_sync fails - net: qualcomm: rmnet: fix global oob in rmnet_policy - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - !4865 Input: powermate - fix use-after-free in powermate_config_complete - !4860 apparmor: avoid crash when parsed profile name is empty - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - media: dvbdev: Fix memory leak in dvb_media_device_free() - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - Input: appletouch - initialize work before device registration - i2c: cadence: fix reference leak when pm_runtime_get_sync fails - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - i2c: Fix a potential use after free - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - net: openvswitch: limit the number of recursions from action sets - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: balance phy init and exit - usb: dwc3: core: Do core softreset when switch mode - Input: powermate - fix use-after-free in powermate_config_complete - !4856 bus: qcom: Put child node before return - apparmor: avoid crash when parsed profile name is empty - hfsplus: prevent corruption in shrinking truncate - bus: qcom: Put child node before return - !4828 Drivers: hv: vmbus: Use after free in __vmbus_open() - !4806 v2 media: pvrusb2: fix use after free on context disconnection - !4777 drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !4819 v2 fix CVE-2020-36782 - !4833 openvswitch: fix stack OOB read while fragmenting IPv4 packets - !4677 f2fs: fix to avoid dirent corruption - !4804 CVE-2023-52451 backport to 4.19 v2 - openvswitch: fix stack OOB read while fragmenting IPv4 packets - Drivers: hv: vmbus: Use after free in __vmbus_open() - !4778 v3 Revert "memcg: fix a UAF problem in drain_all_stock()" - sched/membarrier: reduce the ability to hammer on sys_membarrier - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter - !4812 parisc: Clear stale IIR value on instruction access rights trap - parisc: Clear stale IIR value on instruction access rights trap - media: pvrusb2: fix use after free on context disconnection - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - !4758 binder: signal epoll threads of self-work - !4746 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - Revert "memcg: fix a UAF problem in drain_all_stock()" - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to fifo depth - 1 - !4707 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - !4686 mlxsw: spectrum_acl_tcam: Fix stack corruption - binder: signal epoll threads of self-work - !4710 CVE-2021-46904 for openEuler1.0 - i2c: hisi: Add clearing tx aempty interrupt operation - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1 - !4671 uio: Fix use-after-free in uio_open - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - net: hso: fix NULL-deref on disconnect regression - net: hso: fix null-ptr-deref during tty device unregistration - usb: hso: check for return value in hso_serial_common_create() - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - mlxsw: spectrum_acl_tcam: Fix stack corruption - f2fs: fix to avoid dirent corruption - uio: Fix use-after-free in uio_open- !4701 v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - !4684 v3 CVE-2023-52435 - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - !4643 f2fs: explicitly null-terminate the xattr list - f2fs: explicitly null-terminate the xattr list- !4601 v2 xen-netback: don't produce zero-size SKB frags - xen-netback: don't produce zero-size SKB frags - !4583 net: hns3: fix a bug and modify the hns3 driver version - net: hns3: update hns3 version to 24.2.1 - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - !4552 v4 CVE-2023-52340 - !4526 v2 fs:/dcache.c: fix negative dentry flag warning in dentry_free - ipv6: fix kabi broken in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - !4538 fix kprobe reenter bug - arm64/openeuler_defconfig: add not set config to fix compiling error - tracing/kprobes: Do the notrace functions check without kprobes on ftrace - fs:/dcache.c: fix negative dentry flag warning in dentry_free- !4454 netfilter: nf_tables: reject QUEUE/DROP verdict parameters - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4411 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - !4412 v3 Save and restore msg_namelen in sock_sendmsg - net: Save and restore msg_namelen in sock_sendmsg - net: prevent rewrite of msg_name in sock_sendmsg() - !4399 net: dst: Optimized route gc - drm/atomic: Fix potential use-after-free in nonblocking commits - !4392 linux-4.19.y inclusion - !4369 mm/filemap: avoid buffered read/write race to read inconsistent data - net/dst: use a smaller percpu_counter batch for dst entries accounting - net: add a route cache full diagnostic message - net: check dev->gso_max_size in gso_features_check() - net: warn if gso_type isn't set for a GSO SKB - mm: fix unmap_mapping_range high bits shift bug - x86/alternatives: Sync core before enabling interrupts - mm/filemap: avoid buffered read/write race to read inconsistent data - !4360 net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve - !4320 io_uring/af_unix: disable sending io_uring over sockets - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve - io_uring/af_unix: disable sending io_uring over sockets- !4277 fs:/dcache.c: fix negative dentry limit not complete problem - !4288 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4299 smb: client: fix NULL deref in asn1_ber_decoder() - smb: client: fix NULL deref in asn1_ber_decoder() - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4228 fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - fs:/dcache.c: fix negative dentry limit not complete problem - !4235 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4255 drm/amdgpu: Fix potential fence use-after-free v2 - !4209 dhugetlb: skip unexpected migration - drm/amdgpu: Fix potential fence use-after-free v2 - !4231 crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - !4212 netlink: fix potential sleeping issue in mqueue_flush_file - netlink: fix potential sleeping issue in mqueue_flush_file - dhugetlb: skip unexpected migration - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function - !3944 time: Handle negative seconds correctly in timespec64_to_ns() - !3943 timerqueue: Use rb_entry_safe() in timerqueue_getnext() - !3942 efi/x86: Map the entire EFI vendor string before copying it - !4166 sched/fair: Fix qos_timer deadlock when cpuhp offline - sched/fair: Fix qos_timer deadlock when cpuhp offline - !4137 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - time: Handle negative seconds correctly in timespec64_to_ns() - timerqueue: Use rb_entry_safe() in timerqueue_getnext() - efi/x86: Map the entire EFI vendor string before copying it- !4101 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !2954 spi: phytium: fix phytium_spi_irq panic on boot - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4067 fix CVE-2022-48619 - !4080 rtnetlink: Reject negative ifindexes in RTM_NEWLINK - rtnetlink: Reject negative ifindexes in RTM_NEWLINK - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" - !4065 smb: client: fix OOB in receive_encrypted_standard() - !4021 netfilter: nf_tables: Reject tables of unsupported family - Input: add bounds checking to input_set_capability() - smb: client: fix OOB in receive_encrypted_standard() - !4039 crypto: hisilicon/qm: fix several issues - !4025 crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro - !3980 vhost: use kzalloc() instead of kmalloc() followed by memset() - crypto: hisilicon/qm: fix several issues - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro - netfilter: nf_tables: Reject tables of unsupported family - vhost: use kzalloc() instead of kmalloc() followed by memset() - spi: phytium: fix phytium_spi_irq panic on boot- !4006 crypto: hisilicon/sec2: fix memory use-after-free issue - crypto: hisilicon/sec2: fix memory use-after-free issue - !3923 net: bridge: multicast: fix UAF of net_bridge - net: bridge: multicast: fix UAF of net_bridge- !3768 iomap: add support to track dirty state of sub pages - !3845 netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() - !3847 nvmet: nul-terminate the NQNs passed in the connect command - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2 - team: Fix use-after-free when an option instance allocation fails - packet: Move reference count in packet_sock to atomic_long_t - tcp: do not accept ACK of bytes we never sent - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() - ipv6: fix potential NULL deref in fib6_add() - ipv4: Correct/silence an endian warning in __ip_do_redirect - net: sched: fix race condition in qdisc_graft() - macvlan: Don't propagate promisc change to lower dev in passthru - ppp: limit MRU to 64K - tty: Fix uninit-value access in ppp_sync_receive() - net: annotate data-races around sk->sk_dst_pending_confirm - net: annotate data-races around sk->sk_tx_queue_mapping - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1 - ring-buffer: Fix memory leak of free page - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation - Revert "PCI: acpiphp: Reassign resources on bridge if necessary" - x86/CPU/AMD: Check vendor in the AMD microcode callback - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() - audit: don't take task_lock() in audit_exe_compare() code path - nvmet: nul-terminate the NQNs passed in the connect command - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() - !3823 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3803 net/sched: cbs: Fix not adding cbs instance to list - net/sched: cbs: Fix not adding cbs instance to list - !3770 ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - iomap: add support to track dirty state of sub pages - !3757 Fix bugs from LTS patches - devcoredump: Send uevent once devcd is ready - devcoredump : Serialize devcd_del work - driver core: Release all resources during unbind before updating device links - !3716 appletalk: Fix Use-After-Free in atalk_ioctl - !3667 net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - net/rose: Fix Use-After-Free in rose_ioctl- !3660 atm: Fix Use-After-Free in do_vcc_ioctl - !3687 Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - !3672 smb: client: fix potential OOB in smb2_dump_detail() - !3671 smb: client: fix OOB in smbCalcSize() - !3627 jbd2: fix soft lockup in journal_finish_inode_data_buffers() - !3189 fs: don't audit the capability check in simple_xattr_list() - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3555 net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() - atm: Fix Use-After-Free in do_vcc_ioctl - !3592 CVE-2023-35827 patchset - !3449 Fix data-races around - jbd2: fix soft lockup in journal_finish_inode_data_buffers() - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work() - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - fs: don't audit the capability check in simple_xattr_list()- !3607 Fix CVE-2023-6546 - !3606 perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - tty: n_gsm: fix restart handling via CLD command - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3417 SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers - !3531 Fix kernel panic occurs during ISO installation on the 20.03 SP3/SP4 - i2c: hisi: Only handle the interrupt of the driver's transfer - i2c: hisi: Only use the completion interrupt to finish the transfer - i2c: hisi: Avoid redundant interrupts - !3483 net: Remove acked SYN flag from packet in the transmit queue correctly - net: Remove acked SYN flag from packet in the transmit queue correctly - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers- !3426 Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" - Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" - Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"- !3347 tun: avoid double free in tun_free_netdev - tun: avoid double free in tun_free_netdev - !3239 net: hns: fix fake link up - !3113 KVM: arm64: limit PMU version to PMUv3 for ARMv8.1 - !3281 LTS patch backport - !3122 nvme: retain split access workaround for capability reads - !3262 icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. - net: fix kabi broken in struct netns_xfrm - xfrm: fix a data-race in xfrm_gen_index() - !3276 linux-4.19.y inclusion - !3263 workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() - !3267 x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() - can: dev: can_restart(): don't crash kernel if carrier is OK - can: dev: move driver related infrastructure into separate subdir - ipv6: avoid atomic fragment on GSO packets - tcp_metrics: do not create an entry from tcp_init_metrics() - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() - tcp_metrics: add missing barriers on delete - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb - tcp: fix excessive TLP and RACK timeouts from HZ rounding - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() - ACPI: irq: Fix incorrect return value in acpi_register_gsi() - ext4: move 'ix' sanity check to corrent position - vfs: fix readahead(2) on block devices - overlayfs: set ctime when setting mtime and atime - quota: Fix slow quotaoff - mcb: remove is_added flag from mcb_device struct - sched,idle,rcu: Push rcu_idle deeper into the idle path - cgroup: Remove duplicates in cgroup v1 tasks file - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. - net: hns: update hns version to 23.12.1 - net: hns: fix fake link up on xge port - !3021 fix CFS bandwidth vs. hrtimer self deadlock - !3202 regmap: fix NULL deref on lookup - regmap: fix NULL deref on lookup - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1 - arm64: cpufeature: Extract capped perfmon fields - nvme: retain split access workaround for capability reads - cpu/hotplug: fix kabi breakage in enum cpuhp_state - hrtimers: Push pending hrtimers away from outgoing CPU earlier- !3158 mm: don't let userspace spam allocations warnings - mm: don't let userspace spam allocations warnings - !2781 cpufreq: Abort show()/store() for half-initialized policies - !3118 sched: smart grid: check is active in affinity timer - sched: smart grid: check is active in affinity timer - !2977 Backport crypto bugfix - !3071 perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - !3038 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3031 x86/mce/amd: Publish the bank pointer only after setup has succeeded - !3030 x86/mce/inject: Fix a wrong assignment of i_mce.status - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - x86/mce/amd: Publish the bank pointer only after setup has succeeded - x86/mce/inject: Fix a wrong assignment of i_mce.status - crypto: fix kabi broken in struct crypto_instance - crypto: api - Use work queue in crypto_destroy_instance - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !3000 [openEuler-1.0-LTS] add Phytium drivers CONFIG - arm64: config: add config for Phytium drivers - !2908 mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - !2869 mm, memory_hotplug: update pcp lists everytime onlining a memory block - !2805 sched/fair: Refill bandwidth before scaling - !2804 signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal - !2960 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - kbuild: ensure full rebuild when the compiler is updated - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - mm, memory_hotplug: update pcp lists everytime onlining a memory block - sched/fair: Refill bandwidth before scaling - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal- !1935 [openEuler-1.0-LTS] Add Phytium optee driver support - !2895 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !2873 Fix SAS start error with maxcpus=1 - genirq: Take the proposed affinity at face value if force==true - optee: add phytium optee driver - optee: model OP-TEE as a platform device/driver - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - !2508 [openEuler-1.0-LTS] jpeg: Add a Phytium JPEG Engine driver - !2522 [openEuler-1.0-LTS] Add support for Phytium SoC RNG - !2877 Revert "tcp: fix delayed ACKs for MSS boundary condition" - !2693 [openEuler-1.0-LTS] Add support for Phytium QSPI - !2402 [openEuler-1.0-LTS] Add Phytium w1 driver support - !2403 [openEuler-1.0-LTS] Add Phytium adc driver support - !1874 [openEuler-1.0-LTS] Add Phytium mailbox driver support - !2024 [openEuler-1.0-LTS] Add Phytium RTC driver support - !2682 [openEuler-1.0-LTS] Add support for Phytium MMC - !2671 [openEuler-1.0-LTS] phytium dwmac net driver - !2676 [openEuler-1.0-LTS] Add Phytium gpio driver support - !2604 [openEuler-1.0-LTS] Add support for Phytium SPI - !2540 [openEuler-1.0-LTS] Driver for the Phytium keypad port. - Revert "tcp: fix delayed ACKs for MSS boundary condition" - hwrng: Add support for Phytium SoC RNG - jpeg: Add a Phytium JPEG Engine driver - !2818 Fix memleak in disassociate_ctty() - !2810 drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c - rtc: add phytium rtc driver document - rtc: add rtc drivers for Phytium SOCs - gpio: add phytium gpio driver - dwmac:add phytium dwmac driver - mailbox:add phytium mailbox driver document - mailbox: add phytium mailbox driver - mmc: add phytium mmc driver DT binding docs - mmc: add support for Phytium MMC - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() - Revert "tty: fix pid memleak in disassociate_ctty()" - spi: add phytium spi driver DT binding docs - spi: add phytium spi support - qspi: add phytium qspi driver DT binding docs - qspi: add support for Phytium QSPI controller - gpio: add phytium gpio driver document - dwmac:add phytium dwmac driver DT binding docs - adc: add phytium adc driver - adc: add phytium adc driver document - w1: add phytium w1 driver - w1: add phytium w1 driver document - KEYPAD: Driver for the Phytium keypad port. - KEYPAD: Document for the Phytium keypad port.- !2803 drivers/gmjstcm: fix a dev_err() call in spi tcm device probe - !2841 drm/qxl: fix UAF on handle creation - !2785 [openEuler-1.0-LTS] SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers - drm/qxl: fix UAF on handle creation - !2809 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: media/dvb: Use kmemdup rather than duplicating its implementation - media: dvbdev: Fix memleak in dvb_register_device - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe - SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers- !2793 handle uninitialized numa nodes gracefully. - !2789 linux-4.19.y inclusion - arch/x86/mm/numa: Do not initialize nodes twice - mm: handle uninitialized numa nodes gracefully - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG - !2713 Fix netfilter conntrack - !2651 sched/membarrier: fix missing local execution of ipi_sync_rq_state() - tcp: fix delayed ACKs for MSS boundary condition - tcp: fix quick-ack counting to count actual ACKs of new data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - team: fix null-ptr-deref when team device type is changed - af_unix: Fix data race around sk->sk_err. - af_unix: Fix data-races around sk->sk_shutdown. - af_unix: Fix data-race around unix_tot_inflight. - af_unix: Fix data-races around user->unix_inflight. - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr - net: read sk->sk_family once in sk_mc_loop() - skbuff: skb_segment, Call zero copy functions before using skbuff frags - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU - tcp: tcp_enter_quickack_mode() should be static - net: Avoid address overwrite in kernel_connect - md/raid1: fix error: ISO C90 forbids mixed declarations - md: raid1: fix potential OOB in raid1_remove_disk() - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer - autofs: fix memory leak of waitqueues in autofs_catatonic_mode - pstore/ram: Check start of empty przs during init - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() - fs: Fix error checking for d_hash_and_lookup() - !2767 crypto: hisilicon/qm - alloc reserve buffer to set and get xqc - crypto: hisilicon/qm - alloc reserve buffer to set and get xqc - !2760 fs: lockd: avoid possible wrong NULL parameter - !2164 Net: ethernet: Support 3snic 3s9xx network card - !2605 add CONFIG_NGBE for Wangxun 1G NIC for aarch64 - !1873 [openEuler-1.0-LTS] Add Phytium hda driver support - !2564 [openEuler-1.0-LTS] Add Phytium i2c driver support - !2636 kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - fs: lockd: avoid possible wrong NULL parameter - !2754 Sync LTS patches for openEuler-1.0-LTS - !2758 crypto: hisilicon - qm obtain the mailbox config at one time - crypto: hisilicon - qm obtain the mailbox config at one time - regmap: rbtree: Fix wrong register marked as in-cache when creating new node - regmap: rbtree: Use alloc_flags for memory allocations - !2730 PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently - !2722 net: sched: sch_qfq: Use non-work-conserving warning handler - !2650 sched/cpuacct: Fix charge cpuacct.usage_sys - PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently - net: sched: sch_qfq: Use non-work-conserving warning handler - arm64: config: add CONFIG_NGBE for Wangxun 1G NIC - netfilter: conntrack: fix infinite loop on rmmod - netfilter: conntrack: do not auto-delete clash entries on reply - netfilter: conntrack: allow insertion of clashing entries - netfilter: conntrack: split resolve_clash function - netfilter: conntrack: place confirm-bit setting in a helper - netfilter: conntrack: remove two args from resolve_clash - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash - sched/membarrier: fix missing local execution of ipi_sync_rq_state() - sched/cpuacct: Fix charge cpuacct.usage_sys - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - hda: add phytium hda driver - hda: add phytium hda driver document - i2c: add Phytium i2c driver - i2c: add phytium i2c driver DT binding docs - Net: ethernet: Support 3snic 3s9xx network card- !2609 Fix CVE-2023-5717 - !2588 [openEuler-1.0-LTS] Add Phytium Display Engine support. - !2627 ubi: Refuse attaching if mtd's erasesize is 0 - !2473 Revert irq reentrant warm log - !1860 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 - !2551 Avoid spin or livelock during panic - !2314 can: raw: add missing refcount for memory leak fix - !2396 efi: use 32-bit alignment for efi_guid_t literals - ubi: Refuse attaching if mtd's erasesize is 0 - !2446 audit: fix possible soft lockup in __audit_inode_child() - !2614 CVE-2022-44033 - DRM: Phytium display DRM document - DRM: Phytium display DRM driver - ASoC: hdmi-codec: Add an op to set callback function for plug event - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !1974 CAN driver for phytium CPUs - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2577 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - can: can controller driver for phytium CPUs - !2550 xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2557 Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - printk: Drop console_sem during panic - printk: Avoid livelock with heavy printk during panic - printk: disable optimistic spin during panic - printk: Add panic_in_progress helper - xen/events: replace evtchn_rwlock with RCU - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 - irqchip/gic-v3-its: Make is_v4 use a TYPER copy - Revert "genirq: Introduce warn log when irq be reentrant" - Revert "genirq: add printk safe in irq context" - audit: fix possible soft lockup in __audit_inode_child() - can: add phytium can driver document - efi: use 32-bit alignment for efi_guid_t literals - can: raw: add missing refcount for memory leak fix- !2334 ktask: add memory leak handling for ktask_works in ktask_init() - !2333 ktask: add null-pointer checks for ktask_works in ktask_init() - !2453 igb: set max size RX buffer when store bad packet is enabled - ktask: add memory leak handling for ktask_works in ktask_init() - ktask: add null-pointer checks for ktask_works in ktask_init() - !2441 netfilter: xt_u32: validate user space input - !2435 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - netfilter: xt_u32: validate user space input - USB: ene_usb6250: Allocate enough memory for full object- !2466 x86/microcode/AMD: Make stub function static inline - !2461 perf/core: Fix reentry problem in perf_output_read_group() - x86/microcode/AMD: Make stub function static inline - perf/core: Fix reentry problem in perf_output_read_group() - !2409 netfilter: nfnetlink_osf: avoid OOB read - !2330 Add a check of uvhub_mask in init_per_cpu() - x86/platform/uv: Fix missing checks of kcalloc() return values - x86/platform/UV: Replace kmalloc() and memset() with k[cz]alloc() calls - !2412 netfilter: xt_sctp: validate the flag_info count - !2419 ext4: fix rec_len verify error - ext4: fix rec_len verify error - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - !2360 scsi: hisi_sas: Handle the NCQ error returned by D2H frame - scsi: hisi_sas: Handle the NCQ error returned by D2H frame- !2322 net/sched: Retire rsvp classifier - !2346 RDMA/irdma: Prevent zero-length STAG registration - !2349 net: ipv4: fix one memleak in __inet_del_ifa() - !2329 ipv4: fix null-deref in ipv4_link_failure - !2342 linux-4.19.y inclusion - !2345 Backport lts bugfix patch for macvlan - !2344 PCI: acpiphp: linux-4.19.y bugfixes backport - !2341 quota: fix warning in dqgrab() - net: ipv4: fix one memleak in __inet_del_ifa() - !1706 cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() - rtnetlink: Reject negative ifindexes in RTM_NEWLINK - netfilter: nf_queue: fix socket leak - net/sched: fix a qdisc modification with ambiguous command request - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled - sock: annotate data-races around prot->memory_pressure - !2337 mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs() - RDMA/irdma: Prevent zero-length STAG registration - bonding: fix macvlan over alb bond support - net: remove bond_slave_has_mac_rcu() - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus - PCI: acpiphp: Reassign resources on bridge if necessary - sock: Fix misuse of sk_under_memory_pressure() - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - ip_vti: fix potential slab-use-after-free in decode_session6 - net: af_key: fix sadb_x_filter validation - net: xfrm: Fix xfrm_address_filter OOB read - serial: 8250: Fix oops for port->pm on uart_change_pm() - quota: Properly disable quotas when add_dquot_ref() fails - quota: fix warning in dqgrab() - !2335 x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms - mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs() - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms - ipv4: fix null-deref in ipv4_link_failure - net/sched: Retire rsvp classifier - !2301 xfrm6: fix inet6_dev refcount underflow problem - !2303 cifs: Release folio lock on fscache read hit. - cifs: Release folio lock on fscache read hit. - !2294 netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - xfrm6: fix inet6_dev refcount underflow problem - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2276 cpuidle: Fix kobject memory leaks in error paths - cpuidle: Fix kobject memory leaks in error paths - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()- !2274 cec-api: prevent leaking memory through hole in structure - !2281 sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler - cec-api: prevent leaking memory through hole in structure - !2262 crypto: hisilicon - reset before init the device - crypto: hisilicon - reset before init the device - !2212 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev- !2168 net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2226 crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop - !2225 media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2177 sched/qos: Fix warning in CPU hotplug scenarios - !2207 crypto:hisilicon/qm - cache write back before flr and poweroff - !2206 Fix booting failure on arm64 - crypto:hisilicon/qm - cache write back before flr and poweroff - !2205 crypto:hisilicon/sec - modify hw endian config - Revert "efi: Make efi_rts_work accessible to efi page fault handler" - Revert "efi/x86: Handle page faults occurring while running EFI runtime services" - Revert "efi: Fix debugobjects warning on 'efi_rts_work'" - Revert "efi: Fix build error due to enum collision between efi.h and ima.h" - Revert "x86/efi: fix a -Wtype-limits compilation warning" - Revert "arm64: efi: Restore register x18 if it was corrupted" - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault" - Revert "arm64: efi: Execute runtime services from a dedicated stack" - Revert "arm64: efi: Recover from synchronous exceptions occurring in firmware" - Revert "efi: rt-wrapper: Add missing include" - Revert "arm64: efi: Make efi_rt_lock a raw_spinlock" - crypto:hisilicon/sec - modify hw endian config - !2118 Compiler: Backport value profile support to openEuler 20.03 LTS SP3. - GCOV: Add value profile support for kernel. - sched/qos: Fix warning in CPU hotplug scenarios - !2154 netfilter: nftables: exthdr: fix 4-byte stack OOB write - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2140 io_uring: ensure IOPOLL locks around deferred work - !2056 i2c: hisi: Add gpio bus recovery support - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2082 fix CVE-2023-20588 - io_uring: ensure IOPOLL locks around deferred work - i2c: hisi: Add gpio bus recovery support - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0- !2084 af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2071 【openEuler-1.0-LTS】net: openvswitch: don't send internal clone attribute to the userspace - net: openvswitch: don't send internal clone attribute to the userspace. - !2089 net/sched: sch_hfsc: Ensure inner classes have fsc curve - !335 efi: fix crash due to EFI runtime service page faults - net/sched: sch_hfsc: Ensure inner classes have fsc curve - !2088 [openEuler-1.0-LTS] bugfixes of scsi - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2069 x86/speculation: Add Gather Data Sampling mitigation - !1692 Mainline bugfix patches backport 4.19 - !2075 x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - !2079 [openEuler-1.0-LTS] stable inclusion from linux-4.19.y - scsi: core: raid_class: Remove raid_component_add() - scsi: core: Fix possible memory leak if device_add() fails - scsi: core: Fix legacy /proc parsing buffer overflow - serial: 8250_dw: Preserve original value of DLF register - serial: 8250_dw: split Synopsys DesignWare 8250 common functions - nbd: Add the maximum limit of allocated index in nbd_dev_add - integrity: Fix possible multiple allocation in integrity_inode_get() - !2070 net bugfixes inclusion from linux-4.19.y - drivers: net: prevent tun_build_skb() to exceed the packet size limit - net/packet: annotate data-races around tp->status - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen - tcp_metrics: annotate data-races around tm->tcpm_net - tcp_metrics: annotate data-races around tm->tcpm_vals[] - tcp_metrics: annotate data-races around tm->tcpm_lock - tcp_metrics: annotate data-races around tm->tcpm_stamp - tcp_metrics: fix addr_same() helper - virtio-net: set queues after driver_ok - virtio-net: fix race between set queues and probe - team: reset team's flags when down link is P2P device - bonding: reset bond's flags when down link is P2P device - tcp: annotate data-races around fastopenq.max_qlen - tcp: annotate data-races around tp->notsent_lowat - tcp: annotate data-races around rskq_defer_accept - tcp: annotate data-races around tp->linger2 - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() - net/sched: make psched_mtu() RTNL-less safe - udp6: fix udp6_ehashfn() typo - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). - vrf: Increment Icmp6InMsgs on the original netdev - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free - tcp: annotate data races in __tcp_oow_rate_limited() - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode - ipvlan: Fix return value of ipvlan_queue_xmit() - netlink: do not hard code device address lenth in fdb dumps - netlink: Add __sock_i_ino() for __netlink_diag_dump(). - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - !1987 tracing: Fix race issue between cpu buffer write and swap - !2067 memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() - netlink: fix potential deadlock in netlink_set_err() - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation - !2063 cpu/hotplug: Prevent self deadlock on CPU hot-unplug - !2046 use precise io accounting apis - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() - cpu/hotplug: Prevent self deadlock on CPU hot-unplug - !2050 memcg: fix a UAF problem in drain_all_stock() - !1976 fix race between setxattr and write back - memcg: fix a UAF problem in drain_all_stock() - dm: switch to precise io accounting - block: add precise io accouting apis - tracing: Fix race issue between cpu buffer write and swap - ext2: dump current reservation window info - ext2: fix race between setxattr and write back - ext2: introduce flag argument for ext2_new_blocks() - ext2: remove ext2_new_block() - arm64: efi: Make efi_rt_lock a raw_spinlock - efi: rt-wrapper: Add missing include - arm64: efi: Recover from synchronous exceptions occurring in firmware - arm64: efi: Execute runtime services from a dedicated stack - efi: fix userspace infinite retry read efivars after EFI runtime services page fault - arm64: efi: Restore register x18 if it was corrupted - x86/efi: fix a -Wtype-limits compilation warning - efi: Fix build error due to enum collision between efi.h and ima.h - efi: Fix debugobjects warning on 'efi_rts_work' - efi/x86: Handle page faults occurring while running EFI runtime services - efi: Make efi_rts_work accessible to efi page fault handler - lib/genalloc.c: change return type to unsigned long for bitmap_set_ll - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE- !1964 crypto:padata: Fix return err for PADATA_RESET - !1955 fuse: revalidate: don't invalidate if interrupted - !1973 sched/smt: fix unbalance sched_smt_present dec/inc - sched/smt: fix unbalance sched_smt_present dec/inc - !1906 tracing: Fix memleak due to race between current_tracer and trace - !1958 block: don't get gendisk if queue has not been registered - crypto:padata: Fix return err for PADATA_RESET - block: don't get gendisk if queue has not been registered - fuse: revalidate: don't invalidate if interrupted - !1902 tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed- !1863 nbd: pass nbd_sock to nbd_read_reply() instead of index - !1638 [openEuler-1.0-LTS] Add support for Hygon model 4h~6h processors - !1884 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() - !1882 ip6mr: Fix skb_under_panic in ip6mr_cache_report() - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() - ip6mr: Fix skb_under_panic in ip6mr_cache_report() - EDAC/amd64: Add support for Hygon family 18h model 6h - x86/amd_nb: Add support for Hygon family 18h model 6h - hwmon/k10temp: Add support for Hygon family 18h model 5h - EDAC/amd64: Add support for Hygon family 18h model 5h - x86/amd_nb: Add support for Hygon family 18h model 5h - x86/cpu: Get LLC ID for Hygon family 18h model 5h - i2c-piix4: Remove the IMC detecting for Hygon SMBus - hwmon/k10temp: Add support for Hygon family 18h model 4h - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h - EDAC/amd64: Add support for Hygon family 18h model 4h - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs - x86/microcode/hygon: Add microcode loading support for Hygon processors - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon - x86/MCE/AMD: Use an u64 for bank_map - EDAC/mc_sysfs: Increase legacy channel support to 12 - EDAC/amd64: Add new register offset support and related changes - EDAC/amd64: Set memory type per DIMM - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh - EDAC: Add RDDR5 and LRDDR5 memory types - hwmon: (k10temp) Remove unused definitions - hwmon: (k10temp) Remove residues of current and voltage - hwmon: (k10temp) Rework the temperature offset calculation - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems - x86/topology: Make __max_die_per_package available unconditionally - x86/cpu/amd: Set __max_die_per_package on AMD - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs - EDAC: Add DDR5 new memory type - x86/topology: Set cpu_die_id only if DIE_TYPE found - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId - x86/CPU/AMD: Save AMD NodeId as cpu_die_id - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh - hwmon: (k10temp) Add support for Zen3 CPUs - x86/mce: Increase maximum number of banks to 64 - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs - hwmon: (k10temp) Create common functions and macros for Zen CPU families - i2c: designware: Add device HID for Hygon I2C controller - hwmon: (k10temp) make some symbols static - hwmon: (k10temp) Reorganize and simplify temperature support detection - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs - hwmon: (k10temp) Display up to eight sets of CCD temperatures - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs - hwmon: (k10temp) Report temperatures per CPU die - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info - hwmon: (k10temp) Use bitops - hwmon: Add convience macro to define simple static sensors - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO} - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants - x86/umip: Make the UMIP activated message generic - x86/umip: Print UMIP line only once - x86/microcode/AMD: Clean up per-family patch size checks - !1689 [openEuler-1.0-LTS] drm/atomic-helper: Bump vblank timeout to 100 ms - nbd: pass nbd_sock to nbd_read_reply() instead of index - !1807 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1844 net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - !1785 README: Remove out-of-date contribution guide - !1849 fs: jfs: fix possible NULL pointer dereference in dbFree() - fs: jfs: fix possible NULL pointer dereference in dbFree() - !1836 tcp: Reduce chance of collisions in inet6_hashfn(). - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - README: Remove out-of-date contribution guide - drm/atomic-helper: Bump vblank timeout to 100 ms- !1831 fix NULL pointer dereference in __nf_nat_mangle_tcp_packet - netfilter: nat: fix kabi change - netfilter: nat: fix udp checksum corruption - netfilter: nat: remove csum_recalc hook - !1769 workqueue: Make flush_workqueue() also watch flush_work() - !1803 net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - !1767 bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - workqueue: Assign a color to barrier work items - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE - workqueue: Change the code of calculating work_flags in insert_wq_barrier() - workqueue: Change arguement of pwq_dec_nr_in_flight() - workqueue: Rename "delayed" (delayed by active management) to "inactive" - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves- !1762 xen/netback: Fix buffer overrun triggered by unusual packet - xen/netback: Fix buffer overrun triggered by unusual packet - !1761 fix CVE-2023-4194 - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - !1728 fix CVE-2023-4128 - !1673 sched: disable sched_autogroup by default - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free - !1712 xfrm: add NULL check in xfrm_update_ae_params - xfrm: add NULL check in xfrm_update_ae_params - sched: disable sched_autogroup by default- !1699 dm bugfixes backport from mainline - !1697 x86/cpu/amd: Add a Zenbleed fix - md: Flush workqueue md_rdev_misc_wq in md_alloc() - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - dm thin metadata: check fail_io before using data_sm - !1662 media: usb: siano: Fix CVE-2023-4132 - !1696 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - x86/cpu/amd: Add a Zenbleed fix - !1694 linux-4.19.y bugfixes backport - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys - sch_netem: fix issues in netem_change() vs get_dist_table() - sch_netem: acquire qdisc lock in netem_change() - cgroup: Do not corrupt task iteration when rebinding subsystem - !1577 tracing: Fix warning in trace_buffered_event_disable() - !1663 tty: fix pid memleak in disassociate_ctty() - tty: fix pid memleak in disassociate_ctty() - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - !1629 can: raw: fix receiver memory leak - !1655 can: bcm: Fix UAF in bcm_proc_show() - can: bcm: Fix UAF in bcm_proc_show() - can: raw: fix lockdep issue in raw_release() - can: raw: fix receiver memory leak - !1625 Fix host zero page refcount overflow caused by kvm - !1595 net: nfc: Fix CVE-2023-3863 - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - KVM: fix overflow of zero page refcount with ksm running - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths - nfc: llcp: nullify llcp_sock->dev on connect() error paths - nfc: Fix to check for kmemdup failure - tracing: Fix warning in trace_buffered_event_disable()- !1571 【openEuler-1.0-LTS】net: hns: fix wrong head when modify the tx feature when sending packets - !1570 【openEuler-1.0-LTS】net: hns3: bugfixes for hns3 drivers 2023.07.29 - net: hns: update hns version to 23.7.1 - net: hns: fix wrong head when modify the tx feature when sending packets - net: hns3: update hns3 version to 23.7.1 - net: hns3: fix tx timeout issue - net: hns3: fix incorrect hw rss hash type of rx packet - net: hns3: add barrier in vf mailbox reply process - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg - net: hns3: fix not call nic_call_event() problem when reset failed - !1556 net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1568 net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1549 binder: fix UAF caused by faulty buffer cleanup - binder: fix UAF caused by faulty buffer cleanup- !1534 arm64/mpam: fix missing kfree domain's ctrl_val arrray - arm64/mpam: fix missing kfree domain's ctrl_val arrray - !1529 net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1474 [openEuler-1.0-LTS] pmu: remove uncore code for Zhaoxin Platform - !1498 media: dvb-core: Fix use-after-free due on race condition at dvb_net - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1444 ring-buffer: Fix deadloop issue on reading trace_pipe - !1469 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - !1472 ipv6/addrconf: fix a potential refcount underflow for idev - pmu: remove uncore code for Zhaoxin Platform - ipv6/addrconf: fix a potential refcount underflow for idev - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() - ring-buffer: Fix deadloop issue on reading trace_pipe- !1435 fix CVE-2023-3117 - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - !1400 [openEuler-1.0-LTS] block: Try to handle busy underlying device on discard - !1416 Fix generic/299 fail - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1404 bpf: cpumap: Fix memory leak in cpu_map_update_elem - bpf: cpumap: Fix memory leak in cpu_map_update_elem - block: Try to handle busy underlying device on discard - !1377 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1374 etmem: fix the div 0 problem in swapcache reclaim process - !177 net:bonding:support balance-alb interface with vlan to bridge - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - etmem: fix the div 0 problem in swapcache reclaim process - bonding: fix reference count leak in balance-alb mode - net:bonding:support balance-alb interface with vlan to bridge- !1361 fix CVE-2023-1295 - io_uring: get rid of intermediate IORING_OP_CLOSE stage - fs: provide locked helper variant of close_fd_get_file() - file: Rename __close_fd_get_file close_fd_get_file - Remove DECnet support from kernel - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report - net: tcp: fix kabi breakage in struct sock - tcp: deny tcp_disconnect() when threads are waiting - ping6: Fix send to link-local addresses with VRF. - net: sched: fix possible refcount leak in tc_chain_tmplt_add() - rfs: annotate lockless accesses to RFS sock flow table - rfs: annotate lockless accesses to sk->sk_rxhash - xfrm: Check if_id in inbound policy/secpath match - udp6: Fix race condition in udp6_sendmsg & connect - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set - af_packet: do not use READ_ONCE() in packet_bind() - af_packet: Fix data-races of pkt_sk(sk)->num. - ipv{4,6}/raw: fix output xfrm lookup wrt protocol - ipv6: Fix out-of-bounds access in ipv6_find_tlv() - net: fix skb leak in __skb_tstamp_tx() - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() - af_key: Reject optional tunnel/BEET mode templates in outbound policies - net: Catch invalid index in XPS mapping - af_unix: Fix data races around sk->sk_shutdown. - af_unix: Fix a data race of sk->sk_receive_queue->qlen. - net: datagram: fix data-races in datagram_poll() - tcp: factor out __tcp_close() helper - net: annotate sk->sk_err write from do_recvmmsg() - netlink: annotate accesses to nlk->cb_running - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - quota: add dqi_dirty_list description to comment of Dquot List Management - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list - kernel/extable.c: use address-of operator on section symbols - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t - x86/mm: Avoid incomplete Global INVLPG flushes - sched: Fix KCSAN noinstr violation - serial: 8250: Reinit port->pm on port specific driver unbind - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects - ACPI: EC: Fix oops when removing custom query handlers - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() - lib: cpu_rmap: Avoid use after free on rmap->obj array entries - ext4: improve error recovery code paths in __ext4_remount() - scsi: core: Improve scsi_vpd_inquiry() checks - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock - loop: loop_set_status_from_info() check before assignment - loop: Check for overflow while configuring loop - Revert "loop: Check for overflow while configuring loop" - block: don't set GD_NEED_PART_SCAN if scan partition failed - block: return -EBUSY when there are open partitions in blkdev_reread_part - blk-wbt: make enable_state more accurate - block: Limit number of items taken from the I/O scheduler in one go - crypto: cryptd - Protect per-CPU resource by disabling BH. - random: fix data race on crng_node_pool - x86/kprobes: Fix the error judgment for debug exceptions - ext4: turning quotas off if mount failed after enable quotas - ext4: forbid commit inconsistent quota data when errors=remount-ro - quota: fixup *_write_file_info() to return proper error code - ipmi_si: fix a memleak in try_smi_init() - net: add vlan_get_protocol_and_depth() helper - net: tap: check vlan with eth_type_vlan() method - !1317 ext4: Stop trying writing pages if no free blocks generated - !1323 jbd2: fix several checkpoint - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Stop trying writing pages if no free blocks generated - ipvlan:Fix out-of-bounds caused by unclear skb->cb- sched: Fix null pointer derefrence for sd->span - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive() - scsi: hisi_sas: Fix normally completed I/O analysed as failed - drm/msm/dpu: Add check for pstates - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition- HID: intel_ish-hid: Add check for ishtp_dma_tx_map - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - config: enable CONFIG_QOS_SCHED_SMART_GRID by default - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - sched: Fix memory leak for smart grid - sched: Delete redundant updates to p->prefer_cpus - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - relayfs: fix out-of-bounds access in relay_file_read - kernel/relay.c: fix read_pos error when multiple readers - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()- sched: Adjust few parameters range for smart grid - sched: clear credit count in error branch - sched: Fix memory leak on error branch - sched: fix dereference NULL pointers - sched: Fix timer storm for smart grid - memstick: r592: Fix UAF bug in r592_remove due to race condition - fbcon: Check font dimension limits - sched/rt: Fix possible warn when push_rt_task - !1152 pci: workaround multiple functions can be assigned to only one VM - pci: workaround multiple functions can be assigned to only one VM - sched: Fix negative count for jump label - sched: Fix possible deadlock in tg_set_dynamic_affinity_mode - sched: fix WARN found by deadlock detect - sched: fix smart grid usage count - sched: Add static key to reduce noise - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() - !1134 【openEuler-1.0-LTS】cpufreq:conservative: Fix load in fast_dbs_update() - firewire: fix potential uaf in outbound_phy_packet_callback() - cpufreq: conservative: fix load in fast_dbs_update()- arm64: Add AMPERE1 to the Spectre-BHB affected list - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - sched: smart grid: init sched_grid_qos structure on QOS purpose - sched: Introduce smart grid scheduling strategy for cfs - ipmi: fix SSIF not responding under certain cond. - ipmi_ssif: Rename idle state and check - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). - nohz: Add TICK_DEP_BIT_RCU - perf/core: Fix hardlockup failure caused by perf throttle - of: Fix modalias string generation - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. - ipv4: Fix potential uninit variable access bug in __ip_make_skb() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors - net/packet: convert po->auxdata to an atomic flag - net/packet: convert po->origdev to an atomic flag - ring-buffer: Sync IRQ works before buffer destruction - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). - lib/cmdline: fix get_option() for strings starting with hyphen - of: overlay: fix for_each_child.cocci warnings - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list - fs: hfsplus: fix UAF issue in hfsplus_put_super - block: Fix the partition start may overflow in add_partition() - block: refactor blkpg_ioctl - nbd: get config_lock before sock_shutdown - ipv6: sr: fix out-of-bounds read when setting HMAC data. - dm: add disk before alloc dax - dm thin: Fix ABBA deadlock by resetting dm_bufio_client- !932 [sync] PR-922: jbd2: fix checkpoint inconsistent - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - net: sched: fix NULL pointer dereference in mq_attach- !841 【openEuler-1.0-LTS】cpufreq: conservative: Add a switch to enable fast mode - x86/pm: Fix false positive kmemleak report in msr_build_context() - drm: Lock pointer access in drm_master_release() - drm: Fix use-after-free read in drm_getunique() - cpufreq: conservative: Add a switch to enable fast mode - of: overlay: kmemleak in dup_and_fixup_symbol_prop() - iommu/dma: Fix MSI reservation allocation - lib/stackdepot.c: fix global out-of-bounds in stack_slabs - rcu: Use *_ONCE() to protect lockless ->expmask accesses - iommu: Don't print warning when IOMMU driver only supports unmanaged domains - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum- netfilter: nf_tables: deactivate anonymous set from preparation phase - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable - xfs: verify buffer contents when we skip log replay - !586 [openEuelr-1.0-LTS] kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- net: sctp: update stream->incnt after successful allocation of stream_in - !741 [openEuler-1.0-LTS] openeuler_defconfig: Add configuration items for zhaoxin - !752 arm64/mpam: modify mpam irq register error log - arm64/mpam: modify mpam irq register error log - !437 [openEuler-1.0-LTS] USB: HCD: Fix URB giveback issue in tasklet function - openeuler_defconfig: Add configuration items for zhaoxin - bluetooth: Perform careful capability checks in hci_sock_ioctl() - netrom: Fix use-after-free caused by accept on already connected socket - !689 Fix compile error in allyesconfigs - !441 [openEuler-1.0-LTS] Add support for Zhaoxin SM3 and SM4 instruction - !438 [openEuler-1.0-LTS] Add Zhaoxin I2C driver - i2c: Add Zhaoxin I2C driver - !432 [openEuler-1.0-LTS] Add Zhaoxin ACE driver - mm: memcontrol: switch to rcu protection in drain_all_stock() - !429 [openEuler-1.0.-LTS] ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC - !428 [openEuelr-1.0-LTS] x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs - !687 [HUST CSE] fix a use-after-free bug in uncore_pci_remove() - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs - x86/perf: fix use-after-free bug in uncore_pci_remove() - crypto: Driver for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Driver for Zhaoxin GMI SM3 Secure Hash algorithm - !433 [openEuler-1.0-LTS] Add support of turbo boost control interface for Zhaoxin CPUs - !431 [openEuler-1.0-LTS] Add Zhaoxin rng driver - crypto: Add Zhaoxin ACE driver - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support - hwrng: Add Zhaoxin rng driver - USB: HCD: Fix URB giveback issue in tasklet function - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs- ipv6: Fix an uninit variable access bug in __ip6_make_skb() - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() - verify_pefile: relax wrapper length check - udp6: fix potential access to stale information - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() - ftrace: Mark get_lock_parent_ip() __always_inline - perf/core: Fix the same task check in perf_event_set_output - net: don't let netpoll invoke NAPI if in xmit context - icmp: guard against too small mtu - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized - dm stats: check for and propagate alloc_percpu failure - dm thin: fix deadlock when swapping to thin device - genirq: introduce handle_fasteoi_edge_irq for phytium - genirq: introduce handle_fasteoi_edge_irq flow handler - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq" - Revert "config: enbale irq pending config for openeuler" - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI" - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ" - scsi: dpt_i2o: Remove obsolete driver - md: extend disks_mutex coverage - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - block: Only set bb->changed when badblocks changes - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - bonding: Fix memory leak when changing bond type to Ethernet - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - ext4: only update i_reserved_data_blocks on successful block allocation - mm: mem_reliable: Use zone_page_state to count free reliable pages - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - RDMA/core: Refactor rdma_bind_addr - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback- RDMA/hns: Add check for user-configured max_inline_data value - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - !430 [openEuler-1.0-LTS] ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - audit: fix a memleak caused by auditing load module - !595 [openEuler-1.0-LTS] iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing - tcp: restrict net.ipv4.tcp_app_win - x86/speculation: Allow enabling STIBP with legacy IBRS - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing - ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name- KVM: nVMX: add missing consistency checks for CR0 and CR4 - drm/vmwgfx: Validate the box size for the snooped cursor - net/sched: Retire tcindex classifier - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - cpu/SMT: create and export cpu_smt_possible() - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - !566 linux-4.19.y bugfixes backport - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - random: always mix cycle counter in add_latent_entropy() - x86/mm: Fix use of uninitialized buffer in sme_enable() - ext4: fail ext4_iget if special inode unallocated - ext4: zero i_disksize when initializing the bootloader inode - irqdomain: Drop bogus fwspec-mapping error handling - irqdomain: Fix disassociation race - irqdomain: Fix association race - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic - x86/bugs: Reset speculation control settings on init - timers: Prevent union confusion from unexpected restart_syscall() - crypto: rsa-pkcs1pad - Use akcipher_request_complete - crypto: seqiv - Handle EBUSY correctly - ACPI: battery: Fix missing NUL-termination with large strings - ACPICA: nsrepair: handle cases without a return value correctly - genirq: Fix the return type of kstat_cpu_irqs_sum() - ACPI: NFIT: fix a potential deadlock during NFIT teardown - alarmtimer: Prevent starvation by small intervals and SIG_IGN - ring-buffer: Fix race while reader and writer are on the same page - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order - Revert "cgroup/cpuset: Change cpuset_rwsem and hotplug lock order" - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: fix kabi broken in ioctl.c - block: merge disk_scan_partitions and blkdev_reread_part - block: cleanup partition scanning in register_disk - block: Revert "block: check 'bd_super' before rescanning partition" - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - mm: mem_reliable: Initialize reliable_nr_page when mm_init() - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - loop: Add parm check in loop_control_ioctl - block/wbt: enable wbt after switching cfq to other schedulers - Fix double fget() in vhost_net_set_backend() - sched/fair: Sanitize vruntime of entity being migrated - sched/fair: sanitize vruntime of entity being placed - Revert "sched: Reinit task's vruntime if a task sleep over 200 days" - btrfs: fix race between quota disable and quota assign ioctls- ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - net: virtio_net_hdr_to_skb: count transport header in UFO - net: be more gentle about silly gso requests coming from user - ext4: fix race between writepages and remount- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF - ftrace: Fix invalid address access in lookup_rec() when index is 0 - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - RDMA/core: Don't infoleak GRH fields - !480 mm bugfixes backport - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order - mm: memcontrol: fix cannot alloc the maximum memcg ID- net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() - x86/speculation: Add RSB VM Exit protections - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/speculation: Disable RRSBA behavior - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/entry: Remove skip_r11rcx - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/cpu: Add a steppings field to struct x86_cpu_id - x86/cpu: Add consistent CPU match macros - x86/devicetable: Move x86 specific macro out of generic code - x86/cpufeature: Fix various quality problems in the header - x86/cpufeature: Add facility to check for min microcode revisions - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" - Revert "x86/speculation: Add RSB VM Exit protections" - x86/nospec: Fix i386 RSB stuffing - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - tty: fix out-of-bounds access in tty_driver_lookup_tty() - arm64: errata: Remove AES hwcap for COMPAT tasks - kernel: Initialize cpumask before parsing - genirq: Disable interrupts for force threaded handlers - softirq: Don't try waking ksoftirqd before it has been spawned - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw - scsi: hisi_sas: Handle NCQ error when IPTT is valid - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: refactor the handle of xmit - net: sched: don't expose action qstats to skb_tc_reinsert() - net: sched: protect against stack overflow in TC act_mirred - net: sched: refactor reinsert action - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - ext4: fix another off-by-one fsmap error on 1k block filesystems- tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - mm/oom_kill.c: fix oom_cpuset_eligible() comment - oom: decouple mems_allowed from oom_unkillable_task - mm, oom: remove redundant task_in_mem_cgroup() check - mm, oom: refactor dump_tasks for memcg OOMs - block: Fix wrong offset in bio_truncate() - fs: move guard_bio_eod() after bio_set_op_attrs - block: add bio_truncate to fix guard_bio_eod - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() - cifs: Fix use-after-free in rdata->read_into_pages() - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()- scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - blk-wbt: don't enable throttling if default elevator is bfq - block: Fix kabi broken by "block: split .sysfs_lock into two locks" - block: fix comment and add lockdep assert - block: don't release queue's sysfs lock during switching elevator - block: fix race between switching elevator and removing queues - block: split .sysfs_lock into two locks - crypto: rsa-pkcs1pad - restore signature length check - fs/proc: task_mmu.c: don't read mapcount for migration entry - migrate: hugetlb: check for hugetlb shared PMD in node migration - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps - ipv6: Fix tcp socket connection with DSCP. - ipv6: Fix datagram socket connection with DSCP. - aio: fix mremap after fork null-deref - bpf: Always return target ifindex in bpf_fib_lookup - serial: 8250_dma: Fix DMA Rx rearm race - serial: 8250_dma: Fix DMA Rx completion race - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() - netlink: annotate data races around sk_state - netlink: annotate data races around dst_portid and dst_group - netlink: annotate data races around nlk->portid - netlink: remove hash::nelems check in netlink_insert - net: fix UaF in netns ops registration error path - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - binder: fix handling of error during copy - binder: use cred instead of task for getsecid - binder: don't detect sender/target during buffer cleanup - binder: make sure fd closes complete - binder: Remove bogus warning on failed same-process transaction - binder: fix incorrect calculation for num_valid - binder: Prevent repeated use of ->mmap() via NULL mapping - binder: Don't modify VMA bounds in ->mmap handler - binder: Set end of SG buffer area properly. - binder: return errors from buffer copy functions - binder: check for overflow when alloc for security context - binder: fix BUG_ON found by selinux-testsuite - binder: fix handling of misaligned binder object - binder: use userspace pointer as base of buffer space - binder: remove user_buffer_offset - binder: remove kernel vm_area for buffer space - binder: avoid kernel vm_area for buffer fixups - binder: add function to copy binder object from buffer - binder: add functions to copy to/from binder buffers - binder: create userspace-to-binder-buffer copy function - binder: fix use-after-free due to ksys_close() during fdget() - binder: fix kerneldoc header for struct binder_buffer - binder: create node flag to request sender's security context - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl. - binder: use standard functions to allocate fds - block: fix kabi change since add bd_write_openers and bd_part_write_openers - block: add info when opening an exclusive opened block device for write - block: add info when opening a write opend block device exclusively - Revert "block: add info when opening an exclusive opened block device for write" - Revert "block: add info when opening a write opend block device exclusively" - ext4: fix WARNING in mb_find_extent - sctp: fail if no bound addresses can be used for a given scope- HID: check empty report_list in hid_validate_values() - dhugetlb: use mutex lock in update_reserve_pages() - ntfs: fix out-of-bounds read in ntfs_attr_find() - ntfs: fix use-after-free in ntfs_ucsncmp() - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - netfilter: nf_tables: fix null deref due to zeroed list head - tcp: Fix listen() regression in 5.15.88. - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - rds: rds_rm_zerocopy_callback() use list_first_entry()- !423 genirq bugfix for arm64 - genirq: Remove irqd_irq_disabled in __irq_move_irq - !422 iscsi bugfixes backport - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - !420 backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - nbd: fix assignment error for first_minor in nbd_dev_add - selinux: further adjust init order for cred_* hooks - selinux: further adjust init order for file_alloc_security hook - !415 mainline bugfix backport - selinux: reorder hooks to make runtime disable less broken - evm: Fix a small race in init_desc() - evm: Check also if *tfm is an error pointer in init_desc() - iommu: Properly export iommu_group_get_for_dev() - of: resolver: Add of_node_put() before return and break - of: unittest: Add of_node_put() before return - drivers/iommu: Allow IOMMU bus ops to be unregistered - drivers/iommu: Export core IOMMU API symbols to permit modular drivers - component: do not dereference opaque pointer in debugfs - ipmi: use %*ph to print small buffer - crypto: algif_skcipher - Use chunksize instead of blocksize - crypto: algif_skcipher - EBUSY on aio should be an error - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - dhugetlb: isolate hwpoison hugepage when release - mm/sharepool: Fix null-pointer-deference in sp_free_area- !213 net: bonding: Inherit MPLS features from slave devices - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - dhugetlb: set hpool to NULL for cont-bit hugepage - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig - arm64/ascend: Delete unused feature auto-tuning hugepage - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - !396 anolis: bond: broadcast ARP or ND messages to all slaves - anolis: bond: broadcast ARP or ND messages to all slaves - net: bonding: Inherit MPLS features from slave devices- block, bfq: switch 'bfqg->ref' to use atomic refcount apis - x86/bugs: Flush IBP in ib_prctl_set() - media: vivid: fix compose size exceed boundary - cifs: do not include page data when checking signature - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails - net: stream: purge sk_error_queue in sk_stream_kill_queues() - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() - ext4: fix deadlock due to mbcache entry corruption - mbcache: automatically delete entries from cache on freeing - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths - mm/khugepaged: fix GUP-fast interaction by sending IPI - mm: gup: fix the fast GUP race against THP collapse - prlimit: do_prlimit needs to have a speculation check - arm64: cmpxchg_double*: hazard against entire exchange variable - net/ulp: prevent ULP without clone op from entering the LISTEN status - driver core: Fix bus_type.match() error handling in __driver_attach() - md: fix a crash in mempool_free - bpf: pull before calling skb_postpull_rcsum() - SUNRPC: ensure the matching upcall is in-flight upon downcall - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() - pnode: terminate at peers of source - cifs: Fix uninitialized memory read for smb311 posix symlink create - device_cgroup: Roll back to original exceptions after copy failure - PCI/sysfs: Fix double free in error path - PCI: Fix pci_device_is_present() for VFs by checking PF - ipmi: fix use after free in _ipmi_destroy_user() - ima: Fix a potential NULL pointer access in ima_restore_measurement_list - ipmi: fix long wait in unload when IPMI disconnect - binfmt: Fix error return code in load_elf_fdpic_binary() - chardev: fix error handling in cdev_device_add() - mrp: introduce active flags to prevent UAF when applicant uninit - bpf: make sure skb->len != 0 when redirecting to a tunneling device - ipmi: fix memleak when unload ipmi driver - ACPICA: Fix error code path in acpi_ds_call_control_method() - skbuff: Account for tail adjustment during pull operations - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. - serial: amba-pl011: avoid SBSA UART accessing DMACR register - class: fix possible memory leak in __class_register() - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak - blktrace: Fix output non-blktrace event when blk_classic option enabled - SUNRPC: Fix missing release socket in rpc_sockname() - bonding: uninitialized variable in bond_miimon_inspect() - pinctrl: pinconf-generic: add missing of_node_put() - ima: Fix misuse of dereference of pointer in template_desc_init_fields() - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() - md/raid1: stop mdx_raid1 thread when raid1 array run failed - blk-mq: fix possible memleak when register 'hctx' failed - perf: Fix possible memleak in pmu_dev_alloc() - cpuidle: dt: Return the correct numbers of parsed idle states - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP - pstore/ram: Fix error return code in ramoops_probe() - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() - sched/rt: Optimize checking group RT scheduler constraints - md: protect md_unregister_thread from reentrancy - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list() - lib/list_debug.c: Detect uninitialized lists - crypto: tcrypt - avoid signed overflow in byte count - mm: sharepool: fix hugepage_rsvd count increase error - config: enbale irq pending config for openeuler - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ - md: fix uaf in md_wakeup_thread - genirq: add printk safe in irq context - jbd2: Fix data missing when reusing bh which is ready to be checkpointed - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - cifs: sanitize multiple delimiters in prepath - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry- ring-buffer: Fix race between reset page and reading page - block: don't allow a disk link holder to itself - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: lost matching-pair of trace in ext4_truncate - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - mm/swapfile: add cond_resched() in get_swap_pages() - hugetlbfs: don't delete error page from pagecache - mm: hwpoison: refactor refcount check handling - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig - dhugetlb: use enable_dhugetlb to disable huge_memory - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES - dhugetlb: isolate dynamic hugetlb code - dhugetlb: backport dynamic hugetlb feature - !344 mm: fix false-positive OVERCOMMIT_GUESS failures - cfq: fix memory leak for cfqq - mm: fix false-positive OVERCOMMIT_GUESS failures- bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - genirq: Introduce warn log when irq be reentrant - net: sched: disallow noqueue for qdisc classes - net: sched: atm: dont intepret cls results when asked to drop - block: check 'bd_super' before rescanning partition - net: sched: cbq: dont intepret cls results when asked to drop - swapfile: fix soft lockup in scan_swap_map_slots - Huawei BMA: Fix iBMA driver bug- USB: Fix kABI for usb_device->reset_in_progress - rndis_wlan: Prevent buffer overflow in rndis_query_oid - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - ima: Directly assign the ima_default_policy pointer to ima_rules - driver core: Don't probe devices after bus_type.match() probe deferral - KEYS: trusted: Fix migratable=1 failing - certs: Fix blacklist flag type confusion - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() - ipc/sem: Fix dangling sem_array access in semtimedop race - ipv6: avoid use-after-free in ip6_fragment() - nvme initialize core quirks before calling nvme_init_subsystem - memcg: fix possible use-after-free in memcg_write_event_control() - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() - nvme: restrict management ioctls to admin - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE - net: tun: Fix use-after-free in tun_detach() - of: property: decrement node refcount in of_fwnode_get_reference_args() - af_key: Fix send_acquire race with pfkey_register - audit: fix undefined behavior in bit shift for AUDIT_BIT - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls - ima: Do not print policy rule with inactive LSM labels - lsm: Resolve KABI changes on lsm_notifier - ima: Evaluate error in init_ima() - ima: ima/lsm policy rule loading logic bug fixes - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: use the lsm policy update notifier - LSM: switch to blocking policy update notifiers - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers- arm64: Kconfig: default unset ARCH_LLC_128_LINE_SIZE - mm/sharepool: clean up ABI breakage - timekeeping: Avoiding false sharing in field access of tk_core - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED - mm/memory-failure.c: fix race with changing page more robustly - mm,memory_failure: always pin the page in madvise_inject_error - kobject: Fix slab-out-of-bounds in fill_kobj_path() - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - mm/sharepool: Charge Buddy hugepage to memcg- dm thin: Use last transaction's pmd->root when commit failed - drm: mali-dp: potential dereference of null pointer - power: supply: wm8350-power: Add missing free in free_charger_irq - sched: Reinit task's vruntime if a task sleep over 200 days - media: dvb-core: Fix UAF due to refcount races at releasing - drm/amdkfd: Check for null pointer after calling kmemdup - !325 Support enabling dirty log gradually in small chunks - KVM: arm64: Support enabling dirty log gradually in small chunks - KVM: x86: enable dirty log gradually in small chunks - KVM: Introduce KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2 - KVM: Fix kvm_clear_dirty_log_protect off-by-(minus-)one - KVM: Fix the bitmap range to copy during clear dirty - kvm_main: fix some comments - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size - Revert "KVM: Eliminate extra function calls in kvm_get_dirty_log_protect()" - KVM: validate userspace input in kvm_clear_dirty_log_protect() - kvm: introduce manual dirty log reprotect - kvm: rename last argument to kvm_get_dirty_log_protect - kvm: make KVM_CAP_ENABLE_CAP_VM architecture agnostic- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - hv_netvsc: Add check for kvmalloc_array - xen/netback: don't call kfree_skb() with interrupts disabled - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - !273 [openEuler-1.0-LTS] Fix mouse enumeration issue after wakeup from s4 - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - media: mceusb: Use new usb_control_msg_*() routines - media: mceusb: fix control-message timeouts - USB: add usb_control_msg_send() and usb_control_msg_recv() - Fix mouse enumeration issue after wakeup from s4- mm/sharepool: Fix a double free problem caused by init_local_group - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - macvlan: enforce a consistent minimal mtu - net: macvlan: fix memory leaks of macvlan_common_newlink - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network - net: gso: fix panic on frag_list with mixed head alloc types - tcp/udp: Make early_demux back namespacified. - ipv6: fix WARNING in ip6_route_net_exit_late() - net, neigh: Fix null-ptr-deref in neigh_table_clear() - tcp: fix indefinite deferral of RTO with SACK reneging - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed - serial: 8250: Flush DMA Rx on RLSI - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() - security: commoncap: fix -Wstringop-overread warning - ring_buffer: Do not deactivate non-existant pages - ftrace: Fix null pointer dereference in ftrace_add_mod() - ftrace: Optimize the allocation for mcount entries - kprobe: reverse kp->flags when arm_kprobe failed - mm: fs: initialize fsdata passed to write_begin/write_end interface - nfs4: Fix kmemleak when allocate slot failed - kernfs: fix use-after-free in __kernfs_remove - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - mm: /proc/pid/smaps_rollup: fix no vma's null-deref - signal handling: don't use BUG_ON() for debugging - ida: don't use BUG_ON() for debugging- !272 [openEuler-1.0-LTS] Add MWAIT Cx support for Zhaoxin CPUs. - Bluetooth: L2CAP: Fix u8 overflow - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - !288 Add support for ConnectX6 Lx and ConnectX6Dx with openEuler inbox driver - net/mlx5: Update the list of the PCI supported devices - net/mlx5: Update the list of the PCI supported devices - drivers: net: slip: fix NPD bug in sl_tx_timeout() - staging: rtl8712: fix use after free bugs - Add MWAIT Cx support for Zhaoxin CPUs.- x86/tsc: use topology_max_packages() in tsc watchdog check - scsi: hisi_sas: Set iptt aborted flag when receiving an abnormal CQ - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0- svm: Delete unused ioctl command - Revert "posix-cpu-timers: Make timespec to nsec conversion safe" - block: limit request dispatch loop duration - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir- block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - init/main.c: return 1 from handled __setup() functions - x86/pm: Save the MSR validity status at context setup - x86/speculation: Restore speculation related MSRs during S3 resume - x86/cpu: Load microcode during restore_processor_state() - genirq: Synchronize interrupt thread startup - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices - once: add DO_ONCE_SLOW() for sleepable contexts - inet: fully convert sk->sk_rx_dst to RCU rules - ext4: continue to expand file system when the target size doesn't reach - nvme: copy firmware_rev on each init - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory - can: bcm: check the result of can_send() in bcm_can_tx() - xfrm: Update ipcomp_scratches with NULL when freed - tcp: annotate data-race around tcp_md5sig_pool_populated - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited - ext4: fix null-ptr-deref in ext4_write_info - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" - ima: Free the entire rule if it fails to parse - ima: Free the entire rule when deleting a list of rules - ima: Have the LSM free its audit rule - mm/migrate_device.c: flush TLB while holding PTL - mm: prevent page_frag_alloc() from corrupting the memory - mm/page_alloc: fix race condition between build_all_zonelists and page allocation - net: team: Unsync device addresses on ndo_stop - mm/slub: fix to return errno if kmalloc() fails - of: fdt: fix off-by-one error in unflatten_dt_nodes()- net: tun: fix bugs for oversize packet when napi frags enabled - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - ext4: fix bad checksum after online resize - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - fs: fix UAF/GPF bug in nilfs_mdt_destroy - dm: Fix UAF in run_timer_softirq() - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - livepatch/core: Fix livepatch/state leak on error path - !130 [openEuler-1.0-LTS] update pmu for Zhaoxin CPUs - update pmu for Zhaoxin CPUs- uacce: add the reference counter protection - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - usb: mon: make mmapped memory read only - !185 [openEuler-1.0-LTS] Add support sata lpm for Zhaoxin CPUs - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - atm: idt77252: fix use-after-free bugs caused by tst_timer - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - !94 [openEuler-1.0-LTS] rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs - !88 [openEuler-1.0-LTS] XHCI:Fix some device identify fail when enable xHCI runtime suspend - !92 [openEuler-1.0-LTS] x86/tsc: Make cur->adjusted values in package#1 to be the same - !93 [openEuler-1.0-LTS] Driver for Zhaoxin CPU core temperature monitoring - !89 [openEuler-1.0-LTS] EHCI: Clear wakeup signal locked in S0 state when device plug in - scsi: stex: Properly zero out the passthrough command structure - !192 x86/apic/vector: Fix ordering in vector assignment - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - vsock: Fix memory leak in vsock_connect() - x86/apic/vector: Fix ordering in vector assignment - Add support for PxSCT.LPM set based on actual LPM circumstances - Add support for disabling PhyRdy Change Interrupt based on actual LPM capability - Driver for Zhaoxin CPU core temperature monitoring - rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs - x86/tsc: Make cur->adjusted values in package#1 to be the same - EHCI: Clear wakeup signal locked in S0 state when device plug in - XHCI:Fix some device identify fail when enable xHCI runtime suspend- sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - ipv6: Fix data races around sk->sk_prot. - ipv6: annotate some data-races around sk->sk_prot - ipv6: provide and use ipv6 specific version for {recv, send}msg - inet: factor out inet_send_prepare() - nilfs2: fix use-after-free bug of struct nilfs_root- nfp: fix use-after-free in area_cache_get() - mISDN: fix use-after-free bugs in l1oip timer handlers - tcp: Fix data races around icsk->icsk_af_ops. - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - !134 scsi: megaraid_sas: Add support for MegaRAID Aero controllers - !138 vfio-pci: Mask cap zero - bnx2x: fix potential memory leak in bnx2x_tpa_stop() - r8152: Rate limit overflow messages - scsi: megaraid_sas: Add support for MegaRAID Aero controllers - vfio-pci: Mask cap zero - tcp/udp: Fix memory leak in ipv6_renew_options(). - net: mvpp2: fix mvpp2 debugfs leak - !159 PCI: Add ACS quirk for Broadcom NICs - !137 net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode - kcm: avoid potential race in kcm_tx_work - net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode - !139 nvme: Assign subsys instance from first ctrl - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - nvme: fix controller instance leak - nvme: Assign subsys instance from first ctrl - PCI: Add ACS quirk for Broadcom BCM5750x NICs - PCI: Add ACS quirk for Broadcom BCM57414 NIC- binder: fix UAF of ref->proc caused by race condition - arm64: fix oops in concurrently setting insn_emulation sysctls - mm/hotplug: silence a lockdep splat with printk() - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - HID: roccat: Fix use-after-free in roccat_read() - ext4: fix dir corruption when ext4_dx_add_entry() fails - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - Revert "quota: Check next/prev free block number after reading from quota file" - Revert "quota: Replace all block number checking with helper function" - Revert "quota: Add more checking after reading from quota file" - tracefs: Only clobber mode/uid/gid on remount if asked - netfilter: ebtables: fix memory leak when blob is malformed - netfilter: ebtables: reject blobs that don't provide all entry points - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() - SUNRPC: use _bh spinlocking on ->transport_lock - tcp: fix early ETIMEDOUT after spurious non-SACK RTO - netfilter: br_netfilter: Drop dst references before setting. - debugfs: add debugfs_lookup_and_remove() - tcp: annotate data-race around challenge_timestamp - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" - net: neigh: don't call kfree_skb() under spin_lock_irqsave() - neigh: fix possible DoS due to net iface start/stop loop - mm/hugetlb: fix hugetlb not supporting softdirty tracking - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - net: Fix a data-race around sysctl_somaxconn. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - xfrm: fix refcount leak in __xfrm_policy_check() - audit: fix potential double free on error path from fsnotify_add_inode_mark - dm: return early from dm_pr_call() if DM device is suspended - NFSv4: Fix races in the legacy idmapper upcall- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix check for block being out of directory size - ext4: check if directory block is within i_size - block: Fix UAF in bd_link_disk_holder() - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - block: add a new config to control dispatching bios asynchronously - block: fix kabi broken in request_queue - md: enable dispatching bio asynchronously for raid10 by default - arm64/topology: getting preferred sibling's cpumask supported by platform - block: support to dispatch bio asynchronously - block: add new fields in request_queue - md/raid10: convert resync_lock to use seqlock - md/raid10: prevent unnecessary calls to wake_up() in fast path - !122 【kernel-openEuler-1.0-LTS】kernel：fix some issues with 4.19 kernel on openEuler 22.03 system - mm: sharepool: fix potential AA deadlock - mm: sharepool: check size=0 in mg_sp_make_share_k2u() - mm: sharepool: delete redundant check in __sp_remap_get_pfn - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: hisi_sas: Release resource directly in hisi_sas_abort_task() when NCQ error - scsi: hisi_sas: Enable force phy when SATA disk directly connected - scsi: hisi_sas: Modify v3 HW ATA completion process when SATA disk is in error status - sched: Fix invalid free for tsk->se.dyn_affi_stats - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized - scsi: target: tcmu: Fix crash on ARM during cmd completion - scsi: target: tcmu: Optimize use of flush_dcache_page - scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - perf bench futex-wake: Restore thread count default to online CPU count - selftests/bpf: Enlarge select() timeout for test_maps - xfs: preserve default grace interval during quotacheck - i40e: Fix kernel crash during module removal - i40e: Fix use-after-free in i40e_client_subtask() - EDAC: skx_common: downgrade message importance on missing PCI device - x86/entry/64: Don't compile ignore_sysret if 32-bit emulation is enabled - x86: Fix early boot crash on gcc-10, third try - objtool: Don't fail on missing symbol table- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86: Adjust counter sample period after a wrmsr - KVM: x86: Fix perfctr WRMSR for running counters - perf/core: Provide a kernel-internal interface to recalibrate event period - media: em28xx: initialize refcount before kref_get - mm: avoid potential deadlock tirgged by writing slab-attr-file - ext4: fix use-after-free in ext4_ext_shift_extents - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - efi: capsule-loader: Fix use-after-free in efi_capsule_write - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - mm/sharepool: Fix UAF reported by KASAN - blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues - mm: mem_reliable: Start fallback if no suitable zone found - net: hns3: update hns3 version to 22.9.2 - net: hns3: fix error resume keep alive when remove hclgevf - net: hns3: update hns3 version to 22.9.1 - net: hns3: fix keep alive can not resume problem when system busy- jfs: prevent NULL deref in diFree - jfs: fix GPF in diFree- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- KVM: x86: do not report a vCPU as preempted outside instruction boundaries - KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE - netfilter: nf_conntrack_irc: Tighten matching on DCC message - ext4: avoid resizing to a partial cluster size - locking/atomic: Make test_and_*_bit() ordered on failure - geneve: do not use RT_TOS for IPv6 flowlabel - SUNRPC: Reinitialise the backchannel request buffers before reuse - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - tcp: fix over estimation in sk_forced_mem_schedule() - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: make sure ext4_append() always allocates new block - kprobes: Forbid probing on trampoline and BPF code areas - kfifo: fix kfifo_to_user() return type - profiling: fix shift too large makes kernel panic - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - can: error: specify the values of data[5..7] of CAN error frames - fs: check FMODE_LSEEK to control internal pipe splicing - tcp: make retransmitted SKB fit into the send window - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - x86/pmem: Fix platform-device leak in error path - selinux: Add boundary check in put_entry() - ACPI: LPSS: Fix missing check in register_device_clock() - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - igmp: Fix data-races around sysctl_igmp_qrv. - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - block: fix the problem of io_ticks becoming smaller - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling - block, bfq: save & resume weight on a queue merge/split - ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 - acpi/nfit: improve bounds checking for 'func' - ACPICA: Do not increment operation_region reference counts for field units - ACPICA: Fix exception code class checks - ACPI: configfs: add missing check after configfs_register_default_group() - ACPI: custom_method: fix potential use-after-free issue - ACPI: custom_method: fix a possible memory leak - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - ACPI/IORT: Fix PMCG node single ID mapping handling - ACPI/IORT: Check node revision for PMCG resources - kprobes: don't call disarm_kprobe() for disabled kprobes - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - usb: gadget: function: printer: fix use-after-free in __lock_acquire - video: fbdev: i740fb: Error out if 'pixclock' equals zero - lightnvm: disable the subsystem - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: make configfs_create() return inode - configfs: factor dirent removal into helpers - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup- dm-thin: Resume failed in FAIL mode - tpm: fix reference counting for struct tpm_chip - af_key: Do not call xfrm_probe_algs in parallel - net: usb: ax88179_178a: Fix packet receiving - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup - net: usb: ax88179_178a: fix packet alignment padding- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - can: bcm/raw/isotp: use per module netdevice notifier - CIFS: Fix retry mid list corruption on reconnects - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - dm verity: set DM_TARGET_IMMUTABLE feature flag - scsi: hisi_sas: Add SATA_DISK_ERR bit handling for v3 hw - Revert "scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs" - netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow SET_ID to refer to another table- x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - Revert "blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite" - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - arm64: Avoid premature usercopy failure for __arch_copy_to_user_generic_read - net_sched: cls_route: remove from list when handle is 0- Revert "x86/unwind/orc: Change REG_SP_INDIRECT" - Phytium/S2500: kdump: Avoid vmcore saving failure across multi-socket - PCI: Add config control for phytium ACS quirks - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - sched: Fix null-ptr-deref in free_fair_sched_group - RDMA/ib_srp: Fix a deadlock - mm/slub: add missing TID updates on slab deactivation - block: fix regression for dm - blk-mq: handle bio after queue is initialized - x86: Clear .brk area at early boot - signal/seccomp: Dump core when there is only one live thread - x86/unwind/orc: Recheck address range after stack info was updated - x86/unwind/orc: Silence warnings caused by missing ORC data - x86/unwind/orc: Change REG_SP_INDIRECT- netfilter: nf_queue: do not allow packet truncation below transport header offset - openvswitch: fix OOB access in reserve_sfa_size() - dm thin: use refcount_t for thin_c reference counting - exec: Force single empty string when argv is empty - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: 8250: fix return error code in serial8250_request_std_resource() - ipv4: Fix data-races around sysctl_ip_dynaddr. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - icmp: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - usbnet: fix memory leak in error case - esp: limit skb_page_frag_refill use to a single page - net: tun: avoid disabling NAPI twice - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - usbnet: fix memory allocation in helpers - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - virtio-net: fix race between ndo_open() and virtio_device_ready() - SUNRPC: Fix READ_PLUS crasher - virtio_net: fix xdp_rxq_info bug after suspend/resume - erspan: do not assume transport header is always set - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - ext4: make variable "count" signed - serial: 8250: Store to lsr_save_flags after lsr read - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - io_uring: add missing item types for various requests - net/sched: cls_u32: fix possible leak in u32_init_knode() - fq_codel: reject silly quantum parameters - net: sched: sch_teql: fix null-pointer dereference - rcu: Set a maximum limit for back-to-back callback invocation - mm: Fix page counter mismatch in shmem_mfill_atomic_pte - scsi: mpt3sas: Fix unlock imbalance - io-wq: Switch io_wqe_worker's fs before releasing request - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - Revert "iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()"- fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - fbmem: Check virtual screen sizes in fb_set_var() - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - scsi: core: Fix race between handling STS_RESOURCE and completion - block: prevent lockdep false positive warning about 'bd_mutex' - dm verity: allow only one error handling mode - dm verity: Fix compilation warning - dm verity: add root hash pkcs#7 signature verification - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()- inotify: show inotify mask flags in proc fdinfo - io_uring: always grab file table for deferred statx - bpf: Don't redirect packets with invalid pkt_len - config: enable CONFIG_QOS_SCHED_DYNAMIC_AFFINITY by default - sched: Add statistics for scheduler dynamic affinity - sched: Adjust cpu range in load balance dynamicly - sched: Adjust wakeup cpu range according CPU util dynamicly - cpuset: Introduce new interface for scheduler dynamic affinity - sched: Introduce dynamic affinity for cfs scheduler - crypto: hisilicon/sec - don't sleep when in softirq - video: fbdev: sm712fb: Fix crash in smtcfb_write() - video: fbdev: sm712fb: Fix crash in smtcfb_read() - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - block: don't delete queue kobject before its children - etmem:fix kernel stack overflow in do_swapcache_reclaim - etmem:fix kasan slab-out-of-bounds in do_swapcache_reclaim - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - blk-throttle: fix io hung due to configuration updates - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue - ext4: fix race condition between ext4_ioctl_setflags and ext4_fiemap- block: fix that part scan is disabled in device_add_disk() - Revert "block: rename bd_invalidated" - Revert "block: move the NEED_PART_SCAN flag to struct gendisk" - Revert "block:Fix kabi broken" - rcu/tree: Mark functions as notrace - netfilter: nf_tables: stricter validation of element data - net: rose: fix UAF bugs caused by timer handler - xen/arm: Fix race in RB-tree based P2M accounting - vt: drop old FONT ioctls - dm thin: Fix crash in dm_sm_register_threshold_callback() - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen-netfront: fix potential deadlock in xennet_remove() - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/sharepool: Check sp_is_enabled() before show spa_stat- x86: Fix return value of __setup handlers - x86/delay: Fix the wrong asm constraint in delay_loop() - ACPI: sysfs: Fix BERT error region memory mapping - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - nbd: fix io hung while disconnecting device - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - ip_gre: test csum_start instead of transport header - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - NFSv4: Don't hold the layoutget locks across multiple RPC calls - tcp: tcp_rtx_synack() can be called from process context - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - drivers/base/node.c: fix compaction sysfs file leak - fsnotify: fix wrong lockdep annotations - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - fat: add ratelimit to fat*_ent_bread() - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - dm stats: add cond_resched when looping over entries - zsmalloc: fix races between asynchronous zspage free and page migration - netfilter: conntrack: re-fetch conntrack after insertion - assoc_array: Fix BUG_ON during garbage collect - net: af_key: check encryption module availability consistency - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - block:Fix kabi broken - block: Fix warning in bd_link_disk_holder() - block: move the NEED_PART_SCAN flag to struct gendisk - block: rename bd_invalidated - scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs - scsi: hisi_sas: enable use_clustering - scsi: hisi_sas: Change DMA setup lock timeout to 2.5s - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - x86/cpu: Add another Alder Lake CPU to the Intel family - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family - x86/cpu: Add Jasper Lake to Intel family - cpu/speculation: Add prototype for cpu_show_srbds() - x86/cpu: Add Elkhart Lake to Intel family - block: open accurate iostat account by default - block: use "precise_iostat" to switch accurate iostat account - block/diskstats: more accurate approximation of io_ticks for slow disks - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages- ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing - swiotlb: skip swiotlb_bounce when orig_addr is zero - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - mm/sharepool: Fix using uninitialized sp_flag - mm/sharepool: Add a task_struct parameter for sp_get_local_group() - mm/sharepool: Don't check the DVPP address space range before merging - mm/sharepool: Configure the DVPP range for process - mm/sharepool: Introduce SPG_NON_DVPP flag for sp_group_add_task - mm/sharepool: Update sp_mapping structure - mm/sharepool: Clear the initialization of sp-associated structure for a process - mm/sharepool: Unify the memory allocation process - mm/sharepool: Use vm_private_data to store the spa - mm/sharepool: Share pool statistics adaption - mm/sharepool: Release the sp addr based on the id - mm/sharepool: Add an interface to obtain an id - mm/sharepool: Address space management for sp_group - mm/sharepool: Create global normal and dvpp mapping - mm/sharepool: Delete single-group mode - io_uring: io_close: Set owner as current->files if req->work.files uninitialized- mm/memcontrol: fix wrong vmstats for dying memcg - ext4: recover csum seed of tmp_inode after migrating to extents - xfs: show the proper user quota options - drivers core: node: Use a more typical macro definition style for ACCESS_ATTR - drivers core: Use sysfs_emit for shared_cpu_map_show and shared_cpu_list_show - mm: and drivers core: Convert hugetlb_report_node_meminfo to sysfs_emit - drivers core: Miscellaneous changes for sysfs_emit - drivers core: Remove strcat uses around sysfs_emit and neaten - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions- arm64: fix out-of-range error when adapting for ARM64_SPECTRE_BHB - xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata - xfs: namecheck directory entry names before listing them - xfs: namecheck attribute names before listing them - xfs: check attribute leaf block structure - xfs: check attribute name validity - xfs: check directory name validity - xfs: scrub should flag dir/attr offsets that aren't mappable with xfs_dablk_t - xfs: abort xattr scrub if fatal signals are pending - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - arm64: fix extra cpucaps setup problem - Revert "sched: Fix sched_fork() access an invalid sched_task_group" - Revert "sched: Fix yet more sched_fork() races" - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - sctp: use call_rcu to free endpoint - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - HID: holtek: fix mouse probing - HID: check for valid USB device for many HID drivers - HID: wacom: fix problems when device is not a valid USB device - HID: add USB_HID dependancy on some USB HID drivers - HID: add USB_HID dependancy to hid-chicony - HID: add USB_HID dependancy to hid-prodikeys - HID: add hid_is_usb() function to make it simpler for USB detection - netfilter: nf_tables: disallow non-stateful expression in sets earlier - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode"- x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86/unwind/orc: Fix premature unwind stoppage due to IRET frames - x86/unwind: Prevent false warnings for non-current tasks - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - NFC: netlink: fix sleep in atomic bug when firmware download timeout - nfc: replace improper check device_is_registered() in netlink related functions - ext4: fix super block checksum incorrect after mount - block: remove the bd_openers checks in blk_drop_partitions - block: fix busy device checking in blk_drop_partitions again - block: fix busy device checking in blk_drop_partitions - ext4: add reserved GDT blocks check- ping: fix address binding wrt vrf - tcp: resalt the secret every 10 seconds - netlink: do not reset transport header in netlink_recvmsg() - ipv4: drop dst in multicast routing path - net: Fix features skip in for_each_netdev_feature() - VFS: Fix memory leak caused by concurrently mounting fs with subtype - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - dm: interlock pending dm_io and dm_wait_for_bios_completion - dm: fix mempool NULL pointer race when completing IO - tcp: make sure treq->af_specific is initialized - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre: Make o_seqno start from 0 in native mode - tcp: md5: incorrect tcp_header_len for incoming connections - mtd: rawnand: Fix return value check of wait_for_completion_timeout - mtd: rawnand: fix ecc parameters for mt7622 - hex2bin: fix access beyond string end - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - arm_pmu: Validate single/group leader events - netlink: reset network and mac headers in netlink_dump() - net/packet: fix packet_sock xmit return value checking - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead - smp: Fix offline cpu check in flush_smp_call_function_queue() - ipv6: fix panic when forwarding a pkt with no in6 dev - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm, page_alloc: fix build_zonerefs_node() - cifs: potential buffer overflow in handling symlinks - veth: Ensure eth header is in skb's linear part - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - mm: don't skip swap entry even if zap_details specified - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - NFSv4: Protect the state recovery thread against direct reclaim - macvtap: advertise link netns via netlink - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - ext4: don't BUG if someone dirty pages without asking ext4 first - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - ACPICA: Avoid walking the ACPI Namespace if it is not there - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - NFS: remove unneeded check in decode_devicenotify_args() - serial: 8250: Fix race condition in RTS-after-send handling - serial: 8250_mid: Balance reference count for PCI DMA device - tcp: ensure PMTU updates are processed during fastopen - af_netlink: Fix shift out of bounds in group mask calculation - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - mtd: onenand: Check for error irq - printk: fix return value of printk.devkmsg __setup handler - perf/core: Fix address filter parser for multiple filters - ACPI: APEI: fix return value of __setup handlers - crypto: authenc - Fix sleep in atomic context in decrypt_tail - PCI: pciehp: Clear cmd_busy bit in polling mode - ACPI: properties: Consistently return -ENOENT if there are no more references - mm,hwpoison: unmap poisoned page before invalidation - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - NFSD: prevent integer overflow on 32 bit systems - SUNRPC: avoid race between mod_timer() and del_timer_sync() - xfrm: fix tunnel model fragmentation behavior - sched/fair: Fix enqueue_task_fair() warning some more - sched/fair: Fix enqueue_task_fair warning - floppy: disable FDRAWCMD by default - perf: Fix sys_perf_event_open() race against self - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID- net: hns3: update hns3 version to 22.5.1 - net: hns3: fix vf link setting failed when no vf driver loaded - arm64: Add memmap reserve range check to avoid conflict - ext4: fix bug_on in ext4_writepages - ext4: fix warning in ext4_handle_inode_extension - ext4: fix use-after-free in ext4_rename_dir_prepare - uce: coredump scenario support kernel recovery - NULL pointer dereference on rmmod iptable_mangle.- sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} - sched: Throttle offline task at tracehook_notify_resume() - sched: enable CONFIG_QOS_SCHED on arm64 - sched/qos: Remove dependency CONFIG_x86 - net/sched: cls_u32: fix netns refcount changes in u32_change() - mm: hwpoison: enable memory error handling on 1GB hugepage optionaly - mm: fix gup_pud_range - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs - ext4: fix warning when submitting superblock in ext4_commit_super() - ext4: fix bug_on in __es_tree_search - secure_seq: use the 64 bits of the siphash for port offset calculation - floppy: use a statically allocated error counter - mmc: block: fix read single on recovery logic - SUNRPC: Ensure that the gssproxy client can start in a connected state - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - ax25: Fix UAF bugs in ax25 timers - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - drm/vgem: Close use-after-free race in vgem_gem_create - mm/memory.c: update the first page in clear_gigantic_page_chunk- scsi: hisi_sas: Change hisi_sas_control_phy() phyup timeout - scsi: hisi_sas: Fix SAS disk sense info print incorrectly sometimes - scsi: hisi_sas: Don't fail IT nexus reset for Open Reject timeout - mm/share_pool: Support read-only memory allocation - mm: clear_freelist_page: Provide timeout mechanism for worker runtime - io_uring: fix race between timeout flush and removal - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - ext4: fix bug_on in start_this_handle during umount filesystem - ext4: unregister sysfs path before destroying jbd2 journal - ext4: fix use-after-free in ext4_search_dir - mm: Update reliable flag in memory allocaion for reliable task only in task context - mm: refactor the reclaim thread of page cache from per-cpu to per-node- ixgbevf: add disable link state - ixgbe: add improvement for MDD response functionality - ixgbe: add the ability for the PF to disable VF link state - io_uring: fix false WARN_ONCE - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - sharepool: fix hisi oom deadlock - share_pool: Fix ABBA deadlock - net: ipv6: fix skb_over_panic in __ip6_append_data - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - mm: fix dereference a null pointer in migrate[_huge]_page_move_mapping() - cpuset: Fix unsafe lock order between cpuset lock and cpuslock - tcp: make tcp_read_sock() more robust - xfrm: Fix xfrm migrate issues when address family changes - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" - ext4: add check to prevent attempting to resize an fs with sparse_super2 - net-sysfs: add check for netdevice being present to speed_show - memfd: fix F_SEAL_WRITE after shmem huge page allocated - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault - netfilter: nf_queue: fix possible use-after-free - netfilter: nf_queue: don't assume sk is full socket - xfrm: enforce validity of offload input flags - xfrm: fix the if_id check in changelink - netfilter: fix use-after-free in __nf_register_net_hook() - xfrm: fix MTU regression - cifs: fix double free race when mount fails in cifs_get_root() - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status - x86/asm: Move native_write_cr0/4() out of line - x86/asm: Pin sensitive CR0 bits - x86/asm: Pin sensitive CR4 bits - mm: Add more debug info if oom occurs - mm: Fix reliable task used problem shown in meminfo - mm: Show correct reliable pagecache size- hamradio: improve the incomplete fix to avoid NPD - hamradio: defer ax25 kfree after unregister_netdev - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path - llc: only change llc->dev when bind() succeeds - netdevice: add the case if dev is NULL - llc: fix netdevice reference leaks in llc_ui_bind() - ARM: fix Thumb2 regression with Spectre BHB - ARM: Spectre-BHB: provide empty stub for non-config - ARM: fix build warning in proc-v7-bugs.c - ARM: Do not use NOCROSSREFS directive with ld.lld - ARM: fix co-processor register typo - ARM: fix build error when BPF_SYSCALL is disabled - ARM: include unprivileged BPF status in Spectre V2 reporting - ARM: Spectre-BHB workaround - ARM: use LOADADDR() to get load address of sections - ARM: early traps initialisation - ARM: report Spectre v2 status through sysfs - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path- Revert "perf: Paper over the hw.target problems" - ax25: Fix NULL pointer dereferences in ax25 timers - ax25: fix NPD bug in ax25_disconnect - ax25: Fix NULL pointer dereference in ax25_kill_by_device - ax25: improve the incomplete fix to avoid UAF and NPD bugs - ax25: NPD bug when detaching AX25 device - objtool: Fix stack offset tracking for indirect CFAs - x86/entry/64: Fix unwind hints in kernel exit path - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register - arm64: Use the clearbhb instruction in mitigations - arm64: add ID_AA64ISAR2_EL1 sys register - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - arm64: Mitigate spectre style branch history side channels - KVM: arm64: Add templates for BHB mitigation sequences - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - arm64: Add percpu vectors for EL1 - arm64: entry: Add macro for reading symbol addresses from the trampoline - arm64: entry: Add vectors that have the bhb mitigation sequences - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - arm64: entry: Allow the trampoline text to occupy multiple pages - arm64: entry: Make the kpti trampoline's kpti sequence optional - arm64: entry: Move trampoline macros out of ifdef'd section - arm64: entry: Don't assume tramp_vectors is the start of the vectors - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - arm64: entry: Move the trampoline data page before the text page - arm64: entry: Free up another register on kpti's tramp_exit path - arm64: entry: Make the trampoline cleanup optional - arm64: entry.S: Add ventry overflow sanity checks - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT - x86/speculation: Warn about Spectre v2 LFENCE mitigation - x86/speculation: Update link to AMD speculation whitepaper - x86/speculation: Use generic retpoline by default on AMD - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting - Documentation/hw-vuln: Update spectre doc - x86/speculation: Add eIBRS + Retpoline options - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() - mm/memory.c: fix clear_gigantic_page_chunk- ext4: fix fs corruption when tring to remove a non-empty directory with IO error - Revert "ext4: fix file system corrupted when rmdir non empty directory with IO error" - sched: Fix yet more sched_fork() races - sched/fair: Fix wrong cpu selecting from isolated domain - netfilter: nf_tables: initialize registers in nft_do_chain() - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() - net: sched: adapt Qdisc kabi - net_sched: fix a crash in tc_new_tfilter() - net: sched: use Qdisc rcu API instead of relying on rtnl lock - net: sched: add helper function to take reference to Qdisc - net: sched: extend Qdisc with rcu - net: core: netlink: add helper refcount dec and lock function - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() - xen/gnttab: fix gnttab_end_foreign_access() without page specified - xen/pvcalls: use alloc/free_pages_exact() - xen/9p: use alloc/free_pages_exact() - xen: remove gnttab_query_foreign_access() - xen/gntalloc: don't use gnttab_query_foreign_access() - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status - xen/netfront: don't use gnttab_query_foreign_access() for mapped status - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status - xen/grant-table: add gnttab_try_end_foreign_access() - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case - xen/xenbus: Fix granting of vmalloc'd memory - binder: fix test regression due to sender_euid change - binder: use cred instead of task for selinux checks - binder: use euid from cred instead of using task - svm: Change svm to modules - svm: Delete unused svm_get_unmapped_area ops - ascend: mm: Add MAP_ALIGN flag to map aligned va - svm: Delete unused function sysrq_sched_debug_show_export - svm: Delete get meminfo interface in svm ioctl - svm: Export symbols for svm module - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path - mm: Add space after ReliableFileCache - mm: Drop reliable_reserve_size - mm: page_counter: mitigate consequences of a page_counter underflow - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() - hamradio: remove needs_free_netdev to avoid UAF - hamradio: defer 6pack kfree after unregister_netdev - ovl: fix uninitialized pointer read in ovl_lookup_real_one() - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO - ovl: fix lseek overflow on 32bit - ovl: sync dirty data when remounting to ro mode- Revert "module, async: async_synchronize_full() on module init iff async is used" - tty: n_gsm: fix encoding of control signal octet bit DV - fget: clarify and improve __fget_files() implementation - memblock: use kfree() to release kmalloced memblock regions - tty: n_gsm: fix proper link termination after failed open - gso: do not skip outer ip header in case of ipip and net_failover - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - dmaengine: sh: rcar-dmac: Check for error num after setting mask - net: sched: limit TC_ACT_REPEAT loops - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() - NFS: Do not report writeback errors in nfs_getattr() - NFS: LOOKUP_DIRECTORY is also ok with symlinks - bonding: fix data-races around agg_select_timer - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - ping: fix the dif and sdif check in ping_lookup - taskstats: Cleanup the use of task->exit_code - xfrm: Don't accidentally set RTO_ONLINK in decode_session4() - nvme: fix a possible use-after-free in controller reset during load - quota: make dquot_quota_sync return errors from ->sync_fs - vfs: make freeze_super abort when sync_filesystem returns error - serial: parisc: GSC: fix build when IOSAPIC is not set - perf: Fix list corruption in perf_cgroup_switch() - seccomp: Invalidate seccomp mode to catch death failures - n_tty: wake up poll(POLLRDNORM) on receiving data - veth: fix races around rq->rx_notify_masked - net: fix a memleak when uncloning an skb dst and its metadata - net: do not keep the dst cache when uncloning an skb dst and its metadata - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path - bonding: pair enable_port with slave_arr_updates - bpf: Add kconfig knob for disabling unpriv bpf by default - scsi: target: iscsi: Make sure the np under each tpg is unique - NFSv4 expose nfs_parse_server_name function - NFSv4 remove zero number of fs_locations entries error check - NFSv4.1: Fix uninitialised variable in devicenotify - nfs: nfs4clinet: check the return value of kstrdup() - NFSv4 only print the label when its queried - NFS: Fix initialisation of nfs_client cl_flags field - ima: Allow template selection with ima_template[_fmt]= after ima_hash= - ima: Remove ima_policy file before directory - integrity: check the return value of audit_log_start() - ext4: fix error handling in ext4_restore_inline_data() - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - block: bio-integrity: Advance seed correctly for larger interval sizes - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - ipv4: tcp: send zero IPID in SYNACK messages - ipv4: raw: lock the socket in raw_bind() - phylib: fix potential use-after-free - NFS: Ensure the server has an up to date ctime before renaming - NFS: Ensure the server has an up to date ctime before hardlinking - ipv6: annotate accesses to fn->fn_sernum - ipv4: avoid using shared IP generator for connected sockets - ping: fix the sk_bound_dev_if match in ping_lookup - ipv6_tunnel: Rate limit warning messages - tty: n_gsm: fix SW flow control encoding/handling - serial: stm32: fix software flow control transfer - serial: 8250: of: Fix mapped region size when using reg-offset property - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments - PM: wakeup: simplify the output logic of pm_show_wakelocks() - tty: fix crash in release_tty if tty->port is not set - tty: don't crash in tty_init_dev when missing tty_port - printk: Convert a use of sprintf to snprintf in console_unlock- serial: 8250: Fix max baud limit in generic 8250 port - sched/fair: Add qos_throttle_list node in struct cfs_rq - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" - USB: gadget: validate endpoint index for xilinx udc - sr9700: sanity check for packet length - ima: Fix return value of ima_write_policy() - ima: Don't modify file descriptor mode on the fly - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() - ima: Remove __init annotation from ima_pcrread() - ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() - evm: Check size of security.evm before using it - ima: Don't ignore errors from crypto_shash_update() - mm: Fallback to non-mirrored region below low watermark - mm: Disable watermark check if reliable fallback is disabled - mm: Do limit checking after memory allocation for memory reliable- livepatch/arm64: Fix incorrect endian conversion when long jump - arm64/mpam: realign step entry when traversing rmid_transform - dt-bindings: mpam: refactor device tree node structure - arm64/mpam: refactor device tree structure to support multiple devices - arm64/mpam: fix __mpam_device_create() section mismatch error - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - hugetlb: Add huge page alloced limit - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" - swiotlb: fix info leak with DMA_FROM_DEVICE - esp: Fix possible buffer overflow in ESP transformation - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro - io_uring: fix UAF in get_files_struct() - xfs: fix an undefined behaviour in _da3_path_shift - xfs: Fix possible null-pointer dereferences in xchk_da_btree_block_check_sibling() - xfs: fix use after free in buf log item unlock assert - ACPI/IORT: Do not blindly trust DMA masks from firmware- kabi: fix kabi broken in struct fuse_in - fuse: fix pipe buffer lifetime for direct_io - blk-throtl: fix race in io dispatching - ext4: Fix symlink file size not match to file content - livepatch/core: Check klp_func before 'klp_init_object_loaded' - irqchip/gic-phytium-2500: Fix issue that interrupts are concentrated in one cpu - blk-mq: add exception handling when srcu->sda alloc failed - audit: improve audit queue handling when "audit=1" on cmdline - Revert "audit: bugfix for infinite loop when flush the hold queue" - veth: Do not record rx queue hint in veth_xmit- crypto: pcrypt - Fix user-after-free on module unload - lib/iov_iter: initialize "flags" in new pipe_buffer - mm: Count reliable shmem used based on NR_SHMEM - mm: fix zoneref mapping problem in memory reliable - mm: disable memory reliable when kdump is in progress - mm: introduce "clear_freelist" kernel parameter - mm: fix unable to use reliable memory in page cache - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION - select: Fix indefinitely sleeping task in poll_schedule_timeout() - mtd: nand: bbt: Fix corner case in bad block table handling - netns: add schedule point in ops_exit_list() - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() - ext4: don't use the orphan list when migrating an inode - ext4: set csum seed in tmp inode while migrating to extents - ext4: make sure quota gets properly shutdown on error - ext4: make sure to reset inode lockdep class when quota enabling fails - cputime, cpuacct: Include guest time in user time in cpuacct.stat - serial: Fix incorrect rs485 polarity on uart open - scsi: sr: Don't use GFP_DMA - dm space map common: add bounds check to sm_ll_lookup_bitmap() - dm btree: add a defensive bounds check to insert_at() - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() - ACPICA: Utilities: Avoid deleting the same object twice in a row - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() - bpf: Do not WARN in bpf_warn_invalid_xdp_action() - net: bonding: debug: avoid printing debug logs when bond is not notifying peers - net-sysfs: update the queue counts in the unregistration path - dmaengine: pxa/mmp: stop referencing config->slave_id - scsi: ufs: Fix race conditions related to driver data - iommu/io-pgtable-arm: Fix table descriptor paddr formatting - ext4: avoid trim error on fs with small groups - net: mcs7830: handle usb read errors properly - tpm: add request_locality before write TPM_INT_ENABLE - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() - xfrm: state and policy should fail if XFRMA_IF_ID 0 - xfrm: interface with if_id 0 should return error - crypto: stm32/cryp - fix double pm exit - xfrm: fix a small bug in xfrm_sa_len() - sched/rt: Try to restart rt period timer when rt runtime exceeded - serial: amba-pl011: do not request memory region twice - tty: serial: uartlite: allow 64 bit address - netfilter: bridge: add support for pppoe filtering - crypto: qce - fix uaf on qce_ahash_register_one - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() - ipv6: Do cleanup if attribute validation fails in multipath route - ipv6: Continue processing multipath route even if gateway attribute is invalid - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route - ipv6: Check attribute length for RTA_GATEWAY in multipath route - tracing: Tag trace_percpu_buffer as a percpu pointer - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() - net: fix use-after-free in tw_timer_handler - udp: using datalen to cap ipv6 udp max gso segments - selinux: initialize proto variable in selinux_ip_postroute_compat() - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT - ipmi: fix initialization when workqueue allocation fails - ipmi: bail out if init_srcu_struct fails - bonding: fix ad_actor_system option setting to default - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module - net: skip virtio_net_hdr_set_proto if protocol already set - net: hns3: update hns3 version to 22.2.1 - net: hns3: fix RMW issue for VLAN filter switch - net: hns3: fix pf vlan filter out of work after self test - arm64: acpi: fix UBSAN warning - sched: Fix sleeping in atomic context at cpu_qos_write() - io_uring: don't re-setup vecs/iter in io_resumit_prep() is already there - io_uring: don't double complete failed reissue request - io_uring: remove redundant initialization of variable ret - block: don't ignore REQ_NOWAIT for direct IO - io_uring: re-issue block requests that failed because of resources - dm multipath: fix missing blk_account_io_done() in error path - block: account inflight from blk_account_io_start() if 'precise_iostat' is set - block: add a switch for precise iostat accounting - blk-throttle: Set BIO_THROTTLED when bio has been throttled - bfq: fix use-after-free in bfq_dispatch_request - hugetlbfs: fix a truncation issue in hugepages parameter/bin/sh/bin/sh/bin/shcpufreq-utilscpufrequtilscpuspeedkernel-tools-libsobs-worker-backend-test-x86-0008.novalocal 1710304807  !"#csdefritpt4.19.90-2403.2.0.0242.oe11:009-0.6.p11:009-0.6.p14.19.90-2403.2.0.0242.oe14.19.90-2403.2.0.0242.oe11:009-0.6.p11:009-0.6.p11:1.5-16 cpupowercentrino-decodecpupowergpio-event-mongpio-hammeriio_event_monitoriio_generic_bufferkvm_statlsgpiolsiiopowernow-k8-decodetmonturbostatx86_energy_perf_policycpupower.servicelibcpupower.so.0libcpupower.so.0.0.1kernel-toolsCOPYINGcpupower.mocpupower.mocpupower.mocpupower.mocpupower.mocpupower-frequency-info.1.gzcpupower-frequency-set.1.gzcpupower-idle-info.1.gzcpupower-idle-set.1.gzcpupower-info.1.gzcpupower-monitor.1.gzcpupower-set.1.gzcpupower.1.gzkvm_stat.1.gzturbostat.8.gzx86_energy_perf_policy.8.gz/etc/sysconfig//usr/bin//usr/lib/systemd/system//usr/lib64//usr/share/licenses//usr/share/licenses/kernel-tools//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/man/man1//usr/share/man/man8/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/openEuler/openEuler-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection obs://private/openEuler:20.03:LTS:SP1/standard_x86_64/5ed9ddbdbc7ec4588e436b1af0359117-kernelcpioxz2x86_64-openEuler-linux-gnu ASCII textELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=efd1d240b6c8efdc7005219dc06cc0c145c6f357, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=445294bf866804e1c5578fc7f20f3b1c803992ec, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=899e4fc501f756585b53dc38dcbe6082af97e7c1, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=38b480520a0443fd041a9a4c291866da665b9fc8, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=fad22536c33c8be163c4a11dd2d8f6c51a1813a0, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=977a6ed8e0068ea4d0ef58c2ea1904d693900ac7, for GNU/Linux 3.2.0, strippedPython script, ASCII text executableELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=51a45a0e587096770b5b016c3263b03cccb5fcfc, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=46b9eb270659168d2035153eb1d48ff0e9685770, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2c06280e4c34a97fca0e14c09512c106d07686a8, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=fadb957469c8e8cd8260bd2f6e32aed98c64179e, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e536de7f7f9aaf8c6634104dd9a11527c663746f, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=553efacc7377283d1b24c69ea510e0bad155c758, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=81593f9c62554db7d80b374df947dec3ba25c3a8, strippeddirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)&-.4;@MU\ R R RRRRRRRRR R RR RRRRRR R R RRRR R R RRRRR R R RRRRR R RR RRRR R R RRRRR R R RRRR R RRRRRR R RR RRRRRRRRR R R R RRRR R R R RRRPRR RR RRUKҝ c utf-85d3be6331d616c9cb0942283a773fae5dd592e5c901f4aacabc105f1a77ef615?7zXZ !#,] b2u Q{LX :)^D~%u Z9l+ &9a>sp9zFR V2l6?%`1Yޒ5Kܧy .c6N$AuR s 9P6F=,T't!ti{$ ?Ψ'{Fۘ>A*,=E,z&('Ӑ'}`B0 Om*Zp݀SI]`?:P=O C0#O9DEنɟ 2(GR{0Lk70 ^C^ncޅ _t:)"ykBMc( f =sT@^9L{r0i}yP쐤S PsVo蘩l/@'5@-JvPe߀ 5e>@iae꤂ u6Fn/×3v19o@hO8rfuUR|L$@ŒoVq(R.s"+D&";EĖO|md#:6CEj^jHʂ2,#FbJj]ōu1.|rKԛ Cߖs|6K5i 4Jqo:&ŤȌy@ f}#SK澥 r3 {vO@R_EMWVFWGTJO 1لvcpT:JT m&糩l;U)$ bsNgd@%KBx,|y-DH~Q_x ՋDt47~L3}r1ƙ4Zr| E9 |^ub N Zkejoćkg,^9,x+Af,1z0UpKؐsGk[zu$c/ Ln5ǥh̋GR7歀*{ÕEd2Vճe7k ű{sěVPKU:ylȖ]hНWNcձNrOi<([CLӎ?9 ]1e 8?O' nw2KcH>Unte86K~dq& Pr0EC P!2erb%e\ǵ]"Y  sZuƕ.%Bfotx2A f+A$88N)f$$ճ^Y .#/ X_jsDA3,m @[r[M7OZgnv?>]jVhH1}Xݬ׮~D"w('A}'6DWon[8Do|g7Ux!~nVMzӍTIq/cLFs%&z6MڐgA+PF,^?j葬49&3ƓRd~X Ƀ.a< B[dDXb T  ?j`m~FqJ;O-#kNdHUiQ{ʚKI+o]_ [51v @KIW(mt&)/hnI/p4g*1|ksVhwG_q$upObuY"4FlY?kGI+$K^DaN+L)Jsڝpzl7]p<_]ϸ39ݹҖu:=^+ xQ{pr9q.=}im)0}bmlWH(n0;BվD';b~P^(kf& M! .9 &A! J5*ͩFf ĥݫQlh&R̛9<K[.DrNWYr>M !vd C=,{殡*$egaJ;*2޽b SSK;b.dTNvUEʂ2]–7J6k8{lh.10 +*PإՑ(k䯁P[_r1w@ΤHDqbVp봷^ Ck#(HIEE8i Q$\b\/z3ÎytyrUG&[0`K 0\p/КQ=J,lSU&D6+g!Lc"cj49$$|4V8 ׀h~F_y3W%R֞G( 4^0 :4Ue%]\/Wh}/ĝ B2 JlKѱG#5ڜ.Ӿj;'9,CLl$}]^{%fXl(eՊj+Jv^hK Ht"d&|^UbhV2qCܺjO7xcCk*^vCێޕwws]$Qf5P5=ϳ{`Җ5&Hܴ֟2qҮW@ΣpRP'jllۊ3UN9MA=tDoX8+oxYWL.< [ FGF8Gy-Wayqw~e4mDs;oʆB.98(?mr)G>ΒĦ)$BV_;AP.xRNsK2eC"IğH8Da\3~R.tRq9pZQ|n^:Xjc}{v%: 0&kwR!f[o_`b@TffM8zGXO\dzaCl􀘶%*eym e%sI|7%Jg' i}h@שc[>XH0Eߎ%H{_ h7:HaOl7q;*?2n|uټ,~cv?tBS?~D\O8R+4]z7/?615pe9[`a@&Luӽfl4wIsbߤ-x|u)~X|& >>sv^׌Q$8c*i' &Ibb+A2tg̀bZ͗Q ؂<9xcSsV]x} -\5yb vS q&u:5Sx{ØL(Ek9*Ar{.ӥZ;Pۼh̟=ŶW<)Y;W0Kive :D3dq^N 9?,F7:ZiBg@,S/pu41)_G ]w^ D\Bެ$T+Ɓ^Ӽw a0ɪpٸ_9W.E0:1.fA^yShx ܀㵎vBؐ,6,)ݹ~½W3IqWkҧ9#L"V><" j@-frd7KA rAˈ5_N\Q@): H7/wԼ ch~? |Vs\bkr5}5.LCq1@^%+"S;~ V T=w/G]O\U{vO;e 0#P RZ \QnN폯h4yJnC33IMlՔG0 ]tP79b]9F_P~kÁch\2J[v.H,PiEf-{4<ۨ g}rDNߩǤC$k5!Dm,7}<6 QSG7CZF_KkwSZ!?m4SYGκrSq7߮WVIJNT0.% ^'W#b*>+~,U]IlZxE[7度Bmpި i8Nxݤ'PxQPT}x5\iRzV3z}wisȔUyOS-.z@H\/%A+>]S쑏VNaYMWC&,xPo'AHKHFBw= c͡ 0oçblW\;b+9A[QK2L?w\}~չIxI:-+bGl Lb=bǝ0%ijPVyQs.v-EݲZg80oyKx<Nj.ҪM~LKFF!L&WAU_IVGӫ_PI6sM38t IR g ['Պ.v;&Ц@ߡA,:`·S_}5 'y>뻷Ro/ q>d"FJMu SDOjuImsA%Nص@Mk=B}D `ЈcALi#g<پ#!ޝg=@F똾h?~VIf!?;e'!3$TmArHk7X\%zXPk#}^!1wҴrհ-/mc9 *NI6.Z/MXZ ISQܭe?T][ZckYJ 2i6iجrwX=1l_F Ov9Uy!= z?0,jbo_^vr}1H8މs2ܝ('J VA*C4St[3;lcN vaBu'2 2x5{ ~ $1Yl)OzG-} % 'C@~1d"MS[2AOٹegVV*])p\A̤xee|Cs} :_\,_?IF蠮7~ |RT: v_RG"ze+=&k 4QVi}@lUu(wB銈=jN91!)MJmиOh3z?,;Bn[k[d 3QYI}%\`*~f쪱U!N`o7.WX*OnCZW=[Å1ۯ]bC#6':ZfJ9^ (# *%% ?FЇkyѓ(5rN[!zٸxY!`nj\N xzm]Ia>'2 įZ?+6̜^-r_pIBX53.[|z#FI7)Qf\W;63We5Ҙ&%|ؐD7V5:q_틸jgBy;S{~Du~ h#؇ T6n>GǼn /~Iw) [$(l`ӔUzky #yZ5?Pq-Z ܷ 6FG@Pj#:f%Q=C zvE=L^Vӆ#s&0@b0 'mCiw:( x IhDMfk}_uz ~'-iseTन'427y56÷Y.Dwj!,+*v55D7X#]q9ȝv<x<ZPT.T2o'+c Mi,P) 3m*uYe`shK)RM#B(!nf@N5P4' m3d9bC@'>l%VP7Jac__=-% Ae/Ӈgi@D{W`AL$mQttd$PD㉿lΐKz[lݠ6x0կ5T YE.B*U5aQ±~3;ڼ]O#(B#/U/Q%={q\K[⠔am= py p e +F GYaLB?" grm4j1r>9kH:\FF6mk5qf&3tm02eml<D_7Qɺ"&nN߶;~mpe:Cx[|Yl rIcEG,,$QaC\uý,T}8 l? @ݜKIN-Z)nz 6ѓ vD&h;qH3*{얣\{0 &fE$BK)#4t9L]>'Kp)eK\vPXN[ k،I4HZ瀹-k^zPwϿWCmBvhXUV?h]O1^!E; rK9?Cni+[q4Rm2 84֧0j,ey(f`Cnk27CbCe"Z#K;Ax3xGYO݇˒wmxMuO.·-XDκ/c 6-˅^܂i lU:ďR`%9C)f>TlmC$P[~ߗ yVJWĂH T(˪ER&f/0aR$ܯX* -#[:GK4'X*|?nj%T|'"q{ZW#Z]#}3n./Ojb̍B6셭h<_ ɇs=m_ ;}$#wO5IQYiϮq -n+d CAGTa+eM[wZvP;JsQ5FTߟQˉA :ҨKI"iX!2^Ť‹S]#avtarLPbYM.Xi"e KIA>s)pvh$XF@gdaGnY) ',24Z%ņ4|2Ywt?b諱V[^p*? I i~^QrvCdR`m&Ap$Wth?^/-'R%򘘺_650,_%c8  {'ӎj*` 9*٨r=n4OFE1u΅6UG9ȉ|XD,x]uS68wi]T+ _Wv\DΏVͱ5dhƻ&])Ys2e4 7 p*"ae}0 >Ӫɢ0V1$r*`?+ǰ㴉?5!\2bXkm?8=GKU `֩}ػhmq BR:H&c)6Ar}d.u1T%6@v]l`^zi&`Ve8r蠯"@kanɮlL %,({ikc3=56MEF伓i(!ҽb~҂>x\ɋ`]w uMC6<M{nyd*'X XZ:.r 6-6|9iFC)s@;|#"/Vw KǃfSy 8h'\%Ih~QcJQcWv(x}NAHUej-w+MwԒ(|dsr(.ma&~d t_2z 7=Y㣝"Row:#y=<-6"רGVL4((qcAO0OP&QaF[JN2X/t8$KD,Iނ&cHKZ6f{FwVaes>3=,Uڅ^Qu>6Jk&}ӵihy_ ټN $D.)=a$<@FDSp,w% \G|<8% W#P@g`42O;6萨"SxnY2kc=cxA7/x+4n Bp0 >N c.@?CmhvU8]. (RUt% GX0Ƽ|.}Z&ǩ &O($4j\Zg؄5خ}X. C>v _ǞSdZ,8g#j-fl:zKpTךa@k8>?<2;9tgirttxu1N] '1>%Pȍ$ ^ gȀ?*@E z\IT"zSPM $t@|jAXIO* Z8i#I ب$ϤOI9$0}ēWRtʠQIfIbaN~M~TXBUڎ++Jh_JaY7dZKbnݢT$1Wi;@d1 }~%' ʲ^U|^4kC{uT5-lJ9-zI_5:˃”Emi!z@@R&w]87-_f~.8⩆ӴT rWJﰏmo,@#qovz{|hjv٢&@i;+i.RJż[Έn26OgO%Gbf"7Ga֏B#Yرz=li!]Kbp#QnU~OKG܏.\۞d?dàwi8GQqf^5.3DO<:&a *bDӧaI`c%2"p\Lo2#~|Wǩƃ1N^uח|2 QE& [u'9'Eٸ]b'Q3|*se,R3)+j:8€ەu;²vZp0bEǖj/⽐~ϒ+73yGPN/1e<7tAڳs\:[& ly+#[ zC#͌kMصG&د, >ٍVC? ОY9#:A 4dV@]Mf=OE7ew͖tr0pӹZl56 lԶrBN7Doί VRd,0z؟Ċ%<9@F'%6q\JнZ5ݖ2DP;DŽ'qK$z{9c)$sOBWzJ<(#H^O/l>g_KT:j(W* ? #y*-\L EiK0G 8G =p`DQO*sBͲ~e;M6tל=ԬBOZh^T'⪅bfta oHIX8 GQ:мh@=+q|f\5sg1'0`K%Fy)Tm.ձɜ*&-uE0jgl |Ids}E}t ~v.ifr~~BlWa i7E꛳icg:$6xfax8ttվȋOn֘U%ћy~쇤(ijF@?×<:_0p =#>31EWh~\Q .LcC>jQ *ZmXjo_}C:gc`sOȩW$u~gl>91SW_4hmspX8قt~kg9QcNH"n#@W\1c|LȃDh_ -V`DrsZ?|{_ 牌eDžsBd߃9CnVF#?ٕCnjT[n_bep;XF(L R]댎;rk +m6zЫFQa/@3IC=Fhz[ji8]~tA\DTXF%u8i9@{&y'E3=$鐨*J⓺,.ZX}(*Ng P(O}r pAf"Kc )m,&2\ *x9枦%LKʫFrTfPBSMbIHg'\DM,ZoBqӱAn?>vq\F,m5\>uJc߶:4[}wtesLa.ŤZH,}=?k%- }B ڄw/TeUΰƕj2a 2fвۺw8N0*KlUſg"VMEg@ӊ\tҺ։# ^F-O{|  =UvJ s2q<:۶:S!h%=)k)#yj,;%Qnϕiz\ #p "sjCWՒ#k?095$>S%V|(h j]$>sEiXc~'V3[Zw%_H߭v.$؛ToBiR)n#:eVx!g-^`P+9{Ǐ:BRد,1+1p2UDUH}JwpTH,~+aw} ,F 5끹h+G;wU)pj,&j^sLW@NX),a?3}U_Rsa[VmT`[*/)|[D=дo`DDճ;}pM7YV1{Za&DI9eL)guTBm b3X)r Tcy'VA7zˊUoۉSpa[O5QD"Cx4fA^fҴFb(Oꆬ?kGZR5ҊT6 iIU-",KHqNS9/នíZu/4,-1m,C$_oR uk/zlϧta",'˗[AAp*X!vȬ* I'aו;{Y/W3d[8Bnf󵝟}ɟe(kʓW#g6bĘ#iuA Y 5]_ۢE]'![ګՅ̣ cYowscS~vtRmbxzo#v.Π 3&)my=B/)|*.]:Lc.yQTejn7$IKqtvVS-_k3FF4Cyvh6HC MCЇ0NN(Ys@УnvJYN.B,4t?@|At5Zt^Ҹt头 "W+u'0iC?H\ҔH73k=G2*@}FJ?8 mE^] %y'3&@}_hRnZF=b z=| (41\ ^E }t#PGͳĺX,)\%/G7(YC]M6(HqnsWs}қl墩2Q~(Bi_0NoZ_,mm׬BS"W{|0e K]&OgO#sD*"cF ]KQ{pj?vxIQ fCi[1L%4ACjy/ĜPQOG0/c۳DB`Go1(tQ(%r}j:U-8kv5_*}xo je%?;sr ( H#5`EG6*YMv/+ af ЅH$nd!VFZ<.e|p У4]U,+*'m:YtP $=}lQ 0LV(_jՋQ;аNqb8IQ>A,J/A+}ح.ĿDۄOiڵO2tF ǖfbLI {31Apeu<hf"瓨v44jb@Ey$a*@(-$jJӘ iȽ;+kO*Hŷ4-Tjlic`awPGi{jP,3FEY^>zJ&PvutQf͑`ETo_w׋ ZL`!O6!>#( c@>t+o-nG4876"IDcPL-m~ZxяqkaS.ʕ峩Se)C X_V=]B˝Xl}87 sF`_2,n}҇nݯy4Mb** .=d2+P^ح~/_/Τ g;ӻopy|`eFj"ݷ _ru`RjuKlaaڹDfa@֤N'hr!Ģt?Ly{~0[m$܉Y@!ӫ&XTLucBYQ`YcIc15ߘ5gã>YD8#^%.b$RY *7ҍ|ՋW)nk@+]kHI)Ƞ 4Z6,2OV*Êy{E|opFa4}n=8xo;S!470vPj2D~E@Rk2E%aiv : 阣rNZksjuGS&<,ܴopB/_O]c mF x;v\]DfP">nM IW0@0U%K\ΩU d9W:؋XEI.l$!`B&GԀbw03րR3&fu*z!1nR !MvKG|8b w|Z!5%$&sww|ڥkTO_a)B?{[<¼?zI Fo ?\щ[pbc Y. _Kv23]K+L~@Z/ioxcۤC%J (a?+F> v^N9i(#ڰQ,K! /6# ,HRguֳM,naMJA<W/ǘ疌V<G @{mHE'S'o5DU[ kݪTezv/NWQ%upYGs[k?2&dgs8IsapM2DZB :육!k (IXb S_2ŝ}$aYib tio8˧O1;L,?eao]=%)k1w[<Jy~ؤIȮY/ ,qmDm}VwȒpZO NV2ͺľf(㟤 Ɇť:1/v trt^թ@1tݺix#@afeG w)-0GP]|+VA(Y7LQ)V)?T4Cto!PoP'< ?8[#zb]kI9S~CNp`;=}kp0v{]v癆{wtxrGWo) ^[iívkZNKwE4v;lw/P=pF܆c*Y[c-0])m|@y 4x]yq\8})3S;<8~0JsO\6^S-m5á'5YthFd>F̭J{ \G3!{>yh*e;+)4]a?-VOW]wʯlTEK㹩+ 1bP҉B]ƥ 3ŠeʘTmT {Ь~e140];͌ "PŒ=΀pGj@ߍSn;n"IJq=5ɬ( &H13 ,؀I='%]t\|$d(E&4Gֆn=Qb'3o)ˏPHVi1ΌՓCnk%[2.|#m4_m-ZͮbMpꏐsi^3ۦ{>k, A88)yz99Onx((4(gS?JZ >/ Rxy ND W΢w$ёfa-ߋ7db2F;D@_||$G%ZNInƔ*J0LCUuH}/Zcm#I [F"گABz%W ;@-Age6v]!Ƅ U 'Hu|;X/N@ ԙWnD T:_+6zcik7M^i *KG\eο$V'Ɵ4rwAHLK~<{adHr1ҎMRq7ҔOYB{nJ Lӌеis*,(z|TZԤʃ$h!&sog)~Đ߳EmuHB^l:/R2",ʲHzpwWz*K8K%~5w'V 39K([`jAal C̻ѫe`qltUdN/ӹ> }EeG$E؈gF9?HiSrߎy&7ܞa̩#>+^ ,92nfLɯ8" CuPteKmӀv=HHdl}naW b(r 1zg^t;a}`qTgNN*&e'&NK6_0 :uMs9F.? d|W! 22vBҎN/Nضoԁe-UX&??4HNUHB^DejUEF-^Z U[Ocx|2)h}uwi\l#:ݕ+oɝØyHڞ@(CSo\X Ie^ťv!NWD WWQ0F pxX,{6Q؟7 <"ѷv=>O2C CZiQ˥{A%|RZ:H&Pzh'/jscI٥ҺvtKy+ L٨G >`of?Njz aFWnNZVx?2]Pa M1ɗw2w L_Ŭdw901ZphOTb#"78]K]< /}llQhp c`U+9w(=ح@7aRwηهAˊY/J¿Z>D8vaƊˬbM)Wh-2fǀւ;pÎ!U9@k[Mq?mPa ^]͋zsR#>CPy2Uq:!l ]w__BTm/D3ͰTa$qG\τbY UR45Q?a J#Zş.`h`2mB^U s,0*w,үr泍بg΄'H/ 9/*ey ۸rdtp1̶bTYLzil $l( %jI.y)Ph>UB.`J{fzk#gn :9г!37W̶=9`¶;ZzvK;4$!?2TH6!ubȤlu}"&n7{4>D[[ϣqoez8L_D󪃮.) |ل1G2jc%H{P=5MtPH$kqD 9^ኢ  zV cί, ߊǍW|ڟ;Fi*uP,:6Y¬ j)T*ZKWj@PQ6B$nf#K:nCL,ƌ=oNȋ\L>oT/Pv f InPS$RQքMd@2Vr=wB;E.P/tyJέ^v0vZW*v.JxDzكX1nj ߅7H55Yߗ kTR Х.9V[R+&rY7Mi[^wC~ +1􁉺;'QQ V]$c6\Zl I {Fun''e(Ja qymQ o~9&BV W[{vpa˜]0[lLe'c5*-le1I Vi;pWNvKJV{,քj6[gAW@·<ީycgK_io_.)R#Ep"A\aj6H{Ti(2k?@~brbc&+M Yt^̒KտhFpJ5UҜb%G(W lgDݮc(6b.xgbRt#H8En^Ms/ >Ц*ʵk]:]Qr&=o8oVpߊSXQŇ+WB8ucey =M²*px: ߷襰2m{fn]DNw8S8m>Ϸdʘa6~i{pXz}2 X5X1#1@v͵?yHc5qP|us:ڠy-6@CRX j1lŸ;ԴxU."kKi`W9rjOI#XJ'-4d=-cJ#H\?h,C&^u{)-\P+' o6)fLX64IA(Xt+?%g 3Oܬ]N͏s22 p9Ih!GqT $3y 956a&gICX1)  jeɚq5rVafy0 L3rf vTE=W<' 6Λ( i1Vź60D܆alm笅Bq`Rv7~G ;\7KǷkQHHpl_ԁi xY`+(V4UNL=7zW\BDX>l;oP ?6&PΝ a;ft(7VM| ؅Uj"UG 'VQU:pc{qwpF*:# CN.Q FC@2)/RX@6t>yBdz|[qiQy74XThDI/9o#%ռ16O]׳|E+J9F[?Z艌wt&;J>Tl;/ :rt:zj o`2gϧ΢wD[10[jduJ4P|Rek7 kztP ˻6ycf^m!{ȩO,}yM_Żqm2د:uU=P{JZgJl&3id&cRuU?  Ɉ`>Y$/0 ff<:xk-IK҃i#' $Pq]Ð_Ƽ֎떲F]jb*Q sDEkuj(Z$OeZ8_QpD t1>)&_fpڞݧhI'Y cL.f]dz:u bD 뾋Nf|Sl1*:Ӂ7 b_&)?FY"ђ c+@sps!<\8=,RLXi+CSØbCdmԔgD+<_Qb(0 mD\S`l(Y. &zh b͋](9j U;RE5#Zu+5 ig' of/;z$$n`!h+gѿe?=a6z?WRkrk~fzhkY&A#Ԓ-wxo~=mIf#@tظ2XԬ M?&`}ŋiHq;7"ӔiiRITMRΉA>N)8[>ZͿ{'5^&BK^z`kPGFMAbu6I7SNs g/䰱+o 4[{S' aV@#|`w VD&OZ> 9rGQWC8'yoc#9 M[lG jo@P #7dm'WIڅ#z40( ߊSᎼ+d˕ӘNtk4mc[܇BLlꑪwkǧX4E qz݃U%mXOꀆ h%:As*@yk~tE'5GOޱ߮8^:OsEy Zxq8TX{]Ӹ2 Ml_EbwX\ԫ ds͍6TIy37`\&`ea/J˭GIVs15|Iy0BsIy/hEM:r0IpV$sȯj;u7J1G^Ե2̪W,# L.A6.EWrꗔ~=e1L*c ŐHVI" k 5CqUML"1VIx^fM 73qIL6 \ :^&d3wZW7 íI%0Ȼj_}5-Cٝ -xT?.|xL5HDScV"[0V۴E`X oPVyQNDGb"}9QAقcRDǒ⏳L9ҢOr[>սi3 AVG2kPL9)B xIdo{KTd"p{o&Fc.\=#('Uhm5֕i3 -ORg2(&#Ua`Bj%*E&/{m1]E 'j4SXBp{GWֳƫ穚ϰd9Rw3Y%wT؃9S2MGq/}v<34c$3ʴE!Z)>epPG0 d?KFtг[>Q̡Ɠ1saLbgonقC"뀙*AMGEEo+ɠe:G`p{fo63h߃Btjx ecJeԣq_!Ԯ 6+)T7 f\Ӷ@I mRA͡\-$f Wߎt ;-(ZyM/"c:3o}{t/p>kt鋍ޥQgbyP @ ?f 7L2t.QσI9`YJ,v &kDu(WЏk .كˑܹ?@* Xs=U 󫓞C@L=[eoC?;GL`V DG lyoŸsyG7$uHfc̚aƏ9] x7P4u{m`ƿj. ?JvpUy\^SuǾx|c\" Vs82X,#&> %!Xz.]W: olØIQ.+fʄ85## X$LB6[&_~'t@֎5$f&ɂ:;: OpXbIrQCK|Щ8ġ mdd؏AnBNo|vd-2Ndn"J0BqkK=)uMD"0]+ʗOЪs`ly'CK_Dԣe?gg!c7PB-T1>^ /~ aY.R[@^'VZ\՟L;5#*4%CnQ=g zӋ{dl<MspNx|ʱ^Hu˔.+[3E`*ʸ@;e%G5};u(vSCMm<Iy=N.8yc[QKZNܬvU d7jqAi^@QJ,^h gHS> ZDO6Ԧv6#f w7`a@% j/rA~۝徹EJrӧ>_h/ ??ѭ/y2Z=Ѝ";.kT|Ԏ;ndjTfUlo&cWwG9SIfOUȳúAbX^}7L=cE19\$ŷN}"^ LD3ݝdS5KLf8i7zڿCCcƧ~}D@5=-'({,sR~oA5e2i~`tZ-!%KҎ9oQik\aoiE jehǍFu]![[%ѬPJZwP YBw"1K6䅽{HkӋ>F샹 tASJ2I,kΫ{\ŕ~d$GhN62"-&Pq$CXk_r&D;zTצb8L :tN/7>ګֻ*%8*%VN<|NL f2߄z3(C2s\wr~ap [!ZLj`PYm7EUGQ+nl06)ScU{'25ublNȼp]/ d {kZbϾ{eD;4'k@O7= Bj]ʺBWk,Bh2ǠH>1&Y^z;cd(8c >[:xӌUTk m%Ǩwz:o1˶sYpIF>]cXɲ5:Fی |&t뤧簢H0[i8D; l7:Bk X:sաFՃauZW| c2Tap\uVw9j \"Lu98QD)w }EdQY-`2$ m?[72}$d$ '锝r哇?p3MeLm\&);B5CW柝wk:7K=/X~4#ѧ-}@S$PqhFav2@Xj8y¾LEX'x]_*̴咨7C7%ܮ褼3LB^Vȹ55Ta Ss`D"k,͙j1^T{cN+aciX/m;2T9h *J9*iq&4@ͫ͠Z. jGpI ^4X$:mwo78?Jrq$hƑ9[7IL!xtГtkwľ%~=JDW]1C ص?_&u]5L& %-ibv/0 Vnb9򳑪^I2d mc"B.nˆ+OW]=I~>.*P$7 }߇y疓2CTVl ѣ6n 6c7=b("V\Fctk]Ӽޯ* g\Mk\˱3RDfgEd8}#[y?)Q;<< 1>@6_‹j11w^ݥUcux16'6>w0'Y"ɢc\[ςvJ/x߇A\Hz dD`)nPo[$𹛖"UN-Jnhziu3&1W⸂Ѕ\8\AˤrX.ofI0r~@4g}g;BoqC*z> );Ȃ[]&[s+c*2TrfbH^ 罇5 tcmlG];[~cA;S_xgfG'3I{FB8gTn6 ]U563ti~cn[1hvT"`Q(@4^3w"3/u̓Js\v~; cYTGt$Z! p}3U4Feq ;{Pu[u/P,3F4glqAO2SeIjr eVWdpV/L7+& 4+UTHNeZ76]1֭$I[2!){A&R-StWLZIPX>*B1#e"K~`)"nG?ez塱ؙ?O8QƛbSWPEHuÜӝ'Vo?.!> nLw6B)Z8At ="6['FUg>:?)0[M\kΫAYw:bɔ<VS?suN|(xmC臷X8)Dr GeUPݘݖk  ӎ&h]x4(nbe4ry[D(+}KY[(KV']!kgtVbd$-iM&=U [4≤ 'éliS<㘥C_YG2lR8υ,g4q^[n{BrOR>AߴP/,P9?1j]6#v[~tyum,PkJWZtW`q Z][UxQw+?'zʗNmB'DE:>Ə\T.fC`7 tc˵&A:nY<.$Jo$&q_ZdeL"ZkB l*6Р_">=HXD[Xq C_`bf=79;J^ P.K^h#cpl 46w)y*!]iԳ *xI?A gA!AWV伴gO%p˨vYM8ףr|Ortw4>Ȑ!}B!0Le4ҫ"J@?"Rbyw8;U̯jc\N3O! r[!}NN0I2*4\+IZJU Z URoߊMA~f^)mU5 ܆Vnώ͝6Ki- R*H >鲺\9opZj ;Hn35" oaV, ܪsFw{+eEH\55ܑ׍?E)iã%B2#԰>O+9cnFK7Gx-dAB FKŹXGrKTآtƑF<.E0=#x3,} 5` -߭1c@/lЁ #54K&Ӊ'W _V\nN\!}?J#8Ւўw&*C(垳rd'uɳdԨY_x[ |,hX1pY<3$'m~^g4L5%MdEI~bJ19]Is}пY?\: &z:&|="J6>ԋ͍P@ mPF /xo/{,HzZFXc+0"X7[rFu»q"]xp&Z'g, iTZ (wu~z~:k<6I5H6(+(͚d݅ TM;a"L\^B#e358\հU;N7b}cL Xu$c%w(]Wf0̉:7RB 33 ܮ@71gpnҢ^3/ ]Mab;<רl΂:n+7 3C9u;pw?~x V481ж<z:"KgAy{X5@'3L γ' (qyÊiŧjssb-)9#K={T< B" ZBAe*>a%⢳HF7 ָ^=FE5fwnJ!v 2WP3Ar ff?FycpBvF;8 JUiјVzJ * xmC%YYd$ot3VK fSD0oBO,=>UMeՓ *#mp3Тy$*5=]o(&RX)P5>H?< V_"D-޴|ܾxOXSֽSHgU6kuV?|ť*Mp\Í0v"h/&"К7/t,7O3q;1I\uo{Fh"eWHt'lL/ }R)# 8J`EO lAV[ ;ER G2c'yK!1p]{ PAgr%4Mb%Fb424Q%` -#JjE6.eJF vL#Qf Qi{L%`BNKm~wWg-ÖHtF|^Vkv>y7(Brlc sjjPXjLnRT,D}iǨ\>6E5z]NV(s\SK$Q.0T0AƁt~kf=7qʐ>>.=)K3 ~҆=9Wkj};? .{{F-B2zu+ś$ZҎW* uQ\LSlfDHlHX+Krvˇ"OrU6 Dϫxeg_Q z{qTW;0+l+XmBό ULY "Qd7;yb{CxMAD'Q8\VRI> >SvmQwxbaH,2.?sw6ZV,Et#T}*rh1y$x qanػwfsc&wcT5`l*-*J7OjXWa_V8c@{f\s E,~Ǔ :;2t"_Ϣ0۾rnGqkIRɯj(PS3N%mP̺|G2f`D&| yuwkV[MC^r@'Wi,)ij41 ۬acQzWd }E 1LRUܜ6:2`=) 5"vh@H tjV vCyXOj2fJLJ~8'/qKZL,hN%畟哦,uaiw!>,PX"߁b5-mģ7˲ 7ږq?r_U}ͦ?sDJ́=SA{n$sP m~IsOc26D/; ZuuJ2f[@(6׳ ѽRgN7k}y@`:i=uOTV6B!^K-(;֛k}KE[:oBϤf8L.WSy΢GlM4VS(hSGؘh~RapNْû rO82i.$bp74CA=*\NEn 'UewMc{|^xL!ZVV/pՊ( L| ywT|*O쯇vFUE÷=/S|xR$77/mbo_q9ʷ$(s'jJYֲH촋EKm]iaWk=X;$1- |ڛm.3Љe1&=1ȈvF\=ۧc !Tt_lYs#X&n83b{;.P6v_nrd󝿝0+s?}vlZ`s>1lj.@WlHPtǕ?l)Ǐ+1n|x+= ڸϼLkǼR;Ђ1f*L0|U_̱t]1~_حgѴ 1g%mHED&tWGnŌ`T%`pJgzzC#K=ց~7:o'jX\n ty:Mfʩ^ VK3vBa̵͈>makgӍMǭ3l0N+UQ[ [}B`){Vp@43/Oh<|t +!h@eukWOyȪ^xAQ|#r=9,b}$PCVU¾!FCم]:X9)̸aH܁˜GKZ.aί".{W(ht!Tlų 2i&1a+3g)1r*y}cM,OX;)g6!I.(XX-PaWPXJ4S9r\GGЫOhP}fʩI,Q7wjueB0)EsjrKك=_kw$i"R*#5O'n}?`fKlpp꥞P{vJԾ10!&[pO]!֪H/,V uT!UX_(M(d^te =5FR9.NB½I }@;W35? ̇Qziь„a ?.5wLG?uRCVPcInosc[ s9$35.Ey6l%.,Obʓi[ p:]{S>t] _:Z>ʻC0TAT0QXMuYIo~/U2H`CMr)':`&XpJsGG+"G zbۙ~*(h^,3Qk"pAߤaX~p} G\yĴȀ)r)0f٘qjg'1mwrn>@qW#׮iވ8OsXKc,Im8f1 y0DW;ܳS@(0%<\!r׻/+ LVQgXY{ك݇y9}7~qa>\} ub#ҠezD.3-@ 91|#T΢$QNݡJ@M.5U[qY o˦&O LhoAػ$Y䅊xk$i1|aQ= Ei-3 Ap!B[4(44 i`Α.s4_%VԁPC;_C͚M׉DP` BWJRnh@;M&"ogH˙PV(=khw8 [nhX)AGTb (.'d^N2pM]{45dG;kau[yP2zҽV4jh]flRsj撐W϶IԂ6z[Fߋu5*!|og3w{C~dü}U`e#(aB [1*^ِl5R+­HFbM1vymp_jU8f / 7wv*!L‹GNq?MAFj4ۥqtja>10tX('#[߅& &ձdӣDXs/APjv2E6l7JϷ~͢A ~p{޿Lz2<CjerL<=Js#\pnjtJf6G;&!Q|q\qӹa \M<`bk3wa~t'~2=<Z%=dVf4S-sXtq2gJM5`(:7 |U% r'bglX&țc|2s͡M\5oy]0ڟ[)>{Ǚ [xؕGuLha[z {`wz`#^Ki]^ەw<\E⡵Kbnf W `07GŴa_FeN2n A_CWxu7N2v jJbt hC]}h7/R$~U  Fzbw2܁HOséV~=bP -99 չްz&3u~E5VWfڨEU8F6o_")~* n|T+ae. kv#o%O?v/7:vxq_Vh/QPjyyⷱDuq?LY?כil8F ؐѝ"iʿ夺Hà6: Y`=p;ލ_@QdU`v`eldoY.rͩUΪLVa:%Ⴕ]hG 8z-:eqe tDEڸ8TF3gX9m.3Ȓ*4'OUʷ`ePl?y_z]ulSQAt mǭ7oƵ:ĥO_47h"׺RF]c3I,NU|-آ#ϚB KQcՂ@M$4C8̑.RgFa`)$W^Qz}O?L0>%t(1ȩr)~#dןQf/C )XSSs .\q3w8#1| j2wn)BnxW0=Q x(zˎzVEk WhSmAJr IK/a.#Kq;3OKb֮gBLfhv4Oe{,;GaZQ4yIg]dK R^8E 'N)=|sP:rhuȝaՋ 3י?B/C)X6=/A#jxTmVvR%~^cb&ܨ'\khq"i3RckwnRvf@4d~5`Gf C>cc~񯾶3Rr1Gr,y3pzL4\'6,G>}j2N,)2{U9_F{+ֺjr9UnN22gy#FVauDclhHR 0kuPΔV`Ie^<CQNQZ<9`{C+p/ToΨE*:8}ZP#}PTdw,0L}~y%hgFTGP>E*I]7F/mEܯާL,_K崸g ~j&օwP bAq9C#B'9OX+9 ew89c9#x =0}m(iZϴC1ƍIY<[k/xg=ȦC bDCa^dǑa|K/:y1-q-{V}\>}v!ޏCBqig׏JY1 nsHu'Bl|h#ryI *iT9;Z0i >E l(,NFΎvE@џnSrR11 ^mxBÑ,I5׷ H@2Kw7[ ^ ]b-lĩ^/?Vÿ^<ՍNV mE1F @asd>ɺ-?,tZ5!O0axvLN뉐'舎UZ /PDUapw_O}k2H3Y*gK t(L8U,hv ւrTO˭(À=1$pyvfIX&M"sƏ`yR*bƭ&N T_ήFh ~^p)r^ovpm`4eK\t(o~n͑6[ ,%h+Z}R=ٺx~fOea a\ATe54WVVbzڞp,~tkWRukeǎܺ%i>l[^T0 Iet2~)9Y9ӝ% fº@$Hht=\ANHߤV]B\`Z;H_d~]F>_)U`WSB q =I6eOFZtSx 0 ԣ  M?HRfo8,)fwG Gs[6hH`ʃ3Y+7%5tr4 4tG7UEa ƀvj*` iF)͐vۑwMMQP#Nȼ{_ojB$! Z9R׆]ԋ~X*0дvtJB H*d(tzvFoO:43uTW( иm^c+;Ra{·{4su c o$xN\{,Cҹ0d;ph$qg&jAQ=Y\{qRȜ`~J d@Ӥ (2?Xث!'`ʝFÒ<^3JgX}Jku&i%. 3dgkPEub%5TvSͫqp@zc_?LlEITxbKxyo1H(Ir34Gӊ0n 0Y >u"#ƪRu$ԛÈrm?b@fz ۱PU7}=P[XO*wdĒjmd\ jyϓtpw6+Yt6U]PDM%DУAcvJ$;md@pB_x=b=-(63bDgfEzaҀ:>wIme"[N {}n ?uT+[QBi|ﲥ`&]lz75),$)VdgdPx:w(k<3gnf[ Uz vdJ_lPv,g`6-~ϭ.M9d@>YTތKGqυ L@xp7{SWK?-ZV4%$O)829N? 0wr(ǖp}=^vN^27ϨV->|EQҴ3SNHJ%2XPIPYw-NXYߣ{&HZvRӂ!s|pF| ~_Fy&ץY˓l(Amtح4SwZm@vD3=q1̿ϐ5 |c;E1- FEejJȎ56L:ݩڬ؞eTйgq-Ӌ4WFN|쥋[d1.b;:wYrכMsȎ.рr|cf6_æ3Su"jBl.Q[~B'o &yaIM$J3$]XD N嫑^b f+/nY!=,If$rT+$dvӖ5ݺXhQh{dMȸ$]9Gu:}PfDV@e.cf:3~G{f2ǷT;27>}ItF}qxH]׿%YJ2!E7*?y_:KZiM+~Q1c:irw|:wD7,13F/ҥq<K>鵕>#S&dq ]$Uς倒D+,׽DzA7c;9o Cʐ][F%EŽ5ƃ%< QۣyThq(AR7(Cb6OMtċBU9y?ei-ONtلII-sK]dVEt h[q8iΐ1T91*XXz/Z|önÉW.홐8n;~bkd",V~ƣQؓ\o޵W7ے~9:q>wNuZ؈D+=b&? =QBs㭜jq7VMrEQRL[Mx; ywKnxE}x7ԗ fD=J !yDM5[ &ure./[},'UdKiVXEx͜D?ÏLh ѩ\:|AcD*8%zwεmی\+pU-81 yPeJ~i(C-!I̜Lh[xe]ۨyvNNɄ442giu<TOtybb[7|Sb:T+nІa&#+2^_M>`]OE=@M9j؏%P+Ye2,}2>H2$0w ?:,fCR7.­/'-h|ԻHYi=UkhpD&*>v gNz-|M2¥.Ev vP|7gp Uo95?hl1'@D@UWFwv}^ t>6ϮA!txf+^? ^\#x30?6%T`} :H0@0τnzb#$h#ü_Gz?;3R8^-U%ohs߳ d/WPv{&ؓwOGZbr˓@HfF%] n9&#O O{{3-9l,>^X5[+<#liJ"(: $yΤ•_$GѸR(=MTUAu?GyU>I'AwٔEdg9BGϘSaP`ĴLPRG n'nZ@5"!=ѳ;J!Z9|Q2f WZ)ȉ8.Cd9?]}fy=oMɑ>R6LcQA*3B1YJ3@A'b=JE*CCMJ^ AW{/=ocpA)}7V&0 /Jq+*M.u^5 [_Cfd' "x$d }Amr;\Ib +ed $`Ʀ oBaU4p 2 ANAdg@-*sg% #'m(CR_PZ>(p Rc"~ Ia8l}F"q״h(%8YJYwAR E>owLWʇG!bgDe^?`j rށYYrM_:4񰐢..,nbyV23Vvz]+wqA6d[ z4NS~Ab$eʗRl ABǣg 衳P >Ndge^NP͊ U{'珎S`3Dn%Yi,2s]I-y*erEX+0Vbf.قTnҾA"PN9zfm-"|{l]Mcp4S*/a#u' X R\)Srѕڦm9 g\V eQ$Wb[ZC ]@wۮ7§u0j沩]j~_WA} ˡ8C/ Iٵ0XX~2of_'N 04s{~ G,ˆ|[U.` I{V@Ԁ;zBd:!sn$qŝS'=e.ԗ&j%ÓS;R}za]59ܻ뽭.:5>Q4DӪw/T85#Gn NSr!9qęg2ƽa>=:XB:J{k fW= k{lѥf֨WtC-RGO^uPRG'XjF&DY> G [_v5g|N_YM#a靽1ci~">FtTYaf8?IT (9D,ϧ8}JY[)z"WֵXm^ܽ+RIEUThGJi,?݃BYLCk͙Y \ u>a A>ƀH T*sQ;|z˦2I!Q8v1ftMlm6iRBcX ^!m O{@}Fz;)n ]M@1 5 aD\1y aL'Z`Qa01%:nFЗRKe%NJj.F)Dzlt|U](IMԡsVĀO=ƜhY}nE~#Vn%vWOEe^) ՗هug$ h#($ CU3D\AcC*!Z>f[߀gf)rKn0n8@D]\#F^hsА_ކ!4䩖;.ڪtjoj`~_L1DT;`:WUZe\JM܆)QX +SA'cK> .t1bb$+"7z@뎱GS?J2C%;wq$ qi3FAE)Wɗ\ ni6-A4Oa2& ôm Nḭ \TOi~~Lq`/F#F8#dAh*[cśC:bY?~I1׊\1ɮM/\#2f@:%ɟGrml֭᩟|O#5wΦDiZB#ߙ+OxЊ" &Ls]8şAagR18l-RiDTGBH`}^,(o#5~t `P(dA]Og/GOb ˆ /oXZy눲KBM9(&H^fv4挕$7>8(0K~88nˇY2PE*Vƅ7F( ZΔvzYUڮg|H/iE2~,0#|T,36-O<4oh<]WSDy;PB̦<흹N֚7Al )h!A?lM_fϺhw՛`Lf%gPOURp&TX+1D5d:j8cF>y_΍\&ZiW90bUX?q٦(xߊMbd)8ǫѺd95\: 򻳭rX26y~P{ zU*R`a ~Nn/Ӫw٤{ k\gfWÚK[J,?3t.cj񝻹8, 6b/ 'K&8h}\jn:|oXUCXps a +a^4םDےyXa"x.gO \ ΘFCgW->vwnб6SЎAsڧA(Zc2V40az`wwЏ&HHUuV E;Tu,'i7q*.V[Qz xo :L^胁(E>裸y Z[iDi-K%|ʼD.^ m/+X[#6 ON@t;Dp'ʠ*QfV.&TJQvvBֿ$Vpa~eX,%5T ݙ,#+9w}-HX2ğ?WH=IEGhDؼQr Yo#]z@ 6c6V.'?DžysaS}q @VmpU+ز\lӰLn9UsC]ķf5]*:zgo bo{Z%% U]5a`[qiJJ9R5T3w+dS%u;4, w'YtؖSoA,}%Kq9s[D_ˉu` J"^H}|be$@OhM imk, O6+3p_~å;C$W0+ JݴM`~/GV}AXTUKtky$Z d*WIp* JLP2;< OHWy@ p=S0Ew ,./Qxټr% hlϹ@T]s/BU E݅{u4ĸT,oRHO1«Vbf^v3G9B&zx *veja%l$Z;fX| LC{,6 eY||z@mշbU+j4 "34xfmO PsTOU@JgHFp )G IMgd:Y9duG\9C7yWcHM3W¹7gQ;Ӂǐt򫓻h$޲]]4DP\~ݾ:8jsYEH'+t 7[sݙRY␳cS7d9^>`+G9a|wTnݥKPaqz~Yh 2&9v8'XNe]s n[wݪ` \:E1Y'3RqaxIM(_{\ c{͊N"GpTF.ğ]U)\$`Ԅlp8M{9*h.cA85}Azڙ&pyx~yF8NKo⯓7k1;X*7߇$*X{.cQ»(PG lVg r77JG y# eлxB07u SV&g{+LZ{D%k"chx S ߡ˧9 ^^S#cR)è9QJ#O_o^[[z|@kKa<b,IKHUM ߸YgHT.= ӓFy*Z˜$ؕF?ɞ9^gX"B {(qi #]n4}ՑGnkSTooUb@}Fb$4y{S =,izKr1Ukpsomԗڵܖ)%@-X.uZv|4}Y}極/nl48'oO'm1+k;-|R8H 'cD_nSE۵6VEy[xla] PXY~U7r0xT3c_L矎|뉯DP@gc5J6}N[ `i e5e*+iYl},{Eދ\ucJ+Wk2³KW]]}iҞBʩZ4B/bNE8^ Qg4/@̆Pe`Ӯږ@%~q}DLl 0H :ɕuY"+Š]RX1L<}o%FqAJ,GafCm`g'LXh4dLv&df%j@* j[phES54YI1.q m֩Z*8!p^'Kwv(kNl} "fx,ЬKl۹P/ '0z' /Q1izc1u8o5j2ćEI)oAd2Jss!$[fW|u .Gh/IDkFS1=̯i1;S$wfDW櫋#I™$#?ӣ6aݛx^'^F.Msq5{ׅLyA4e/x H| &G \e j3Tg5)m9O5,۸A3#@_D8$D/6Z!<0FMt A:u#0sl}Y?I DIbBH:,u_*2΍jXWqԡEsD1_!u"yRfUaulIWKO_=?S$6M<Ѽ/3H>Ý̡n-H86\:}o Ban0R+S+qP2dVx.b7(v W [V ĸg6neȘc_,0$`NȬz Ï)돓8FFA!`Kp/?мazb (_/@XGVKT/tQNڍZ#l} J5hZ.d4sls8u \oRĕ]oz-o뼭%u>e9ŬИtfy?*bn6]Iaz-k+Ϛ):mA$Vv]> 8g2xd䮓mv$?pN]d쉷'|T8r2dfeMu7Bvz =Mw.HKTjDNE P NO#T8~4 ȣ[#}3(2~MnEbN )0:'Ȃ,䖅o\u[={<5KGi< XTble "w鸩ٽМH͜ (cY#V޾-29E:j`&4;SWykg8;+5;7E+H0|Hq<.EZr}f>GU5m#Q¶ :+{gq=&61M"Җ %A6X/!΂7¸)]40 ͵GpcgXaiZb1|vTyo=ӂrg鉲42}U J2r_N\3r2gzwJ(ޟw0m7]rwXWY2%5*t!G]bſQ+էhRJ-,>kglG:@|s7ڰF{W-={R"~ez C֪&7]RR98Lz@dcU UVOb939)>'j)~8bdk,%瑖ZL@-!|ul3`yר>.@ \ǟS/$¶mĐjunt:bX7Yp*L&|sv!> <-/^ yi0Tǐk'Kv~"1n xJҒIfuV 3ze`;6 f{.T=Ϊ6O` H-erg*O9nCof0L&;*溆aֳW&i`;T"SCO#a"C.+1C;m|sV# UC*,-{çP)lмӲ(*B5 y)N$FZ< ?A,1VRLPLLɬNXUZFd_r5QM}TmE&!"x C~J0<,X!<Dp')+qV<i33p$uSl٪ _I"mBךM-V\Mw;?sfy\5 s86~d&h#ITi é )YfUwր2,9rD&.i'9So循UJ:';t6_<-](9 DOkgBY64?Hٽ4'  ܟJ9=pUͬYe0{ Q[72rB"S@!Ls$/^nHYbO^I!ZgkW:ɞ.(2y^[zzFH Q|TnM S-wVŻ襃Nq^TSCep^H7z0ureoWE3Ƹcz\رEq5X#F zQ-{8$E<]cm |p^0Tb>heՁ4G;…ZC Si͑5 pp7]k!qv]ܩ!!ʒqAIܸؖerA{ U.Юi..ӖW3v~)[%A=TbW/DLqYy'𡭞CdwK@-tVf ΄Tf d<8p~#ibSog6uFHy"r cՙws (dEkAS&DՔ=/l+Ω]PJd!$4[Oz~mHj~.a]<w,͒kpH7[KQx4"< 읈S@*<3 ʲ&a3M_P96zQܝYIUkg1+,#džkNC -&jEZ.ďct)o'utYώqX/ݡ4>틏s^w%h5SⱢ09oe9p<NAVHER7τV\ܮQdԔ_BΌC `Q~3.ʡ7*;;X(khr tZG_v ;p+8b >E3=% ]ԫ4S3&Bl)}L0f^l2A!) 7ʹ]0wizV@ ]6G_dlP:bZ_7-hZu*tS_ I)/rqiu[^(dS9ZGcM("2v5O%d#Q Ѽkb:P [ڧؙ̭@5&\:,h{nW4 YʑI-%y1V9?JMlK-ENF19UItK[ȹq-[}ˋb/f:ḿ05IDqW2umAؤS#4N gᤈ3#5bNjwI@^03g 9";N˰?;`wo:Ȅoi !Ǟ;rqSnq ‘%CCNܠ3Jy{ @b&k8`G"KO9j/ӳ@iuAћaxatZBHR*Qu!X8B6q2^[>%. i^0јUscFiU/XfF*T"V\b=5Sǹh7i/^̄7~jD Sb 0t2Y'+O*B?g n#ĬՍx3kHRն%td)ʧTV*/0(;.ȉRiM%m{putVyʂ]6v]h ,c>mvñKԙ˨_xp9) 02y/x.%oz2/<{U#(xPv`lО{]xV.< L e,Kөqx;2-yiMʮ$S7'`LC:z{݄C'b8ѷ.Vau95&ܫ) !f} g!."9ܴƔߦ eZ9^QRr$'bf7e>v\7Q1 ' ͒BDQF\X[uy:?X0T"QM#>KY^W\+2OKZsoR.DG˦fܛj1Heq5d>䚅׫98_f6է֡֐[Ik6-m]w JO7r S%P.Ez2lz P- !&="uH;Ҡ~CQ J4:ˌ 8(Ƈ+0|'g\:{H_G#*SnWzv󁼴"G#[Cf*h0g!-Gͫu[8qw_mAMC*ytRG!]gij*7tg;\h'n+W{-S\oq}tE&d!ęewy(F;։0(qk4TX[3װ{af'$fׅ`*|`N[hy.0a?񆭂A}"Ɛەml;6enY_( DȹyW3ڽf-e`LwKڧ#%q֔[֣޶a"'aTZ41~>7꾟g_)0k,ϴSH7Q~+(&7WQٮt6*=J#_O{dYr !UxA2ϳ.R5,TRj/wb\%EA: c'`E@xt'Q]%ź'>"@bkXcRW҇a. 4į9A#lXAR)11LOf֏ӵ(n<%m\!" ;ZA\)1qY R*b]^y;."jAwyޔ>It#i٠|Zf :ٳ@Y1~1p0ˆpr8|m=UWḮY7S_qdӥI:Hc܄&bze~,TrוༀLp@r{!;Mnrᬔ,g.U`Im~oMASnۻ$B~]sQ f3 }+2;28s`̮A/dv Gz)]H'-S|Dk0wy=Jܬ/ᖽ*xM HED _ֶr;EJʀf'R+su0ȣ΅8{T2P750apm: ڱɉH6@6Dԙ]e,v;H Hy\`wnFC aۣɤ裾=.QyMI3fag27uD Лtr&sP^ c^դ -Φ`>ۧs6Dv?p?vKә=(FEL۴na cLQK LN^c><$tB EvĄX?"}nh̠>ƙ9^ϪJhSڲ–yGىLu*߳yC.AnDqA_3D䭌]Xuޞcrՠ.mPb<Qԣ?\A]7.HQȸ]Vɺg xi5f;%4zyxUΝ<1s:(^6I0Vv3{3"UjͪEZ6OBAFr1<+hvJ C"6]QΎ>]{ڸIܾQZ uPhWwMorSd 7ro$NٹyH{ ?M PaKtg-F$f"E,+# drYzqG6Bq{UAKk@pFs UGl=h6$e\Ъ]a`SeI$D1kh57KmzS= r)9 $yuR-y>TĶmF) {6_3*U4u7Sj_/#=UBq3%h@A_Zq9UcbAxL!Hlk3tސkd7o}mYYnT I, æwHR:8;|La(3T0Z^5$CD'jjz,F[6o2?}!L~r`uͳt&:#i3!H~Pg.\|Rڶ]d[{Fظ|S菋 _l:JGXr7st6 ɪ5&{_S=`flfԂȟrޤB|jZz{9 :8j! 0\&FD@ ="ZBnG:A>/R\Bb*g3)| p@ G>ܛ똧x®hWܐp,+7[aV}#&E5zG=PxM=@0ϽL ɃgM;E˳h & +sl+z Bwž!Mo2Yc"TIdY=-O޾R Vq07H9̀AyJlܧ: ۉ A.j\HU Hd:~!"# ;{pnGxъ*XV{юksBkdCd57#אCPvQ0s0i20'&=hi(J{ h^Z4i} uVEF%ovz)C*Ƙ'Ũ[S!"eHْ[ŮA퓟Q>ja ku}Ռ4~ٟ=UoQn Cȵpʩ` Ki3XYDj]TfVۉENmRTaib[Yf.L`/୕^,T}|}^sB/hn&ԘAV=C;Fj0[|џંZy0qmvDhB-vꈍtO5Rp10dT0TR~S2KSP,Y8Gdo[d ?\W#I.Im1 #(m$z?} 8Na'ȅ⮃$zȣ%AP$;rj;;@4K;cVuˇ%5#ίogM5AR!;觷gSpBPM^Ӹ1ݩ 2ƃtkmKe{#f*pyPT"KTEkwzZaHgc"C$g_Ĉt͍0|v\ )7NM{"첂MmFԷ;"PmAmhʗ8bXar*^ w\SڀIX1ҷn9 <>2Gi7%f =kƃ·EӞ[ZH^%qf;􀕤z.7Ҙ+GSTj|fd6B]]Sk=!bpzL2F^ 0k|Ebg"87U͛Qh|Tć20*QS$A7K[ %5<]@q:]Zj"&qy܍;:[SOs@w I40$7}J )|BH|pXR96b}:&t(TS,Q0XejDYOѫZ cQL2 TuD %طb1vwѨx ^w0GD%9Fy7'"dY ۲i:z oYjJӮ$KE|%LO8uBJ J؍Ŕ%Bէ 4d:U[xDy[/zr"-W}e"i4|5l!|k+ƍe*_j|x~cTެ?Vp3݋JŗOi4KL~1ߢ$Ģ10zh.R'J"yܑC c :S>}2Ok-X IZ!neNq#zCw9xb$_BXB7.T*`&-w342O3e,zw`,!z̽/#REa+ H*hpTfyBRfy#1CJ }g68'ӆבz SH#?8_]/֙X4.D&5:_F:W= cjȎf.GxowfTgi54D3oqpp;_RLofVn[TM Ct裏e?WIlG@E 8Ҥ4V=<]8L>=܈aE1(½ۃL/1'UݩX·'9|\–=-J *Wd(L310c2H *\_=K;{Ҕ7x겮 yT0ɠ/ H},%W6=r;H0/E޳G<}~֍D'_{) $ʭ8{ н:MfAK5uFNA/mƜp0'TYweDm~%)}Rzҫȑζ\ mQg B/Y *9|f@}3>529Z_DżjO;x `8)A8@\):|mě퇮c6zԌ-ٍ>{򅣯vd7Vᒒ)P탅FiXLCS쏯aȋ昁E.N12}dA -ݳ6}Ĺ [Wk'8"]JGK qѿ#i ^˩r=DS6~܀ɝ6.?9v 8!k:|Tjt 25Ő^@gYnt}lZo/._:xJ$J d-nx E9%-,$RWFZMiVK",i0xy .Sqh1.>DjuO9{ 2-ׂڞ:Qh鋅]\>H󀗬eŕ{rA>]ǰqTDx1XRo%H.5 ; 4h2{6g5!yߪLUAϪ?{>Ysz[oHJa`Aީ x;)GB/ aur#. 47J 6Y.ՒScsr Pa@[eYb$؜+?h,;r+^j+Z#Ȇ10f W xe)W O^0}R¿;['K Զa?Y?4cl 5LX]5t4:NLb5"O1zNUķNn2)v[?>"y9%jpSmw[w.-,bBo%f M@>-S#lM],b(~lCi,̵ x|OY_+¢otj}[Z=۸aR|DSd[m9FZCF4E+r<9Uu,Au@)QԿ #FBg- BO]&M%?9hmJJ4.0U{߱l,Ҝ5w`W׍+nu2f] i& ݟt>(AR)P坙H}O~I0`xG6'QٹӁb])4 GYXG.i.kmKˉ:mW*0]N~ǧìƀ"FtR\u1gb=Oq%iwb O?-2e5?)U:QEj$}Kl{NShwJea Ԇ&"-AwC7W,K5I-`dfy| xK ~kwΔUJcz(ؕ.6;\4bLLPPt<8#{;2z^O.ݗxuw5#bU4INs*ɻ*ZB'㡽V8 Bf 0+,%Q%"Wto[`$Cʜ㐭똇z=º0 K?ܳ_ܽUd>tK]Y&m)%FveKu7i6DȞ*w@q*" WG*b*oʷ?[QHO? a\Z(Hw-J vjL#A=;hoQ*a*hE65b#{ ūьRY$O:R)[XO&77zvx{ _[?plz/%oٕ5NN.?(?Ҹ>?ǟ@ckN|D ;٪<&#i.'hHUd|OvHUDNNf Ȩ2s ,Ulȭ쌦h؏}N @޸}x\9##{r840WE9Zj/3wF򒢸H8x?р?ۋi裼\Ip`57}-;<~0D㊱١(T֤izmVx5vT3FXʝEFX/~AQfBSaͫ6 i 7J\l>[x5)Uu瑀|#S5HB,zvQ*0iBE[EtEb3W`"umc]' T(DF ^vnKӞYx,Ħ:9I#'ֶ2 9p(k*<*1FϾ':VP0=`bQo .z1{1C 1>"7ufMF,QOF2c##}$s}jʅ5X6z^eÃ{b+ H0m9Tg]r 0ej>.!Q".% [Unq;׃ Yf֗`@?P_Y?RbJ;\mN3Quczqmk+l2 Pvpd3,v#o֢GNA"?P]A,Oभnj 㐎Ⱥ%kY٣r/KVG("@A Pl3XUzvKvxT4q7"ڹ;w͖w#:KEKER ن4m^g;Cgb1GQ( 1Й o.2:'M|_:I&}Pb| (4BLTJ ap14U덯iOPg]1j.Ct_[&tPAu*$dNY?hnj_ `)) 4Fx1`xݐuzrI@ItsϥB!*'4ts5#D3iT?y%{#b_ilONɿ^/10>-hu>!'#򏯒 Ew+@!6w٠.=኿yr*\" t/"|N\tjj^3d:z6G)m#8|tOM*$SK| ̣ꊩ=:=)cFREU4-v:|.01/Ǝ9Ȣ޿i So/{XS&-JAmڱ}MY28t[*X|A&*_.OgR 4 "ԝ 2>#z5?J>)oRYf*/恏#ht]f YOcPF2&zHReE".0dSƱۗ+⥈c|/ m-r\,^y'gEPLR'PNqAKЊ 2fW? @ŏr!@5,f3 tRSIYiA2jga*fvDٴltl\[l*Yc,Fw)b; kHٵN¼sBXKRn~˝D[PvTG ¨NY-"${B(YR+;0r\tָnp05HgπxnYq(D)Lz;u{!ɩ ɒzn#^ ) 'ܑj/A{A٦NM_,#M'ˍQeh v ̗s7NCnsjCX'4abi- WGU)(.i^f!KQ~"`lQ.ρQmY an}xE6&#%V^[{/P&u>UvxcR)9 0걞L̆8,~baZ+Y@R6ØM8XT訙02SW,E}ؙվmsASAcHت %hv8*nN`$HR!GF&sŧ+Ug {h$"){g%HV[# I|&mmRv:zf-nvmğ/񩜣[cf=KxdqdH9K^b;Oض&_ji$dECTVI96j<î"!$+ v8u=n]}jgWt,Y:t7מ:˨ {e)z\߀{v![^ GzSƖ0>F=(C5eIXKDi#/4CX5ifԘ 7-yJ^z. /S6FqOm׏JMM@Fio^7:7ʥ!k-m[V|qQ҃u Q"}wL9'G\/FpS9,j2[HyB" aWTzfλ _ RFvU{bZ@ٽqKoL <טTZe+ct ׆sCLtaQGePĽ4+Ɇ. V31y,q^Bݔ)e f<yWL̇HIYfEtRFwDV^Gab<·H`JWa٪kj@|tgf1b(U&fޞltV`hO lJƿWd[9)% V2?#UhWkb\gwuٟĂ- 1_ NK&cK 5WA$8"u ×6K^w,S"|<B6UhݦebT~B>[}?;e=. FFWC~qnނ=t(O ls3 h2b]rG-XL0IxWMR <# "RXB;- ߬A݂tlA Ma:sWqGюu`qƙ`;-dKtĄ}TUrki*@6sPe*-/+]X30RCˍlL r2uwutzs۴<|нKXfs3UG2ZIbdd]uD|A-,ΞChjVyi09KJm ɂjL "VM_fX6oV]&J|yw 0uиɥrT,nxI]N6>4`YQ}d#\i:ëcJyFЉz5鶢RڈBWT+t|ӹk 5W3@Bo x5vh:UQ䒙! 8LjlݘҘbe}y&T:?D(8enpvz)OG{=\jLiDz1䧋ɾPWRR#爷Lg2-zZ+u`Dus$%`ARŃ%U<S_먹DfڊEW9.ߣpFwKaGt$͉($ܥR.}xq7E xaj`j ®D`@}R:vbEvzUߪX]nZ_ӋP (~(+N2R 4𿙪 Dxm+#I8.1xk(!w];7]#RIm+vC:g # ~܊Dzcj \dX6.yZtG ժjw> D7AzRȵx4YK\ҿ}j#82i4:(0%rx;PO5Φ1q :O+8*J\?O0|5I68fmE7d. BFQ5+xў9%3en,Z1bg\"lQw*JRt:=tRHy/<̜!ljZ :!t`lХ*U',\uY;ŖIΠW\șr9c3ĥ&TNO3 VaҧtmH cxNU~R> 8+1 }+U&5i:"fLs]O|'SG֚`3_Vn|ɸ-'w Hڤ#)NAyb&B<}y󹩫H*_7R[pc`Lrm5>к;U#k+<Z_zҵL=)}E0lU7 !ě12Ҩ7v ۥf۪l/*0`ČqQ1cm~ B*du i?%Ѳִ`Ǹ,n*NpS/g/Me1%I6ߊQ>/xy3;\]X&Grv,.__ROHPSGZ)&wy0)>6_ͭ: RJ=ԹCxM~}'F^)(ޡ}Qv^bG䴽RF&a8!F,"LI1d~Wj6jX]~ ly,&u}g~Il6Gb A5Q_6;N(F#搓LzW'u4.01η$ѱv_Fe xHcMlŀlYYHCR`s٭O N"0MEQ sMr?+4g6HHa!!3`ێ}E!6ry9kr.$[Ѵ-Y86`\Xh*Ŋ^|6Fj :/6ԯ:%,LF,@Μ%@Iјμ5,=;cewڄ bKJfe+EQ>d36l[r)J1$4߭G\9xU"5ҪFEv`n1)ry5.B~UfgrJ@nF@ w*zRSѶ #z7NouC p/1ȗgSg'|pLn;nM]u'H$ǭ+&.$W%$%7%MU3T+c "q5BTѽ_UTiU[Tn-ȹ栮4uEݯc1}/O]hʌ*[U(4NÇ'q'D+~B\ȡ`+*L=1|uS?|E6Yݭd#7:nrB?{im*ٶTgݖ^Gk`@ _= ݘ:+^@kE1@\ NJ !ErVoʁH&dݚ>ϘPK`_Tkim"$8=să:t>Ug\O2ϛy>Ԧ qAhn]Q3_5ӋIy3KXuY l~pؠi݅  G3᜹*^V!q$Wf vZ6 /cp .#P pOYLQb,x4 =c6 *[E~.黺P6h[sgH(η٣6 KM2|2@Z@z6ã,)_ z>g("gt^H,* CExfw-KY״YQF=#8b6mb) #n=}V,/Pzpm.%7t;t/zqEu\!jN4^g?Qe5B u!eV0MP h %r ,DrU NrZҭ{*9+d8Ń )eB9kPFb|~͒<\LN=f'HflE^ B+nR@6bYXd]bjI/JkqF8դ^OĕxNSV@|dl΄p:^,n.|(qꇽZ"#Dfoahh(]OoANi&MȢ!6dwsN6ZAY4{4g= vU?_b4$*l]hөPGh8G>߁i#tZoNȃ/<,_( \`ßU;/!@@GsA8<2bƚ FCqBjHܖ|X[(^hAy.&M1%0K5D'q ةf jN%r#R=.,>KCҦ' Ykg³G8 =˶{ 6d80,8٨mFG^SmQ 9  "\Rw~?[" ?Xv8Ew=p«`p|[+HOBbǂ}[nud*Q(p,/!eו"a72A^|䱨4") la9r1/57)D2,PYؙTER٫ ;Q^so AdNX9 oE@4ql5o7jA[al¶5Ec %?qGHx2 €"tWKW>he]d)zl1de'}PxJnnԨ IpgBG(o2BUCd?͜#N&-s j,Rk=2c@..)*AY;}`?# x/O2o:(t f㐅r!?ѱO[ͯI_F&UR=]>@ي3seIoWYf@n׺MM]@fɳm%iƒ2mYɯ_XTS7!9;fob ^P'G~t:kO+&[B$t]m~*-om&!1ggu E81-|5Б$ , "h*ZoRE]$4힬Qc2mQ_g8H͍Wq( 6I|Z%nVu?&$Ne5? ^e_\8‚ō<뫶 \wɉN+R$aLj#(w 3?ˢn'7EѝNIϼsR1Mk`%B|k*uh?4ǜ3ٯusP Hm: V%=:bB.N(P8\!=8 l0ع_7هt",-ul3zrsccrh@Bִs}J>Ľ. !pƺKGWerhާso(I9D*WWi!n< jC3=,[*%J'@jb]]bOPchVe%p! 84pQ Lm8H$ۦ9DY.-ʵ/9`j ~?>.C9q[e×@Xx-FM2zE0鍄x&#0]mNlo$T=|3XhbT+/7cfJE|J? ΄LI|N'u8OSIrbT5^ƴ VR%kXhprdY  oCo1+}>Z! U!ZI;MFN_N{wTr$lrh% Sk'X\Gnre:94C2y|f(eFL2_m{M?RMÂMS3)#K?tA$@n]) {G%"J%WpHX">D<OfS?4T[-=M^¢uQLRi]<[FOp:E2qP bpqʭkPLE&iL<%>C,,!g!/6dlq5MuN7Dh627 a1&Fv1MK_~~K%p+j: B(+[?i^4< kdHc(o( &.Yە 4Id+,_(ѐ0o[3M|>f4)dA6F>`^_9M'Ƹ74'[&(͸jTpyX'/[7`WKPID~lTth64)'xTOO?.$s Qa!$[冪8zIMϛEeD9^%Z .H/r97v_fC ,3wA2X4q#)܃U"2̡]Գ*ڷE!ejV.J18jL =svyuɑ/es.x5Fskwx_Q۷[qTz_<O fU29ݱFB  HH!XGP8z~hμHO9#^f86:_uzj \'y$ NQlޠyZ;?ԩ1FeAŰgfѺ:Mc320ֵ1x&h/'Z҈kW} "< yซRPJ[9 A(vD{fg[ʓڲڈxqw~ P5`bNWZ}P)rpK^\qQ#(WRfx_S>Rd#/~X_Ӑ+3fS6NE&k{Y{FMO_;qiZXPDE14aŖo+XAM جa_w@ f̻fC.ֿuǕHw}%^lƒVȬO.r#mEL4VV]THRn p]ȥ8 蹫k ) ` f蒳SR:f-PG +LZRݚ -!G0Sb>acKfB»}iQJFP!NȫG.`i/YE+l$QX}J dHFo1^#r5k:8qB<|w(1߬EScթ쪙nևlwsnipS /-=E/ӈvCSI$tI}ƟD&v M􇼜տ6aFv7CM볇=؉!EB9.?Z'vrpC:TGraXQ4ꀲV"X@YˢsO`y:P'_ lLْ2y^qݫiI^>&5K57Vħg(.|}y$r 3SA׌MIL-['0uLFpBڧE \s 2v fgG`fn)w@T-Bq-C1亠y&SBLrgpLUnY)xȿav!C oa4y<5{4Zv(IXn sdO!/4: ȱ|NI:ꠣ4+NYukq7tȏS.;PyF8 CY ה1Ʌ,Qڵ6who;+ s,)HU.\628+XpFv#Ưz/)d rG6+O^껬vmԋ@_we ]z`ڻ$*>Bj}{کjSy\tFFq4 7ɢ(jO) /|=GnG ADF9BlV A%yJE49~wb%cjVOX1[Y$*:'d;[;=ɞb~9i/n&m΂z ˨|Jy$ۣYfͦƥ ʆ"ёSms::Ōaǡ]}kJ.(2dSudW<5(M(LƞӁĖ׆KTZy2pҾ͸$"Rz*ґ}Y0Ԧ *oO[N$n{y415ZzZR)I7b2B4P;ґlS'tZ%*HSp@Ctԭ, /?jkxx~G) ] l>* c + $bRX/tL[7I`2zghKeUC,׺Ů(FG [ eu7*_YLBEBЛVQ ·431GQHɔѥhI$1̇ęUUG Gm'U:.S S<3/ij&`  z/c׺|*OLYE%qU뛊,JNmI؇#-r^Q݁+ 9Omk6]a}샲?x wQ&.dV 0 {n+~^0s P*x7 $CrAE}f}e1 gO3f?qЋg.tIӲ 7ӘܿvEZR*_ӓT&1qր MˬF!t\8*iW=ŻpO4+ԿG_(~|9ZE>:UMl<}*+kvE$-CޱUßHtk]7f!ˉZ2JLzEk|%9KLtMG< ;:{T%iD^,.wlxsƼ6;rJCGAsͱ%c*cޔ2 +ՋFfWp.;մ^1?cvfﲝgm"taSYQÑ)̵XtTyU4KxZ29Qn{i )N4):1J2Lg%"İc.Vʌ)&#S{*4h9vgUOm85c,;^n߿ARwv+B8#iHn5 ט0fDJ򓺳wciLp$>FN^Um;vn xΑ|{}gM|+SY܌0\ &\3{C}>N<"7pM-g!x!I+L[c:U4iP̋BtN xs0+Z{#<9;|-i-DY,4nK`^`e z,8ɛ6d&;2rFUUP! a@!AJX)vJHFGiW+۫zaQ*ʔT[UɤO%b? zFi@CYQbp*@!L/6ʯrnzAFuucW2EˬKΒ3uc@t;FWЄѥR}dž]ab_rF`.!I_V`7<1+84[>{H\dԊBG{J)nҎc(fZy_+l*d~cf-'5%SP:qxAHg2 ӵF}J5EOp/ttHd):JQt=eu-M.x>N &"oIcw.pGm^ʴS`zM}WE#A~=˵Hj 4`J`V޸R-K"U,U{OR\ gO-nE" AFt E{]0Kz,7RhnP)tqC %\b =NSu:zEm7| !4 *N|a8ʖbd$cõ5J=5h+VLGw!'j0H5DHL`xkpOsBto-RM@ !33DZW6݃ۋam>`/|83G0n^ ]Aq:4劽˒D+:>(pcHmr_i!e1qM2t=o"TT X;3o;T"aWM,LB~U6B [[ nzp.}QCEpt;:q1$QK%dcjd-[ݘ!2ѻpWh]ϾRV:W7́E&3ՑA_XPF L8Ʋ /Ly &]@xuE0=K@ Ǐb9DF!DTaؒlL,nЃHU;VQԸ:w{"*CvdtIrƔߜ{539+3`$B"Ѳ$y=$ѪgUUR~g :!\p(f pWyd7H'(*3vˏIʽ/i98׻ F6yFWU.qCfUDenᖖ ,U3f17 lg}+h=rgjO^ M%s3'WsYU FD;#Y [MMN!,RKDIkUjvF >_QQ{Sj_uP~ X}zT}iF˼R<}YTRn/j|E;r?؁7t O%K(yAa>bK_QAャIc,.^EpN{QFˀm@Ҕe<|)5ѡمe E#$ʻPoZ55F#nFվ?w/Abh"Av9^)dyi 妭VM yubڝl!QST] 퓵j&>^ܥ!O w`ci#pdB#>lހ XWwib^@l>IiC^`(PysJq tgjj2Q+G z<U-(*q. QLV8p78'%vlwTN8KýJ\ z1$l)+ 11y# A"TNk"TNTZ_iwN`y섒ZW˹vƿjx18sZ.wf"再&UGQǭ2Dv\nRvAJO5\+ PR{It{;h~)>c8dA'\AoNmHJI@p0a$s~zXk$/*yS>l"1t7U^+C\ChiK[WKZԲ?ΛȭiCsyrfª/[٨5;Sn {ڪS wpFaKCLkHrڏT5m3g [z 7ܷsIQ ^LӼp^} m3.evr=JZ7H4֗6 3D-/FGa(FEjӒd iHk1 Π+a7wP2㩬0ݹQ{5f7.Љ- ['ofz]Z"P/ܚHcwم[FB},ʛHKϽw9Lnsܝ+E#x"(Ērz;~q?"PȐBF('{-EՄf!ڕ XK<MiDb\0Fz"ЕYee7Ƅln^_"mm/!,ec 4R<7"mqbO8}uX.tյxtO|QZvdargAhT~RDxŠ=lTt4QL:BufqCUB%mc'bDx@C  /sClxU]jsBBc2= Q T  n2k5 58˺{[?]Ghba+ P%( hg`m=9VSSO0` VRXX빣v5>##0[=C nii"'"1Ȉ\<ԧvPͳ\!Ee}^ֱ&_*ڊ3i`g\!q?Ǝ@ͬm%}Vlw*sQL M=F'Wl‰IVďbFiٻx69!>UE'eTAN,0.  ZП&$4 e>hFxsM[jË h봶h5ON IoG7[ YŒ_v\6L*04 39[x1RF4TmQ&'aӇ#ZئƏƭ?㸮HJ ڊŐrB YTj9ܷj/ԑ0rQ)^>]6#,0ﭷySRhhbB;* Fr} 1+SgDOQR:.@hn[cUdt;H`Լש>x0 FCElDiY{,RzB}]o~`xfܬxyJƨt7yd?F!Xң85T%T\ ;qZM$ 2+mw4cȊЃEq]SM nUgN%@+F2ōԱA "݁K "|$ đ|`kJ>09{nd\Z6E6@`s zgơ HuUCۺ қ4gHA:JOtF:fɈ(0nʦ0NȜކb[aQ\I>}S;vrʄ,)m2wGʷdLJ!)N<گ+uΊ,̠ o8Nݢ.s?{X`V_ϓㅣ=V ~4 97B&l M&ɿ(uHuPJ**bpܲa M]O/#7@ۦeh: 2ۛğ8sIՎnGQ^hI␘ H&Q<%GNϷ/%We#}sww8Gȗt=gHW; m$mϏm|\ p y4ٯ np!64D/v_0r$R#f `Wxھx!ṕy9\mLH)Ҥ T Rף<`NԬ&1qB@'Ub[M|.Hkr>~Ȧ'1 ppF c i Nxu,7LKת{Hg\[y\ m'{gxLK86?@/t <o(cn 3IyB#8 I JW 806G*9J,]v{wD!?^[Ƭ2oEnŚNUan Z%pc9ɞ6Kq_iC,)Vi=X1ט; :nb_ūT+ ;Es>ZɟΙ} +`'mbr Jq]E^Uyt=Ad~˩ D m>jy#EfÍGiu G<@Ǽlof5droDL2>ocR̃lp | Y,L/?믓B o* di9KPaPs}Eu`ȃ/v꧝f:EρKM0I3tSG !&R@_΍; ̺'-I< $מ#<]-+/=όzYDV^ףd'q)C쒱\h'8-Ǥ.u{~PѰkMퟤz ^ަ fyvusxZ["w^|s·M(kj7^Njc<-7iEZ`>Ju)3)>hۻ5v?ʀW{]뾮[4ѓ+o2Di)= F0eGϛ\/+hYV*KLfxQ\~ $} *1jX [5*N1v(v08;1eOv?\`/:#%աOO𰱳S*VkGXe5F:Ύg雭w84|I=> O`D3 i U7 ;bEP}B@i,~RR&)@>tD>RK%[ezg4= ޱJ)`_aS,XAl2i>jIwҞ}sԳ Ԃ3r^{5K2•AAq;W/W͔&0t@TA{{cD~V#񷠝Q:ir5&:NFo,5:@fALDSȕ0Awzcr[(UJ9@nh+|HKr5A8_[\zRcFkok)`<|$#{x(e.w?ǿ4d ƌُؖ?< 3T=?*y2u]x=bfP85J汧''מ4 h{xW&ނdlDn(v:"R1v4 `%֯M<|I])3(OjNQ3QGGqU ),)$[:C)0C4L-V*Gma>kW?#,鹜 bA`w)eR>-H5~tc4/ٵȍKLn`s,&_&+ [+MBt/@2~Ĕ. Ƶrt_7߽wdr0G)ӏEkhp>d'd+cKIYhoipG+|jzxH柛˼'뱚}C|B9 Y:Oا\>X@P5}nx@Y>z@D9N3kp;J<$J"n2=7p9,JZ6T"2α& yi- Z4C(Nh%C~SNNE| 1v(˾g`(T_գLZG?ti-coݼ3ӎ]@f[K~O1uջQp #0A̖ځ 5+sJ_w'@rCŎ;ߞ\7/Kg)! Ae˱@$gb=(7#{t=zQٽ*U:ĴKsGX@ib*0Q9PK,ֳ `=}#Vk)'=J<[RAV2\0܀~ΞY!jnIϞy؜؏TL`D~?m_ܘ6d] HӼN y.!*|cU(LIwE+FׂWe٥VLn40UKlly̒3LUzQD@|qI4+6)!T9ׯPmȞ,ѐ~-ObSѐhτ+nYE\B%0;G)uGXŧ6]!|x܄ꞔSxE e#˰DƘ~^,G"ϐ!l֝+,@Ӂ~R}?=Wc .ª|'sbƹ`)Ig 6>S sHwj~|B?Vfq8EK""xq(q.QF^0Vu O)TFZ)Zu븬ZC  **tZ] I |l/j|m7y(:HIf`Hf^,8yݘD֕9`oaZγ0/e>N-2֌b1V0K;ݠ Xe;)~͒6V1@B'8*^>X.QQAlH~NlZ&[ɺ]1pEVД#z _,?Uӱo;*~pG[igYVWsIv᱕]{ mS懴 }+ }TI T 7uP:'x37+Щ )T5DR%mրOna"jimENАmwhgdT1@T2Ԕdi+5E 7[{1 %q0ˬ|t + }Nai [EC+ X 5[>@/S Zabn_:VS]%~[H -#_F.qjΣBΫc.S 1x+Ҧl -ooC7؅4U <36N WN"F!V 0Mgnc {p?kUQMw`eӹi:yOrꄪ,w:~'Ӏ\ju1ٷBΊ2g".[Z#\>lj V-N CCޢdJhW4I!}(9jv.7S D#wn'@X-9˶48 ,/B@g>eX~\3_e~?ȥWVmj@2&=ݼ[@9֮a\-md%(\~jي[Az-?G߶y>H%qm?~Ƀހ9xC~0ԙ=n. fEC[6԰=tvfv;tD=xJP;BJbcsX x/3HX}J@O7*E~G{PRAWaDVyut‰lj p2}:00y&R=]EKt>^61G( fהaiP$^RI{r%t\dXO)tX].y_鷡@l; /Va?+7=c&į^)e8DY*sΌwSH7V$`h 2u[Uin `x֔55JRۀQPpf7bh-WGTi$(*oHfC-KbJ.4zCm ܬI.#Vth]1a!_zfЎ: X+tjn&ޟ/ 6Q)Zb೒ xJ71ۋkVMD!2ie?A(50f*_!G:J\t|\WM) 5/tF~͎ǻHe8(ʧBvr )i~*T }n_o-hUy˪Ú/sZ#msA.>Ci\}+N>71z.>gE.4PD|<#QغJ~6T"f')s!py]{78-NA k8s,YJշ/,v ܻD]u3o%Y4V7ɣ&) S%.&\Z^ڛ&v>ɠ3&a x{T!?j:kH||蓫!J]A\+:o oXerܧGw,q5Do8>ץJCcq]Wݫ0"w5o%QF}soѺI`bw]npgCa MP?ʂAr_R)yΔD}{ UW uA.9 S\ߠ{FqVH:C 27ƀ-ۓK>+SgjB@9.IIa2W!KXLމs:sTM͞=w{wM잞fk@/rlfE$v:MZ J`eݧKn: {wFPڄuFcF=V*Iٽ4bE{&B%XP2d}liKO Y'^h+|?G xqb%T̓i\wN#fyvYPpnt4}UG1!hSPt;՜W*EȺQu3ΌڢLRE:6\B4EjS aְS(lQ$ v>Q }[2. li'M%O6g@,)[HOAv0.6Oάj A !!@ov5f1@ֿN IxkJ1qp|6|tGA.2;/G͜[ gzB!ӕqwK> dž^vϾU:$ӡIm *M]ߛe>` cP ;S!O6[ d#k3có߇RU]^laot-9V( P.86b&d \.=gsnNr-l"uPKo (s b)JC p(F[9zl2,76XT$ͰNī9/nq%Ӥ_P"ے~\T,iL4ۛ.8Rs7:-s1W~}gXm`lz1xwƴtrS 66cwc>k}SWx-$D,$yxr;ȫw?wΤnT;w7'U{ >W{]d/}j(j(nkZC -Jrצ_*DMhxNU(97=+86$#q $:iFmH3VQCA7iP2!5adP-zʈC!ɢRۆ⹑r1-g]MWz\Uf: %o79 /'J \tޜ Q ~Qe`, t_(%úWC(F7+46o[܀4X?ٲ~Ë=Kitqpu_/•< D9νvA\]FreGa DjHo }|VـPͤ32Y˱yk%1-eqf^i9ʣR t \-]g:[ח5y2H~mliHGfm?ez_9lbr*Ηe N l^oо}o5WA.50{mzf@0{a h~w3ݞJ}"XPƲkF* T15O]j IoSxܧcGzg\̬ 8uA2s W§MQ18&irh:vN*K[kui)k, [aS4Fyn\9^ָjS? (49?jA!y!3iҷ1'sVJ]нFʂ?M \| 4Wͮz7Q-xr_tbJH(yK|&02ӮuHmL.mz2'w0lUcs1JTbqeV)J4}-f;/"F;p&?Ha}/*I` 7\쌫VQRI um֥ोt&b)2pinΰGf;LlNUK럡r媑VƠv]CY!;QF1/ /w45CLP7?9whಟLe%cW˃Ii La.y2wG#bzwQ e4*>`A阩{G(Z0 3vBBg*@C5+RlwI5"ѕ+O} xFGv5kSEPE:"Tdy/,[7*)2 @d!]ɻj$[!.5_'R:P3R7xNو՛R D"n Į&C ' >bQ`m{_ѺnQrAX_S;?ItTPsna#/ 8 T~M)%y>: RD+RU0AAquDogL9FK2IzJD+(X5yߞP+%aӅI[c otLܼvqMCK-#w.] \t]|TR*}!1V"ʹkp,GS RRz[DzD3[nJ!]}$L.t•KSH|^C-M>#4J-cEoxybPtBYv:)[ѝ2Z8!lqHkmUKlT#_% BMgVW9jQݾ][|KEr+"H:L_V?uc΂+,{ dtk- O2pLcam4̗[wqu8 b {1 }\J*H3F;.eQ̖iI\N̈qG\} IBVg:6!( l#cZvİ@֕:NMU; Pߢ$I0yQ;~h*Ӛ\o߰D"-qNFn5 gK = 5. N*yo2<~x' v|ؼvr#> ׾*\oU3U? \4e*^TIH<"]6lL7&4K.Ba)'ra"Rzx-pm^yoj>ևO5ͳexwKug`N>MO4~=o\ K;5C~fj-4݃pHiYg׶V.b27W ]JD _~c\?!}^:-P˳͑K9R&Ȇ紨"i1ig\遆~9ֆ!>¢*3u$={ &0D|UC :+K RycXA' /Gz!OHQ w[<܃H x v4.[^}gpL]U4H$42PZP kD2{"!njB2nrbw\4`18fڱ}Dl (E(nApGIF;wȧY1%agma|X2 gсz,mDJ* j:-|W\!g\f8DePp$|.n\{ gf &LK6f~"޴> g3娻$%Tyn%wJQRʼ5켙g(ѴH4AY@ZhHrq\'QŋV$'%$");w=Gk6d$>"<0sc[FM|? ]D?K#J`3Jɐɽݵ . aN9%_"Ӊ˒S]OhJОi^Gy);]WrACӇ hSsEi)%%S@EnŢ1קYBg+$3GJ&TwO!?"d9J24){uOsG۪Rg#)5ī;4/e?. oV9}i+VS,d IB"|$EQy]rm:#t-q"Bqaߡ0oFm_R7&(rS&D+vCtW> ~^ܷk18(ىHpNUu쀁绹[N`Ke޳w{*<Ŏ.1ɌpQ?,fV2pr5DrL30܅ 0JuqǚجTB9 L{v~F[s"VĦ,\ %@bevv]qu]ds$84J>]TmT;QɨhE;pN9YB[;С(?9ɉVzd;4~Gkrpޓ<6Юcz|u^KRZ9XPrSC{5#)+վSY* R>O%9)7pd+=8e J<<>itSowA&{5ҸǪk-F4V 7Џ:8i4VA~lڸdUzRhumhHS>mi[NzmS t jackT9nfvǚ-Fm >{T }ixˠ4"l VX3>4PdO9IM]):D=+n R}gIƗ C챦'B2J! )4n#xKC!؈kHSF"!nXP[o@;; . 6V aŒ3ｾ[?1R&U(yx5;Wղu t e}2H}Ve}a`¯p?^@jCl59pڛ/+[ңK,s P Xg<^XÈ) +48gd6|SIdJ0!ƃ.6}Țz=dըQҩDxQd7jxh|Aui+y ,.~ ,'DQ[O 1i *i- Q5dO,?QĤBð&,h~fx-ƾcwyij[G,.uɲ@E`i8 ]/z}} I`g #` {}Llm} - >4~*l k׊KJ䖐#g'i4XZvӏ5n3D(A~F1pCFM5"m\0e7h\`Ns>O=#:uJ4 /7EiVr*BSff?#91QZX#OybLNzʾ6[Y81omʥVSS\".*C۵2\R怼GCpqq"ZD^fa_g>ᚇ( ol bf5Zkd_F[ |\0Kݫ. hv2p=8,3`+UpF<3}zݻ? ))aE+j!NvjJ,O}䴧& >Փzd]tb:B.. wC\5Iuy7aA0L.m dm틵Q\m>wE5*ӏ5#c59n{ {74H>*9&t2j|U ӊyai{;SPԶ+fFߝTh{S$9l\O=X !"죃~@xl-t^ƙF $[QaBvO%) A*%k)| }|.%m\P?f4|e@C7Gn!!g#AWMHVgRMHX9)VC@iHQb^fƝŁ`JCemN{eQSfۙƲRlkfA>0=9 ъB6^ƽ)S,i[0(%3 Wf2@\"PHa?Ћ\Bfá9?,kn旆6mK;x} qpnNDVb{v;Tm{k\~t [4 f-;`&c 6ˈͅ{{@p*!*9q{Uʕjt}oժu spJy<'rݮ_fZi &Pֵ:$դNtQϧ''hѿYٞIө./wF&,ۨ)*{xճ Ktxtq2V)]^t#dp%M߇H&&D FiUU3lW$.&36 %76)´6w!E Th~6}K;Yv%9("AaN.m" $Z}@|΄n,zɌ+2ad%|֌N/:ΫMV~xbyP9`ˆ]dգʯpa(oB lPO.\r:Ǫr&X~\r>q?ȁYQt~\~qɖ v!xreCǪ{Q}8v$X|vd]>js/bj0/iE؈c 0]ԄwQSZ}T~?9 t$6h˶z&]rvMkJ0/sj}] ݻu(&!+K,/z@uMCI钀J#|oa),"$kTǂ\MĽmc9L2g\q z穌EvEf#xʹNLq 2=pDN3۲*燝/%'rۃ惐)v#.,1)21W9kw%TcyR8UCH0A(47"+K"rL}cCdc܅dM=شFP;D#˲Qc3;ơhP ~s+{/Xe+S1[[E +XYu*mv>.DDS<;8'ŝY.НM++BP>fJQ|hԘ,F!k\6[ nïEOQ*&gG}f$haW&dbr} 8_nѰ<ѠbS/(e|΃2rH.םB cK zt: n*= ;Ǝ=G a4z&=^OTSC !+)׃ν$"㓔]`WOOB/f5FGe2/سTJ (Ǖ &`XcN3C V2(:Re3ϴfl}{ k fPl5:eH@m2|`_dLSHKm]xkd5Bb6j]WZA^,3T3G/ʁ3!΁  >\PRez}q[unTӺHְy+ /USjr69&".E`p\cOVĊn) >A0)A'x̒Z>h~&y_cQ %9PQt;9{]K^NdLQ=Y7gتfp v7. !_v5,N+* PVa#-l.C|۹@k׍yC +ɹ#7j@[~b< eOq^?J9[fguxӟTټE 9ߣd4?Mvy7<\mr+B吚֢-P7)1\IAut)*|va!+?2dko04! Ĩ14K-Rޏ|ktx@RhxU䘥4~BvMI]4j_$~'}殑O Xbr.Us j0]8{:L(k Zfi$T[%x Qh78 ǣlrp.LH]Dx}lsj3yIAXӂ:&6ۆZFY'^UUUH@m=_KJe5L$Ќ/rl<ՒvK+jj*;gmئr(JL=(ȇQ98ZeJzK:FmF˿>LQy }5,!)ꂒTӺ4 FkGXUB2a Ҁfޞ۩9k>sK:ׅovn7ﶺ%) @{4u7npdTy/~)LtQ8f cKFl mI: ֲ>HPRsѮ[훨o||q$Ѧc:^cux|(JƇ+쭩n)¦_<iiξsg)P;Tf cP>wNsalxqS0"0rS5*v۷6QlhiFI!ݯOj1 PvO()u<v&yo֝K!iǥC($fU]F8\+!Cf`fJX;Q]"ob6s(%7\.fgs>  %*t1X"bͨDձ,plirl&Aqɐx(f0Y?]Mk1drFLbLbhiZXZ%q\jL.T1UGak|-y1qI 2o4iUGd|A< ?{d] 5VZ*W9vS qfMޢ'osVJmViF=!q@7/"U2O.WſoۺCn\)ގ͑~qgʬ0ۮl,1;@0/ڿT:'Nnutڨ FNy԰EtTMr|U80Ueuz >yKD\7ttcZ9U"tA]T"Yz7ſSx(S K!:cGZ(VV[6mj.r$),p8Vc˧4ؿ  my_ALVib9iF0$ ~ra%4H'^7Dbڭھ/-Uq">ۋ%8lODEZ'gYI.o|ė`sY/UBOX$ Gc=i>ADлx /AH J}Y lVJ@$IFቐ՗L#M;µ*H\>M+&_o$ύUn V89HmwRUj.q},=dH6q9s3bR+ij01q'ь&~KFNXLi>!ġy~]j+֑.)Y{rBuoNEn_#E.igb;~;zm  [8Vq8qs&˽X~ bpCT-} Y# }m(q`"P'X>h@5(GCԻ݋ d$Q3~m?b.L.8>% <",k9`]!QeseQlӸ8JWP@=Ma)d`Lڼ&c^#7xSUV)SG^swo|3N;u[5m3UD'Wvx댠׃9DM:Reo 5bUd,-ԡg!20:Q<`h:D+N %Ht2AZ-H́TN5# dpt'1r W9}|&zXtoV  ےϋ^ÜDfZ8TMkJ6y7.aYb?NDh1k\t0qTplj[`RQ`Md)q.-n8g{5#W}.zfeGp'nLׂ6rZC<#OW5b/5Em2qTo8Y&[{y]] $_W V NTM1nu =ڂ˰"6Яt8WtQa*dbmG):.MeP< HI{h&ƻ]|L#0=< 1%a+...\3W{mDLo#LAa%I!])bH* eN>%7P +zgc bah*OA:'Mu\|B' mm/PP.p0T#\K^X"}v` X$`Asȯ&\>2*;s@"ҘW(I* Dfx~%MEI2ёlҭ[k?yCow!BFfW@]g3ѓ]{ uD׊r35"?R7W֠S? Zour@-Nj' %mIyW{9ztPկh{(!A:qҭ1@w=9Z~YVk,ak#T߯[dc2nij ĊS&>,,/=H*aA0L9!TMA@v͙tDcoQ{7"54\"+rt*ڠ?HbhpmfyxWR ô!*䩟Ī@,V[aW/M57/T_)F-9]Ck=r͂Vңک'')DDsrAބ5qr8 oG4|怰eF%[\FD:(j>5=?';YIQu\Z)8AH--r+o@63pSKHv%tHg:Mĺ݄ulcTL\k60ξ{wUnal,7׍,#5qG s[+e) ̷VG{.AΜ8lzCs||kf&؅@6 [%F>&fPZΠ"\Y9k漍8ov ՓGaW$޹esܑSyCnmO>FLmPdYg5Y⶯*F2vץ2HErl$Y{GKT-)t>0J02\ X̬\:O>7C{ۓ%WH_#M\Lj)`޸݈| k4ET}6̨CC$ @Y('v24:ʿ`]mȩz2YdS^9z0} @Ұݪ {o2|TR#gq6[npd)%s^Ŭ5۫R\~W%^8Mo|;\wyN^| =: zyWyV *fZ) +h ˸dC]^HG>TIcU:p [R$x) 5W3Xk5=tEq> q1)oGJ 3SL'ʈM$eU~\Y(9}k߼'(S}]vƴOFIX\ul4" !l=lN1{}_6tǿbx<)3jgw`WԸ ,j4AӘW1.͠}@r^a _*qA]R݅_& þ>C]6^0~ @a;Q(l3덬 1mm:X+d̒bd ϗ|Ԣ'ȎֲkU_J߉eRXf/nRñ1"7}N "GT6Bt곔0T-~\M<Q̠w lwem,lLM|XJU_Ad{7#ZUȗ/#RN>wi+DLz%1kG%o,.*o:/x"8 }LRΝ|C'kn!0TգPHV, jy9X5[pS3o_\øK#r-w)# E?xt͋^~]ZۙKΣjZ@?1y87١!hMӴLTnuggۇZ ƴ0܉(iTbNVYNAW'#,w4[mm^] Xf܁ ~8NG#QBzc^3LsVO_.1u}!4+T5n^h %];&I.\OLS/7.hKgjfakyVt<1 |*CpzgQa RV~㇀(mup=%D%6rx󀵤8x5SFKNwhn|J@cMnl? 8 GQLF/ɟ(j{ҥsqX|vBlDMirپ !~ Oh;E'SMM9-C Ut.rHy{⑝i4'OX熳hvg soUMhl  yoshi 'v6 Cw\o, TDHČ} ^Qst6#~B+eRp8+O: 񗿨ψ3z\g-`*vAr,[f]5TNHʡnn1oxfגT@ ǿ-K^CYȎpV=Q(ՠCt%AS:MkdΞ$ZQϒ[9,7UmG5 l?~bs^}DFA;%aQ>5gy4M= ;REpTO=jW^Α)SٓާQl8d}&!}hBIa):V!c4*&(&-Ԋ\Io`E`wGE6bAPc +E)М (n.wv7nǥ4{`4 L<827i<5lȣHNݵ(HU9j|_o=]>?Ddu 7ZדZr ̐|xk=⳹+yp )-|gf:Vytx4(O8+[gw')DT pmMm|uS 5}Hd)y !-;Gn-\>R\r`Oo#ps|-ab6Th&z$0uV'm@-&XnhM4]1$[HY LNTۢHZMhE % r{=_%uBX?mJ1=i=%,z _Z0-Vf!qJ;,'Q(nڢ>"R Ur8&$cFPFOd*y[Xuxi`"꺄R"+b]+]&eaqpNP 6' k.ۥ=y/#kX5{q1\2UT#J+K0f0|e2uA=TJxqzA볬xJ?>7"nf zl`85! |Gu$ K#hat]!l 2CGWI9tӊ1+%,ļ6*`f+Sl˖̼E&ٲZIo j7˲0 Qh\ѿM^hdmbT>2yOcWFl7&Esʙ8^am'@*J {+waUlP_4,XVlN7&4RNFq>e "d]w6IMq܋!zW}cǨ(`܀l,j4՞[KE2(NB*$sQ{b&{]}kJd=CWNlNilu@O9cڄ 373h~l'}l+qAmUpdE4 b(3UCR60H% ;7Fx\^\fɬ gˏ)gv[A[u{od5ኂi:cg?|>I$hnnioK^/=7 )N>uzum2ٿU,*y謗Jf,fnpXÕء畖FeM g9[w/~lS&iAa6]~G@~Hd6,dX*?%!d5oayM #assEF&U*˿aS{AApU H~>h=5&J%7;;ĕK JPHfp֘^ GkRWdJakdp>tq[7vq-13_yb (吥~J <ڕ$*nȯ|hmlV1ɱc<і(wQQ@5P> h*s?dO *rߠG6x@~S 6B<87p>@8" h-oZRm\{4gkZǧ 1k]Vk>4eG@y1gz\,G>kLH/=y $Uǹ;4E xJs=M_p4 &ÏS4T 4E#U0c|hqC<)_gD9R} &R%hw ^ Yr9/SsxnEvB$}mp :"WݹH۽Od!VAt"Y6R(NJ˿ 5,Utu2_kfNop(X1[Y"J26{b4,ĢYU;ra3[g (&xSN6+p7*ӄ|-@pR^Q/?9cfDM| ~bZzVA Zf`]HXt9kù&o >\rq\*kNre9?9YEf=`{BpLloH]֙:qs<6MG ;p|s \)}Ǫ) 1~;>i#,CiH"sPlHΩlz6IMyFw>3ߖךY C +p:ΌViOV_$٫yܯPYh܀ j`zQX^ ̺`y-|\ĤJۧS"PmZ \Oa Z݌0䝣FNDKP1^v4dՌ c{ #.,q \GgAZڂ{\银Cu2oZbOb~hIn?l} oWдdފki ɭ&滖o'R}iux^u펂ྻ*I*CfQ1:Ћh=Bi4 +,D#Stzq.lH]-2 ]o˓BԽr3p?]tU*~O^]Ijo ym-*y=#o0["KgX'yh򿚝Ӗ@ft)"s;6JCמ 8j.6Db!ݙo|1m8Dkދ6=OzZ<ɮ]4ʡT9Ni?xwwvv(2]$|Ng!NYĘ.DM^=b ƄO;9$h Ƭ6.=` L嘉7!َ//0b4)0a[+O EUDu ȰRiŧ9B*iQ+A/7T ?r:5bھ{/Rv6ھgvf,q)_ڌ­ R3 kiS4}%Owk@h|!D' #Gb4fxٖk/Hь_?ec$ouK]̧@{@xOȸnJSu9u+ V  Bj9v:c8}=-Aet螌[g&da∐hbu.Y-Yݣ6ebYEoFޒ_'MƱ&ғ84H:AaȽPiʯpnMn m#$ +hV9S#/W_gՑ aj dyWf}GU3o|԰'Ixy#7! A9+d6G{fqO4x$•[35I߉4,5ƶ|TL8JT"F.nL T=D# Q|J6;IRcG׭%"z;`Wo~ֵF\-ȧ|/}.-t97juO'!hʊ7bGz2t`b#\z z[EUδ~{VM XI*ݯTd-nicX $U@R=d<(>I4e*9~< uF>,1\@!$LɬJ(^z]Yb;ڪ~He\= if*=.l?'RZE_7_XPEzf6Zu6A(>)rqcϕDKB7l IX4 9m70*몐Md+ģ2`=1NjBm hxlVdui. ?ߕd~QuUk 6"}r%=U [<2=j\.8N\e9vEe .)QfRϷy˪u[>nuwօ7RԚAJ5j?ny@PŲ.DN!?6JUޡb9^!NTq8DM:ʡN]󶨩ā_*Df2N8*?0ξU/a<лD]!FF XmB`F۳B5<_`wgz8kouA2Sk{XPi~*\`@_6ʕ}\]uѱD1Ҁݐ85rGओRd!)!&N] BuSiCn@_[͌gLj)7f6I PܠJ-j.&_n /7GfjkS{Ӽ4tLuCE֡D QL_I?O^D $G];dya^􅡧`+ nU$P3DL=NB^)t?*ٓ N1|ŬCX'T `ӭezv5USa"8%n@j_*,B"ؾ"^wJ%4KcIg-J(%0L\hlQ<=T GDU.P"rۨvϡ5c ˾h\E-R"|Z99;39< Dvj4WZʨ], )JCj~Br # γ41X䆼8%|Aiݎ5Ez3nM ;GXwE.R̺[&(Un '^VF+F,Z^h6c-DIƟF]#6b=ΖM.R)"[%/Am.{@PS'.aHҞ?CӲ "D* |hw+D1Y3 z&LڏmBpԩ.ӖUSNh[m+/ؕHpбEái}ߧؘ!Gw@6o3_Td| N9NO/&kzYXWk0n@6AR㒺 &0*p[b.Z9ysgQ%=Gf\.r==f#ҠS?הFi4QFd^s{ d7Յ?yU8;]+޻M%y6XΝr;`| Z{yBN0D1=cz)/.n51SC #?_ *5tZhmϙ\$团:;2`=N6`Z* ;JgDJ>f4Q"5[qbR><Hp7 }Ktmix^3Wfo2(oRX5%ZY:s [,~wđ^7 ^oRQ#6Z}IdCqф$F [F/m=Py;ӏ2cq!G[PHzYTIۄl%.?OJyYA JƓ"Z]pD7ҿ#6ƒe g:?vЅܳ ̐e}  MH̝N_&̷2oFU'R8eṻ=5θgn6mՐ~5efО{1[I3\z]U#; Ӝi,x3#M[2gA o}D9?U^R/:Mqsk uOJ=*=H[`Sxm[b>#c;aII WoK'n3ӶjvS sz ] ;M4YN3;ްݿx2\adFyIϧϰ>Î-*y ww.WEÅWlEz#kLo\MyPyS XQaL/6X4WvgL@mިD7W}M뻊-]܏eVӼx%`)_* U% u4&ݫ)IW 1% _}W}))@5WVGY h<73cNLhe6N⸿al2[ E@Z,Dѽw~9 x}B "bH DCLPL۫tv3 ;-AfijX5syͩ\1dZfH+YKTP'[KP{@ \`g_nf׌KnӺRU V.!\1En/ZI(s1raq_k*=@XF3pv%z?Ci=(}7 at#V :.c3it02-ٲ)NMIDJ@lM@`MJ}0dy(g1!!W(x hDXD\4@.F!?YB@{ IG~ghT3tc;p!fshz3»гJLj*׀u3g9lYQq=9d`N;n(q,"b)'nM[kR`S1;-d#QyPy v?②̯DLQOCh8"($)]e-iTMm&{}9MI0 \TmF֕ @XCj(!umgL']j:}Kjzܦ@+௓J<ъz:Zs h_nt^}J y+r1!K!!<[%d053&C[ 4Ol/8Eüi\z؄uOpp>*mB mUs#vim2@ Ê]۾>l}X\ hY?hVNd8gtaI2 k'e9TeJ?$"O/ =R"r)j2>0^ڕ q$,Ƿ(1%X6Jxcɣ._dcUJd:\P ܷlF : iD+%-~ۦIrN94x)Ԭd }JcUrIeaWRYzX7IF0a)rH&ER߼/ܙqS3(I)aHP~y­}x κG7i}6bzwн̤1u[e-!nk z`dNӓvT jAP)CG&舊cRk9 12~RήQHɼ6*Q6d Q-e/K5a"m} QFC9[(""?7vá9Y<< ]{H/+EϦm^!RZbFH7O@$Ϛx=T xwM Z|bBh0٤Ԭm$0G1LF/`#=`!dp vIJ qL<ROKi4XE*4BhVbS!:'yѶݿ e-}w;ןAs mqY=AV&1[{de f}ēx5]cŒHYJ;A(DX̴ j,tڽQzx>q9{c㧅n Ilr~p1?9)&ωĭOFnځL QIhTK4m TrߌY[>WPN1s%=;t¶ ,L4 9C0:Fep F!%ڱ)tuWc^(i0SJ`Lh~2o+$Ua[bdC^R0m=I]6n-xN/*W;nCfrOFSSĿw~̫dS-T+BkצuHCd*aM l# -,=$`=0nVb'r$/:rLB*H 5H95#p:O"V 6h%\Sa{Φ 5]U7FHk0!~6 A}KMm,]i(YCtJ`5)$L8b?aUZ!Զh s1p=l.[ZwICεI="@2WRlv+WIB揠b +LRa؀ԃ#oEo kw 9PW)kU3Dqzu[AJO!!pk .YOZ2HˮN+Q=[CUĖ|g,2]8( AUץ< V;MK8B=6ĸ‰ )l!j/`g5/9T pfц2d5/h9."vm6a˜*C J\Bg>G+Q;wFɋavLTC(Y]h8rNT"'Hi=:MD?6KB}M$xtzZ1pն`c;v@4x$uؙ őXt9 qN*4ђ'3<8ZVw8oXH$VN=,C|F/%]()H s'b ;4m̎l&m]Ŕm=tA%p.+4u~sN; S~i)1;+D121Dvu2,&ySșcX K5 a6~)*2s+ 4OƔ+(*ro M)4p hZ)4M{A|s&\T[6&nJW)N$aZea qh4p;&'C%?x=un]#,ʥP_BA"pL~K jQESreѿ{S:(-cŠOTj9m㕞BR9A- J*ALk.Z6?/Q%S4E)0,X.Y֢Ý)զeN6k N_<̉ڞe ߞlkY1}5ƎYhY=_<mGXݼ[(eT`b}O()3/#Ed yK Q @dLяb7 [+Kk汷 LMwy__#t E:Ɉ) ! #n%n><-?_zϭNNenjw6Ǘv^QW+$Ryt8L~h!ጳ v :J s=Eh.5jkiǟx`{h;/[87[2* ^|#g=J,̊7}y \-jɏAbt[4s7[^7ëKk<3):N幜fٸUW`?Wmoaoѣ>WY\9KPMs$:R=z?я/답qCCqw<ȑTx}r{E0D9VgGK!}p; rUGˑxUq6uѲ,"D;uv*%D ˷TtǥߤG0O;?;흷lᷗl;XIF+C,0WfsTW+dxP~2.'W8K5Tfŭ|G&^nُ{vU~cj#QI 8n 1>ڙ@>h&/5W "orwP,d$C)ʙvk$+ 7Ak\/viQE@h:*9­EunJ7/vo3)ѬS: p ]ov&wpe CA==';XS ֪#W4"zΖ5Gm|E+}e4[LzE Wٱ+zzFF+^1F32tݽꆓYUvC33N'WK?\ 2S_!FL΂9?Yo4aID,ҢVHH=IR Gs}(O5yzHkP LpԺ% {WP~u5rcQ4}iB+tH*)2RŪS#}Gfm913sO9_Qs/l2wԃ >.SsBLp;wLf?G&8JzeB/cQ`kWBle9]:4F(29 }5'S͔8鰧>z,˙$s9DpUb P*:p JK/zS{Q`fn"c nuy@:0C]Q>\ UqI yN\9}݉ǎyXi&|2Wĵw?Oe9Wa'G' ee68+fn$U|aŠLUst m\W^Ǔퟛ;Jx#_uLxt'$e h: kJB /@pcSe`&yVh&* jU?@ȖHT,&kMpkSXvT)C7F&,KeB?p|*\]LZ )wP).`(!KUU#AvNdm$א!`5V25סᐄ>A']awĺw: p\~~WQ9FmoF|,RSYs geV$ ]Fnm]Ъ"sbgMKwVðAJem9Z}N $\$]%4YYVA [ߍ}oһs*v[`&~[u ;BnRUEaRgA"r5˒qswQe1g fT%j'G=v%m70B1X^ z},}8Nи[aQs$w0[z~ ͜[b5O !Nh;1e0K#^ϕ}Z%e`e0l+їM3-z6H#sUyZ?9.pL6py2|)s`N&Z 61"ŐF7WgU|E|ev#Cmɻ nNz:(9@'(H޽FC-pۍ;y+X,}7I˒lsŻ2MheQZ.{V[qZn~y;И-}'_%ԁغ@>-XlI<*眸 9Dk4ӈD4RrC|H\;I:KQ` *P9 S|ؠ+'.C'yN 7!;-w\r/3knpgA50]NS]o,⓽Jկz(Xt$}ɮEFx`7+!*O?$ęƻ4RW_dOCuGq*g? >3@{LnV1+JW}v,°p?I՞iS TR '9sc3^vi3+q0<+!jdXnoWRrx ,&աѧPYA$.ҮSBv,Vm.k4̹hSV"0P)R!z(vrC"[`wm/xjqR X2 bB&U &0>3KHjr/ CVK3lu)7iyivuR!b\LUa \Ǡx.5 Z.\1D/L} 7F?GƈCz% ^}n]t5MtK3VI}9nb6*po9Kgo>}y?3t|o rIN> 8.gY>ID*toBgɞuc'g4_Kk,F redپx͔>!Eyn4_MH%GFglҕWJrPk/n!Twa"PcV_szG7l2wa[ x@|,)/(76ȴ6Nؽ'3[Sgk:חWYMeFO{7BF' oUVE9]e,N qY<`vn W#Q\6k,؉ӊG'Ԉz_I=H-c!w}ljdu#BOQLXnsKva+5$|T"{OLsR(<8 p%ߝK.vx]O7P".X),u I/Ec&]ifUȮ;3g6spa{D8K\@ZU; _$;g\"VF̏,iWW|q뮫pU#]brzmaxv@r}4>zA"F=1\ ?.Q'SLl*S@8.Q+ @M_L4@U#ו ]&ֆ4a{_TU8? #ǎ$w++6js,7ErK4h YX _;Cm*~`wYW?Kk(~: V_J69RW:)xYSj=l T?H@lWti&%#gc\B0qmZ$?'?Ci"`7jQcv`>嘒y.8SvT_*'T?S8jNU`E)"f$ aH ڛ'< l)7<k[ ~&*$'@ȎAk!hϋ"}&%-܊]ai )&|k^AK_^TWgRIο'NH1j7[r x@M(w$8{h%F|tcq#ƥ7aNW RLܪ$ÔS1zcf!@ tk6],j` {x+lKz +`ˣ3P# 浯ٺ w}a)~L4<(Ժwf#eP6z3[_1G=mɂh۱N.)4cJts`KG [{Z W@mUpp"7JV&¬}pNm)% ]UW0-Go|VHn*M~ƍܼB[TT%q^P<#@c)*VYB=ǩji@ts~u?OQvPX7Nn 7Z/|̫ӅIiIk$QM"_xgQ#gsB2yTy*5W_V?AgIPGBW)@@+r4 DBNW ~\20GLމ1r&j]jUy>*qFOxgIdeJrLq"fDF wH"C^7?wi/mMH,\6jƏ}ݫP0Ys2 +H\&nP阄}}Ւjؘ9窆|@ An`=n$zZ.,x=wRLUYlSq`N{fz1ؾRQD0(|e?*$8RDGLH9J{1Dj\$?N"BThk/%1E  YrazƟl6`Rꪔx)|Ɓ^ "\~,f^tlCS G1xpkG̎e{.÷_x )jIiAnM[v !uar|xG29Sz&DH|`ԅV8zUvИ0$r%%i( f#]1~uNg~ٯ[&~o!TK]g">&4}JJǹfBjjCKn4 VkiLbIB=8ԜsֽYCuV@yGlGOsF >rM;dnÁ-MRٻ퉉0=ŭ_!݇b['טȖ@g̱#cqroRh&ԟ=ؚ:#Te3)bZ g^<>cKvzGa3 \;DB<ɬ;R PksI"b'斗8d°D:kVCTi߫U7GHc Pvç m"W<#L5Ԑ %h_&4_SK8q@Rt"f)@}1Fpd^{!WSgni2=ˇ8Jp̖WNvt `^!1&hȔS1lχ[ VلlX`"G@Ⱥ2eǨ!tꕆս}?!Z@mz@=}KUPeLЋ;AȈnJ_E5Su_͎Q6]ộd6 4B0מ+u6^ɽ[#v"lG ?]&JΦŸG W1{{2aoE>gN'¶Ɍ_fM{/?b [ח :d3m2eJG$H 8,eNONuI9b3oڳ-u^%Z)-L{YWݹ^"NAHQ--0eP%/Nn M.T:X\Ū*+"\,"daP4 ڻ~Am&IB~!i!NЎ"A{l%.9J+Jm.g jٌ= M:gμ {zegw_~<Y_gj:1q]vI#~O+Rp-:ˣufaJQR8 "VA,#*uf%!9yfQPtyP߭Q2O[3A*+՛ԔUCva(&5Oo,` PgcaC9&;I1F3vUj p!#Fƅ:'ñQXLO}vgNO'/oc4 N"1;yzX ݃to͌JMeLZ &&E+Z841:leuҚLfnK \&*Vb-4,[HӱYlat ?S.l!&!`8V mӮl`Q!7;%ջ `L)* ŘլIXۯ5Z3?T*u%IZ5V^b5h_Kg+ap ah.%<{(jrF1PC4ܬJ3|s:H/Ԗ2 :Z}m޻<eRo (t㰕zI2O*w*Hw5 PсcV׊JmMd.ӝveK.&,EXgeC~CdTćQ+E$ܼ"rL*PG_^o>76q9JQ8p!)y@@*9XY ,OA4c>V]\Qx7n(a~wզC3)wKTy}INuj]hIϔcؽj 4Y IBs,0@sG@CVwrFzKw\`V)_G;ĬI0~j.3حkP5\QR\!3ـMWV8pջ~H@z@uYYCR:Ԁik8WۤH<$cRGɡ!= 'jF&6$Lߒ*}Hg;0h S8NMNRX^*,1w E=w.M]:hܷ3zny)\/HP! 1:Jp$<"-9aѻZ|ijtVľzm/l8~-²bw)!;!q,[*$hhhrX2}dET⋙_;ϰVW*8X' DRiBV͖NQh$ ƫW}4\˭ %Epd=Vh:/fG7*J K8d{SY<}˝l=3w + /\F Bzoo*km^:,p ҟ+HʐhЊe=%e_ȏjO uQ[q)FJJ zewEU$]/'u?J<. C#3hƊය\3%hB9:$uKX E-;c"Pm[0ʍ:_Kf0Gn$5#uS.0sy$[Z]ipܻYUy#Y8Z`]aW'ÇkRngAO+ D7V#,EMW&6䃗c@}i-)lﳠxvl1ݥbG=VQI C:K.(qU탗uZ^ԮaCqY[aJh*=a+MzwYJ12hW)mbDilB ^dcIZ2GLkcQu)taG' Kf*>uOP·JAx0U' Z,31ODMXiEN ^ 5"%1.n?hczWPgʑJanSYO=tD;|'u& \ClEZP}ya0`rB=F=$au3{kQ.F'E,Aa~^$RrSWVqQ1w.t,JA!OyWU hbfZ䝃 6<[J:FNI4@jg*E5,fr\#*? 3-2DzP*ܭ,k 9ےm-gq:{4x(Նf:k-p}WY/-o² P /SO|-E ma~*w'3^R.~"I= |MՃJ`^0#ŽZa.x}P&ӹO9GfyU38z˞$l:*GzbQ{&@szʥKZw/)bMDjWa41"t x%ޟU{}b20_Ϧ, nOJ8sJr qe`Syz\eUɖX|ao=7c:Pt#{Gad@MHY.Tee}Ē=8Np4TX7bCp3KshHszϠչM8JМҢ>xQ>#6 L|02fkF{{IԮ+vFG<f]#I'/Af RYHA \d$I?߁`N$jOfr6z&.vfJ\sӷ6= %aT;TM_?DKI̞[;y=4,D>u:B5y\OX j':.hpqqaHvBxP}"$ᮞd oSI|~H3lz憛.FʪG{zxCqY4aHPn 2F?Yx7{m ^c_Qmrs!4oנO xF? )wKY>"`^3Cb|'R;+TnAqtߕZ$Z bJt0`{΅goj<> `g5Z05;Cӵe2-,!N3踡D"w~1ǗGFr>GSh۪:mS8ei0p.~c(!#Y= c}Wmr4Q픹ƊYz;Z=m7Hͩ'vª0ʿ"V O R W2d&;oyx cw(W2Zp!pwk 8r2TO蝇!#™~ _-[ ?y;2Oe#TBH㕣:4EaihX/vĖwJ)Y U {rV8ǪK&ʙe 4!M4%opHjk"597Wr T3=Co(\UK xKi#_{z]kj9*U7(LD/7H>@"У?W kP9˲]Z4 ^_vG̪3}l4+;], X̲fn7|2_J{G o^rw(ٜ-fރ'/=o0Eg[W Ex ņ\E5mgG,O|9M9ŦG>@et3勭yO<=?gfx=ׄvڤꒇ E1<7ȤڶKN!?U1]A#[t4<>P{"lC,O6ʱZN Pu"D%p;$<5< P"s~`139v$igm콊0-^z%RgF<Tf9b:`-IdL)6o77j< gqಋ5T$ tVӒ0 PMpܫ쑮{2LJ.; klolҰh@ɐ@4ӣB`A6fk`3cagbNKaʨ4zڏ "0@DyFڑzߵFe?]s` :~& pn#gvw:UZu ͳZ8zv:P/F\RJL@4zT]Ca$`z)2hخ'# :?CZQ f怦xN"e%O;wjz-ź &c*(XO`'[Ѫ亁)Ky]ȔW_:&+ CA/)nǸ;֤ ^"dߥ)4noZxk㺫wBM r( ڤ΁`zp/~S7J~mbSZҀ\:؉5 zD_)d?(}FiKQ@!umN)9܈Y~Α"|&R$kLYM!R(|bƥpZh m U%:1}v-@cȡD)"FףĀS!PnrR0Ƃ Țۯb-3+5;;F11֛YATdSP+2} ΟIYj8TsfNUhI#7e6&csE ptb0Յ7PJIO*tQsT*r5 2p50ңRyh B|I̿h7?R**oZ9[ii(РÂ-:]#K;#;dV53`6 XwrtYvZgwIuRL~7|Fh+6rfc YSwY4^ ʥJ,v(WL,e|~ac aHK y m2ξR2zPL:N7a@(4^̫d\C + V kq_,&G al2<gw 7;Nc;M ߰C٩,!\x U8$+|Y%< !e8,HgxO)j w1U{|;&OKyHbXH۞W:r!aSu|õjbs} trOv 0o@XNVckQ}2pdVPD X'=k%?UR~|&1h cD, iQBDԍ!FdS:Wo7CV}hLԿ2[UKjTU-1$ t61VX@xPi%mw;u&ܞjՉO .ݫg N[NPϹBTڡ\Kp#~%"sl~.`zMv%0,lM*&'lf-PV7lPJ M$W-97G+5'~-&QJx|WL'LQ*X[#tƉ Cagͽ; erQh5nA4U{6*֤?;1ʆtYREj]:S UC-1|졯`$}_v85T]N ~(PL ~ӑ>aff >gT:w8k*mڔEꦴcP%ka+- h|K& )@P[3E +H>䒠zbMa 2KtuOA a36b {SY yPh룲x"ג3lodK5;7Hvq)oPs{h~r؝cv0FtYyTYj:LO";h|mA}^S ̾o ռvF`#P*>wQ LW \ oO&hF3a.y">vo@n՗)EPln#gXa2(vOxLqHDo^%2WE},Q9`>l-5!XmmEQc'Ⱥ*=Q ըھwĂ=c4<<+؃q\v}V2 x\9*a`ri'u/C\Ox}<_R?<=*ִ&cZ2?2(* Lk8↵ԝN܀!W ZYRVBA\7|ś롘|twNuͧdŚc#ݥ1i쇐 FBzyv%EdK hsa hIe)>\Ro])M(1Bɳ` L 1u|W^hPU 39xte; e\fohy*'kh[l@x3-]b'BA{zN` N97Sn,Zop VˮR?pvB>,&J$IYG[1Ϻr`5fio633_P%S*ŏ.]h*<6䩓+2,MaI13PW^vz9y"tG gdG yl 8`}&T*6>gln5"k]~Oyk3mQ"G ^^hvu-~9TB)BR>6 9+Lqz!vj)X20Pˬhr\@G#:+G!89Z'>eiҟZƣwgw?u:7q2e_u.kOhr?VN'fJcEaaA[%Ihm84]~O؎VH!Qn69d{죊zQbao+^wI\ˑsrfF+9pˀ3#a<49/Wf43,ǜ Wlvo0.NpQFDɧ&´nIk= L_|8|p BJ0 ?,VN}z˵0_,m'[ #N'\} )%)ͩQ'3`rBDb0^%5aNo1! 0,oA&<MWʯ'%|FeM PݐA7گVs;7KOEysb-D@m< xy I J^&zěT~(r\Au+ZI>*Qv*(| Um*dR3UBI ͼoњ"ħŃAD"[ą[+jN) əǭڛٶ-z.f=26foe@O>Sv<f2&pӷG+ vcNtLyYu6>6572|S0 b8% Ģ_HgǎG5_!|Iƛ\^UV8 XK [e—oΰVhPS6P?r6֖ٵMג?lfyn<%1˪k's*]WJR]A(M+?(+sE2c)j'F%7 ѩY*r;CjCA5nJMߘ.] ֝})8YBoJ.p#,f-HsǍl&rOZ7 tB`QF4()FFPhʹ&FYf aE[q#RkHMF|#U*;V_b`ʯȜi-.X'nQqz,dJ!f#sp۔x8et0,pl2&UېёQޛ>.0$Q&|6߻6QHeF*mDz оgO,ŷ:4BbhUJXRsgjvnhT.$JYm`{D@/uR?G-s,?Y+ f_([DFѰ-.qp~(}z5C ƹ,jCFB@;J0-7oz@˜+i%̡LMg.?}A(8mru\ĦivwlR͢^ߣ=ElZ++(*ѳY2ެх>ϑ`@fQn3{k )C?wOt` f=#I+ZYZlMpݹe֭F!bô0T'i; 7CYJ,TkyzZnF"&؁bH- %xPSāa\#c! >Fxy9` epgJB&\]j #\ {|)ؑp 'Bvy2t2r WPxښqVCͤ^lBx,fntNb"(VYiGz)âd'. <1Naz:.̖5k,]◧Cց7٪z%Y1}R"ߕ}Vb-0hm~`s?#>Y< L;08Tm"3 0\RlWʖt5g9))mg|[U}Ujv<1BUb_Ԃ+Ùs>|>;O<=EɋU*|S2Wp,A/'۵Dw*9bR Ig|-HaK2JT&" !,L/l=PNdh+KRv Gr?21Ȁ;|޻6)Çkyvi$d}ǼxO@-eVry67unѦ".vTɥ(W6lx]/*?_+$Xi R'k e;r6B)l[z1 dl|E6+/uȭ%`T^iKA SŴ ?,`MʾQ5%IڑIthȆړZA J vmlYPb(ܦyI&,Fw!ZM=#Gt)D56ۈr<>ȆSg4'(5>ZT4Jfe H]9"K܅ M$a+!I M'^O*yhU}uFM?q.nR?fu{oTQ@4j\GmTjl[sVoOҳ~tVE/N'8E(Qxv >UΓ7EC8ˬuԲZYGd9XOR+'x*^bϞf:7b"g?Erlb&xv@h{9ήn@dN\y]oxOE^qR *~RWRnt4s0EUh\X̨ v8c__VlƱȲt :vYx$~}oY6d&W*D;~D)Ѓ}OI(Jq s,:B!N3 %rʟqzR!D6.,~gRw/[d+c,Ie,QoWe@zv?$ ai@,W"&1(Y+ͥy7n!vw2bkpeN%i$tv$wmK,&DI 'xy[ÑQmG2 +]D\]7@DԃE.(jTJY9Bc^-]9ԳҞxfuoʋ̎0U9XʠaSi$CZsKe{R-\+" FU`Ve Y/^.0K|ԉ`{t[Y&ciuŹX ͖wIRB]=_2|OtI6ch.).۰H-,]q˛ePajf4q/N ir3h[!!<}-v"4qPi$S4s%~(Wgw8lO}r﮹2{`v]a@~.uSNU r."S`s^ +xCFt{A)vqQtc j`DAC~TelU(&g AV4 pG BsͣlU@ i Vw]IqȦy6tGR9d7`*k('&/sZ%9IoЌ}l>آ=P O7Mk#Xjg <D;#b D.ky`Tyv`R)8ivfD';wEPQ^}DRsvg~$Iꄐm\\ PK%n`ݻfF"&q*ѪܣBN.z*Gg3Bq$h Hj <@2 4G^t?P@Ug0RB %J3"kEi\(_"*oR{KSC3 *ڊ_SHUƳCy@6P QK:y(xX?g;(q|$_D U4V(A1Dz<4/m 8& jyH%rM?abɊAWd%._4{S=1p@]y{ȎqᰁY$ր1NA.1m)w1FEmIVp<EpY}jbGRy:+7IV%f>{Oq*G84KU-Tԛ0&}'w2׬Klh_D?(LE)F`hBT2;ՑOK8aZ8+{ ı%Xe Qoob'%E&}<꓋p'pjhƄyZ4KUjoS`]\HFJ vYLnŻę| {m>"#YSFc`"řvR9ޠYEQ"eEJxE?GG<}ܕƱ[\vK(bF@Zy?wQO.ĭgE>1y~AˈuLcm,h-B;}K: rF_)>yͰ3KzLD즰RJXrry)r+ кUߣLx mԢVawK IqbPMa!XS'WW/mw?cX]D Ew0LNl㿄Mem)eEb{ck1 ܡ: ê gI|Ea9'_T^5=1&[rmQk'F&㲱sbiF[?=qVyN6:?|6l\c([ȋސ-_EzO*ZM_hHbG/ғ#>-U$+qaK\>k7jw9]d`#"7>| xy&Q A \RΛub@GĎ=5ߟ,,;VEv.r f`.Erϫoa J#1y1C7#EFf# cMdDqi,Z&iT_Ѣ+Aɦ|8X?nPYg`8Qu{-y3Mw>.K4-"@Ë[#?/n0r^U?D vu+s @l%p?1pjg8Aw/ {>oUCɱ0p=ޥXooٮ<N`rE7<$wτp: 4 0FZeY`rrC[gpيuMg=zU{T"j{zԟJצļzJ6};kůZirߏ;7awxj9԰FUH4VKMmW)O;\NgmIB ?5{U /dJJrh'95{@(? zXD"_n-^=e3}r\!N5K " YZ