bpftool-debuginfo-4.19.90-2408.5.0.0292.oe2003sp40>    fۦ ;G|`u` yW SN?KHsBvAKNJSj]6)<+9sAwl)cLѻ6ރ/8R|ٷ+1;Z̜Ͽ:o$K?Bd_< H›3>$c8f:?‡ 1 \z/9?d 4 Z  $* ?Qhnx     (Xh(8898:8F8GXHpIXY\]^bVdAeFfIlKthuvzqCbpftool-debuginfo4.19.902408.5.0.0292.oe2003sp4Debug information for package bpftoolThis package provides debug information for package bpftool. Debug information is useful when developing applications that use this package or when debugging this package.fbdc-64g.compass-ciGPLv2http://openeuler.orgDevelopment/Debughttp://www.kernel.org/linuxaarch64`8AAA$fڶfڶfֳfֳfֳfֳ2dfdea3c517159665873698c61ba0dcfb3c29971b67a091590f21f2097727a5e91cc2be5a12ffd942b94ea3dce99e08ab1483c25ff701e700e624fa2095cec3d174ceaed2a564eb5cfd0b2d31dff55e0cfc11e329be47383f9979b2739ba8ccarootrootrootrootrootrootrootrootrootrootrootrootkernel-4.19.90-2408.5.0.0292.oe2003sp4.src.rpmbpftool-debuginfobpftool-debuginfo(aarch-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.15.1fͿfą@fJf@ff@f`f&@ff|fqvfifh<@f`S@fWfM@fDf:f(@ff-f @ee@eZeeeBeeee@eeee@exK@epb@ek@ee@ee@eae_>e]@e[J@e[J@eWUeWUeTeSa@eSa@eReReN@eLeJ&chenyi - 4.19.90-2408.5.0.0292chenyi - 4.19.90-2408.4.0.0291chenyi - 4.19.90-2408.3.0.0290chenyi - 4.19.90-2408.2.0.0289chenyi - 4.19.90-2408.1.0.0288chenyi - 4.19.90-2407.5.0.0287chenyi - 4.19.90-2407.4.0.0286chenyi - 4.19.90-2407.3.0.0285chenyi - 4.19.90-2407.1.0.0284chenyi - 4.19.90-2406.4.0.0283chenyi - 4.19.90-2406.3.0.0282chenyi - 4.19.90-2406.2.0.0281chenyi - 4.19.90-2406.1.0.0280chenyi - 4.19.90-2406.1.0.0279chenyi - 4.19.90-2405.5.0.0278hongrongxuan - 4.19.90-2405.4.0.0277chenyi - 4.19.90-2405.3.0.0276chenyi - 4.19.90-2405.1.0.0275chenyi - 4.19.90-2404.3.0.0274chenyi - 4.19.90-2404.2.0.0273hongrongxuan - 4.19.90-2404.1.0.0272hongrongxuan - 4.19.90-2403.4.0.0271hongrongxuan - 4.19.90-2403.3.0.0270hongrongxuan - 4.19.90-2403.2.0.0269hongrongxuan - 4.19.90-2403.1.0.0268hongrongxuan - 4.19.90-2402.6.0.0267hongrongxuan - 4.19.90-2402.5.0.0266yangjunshuo - 4.19.90-2402.4.0.0265hongrongxuan - 4.19.90-2402.4.0.0264hongrongxuan - 4.19.90-2402.1.0.0263hongrongxuan - 4.19.90-2401.5.0.0262YunYi Yang - 4.19.90-2401.4.0.0261YunYi Yang - 4.19.90-2401.3.0.0260YunYi Yang - 4.19.90-2401.1.0.0259YunYi Yang - 4.19.90-2312.6.0.0258YunYi Yang - 4.19.90-2312.4.0.0257YunYi Yang - 4.19.90-2312.3.0.0256YunYi Yang - 4.19.90-2312.1.0.0255Zhang Mingqian - 4.19.90-2311.5.0.0254Yuan Zhang - 4.19.90-2311.5.0.0253Li Xiaodong - 4.19.90-2311.5.0.0252Zhou Kaiqi - 4.19.90-2311.4.0.0251Keyi Zhong - 4.19.90-2311.4.0.0250Luo Shengwei - 4.19.90-2311.4.0.0249YunYi Yang - 4.19.90-2311.3.0.0248Yu Liao - 4.19.90-2311.3.0.0247Zhou Kaiqi - 4.19.90-2311.3.0.0246Li Xiaodong - 4.19.90-2311.3.0.0245Luo Shengwei - 4.19.90-2311.3.0.0244YunYi Yang - 4.19.90-2311.2.0.0243Li Xiaodong - 4.19.90-2311.2.0.0242mingqian218472 - 4.19.90-2311.1.0.0241Yu Liao - 4.19.90-2311.1.0.0240hongrongxuan - 4.19.90-2311.1.0.0239Kunkun Jiang - 4.19.90-2311.1.0.0238YaQiang Chen - 4.19.90-2311.1.0.0237- !11130 iio: adc: men_z188_adc: Fix a resource leak in an error handling path - !11132 KVM: x86/mmu: make apf token non-zero to fix bug - !11192 af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - !11150 protect the fetch of ->fd[fd - !11117 net/iucv: fix use after free in iucv_sock_close() - !11122 fix CVE-2023-52893 - !11089 f2fs: fix to don't dirty inode for readonly filesystem - !11078 nilfs2: fix general protection fault in nilfs_btree_insert() - !11047 filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 - protect the fetch of ->fd[fd] in do_dup2() from mispredictions - !11095 exec: Fix ToCToU between perm check and set-uid/gid usage - KVM: x86/mmu: make apf token non-zero to fix bug - iio: adc: men_z188_adc: Fix a resource leak in an error handling path - !11121 scsi: qla2xxx: During vport delete send async logout explicitly - !11113 mISDN: Fix a use after free in hfcmulti_tx() - gsmi: fix null-deref in gsmi_get_variable - scsi: qla2xxx: During vport delete send async logout explicitly - net/iucv: fix use after free in iucv_sock_close() - !11074 wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - mISDN: Fix a use after free in hfcmulti_tx() - !11072 drm/virtio: Fix GEM handle creation UAF - exec: Fix ToCToU between perm check and set-uid/gid usage - !11086 thermal: int340x: fix memory leak in int3400_notify() - f2fs: fix to don't dirty inode for readonly filesystem - thermal: int340x: fix memory leak in int3400_notify() - !11061 Fix CVE-2023-52898 - nilfs2: fix general protection fault in nilfs_btree_insert() - !11068 Fix CVE-2024-39501 - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - drm/virtio: Fix GEM handle creation UAF - !11060 parisc: Fix data TLB miss in sba_unmap_sg - !11065 i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - !11062 ocfs2: add bounds checking to ocfs2_check_dir_entry() - driver core: Fix uevent_show() vs driver detach race - selftests: forwarding: devlink_lib: Wait for udev events after reloading - drivers: core: synchronize really_probe() and dev_uevent() - !10992 media: venus: fix use after free in vdec_close - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - ocfs2: add bounds checking to ocfs2_check_dir_entry() - !11001 tipc: Return non-zero value from tipc_udp_addr2str() on error - !10987 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - xhci: Fix null pointer dereference when host dies - xhci: avoid race between disable slot command and host runtime suspend - parisc: Fix data TLB miss in sba_unmap_sg - filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 - !11037 s390/sclp: Fix sclp_init() cleanup on failure - !11021 net: usb: qmi_wwan: fix memory leak for not ip packets - s390/sclp: Fix sclp_init() cleanup on failure - net: usb: qmi_wwan: fix memory leak for not ip packets - !10966 perf: Optimize perf_pmu_migrate_context() - tipc: Return non-zero value from tipc_udp_addr2str() on error - media: venus: fix use after free in vdec_close - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - perf: Optimize perf_pmu_migrate_context()- !10978 CVE-2024-42304 - !10946 drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - !10957 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - ext4: make sure the first directory block is not a hole - ext4: check dot and dotdot of dx_root before making dir indexed - !10954 leds: trigger: Unregister sysfs attributes before calling deactivate() - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - !10930 libceph: fix race between delayed_work() and ceph_monc_stop() - leds: trigger: Unregister sysfs attributes before calling deactivate() - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - libceph: fix race between delayed_work() and ceph_monc_stop() - !10841 ALSA: gus: fix null pointer dereference on pointer block - !10913 sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime - !10915 usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime - !10894 v2 netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - !10892 crypto: aead,cipher - zeroize key buffer after use - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - crypto: aead,cipher - zeroize key buffer after use - ALSA: gus: fix null pointer dereference on pointer block- !10895 drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - !10897 v2 orangefs: fix out-of-bounds fsid access - !10858 v4 powerpc/pseries: Whitelist dtl slub object for copying to userspace - orangefs: fix out-of-bounds fsid access - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - !10891 CVE-2024-42105 - nilfs2: fix inode number range checks - !10871 USB: serial: mos7840: fix crash on resume - !10643 USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - USB: serial: mos7840: fix crash on resume - !10865 Revert "NFS: Don't interrupt file writeout due to fatal errors" - !10825 Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - Revert "NFS: Don't interrupt file writeout due to fatal errors" - !10730 filelock: Remove locks reliably when fcntl/close race is detected - powerpc/pseries: Whitelist dtl slub object for copying to userspace - !10802 media: dvb-frontends: tda10048: Fix integer overflow - !10703 x86: stop playing stack games in profile_pc() - !10838 bnx2x: Fix multiple UBSAN array-index-out-of-bounds - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - !10806 tcp_metrics: validate source addr length - !10803 s390/pkey: Wipe sensitive data on failure - !10786 CVE-2024-41034 - tcp_metrics: validate source addr length - s390/pkey: Wipe sensitive data on failure - !10700 ethernet: Fix error handling in xemaclite_of_probe - !10777 Fix CVE-2024-42160 - media: dvb-frontends: tda10048: Fix integer overflow - !10532 ftruncate: pass a signed offset - !10623 ata: libata-core: Fix double free on error - !10664 v2 ASoC: fsl-asoc-card: set priv->pdev before using it - nilfs2: fix kernel bug on rename operation of broken directory - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: Remove check for PageError - f2fs: Add inline to f2fs_build_fault_attr() stub - f2fs: check validation of fault attrs in f2fs_build_fault_attr() - filelock: Remove locks reliably when fcntl/close race is detected - x86: stop playing stack games in profile_pc() - ethernet: Fix error handling in xemaclite_of_probe - ASoC: fsl-asoc-card: set priv->pdev before using it - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset- !10629 v2 hfsplus: fix uninit-value in copy_name - !10723 net/iucv: Avoid explicit cpumask var allocation on stack - !10646 net: dsa: mv88e6xxx: Correct check for empty list - !10609 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - !10608 CVE-2024-41044 - net/iucv: Avoid explicit cpumask var allocation on stack - !10693 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - !10571 ila: block BH in ila_output() - !10593 fix CVE-2024-41046 - !10521 xfs: add bounds checking to xlog_recover_process_data - !10597 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - !10562 nilfs2: add missing check for inode numbers on directory entries - !10706 jfs: don't walk off the end of ealist - !10699 drm/amd/display: Skip finding free audio for unknown engine_id - !10672 inet_diag: Initialize pad field in struct inet_diag_req_v2 - !10684 ocfs2: fix DIO failure due to insufficient transaction credits - !10565 gpio: davinci: Validate the obtained number of IRQs - !10389 pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - jfs: don't walk off the end of ealist - drm/amd/display: Skip finding free audio for unknown engine_id - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - ocfs2: fix DIO failure due to insufficient transaction credits - inet_diag: Initialize pad field in struct inet_diag_req_v2 - !10641 usb: atm: cxacru: fix endpoint checking in cxacru_bind() - !10601 IB/core: Implement a limit on UMAD receive List - net: dsa: mv88e6xxx: Correct check for empty list - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - hfsplus: fix uninit-value in copy_name - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - ppp: reject claimed-as-LCP but actually malformed packets - ppp: ensure minimum packet size in ppp_write() - IB/core: Implement a limit on UMAD receive List - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - net: ethernet: lantiq_etop: fix double free in detach - net: lantiq_etop: add blank line after declaration - !10320 thermal: Fix NULL pointer dereferences in of_thermal_ functions - !10529 Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - ila: block BH in ila_output() - gpio: davinci: Validate the obtained number of IRQs - nilfs2: add missing check for inode numbers on directory entries - !10471 ALSA: emux: improve patch ioctl data validation - !10479 jffs2: Fix potential illegal address access in jffs2_free_inode - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - xfs: add bounds checking to xlog_recover_process_data - !10386 filelock: Fix fcntl/close race recovery compat path - !10485 fix CVE-2024-42086 - !10492 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc - !10400 Fix CVE-2024-41069 - !10270 HID: core: remove unnecessary WARN_ON() in implement() - !10472 v2 xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - !10359 v2 PCI/ROM: Fix PCI ROM header check bug - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc - iio: chemical: bme680: Fix overflows in compensate() functions - jffs2: Fix potential illegal address access in jffs2_free_inode - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - ALSA: emux: improve patch ioctl data validation - !10341 net/sched: initialize noop_qdisc owner - ASoC: topology: Fix route memory corruption - ASoC: topology: Fix references to freed memory - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - filelock: Fix fcntl/close race recovery compat path - PCI/ROM: Fix PCI ROM header check bug - net/sched: initialize noop_qdisc owner - thermal: Fix NULL pointer dereferences in of_thermal_ functions - HID: core: remove unnecessary WARN_ON() in implement()- !10327 NFC: port100: fix use-after-free in port100_send_complete - !10325 kobject: Fix global-out-of-bounds in kobject_action_type() - !10337 drm/radeon: fix UBSAN warning in kv_dpm.c - !10368 v2 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error - !10227 MIPS: smp: fill in sibling and core maps earlier - drm/radeon: fix UBSAN warning in kv_dpm.c - !10324 BMA: Fix iBMA bug and change - NFC: port100: fix use-after-free in port100_send_complete - kobject: Fix global-out-of-bounds in kobject_action_type() - !10315 jfs: xattr: fix buffer overflow for invalid xattr - BMA/cdev_veth_drv: Fix softlockup problem - BMA/kbox_drv: Change the version number. - BMA/veth_drv: Fix soft interrupt loops and change the version number - BMA/cdev_drv: Change the version number. - BMA/edma_drv: Fix DMA reset problem and change the version number. - !10173 netrom: Fix a memory leak in nr_heartbeat_expiry() - !10249 fbdev: savage: Handle err return when savagefb_check_var failed - !10306 mISDN: Fix memory leak in dsp_pipeline_build() - jfs: xattr: fix buffer overflow for invalid xattr - !10198 scsi: qedi: Fix crash while reading debugfs attribute - !10310 batman-adv: bypass empty buckets in batadv_purge_orig_ref() - !10307 wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - !10296 Backport dvb-usb bugfix - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - mISDN: Fix memory leak in dsp_pipeline_build() - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() - USB: move snd_usb_pipe_sanity_check into the USB core - fbdev: savage: Handle err return when savagefb_check_var failed - MIPS: smp: fill in sibling and core maps earlier - scsi: qedi: Fix crash while reading debugfs attribute - netrom: Fix a memory leak in nr_heartbeat_expiry()- !10125 nvme-rdma: fix possible use-after-free in transport error_recovery work - !10112 ftrace: Fix use-after-free for dynamic ftrace_ops - !10276 net: ieee802154: at86rf230: Stop leaking skb's - net: ieee802154: at86rf230: Stop leaking skb's - !9917 powerpc/pseries: Enforce hcall result buffer validity and size - !10240 CVE-2024-41007 - !10251 sctp: fix kernel-infoleak for SCTP sockets - !10241 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - sctp: fix kernel-infoleak for SCTP sockets - !10229 staging: gdm724x: fix use after free in gdm_lte_rx() - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - tcp: avoid too many retransmit packets - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - net: tcp: fix unexcepted socket die when snd_wnd is 0 - tcp: refactor tcp_retransmit_timer() - tcp: fix incorrect undo caused by DSACK of TLP retransmit - staging: gdm724x: fix use after free in gdm_lte_rx() - !10137 NFSD: Fix ia_size underflow - !10183 v3 ima: Fix use-after-free on a dentry's dname.name - !10121 usb: f_fs: Fix use-after-free for epfile - !10016 drm/exynos/vidi: fix memory leak in .get_modes() - !10211 fix CVE-2022-48865 - !10206 gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - tipc: fix kernel panic when enabling bearer - tipc: fix NULL pointer dereference in tipc_disc_rcv() - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - !10186 vsock: remove vsock from connected table when connect is interrupted by a signal - !10190 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - vsock: remove vsock from connected table when connect is interrupted by a signal - !10141 vt_ioctl: fix array_index_nospec in vt_setactivate - ima: Fix use-after-free on a dentry's dname.name - !10152 wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - !10026 liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - !10147 CVE-2022-48836 - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - Input: aiptek - properly check endpoint type - Input: aiptek - fix endpoint sanity check - vt_ioctl: fix array_index_nospec in vt_setactivate - !10095 CVE-2024-40968 - !10130 wifi: iwlwifi: mvm: don't read past the mfuart notifcation - NFSD: Fix ia_size underflow - !10123 CVE-2022-48838 - !10122 wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - !10081 drm/amdgpu: fix UBSAN warning in kv_dpm.c - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - !10092 usb: host: ohci-tmio: check return value after calling platform_get_resource() - nvme-rdma: fix possible use-after-free in transport error_recovery work - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - usb: f_fs: Fix use-after-free for epfile - !10094 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - ftrace: Fix use-after-free for dynamic ftrace_ops - !10054 vmci: prevent speculation leaks by sanitizing event in event_deliver() - MIPS: Octeon: Add PCIe link status check - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - usb: host: ohci-tmio: check return value after calling platform_get_resource() - !10033 ipv6: prevent possible NULL dereference in rt6_probe() - drm/amdgpu: fix UBSAN warning in kv_dpm.c - !9996 netpoll: Fix race condition in netpoll_owner_active - !9948 ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - vmci: prevent speculation leaks by sanitizing event in event_deliver() - ipv6: prevent possible NULL dereference in rt6_probe() - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/exynos/vidi: fix memory leak in .get_modes() - netpoll: Fix race condition in netpoll_owner_active - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - powerpc/pseries: Enforce hcall result buffer validity and size- !9925 ocfs2: fix races between hole punching and AIO+DIO - !9874 crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - !9830 mmc: davinci: Don't strip remove function when driver is builtin - !9870 cifs: Fix deadlock in cifs_writepages during reconnect - !9895 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() - ocfs2: fix races between hole punching and AIO+DIO - !9891 ipv6: sr: fix memleak in seg6_hmac_init_algo - !9856 btrfs: fix memory ordering between normal and ordered work functions - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() - ipv6: sr: fix memleak in seg6_hmac_init_algo - !9492 netlabel: fix out-of-bounds memory accesses - !9868 usb: musb: tusb6010: check return value after calling platform_get_resource() - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - cifs: Fix deadlock in cifs_writepages during reconnect - usb: musb: tusb6010: check return value after calling platform_get_resource() - !9858 khugepaged: fix null-pointer dereference due to race - !9819 kdb: Fix buffer overflow during tab-complete - khugepaged: fix null-pointer dereference due to race - btrfs: fix memory ordering between normal and ordered work functions - !9842 net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove - mmc: davinci: Don't strip remove function when driver is builtin - kdb: Fix buffer overflow during tab-complete - netlabel: fix out-of-bounds memory accesses- !9803 v2 x86/ftrace: Disable lockdep check when execute ftrace_int3_handler() - x86/ftrace: Disable lockdep check when execute ftrace_int3_handler() - !9797 sch_cake: do not call cake_destroy() from cake_init() - sch_cake: do not call cake_destroy() from cake_init() - !9786 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() - !9777 CVE-2024-23848 - media: cec: cec-api: add locking in cec_release() - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - !9765 i40e: Fix queues reservation for XDP - !9760 CVE-2024-26816 - !9754 net: openvswitch: fix overwriting ct original tuple for ICMPv6 - !9367 v2 net: qcom/emac: fix UAF in emac_remove - !9512 drm: vc4: Fix possible null pointer dereference - !9755 wifi: ar5523: enable proper endpoint verification - i40e: Fix queues reservation for XDP - !9744 Fix CVE-2024-36949 - !9741 scsi: qedf: Ensure the copied buf is NUL terminated - !9727 net: amd-xgbe: Fix skb data length underflow - x86/boot: Ignore relocations in .notes sections in walk_relocs() too - x86, relocs: Ignore relocations in .notes section - !9743 USB: core: Fix hang in usb_kill_urb by adding memory barriers - wifi: ar5523: enable proper endpoint verification - net: openvswitch: fix overwriting ct original tuple for ICMPv6 - !9674 ax25: Fix reference count leak issue of net_device - !9729 seg6: fix the iif in the IPv6 socket control block - !9725 v2 net: Fix CVE-2022-48757 - !9737 net/9p: fix uninit-value in p9_client_rpc() - amd/amdkfd: sync all devices to wait all processes being evicted - drm/amdkfd: Rework kfd_locked handling - USB: core: Fix hang in usb_kill_urb by adding memory barriers - scsi: qedf: Ensure the copied buf is NUL terminated - net/9p: fix uninit-value in p9_client_rpc() - !9710 CVE-2022-48738 - !9568 media: mxl111sf: change mutex_init() location - !9570 net: ieee802154: ca8210: Stop leaking skb's - seg6: fix the iif in the IPv6 socket control block - !9700 v2 crypto: bcm - Fix pointer arithmetic - !9684 greybus: lights: check return of get_channel_from_mode - net: amd-xgbe: Fix skb data length underflow - !9666 ftrace: Fix rcu warn in ftrace_location() - net: fix kabi breakage in struct packet_type - net: fix information leakage in /proc/net/ptype - !9724 Fix CVE-2024-35915 - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - nfc: nci: Fix uninit-value in nci_rx_work - nfc: nci: Fix kcov check in nci_rx_work() - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet - !9658 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak - !9698 Fix CVE-2021-47270 - !9699 dma-buf/sw-sync: don't enable IRQ from sync_print_obj() - !9550 scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - !9707 nilfs2: fix use-after-free of timer for log writer thread - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - nilfs2: fix use-after-free of timer for log writer thread - !9655 nfc: fix segfault in nfc_genl_dump_devices_done - !9654 mac80211: validate extended element ID is present - !9653 ecryptfs: Fix buffer size for tag 66 packet - !9652 ALSA: timer: Set lower bound of start tick time - !9697 v3 Fix CVE-2024-38567 - !9633 CVE-2024-38582 - !9692 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - crypto: bcm - Fix pointer arithmetic - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - usb: fix various gadgets null ptr deref on 10gbps cabling. - wifi: carl9170: add a proper sanity check for endpoints - USB: core: Add routines for endpoint checks in old drivers - !9597 ASoC: max9759: fix underflow in speaker_gain_control_put() - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - !9626 fix uaf when proc_cpuset_show - !9660 nilfs2: fix potential kernel bug due to lack of writeback flag waiting - greybus: lights: check return of get_channel_from_mode - ax25: Fix reference count leak issue of net_device - ftrace: Fix rcu warn in ftrace_location() - !9553 CVE-2024-37356 - nilfs2: fix potential kernel bug due to lack of writeback flag waiting - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak - nfc: fix segfault in nfc_genl_dump_devices_done - mac80211: validate extended element ID is present - ecryptfs: Fix buffer size for tag 66 packet - ALSA: timer: Set lower bound of start tick time - nilfs2: fix potential hang in nilfs_detach_log_writer() - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - cgroup: fix uaf when proc_cpuset_show - ASoC: max9759: fix underflow in speaker_gain_control_put() - net: ieee802154: ca8210: Stop leaking skb's - media: mxl111sf: change mutex_init() location - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). - params: lift param_set_uint_minmax to common code - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - drm: vc4: Fix possible null pointer dereference - net: qcom/emac: fix UAF in emac_remove- !9629 stm class: Fix a double free in stm_register_device() - !9646 phonet: fix rtm_phonet_notify() skb allocation - !9628 m68k: Fix spinlock race in kernel thread creation - !9623 v2 net/nfc/rawsock.c: fix a permission check bug - !9648 backport two patches from 5.10 to fix some bugs for GuestOS - !9617 mac80211: track only QoS data frames for admission control - !9637 ipv6: sr: fix invalid unregister error path - !9607 enic: Validate length of nl attributes in enic_set_vf_port - !9606 drm/nouveau: fix off by one in BIOS boundary checking - !9605 scsi: bfa: Ensure the copied buf is NUL terminated - irqchip: gic-v3: Collection table support muti pages - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids - phonet: fix rtm_phonet_notify() skb allocation - ipv6: sr: fix invalid unregister error path - stm class: Fix a double free in stm_register_device() - m68k: Fix spinlock race in kernel thread creation - !9076 RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - net/nfc/rawsock.c: fix a permission check bug - mac80211: track only QoS data frames for admission control - enic: Validate length of nl attributes in enic_set_vf_port - drm/nouveau: fix off by one in BIOS boundary checking - !9600 CVE-2024-38597 - scsi: bfa: Ensure the copied buf is NUL terminated - !9409 drm/mediatek: Add 0 size check to mtk_drm_gem_obj - !9452 jffs2: prevent xattr node from overflowing the eraseblock - eth: sungem: remove .ndo_poll_controller to avoid deadlocks - net: fec: remove .ndo_poll_controller to avoid deadlocks - !8163 v2 mmc: sdio: fix possible resource leaks in some error paths - !9535 igbvf: fix double free in `igbvf_probe` - !9590 s390/ap: Fix crash in AP internal function modify_bitmap() - !9584 ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - !9537 virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - !9585 net/mlx5e: Avoid field-overflowing memcpy() - s390/ap: Fix crash in AP internal function modify_bitmap() - net/mlx5e: Avoid field-overflowing memcpy() - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - !9534 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev - !9419 mm/migrate: set swap entry values of THP tail pages properly. - !9560 net: systemport: Add global locking for descriptor lifecycle - !9526 media: lgdt3306a: Add a check against null-pointer-def - !9539 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - net: systemport: Add global locking for descriptor lifecycle - !9340 serial: max3100: Lock port->lock when calling uart_handle_cts_change() - !9330 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - !9382 serial: max3100: Update uart_driver_registered on driver removal - !9503 v2 watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger - !9464 quota: Fix rcu annotations of inode dquot pointers - !9530 v2 Backport LTS patches - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - !9435 fix CVE-2024-38621 - igbvf: fix double free in `igbvf_probe` - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev - !9381 vfio/pci: fix potential memory leak in vfio_intx_enable() - !9497 netrom: fix possible dead-lock in nr_rt_ioctl() - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map - media: lgdt3306a: Add a check against null-pointer-def - !9505 CVE-2024-38587 - !9473 um: Add winch to winch_handlers before registering winch IRQ - !9407 drm/arm/malidp: fix a possible null pointer dereference - !9400 Fix CVE-2024-31076 - speakup: Fix sizeof() vs ARRAY_SIZE() bug - !9439 CVE-2022-48715 - !9133 net: ethernet: fix potential use-after-free in ec_bhf_remove - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger - netrom: fix possible dead-lock in nr_rt_ioctl() - !9265 ring-buffer: Fix a race between readers and resize checks - !9390 NFS: Fix an off by one in root_nfs_cat() - um: Add winch to winch_handlers before registering winch IRQ - quota: Fix rcu annotations of inode dquot pointers - fs/quota: erase unused but set variable warning - jffs2: prevent xattr node from overflowing the eraseblock - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - media: stk1160: fix bounds checking in stk1160_copy_video() - mm/migrate: set swap entry values of THP tail pages properly. - drm/mediatek: Add 0 size check to mtk_drm_gem_obj - drm/arm/malidp: fix a possible null pointer dereference - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline - NFS: Fix an off by one in root_nfs_cat() - serial: max3100: Update uart_driver_registered on driver removal - vfio/pci: fix potential memory leak in vfio_intx_enable() - serial: max3100: Lock port->lock when calling uart_handle_cts_change() - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - ring-buffer: Fix a race between readers and resize checks - net: ethernet: fix potential use-after-free in ec_bhf_remove - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - mmc: sdio: fix possible resource leaks in some error paths- !9471 CVE-2021-47434 - xhci: Fix commad ring abort, write all 64 bits to CRCR register. - xhci: Fix command ring pointer corruption while aborting a command - !8935 wifi: nl80211: don't free NULL coalescing rule - !9444 CVE-2022-48737 - !8493 rpmsg: virtio: Free driver_override when rpmsg_remove() - !8473 scsi: mpt3sas: Fix kernel panic during drive powercycle test - ASoC: ops: Fix bounds check for _sx controls - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - !9322 drm/amd/display: Fix potential index out of bounds in color transformation function - !9366 macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" - !9392 drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - !9232 batman-adv: Avoid WARN_ON timing related checks - !9351 Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - !9393 net: lts v4.311 backport - !9286 mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - !9206 v2 sched: smart_grid: fix potential NULL pointer dereference - !9314 spi: Fix deadlock when adding SPI controllers on SPI buses - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - ipv6: fib6_rules: flush route cache when rule is changed - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - !8360 v2 loop: use lo->lo_disk for kobject_uevent - !9343 firmware: arm_scpi: Fix string overflow in SCPI genpd driver - !9326 af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" - !9285 of: module: add buffer overflow check in of_modalias() - !9316 CVE-2022-48755 - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - !9344 round lts patches - !8769 atl1c: Work around the DMA RX overflow issue - !9292 net: bridge: xmit: make sure we have at least eth header len bytes - net: bridge: fix corrupted ethernet header on multicast-to-unicast - net: bridge: fix multicast-to-unicast with fraglist GSO - net: mark racy access on sk->sk_rcvbuf - net l2tp: drop flow hash on forward - firmware: arm_scpi: Fix string overflow in SCPI genpd driver - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg - !9324 v2 Linux 4.19.312-313 LTS patches - vxlan: Fix regression when dropping packets due to invalid src addresses - udp: preserve the connected status if only UDP cmsg - vxlan: drop packets from invalid src-address - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int - drm/amd/display: Fix potential index out of bounds in color transformation function - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 - spi: fix kabi breakage in struct spi_controller - spi: Fix deadlock when adding SPI controllers on SPI buses - !9278 CVE-2021-47231 - !8783 v2 arm64 mpam fix patch - !9270 inet_diag: fix kernel-infoleak for UDP sockets - !9140 v2 CVE-2024-36971 - !8847 wl1251: Fix possible buffer overflow in wl1251_cmd_scan - !9260 v3 ftrace: Fix possible use-after-free issue in ftrace_location() - net: bridge: xmit: make sure we have at least eth header len bytes - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - of: module: add buffer overflow check in of_modalias() - !9061 iio: mma8452: Fix trigger reference couting - can: mcba_usb_start(): add missing urb->transfer_dma initialization - can: mcba_usb: fix memory leak in mcba_usb - inet_diag: fix kernel-infoleak for UDP sockets - ftrace: Fix possible use-after-free issue in ftrace_location() - !9227 kprobes: Fix possible use-after-free issue on kprobe registration - !9228 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() - !9225 can: sja1000: fix use after free in ems_pcmcia_add_card() - !8656 mm, slub: fix potential memoryleak in kmem_cache_open() - !8937 firewire: ohci: mask bus reset interrupts between ISR and bottom half - !8691 Fix page corruption caused by racy check in __free_pages - batman-adv: Avoid WARN_ON timing related checks - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() - kprobes: Fix possible use-after-free issue on kprobe registration - can: sja1000: fix use after free in ems_pcmcia_add_card() - !9179 CVE-2021-47232 - !9004 media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() - !8130 v2 CVE-2021-47493 - !9006 media: tc358743: register v4l2 async device only after successful setup - !9144 serial: 8250_exar: Don't remove GPIO device on suspend - sched: smart_grid: fix potential NULL pointer dereference - can: j1939: fix Use-after-Free, hold skb ref while in use - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() - can: j1939: transport: add j1939_session_skb_find_by_offset() function - !8800 ALSA: usb-audio: Stop parsing channels bits when all channels are found. - !8798 hid: cp2112: Fix duplicate workqueue initialization - !8799 usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - serial: 8250_exar: Don't remove GPIO device on suspend - net: fix kabi breakage in struct dst_ops - net: fix __dst_negative_advice() race - iio: mma8452: Fix trigger reference couting - media: tc358743: register v4l2 async device only after successful setup - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() - firewire: ohci: mask bus reset interrupts between ISR and bottom half - wifi: nl80211: don't free NULL coalescing rule - wl1251: Fix possible buffer overflow in wl1251_cmd_scan - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - hid: cp2112: Fix duplicate workqueue initialization - arm64/mpam: Fix softlockup when reading mondata - arm64/mpam: Fix wrong seconds to jiffies conversion - arm64/mpam: change allocation mode from GFP_KERNEL to GFP_NOWAIT - mpam/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup - mpam/resctrl: Clean up resctrl_group_rmdir_[ctrl/mon]() - mpam/resctrl: Clean up unused function parameter in mkdir path - mpam/resctrl: Fix a deadlock due to inaccurate reference - atl1c: Work around the DMA RX overflow issue - Fix page corruption caused by racy check in __free_pages - mm, slub: fix potential memoryleak in kmem_cache_open() - rpmsg: virtio: Free driver_override when rpmsg_remove() - scsi: mpt3sas: Fix kernel panic during drive powercycle test - loop: use lo->lo_disk for kobject_uevent - jbd2: export jbd2_journal_[grab|put]_journal_head - ocfs2: fix a deadlock when commit trans - ocfs2: fix race between searching chunks and release journal_head from buffer_head- !9086 v2 dhugetlb: use rcu lock to protect hpool - !8796 CVE-2023-52810 - !8699 wifi: cfg80211: check A-MSDU format more carefully - !9123 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - !9005 scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - !9113 IB/qib: Protect from buffer - !9119 PCI: aardvark: Fix kernel panic during PIO transfer - !9058 watchdog: Fix possible use-after-free by calling del_timer_sync() - !9053 soc: fsl: qbman: Use raw spinlock for cgr_lock - PCI: aardvark: Fix kernel panic during PIO transfer - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - PCI: aardvark: Don't rely on jiffies while holding spinlock - !9091 RDMA/cma: Fix rdma_resolve_route() memory leak - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - !9037 fix CVE-2021-47509 - RDMA/cma: Fix rdma_resolve_route() memory leak - dhugetlb: use rcu lock to protect hpool - !8291 Fix CVE-2023-52836 - !8574 net: ieee802154: fix null deref in parse dev addr - !9017 misc/libmasm/module: Fix two use after free in ibmasm_init_one - !9045 ALSA: seq: Fix race of snd_seq_timer_open() - !9046 net: rds: fix memory leak in rds_recvmsg - !8632 phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() - !8695 net: macb: fix use after free on rmmod - !4633 Add support for Hygon family 18h model 5h HD-Audio - !9057 CVE-2021-47261 - !8637 dyndbg: fix old BUG_ON in >control parser - !8698 net: batman-adv: fix error handling - !8715 net/sched: act_skbmod: prevent kernel-infoleak - !8775 llc: verify mac len before reading mac header - watchdog: Fix possible use-after-free by calling del_timer_sync() - IB/mlx5: Fix initializing CQ fragments buffer - soc: fsl: qbman: Use raw spinlock for cgr_lock - !9022 wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - !8786 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - !8704 usb: fix various gadget panics on 10gbps cabling - !9013 net: encx24j600: check error in devm_regmap_init_encx24j600 - net: rds: fix memory leak in rds_recvmsg - ALSA: seq: Fix race of snd_seq_timer_open() - !9036 IB/hfi1: Restore allocated resources on failed copyout - !4620 Some fixes for Hygon model 4h~6h processors - !4630 Add support for Hygon model 6h L3 PMU - ALSA: pcm: oss: Limit the period size to 16MB - ALSA: pcm: oss: Fix potential out-of-bounds shift - !8549 batman-adv: Avoid infinite loop trying to resize local TT - !8763 tipc: fix UAF in error path - IB/hfi1: Restore allocated resources on failed copyout - !8956 net: ti: fix UAF in tlan_remove_one - !8959 comedi: vmk80xx: fix bulk-buffer overflow - !8740 CVE-2024-36914 - !8824 igb: Fix use-after-free error during reset - !8987 bna: ensure the copied buf is NUL terminated - !9026 tty: n_gsm: fix possible out-of-bounds in gsm0_receive() - !8923 i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc - !8961 nfp: Fix memory leak in nfp_cpp_area_cache_add() - !8875 drm/vmwgfx: Fix invalid reads in fence signaled events - !8883 scsi: lpfc: Move NPIV's transport unregistration to after resource clean up - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - misc/libmasm/module: Fix two use after free in ibmasm_init_one - net: encx24j600: check error in devm_regmap_init_encx24j600 - !8998 i2c: acpi: fix resource leak in reconfiguration device addition - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - !8991 clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data - !8992 fix CVE-2024-36905 - i2c: acpi: fix resource leak in reconfiguration device addition - !8868 ipv6: prevent NULL dereference in ip6_output() - net: relax socket state check at accept time. - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - !8737 ubifs: Set page uptodate in the correct place - !8668 phonet/pep: fix racy skb_queue_empty() use - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data - bna: ensure the copied buf is NUL terminated - nfp: Fix memory leak in nfp_cpp_area_cache_add() - comedi: vmk80xx: fix bulk-buffer overflow - net: ti: fix UAF in tlan_remove_one - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up - drm/vmwgfx: Fix invalid reads in fence signaled events - ipv6: prevent NULL dereference in ip6_output() - igb: Fix use-after-free error during reset - fs/jfs: Add check for negative db_l2nbperpage - jfs: jfs_dmap: Validate db_l2nbperpage while mounting - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - llc: verify mac len before reading mac header - tipc: fix UAF in error path - drm/amd/display: Skip on writeback when it's not applicable - ubifs: Set page uptodate in the correct place - net/sched: act_skbmod: prevent kernel-infoleak - usb: fix various gadget panics on 10gbps cabling - wifi: cfg80211: check A-MSDU format more carefully - net: batman-adv: fix error handling - net: macb: fix use after free on rmmod - phonet/pep: fix racy skb_queue_empty() use - dyndbg: fix old BUG_ON in >control parser - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() - net: ieee802154: fix null deref in parse dev addr - batman-adv: Avoid infinite loop trying to resize local TT - locking/ww_mutex/test: Fix potential workqueue corruption - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h - ALSA: hda: Fix single byte write failure issue for Hygon - ALSA: hda: Add Hygon HD-Audio support - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h- !8895 net: fix out-of-bounds access in ops_init - !8694 clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data - !8858 PCI/PM: Drain runtime-idle callbacks before driver removal - !8626 fs/9p: only translate RWX permissions for plain 9P2000 - !8490 scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() - !8777 memory: fsl_ifc: fix leak of IO mapping on probe failure - !8806 media: zr364xx: fix memory leak in zr364xx_start_readpipe - !8664 mmc: mmc_spi: fix error handling in mmc_spi_probe() - !8865 staging: rtl8712: fix use-after-free in rtl8712_dl_fw - !8888 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - !8825 watchdog: Fix possible use-after-free in wdt_startup() - !8654 nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done - !8358 perf report: Fix memory leaks around perf_tip() - !8552 tipc: fix a possible memleak in tipc_buf_append - !8851 ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - net: fix out-of-bounds access in ops_init - !8802 CVE-2021-47294 - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - staging: rtl8712: fix use-after-free in rtl8712_dl_fw - PCI/PM: Drain runtime-idle callbacks before driver removal - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - !8628 erspan: make sure erspan_base_hdr is present in skb->head - !8716 CVE-2024-35910 - !8325 ocfs2: fix data corruption after conversion from inline format - !8729 tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - !8636 ipv6: Fix potential uninit-value access in __ip6_make_skb() - watchdog: Fix possible use-after-free in wdt_startup() - !8773 sched: remove WARN_ON on checking rq->tmp_alone_branch - media: zr364xx: fix memory leak in zr364xx_start_readpipe - !8678 can: pch_can: pch_can_rx_normal: fix use after free - netrom: Fix use-after-free of a listening socket. - netrom: Decrease sock refcount when sock timers expire - !8676 net: tulip: de4x5: fix the problem that the array 'lp->phy[8 - !8708 media: imon: fix access to invalid resource for the second interface - !8707 regmap: Fix possible double-free in regcache_rbtree_exit() - !8706 isdn: mISDN: Fix sleeping function called from invalid context - !8705 usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency - !8357 nilfs2: fix underflow in second superblock position calculations - !8681 rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - !8484 scsi: megaraid_sas: Fix resource leak in case of probe failure - memory: fsl_ifc: fix leak of IO mapping on probe failure - sched: remove WARN_ON on checking rq->tmp_alone_branch - !8620 CVE-2024-35896 - !8526 SUNRPC: Fix RPC client cleaned up the freed pipefs dentries - !8336 tcp: fix page frag corruption on page fault - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - !8521 isofs: Fix out of bound access for corrupted isofs image - !7786 powerpc/powernv: Add a null pointer check in opal_event_init() - !8568 gfs2: Fix use-after-free in gfs2_glock_shrink_scan - tcp: properly terminate timers for kernel sockets - mptcp: add sk_stop_timer_sync helper - !8478 arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY - !8366 net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() - !8544 CVE-2021-47358 - !8577 mmc: sdhci-msm: pervent access to suspended controller - !8579 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() - !8603 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() - media: imon: fix access to invalid resource for the second interface - regmap: Fix possible double-free in regcache_rbtree_exit() - isdn: mISDN: Fix sleeping function called from invalid context - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency - !8516 CVE-2021-47409 - !8465 drm/amd/display: Avoid NULL dereference of timing generator - !8500 pwm: Fix double shift bug - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - can: pch_can: pch_can_rx_normal: fix use after free - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound - !8402 i40e: Fix freeing of uninitialized misc IRQ vector - !8398 comedi: ni_usb6501: fix NULL-deref in command paths - mmc: mmc_spi: fix error handling in mmc_spi_probe() - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done - !8464 i2c: smbus: fix NULL function pointer dereference - !8434 iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove - !8411 platform/x86: wmi: Fix opening of char device - ipv6: Fix potential uninit-value access in __ip6_make_skb() - !8307 s390/dasd: protect device queue against concurrent access - !8444 CVE-2021-47511 - !8443 v2 ipack: ipoctal: fix module reference leak - !8611 smackfs: restrict bytes count in smk_set_cipso() - !8610 media: gspca: cpia1: shift-out-of-bounds in set_flicker - !8609 can: peak_pci: peak_pci_remove(): fix UAF - !8430 drm/sched: Avoid data corruptions - !8557 net: cdc_eem: fix tx fixup skb leak - !8365 efi/capsule-loader: fix incorrect allocation size - !8333 soc: qcom: llcc: Handle a second device without data corruption - erspan: make sure erspan_base_hdr is present in skb->head - fs/9p: only translate RWX permissions for plain 9P2000 - netfilter: complete validation of user input - netfilter: validate user input for expected length - smackfs: restrict bytes count in smk_set_cipso() - media: gspca: cpia1: shift-out-of-bounds in set_flicker - can: peak_pci: peak_pci_remove(): fix UAF - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() - mmc: sdhci-msm: pervent access to suspended controller - gfs2: Fix use-after-free in gfs2_glock_shrink_scan - net: cdc_eem: fix tx fixup skb leak - tipc: fix a possible memleak in tipc_buf_append - staging: greybus: uart: fix tty use after free - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries - isofs: Fix out of bound access for corrupted isofs image - usb: dwc2: Fix memory leak in dwc2_hcd_init - usb: dwc2: check return value after calling platform_get_resource() - pwm: Fix double shift bug - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() - scsi: megaraid_sas: Fix resource leak in case of probe failure - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY - drm/amd/display: Avoid NULL dereference of timing generator - i2c: smbus: fix NULL function pointer dereference - ALSA: pcm: oss: Fix negative period/buffer sizes - ALSA: pcm: oss: Fix a few more UBSAN fixes - ipack: ipoctal: fix module reference leak - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove - drm/sched: Avoid data corruptions - platform/x86: wmi: Fix opening of char device - i40e: Fix freeing of uninitialized misc IRQ vector - comedi: ni_usb6501: fix NULL-deref in command paths - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() - efi/capsule-loader: fix incorrect allocation size - perf report: Fix memory leaks around perf_tip() - nilfs2: fix underflow in second superblock position calculations - tcp: fix page frag corruption on page fault - soc: qcom: llcc: Handle a second device without data corruption - ocfs2: fix data corruption after conversion from inline format - s390/dasd: protect device queue against concurrent access - powerpc/powernv: Add a null pointer check in opal_event_init()- scsi: hisi_sas: Allocate DFX memory during dump trigger- !8437 comedi: dt9812: fix DMA buffers on stack - !8515 v2 *** CVE-2021-47356 *** - !8582 v2 bcache: avoid oversized read request in cache missing code path - !8522 smb: client: fix use-after-free bug in cifs_debug_data_proc_show() - !8499 udf: Fix NULL pointer dereference in udf_symlink function - !8498 Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout - !8570 net: hamradio: fix memory leak in mkiss_close - !8506 CVE-2024-36015 - !8508 memory: fsl_ifc: fix leak of private memory on probe failure - !8470 v2 CVE-2024-35808 - !8050 block: prevent division by zero in blk_rq_stat_sum() - !8469 watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() - !8482 v2 Fix hugetlb deadlock - bcache: avoid oversized read request in cache missing code path - !8327 wifi: mac80211: don't return unset power in ieee80211_get_tx_power() - !8316 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path - net: hamradio: fix memory leak in mkiss_close - !8310 jfs: fix two - !8507 tty: vcc: Add check for kstrdup() in vcc_probe() - !8441 pinctrl: core: delete incorrect free in pinctrl_enable() - !8414 backport for CVE-2023-52750 - !8449 drm/amd/pm: Update intermediate power state for SI - !8453 net: fix uninit-value in caif_seqpkt_sendmsg - !6800 block: fix overflow in blk_ioctl_discard() - !8068 CVE-2021-47427 - !8102 v2 sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl - !8413 NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - !8417 NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - !8403 can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - !8393 4.19: fix CVE-2024-35978 - !8349 perf hist: Fix memory leak of a perf_hpp_fmt - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq - mISDN: fix possible use-after-free in HFC_cleanup() - memory: fsl_ifc: fix leak of private memory on probe failure - tty: vcc: Add check for kstrdup() in vcc_probe() - !8296 atm: iphase: fix possible use-after-free in ia_module_exit() - !8297 v2 powerpc/mm: Fix lockup on kernel exec fault - !8405 tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - ppdev: Add an error check in register_device - ppdev: Remove usage of the deprecated ida_simple_xx() API - !8423 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - udf: Fix NULL pointer dereference in udf_symlink function - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout - !8354 CVE-2021-47277 - !8386 drm/nouveau/debugfs: fix file release memory leak - !8452 Fix CVE-2021-47438 - !8308 mac80211: fix use-after-free in CCMP/GCMP RX - !8341 net/mlx5: Properly link new fs rules into the tree - hugetlb: pass head page to remove_hugetlb_page() - hugetlbfs: fix hugetlbfs_statfs() locking - hugetlb: make free_huge_page irq safe - hugetlb: change free_pool_huge_page to remove_pool_huge_page - hugetlb: call update_and_free_page without hugetlb_lock - hugetlb: create remove_hugetlb_page() to separate functionality - Revert "hugetlb: make free_huge_page irq safe" - Revert "hugetlbfs: fix hugetlbfs_statfs() locking" - !8075 v2 HID: betop: fix slab-out-of-bounds Write in betop_probe - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen - md/dm-raid: don't call md_reap_sync_thread() directly - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() - !8191 HID: usbhid: free raw_report buffers in usbhid_stop - !8314 mcb: fix error handling in mcb_alloc_bus() - !7852 CVE-2021-47407 - net: fix uninit-value in caif_seqpkt_sendmsg - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path - !8276 usb: udc: remove warning when queue disabled ep - !8142 i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - !8410 iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() - drm/amd/pm: Update intermediate power state for SI - !8175 jfs: fix array-index-out-of-bounds in diAlloc - pinctrl: core: delete incorrect free in pinctrl_enable() - comedi: dt9812: fix DMA buffers on stack - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - !8292 netfilter: conntrack: serialize hash resizes and cleanups - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - !8348 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - !8324 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga - !8394 hugetlbfs: fix hugetlbfs_statfs() locking - !8188 v2 ACPI: video: check for error while searching for backlight device parent - hugetlbfs: fix hugetlbfs_statfs() locking - Bluetooth: Fix memory leak in hci_req_sync_complete() - !8303 ipvlan: add ipvlan_route_v6_outbound() helper - drm/nouveau/debugfs: fix file release memory leak - !8211 fix CVE-2024-35877 - !7964 v2 vt: fix unicode buffer corruption when deleting characters - !8160 v2 ipack: ipoctal: fix stack information leak - !8100 arch related major bugfix before 2023 - !8192 atm: nicstar: Fix possible use-after-free in nicstar_cleanup() - kvm: fix previous commit for 32-bit builds - kvm: avoid speculation-based attacks from out-of-range memslot accesses - !8181 v3 cpu/hotplug: Don't offline the last non-isolated CPU - perf hist: Fix memory leak of a perf_hpp_fmt - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() - !8205 fix hugetlb deadlock - !8061 *** CVE-2021-47475 *** - !8252 sysv: don't call sb_bread() with pointers_lock held - !8248 gfs2: ignore negated quota changes - !8206 RDMA: Verify port when creating flow rule - net/mlx5: Properly link new fs rules into the tree - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga - !8219 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING - !8223 CVE-2023-52804 - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path - mcb: fix error handling in mcb_alloc_bus() - jfs: fix array-index-out-of-bounds in dbFindLeaf - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev - mac80211: fix use-after-free in CCMP/GCMP RX - !8209 net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() - !8257 v5 can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds - ipvlan: add ipvlan_route_v6_outbound() helper - powerpc/mm: Fix lockup on kernel exec fault - atm: iphase: fix possible use-after-free in ia_module_exit() - netfilter: conntrack: serialize hash resizes and cleanups - !8062 CVE-2024-35789 - usb: udc: remove warning when queue disabled ep - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds - !7804 v2 selinux: avoid dereference of garbage after mount failure - sysv: don't call sb_bread() with pointers_lock held - !8186 ALSA: hda: Fix possible null-ptr-deref when assigning a stream - !8208 ocfs2: mount fails with buffer overflow in strlen - !8207 drm/msm: Fix null pointer dereference on pointer edp - gfs2: ignore negated quota changes - !7470 x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - !7699 CVE-2023-52669 - !7868 CVE-2024-35995 - fs/jfs: Add validity check for db_maxag and db_agpref - fs: jfs: fix shift-out-of-bounds in dbAllocAG - jfs: fix divide error in dbNextAG - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING - x86/mm/pat: fix VM_PAT handling in COW mappings - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() - ocfs2: mount fails with buffer overflow in strlen - drm/msm: Fix null pointer dereference on pointer edp - !8180 Fix CVE-2021-47495 - RDMA: Verify port when creating flow rule - hugetlb: make free_huge_page irq safe - mm/hugetlb: defer freeing of huge pages if in non-task context - !8146 pinctrl: single: fix potential NULL dereference - !8164 sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - !8131 scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() - HID: usbhid: free raw_report buffers in usbhid_stop - ACPI: video: check for error while searching for backlight device parent - ALSA: hda: Fix possible null-ptr-deref when assigning a stream - cpu/hotplug: Don't offline the last non-isolated CPU - usbnet: fix error return code in usbnet_probe() - usbnet: sanity check for maxpacket - jfs: fix array-index-out-of-bounds in diAlloc - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - ipack: ipoctal: fix stack information leak - pinctrl: single: fix potential NULL dereference - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl - x86/ioapic: Unbreak check_timer() - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() - HID: betop: fix slab-out-of-bounds Write in betop_probe - scsi: iscsi: Fix iscsi_task use after free - scsi: iscsi: Have abort handler get ref to conn - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN - comedi: vmk80xx: fix expression for tx buffer size - comedi: vmk80xx: fix transfer-buffer overflows - block: prevent division by zero in blk_rq_stat_sum() - vt: fix unicode buffer corruption when deleting characters - ACPI: CPPC: Fix access width used for PCC registers - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro - ACPI: CPPC: Use access_width over bit_width for system memory accesses - ACPI: CPPC: Fix up I/O port access in cpc_read() - ACPI: CPPC: Implement support for SystemIO registers - KVM: x86: Handle SRCU initialization failure during page track init - selinux: avoid dereference of garbage after mount failure - crypto: s390/aes - Fix buffer overread in CTR mode - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - block: fix overflow in blk_ioctl_discard()- !8066 drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 - !8038 CVE-2023-52817 - !8106 usb: dwc3: ep0: fix NULL pointer exception - !8059 soc: fsl: qbman: Always disable interrupts when taking cgr_lock - !8017 perf/core: Bail out early if the request AUX area is out of bound - !8064 isdn: mISDN: netjet: Fix crash in nj_probe: - !8049 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - usb: dwc3: ep0: fix NULL pointer exception - !8055 drm/client: Fully protect modes[ - !8000 v2 net/tls: Fix flipped sign in tls_err_abort() calls - !8032 netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 - isdn: mISDN: netjet: Fix crash in nj_probe: - !8056 scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() - !7999 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - soc: fsl: qbman: Always disable interrupts when taking cgr_lock - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() - drm/client: Fully protect modes[] with dev->mode_config.mutex - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !7817 netfilter: nft_flow_offload: reset dst in route object after setting up flow - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - !7965 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - !7951 sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE - perf/core: Bail out early if the request AUX area is out of bound - !7981 Fix CVE-2021-47455 - !7901 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances - !7700 scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7682 dm snapshot: fix lockup in dm_exception_table_exit - !7867 media: bttv: fix use after free error due to btv->timeout timer - !7421 x86/CPU/AMD: Update the Zenbleed microcode revisions - !7415 cpu/SMT: Make SMT control more robust against enumeration failures - !7451 v2 ip: Treat IPv4 segment's lowest address as unicast - !7393 v2 scsi: sr: Do not leak information in ioctl - !7971 fbmon: prevent division by zero in fb_videomode_from_videomode() - net/tls: Fix flipped sign in tls_err_abort() calls - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !7963 ipv6: Fix infinite recursion in fib6_dump_done(). - !7979 drm/radeon: fix a possible null pointer dereference - ptp: fix code indentation issues - ptp: Fix possible memory leak in ptp_clock_register() - drm/radeon: fix a possible null pointer dereference - fbmon: prevent division by zero in fb_videomode_from_videomode() - !7944 v2 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - ipv6: Fix infinite recursion in fib6_dump_done(). - sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - !7811 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() - !7892 CVE-2023-52868 - !7910 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs - !7851 netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances - thermal: core: prevent potential string overflow - !7854 net/mlx5e: fix a double-free in arfs_create_groups - !7794 v2 Fix CVE-2023-52656 - media: bttv: fix use after free error due to btv->timeout timer - !7840 netrom: Fix a data-race around sysctl_netrom_transport_timeout - net/mlx5e: fix a double-free in arfs_create_groups - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - !7770 drm/amd/pm: fix a double-free in si_dpm_init - netrom: Fix a data-race around sysctl_netrom_transport_timeout - !7589 irqchip/gic-v3-its: Prevent double free on error - !7713 CVE-2024-35936 - !7751 Fix CVE-2023-52698 - netfilter: nft_flow_offload: reset dst in route object after setting up flow - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket - !7742 netrom: Fix data-races around sysctl_net_busy_read - !7748 drm/radeon: possible buffer overflow - drm/amd/pm: fix a double-free in si_dpm_init - calipso: fix memory leak in netlbl_calipso_add_pass() - netlabel: remove unused parameter in netlbl_netlink_auditinfo() - net: netlabel: Fix kerneldoc warnings - drm/radeon: possible buffer overflow - netrom: Fix data-races around sysctl_net_busy_read - !7669 btrfs: send: handle path ref underflow in header iterate_inode_ref() - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - dm snapshot: fix lockup in dm_exception_table_exit - btrfs: send: handle path ref underflow in header iterate_inode_ref() - irqchip/gic-v3-its: Prevent double free on error - ip: Treat IPv4 segment's lowest address as unicast - x86/CPU/AMD: Update the Zenbleed microcode revisions - cpu/SMT: Make SMT control more robust against enumeration failures - scsi: sr: Do not leak information in ioctl- !7694 Bluetooth: af_bluetooth: Fix deadlock - !7701 ext4: fix corruption during on-line resize - !7676 sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE() - ext4: fix corruption during on-line resize - Bluetooth: af_bluetooth: Fix deadlock - !7573 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE() - !7547 btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7586 powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7477 firewire: nosy: ensure user_length is taken into account when fetching packet contents - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7483 Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7425 net: gtp: Fix Use-After-Free in gtp_dellink - !7434 net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: gtp: Fix Use-After-Free in gtp_dellink - !7228 s390/zcrypt: fix reference counting on zcrypt card objects - !7193 CVE-2024-26921 - !7096 fix CVE-2024-26865 - s390/zcrypt: fix reference counting on zcrypt card objects - sk_buff: Fix KABI break for the modification of struct sk_buff - inet: inet_defrag: prevent sk release while still in use - inet: frags: re-introduce skb coalescing for local delivery - net: Fix KABI break for introducing is_skb_wmem() - skb_expand_head() adjust skb->truesize incorrectly - skbuff: introduce skb_expand_head() - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()- !7194 s390/dasd: fix double module refcount decrement - !7059 nilfs2: prevent kernel bug at submit_bh_wbc() - !7163 v2 usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error - !7104 KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7203 NTB: fix possible name leak in ntb_register_device() - NTB: fix possible name leak in ntb_register_device() - s390/dasd: fix double module refcount decrement - !7158 v2 Squashfs: check the inode number is not the invalid value of zero - !7181 nfs: fix UAF in direct writes - !7091 nouveau: lock the client object tree. - !7120 v2 clk: zynq: Prevent null pointer dereference caused by kmalloc failure - !7089 nilfs2: fix failure to detect DAT corruption in btree and direct mappings - !7151 v2 scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !7033 Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - !7079 nvmet: fix a use-after-free - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error - !7140 media: usbtv: Remove useless locks in usbtv_video_free() - Squashfs: check the inode number is not the invalid value of zero - scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7137 v2 SUNRPC: fix a memleak in gss_import_v2_context - !7138 SUNRPC: fix some memleaks in gssx_dec_option_array - !7100 netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() - !7095 CVE-2024-27020 - media: usbtv: Remove useless locks in usbtv_video_free() - SUNRPC: fix some memleaks in gssx_dec_option_array - SUNRPC: fix a memleak in gss_import_v2_context - !7114 v2 backport patch for thp deferred list for 4.19 - !7034 fix CVE-2024-27001 for 4.19 - !7032 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays - !7115 drm/radeon: add a force flush to delay work when radeon - !7055 scsi: qla2xxx: Fix command flush on cable pull - !7109 fix CVE-2024-26960 - clk: zynq: Prevent null pointer dereference caused by kmalloc failure - !6260 packet: move from strlcpy with unused retval to strscpy - drm/radeon: add a force flush to delay work when radeon - THP: avoid lock when check whether THP is in deferred list - mm/mmu_gather: limit free batch count and add schedule point in tlb_batch_pages_flush - mm, thp: do not queue fully unmapped pages for deferred split - !7046 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - mm: swap: fix race between free_swap_and_cache() and swapoff() - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() - !7053 CVE-2024-27024 - KVM: Always flush async #PF workqueue when vCPU is being destroyed - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() - !6970 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - !6995 v2 net/mlx5e: Prevent deadlock while disabling aRFS - !7038 i40e: Fix NULL ptr dereference on VSI filter sync - !7037 media: v4l2-tpg: fix some memleaks in tpg_alloc - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() - netfilter: nf_tables: __nft_expr_type_get() selects specific family type - nouveau: lock the client object tree. - nilfs2: fix failure to detect DAT corruption in btree and direct mappings - !6992 media: edia: dvbdev: fix a use-after-free - nvmet: fix a use-after-free - !7045 v2 b43: fix CVE-2023-52644 - !7017 v2 net: ath9k: fix CVE-2024-26897 - nilfs2: prevent kernel bug at submit_bh_wbc() - !7016 v3 Fix CVE-2022-48693 - !7012 clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays - scsi: qla2xxx: Fix command flush on cable pull - net/rds: fix possible cp null dereference - net/rds: fix WARNING in rds_conn_connect_if_down - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !6991 mac802154: fix llsec key resources release in mac802154_llsec_key_del - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - b43: dma: Fix use true/false for bool type variable - !7005 media: ttpci: fix two memleaks in budget_av_attach - !7014 nilfs2: fix OOB in nilfs_set_de_type - !7001 fix CVE-2024-27010 - i40e: Fix NULL ptr dereference on VSI filter sync - media: v4l2-tpg: fix some memleaks in tpg_alloc - !6880 media: go7007: fix a memleak in go7007_load_encoder - comedi: vmk80xx: fix incomplete endpoint checking - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays - !6984 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6893 cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - !6958 netfilter: nf_tables: fix memleak in map from abort path - !6820 s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup - !6940 drm: nv04: Fix out of bounds access - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - nilfs2: fix OOB in nilfs_set_de_type - !6968 CVE-2024-26974 - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays - !6976 nfp: flower: handle acti_netdevs allocation failure - media: ttpci: fix two memleaks in budget_av_attach - !6944 USB: core: Fix deadlock in usb_deauthorize_interface() - net/sched: fix kabi change in struct Qdisc - net/sched: Fix mirred deadlock on device recursion - !6870 scsi: mpt3sas: Fix use-after-free warning - net/mlx5e: Prevent deadlock while disabling aRFS - media: edia: dvbdev: fix a use-after-free - !6966 speakup: Avoid crash on very long word - !6963 v2 CVE-2024-27000 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6942 v2 ima: fix deadlock when traversing "ima_default_rules". - !6951 v2 spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - nfp: flower: handle acti_netdevs allocation failure - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - crypto: qat - resolve race condition during AER recovery - crypto: qat - fix double free during reset - !6881 v4 CVE-2024-26846 - !6894 tun: limit printing rate when illegal packet received by tun dev - speakup: Avoid crash on very long word - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6883 Bluetooth: Fix TOCTOU in HCI debugfs implementation - !6856 media: dvb-frontends: avoid stack overflow warnings with clang - netfilter: nf_tables: fix memleak in map from abort path - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - !6839 CVE-2023-52650 - !6869 v2 media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - !6867 v2 nouveau: fix instmem race condition around ptr stores - USB: core: Fix deadlock in usb_deauthorize_interface() - !6852 serial/pmac_zilog: Remove flawed mitigation for rx irq flood - ima: fix deadlock when traversing "ima_default_rules". - drm: nv04: Fix out of bounds access - tun: limit printing rate when illegal packet received by tun dev - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - Bluetooth: Fix TOCTOU in HCI debugfs implementation - nvme-fc: do not wait in vain when unloading module - nvme-fc: remove err_work work item - media: go7007: fix a memleak in go7007_load_encoder - scsi: mpt3sas: Fix use-after-free warning - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - nouveau: fix instmem race condition around ptr stores - media: dvb-frontends: avoid stack overflow warnings with clang - serial/pmac_zilog: Remove flawed mitigation for rx irq flood - drm/tegra: dsi: Add missing check for of_find_device_by_node - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup - packet: move from strlcpy with unused retval to strscpy- !6858 CVE-2024-26883 - !6836 fs: sysfs: Fix reference leak in sysfs_break_active_protection() - !6845 erofs: fix pcluster use-after-free on UP platforms - !6827 fat: fix uninitialized field in nostale filehandles - !6807 CVE-2024-26923 - !6847 ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Check for integer overflow when using roundup_pow_of_two() - !6758 CVE-2022-48664 - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - erofs: fix pcluster use-after-free on UP platforms - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - !6795 rtmutex: Add acquire semantics for rtmutex lock acquisition slow path - fat: fix uninitialized field in nostale filehandles - !6777 tun: Fix xdp_rxq_info's queue_index when detaching - !6803 scsi: target: core: Add TMF to tmr_list handling - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - af_unix: Fix garbage collector racing against connect() - scsi: target: core: Add TMF to tmr_list handling - !6705 quota: fix CVE-2024-26878 - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path - tun: Fix xdp_rxq_info's queue_index when detaching - !6674 cifs: fix underflow in parse_server_interfaces() - !6494 v2 oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - !6745 PCI/IOV: Improve performance of creating VFs concurrently - !6754 binder: check offset alignment in binder_get_object() - !6746 v3 openEuler-1.0-LTS: bugfix for mm - !6716 CVE-2024-26922 - btrfs: fix hang during unmount when stopping a space reclaim worker - Btrfs: fix crash during unmount due to race with delayed inode workers - binder: check offset alignment in binder_get_object() - !6652 geneve: make sure to pull inner header in geneve_rx() - mm/madvise: fix potential pte_unmap_unlock pte error - PCI/IOV: Improve performance of creating VFs concurrently - !6664 drm/bridge: adv7511: fix crash on irq during probe - !6653 net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - !6510 cachefiles: fix memory leak in cachefiles_add_cache() - drm/amdgpu: validate the parameters of bo mapping operations more clearly - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va - drm/amdgpu: restrict bo mapping within gpu address limits - drm/amdgpu: check alignment on CPU page for bo map - quota: Fix potential NULL pointer dereference - quota: check time limit when back out space/inode change - quota: code cleanup for __dquot_alloc_space() - !6662 sched/rt: Disallow writing invalid values to sched_rt_period_us - !6661 sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - !6659 sched/rt: Fix sysctl_sched_rr_timeslice intial value - !6578 drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6641 CVE-2024-26863 - cifs: fix underflow in parse_server_interfaces() - !6646 fix race between rebuild scheduler domains and hotplug work - drm/bridge: adv7511: fix crash on irq during probe - sched/rt: Disallow writing invalid values to sched_rt_period_us - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - sched/rt: Fix sysctl_sched_rr_timeslice intial value - !6642 v3 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - geneve: make sure to pull inner header in geneve_rx() - !6621 amdkfd: use calloc instead of kzalloc to avoid integer overflow - cpuset: fix race between rebuild scheduler domains and hotplug work - !6617 net/bnx2x: Prevent access to a freed page in page_pool - !6611 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails - hsr: Fix uninit-value access in hsr_get_node() - net: hsr: fix placement of logical operator in a multi-line statement - !6397 btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve - !6616 drm/amdgpu: Reset IH OVERFLOW_CLEAR bit - amdkfd: use calloc instead of kzalloc to avoid integer overflow - net/bnx2x: Prevent access to a freed page in page_pool - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6525 v2 CVE-2024-24860 bugfix - !6478 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6582 ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6577 media: rc: bpf attach/detach requires write permission - !6560 IB/hfi1: Fix a memleak in init_credit_return - !6420 tty: fix read of tty->pgrp outside of ctrl_lock - !6436 dm: call the resume method on internal suspend - !6562 nfc: nci: free rx_data_reassembly skb on NCI device cleanup - !6481 CVE-2024-26875 - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - media: rc: bpf attach/detach requires write permission - !6495 RDMA/srpt: Do not register event handler until srpt device is fully setup - !6457 CVE-2024-26813 - nfc: nci: free rx_data_reassembly skb on NCI device cleanup - IB/hfi1: Fix a memleak in init_credit_return - !6517 scsi: lpfc: Fix link down processing to address NULL pointer dereference - !6521 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !6454 CVE-2021-47182 - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - scsi: lpfc: Fix link down processing to address NULL pointer dereference - cachefiles: fix memory leak in cachefiles_add_cache() - RDMA/srpt: Do not register event handler until srpt device is fully setup - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - sched: Allocate a new task_struct_resvd object for fork task - media: pvrusb2: fix uaf in pvr2_context_set_notify - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - vfio/platform: Create persistent IRQ handlers - vfio/platform: Disable virqfds on cleanup - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - scsi: core: Fixup calling convention for scsi_mode_sense() - dm: call the resume method on internal suspend - tty: fix read of tty->pgrp outside of ctrl_lock - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve- !6313 fixup CVE-2024-26908 - !6447 can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock - !6309 v5 ima: Avoid blocking in RCU read-side critical section - !6405 wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6466 bpf: Fix hashtab overflow check on 32-bit arches - !6396 tracing/trigger: Fix to return error if failed to alloc snapshot - !6278 Bluetooth: Avoid potential use-after-free in hci_error_reset - bpf: Fix hashtab overflow check on 32-bit arches - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock - !6203 ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6292 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6301 v2 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6266 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read - tracing/trigger: Fix to return error if failed to alloc snapshot - !6290 CVE-2024-24861 - x86/xen: Add some null pointer checking to smp.c - ima: Avoid blocking in RCU read-side critical section - !6269 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - !6276 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - !6277 gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - !6275 arp: Prevent overflow in arp_req_get(). - !6280 scsi: advansys: Fix kernel pointer leak - !6177 arm64/mpam: Not allowed setting 0 to cache portion bit mask - !6176 arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6075 Fix CVE-2024-26764 - scsi: advansys: Fix kernel pointer leak - Bluetooth: Avoid potential use-after-free in hci_error_reset - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach - arp: Prevent overflow in arp_req_get(). - !6084 netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read - !6246 ubi: Check for too small LEB size in VTBL code - ubi: Check for too small LEB size in VTBL code - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - arm64/mpam: Not allowed setting 0 to cache portion bit mask - arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio- !6231 v2 drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() - !6083 can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6160 net/sched: act_mirred: don't override retval if we already lost the skb - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() - !6152 Fix CVE-2024-26812 - !6139 iavf: free q_vectors before queues in iavf_disable_vf - !6164 CVE-2021-47194 - !6123 xen/events: close evtchn after mapping cleanup - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - net/sched: act_mirred: don't override retval if we already lost the skb - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - !6053 net: ip_tunnel: prevent perpetual headroom growth - !6002 KVM: s390: vsie: fix race during shadow creation - iavf: free q_vectors before queues in iavf_disable_vf - !6102 Fix CVE-2024-27437 - !6070 Fix CVE-2024-26686 - !6049 wifi: mac80211: fix race condition on enabling fast-xmit - !5916 ext4: fix double-free of blocks due to wrong extents moved_len - xen/events: close evtchn after mapping cleanup - !6099 vfio/pci: Lock external INTx masking ops - !6032 gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !5899 dm-crypt: don't modify the data when using authenticated encryption - vfio/pci: Disable auto-enable of exclusive INTx IRQ - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() - vfio/pci: Lock external INTx masking ops - !6042 nilfs2: fix data corruption in dsync block recovery for small block sizes - !6030 Fix CVE-2024-26685 - !6015 btrfs: don't drop extent_map for free space inode on write error - !5963 btrfs: dev-replace: properly validate device names - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - fs/proc: do_task_stat: use __for_each_thread() - exit: Use the correct exit_code in /proc//stat - net: ip_tunnel: prevent perpetual headroom growth - wifi: mac80211: fix race condition on enabling fast-xmit - !5999 mm/swap: fix race when skipping swapcache - nilfs2: fix data corruption in dsync block recovery for small block sizes - !6019 net/sched: act_mirred: use the backlog for mirred ingress - !6010 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !5846 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !5994 ipv6: sr: fix possible use-after-free and null-ptr-deref - nilfs2: fix potential bug in end_buffer_async_write - nilfs2: fix buffer corruption due to concurrent device reads - !5951 RDMA/qedr: Fix qedr_create_user_qp error flow - net/sched: act_mirred: use the backlog for mirred ingress - btrfs: don't drop extent_map for free space inode on write error - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - !5961 fbdev: savage: Error out if pixclock equals zero - KVM: s390: vsie: fix race during shadow creation - mm/swap: fix race when skipping swapcache - ipv6: sr: fix possible use-after-free and null-ptr-deref - !5875 v3 CVE-2024-26771 - !5926 RDMA/srpt: Support specifying the srpt_service_guid parameter - btrfs: dev-replace: properly validate device names - fbdev: savage: Error out if pixclock equals zero - !5778 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - RDMA/qedr: Fix qedr_create_user_qp error flow - !5830 fbdev: sis: Error out if pixclock equals zero - RDMA/srpt: Support specifying the srpt_service_guid parameter - ext4: fix double-free of blocks due to wrong extents moved_len - dm-crypt: don't modify the data when using authenticated encryption - !5807 nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - dmaengine: ti: edma: Fix error return code in edma_probe() - dmaengine: ti: edma: add missed operations - dmaengine: ti: edma: fix missed failure handling - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - fbdev: sis: Error out if pixclock equals zero - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()- !5874 scsi: hisi_sas: Update disk locked timeout to 7 seconds - scsi: hisi_sas: Update disk locked timeout to 7 seconds - !5841 fixup CVE-2024-26751 - !5834 CVE-2021-47144 - ARM: ep93xx: Add terminator to gpiod_lookup_table - drm/amd/amdgpu: fix refcount leak - !5796 netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - !5755 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !5767 v5 net: fec: fix the potential memory leak in fec_enet_init() - !5718 CVE-2024-26654 - net: fec: fix the potential memory leak in fec_enet_init() - !5722 btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !5727 fix CVE-2021-47101 - !5531 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5715 net: hns3: updates 2024.04.02 - !5710 v2 ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - !5700 sr9800: Add check for usbnet_get_endpoints - !5680 USB: usbfs: Don't WARN about excessively large memory allocations - !5679 fix CVE-2023-52587 - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - ALSA: aica: Fix a long-time build breakage - !5713 v2 tipc: wait and exit until all work queues are done - net: hns3: update hns3 version to 24.3.1 - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode - !5696 NFS: Fix an Oopsable condition in __nfs_pageio_add_request() - tipc: wait and exit until all work queues are done - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - !5702 ext4: Validate inode pa before using preallocation blocks - !5694 tipc: skb_linearize the head skb when reassembling msgs - ext4: Validate inode pa before using preallocation blocks - !5674 mac80211: fix locking in ieee80211_start_ap error path - !5672 arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid - sr9800: Add check for usbnet_get_endpoints - !5528 btrfs: do not BUG_ON in link_to_fixup_dir - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() - tipc: skb_linearize the head skb when reassembling msgs - !5522 md/raid5: fix atomicity violation in raid5_cache_count - USB: usbfs: Don't WARN about excessively large memory allocations - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mac80211: fix locking in ieee80211_start_ap error path - arm64/mpam: Allocate new partid for the created ctrl group - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid - !5581 CVE-2023-52622 - !5658 v2 CVE-2021-47131 - !5645 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5559 fix CVE-2021-47173 - !5575 net: dsa: fix a crash if ->get_sset_count() fails - net/tls: Use RCU API to access tls_ctx->netdev - net/tls: Remove the context from the list in tls_device_down - tls: Fix context leak on tls_device_down - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131 - net/tls: Fix use-after-free after the TLS device goes down and up - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU - !5625 i2c: i801: Don't generate an interrupt on bus reset - !5517 dm: revert partial fix for redundant bio-based IO accounting - arm64/mpam: Fix repeated enabling in mpam_enable() - !5481 jfs: fix array-index-out-of-bounds in dbAdjTree - !5572 mld: fix panic in mld_newpack() - !5565 tracing: Ensure visibility when inserting an element into tracing_map - !5571 v2 mm/mlock: return EINVAL for illegal user memory range in mlock - i2c: i801: Don't generate an interrupt on bus reset - !5587 Fix CVE-2021-47171 - !5579 mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy - !5573 Fix CVE-2021-47160 - !5564 serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - !5560 drm/amdgpu: Fix a use-after-free - net: usb: fix possible use-after-free in smsc75xx_bind - net: usb: fix memory leak in smsc75xx_bind - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy - !5558 net: fujitsu: fix potential null-ptr-deref - !5556 NFC: nci: fix memory leak in nci_allocate_device - net: dsa: fix a crash if ->get_sset_count() fails - net: dsa: mt7530: fix VLAN traffic leaks again - net: dsa: mt7530: fix VLAN traffic leaks - mld: fix panic in mld_newpack() - mm/mlock: return EINVAL for illegal user memory range in mlock - tracing: Ensure visibility when inserting an element into tracing_map - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - !5552 net/smc: remove device from smcd_dev_list after failed device_add() - !5290 crypto: algif_aead - Only wake up when ctx->more is zero - !5446 keys: safe concurrent user->{session,uid}_keyring access - drm/amdgpu: Fix a use-after-free - !5550 pciehp: clear p_slot->work.data after powering off a slot - usb: misc: fix improper handling of refcount in uss720_probe() - misc/uss720: fix memory leak in uss720_probe - !5515 netfilter: nf_tables: disallow timeout for anonymous sets - !5538 netfilter: nf_tables: disallow anonymous set with timeout flag - net: fujitsu: fix potential null-ptr-deref - NFC: nci: fix memory leak in nci_allocate_device - net/smc: remove device from smcd_dev_list after failed device_add() - pciehp: clear p_slot->work.data after powering off a slot - netfilter: nf_tables: disallow anonymous set with timeout flag - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - btrfs: do not BUG_ON in link_to_fixup_dir - md/raid5: fix atomicity violation in raid5_cache_count - dm: revert partial fix for redundant bio-based IO accounting - netfilter: nf_tables: disallow timeout for anonymous sets - jfs: fix array-index-out-of-bounds in dbAdjTree - keys: safe concurrent user->{session,uid}_keyring access - crypto: af_alg - Work around empty control messages without MSG_MORE - crypto: af_alg - Fix regression on empty requests - crypto: algif_aead - Only wake up when ctx->more is zero- !5539 spi: spi-fsl-dspi: Fix a resource leak in an error handling path - !5542 round lts patches - !5520 scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() - l2tp: pass correct message length to ip6_append_data - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - spi: spi-fsl-dspi: Fix a resource leak in an error handling path - !5514 CVE-2021-47110 - !5497 llc: Drop support for ETH_P_TR_802_2. - !5498 llc: make llc_ui_sendmsg() more robust against bonding changes - !5490 tcp: add sanity checks to rx zerocopy - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() - x86/kvm: Do not try to disable kvmclock if it was not enabled - x86/kvm: Disable kvmclock on all CPUs on shutdown - !5502 pstore/ram: Fix crash when setting number of cpus to an odd number - !5477 Fixed CVE-2021-47112 - pstore/ram: Fix crash when setting number of cpus to an odd number - llc: make llc_ui_sendmsg() more robust against bonding changes - llc: Drop support for ETH_P_TR_802_2. - tcp: add sanity checks to rx zerocopy - !5479 jfs: fix cve-2023-52600 - !5478 jfs: fix array-index-out-of-bounds in diNewExt - !5485 nfsd: fix use-after-free due to delegation race - nfsd: fix use-after-free due to delegation race - !5281 printk: avoid deadlock in panic - jfs: fix uaf in jfs_evict_inode - JFS: fix memleak in jfs_mount - jfs: fix array-index-out-of-bounds in diNewExt - x86/kvm: Teardown PV features on boot CPU as well - !5465 wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !5361 btrfs: abort in rename_exchange if we fail to insert the second ref - !5254 tomoyo: fix UAF write bug in tomoyo_write_control() - !5321 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5455 CVE-2021-47114 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !5320 jfs: fix slab-out-of-bounds Read in dtSearch - ocfs2: issue zeroout to EOF blocks - ocfs2: fix zero out valid data - ocfs2: fix data corruption by fallocate - !5374 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !5418 [sync] PR-5317: KVM: s390: fix setting of fpc register - !5272 net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5274 phonet/pep: refuse to enable an unbound pipe - !5359 CVE-2021-47121 and CVE-2021-47122 - KVM: s390: fix setting of fpc register - !5358 v5 CVE-2023-52595 - !5336 binder: fix race between mmput() and do_exit() - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - btrfs: abort in rename_exchange if we fail to insert the second ref - net: caif: fix memory leak in caif_device_notify - net: caif: fix memory leak in cfusbl_device_notify - net: caif: add proper error handling - net: caif: added cfserl_release function - rt2x00: Fix kabi breakage in struct rt2x00lib_ops - wifi: rt2x00: restart beacon queue when hardware reset - rt2x00: clear up IV's on key removal - rt2x00: clear IV's on start to fix AP mode regression - rt2800: add pre_reset_hw callback - rt2800: do not nullify initialization vector data - binder: fix race between mmput() and do_exit() - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - printk: avoid deadlock in panic - phonet/pep: refuse to enable an unbound pipe - net/smc: fix illegal rmb_desc access in SMC-D connection dump - tomoyo: fix UAF write bug in tomoyo_write_control()- !5306 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - !5347 s390/ptrace: handle setting of fpc register correctly - !5309 drm/msm/dpu: Add mutex lock in control vblank irq - s390/ptrace: handle setting of fpc register correctly - !5267 llc: call sock_orphan() at release time - drm/msm/dpu: Add mutex lock in control vblank irq - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - !5241 powerpc/lib: Validate size for vector operations - !5246 ceph: fix deadlock or deadcode of misusing dget() - !5268 crypto: algif_aead - fix uninitialized ctx->init - crypto: algif_aead - fix uninitialized ctx->init - llc: call sock_orphan() at release time - !5220 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !5196 drm: Don't unref the same fb many times by mistake due to deadlock handling - ceph: fix deadlock or deadcode of misusing dget() - powerpc/lib: Validate size for vector operations - !5210 v2 Fix CVE-2022-48629 and CVE-2022-48630 - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !5175 arm64/mpam: Fix use-after-free when deleting resource groups - !5163 nfc: nci: assert requested protocol is valid - !5172 CVE-2023-52502 for openEuler-1.0-LTS - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - crypto: qcom-rng - ensure buffer for generate is completely filled - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5177 net: nfc: llcp: Add lock when modifying device list - !5157 RDMA/srp: Do not call scsi_done() from srp_abort() - net: nfc: llcp: Add lock when modifying device list - arm64/mpam: Fix use-after-free when deleting resource groups - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - !5142 arm64/mpam: Expand the monitor number of the resctrl root - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - nfc: constify several pointers to u8, char and sk_buff - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - arm64/mpam: Expand the monitor number of the resctrl root- !5133 CVE-2021-46926 - !5136 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - !5052 v3 Remove WQ_FLAG_BOOKMARK flag - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3 - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - ALSA: hda: intel-sdw-acpi: harden detection of controller - soundwire: intel: filter SoundWire controller device search - !5114 fix CVE-2023-52578 - !5119 crypto: scomp - fix req->dst buffer overflow - !5101 EDAC/thunderx: Fix possible out-of-bounds string access - !5094 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect - crypto: scomp - fix req->dst buffer overflow - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - !5092 wifi: mac80211: fix potential key use-after-free - EDAC/thunderx: Fix possible out-of-bounds string access - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2 - !5090 drm: bridge/panel: Cleanup connector on bridge detach - !5088 uio_hv_generic: Fix a memory leak in error handling paths - !4952 scsi: qedf: Add pointer checks in qedf_update_link_speed() - !5076 v3 CVE-2021-47074 - netfilter: nft_compat: reject unused compat flag - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - bonding: remove print in bond_verify_device_path - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: ipv4: fix a memleak in ip_setup_cork - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - virtio_net: Fix Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - SUNRPC: Fix a suspicious RCU usage warning - tcp: Add memory barrier to tcp_push() - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - md: Whenassemble the array, consult the superblock of the freshest device - jbd2: correct the printing of write_flags in jbd2_write_superblock() - !5073 RDMA/rxe: Clear all QP fields if creation failed - !5077 RDMA/rxe: Return CQE error if invalid lkey was supplied - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1 - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect - wifi: mac80211: fix potential key use-after-free - drm: bridge/panel: Cleanup connector on bridge detach - uio_hv_generic: Fix a memory leak in error handling paths - of: unittest: Fix of_count_phandle_with_args() expected value message - of: unittest: Fix compile in the non-dynamic case - RDMA/rxe: Return CQE error if invalid lkey was supplied - nvme-loop: fix memory leak in nvme_loop_create_ctrl() - nvme-loop: don't put ctrl on nvme_init_ctrl error - !5060 net: fix possible store tearing in neigh_periodic_work() - RDMA/rxe: Clear all QP fields if creation failed - net: fix possible store tearing in neigh_periodic_work() - of: Fix double free in of_parse_phandle_with_args_map - pmdomain: core: Move the unused cleanup to a _sync initcall - tick/sched: Preserve number of idle sleeps across CPU hotplug events - acpi: property: Let args be NULL in __acpi_node_get_property_reference - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug - ACPI: LPIT: Avoid u32 multiplication overflow - audit: Send netlink ACK before setting connection in auditd_set - crypto: scompress - return proper error code for allocation failure - crypto: af_alg - Disallow multiple in-flight AIO requests - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !5046 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - !4929 scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - !4752 block: add check that partition length needs to be aligned with block size - !4735 blk-mq: fix IO hang from sbitmap wakeup race - !3864 nvme: sanitize metadata bounce buffer for reads - !4946 NFC: st21nfca: Fix memory leak in device probe and remove - !4999 CVE-2021-46984 - !4938 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - !4990 vt: fix memory overlapping when deleting chars in the buffer - !4978 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5018 ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - !4992 bnxt_en: Fix RX consumer index logic in the error path. - !4997 Fixed CVE-2023-52504 - !4982 i2c: img-scb: fix reference leak when pm_runtime_get_sync fails - !4983 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - !4995 mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val - !4974 arm64/mpam: set default feedback of last_cmd_status interface as null string - !4975 arm64/mpam: support resctrl fs to show mounting option - !4973 arm64/mpam: Skip updates of unrelated ctrl type - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - !4996 soundwire: stream: fix memory leak in stream config error path - !4817 v2 io_uring: fix overflows checks in provide buffers - kyber: fix kabi broken in ->bio_merge() - kyber: fix out of bounds access when preempted - x86/alternatives: Disable KASAN in apply_alternatives() - soundwire: stream: fix memory leak in stream config error path - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val - bnxt_en: Fix RX consumer index logic in the error path. - !4969 CVE-2021-46990 - vt: fix memory overlapping when deleting chars in the buffer - !4945 ieee802154: ca8210: Fix a potential UAF in ca8210_probe - !4944 perf/x86/lbr: Filter vsyscall addresses - !4967 i2c: xiic: fix reference leak when pm_runtime_get_sync fails - !4970 binder: fix async_free_space accounting for empty parcels - !4919 v2 HID: usbhid: fix info leak in hid_submit_ctrl - !4980 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !4949 CVE-2021-47024 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - arm64/mpam: support resctrl fs to show mounting option - arm64/mpam: set default feedback of last_cmd_status interface as null string - arm64/mpam: Skip updates of unrelated ctrl type - binder: fix async_free_space accounting for empty parcels - powerpc/64s: Fix crashes when toggling entry flush barrier - i2c: xiic: fix reference leak when pm_runtime_get_sync fails - scsi: qedf: Add pointer checks in qedf_update_link_speed() - vsock/virtio: free queued packets when closing socket - vsock/virtio: discard packets only when socket is really closed - virtio_vsock: Fix race condition in virtio_transport_recv_pkt - NFC: st21nfca: Fix memory leak in device probe and remove - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - perf/x86/lbr: Filter vsyscall addresses - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - HID: usbhid: fix info leak in hid_submit_ctrl - io_uring: fix overflows checks in provide buffers - block: add check that partition length needs to be aligned with block size - blk-mq: fix IO hang from sbitmap wakeup race - nvme: sanitize metadata bounce buffer for reads- !4947 powerpc/64s: Fix pte update for kernel memory on radix - !4932 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - powerpc/64s: Fix pte update for kernel memory on radix - !4874 v2 net: openvswitch: limit the number of recursions from action sets - !4920 ARM: footbridge: remove personal server platform - !4887 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - !4918 v3 usb: hub: Guard against accesses to uninitialized BOS descriptors - !4936 i2c: validate user data in compat ioctl - i2c: validate user data in compat ioctl - !4898 platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - !4879 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - !4869 Fix CVE-2021-46941 - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - !4904 i2c: sprd: fix reference leak when pm_runtime_get_sync fails - !4859 hfsplus: prevent corruption in shrinking truncate - !4877 i2c: Fix a potential use after free - ARM: footbridge: fix PCI interrupt mapping - !4888 v3 media: dvbdev: Fix memory leak in dvb_media_device_free() - usb: hub: Guard against accesses to uninitialized BOS descriptors - !4825 sched/membarrier: reduce the ability to hammer on sys_membarrier - !4882 Input: appletouch - initialize work before device registration - !4876 backport patch to fix CVE-2021-47077 - !4899 net: qualcomm: rmnet: fix global oob in rmnet_policy - i2c: sprd: fix reference leak when pm_runtime_get_sync fails - !4892 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4881 i2c: cadence: fix reference leak when pm_runtime_get_sync fails - net: qualcomm: rmnet: fix global oob in rmnet_policy - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - !4865 Input: powermate - fix use-after-free in powermate_config_complete - !4860 apparmor: avoid crash when parsed profile name is empty - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - media: dvbdev: Fix memory leak in dvb_media_device_free() - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - Input: appletouch - initialize work before device registration - i2c: cadence: fix reference leak when pm_runtime_get_sync fails - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - i2c: Fix a potential use after free - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - net: openvswitch: limit the number of recursions from action sets - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: balance phy init and exit - usb: dwc3: core: Do core softreset when switch mode - Input: powermate - fix use-after-free in powermate_config_complete - !4856 bus: qcom: Put child node before return - apparmor: avoid crash when parsed profile name is empty - hfsplus: prevent corruption in shrinking truncate - bus: qcom: Put child node before return - !4828 Drivers: hv: vmbus: Use after free in __vmbus_open() - !4806 v2 media: pvrusb2: fix use after free on context disconnection - !4777 drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !4819 v2 fix CVE-2020-36782 - !4833 openvswitch: fix stack OOB read while fragmenting IPv4 packets - !4677 f2fs: fix to avoid dirent corruption - !4804 CVE-2023-52451 backport to 4.19 v2 - openvswitch: fix stack OOB read while fragmenting IPv4 packets - Drivers: hv: vmbus: Use after free in __vmbus_open() - !4778 v3 Revert "memcg: fix a UAF problem in drain_all_stock()" - sched/membarrier: reduce the ability to hammer on sys_membarrier - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter - !4812 parisc: Clear stale IIR value on instruction access rights trap - parisc: Clear stale IIR value on instruction access rights trap - media: pvrusb2: fix use after free on context disconnection - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - !4758 binder: signal epoll threads of self-work - !4746 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - Revert "memcg: fix a UAF problem in drain_all_stock()" - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to fifo depth - 1 - !4707 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - !4686 mlxsw: spectrum_acl_tcam: Fix stack corruption - binder: signal epoll threads of self-work - !4710 CVE-2021-46904 for openEuler1.0 - i2c: hisi: Add clearing tx aempty interrupt operation - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1 - !4671 uio: Fix use-after-free in uio_open - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - net: hso: fix NULL-deref on disconnect regression - net: hso: fix null-ptr-deref during tty device unregistration - usb: hso: check for return value in hso_serial_common_create() - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - mlxsw: spectrum_acl_tcam: Fix stack corruption - f2fs: fix to avoid dirent corruption - uio: Fix use-after-free in uio_open- !4701 v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - !4684 v3 CVE-2023-52435 - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - !4643 f2fs: explicitly null-terminate the xattr list - f2fs: explicitly null-terminate the xattr list- !4601 v2 xen-netback: don't produce zero-size SKB frags - xen-netback: don't produce zero-size SKB frags - !4583 net: hns3: fix a bug and modify the hns3 driver version - net: hns3: update hns3 version to 24.2.1 - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - !4552 v4 CVE-2023-52340 - !4526 v2 fs:/dcache.c: fix negative dentry flag warning in dentry_free - ipv6: fix kabi broken in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - !4538 fix kprobe reenter bug - arm64/openeuler_defconfig: add not set config to fix compiling error - tracing/kprobes: Do the notrace functions check without kprobes on ftrace - fs:/dcache.c: fix negative dentry flag warning in dentry_free- !4524 fix spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected- !4454 netfilter: nf_tables: reject QUEUE/DROP verdict parameters - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4411 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - !4412 v3 Save and restore msg_namelen in sock_sendmsg - net: Save and restore msg_namelen in sock_sendmsg - net: prevent rewrite of msg_name in sock_sendmsg() - !4399 net: dst: Optimized route gc - drm/atomic: Fix potential use-after-free in nonblocking commits - !4392 linux-4.19.y inclusion - !4369 mm/filemap: avoid buffered read/write race to read inconsistent data - net/dst: use a smaller percpu_counter batch for dst entries accounting - net: add a route cache full diagnostic message - net: check dev->gso_max_size in gso_features_check() - net: warn if gso_type isn't set for a GSO SKB - mm: fix unmap_mapping_range high bits shift bug - x86/alternatives: Sync core before enabling interrupts - mm/filemap: avoid buffered read/write race to read inconsistent data - !4360 net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve - !4320 io_uring/af_unix: disable sending io_uring over sockets - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve - io_uring/af_unix: disable sending io_uring over sockets- !4277 fs:/dcache.c: fix negative dentry limit not complete problem - !4288 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4299 smb: client: fix NULL deref in asn1_ber_decoder() - smb: client: fix NULL deref in asn1_ber_decoder() - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4228 fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - fs:/dcache.c: fix negative dentry limit not complete problem - !4235 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4255 drm/amdgpu: Fix potential fence use-after-free v2 - !4209 dhugetlb: skip unexpected migration - drm/amdgpu: Fix potential fence use-after-free v2 - !4231 crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - !4212 netlink: fix potential sleeping issue in mqueue_flush_file - netlink: fix potential sleeping issue in mqueue_flush_file - dhugetlb: skip unexpected migration - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function - !3944 time: Handle negative seconds correctly in timespec64_to_ns() - !3943 timerqueue: Use rb_entry_safe() in timerqueue_getnext() - !3942 efi/x86: Map the entire EFI vendor string before copying it - !4166 sched/fair: Fix qos_timer deadlock when cpuhp offline - sched/fair: Fix qos_timer deadlock when cpuhp offline - !4137 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - time: Handle negative seconds correctly in timespec64_to_ns() - timerqueue: Use rb_entry_safe() in timerqueue_getnext() - efi/x86: Map the entire EFI vendor string before copying it- !4101 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !2954 spi: phytium: fix phytium_spi_irq panic on boot - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4067 fix CVE-2022-48619 - !4080 rtnetlink: Reject negative ifindexes in RTM_NEWLINK - rtnetlink: Reject negative ifindexes in RTM_NEWLINK - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" - !4065 smb: client: fix OOB in receive_encrypted_standard() - !4021 netfilter: nf_tables: Reject tables of unsupported family - Input: add bounds checking to input_set_capability() - smb: client: fix OOB in receive_encrypted_standard() - !4039 crypto: hisilicon/qm: fix several issues - !4025 crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro - !3980 vhost: use kzalloc() instead of kmalloc() followed by memset() - crypto: hisilicon/qm: fix several issues - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro - netfilter: nf_tables: Reject tables of unsupported family - vhost: use kzalloc() instead of kmalloc() followed by memset() - spi: phytium: fix phytium_spi_irq panic on boot- !4006 crypto: hisilicon/sec2: fix memory use-after-free issue - crypto: hisilicon/sec2: fix memory use-after-free issue - !3923 net: bridge: multicast: fix UAF of net_bridge - net: bridge: multicast: fix UAF of net_bridge- !3768 iomap: add support to track dirty state of sub pages - !3845 netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() - !3847 nvmet: nul-terminate the NQNs passed in the connect command - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2 - team: Fix use-after-free when an option instance allocation fails - packet: Move reference count in packet_sock to atomic_long_t - tcp: do not accept ACK of bytes we never sent - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() - ipv6: fix potential NULL deref in fib6_add() - ipv4: Correct/silence an endian warning in __ip_do_redirect - net: sched: fix race condition in qdisc_graft() - macvlan: Don't propagate promisc change to lower dev in passthru - ppp: limit MRU to 64K - tty: Fix uninit-value access in ppp_sync_receive() - net: annotate data-races around sk->sk_dst_pending_confirm - net: annotate data-races around sk->sk_tx_queue_mapping - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1 - ring-buffer: Fix memory leak of free page - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation - Revert "PCI: acpiphp: Reassign resources on bridge if necessary" - x86/CPU/AMD: Check vendor in the AMD microcode callback - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() - audit: don't take task_lock() in audit_exe_compare() code path - nvmet: nul-terminate the NQNs passed in the connect command - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() - !3823 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3803 net/sched: cbs: Fix not adding cbs instance to list - net/sched: cbs: Fix not adding cbs instance to list - !3770 ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - iomap: add support to track dirty state of sub pages - !3757 Fix bugs from LTS patches - devcoredump: Send uevent once devcd is ready - devcoredump : Serialize devcd_del work - driver core: Release all resources during unbind before updating device links - !3716 appletalk: Fix Use-After-Free in atalk_ioctl - !3667 net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - net/rose: Fix Use-After-Free in rose_ioctl- !3660 atm: Fix Use-After-Free in do_vcc_ioctl - !3687 Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - !3672 smb: client: fix potential OOB in smb2_dump_detail() - !3671 smb: client: fix OOB in smbCalcSize() - !3627 jbd2: fix soft lockup in journal_finish_inode_data_buffers() - !3189 fs: don't audit the capability check in simple_xattr_list() - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3555 net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() - atm: Fix Use-After-Free in do_vcc_ioctl - !3592 CVE-2023-35827 patchset - !3449 Fix data-races around - jbd2: fix soft lockup in journal_finish_inode_data_buffers() - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work() - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - fs: don't audit the capability check in simple_xattr_list()- !3607 Fix CVE-2023-6546 - !3606 perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - tty: n_gsm: fix restart handling via CLD command - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3417 SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers - !3531 Fix kernel panic occurs during ISO installation on the 20.03 SP3/SP4 - i2c: hisi: Only handle the interrupt of the driver's transfer - i2c: hisi: Only use the completion interrupt to finish the transfer - i2c: hisi: Avoid redundant interrupts - !3483 net: Remove acked SYN flag from packet in the transmit queue correctly - net: Remove acked SYN flag from packet in the transmit queue correctly - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers- !3426 Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" - Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" - Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"- !3347 tun: avoid double free in tun_free_netdev - tun: avoid double free in tun_free_netdev - !3239 net: hns: fix fake link up - !3113 KVM: arm64: limit PMU version to PMUv3 for ARMv8.1 - !3281 LTS patch backport - !3122 nvme: retain split access workaround for capability reads - !3262 icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. - net: fix kabi broken in struct netns_xfrm - xfrm: fix a data-race in xfrm_gen_index() - !3276 linux-4.19.y inclusion - !3263 workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() - !3267 x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() - can: dev: can_restart(): don't crash kernel if carrier is OK - can: dev: move driver related infrastructure into separate subdir - ipv6: avoid atomic fragment on GSO packets - tcp_metrics: do not create an entry from tcp_init_metrics() - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() - tcp_metrics: add missing barriers on delete - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb - tcp: fix excessive TLP and RACK timeouts from HZ rounding - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() - ACPI: irq: Fix incorrect return value in acpi_register_gsi() - ext4: move 'ix' sanity check to corrent position - vfs: fix readahead(2) on block devices - overlayfs: set ctime when setting mtime and atime - quota: Fix slow quotaoff - mcb: remove is_added flag from mcb_device struct - sched,idle,rcu: Push rcu_idle deeper into the idle path - cgroup: Remove duplicates in cgroup v1 tasks file - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. - net: hns: update hns version to 23.12.1 - net: hns: fix fake link up on xge port - !3021 fix CFS bandwidth vs. hrtimer self deadlock - !3202 regmap: fix NULL deref on lookup - regmap: fix NULL deref on lookup - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1 - arm64: cpufeature: Extract capped perfmon fields - nvme: retain split access workaround for capability reads - cpu/hotplug: fix kabi breakage in enum cpuhp_state - hrtimers: Push pending hrtimers away from outgoing CPU earlier- !3158 mm: don't let userspace spam allocations warnings - mm: don't let userspace spam allocations warnings - !2781 cpufreq: Abort show()/store() for half-initialized policies - !3118 sched: smart grid: check is active in affinity timer - sched: smart grid: check is active in affinity timer - !2977 Backport crypto bugfix - !3071 perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - !3038 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3031 x86/mce/amd: Publish the bank pointer only after setup has succeeded - !3030 x86/mce/inject: Fix a wrong assignment of i_mce.status - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - x86/mce/amd: Publish the bank pointer only after setup has succeeded - x86/mce/inject: Fix a wrong assignment of i_mce.status - crypto: fix kabi broken in struct crypto_instance - crypto: api - Use work queue in crypto_destroy_instance - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- bug fix for enfs, when diconnect many sockets io is hang- arm64: cpufeature: Extract capped perfmon fields - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1- !3000 [openEuler-1.0-LTS] add Phytium drivers CONFIG - arm64: config: add config for Phytium drivers - !2908 mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - !2869 mm, memory_hotplug: update pcp lists everytime onlining a memory block - !2805 sched/fair: Refill bandwidth before scaling - !2804 signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal - !2960 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - kbuild: ensure full rebuild when the compiler is updated - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - mm, memory_hotplug: update pcp lists everytime onlining a memory block - sched/fair: Refill bandwidth before scaling - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal- Revert "genirq: Increase the number of IRQ descriptors"- crypto: hisilicon - Add value profile support for kernel- !1935 [openEuler-1.0-LTS] Add Phytium optee driver support - !2895 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !2873 Fix SAS start error with maxcpus=1 - genirq: Take the proposed affinity at face value if force==true - optee: add phytium optee driver - optee: model OP-TEE as a platform device/driver - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - !2508 [openEuler-1.0-LTS] jpeg: Add a Phytium JPEG Engine driver - !2522 [openEuler-1.0-LTS] Add support for Phytium SoC RNG - !2877 Revert "tcp: fix delayed ACKs for MSS boundary condition" - !2693 [openEuler-1.0-LTS] Add support for Phytium QSPI - !2402 [openEuler-1.0-LTS] Add Phytium w1 driver support - !2403 [openEuler-1.0-LTS] Add Phytium adc driver support - !1874 [openEuler-1.0-LTS] Add Phytium mailbox driver support - !2024 [openEuler-1.0-LTS] Add Phytium RTC driver support - !2682 [openEuler-1.0-LTS] Add support for Phytium MMC - !2671 [openEuler-1.0-LTS] phytium dwmac net driver - !2676 [openEuler-1.0-LTS] Add Phytium gpio driver support - !2604 [openEuler-1.0-LTS] Add support for Phytium SPI - !2540 [openEuler-1.0-LTS] Driver for the Phytium keypad port. - Revert "tcp: fix delayed ACKs for MSS boundary condition" - hwrng: Add support for Phytium SoC RNG - jpeg: Add a Phytium JPEG Engine driver - !2818 Fix memleak in disassociate_ctty() - !2810 drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c - rtc: add phytium rtc driver document - rtc: add rtc drivers for Phytium SOCs - gpio: add phytium gpio driver - dwmac:add phytium dwmac driver - mailbox:add phytium mailbox driver document - mailbox: add phytium mailbox driver - mmc: add phytium mmc driver DT binding docs - mmc: add support for Phytium MMC - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() - Revert "tty: fix pid memleak in disassociate_ctty()" - spi: add phytium spi driver DT binding docs - spi: add phytium spi support - qspi: add phytium qspi driver DT binding docs - qspi: add support for Phytium QSPI controller - gpio: add phytium gpio driver document - dwmac:add phytium dwmac driver DT binding docs - adc: add phytium adc driver - adc: add phytium adc driver document - w1: add phytium w1 driver - w1: add phytium w1 driver document - KEYPAD: Driver for the Phytium keypad port. - KEYPAD: Document for the Phytium keypad port.- config: arm64: Enable dubugfs config of hisi sas - scsi: hisi_sas_v3_hw: Remove extra function calls for runtime pm - scsi: hisi_sas_v3_hw: Don't use PCI helper functions - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING - scsi: hisi_sas: Work around build failure in suspend function - scsi: hisi_sas: Block requests before take debugfs snapshot - scsi: hisi_sas: Add slave_destroy interface for v3 hw - scsi: hisi_sas: Configure the initialization registers according to HBA model - scsi: hisi_sas: Increase debugfs_dump_index after dump is completed - scsi: hisi_sas: Ensure all enabled PHYs up during controller reset - scsi: hisi_sas: Exit suspending state when usage count is greater than 0 - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id - Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure" - scsi: hisi_sas: Disable-SATA-disk-phy-for-severe-I_T-nexus reset failure - scsi: hisi_sas: Use abort task set to reset SAS disks when discovered - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW - scsi: hisi_sas: Fix rescan after deleting a disk - scsi: hisi_sas: Modify v3 HW SSP underflow error processing - scsi: hisi_sas: Fix phyup timeout on FPGA - scsi: hisi_sas: Prevent parallel controller reset and control phy command - scsi: hisi_sas: Limit users changing debugfs BIST count value - scsi: hisi_sas: Use autosuspend for the host controller - scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed - scsi: hisi_sas: Add more logs for runtime suspend/resume - scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy() - scsi: hisi_sas: Initialise devices in .slave_alloc callback - scsi: hisi_sas: Speed up error handling when internal abort timeout occurs - scsi: hisi_sas: Reset controller for internal abort timeout - scsi: hisi_sas: Include HZ in timer macros - scsi: hisi_sas: Run I_T nexus resets in parallel for clear nexus reset - scsi: hisi_sas: Put a limit of link reset retries - scsi: hisi_sas: Print SATA device SAS address for soft reset failure - scsi: hisi_sas: Warn in v3 hw channel interrupt handler when status reg cleared - scsi: hisi_sas: Directly snapshot registers when executing a reset - scsi: hisi_sas: Call sas_unregister_ha() to roll back if .hw_init() fails - scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print - scsi: hisi_sas: Add trace FIFO debugfs support - scsi: hisi_sas: Enable debugfs support by default - scsi: hisi_sas: Remove deferred probe check in hisi_sas_v2_probe() - scsi: hisi_sas: use threaded irq to process CQ interrupts - scsi: hisi_sas: Remove preemptible() - scsi: hisi_sas: Move debugfs code to v3 hw driver - scsi: hisi_sas: Reduce some indirection in v3 hw driver - scsi: hisi_sas: Fix up probe error handling for v3 hw - scsi: hisi_sas: Recover PHY state according to the status before reset - scsi: hisi_sas: Add device link between SCSI devices and hisi_hba - scsi: hisi_sas: Add check for methods _PS0 and _PR0 - scsi: hisi_sas: Add controller runtime PM support for v3 hw - scsi: hisi_sas: Switch to new framework to support suspend and resume - scsi: hisi_sas: Code style cleanup - scsi: hisi_sas: Add missing newlines - scsi: hisi_sas: Add BIST support for fixed code pattern - scsi: hisi_sas: Add BIST support for phy FFE - scsi: hisi_sas: Make phy index variable name consistent - scsi: hisi_sas: Do not modify upper fields of PROG_PHY_LINK_RATE reg - scsi: hisi_sas: Modify macro name for OOB phy linkrate - scsi: hisi_sas: Remove one kerneldoc comment - scsi: hisi_sas: Do not reset phy timer to wait for stray phy up - scsi: hisi_sas: Stop returning error code from slot_complete_vX_hw() - scsi: hisi_sas: Add SAS_RAS_INTR0 to debugfs register name list - scsi: hisi_sas: Modify the commit information for DSM method - scsi: hisi_sas: Display proc_name in sysfs - scsi: hisi_sas: Fix build error without SATA_HOST - scsi: hisi_sas: Use dev_err() in read_iost_itct_cache_v3_hw() - scsi: hisi_sas: Add prints for v3 hw interrupt converge and automatic affinity - scsi: hisi_sas: Modify the file permissions of trigger_dump to write only - scsi: hisi_sas: Replace magic number when handle channel interrupt - scsi: hisi_sas: Stop converting a bool into a bool - scsi: hisi_sas: Return directly if init hardware failed - scsi: hisi_sas: Record the phy down event in debugfs - scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails - scsi: hisi_sas: Add ability to have multiple debugfs dumps - scsi: hisi_sas: Add module parameter for debugfs dump count - scsi: hisi_sas: Allocate memory for multiple dumps of debugfs - scsi: hisi_sas: Add debugfs file structure for ITCT cache - scsi: hisi_sas: Add debugfs file structure for IOST cache - scsi: hisi_sas: Add debugfs file structure for ITCT - scsi: hisi_sas: Add debugfs file structure for IOST - scsi: hisi_sas: Add debugfs file structure for port - scsi: hisi_sas: Add debugfs file structure for registers - scsi: hisi_sas: Add debugfs file structure for DQ - scsi: hisi_sas: Add debugfs file structure for CQ - scsi: hisi_sas: Add timestamp for a debugfs dump - scsi: hisi_sas: Don't create debugfs dump folder twice - scsi: hisi_sas: Make three functions static - scsi: hisi_sas: fix spelling mistake "digial" -> "digital" - scsi: hisi_sas: Add hisi_sas_debugfs_alloc() to centralise allocation - scsi: hisi_sas: Remove some unused function arguments - scsi: hisi_sas: Remove redundant work declaration - scsi: hisi_sas: Remove hisi_sas_hw.slot_complete - scsi: hisi_sas: add debugfs auto-trigger for internal abort time out - scsi: hisi_sas: use devm_platform_ioremap_resource() to simplify code - scsi: hisi_sas: remove set but not used variable 'irq_value' - scsi: hisi_sas: Remove some unnecessary code - scsi: hisi_sas: Modify return type of debugfs functions - scsi: hisi_sas: Drop free_irq() when devm_request_irq() failed - scsi: hisi_sas: Drop SMP resp frame DMA mapping - scsi: hisi_sas: Drop kmap_atomic() in SMP command completion - scsi: hisi_sas: Snapshot AXI and RAS register at debugfs - scsi: hisi_sas: Snapshot HW cache of IOST and ITCT at debugfs - scsi: hisi_sas: Fix pointer usage error in show debugfs IOST/ITCT - scsi: hisi_sas: Make max IPTT count equal for all hw revisions - scsi: hisi_sas: Some misc tidy-up - scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental - scsi: hisi_sas: Fix losing directly attached disk when hot-plug - scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code - scsi: hisi_sas: No need to check return value of debugfs_create functions- Backport cpu turbo patches- genirq: Increase the number of IRQ descriptors - irqchip: gic-v3: Collection table support muti pages- net: hns3: Fix unreasonable modifications caused by rollback extension ringparam parameters - net: hns3: Fix ethtool_ Ops&gen_ Improper modification of kabi changes caused by adding members in the ops structure - net: hns3: Fix Kabi issue caused by ptp introducing gettimex64() - Fallback ethtool about nla_ Modification of kabi changes caused by the addition of new associations in the policy structure - net: hns3: Fallback Ethtool's modifications to extack - net: hns3: Fallback ethtool's modification of lane - net: hns3: HNAE3 framework add support for ROH client - net: hns3: add ROH MAC type definitions and support query MAC type - net: hns3: Add configuration of TM QCN error event - net: hns3: fix return value check bug of rx copybreak - net: hns3: add netdev reset check for hns3_set_tunable() - ethtool: mark netlink family as __ro_after_init - net: hns3: add max order judgement for tx spare buffer - net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue - net: hns3: fix deadlock issue when externel_lb and reset are executed together - ethtool: Fix uninitialized number of lanes - ethtool: reset lanes when lanes is omitted - ethtool: limit bitset size - ethtool: fix application of verbose no_mask bitset - net: hns3: fix for not calculating TX BD send size correctly - NIC: hns3: fix kabi - ptp: deprecate gettime64() in favor of gettimex64() - net: hns3: add support for Hisilicon ptp sync device - net: hns3: sync linux kernel hns3 wol to openeuler - net: hns3: fix pointer cast to different type for wol - net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol - net: hns3: fix getting supported parameter from driver in hclge_set_wol - net: hns3: add supports pfc storm detection and suppression - net: hns3: debugfs add dump dscp map info - net: hns3: support debugfs for wake on lan - net: hns3: add debugfs support for interrupt coalesce - net: hns3: delete the hclge_cmd.c and hclgevf_cmd.c - net: hns3: refactor VF cmdq init and uninit APIs with new common APIs - net: hns3: refactor PF cmdq init and uninit APIs with new common APIs - net: hns3: create common cmdq init and uninit APIs - net: hns3: refactor VF cmdq resource APIs with new common APIs - net: hns3: refactor PF cmdq resource APIs with new common APIs - net: hns3: create common cmdq resource allocate/free/query APIs - net: hns3: refactor hclgevf_cmd_send with new hclge_comm_cmd_send API - net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API - net: hns3: fix setting wrong tx_timeout value issue - net: hns3: refactor hclge_mac_link_status_wait for interface reuse - net: hns3: add wait until mac link down - net: hns3: fix set cpu affinity when state down - net: hns3: restore user pause configure when disable autoneg - net: hns3: add tm flush when setting tm - net: hns3: fix the imp capability bit cannot exceed 32 bits issue - net: hns3: fix GRE checksum offload issue - net: hns3: fix strncpy() not using dest-buf length as length issue - net: hns3: add support config dscp map to tc - net: hns3: refactor hclge_update_desc_vfid for extension - net:ethtool Fix the Kabi problem is caused by the new FEC callback function in ethtool_ops - net:hns3 The kabi issue is resolved when the lane members are added to the ethtool_link_ksettings structure - net: hns3: add querying fec statistics - ethtool: add FEC statistics - ethtool: fec_prepare_data() - jump to error handling - ethtool: support FEC settings over netlink - ethtool: netlink bitset handling - net: hns3: avoid mult + div op in critical data path - net: hns3: add support to query and set lane number by ethtool - ethtool: Extend link modes settings uAPI with lanes - net: hns3: Resolved the kabi change issue caused by new members in the devlink structure - The kabi issue is resolved when the rx_buf_len extension ring is used to set parameters or obtain APIs - net: hns3: Fix for the compilation problem of hclge_comm_cmd - net: hns3: remove always exist devlink pointer check - net: hns3: add support for registering devlink for VF - net: hns3: add support for registering devlink for PF - net: hns3: fix output information incomplete for dumping tx queue info with debugfs - net: hns3: fix reset timeout when enable full VF - net: hns3: modify reset delay time to avoid configuration timeout - net: hns3: add support for getting GE port lanes - net: hns3: Use the correct style for SPDX License Identifier - net: hns3: support set/get VxLAN rule of rx flow director by ethtool - net: hns3: refactor for function hclge_fd_convert_tuple - net: hns3: PF supports to set and query lane_num by sysfs - net: ethtool: add VxLAN to the NFC API - net: hns3: add extend interface support for read and write phy register - net: hns3: add support set led - net: hns3: add support set mac state - net: hns3: add support detect port wire type - net: hns3: add support PF provides customized interfaces to detect port faults. - net: hns3: add support disable nic clock - net: hns3: add support config and query serdes lane status - net: hns3: add supports configure optical module enable - net: hns3: add support query the presence of optical module - net: hns3: disbable pfc en before the reset - net: hns3: support set pfc pause trans time - net: hns3: add support query port ext information - net: hns3: add support to get/set 1d torus param - net: hns3: add supports fast reporting of faulty nodes - net: hns3: add support configuring function-level interrupt affinity - net: hns3: add support clear mac statistics - net: hns3: add support customized exception handling interfaces. - net: hns3: fix miss L3E checking for rx packet - net: hns3: support wake on lan configuration and query - net: hns3: refactor the debugfs for dumping FD tcam - net: hns3: allocate fd counter for queue bonding - net: hns3: add queue bonding mode support for VF - net: hns3: add support for queue bonding mode of flow director - net: hns3: refine the handling for VF heartbeat - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process - net: hns3: add support for external loopback test - net: hns3: net: hns3: add querying and setting fec off mode from firmware - net: hns3: add querying and setting fec llrs mode from firmware - net: hns3: add querying fec ability from firmware - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: handle empty unknown interrupt for VF - net: hns3: add support for TX push mode - net: hns3: create new set of unified hclge_comm_cmd_send APIs - net: hns3: use struct hclge_desc to replace hclgevf_desc in VF cmdq module - net: hns3: create new cmdq hardware description structure hclge_comm_hw - net: hns3: fix incorrect components info of ethtool --reset command - net: hns3: add dql info when tx timeout - net: hns3: debugfs add drop packet statistics of multicast and broadcast for igu - net: hns3: remove the way to set tx spare buf via module parameter - net: hns3: add support to set/get rx buf len via ethtool for hns3 driver - ethtool: add support to set/get rx buf len via ethtool - net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3 driver - ethtool: add support to set/get tx copybreak buf size via ethtool - ethtool: set device ring sizes with RINGS_SET request - ethtool: provide ring sizes with RINGS_GET request - ethtool: helper functions for netlink interface - ethtool: introduce ethtool netlink interface - ethtool: provide link mode names as a string set - ethtool: move string arrays into common file - ethtool: move to its own directory - net: hns3: allow configure ETS bandwidth of all TCs - net: hns3: fix some mac statistics is always 0 in device version V2 - net: hns3: sync rx ring head in echo common pull - net: hns3: fix ROCE base interrupt vector initialization bug - net: hns3: add support for pf querying new interrupt resources - net: hisilicon: fix hsn3_ethtool kernel-doc warnings - net: hns3: adjust string spaces of some parameters of tx bd info in debugfs - net: hns3: add more string spaces for dumping packets number of queue info in debugfs - net: hns3: fix data endian problem of some functions of debugfs - net: hns3: add error recovery module and type for himac - net: hns3: add new ras error type for roce - net: hns3: add update ethtool advertised link modes for FIBRE port when autoneg off - net: hns3: modify functions of converting speed ability to ethtool link mode - net: hns3: add support pause/pfc durations for mac statistics - net: hns3: device specifications add number of mac statistics - net: hns3: modify mac statistics update process for compatibility - net: hns3: schedule the polling again when allocation fails - net: hns3: fix for miscalculation of rx unused desc - net: hns3: PF enable promisc for VF when mac table is overflow - net: hns3: don't rollback when destroy mqprio fail - net: hns3: fix hclge_dbg_dump_tm_pg() stack usage - xdp: Fixed an issue where the trace_mem_disconnect function cannot find the definition. - net: hns3: fix the max tx size according to user manual - net: hns3: disable sriov before unload hclge layer - net: hns3: add limit ets dwrr bandwidth cannot be 0 - net: hns3: fix always enable rx vlan filter problem after selftest - net: hns3: fix show wrong state when add existing uc mac address - net: hns3: do not allow call hns3_nic_net_open repeatedly - net: hns3: optimize the rx page reuse handling process - net: hns3: fix misuse vf id and vport id in some logs - net: hns3: make hclgevf_cmd_caps_bit_map0 and hclge_cmd_caps_bit_map0 static - net: hns3: remove unnecessary spaces - net: hns3: add some required spaces - net: hns3: clean up a type mismatch warning - net: hns3: refine function hns3_set_default_feature() - net: hns3: uniform parameter name of hclge_ptp_clean_tx_hwts() - net: hnss3: use max() to simplify code - net: hns3: refine function hclge_dbg_dump_tm_pri() - net: hns3: reconstruct function hclge_ets_validate() - net: hns3: reconstruct function hns3_self_test - net: hns3: initialize each member of structure array on a separate line - net: hns3: add required space in comment - net: hns3: remove unnecessary "static" of local variables in function - net: hns3: don't config TM DWRR twice when set ETS - net: hns3: add new function hclge_get_speed_bit() - net: hns3: refactor function hclgevf_parse_capability() - net: hns3: refactor function hclge_parse_capability() - net: hns3: uniform type of function parameter cmd - net: hns3: merge some repetitive macros - net: hns3: package new functions to simplify hclgevf_mbx_handler code - net: hns3: remove redundant param to simplify code - net: hns3: use memcpy to simplify code - net: hns3: add hns3_state_init() to do state initialization - net: hns3: add macros for mac speeds of firmware command - net: hns3: fix GRO configuration error after reset - net: hns3: fix speed unknown issue in bond 4 - net: hns3: add support ethtool extended link state - net: hns3: add header file hns3_ethtoo.h - ethtool: add two link extended substates of bad signal integrity - docs: ethtool: Add two link extended substates of bad signal integrity - net: hns3: add support for triggering reset by ethtool - net: hns3: change the method of obtaining default ptp cycle - net: hns3: fix rx VLAN offload state inconsistent issue - net: hns3: add support for FD counter in debugfs - net: hns3: Fix a memory leak in an error handling path in 'hclge_handle_error_info_log()' - net: hns3: fix different snprintf() limit - net: hns3: use bounce buffer when rx page can not be reused - net: hns3: support dma_map_sg() for multi frags skb - net: hns3: add support to query tx spare buffer size for pf - net: hns3: use tx bounce buffer for small packets - net: hns3: add priv flags support to switch limit promisc mode - net: hns3: refactor for hns3_fill_desc() function - net: hns3: minor refactor related to desc_cb handling - net: hns3: fix a double shift bug - net: hns3: add support for PTP - net: hns3: refactor dev capability and dev spec of debugfs - net: hns3: use list_move_tail instead of list_del/list_add_tail in hclgevf_main.c - net: hns3: add error handling compatibility during initialization - net: hns3: update error recovery module and type - net: hns3: add support for imp-handle ras capability - net: hns3: add the RAS compatibility adaptation solution - net: hns3: add support for handling all errors through MSI-X - net: hns3: remove now redundant logic related to HNAE3_UNKNOWN_RESET - net: hns3: add log for workqueue scheduled late - net: hns3: add scheduling logic for error handling task - net: hns3: add a separate error handling task - net: hns3: use HCLGE_VPORT_STATE_PROMISC_CHANGE to replace HCLGE_STATE_PROMISC_CHANGED - net: hns3: fix user's coalesce configuration lost issue - net: hns3: add support for configuring interrupt quantity limiting - net: hns3: clear unnecessary reset request in hclge_reset_rebuild - net: hns3: cleanup inappropriate spaces in struct hlcgevf_tqp_stats - net: hns3: Trivial spell fix in hns3 driver - net: hns3: split out hclge_tm_vport_tc_info_update() - net: hns3: split function hclge_reset_rebuild() - net: hns3: remove redundant query in hclge_config_tm_hw_err_int() - net: hns3: remove redundant blank lines - net: hns3: remove unused code of vmdq - net: hns3: add support to query device specifications - net: hns3: add phy loopback support for imp-controlled PHYs - net: hns3: add ioctl support for imp-controlled PHYs - net: hns3: add get/set pause parameters support for imp-controlled PHYs - net: hns3: add support for imp-controlled PHYs - net:hns3 Fix KABI for The dev_version & caps element is added to the hnae3_ae_dev structure. - net:hns3 Fix KABI for deletion of hnae3_unic_private_info in hnae3_handle - net:hns3 Fix KABI for ethtools->supported_coalesce_params - net: hns3: split out hclgevf_cmd_send() - net: hns3: split out hclge_cmd_send() - net: hns3: refactor out hclgevf_get_rss_tuple() - net: hns3: refactor out hclge_get_rss_tuple() - net: hns3: refactor out hclge_set_vf_vlan_common() - net: hns3: use ipv6_addr_any() helper - net: hns3: refactor out hclgevf_cmd_convert_err_code() - net: hns3: refactor out hclge_cmd_convert_err_code() - net: hns3: remove unused macro definition - net: hns3: change hclge_query_bd_num() param type - net: hns3: change hclge_parse_speed() param type - net: hns3: clean up unnecessary parentheses in macro definitions - net: hns3: remove the shaper param magic number - net: hns3: add a structure for IR shaper's parameter in hclge_shaper_para_calc() - net: hns3: add support for TX hardware checksum offload - net: hns3: initialize the message content in hclge_get_link_mode() - net: hns3: add UDP segmentation offload support - net: hns3: use capabilities queried from firmware - net: hns3: add support to query device capability - net: hns3: add device version to replace pci revision - net: hns3: remove some unused macros - net: hns3: remove some unused codes in hns3_nic_set_features() - net: hns3: fix two coding style issues in hclgevf_main.c - net: hns3: remove two unused macros in hclgevf_cmd.c - net: hns3: remove an unused macro hclge_is_csq - net: hns3: fix a print format issue in hclge_mac_mdio_config() - net: hns3: remove some unused fields in struct hclge_dev - net: hns3: remove two duplicated register macros in hclgevf_main.h - net: hns3: remove unused struct hnae3_unic_private_info - net: hns3: remove some unused fields in struct hns3_nic_priv - net: hns3: modify an incorrect type in struct hclgevf_cfg_gro_status_cmd - net: hns3: modify an incorrect type in struct hclge_cfg_gro_status_cmd - net: hns3: refactor hclge_query_bd_num_cmd_send() - net: hns3: refactor hclge_config_tso() - net: hns3: remove a duplicated printing in hclge_configure() - net: hns3: modify two uncorrect macro names - net: hns3: remove a redundant register macro definition - net/hns: Remove custom driver version in favour of global one - net: hns3: clear port base VLAN when unload PF - net: hns3: reject unsupported coalescing params - net: hns3: modify an unsuitable log in hclge_map_ring_to_vector() - net: hns3: remove unused macros - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() - net: hns3: fix compile warning without CONFIG_RFS_ACCEL - net: hns3: Use LLDP ethertype define ETH_P_LLDP - net: hns3: return 0 and print warning when hit duplicate MAC - net: hns3: make function hclge_set_all_vf_rst() static - net: phy: Move linkmode helpers to somewhere public - net: hns3: Add unlikely for buf_num check - net: hns3: Add default irq affinity - net: hns3: Only update mac configuation when necessary - net: hns3: Fix for loopback selftest failed problem- !2803 drivers/gmjstcm: fix a dev_err() call in spi tcm device probe - !2841 drm/qxl: fix UAF on handle creation - !2785 [openEuler-1.0-LTS] SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers - drm/qxl: fix UAF on handle creation - !2809 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: media/dvb: Use kmemdup rather than duplicating its implementation - media: dvbdev: Fix memleak in dvb_register_device - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe - SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers- config: arm64: Build HiSilicon SPI/SFC driver as module - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: extend version checking compatibility - spi: hisi-sfc-v3xx: add support for IRQ mode - spi: hisi-sfc-v3xx: factor out the bit definition of interrupt register - spi: hisi-sfc-v3xx: factor out bus config and transfer functions - spi: hisi-sfc-v3xx: factor out IO modes configuration - spi: Remove CONFIG_ prefix from Kconfig select - spi: hisi-sfc-v3xx: add error check after per operation - spi: HiSilicon v3xx: Use DMI quirk to set controller buswidth override bits - spi: HiSilicon v3xx: Properly set CMD_CONFIG for Dual/Quad modes - spi: Allow SPI controller override device buswidth - spi: Add HiSilicon v3xx SPI NOR flash controller driver - spi/acpi: avoid spurious matches during slave enumeration - spi/acpi: fix incorrect ACPI parent check - spi/acpi: enumerate all SPI slaves in the namespace - driver core: platform: return -ENXIO for missing GpioInt - driver: platform: Support parsing GpioInt 0 in platform_get_irq() - spi: spi-mem: Fix build error without CONFIG_SPI_MEM - spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum - sh: Replace CONFIG_MTD_M25P80 with CONFIG_MTD_SPI_NOR in sh7757lcr_defconfig - powerpc: Drop CONFIG_MTD_M25P80 in 85xx-hw.config - m68k: Drop CONFIG_MTD_M25P80 in stmark2_defconfig - mips: Drop CONFIG_MTD_M25P80 in various defconfig files - ARM: shmobile: defconfig: Refresh config CONFIG_MTD_M25P80 for v5.4-rc1 - mtd: spi-nor: core: Fix an issue of releasing resources during read/write - mtd: spi-nor: fix kernel-doc for spi_nor::spimem - mtd: spi-nor: Pointer parameter for CR in spi_nor_read_cr() - mtd: spi-nor: Pointer parameter for FSR in spi_nor_read_fsr() - mtd: spi-nor: Pointer parameter for SR in spi_nor_read_sr() - mtd: spi-nor: Stop compare with negative in Reg Ops methods - mtd: spi-nor: Prepend spi_nor_ to all Reg Ops methods - mtd: spi-nor: Fix direction of the write_sr() transfer - mtd: spi-nor: Move m25p80 code in spi-nor.c - mtd: spi-nor: always use bounce buffer for register read/writes - mtd: spi-nor: Add support for mx25u12835f - spi: add support for octal mode I/O data transfer- !2793 handle uninitialized numa nodes gracefully. - !2789 linux-4.19.y inclusion - arch/x86/mm/numa: Do not initialize nodes twice - mm: handle uninitialized numa nodes gracefully - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG - !2713 Fix netfilter conntrack - !2651 sched/membarrier: fix missing local execution of ipi_sync_rq_state() - tcp: fix delayed ACKs for MSS boundary condition - tcp: fix quick-ack counting to count actual ACKs of new data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - team: fix null-ptr-deref when team device type is changed - af_unix: Fix data race around sk->sk_err. - af_unix: Fix data-races around sk->sk_shutdown. - af_unix: Fix data-race around unix_tot_inflight. - af_unix: Fix data-races around user->unix_inflight. - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr - net: read sk->sk_family once in sk_mc_loop() - skbuff: skb_segment, Call zero copy functions before using skbuff frags - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU - tcp: tcp_enter_quickack_mode() should be static - net: Avoid address overwrite in kernel_connect - md/raid1: fix error: ISO C90 forbids mixed declarations - md: raid1: fix potential OOB in raid1_remove_disk() - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer - autofs: fix memory leak of waitqueues in autofs_catatonic_mode - pstore/ram: Check start of empty przs during init - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() - fs: Fix error checking for d_hash_and_lookup() - !2767 crypto: hisilicon/qm - alloc reserve buffer to set and get xqc - crypto: hisilicon/qm - alloc reserve buffer to set and get xqc - !2760 fs: lockd: avoid possible wrong NULL parameter - !2164 Net: ethernet: Support 3snic 3s9xx network card - !2605 add CONFIG_NGBE for Wangxun 1G NIC for aarch64 - !1873 [openEuler-1.0-LTS] Add Phytium hda driver support - !2564 [openEuler-1.0-LTS] Add Phytium i2c driver support - !2636 kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - fs: lockd: avoid possible wrong NULL parameter - !2754 Sync LTS patches for openEuler-1.0-LTS - !2758 crypto: hisilicon - qm obtain the mailbox config at one time - crypto: hisilicon - qm obtain the mailbox config at one time - regmap: rbtree: Fix wrong register marked as in-cache when creating new node - regmap: rbtree: Use alloc_flags for memory allocations - !2730 PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently - !2722 net: sched: sch_qfq: Use non-work-conserving warning handler - !2650 sched/cpuacct: Fix charge cpuacct.usage_sys - PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently - net: sched: sch_qfq: Use non-work-conserving warning handler - arm64: config: add CONFIG_NGBE for Wangxun 1G NIC - netfilter: conntrack: fix infinite loop on rmmod - netfilter: conntrack: do not auto-delete clash entries on reply - netfilter: conntrack: allow insertion of clashing entries - netfilter: conntrack: split resolve_clash function - netfilter: conntrack: place confirm-bit setting in a helper - netfilter: conntrack: remove two args from resolve_clash - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash - sched/membarrier: fix missing local execution of ipi_sync_rq_state() - sched/cpuacct: Fix charge cpuacct.usage_sys - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - hda: add phytium hda driver - hda: add phytium hda driver document - i2c: add Phytium i2c driver - i2c: add phytium i2c driver DT binding docs - Net: ethernet: Support 3snic 3s9xx network card- Add feature for nfs client support multipath- mpam: support ACPI for MPAM 2.0- perf metricgroup: Fix find_evsel_group() event selector - perf metricgroup: Fix for metrics containing duration_time - perf metricgroup: Fix system PMU metrics - perf metricgroup: Return error code from metricgroup__add_metric_sys_event_iter() - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics - perf test: Fix metric parsing test - perf test: Fix msan uninitialized use. - perf test: Set NULL sentinel in pmu_events table in "Parse and process metrics" test - perf expr: Allow numbers to be followed by a dot - perf expr: Test parsing of floating point numbers - perf jevents: Add support for HiSilicon PA PMU aliasing - perf jevents: Add support for HiSilicon SLLC PMU aliasing - perf jevents: Add support for HiSilicon HHA PMU aliasing - perf jevents: Add support for HiSilicon DDRC PMU aliasing - perf jevents: Add support for HiSilicon L3C PMU aliasing - perf test: Add pmu-events test for aliases of hip09 ddrc pmu - perf vendor events arm64: Revise hip08 uncore events - perf test: Verify more event members in pmu-events test - perf jevents: Support ConfigCode - perf parse-events: Set numeric term config - perf test: Add pmu-events sys event support - perf jevents: Print SoC name per system event table - perf pmu: Make pmu_add_sys_aliases() public - perf test: Add more pmu-events uncore aliases - perf test: Re-add pmu-event uncore PMU alias test - perf pmu: Check .is_uncore field in pmu_add_cpu_aliases_map() - perf test: Test pmu-events core aliases separately - perf test: Factor out pmu-events alias comparison - perf test: Declare pmu-events test events separately - perf jevents: Relocate test events to cpu folder - perf test: Factor out pmu-events event comparison - perf jevents: Make build dependency on test JSONs - perf pmu: Save pmu name - perf pmu: Simplify arguments of __perf_pmu__new_alias - perf pmu: Add alias match method to fit pmu_name of HiSilicon DDRC - perf pmu: Fix alias matching - perf tools: Fix pattern matching for same substring in different PMU type - perf jevents: Add test for arch std events - perf metricgroup: Support adding metrics for system PMUs - perf metricgroup: Support printing metric groups for system PMUs - perf metricgroup: Split up metricgroup__print() - perf metricgroup: Fix metrics using aliases covering multiple PMUs - perf evlist: Change evlist__splice_list_tail() ordering - perf pmu: Add pmu_add_sys_aliases() - perf pmu: Add pmu_id() - perf jevents: Add support for system events tables - perf jevents: Add support for an extra directory level - perf jevents: Tidy error handling - perf jevents: Fix event syntax error caused by ExtSel - perf jevents: Fix getting maximum number of fds - perf jevents: Fix event code for events referencing std arch events - perf vendor events arm64: Add Hisi hip08 L3 metrics - perf vendor events arm64: Add Hisi hip08 L2 metrics - perf vendor events arm64: Add Hisi hip08 L1 metrics - perf pmu: Add pmu_events_map__find() function to find the common PMU map for the system - perf test: Handle metric reuse in pmu-events parsing test - perf metricgroup: Make find_metric() public with name change - perf metricgroup: Fix uncore metric expressions - perf test: Free formats for perf pmu parse test - perf metric: Do not free metric when failed to resolve - perf metric: Free metric when it failed to resolve - perf metric: Release expr_parse_ctx after testing - perf test: Fix memory leaks in parse-metric test - perf parse-event: Fix memory leak in evsel->unit - perf evlist: Fix cpu/thread map leak - perf metric: Fix some memory leaks - part 2 - perf metric: Fix some memory leaks - perf test: Free aliases for PMU event map aliases test - perf metricgroup: Fix typo in comment. - perf list: Do not print 'Metric Groups:' unnecessarily - perf metricgroup: Pass pmu_event structure as a parameter for arch_get_runtimeparam() - perf jevents: Add support for parsing perchip/percore events - perf jevents: Add new structure to pass json fields. - perf jevents: Make json_events() static and ditch jevents.h file - perf metric: Rename group_list to metric_list - perf metric: Rename struct egroup to metric - perf metric: Add metric group test - perf metric: Make compute_single function more precise - perf metric: Add recursion check when processing nested metrics - perf metric: Add DCache_L2 to metric parse test - perf metric: Add cache_miss_cycles to metric parse test - perf tests: Add parse metric test for frontend metric - perf tests: Add parse metric test for ipc metric - perf metric: Add events for the current list - perf metric: Compute referenced metrics - perf metric: Add referenced metrics to hash data - perf metric: Collect referenced metrics in struct metric_expr - perf metric: Collect referenced metrics in struct metric_ref_node - perf metric: Rename __metricgroup__add_metric to __add_metric - perf metric: Add add_metric function - perf metric: Add macros for iterating map events - perf metric: Add expr__del_id function - perf metric: Change expr__get_id to return struct expr_id_data - perf metric: Add expr__add_id function - perf metric: Fix memory leak in expr__add_id function - perf metric: Add 'struct expr_id_data' to keep expr value - perf metric: Rename expr__add_id() to expr__add_val() - perf pmu: Improve CPU core PMU HW event list ordering - perf pmu: List kernel supplied event aliases for arm64 - perf tools: Add test_generic_metric function - perf tools: Release metric_events rblist - perf tools: Factor out prepare_metric function - perf tools: Add metricgroup__parse_groups_test function - perf tools: Add fake_pmu to parse_group() function - perf parse: Factor out parse_groups() function - perf tests: Add another metric parsing test - perf pmu: Add a perf_pmu__fake object to use with __parse_events() - perf parse: Provide a way to pass a fake_pmu to parse_events() - perf tests: Factor check_parse_id function - perf tools: Add fake pmu support - perf tools: Fix term parsing for raw syntax - perf parse: Add 'struct parse_events_state' pointer to scanner - perf stat: Do not pass avg to generic_metric - perf tools: Allow r0x event syntax - perf parser: Add support to specify rXXX event with pmu - perf metricgroup: Remove unnecessary ',' from events - perf metricgroup: Add options to not group or merge - perf metricgroup: Remove duped metric group events - perf metricgroup: Order event groups by size - perf metricgroup: Delay events string creation - perf metricgroup: Use early return in add_metric - perf metricgroup: Always place duration_time last - perf metricgroup: Make 'evlist_used' variable a bitmap instead of array of bools - perf expr: Migrate expr ids table to a hashmap - perf test: Provide a subtest callback to ask for the reason for skipping a subtest - perf test: Improve pmu event metric testing - perf expr: Parse numbers as doubles - perf expr: Increase max other - perf expr: Allow ',' to be an other token - perf expr: Allow for unlimited escaped characters in a symbol - perf test: Test pmu-events aliases - perf pmu: Make pmu_uncore_alias_match() public - perf pmu: Add is_pmu_core() - perf test: Add pmu-events test - perf pmu: Refactor pmu_add_cpu_aliases() - perf jevents: Support test events folder - perf jevents: Add some test events - perf tests expr: Added test for runtime param in metric expression - perf metricgroups: Enhance JSON/metric infrastructure to handle "?" - perf metrictroup: Split the metricgroup__add_metric function - perf expr: Add expr_scanner_ctx object - perf expr: Add expr_ prefix for parse_ctx and parse_id - perf expr: Fix copy/paste mistake - perf expr: Fix memory leaks in metric bison - perf expr: Make expr__parse() return -1 on error - perf expr: Straighten expr__parse()/expr__find_other() interface - perf expr: Increase EXPR_MAX_OTHER to support metrics with more than 15 variables - perf expr: Move expr lexer to flex - perf expr: Add expr.c object - perf vendor events intel: Add NO_NMI_WATCHDOG metric constraint - perf metricgroup: Support metric constraint - perf util: Factor out sysctl__nmi_watchdog_enabled() - perf metricgroup: Factor out metricgroup__add_metric_weak_group() - perf jevents: Support metric constraint - perf tools: Update copy of libbpf's hashmap.c - perf tools: Sync hashmap.h with libbpf's - perf tools: Grab a copy of libbpf's hashmap - libbpf, hashmap: Fix undefined behavior in hash_bits - libbpf: Fix libbpf hashmap on (I)LP32 architectures - libbpf: Define __WORDSIZE if not available - libbpf, hashmap: Remove unused #include - libbpf: fix missing __WORDSIZE definition - perf parse-events: Fix an old style declaration - perf metricgroup: Fix printing event names of metric group with multiple events incase of overlapping events - tools bitmap: Implement bitmap_equal() operation at bitmap API - perf metricgroup: Fix printing event names of metric group with multiple events - perf list: Hide deprecated events by default - perf tools: Move ALLOC_LIST into a function - perf stat: Fix free memory access / memory leaks in metrics - perf vendor events arm64: Add some missing events for Hisi hip08 HHA PMU - perf vendor events arm64: Add some missing events for Hisi hip08 L3C PMU - perf vendor events arm64: Add some missing events for Hisi hip08 DDRC PMU - perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname - perf jevents: Add support for Hisi hip08 L3C PMU aliasing - perf jevents: Add support for Hisi hip08 HHA PMU aliasing - perf jevents: Add support for Hisi hip08 DDRC PMU aliasing - perf pmu: Support more complex PMU event aliasing - perf metricgroup: Support multiple events for metricgroup - perf metricgroup: Scale the metric result - perf pmu: Change convert_scale from static to global - perf metricgroup: Remove needless includes from metricgroup.h - perf metricgroup: Add missing list_del_init() when flushing egroups list - perf tools metric: Don't include duration_time in group - perf list: Avoid extra : for --raw metrics - perf jevents: Use nonlocal include statements in pmu-events.c - perf jevents: Remove unused variable - perf stat: Fix metrics with --no-merge - libbpf: add resizable non-thread safe internal hashmap - perf list: Output tool events - perf evsel: Support printing evsel name for 'duration_time' - perf stat: Implement duration_time as a proper event - perf stat: Revert checks for duration_time - perf stat: Implement duration_time as a proper event - perf stat: Revert checks for duration_time - perf tools: Fix legacy events symbol separator parsing - perf list: Display metric expressions for --details option - perf stat: Move 'metric_events' to 'struct perf_stat_config' - perf stat: Pass a 'struct perf_stat_config' argument to global print functions - perf stat: Pass 'struct perf_stat_config' argument to local print functions - perf stat: Add 'struct perf_stat_config' argument to perf_evlist__print_counters() - perf stat: Move STAT_RECORD out of perf_evlist__print_counters() - perf stat: Introduce perf_evlist__print_counters()- scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids- spec: fix the problem that patches are not packaged in src.rpmdc-64g.compass-ci 17248308184.19.90-2408.5.0.0292.oe2003sp44.19.90-2408.5.0.0292.oe2003sp40-metadata_list-compact_tlv-bpftool-debuginfo-4.19.90-2408.5.0.0292.oe2003sp4.aarch640-metadata_list-compact-bpftool-debuginfo-4.19.90-2408.5.0.0292.oe2003sp4.aarch64debugusrsbinbpftool-4.19.90-2408.5.0.0292.oe2003sp4.aarch64.debug/etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/lib//usr/lib/debug//usr/lib/debug/usr//usr/lib/debug/usr/sbin/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-openEuler-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter \004, BuildID[sha1]=5d80a40e82b33b09ef489db4cf2462232bb76ded, for GNU/Linux 3.7.0, with debug_info, not strippeds0}Z:outf-85f08dd71d12cb74080c01835d1179fb487e280dad678838d91b06bbc049c3a4a?p7zXZ !#, ] b2u Q{LYZ"7fSaB/i2m}$zާ[Z^ 1+qٸznc<1TNCFk*hmr,/H%քCb;iʹ#ry@k aH* Zp@"p\ƺj4$2[ \3H,>1ꊂE%L^~#XJ</MFN tJt'R*1rb4ffƕGZƌ!{=T&g&Is= ިE8zYj"3Mh+4.׉q6յ ӂ:6|s^x杈0WppcϨ RzQWH&e ?4m+0[ ;ݯ]iAi]ьE䀓w*-ש\\)O|Ad>1E s:RRW #w:NiOH8D^UOi)`<}/<׍#|C&/QQUB+}>NW܈fYINhXRV&j ,V#gN 'R]UDbP-o6^~0'Q/Z‚ϖ.!%o#0BQ /t^Fo%U5W̵]Ez0[>Zzqp8&t:b˜@/%dPLl65SXm>}=&)$݆[5K/ Аd{CԻ 绔dPX)@WV2le%"MȉMS$RBE Y&}˯^;+a M;t'֌C| ;]]z=Oo:5~M9[a(lS*/7<_OǮ= {n-^e/\,mI#4 {`of+za~Ӂ}H{o_G}Y(c%J۝vh* @Dwtׅecc9T8Al&銛e ϑj'`JzVi~XV 0'ɐͶ{,L!`3[/:Ix%GiyC Ik.2kyMUYE8j9/{]z?NUcŗ7@'Oі꼧 bdŅp\Hrx[ o\|L1A83vSxnw5!TԵ]E9ys s+OKaej>yf.&v}%!t AV0\0 t"?}T&+'k_e zEh(ߏf^WvS3LPUFZ0Yxqhd%45E݂r>^u%}ezdj ywt:o?jf&y&)mA~b*Yٙ5 vDnn* -6\.aOSߙ?4c ͏ 혣E>]I3}m1gU#b ϨZHFW-\#2[I]}eej_n.Iŷ`rgm')ʲ[x͹ɑp)"f]$3Pӫ'B#!ί,K{7?`YF*~kfpZBB"}J.FU`&] 'iPkįCGHHeG09uxa֊v{E~t੮q]ǫQbQ͋-yօia@w夹s| '!p,J&[BmϋQ"X3&I,Re𘞅`V@CXͽr:*{?/L)c<>ij[$c5c^V0U{' KL x#4\Q N-p$eR;7  e `A7~mN yzhW#{iZz_[dϫw7A!a^V8K17{ >LSm8RP|!ۆ(07^{ cB1efi~U6wOUrîjjyNarSFX*Ԡi:!R7{([fhxWix֛$9 WO1ܼ%uT%b \,St1G +]9[k&@"e ݌Z3Huߜ{Wq R6qI{ݱdaJII@cա}V,-ӌ4n @Ict^ w *>B)7!gWus$ouz1=!J>Gzc'ثxWܷ!d:zG%=qNH^m}.$12ڊ}@I0n%Uld5,}S\DkQU}FۤqKuxWNH  TH}GΝp)6 F5X+ٸ'ANީFq "o/{P({欞@y}سѝ pR%Y펓jkwr=a8ڬQm%:Gi ̛̠=aI//c0pKIC#:dn uHe֓AF $DGO|ҕƱM1,ɏ mvnY:+>T%rQLڙ:6%=R\vT "KX>Q"b:S Z9C}Lpo$8 ㇞۷KaP:]/0tRv^#4$/Fx.*p.fefC!"I3X{,,3B'd 4zWfe# x?U;x9--{sD>n5v4&+tw7!Q x`~ lJ"Vo>7B?"C@':gpKhw"1",NUgr#)R+cCGִJ[pZ9=ʶN:mE*6ɟEAJυ*4b>'u>fjpp#tvASD/m?+XrCh[*m$GOBQtlciv"g&beqan_cf[Q[g92(;#"ĺf+I(-?`APVwYPbc*R$@G")"w,ha az[B0[)h`zΜF@Ձ|ZwYO /aε} (4@pGݐL+JX-Ϊ(_"Klb[lfN,nDn)iP.LEíNf)cl k%EMƹlOCޙe ʾiSd,{J$E~ni.1 qt {B2e+%y ?Ru<7u#J39[EXvges㙢V3>| 7:$n+u:\%! I{)}v8yNw]7vL:7sܟt(L 7!LK+|Nq ݸG~,+N$ઑKbyg|QL.q|JD < Lb| %T%t_!18yGU4nu%FNhI\B^Q@A#.P) "+ Di~!mơoKYI6 z:7M:=xA2,{&=K9i/CQR9aы2G0 rwSEOِ17-!N\v{{H$$r2G9Q|2ثM /J .lПd7c==+FTJYQ7Pۖ= ^?t9ݑ롲"SS/Oizp`ͼg*Ѫ/~{c D:9+u|FIHgzr!Mע[W_{&9ưȆ$wq=~<Ƥ̢|iП7[ +WJ}>vuf`2LWfDP&uji/FmFN䅅X;*A ko4=l3ESN!"'/< 6;208*c X>8(F1l_N~G*Z> o\dH*GDl |f (3a%=yW]#iNoلH9VN4 a$[ ώF]fE0vCB_t15 5[hq)w{O 0I?ݼӡ.٬LUwS-q[İ` BZ(FbJlV4pLa]2\Nf)D;{'<Nvnm"N~'XCx8)A,q;wʄ|"lE&|քD)󍿈!}ZNQ I_ݩohrin~*_qm*vc){wc#<._"Ȳ bo-ʈOk}VV̨ ka[Ns'H971uV8)2CE 2QJvΙ;s z^c1ۈB0p~e(x %|NIp Rs @@;G0U6jU=C'OlJXmq5_]0RG C6Ш_-QQUO ~WEbDEf3[ԡE_f˩uC? H6djUd ~b9Nc[˯gL . rCu\+*؊D{Hg6(z5sA*fP:P71Vڜ`GoBB~T]mK,?co  DNg%Tg_#2U)"Xšvxhg|~r- 3>17K׹jex/dL޿ĴP>l/ň2m wlo,ew)Mra_LϹEHk&&3ޭ!>'"%XWg@ـ9w6N%!:ax v mw=N+| mFk?c`<32+0+pnwo`UIc؄f n to~-wr%MC͋mڈU,ͽc!gդdF҃[EbV&3x!EˬX Vס6a.D x ^UWk_e+|&Ǒlc0lZjGd NO'EL&|W2^ ֒ ؗluLZԼ'2-b@H#ʏ1e_P#e@s[ ە)x"MMz4~;~ȏh4rETV_ =JGR)E:29cMDN_DőO N85SDObPZT8Pot}lkTs!kGF`2Nu#AF-Q NJec9`#[W%\s> L߰gM/;^A 1}ҩ=څ#NUG&-y$fc > GdLUx05*LE-ZYϢ/fEaBP2r1"7)( mGWi/~ߵjX.7`"xFR 泩 /};n  ѴJBubyU\iZ+מian3|l~V@JLy"BweKGS3My Z/`(HX>#Űc>{Y݈9ΐcODQMor-q3Dn=9M ׈̞۲z{E~wLO4hPC=mKTtgrȥ'c9nMk-a7p&Dcm:#9Q9fFk%'9f_3j2$:l)l3?GJʔȕ6Su k9Wu msw˝:zE^E9%IgD|H\F oR>_qG5M{la|mVH˝$ul}M@{Y,Uȋ-.~:ϰʒ}ER>а`.Jx0/\aXΌd*Ly#ևr8h 5 %2-O$v"?~zJcC9q%Pd3+$;(a0dUe·vbr[},z ;t*CN[FJ*(#eN:R ,VglMȮ 3@N'ߖ}ƭe_rTF _W$M.>vi3'/6 ? P_e?Bs.V4lUuM,ɕZ yqhY.<)b}t3 e0 6'RfsW$֠_Fj|RMhbQpWETѲ{(*5R*fg"w+JI*EvYybc2S9-V`E{jL;x%oM aU3e~=cPx*$xOtJBsU(1ty4.7JՄ5g|̐! A#oOfQag/}Oe g3lr ʳV18j |U—qG$7nRĊ}~3SSmspR{ӓA]=]A塜`}: 5CMK0ɘ8Gb0@Xb(,rkfiSV9\:g[#K띙?j5l<@N~¤*6Ŵo+us6ŅN.iؤB/>f WS}o+WMA]i3ÐN` CyGaoGBDY²}87PGV\hܴbi%cd6Sv~)xSS3m=|/@F.#ȹr_,\̘2U쬁)pxpܸ#hhWYrkuVȁ>>nrEbU^t^6spfn:\ g\">hnC+:{G B^ZDvC$$Rrn1 Z72)-dEwGu ٷ p /r#dR7k"Z!,.j-O&i˧/i-~$nWVb !,HL/onxjnp LV v<Z@7 L:Ӻ/:OW_8eCAH#,,A~gEO̩{ '`9%]W=1/ #<,Ԣϕ@oIP4Ʈgb(r|T8!ƹ$ˑrƵ~:$/rl)4M,j;0lbfN;m__HR kɵ/X;C&7:sFbL8?=XfmtqjMlNUD:Xt "65mId/v-Z87`D]7̎[FL,KDP*YjMX4)U@ );Rg!As4s^ %c<Ӣ}&u$"H5]XHv[{GNݖt {0Џ6cXxx.XgrӲbVF8,6E|~\(f/߽%Ā 7iW*Dle!Sa@qVҎ}d2uz)8#r|㶰=wD{8Ź}e=jl@wA+^Ev8YKyZT1aw)jC%Nr,~-"?q7QZ) qݼ&IFH%W4Msz6ܭzmR6 밫>T}UR{&hO#=SA%eE% bu%8k+:,.v0,4W>&%@oUIߴq+?ƭyjn$_kGRGUo8TO\B IHnbF="Ena!X V f03hMϛsd ">N)=L a+X'iZSmeFM5Oo3X_i#}3|?*G;\83 ,?-a^U'n;jrvgaʡ 6 aTv{ky!2Xc9qNӻz4P8ӋԳU/@_ي9l*p1jvWljｒ/6La63~2%Y-CB6:,hm TLotvt-#:C\h@u@%#> Ô4ђ|j[XU-ӣ,ua}u`ԛ N)m|V6 ozQeӎ~EGk+k> yd,% "_˘ 4+]JVwHR0TPxp[!YǸdyy`+HB8#)EѷZ.Z > 0^SJ)RU *u`̈,͆3l gLqןn!K=q bg%p/VÞ|ޥۿhz=?%ۗ Wn+ 5=LNSW`j"n׉Wդ{|b;dlb Nܚ@UUpJh 0Z:_V\{-R}ξe2gܝ(,9-r]Q_C Z [oI# 2 Ubi*rêVwr1Ι*wYtN@Ukk TSь@a?Nj{*^p#۷}/vf>]nj 3F䶫&ܿ=ַ.`֦G( k0w-iM:YX|5ʲ)snB|$+ͮ>[=etc)SowO,Ƀ5f?EFÔUţ5gcG_ZH\5M/y^cq=сWR/noǙG$ :G#+cِRǖ\&0M'hoޢ?D,)aPStaHONz K`" İXvy\9cҙ>6 րDppaДnW֨y~&ͲΏZf*f!~-۩` _s6.<= : ]{PvXt򷫺N\yV8 ӎн3B7T MCk.{iCo=_$R $8$R<5^sNu tH?]^GN&Bݽ3a|Tr E%zWE3]Qp}e_i3?|Gr&:ItB:e8IAH9q*#@b`7Xؑҥ%j~݉ٺ] g1߁N}uq4bb=(,/1o=w(?Ơ儹/[1ʄ_vKժOLܠÓ D P|$lk vk7&RҞ59Vѝ枦+ո"d ;9LO}妠I;P4xay8mP)Cɔ1,rQ8Q!k8sR''}X5Dmjw|P 3c*izj™KW5F0 O"} 1΃ : sR&̳ F0TQ R+ld =Q+-o9q!|+]{ ʪNY-D6Q`6Z,&$;"zn3яi{,y9vy:$}ѣt'=o\&UTDXL%1o;`?q8Q$Sf?[6pM_1R5RDN6uϻ4i NYd7.[GWcE;[ t\q)U o]+V>s&+Os.#d\}>'O:Orb#T肭g2fɤbNl!5Wֱ3cG䀣H˯SR 63)ِ IR ~BNy'+ jV=4}sn >/-B%o >"QML"[q>6=҇er/-p[ 7G}8i<ͳ`͟f5y':%ivOsFHTڜg|Yg4a!+6kp8@V,GB Jxx@ |n1$/QTji=Q&`-Ӛ:}"$EHqZsY V_t26c7ͬrblm@9b9_Sf7ŌKLb4*ePܛ8bK0Чe 0a{šF+Ksjݦ.z\'$jㅨ~O>BkP)tf+ܖ_QDvshe:֨H[B[]ۆu smo٫?K1DsA@ztS%_į,$ʩ9YEcw`UBF&HJ7AfQ-::10[_ׅG%Z;t"LOOF\Tf&`lxk+,e\V 'Jʾ(/뵜]  6,Pf-H#mRX&SSS>^ݮNQJJ#e!ÿ=߾uĎOLs "4I25@ݿ7ɄA10B x챠{7)ⱚa䑋? p;| N8r p:aM|2yKwKl5"@Ѣ$>?oqlz)i Jb$0rS+H;Hi,C 3)YHѯ4{2VhoR bI{ ^穘FqAŋMR H80^;!D<%oGVlS~Q!cӣ g9Zn'N&jӴ}7r[`_{+|bG^-)Ct0GBG V5[,q`ܬwmM060#h~b$KE)ދX[YS\PSb#N^EW '9h?#tW6*X< vA_&,,7cgyw IDO9]u;u룐fI}g\7C˨J2ҖHfC9m0AC^,8ٱ:$<3i'mGӾJ[ Z^_H|.JQm:^bY~f+I[}z7Gi~qSn#wv#D9h0xZ^AX d)"jVE…z85H꼿x 'ݓU[*tt,IзlYYh6},+_jMК6[$-Z@sYF t&}똝/bJ#Q_Gf+H.(P0So* AKfswmFϋ=8DÂN(7c󞒴CR(U'|q+P4V(c={v>x*>۰W_񿽰-bl}giQO| ZӲOsezc!Uu=S9 9e6+ y\CƐ@P y:j8&qp_tCaDT;Jn0<ݩWE]%sյʆ\,,Vp|{Lt)T9a-W+p9&F݇aR->B'hنq^֣xqK*&DL %}9(%vcErB|:-^M)l{й_e\AS{2pő\#m$קHj|rKj :JZϾb0NB-ujj\Q&ĉNrb ufXR1 vCm*ELZnե Bv m_5U}YA;⭩ m{y)#XC& 36H0 ĹF>ڍ9+< >n7>^aG19G{֭'6ZBVއG7G TL/&%Z1ݑB2}, |91',o{l(ޕVfs.[2|k}"{o2{' :, 5Ҧ L;0?ϩb '5=ӿ#PiY b?D\bdi@1+6X8{eHIǟ;>0IEDQe?>YAV}؊Lq 4"ٕ:F%|I2оN46YB5C9ĊF-pnW~L¦fu5{ i&j/ˆtUj(N4yК26Aĝ4LiˋĂ"ȎMz5o1WMKdOb`|ר Q;FBi$~]Zޟvc|W) d_T+N1lRM&rehDTvM e# $gpn= x$U9,BJC c^UGbFG,?(UGyT^tMXěPTF~ϒnZ=\֥L&&aW{BeZ@ ?O0ۇ Tg=Jh n.B]\q{ wI҄≀2 XZ.AZT',k7=ce淚sHlBZBzacdJk#ZH2IR%͂*l|&pDCI@X1fV7卂6i•qA`dPL֕C$M+`QѷZ&8? )m4Oڙ[LJ $8>ՀpwzCQ5e[V#ovǽ'~1pki>;5B&tontsY췏_Pͥ=Tr3e3&W6(E!BuJk7vO,UiQQCsa_m*!|ʹ3h}H-н8Se3lw"Uw \>h`(\k\ѴQ.75P;"9gX0 -lr,+/p 48eb2ᣠPЏc 9upMobK4R='U >y1 ~ 㝤͕!3LO ˹v/?M9nll]D+è+zͦ._XڗgfC7da7|Ӵm@%.r~p4 8]ֺr0 ͊3 '7Lv7z a ?TYQ\3< ͤU7t&3JoNݕ_ 0d+Uz?A5Uc;m[4SS,Uz>2A+AcFaiTij(!rtvG(=Mi}V(Knw nȋߎXV6~0+ts>ȳYwYLydj} )MI۶{AP ղjp V[R6h9n&e1d+5]=Eą$5-Gk "BFIQ9VytP.}ｬ\gg cA9bmL 鮟vum=`cCQD (@JǞڬ$?]b2TьȿMb7 悥ap&?ӠE>(>Ewβ؄*OHA(n5q 2BP9<_iGS,N{$m yoMcj*; n2l.L`Xə-]x'2a偑=4\:x6 k6_ԡ;pB~C.2lsĈw\Ҽy5&Q;Q"V&5 %v:"UO >AU 90RgJa1Z75jAA'ac ZQ則;gh)7Vq39<"GgnUN+ִ1g߀H"rkU:(^(k\;犹0lSBI}`&C*S_ `Y|ͳ *j\:-;V@7,^OU\ Lխ -£cr,x;"R"7/<3[bI7pvIèn\p(G0Rl:  +\}PITU"ۢg'E+ͫK^k$_5s¸1kѨX{NazxeY3` ߙފ^ڵ|B$S7d^ 8ܶk,5h/Ǯb/iL puynz|ZW-70oDLDra!g}35FQU(^7<8VڜO&Z7FQ=)Rm,АB 79Lxڞ~&$2P(9cSA!Y$u|bOkіK`Ar\GZcnY:=Ivx-;(;eu"^i7_ԓD|UN~==QDh*U;rBwGe55g@Tǯ=^/U9܄5 Yt IIU*_(ʿ>2gYoC>0LUյ dрUH|5 E3[Ϋ1f;hȞ$^c1'VM2uZ(NhR|ipx 0Iּay/(@{޼R3l.8@ 調A::K u2!chє.{,!pa`Գ +YFHc 3f`# bmnZ ٠G[ρ\GH|0=[qjb$×Q@iI:>fW3H0(ؠ;1HmM|Gp6Kze1ˇt#FAZ,RD "s[qQ9vef .KC\.Lҧ] U?Wygu.3t61{ o, 8:u֯I!Ȳ< r0%-<^NA`,H8vO"@d)H^m\j;E/[2coI1eݣ1{; zNrsCzpb'Sd. #U:8qb߳p%+Ěuæ4P4֥W4c֡hխ4(hr *^y3ool{j_ag"x귄YĬm쏰qyhu(e}N5/xߥE_eIbʀs1]fb la0#BԮVm]pUNF|nt.L ^0V%c$*I#Mދ}7@H[xf+м|=.N:jH=`X`w *oAҦRyQ>D%4ֹ;ޥe@"oqZV{ ֢SCg'@ ?L/c"hQ^10_~N׮Q4s$nL'be֎ұWx#p$~mo𛐴:9#Hw]P[8/NL?!ZG W?# 9EOwCHnWu0g(@e apa̽.hrcdl;%{b8EWü8-]ؽp]c8A#rÙ[PIޑMWBqǜ+6 `Y4 \&(ݦ܏;\3cE|2RQӓfig=o9FkgXX?/ܪN}./1|ϣFO~Nk5ypi^Jn 2T7Hud:67 [JL?Y:q) "]z9{vN2OOH{ӉO`(K^w0ʔC-;ґSOKC:.re.-%䲥᫩GƭqfS ے9˧VHߠSxk1U){Js?gC=p9H[e& GqEH^IVHˋMdr5(L\.PC_sth рOQnbFYP層rZ.Vē+q'WA@/=:n* tݥ^f`qUl`EH9^$l@{g9 UK Z!idgb|+w,?eJB)Zx3vkpٺ8ڴ *:}Fv/z&*ٟI=ʬJUM!'XyG6 K5]äTj+8|hʃF[pdl麌"22oA?3 脓&=_tP, [R汍$'H-8f/aT/n#S..iʂlVqu[ 90FYY`$ʱ؀sp{K|&=+ }\|3o c#&Jk|aE^*Ǔ .w)j}]:AzP7px-,9 ixЙ-3EZa3b&`l$vBt7q.WU +vrw7 UwpL%䦵n;6mdj~ *FIu:O >j5yn9]z[0p.MHq^(GM^͛ lZ+gL> U*uHC#CLw$z̐RՔt-՟a4,}}JC^1BWV ڌ~~>OsȍdUhT>lu9R2dimBBh4<k{Ȫ#ԍZ\oTj:I^OOt2RBdo4N1['ThQsy4Kf(zG $o-D ϯbk~8˻Kj^x'&]=!S S.| Z38ѣkn" e5 (<p)Hs̙S[P{r!ش rD5-MV8VMP}Kl2-C4ۻ_˻:g RZ Fy.MMO Z'"or{U15 +Ug( FAX۹1&AW%+SÈ5mK&RQ慨DH@m5ZTGgs =^S#U/GE<@ EdxK^?_9Sjwv`=L(m+61*WU:-9`5$parݪ,sv{R/9TlA𝳈W15  ۾C t!g(kC0D kDxcxh"WrTayFEM[͝dtgkrh[Xgܼ+Uvɲa$r KԵ]|@W:~>綤#z@A{qXӆT4&Ť>ݰ@B*yO_/v>hc/o p/Sգ؊u޲@h5ِh,Xd{-F)0fm@ӕ@M'LJ;HͺPjLTT/9H >/_}Ud;)njLh՞_9=2<^%#pmPsk<gd8yVō B8uur(H-Uv(qlE>\y> Jx\LD' 1 M(_xO$[^[IxAѡM)B PR`R<$a!Or[XE"VX3zT*$~\Y&Jc`,~ƵC[Nmw9$'w8Twb9ONaC9nc@l 9EIjרq2dYEmr4 1J+gO#J;aMDk=$z?h09~^+#ؾ6t; SPμmkz1`\nᮂȊs/{2n\nJ/MxQn*Yxtt'mow\6U0EQf+nf|Wmi@r*\P?J}Vhh1n``+";+SdҊ`vu~{ nWv6rO*Ɉ.v+Į dqCBa7l}h|sd^ݵ!2A79 D]m7c%qrl:ܙ4aw7KS2 y+! jq0 k[$= hr6G;_I?+7MRߠQ͆ܨIm痺6cNu%p{!CFJcbpXw)M=7\>7hsqe Xϕ8􃻄 kJ/8LEb<8!ScB~GL2*S$~zW9|ԢQ1rײ!1)\M} 3fn6{0:}u ^⌈pa(a2b"Pw\kI'qр wtPPA,sEK#G/R-Q8ıIe?vo4 s"6eϳT y/"/RVZ }.ceQ72mYɆ Sk>&Qfj\|^ ~H̑"#1b~Pyx^<Î7 f&G M6s[Hʲ-)|E&#iЯؗ>J9]:z7DvQs0L.8:ǭ53)uQ@Gh3%a띤KD$tAcM}>GW~x.w+*:Ĥ{y: Q0L_$1m/&Eëɏ9Ů>L8Yizck!)Ih`{tiIU7|k"2aeJ$F$L<v (cE$OԞiћp1gN=~,ep^CO$!Ev?IM0╃>Kh)d%#`S zzSqFǢ̪eT:,钸xȤ `FP9K9}3vY|\ [CЧ󰒲oz_etʙѯxuی 魱|Ǡ~fi/OX+DsĀ\9=YdϐmøjRuCYP1z|~s,t3@;;4sNoʉuT'@CNb% YfC;PIԋPӳe\{#{4ȓ:9uFd(`5$Tq|.*l &SII*6fKu&Sη=uKAc0R>(~ӯJpuR(/Lp c w EfӖA]ĘB l[`< X_5RWZGҚ!+ W>4)uAZ#\ e];xw=}Q(=Z\q7dpMaYwP?@B"9Bh}vuLZ&^-͔Ht A`_/ŨP?=rS@sbѾ0P3@Sٴ:=sWP<|c/EQ;@dlw5}+sB#,ʓḃ)?f5HI4ukŽtGUF vAeLvUV@n#Mg:n%pQs B\᢭[66%#z,E|><5tW#x^VI 𱫰{ 1o*+7#_#$۲ a`ȅxp&]L7dCFQ^ ^)"YA GVUIO֥ (/˶qqI,W^:v*ˤ8U;CsUҥ7mET2W4P`0Ӝ9/p16TG/N_ن#$w;~D]E:"\yv@SiWmbYwP1[ T>J9?w(~c`{|Ut dM c艹)({0J6l cɷ7êyW*޺W@b"=z` Xt:j(́hT/.!۩vv7)oTVF7@[ڄ#AIލT M>YLw֌,ɗklw79R)D+U>ZOj+xKH5g;"NC4Akݏn$rjv${TUi omyI` yli'jhk1Z:3կ5#W/N%E9ɂ>@͇Gw;yzI~jc¶g V!BbȈ#C=Ö&'a;IXipLj,>hZ?䘗Ҏ Lo=f./#GW4 hy ޝO(FmYM0+=mp\ݒjH}$[-{z(q$?3hTLTg u46dM 3#Bz#"ܵ ,:(KSSc hfy`[X fu{T:`>8z@GcZNyT 938;UmXfΊh" R τ7E0m:24%by-jĨc%J~e8[,0 W tvХD&!-ox_ZPYuP*Zf] ң`O*Ej8}se\|lxLp@^+*3gS3/=h_qr`!N 1H[ ØF%Z:#ߎ̧jB 7^ù%_MB̈́eKձ1%\)*>o5ŝ!fؗ_^Ϊ@k.0s0+{=.7rٜ@tgBDlOgG8O@Br@hR=sno&M$o m?K:g/AI\NV#;ˠ$!ϒ9U58m_0Z*] 1قƴo8t>x y^[% n\_&C&f[}oL5=Fi"¡(|S#AEryJ9׎ Ltr&C TK.SL>~{isOXwqAeUSqNP`-U0xWI2EjSOkʷM0 Gce:@*#Q6=:(Su7ǝV$j{Fz1$QNܗ[g.XƣhI]TŠ8*(ܣ^-|w|aݳ'!Q3M q[{]-:8B\*'K#9nL%yaseef-_ERv!/* !@Jf .qW b<Q?9ku؄ A~0K/}T*`*}Ju*LdkIW46I1x,#Sӟj& Z A\ё(\ń]%E +ykoy="ZeXbmy?=n0@%n]{ؘKwPѼ9 a &BBsFY_Ȕcd 08\-em($!٪2RC{X(Dix rzよaXv藀 s0]h(C]"GH6>aȡ2x6 So@M*K+#cI m/\y7!V#G|(X=$,eb75=z >?7 DizZKS͉\Cߧwh+%H;Cl%+;M4בg?X-ՔWp-/ΟeEno^j"& _IgwvN֘M΋ȅJ.xݶ0ޜP`S}dmӑ៮ŴPHm7)3ԨԗV|h#Τ߱zSPls, %Kut?Y7b(P߆k\\u+/c?ND Yҫ%K6e(Gͳ}+|pLO ƍcv22;GPGI%hk lx9`=ROt{ =]sR)–"fiJ'| ۬'ǏCRXa ƠHCU3בf(o֖R$A@Y[3b´E2nya^ NiTYex֮#]NiG8 T;R2,IU!s0#^oj3;ŷ;h=+"DwKK>aٱ.2aGVsyxkښ*],hJN?x[v Wbu >Kc[=5!y˝&6 OJq`)*LLj_QEIMk&A>S mJMƶTM,ۮ}T]Cňy`#ӡ݃擷답Ui.ĭ33mb2HkKs, `ΝCP%?ļN1B֣6^D\fX?Nl%v䚑AjU0K06AIWbmC)aY&8`레Qoڍ :CDQ j;FD@k2'  f%ZuDb{sN&[daԦXD{lD c#clCfMfHsyB9ݍЩ5/* fsO(,Dhew#4@VYnB%!'-'rc~غF퐗RkOۆ+3M2J_]+#S H:CKvc[8g t]"mQ=r|+Kd  = hݹSr2WS!Q.G.t k@i1XT7d=^,dڃ^{*ٖф˞Dl f:U 5p #Id88qYjXS"D]%1x^iO6QHs>XzPIW1&`*T3_lCm5fG#0Xf'J&zQ/4vޠ+!8 ގNe 7Yazk\OT\.qJ+ﬨŝQc = !Acc|):q]i%fQ*80B|aH6SF ސ25RqG>id䍊h.^meu G:IQR찠~2z[8Gh\_Hkء[,×752?T1|P|Gބ{"tXP}`߆IoӰ)x|ji}>*΂X ~TQav+6-(Y$0~ͅ￙N`+ɚ Y_-X'VߡX-oF}c}[d;@sYLûN&5nTKyH'cVpRy(Jn_$`?(=HX@L+Hw4bňD(lL"Hr8U}f懝 9-'bX-2dTu*-usW/Q B];ia61Apt2}rҞC>CڻV_n=5h!fY52't{VL6 n=ɠ^}1rQ%swmm"OeW"ಬ3H tFL*%q;Ȝ_vp" e}YG,)md LNнc+) ַpqH:zA-KzWυR:"-PS#9 h,^TIq>6i.Pi%ښ6e}=]=^@Ih}6C:O'T |]SNA[ث]2&-Vj}IdGw ?~J{xI1pQy% (Qlf٦$'zOS})#(@siG7=6#A|*g[]jlu}Tfl:# t/ ֨:3IđuvJ9rS+*gfƥ.2.]h;*\kJq=R״o1-Dtl1O!'Ÿe|?3XeuV>S$Pr?hśeuhl#N+'䇣1).eI zСUi4󾧮|nͦ!<%܌piFθ}ńS~O\JmK Li Vu:*fʞR!h6f TQ+9F$MfNj ѧ}Sct-htn:4qњ8 ZXyl9Y&f!D]xdQ|mewq[{btX>}:J w|g&f: ~UƏ-`0#OK7= ڰ$ FFo&\4;0Iw4ϽT2sXd&e Xx凣Xkk n=8>xmp҄Ln.a貃gY#cOZiʎ{/AB+z:SϬtsbb必GϠFM`genl]zv)lrvaCk#eQK`Bף zԒa㍓" -:7Ld^Z q15iROˍNk`@TUbyȋYw"yvnSW0t ѝh;Q۰~z3} +mM b,t~xrh)#&ſ;nC$W5*5m(9wΡ8z+pfCo7~vbP6~e1P}( ^"K9pC_OuDBC[HphȼLfBgDkfU"?PZ2;HX6`ߘ.(+|@2ɂcLh p(++KRּz .%$ҡ,m _]rkcdF8h]K~gښ1.ʼn%8M! ݢBbFr>4 W4eHmRmQ-_4LpVG9x7] %ie"0`ߓew{HH!q9WuqX1 kF@Ա_5vI|J9UFߐX(ۓ$ķyE Byy?ul5B7}yqZkƇ"n\ Ր(C-8(?bffOu~?D rJГ^Gr]۩sR%VM9L:Mƈ0M ЈXRෞSoΦ5}rg9=6e"UH.ϫEBfo.%χ/``U`zȥn_ fzy?_LoӕlMAݴ s/WlĨ;fjex%]Cہr:AP_6Vixzp%!Bsu[<adKq<ӐtAs30 c=]ô +(8ߦBU̍FhzZoKJ$h#HXO˟*g3'6Bk ǦE:\Ҍ˖8f&&K4oH"Xhmܦ"P _/^׽qf&2oZoǔuҼ6хKwᤕ&\l);t5+?< XD?#GW34[5-RĄ u c] iKCo*&;WɅA\IK 洖@h< AZ3$\ߎtm5.3^#nIwIa,LiJHm!# ^I>u̱P$1_kd}%E_ݳ[`)x9Ɨ.lA aw-dO 8St}VU 0v2*`es5׌zQ, "y[Wz}?451bBAyz} Ĕ*F 44FUA1ǫxOcobϊחW=!EfӚrVo%@҇giGVy(NC]Q$g92p;Ƥd 9-JQ$8:ZHCvn|<r=Dbjo1NPCQ7LTPw 'Ѧi0)O|qj`l03%% ,Alx>QMH&^W]w9- y7DҐ.NnZ?|5rp|“nzi}</Q71>!*Yuov%2sy+D:Q@icT ec3sPR޿>*D+I._9"qֲ獓g<9>#I[Үwے,ڏ{Z<)O>g)Н Bn)K݉\~LA9ưGgjᲉ̡B(?9&հHތq{Ay, }|*KQn}j1qSPL j!I*1fT-/U*\_kw4q2fV9heʪ_ڐq硛1Aw*/Ku2Edc)-[)`<"phA٠qzav hxM%`i n:PBY8B3cөb3z;;'*WmgN'5g6].TlkE':(&%4"_rgҴ?W6nա3 te5;v_ǜo4W}ԽcW ,Gj(JK " FfӜr'~6 Tσ*JJ-.a`N}ߎ$yAF%YkI0$0ņ{l ]Hj^GɍGADU+%b{ Sgf &e}Z۰)kiͤS^։xTE\\G_w HD]ĀU뿀"P0tI4d"ED^p:?ʨm "l@Jvފĥ±[s!xt $?[ܑT푐C.\h;4~n]<4ΤzFlCS~4E(:VD(Y\T*TWv..}ZA>O2L*'.ͼ aG@1sW xfϥ -jF9%3@0R;搩+=直38)Mg 8 Ɋ Ls~G yqk0  V-AAH^zӌ3>sqo.\zY^q%20wwsKѫ]Wѥ}JL#JsrPh.0!\˂:+d!6k{2i:GaK3sH+@ o[JtLVUmLgc~87Rr=LbV'd.CHmLol8Y 2{+`)Qw[fᏐ-SˇQ-5u-x>ekݐg״׶*A l3UIp161V hK`S Dz@Hfj*Vhgl7H#FNitLhvS_α3qzq|Ys07` /"~- ewQ߰hW3izv5v;w%4ya正.RB2ܷL$ZiK a. \J߀!@x[JRƺkNFmO@$`vwL!}f1$ 22E.;VWK_ Íl3a@0(zcj?`,+mS1<0E>L8Q>{HU$E&bE83V].OlBTy$ @2̗J =>'6$RaE>>p-ds'^i+5ZQ|_|!tTSV47fB~6fڦucIڴ֡|8Q$?qKƑD'fN4zIp `2d!\r/B6 !Zy efSRy T!cͥDnK|53T)68QvAA?YH/bL O|._y@ 90qb)J1'brYf) 5« 8}|m2{+p.Ȃ#>:H0>=‚)n+W`dxjxT ;;(1l~c[@ \C B qy>yTc/1]DwA~_rV@;q$rYZS/LtƓIbKy~ u!ok..nHrW@ $>1JM+p.t|{mVA" J#aݿEkiζ 1s*3%2?NNz{2 QֳɃ qH"1bsdy 7$fg,YɕgCɸ\pmap=5ɐj](@ BDw %.Yf?r{I0Hv9usQF*PCL:ێyQ]RJǩNME-:Ȃk&.ֱ\J<@ӗ)TRqtUFjQ!|A11X3;"*|"wI#5BL%FgʊN[h*iW/\tcaQt@-;)vO44,U ,tLij[RuH1dIt~Tg(?+u֏zoK_ ;Gj+ VB  e8Hm:*~ 4]O4PTa5o`Ԛ1Jn!!&nocu"'27j8QdI"SŖ=|zdm&OQ\W8`pg.) 9%L{HtE;7?Fo>nS-;=x~La3Zx=g & V/,Lq X{awfb 2 @,{nD o~8%lu ~6`֨.m'a; {i^AH<7@aIyZƑOI"$A *E.\a`0_nDF.M֫*G?`Z3ЙĜU86»Yik",Gۓ6q cHFCs+ɷO#o(A-* (./}?!I\y7oP}-~!V3E CA%CJ ߼ s~kX_f\>Kj h"oVq-tzZ5+Fఄ WPzM2 4k*tBE+hkcpr >%ߞ̡vXU B\mC6}ћ|j7*i<c/,C3SmbmuRzAAvgBxٱSj1F?BGB(5Iٺ}ĝy]*Tfdcܡz(T$c}C5l? =ȤufmֆwTMO[k>cMq,<@Dx6 `w'Yޥ0jڿ3{\hlٖ x(\BSpe3?Ef|狹yx$gf{jبh_a@rзKcI}_Ū*;5BT@?X7Tv l[zῑ["_:xF| a[hX4~1 2# kndܼ-Oe{"NX[2 ݭϨ_tU`Z TmMXHyBM.3[ɯ(NRN&sl.bW 7vQ5P]ͯ݉Ϝ42>Zc2ѨBVOdiT:g @t >:)h0IҮZy:'I,Qgx9f`o}}/04ҥr+Db֑PYcK:,͉nKȇ&d7̌o]fOYڪPp*R^La7m=0cÎb]#Ӧ({ʘHMH|.h=eǐn W gVO7S)tWz+?)(9$u+.WЄzzăDQ׽k2+ȍ (#\ ,+<Kbh6]㞪C{uI)%f3^{XE!cj'Kɐy1gZpU/[^ؒb]Y~djkUa[0W󤷹.g6kQw" 9rΘS.DJH83'KFYfvۓ>_G#|mFxMq7ZʱƏF oY: : cjMr1zXg'ӕ+&fsDIj, /`+3zAO7{00)YDE)Q+zrn{Pq'xt"9Lw$ Nـf(7 /)BQymfd3H=Wo+/FW/Ibua !;;7,2<ɣR ejq<}#g [fC -&n >ǩ`T+^'GlMx4}+$ h2 m: yBL J8ۘ<^ޝ /\{_ r(t Uo9c@wXrIb~X3+s*[ձנy&,E'ۻuc` =wkU Gб/OxD쯵i4n'['ݚ6fBb uϑkQSv#_?Ǚsy(05T[_F#Y\)<9eXR>f.w4yfR}!֟cy6(LJTnH8+v<3~kw}|Yc~sU-7jQX.+:*.$-9YD^]nw48eGor5#v< ic}gN-:rş raxz3ߜL2G1v2 oLò@@XD-:dJ(-#`B(%**fWX[ɗys'zgёF |!uˌ-{C=fjQ+&CQx5` Nc_d4Ii[~x\k>ЄfH͌:NZ ~fNNܪ؇Zh6a6`AxW(in ~ӓ)cbTaD@=%sR)) 0p܂!IJE9BXt9СbD]< M/Bk*qa!h^uYI߫3֩W~3dfv:\MT/s(y!J3_:yin2 " oJ6]DdQո5(Cܛ[{O /oFa7) BLgN}qi\t_cS* K`U]_b56,)R l9, ߥLۑGc26*;J4' D%UͦI$|l-f|UO6mL@۞?M{-̙_1z+'jLW׍`Z1MK$ T}{̈t.qeysꁦUE0̣/,#07_J 4+a`"틲+p(&Zno^@~Y%6CBT] Yp-OwEd]Kzf8Ɩ5Yr7螔Z-r:kPG(tK >$:%jղK`>`G|3=AJ?JI^ǗKx#6h-2A#-rhe"~mu6; -sͶHܛ|xO| zF}ϻ('?)Š65k ^Nh\x՗'7g>]Ԅr  LP~'KF̨ޠr81/,zto̸r(u+[?:r\sɔ fwU=+Fo`)f_`P?Aǽ -aTxf.y!:\@^wZLEEu[}wt6o@! ]n OEoڂ䇰w!&GwsKXW$`<$2(9HR| ͶOfu[zj*2JfFCI@()qQђr7ʑA5 ~Ԙ4}W3} WypC'_r>Q6qhHtn3ALGB[bw!;hɰZVc=RzP+a2\W:@uVky"Y;'V77l}e:7]Cß¡U`Ti pdipiӝAWwy4'imݸHl'[ 3f,=f8g<&5nGQُw/c{/L(ș;qBJ2Cz 6}r>y7}SARbjx GK>o`D0l6 q7kC =\&B;;}PNˋ:kHQHX2edxy&6RD*XlT@nj/?n$Fvc47d^Aa a~-׋ǭa$hߨK —_Nv4ɚ!Zq"΃c0#- RD%;OC̓\6 YaIE Lk\MRܘ7Nk`?N+i^5,̭,"2\8P0OsTsˠKXPAcPoK+.Ьnܚrޣ cFwiVeo!Iy4?pۚw|l' ;fe54)P*=|ʛ%-VLpqhD;y@Rڻ.Wkڏ1WQ⧂1AHV;Y-4b; 8!&/<+Bz4K#9 @(Ȉ#NkezɁV G@l~ՄE>Z"Iɂ$![jK+`G[J%T15z`}Eʤ`%Y }QZ`/XSŚ]W;fQ(5mNeL1>ç-T9ģָILUbZ@IJF/G|'dacj.z>ŠDw9/ 9`31d8Qđ`cyeWB^%&J]-qϣǟ1?0vlb5`@C,xVG{hc/"t7fW\ar{;IW]D/ 8 /켎<;5}Q.2A>_k#P|qzLޓCvZ.%pgE9ZWP!Z[2˙\ؔ-?x3k Xd|.t)6BH?S$2);pxFq<3'؀Y0?lQB1grh?ws fhTN7*0eF޷< Xo7F "Fg0gLDmpYK>LIfj(w+hwaOoBwXNұlmH/xϧɊ!z8*,T2?z'FQB}U} 4Sv$V VE0ufou~F9EP<%ߔޥ?u g<AR #kyi:RThPRWjJ3v̼"+h &BJHn& TT)\!Dppm;)+>|y"f l3d$,yϕbf̉uΌa ZDS%(&YWr,J|[F1y}<2ˡ~qc@8z@*x? O:eQ@ `vNYzZ!f:iM^ć'U|+ْ/J][O(70k8Sg}J6hOCGu%VF)^ګHXa$iLBrMzw[C .8p5LUש=T4KJ"vX=%lmCuN>w;N4`  CZ9Q19 іT\pN}&&~ms_Ė} #\ES2Ϲ]XT6B/R^!yǧP5P2G'ݙuYˁ,rO1+l;6ڂ -lXxN+b*ՏidWwv۫vvd~T;S*Ɓ6FxSao$/(4R~tW (GyȰy8#Vz$!UKsH?_r nfoTrF !W ^6dm;n =ݹ>,R黃&A`W_)1z"4nݽՄbVpyKiy[ O%L>ގDԉs\D&+7ZޯLQPMTXWkKcHwgwfg蓔hNL %E v1N9ᤡɐ,sIoy-mc[ٿ fq<}M⦞xtf-rbJ')a5L}zinɶm} T<A:|ǃoº.5X1uy<_@օ$ɓJ'n ob#Wˬ39| z2՛l6a[;[h]0[t5=:-mH-͌ze!aBJo:nl10}-xRHȔPrұ w*lmj_0J:)V yM@6f. X],3b(_ [.?D!sYc᪡ /CiCa=rtbOa_! 5X\N11zmg~GuD^ඐߢ6fHL8`^`Pk3?T)mȣfy~Pٱc* :Me5'E0Wk.֙nr>p +?X&SiO\ +,V KQzbC}⁩(_mJQ5A4wCgƷ)PgUXK@{I:c ~ :z~Z57Hy,̶*M㪐Rǡ_0Sl!{XގrҙU?K[9?cԏxlŠ0؀w %<KV uٙgZmCK"Ǵ!Gl(uAb5 oG|Rgs F L u?s2qDu$:%i@O9]uW93Ci%Fjr5 {8Y.4?KWP_'T~\X&֗zgbAe^vp~/b^Veʖذs $6W uQ?Q<ٻ{?-v ӎκ4NXEbVzP:\UG8tBj҅tp|ǜLmj &**5_$p&T`V *ʯgxxȒی{H[L'7)ҀBUAɖ,?ryNjI/9X`T <(;Z4L)qYcw7Y};(iSwڰbX+v2(9ez}uD`ͣӂh H6wn⽈m`EbU-)sҐT*= 4/=Ked-Xv6r#ę)=Nk4᩼+iݖ\ڣHI3p*gev7`69:gOorse\YlA(6zPB T#WACm=֯-[̡noUn9;"S5MҸ=+@@ױ`5p֒d{w{F11aPB=gEBynW!^ 7wf!(5=iۥ^FC*fo3ۛSw'/GKrlB}76LKxBY/&e^y*lωS3}E"7{^b95Q9l*CV#L'Xk%On t=4HN<1 PEc=2%l*-zZ =yY#IRO@ݬcA)k+\,ɁNe6o 4ƣڄ1NagnMb>[vcn&[󺉴U+> +E|(iA=WI@}VVոv{0lv0Ɯ.aq7 S9rCDUc\w]r,yi aTSrد{q$[0Q.j:خ˜1"V'j 5el$yGD،R ެ(8U=g愯8Ңu~opС8vFhzІ '^N.@~_7R`z ;dž#LR29JfհW>7l/gGz_Gqz R%=]R̂p]B0yk/ 5&u3DLP܇\ eo{bn/xdiHr_,+=P;PVv GC ZS EFtʸ *bQ=YeJ h8pFhnJ@uD6+;v4 &ؿyYn&9 ~' {t+Ya:{R%- hFdR-W6ݮbN닔.4ug1G jˣ 'WE m$GUPh>WV@0˟V^^>BBZtp'0tdT۲Y= R՜z\Pl7|̾|6וʇrۙT'?֣ijhl4sV*Fif%C+%-5<)$AO 09Y> xm&ȴM}OʳIg*E{?f\LJB5/v*Z h`5cWT@3TB݈+%%p#5%j8Fl*bA~j`!P6ݠߓ˼_֡o>ݸGRMCT;8j5ޕ S fB>T'&<-qGjnqmLoөlr&FpB.:n1cz6 c9kdSEiK1Va(>v5~jGρ:PFLV\eк#u>Fnq?y>])aLO T-Z\v3ڔLQk MO3?_Q$pD BA2I mBpA\6J8sq6|Mޓ^F'^|Y|\5l{$0@z3xZm {TϨiI.:0P$NĈe i+Vw%'$=~/r:+Q;X2gꍱ卥O`*Şf+Bdzg_H.C+˔~r %~c/d0iOWЫ! C)JE,.(O&DM.*cT|zU%@]uJFAAyKg]GOZ(((7lؘgxd?}jiZ󦆬#YE*}0\Ī+-µp8 35EIھzf[y綑7nXd_w˖㾛CδRU{!NPa?o|IAl]&Y~[mCbj*/1sFm>~Vp!%u J>E"O='-HfL  ?ا#dY(BBdd%/MW4LҮ WJ3ɤY.Qm)F F]P?ӁQ 07SâgLkp'Ӣ_x EUg C|ܰ6wl`ŃRF3 4 Oϟ#X?<5o"kqA9 6MN<]v)ÇifqkI1&3`b f% ~>"X(N\,?DQ h K_[3DJv0YRӋ:z66r J)~iS%k  7hXs%W.u=dOw1E2C]6([JzK@zlΦC(LQ[{:`>|`us˵']dbɿ*r\M:$c:w<ߡ%#d:-|e6`;-:9 {#&e-)CF4I吞љ.^Sw:%+D:Mg'ިZp+THG#*tPmrvetS2Ab?7c^7Q{> NkW쨊ˁ`9UtG>bLBbXgZ3\\CT0#Xf4d"Kj+TyU|D%}[䯇_]/wzZTǹ3V9$^J^ H󮺒h$FdYA4N&囚`%CIѤWd]"PhOY\@Tr;'#U_^mZ OcZG_htPyzn: VKk?нY~~e*E (tÜO¨< RԲ"~X>n{7@]&^  m}{#͏ANxoQ;͇'[GZmwTȥ!QT!pо$W'|P>&p}D 6ݱlQʒ͎",hDiBMYf 3k] f`ydyN~b A;XQ^ڒ§hXJӛ9RKMAv۬@ƛ*6?1$E%xp`ES) WOE޼'vJhN@B!t"NG i(a-L~R. <_f/_.^$QJa O,5ux2훀 ~Z9*VH$uGT$_b5dJJL[v?%10 ono}X|5uE8&! Zha^Ŵ<A>i_KPǘ%Gj;*ߊ*SG#͎cM?{FWdo NHi,:oE5_HRR>DYnǂ hnsO@?lm*qĨw(%~L}?,\NO׌L86&HJjmemf şlիPgxCxۥ#T݉ 7拙F0{PK#J5\7%묛핏Kԓw$!+:c QIbo0. grΕnM*W>!M!WI9+ч9sPy#L_=g]R8ԑ >tK:8z(bgXkrHꝻ(Շ >S:|Կ=rr QӃ__)Pb^_Iŗ }3@L` +14_TXA2^а9N""!ģ&GY)#xMe똼5)Ĝ+ل>Ɗ-S 6}ij } (ഢF457U&Tg])=m8jOReekn*\Ԝd\#ݙxV =0}û=ԻߡF_0eBql|>W F'Vl ZYT=^x߶uzneVˏ->GEMU.g{\cWGAy5'jlGٵ 1v e>L\#<2IdՖ\y!9gqhFh('9KTXoLWn<͓+E RM4 Āvp`]P?Y 8-jA,BUO+sR[[ t7XL=B%:Ŋ]ӒI+W6,Վq}mQEP`/ٔ n^(I#jf]`ϣz2@T+Ztt0Ųd|Ci )7Oy5=h5 #c>`VLa}b *˯ %[i*M{E aJ߱t8)mtc&V|k 54Z\`fU E,'= 5!@pЪ}# 9.h[/s4FZn1> 0:X!z*R>"j QO⃴LH|^-\oZ^[A_Mp>내gV(e#%rECwjt'~X*? -4SdghONo*#xml wo |󾕝JFJO|3 `(K4 sl}47ڻO’d(29NW30!D=/P#;"m -f;}z]Tͥ|aT6Fڠ{\>G%ዶ=*r#IL ek,<E[[C5׾#@s=c3pG((rIO*qt:*k2"$[k v/oD+"Cʴ5񌸡g}ENXMtE ]HCH0*oI?,Xuu؛(0S a6E(i*^LZny9Q(+ބ7 7lF%Rz o`% [dIv8'j}Jr_+hXjRќFX1Q_2=_ˤjDxqVE 7P)8e UIE@{n6k6u& ;rZ!b.|[bݴyˀ.5PvQoR؅ ^H!ꈂn,&zVdd ɼl1Q((Y6@Q-V{ZR˛€.r0Fһm%dD<ѻ^!J28x*YH}^Tq(l՟S/[J-EMױO[(ߗJehV7^B*}.(UAF[p"vMϊϻ-^@EĊiOP&02qe -|T?%k{Zd gv|JՅ(p͊t!f!lޢ[2+_P y ^ҶӜLSYq<8\=%2 # ْbw |JFA?8R;iܒY!7 U-M$ >lg$Ukx% &(l+zTF`uaY|& ȇd󅻛uƥz'I2|Ѱ5zIMT;!է @#ЛSx^q.yVCQLC RyyZ 2rjA NlWt^>|f0[ 4PtBTv@0qs3aZ|ᚖ #fi0pkZx T Nsb*M:?2U,[mSc/"iVZGP xs+jVDU4qLxJn#P#v؃G6MJ`k>icɅNIGanNpBTʸ1DY 3lNӑZWHZFAfB+GWǚU&e@M-#;< lM+p 6x5׎}/@f@sw홙A: G!sQBZ 'U~te`Yc᝞*/wd|x dZ}EN6't_|o/b nhg6r4^IdȽsъZ/'-*O )0KB=\iƲ_GR}M_kb]^a(QRV2/;oXΡV.`dy ն&4`u9`fkwK*+.QwxI,n"hW>fH[v ;D]"2yWVti蠜Yl%f'FePƣ3o8e|$mr ,qX!jfaj buR<ȿrYx'%Ư<́x~?mkJt9F뵪f:$[P@2`5KK7Ǽgoy>(&_/bgK _񦤁% '<@wpk,2g]-_F|GC%6h3"o TPl * d[tz+2 eYkî}Y# ˊhɈkee |@@Pbĺ˒x}L-u"(W_DI)検F\ӣ;)ur:htGF2{MtfUϷeW,Yҥk0Bz]_Y15ipNx~+)&zɁ1]GD6{ y;] mjR ,\sԹILY[gX!b?GHt_2@hjd=3z OBZDD(iU2=CjKkgVv^lK%AVjj"/^KKpUAjG]sr_Q09Z2 Β~W)5|"z♿xc~XxrA na|^za0EbI)iR4}kAm4*$+sȵAjcxQXk(~0(BarܺV 6u`y-䬧]JoF"["GYAԲ%77NM"n@u~y`ihDod20}9kd_~Nwf(+1PJؔUu )0$ M+f(A~]Ցgˑ/+!m_yٳP+iߦG hq^v|%ϔv <󒞃37{=#B1_׳V>h%/yw>IT5 89ʙ K Woa:mG:R!?]𛡜w9?^rxXM; ckU l3l)_S5q*XpwE;nzUۋҭ} pX3-uHu<EJ|eb010{;EE0ɸVvO2U #pf=Zu:4%"([}6&yEhʢF>7sCcs@FXr5YO +KzyrSg9VU\#~bR`/VB>l" \ڝuioύoٺ!57֗_&.qhYvSӦR۪@"]uPRK#Q:oT,Π3ZwdH4@_f>_5z )~H}H/0"T5[=l D྾hVcpdŽ.Ϝyq)S&bh27_BTr$j?v/2>ܵHpbMùp?i͓A'B+K4^¬7GĮ_{E-ɹ;2Q+ाkjija4l L %7gGQ&2[r<[yG8Zs7\TK1rO6=_D 6?VI !@MlNr-fA9\Ɋ 3l2KA 7tV&&c)/OJ׻X4=?б0$ kC)VdYilQπF5j\;&Zvg0{K`WțhP@ڍFD7bVJkE*}.ъٲA13yAv`"f ZMbD:bWD/j 6|v0$D2!e?MByi5C. b0ZS\Hr.8>Hbޘ6ou^%J޽kc$8r&d,?#vLi'}$cS'ep>|F$&\ޔܦ}N-:wFb6]i{C˩~y -BXO_vDuWB{}do"2 kkRhqYLA?weS޴3jv(MO+ J$WUѺ\ UYd]gie4qmHf\"zC #8ӀSFZ(x) G3!|?YRN^2H*~?d Vú5CLIjxhu #JUtZ]_M\<0 tU ƲZͷd:2fY);~]  |f W$Fj*BfىŇga7i-PW?t7,m| ]_n)~Eqz<.s?!"e.oؔ\yh@J(*{Q6S!4XdSEtǖ ~pǔ YSS&t4.vU|sxv t@-ܺ筙[_C?FƂr,ofdc qQCQ,WK'sIn<+*˼ߖ~r~0-Y{Ì>Z&A)p0"7LM˦ܨmWxxZ|Ld$)2Fnc3%w֘C+(!V>-E{W[{!),kT}sښ & x4pHj։9 sfJS2Gg{``OaZcWq&N#-1-v4C5%@Aw[<8vZ#"d~pI?̆?T1FViC*NҮsg(bT() b}{w*l CCv6<0;mG192u89,[z@hrGHEP5,iri8͕*YC[r.STgvVZqr pL5-Xt$v@ڙ=܎[ S;sp3n0F {%{n:,QMp& " PJxwǢC2m#B=YUl ˖st/)[SE DLgqMB a21hY3,Q 6w A~N}*̤D(Sfi2V|)@kA9箧5S-/ v'@k'o>nQyśV%)y%"jDxTpf <˦Yu|,6S ҺNjLe$lE 1͆~ʒ?zgѻ l*wZŢXeenso4+ u(: HbiG)K}EkL5*9x?£i0E' pk8# Evbm`kQ9ֶnSwjir¤Gg?ul]IB&6u,*޽o\'8 $:blCQ^N3Un&!Mido];K|;J[uvK%cBȩpbh(W3M4 0(d?sh5nE ^՞ŹHR6GѬ(ʮz/!ҽ4M9e~ϴM=nj ;-qjS?3diCk'("%qln%0v!/m"g4V6[! Q(X~b^haHݔqiV៶*LG ?hަ9lj˒>fEB/Ge9 [{S݌th P?&|?ƣ<+,Q*M2əUO A`ŭ=yGNNeUb?D;mr8l{G s2x c5t|Y7ఏQzhN ZN%/9 I žDFkT.}IMyAW,SߑeftXyRPWl2CJ+w=͵rC@׿B;\g#;(w|}mz<ҀjOF ;L3mnk 2L Myб; ж*N7^o,}gM3/>p3x1? ˑLl]n;/SnшkcV,PĩX]c 7y>[/<]ҜP noU{,e3!VY9K.$5 K7 NU&\8`=;(XFn- m&c|͢z+y5|~3'ajy=U]냘UBoH2~:<7g7ˏ?S^z_Eg$!]Y@B둜S,=SdPl ڂC2K UK`}e ywLZ4 .(ɶRCc28qc8)GZw+%fz+x /gv6a7`~;$guKO;apejF!^ 'ᘘggfa6?u٠P~P}M$9vM2L(o}\qc8Y?܃G$B>Lzz?n|"vPPo Aܮ=&c=QOe@ ECN0rD/  qnVwhOU& w "r2L'rOy 1ln:a5W*G%^ʼn,ASbk𐕳Pu'>('ƪ/#y/_ET֊mreWΜ[0 ڱɆY/̾\ [VnY20Dv=QiG3;o`qR]Ѱ8Hq̏2ΊQ;]vXS I)' 6r q:է`YޝNboxv|]z<{60s'!/W*j ?-Ns%g/RC.{Vu\Q0&hn V rS:+kTWdsa:LRjG{AEF:LTU M@f|<-o)֘to7ڹnF7P\M` y2s6QxI ;6阦[]+2Cv@$Ss瘁( h$)e_ Ra8zr\ʬG=^[5\|}Զ)ܵM&tq򺑳,S/DÜJhCD_ LyK6IA=ĔEC:%ȦT=zx[rP<jIE[D+S"n M Ҝ|ffb`cYD6`dnV|M)obk%+@kcEiӺƅ/@AI2xQ© E'ƶ>kvOTͭN@&lO녪}vqj)El끒%V.)P0S*ߢ:+ 3,s_kH$ˆJ6P >i=:ɪpEz  3v4JiU+V TpJtĔX$Y-/$ndPT{gRyf |DzTF/;KRCu8w$ARh<:5G@V |]•Ɓ\H^I8dnDIM ,{Rڵ|RYur]wokHzr _@|s %4{ ?Qв^;uMRxJݽU1’7l:q# - x&m^ e6~B߫G]z0!~,/mzK(*y`[b.,S9gV[SJR=f:D *t-!\ogYKE^\ -loӭ][U[r9]l/T{9 |w֜S~m^> 5ݰC`T^~sNՕ#^Awܮ\T[ `$ᥞ7tǟצ=lMq`[6o]$ X.obf(*x={~J2Cq*ܷ<˪d 7JbfB6o GdG}BӤa r*˅0nCx30Ht$g8"ڣe׭FbvPScĨD+S-Uw?)Y-A%^+ =GSY^%"`7\-W1l^=w J{[9 >Y R&ꯋ,޼@Ȑ|#x+(s CMUxxv誹1qdS M(t|dnc(2]JkK8FG֜xۛ~ C:[y;>6E垬mխޚ"jj (Iw@*)6M![#lELQݤ6㻶Ux#y6gjw<=nR#C3H}-F]kN+ql-"]kQxGAPua $_wo֨& #] {{ڤm_c?un"jO0?}br1]Ik䕸Y,FV#pv&q|.`j5[NHѡ2 QhJfPZolLA;L9\ѻx%61K,Wՠ){Qge>K6u~(eB2*}\TIʹ;7>#A{o4c*oK3wU Ŀᔆ*ح"Su$\e=-E)?>y SPkzt{:^./}+8qEF~"\SⅩ鸕bNZcjK~֥@> e}f!i8VsF˺]hܲX[l<zQo ]Fҁ-OfU M66^v_N\gc~b+-{u^q8@S|^g;p?B\$A㚠8PBL̆km_H?œ@+Bf+CPwtPfV[nudfmvU]}ߋW>C3CAg08^i&&,28S"6ga:sh #[I^F{Xx > :ſ ]0s`SG_PuKThje|9qDbNnwgʯVrjyþ{f(wY%fL”̸֑.+8< 3Wnr`reaŎ!eh}) ^Gzhf6J$GxhpzJQ4IE DU`O{}0k'w^`_Bfn\*{5ogmq}!JUN>TxDATi8D\gTϧ%:|q?@GI %0ő{cy&ƿ3{Q+K}u;vV٦ݖJdnc_"&H׮r6 6Y;&(i5֕C#A$hY%vk|y Pz|hqf- G #z껭&DO'pog#\ݴ#83[FC`4;_o Lv$#JDlїmN ++Wy_*:K$-,e>+R?e` ;&}p{  yEy@Sgٔ[?eEẏ]ͣ/Qy c.F3!kܖH#ȜOS2d}J{9B~^\r4D]s KUݎ ą5CPshihP K WAOxY֣kܛ?[]Sf!f33u-Mxsakkj8v,5ak'9ר ڂdj;LB.V*Lk?]1 v^K_Y‘þ}԰a"SeS X'h&[ hЃ'tg29!WA@\ؤp2&4|{c'}iλgW,|רx†4 "Uѿeo>H%P ΙZy*Jj!;m'›ЏZ"^'UB0 űC":}n`CV?sPi&k !hu #RnBևx9 Q){<Qڰ,rwxrO+$֮L#粝dJaKzaS륿s\RHu"P겇2ZrX  .Ͷt׀s כ) ~m)Alu*';hZfUIdV@uCGE>^9njQ=%Ow`4\ה4H8ԌdT^xK-, M@MaDa_ںY[ ܃-VLCpf[pFvt?J35ȔU.@mrEV.cm3Z#Kg ΋|)Bb+5J90s81e+Ƹ ,sbTju96U*xdC\sSFPqc|$ %%vI/;|**%#I~IEMH4g=›^NF2!*:BK 9oI8jҴJH]a1.Xg-# V)3j $OcMCdVdX㰄;M^ۍ({q*38;͓U.zE1G+cC4t$U??Zz5. bs$Huj7UY͋$|ϐ0!J9K*qhGCHŎf1{(K\i=w!$0lH g# *r`?(\F7vg_^A;ɤ&56.*o7gyz_f&bHTIueՐ5Ԙbw>D/1 #HCht*dO&9#(WE_:%bH^TzgMf^W]fPlSQvE<" E_"/`!Gq*XA-G@FoEh ծh( p/cG{nnKj`WǛ)g6 +f/JO>H*Ӊګ+ynMa0F ȼ}QAx%zZITgw>uOv.Q#ŵ`gUQA_(a?2Z b_ڡQ=5`V`/Ao 9_O,8!<"߆{ XBCkuߕP"Jm(ǥZ$AYKs \Twy_$n])MRaU󜩃82xG>)7fd &Pef(iKNfS9Dz!U|~aQD &6,:e[Fm!J8efHFP^$J]IP_EOAXRZfC\20 qWmn7דԁ5{*\Ɇnn\[qӨ֟BZ΢ 6^tx D˼h>$W:~=!\c=pNE{9 lnDN2rLAk;4zI/ ɆWG*;uOZ-ؠA/(pSnB4iQ]R#y3v,qʙϚovO@WUpzKwAkKG@CVv°HEΖfD#.g>4l>'ѹKYEg ~g:A܂ Qp6"sqnG+ ;2=TLD#`v>Zftct8fa=n?M2j]pV݇'"em % xn?rf4jy:v+W Uxz6Lzr GnAjrģ/JyW8L84:~OcAvyn$u TTB-IzSWzp9pqRaVGykS?~``r| b_`q[RCވk™o j+f; Ќѯ#uR|8]"y RP~ !7T,Z<4Lj܄ɝ %пx:9Re?}j~^H؜P1ί]ۮ4ቝO(HBb/ԺD/3My Sɞ,4%wm2bvkSZ4mL@TTG@Q#u`\q"]`0{VJ٬2B p\a{,O܌j.*kPG-vs=[^)^'w/mـ8?g|bbY̵f\v=o ނ{ecg^XFƢ% 5 b2Lcgx%Qݵ@jst;m ݤ'm䤌ݝ(DXνĹRa ;2oDU X7,O^dT`d$ ~Lk?jD2'f:ڶƔh?х1KT OŚaXI.ˍC`y#898 XFNTf}?_盱 a%c>ͤ("A.wJ"9;w8g81bq,jϪ?WҶ M>YOh8F300w .x [1ts;^.cxOW/8'03=Puϕ,c5qU##;1myʺ?qW|6龑_;]@ U=D{2| _9@wh-?ƚ>Q:% >qeL3w \P,d$|.'shE-`㢅&UPo#N W\*Y|j!cJ#B> לA@°{Įc5Rj 1U yojiVzY# ^ R4Zf0jLƪ:?)nji8XPjL7r 5!=U3oH,psR$w [deOe9IUpNZSD~9 I}%١P⑒Vd]5!caRnH"^%+T7. _V,onTJIf6~$NqMf[MrD.!eb:C9$y ZąΞ^B0<1"d ʎ u1šu}!ڨ"1+ WtcE0+'tpډ\9lOGs>kߒr$a6%roک{Sr"S-V&68C|}TBz]yiK'ӟknYg|i̱5"Mvgo5Ӌq[ԫtHSEdv^ uUqTprqgc}duѨew2.Њ\Un(sI'ǚ"ٝW齻>bԙ+•Ā`\^-JW}Ҹō._yթf>8dHV)ZcڧEf]=ưјٽ(^8!$a7DP5|uѓ eAQkGuC9ּW^S]ߍiE]МŢ⊝!n/\?N?:g20؋߱ 醪RuIWʱL>a0Y:SGvA~Kʬ [z%v+\|E J1ANdOcD3@4]w Ĭ1hHu %e=pjM*;GvGZ!m]:ٞ{e2B^0郥LTaa6&-1=,)/Y:\vM_}Bdh`Pro,\r$z< 0 O62vl'lR o8Ȑ]Ib+ǿS_44hJel=W%'tJ=H+rɫ<ޯbfQ9gYdcVs׫S}RD û9ɉ.V+_ cؤ6Zo-'5 Wj!3>Z,to̤qVS,;$Lq.)Γ5^Cn4U5x>k'mľ,mɵ쐻|dg,`Щ/57vj?xn-{t̽uoWt>_kh+XKp4!9/:`݀E$ZԄT=OjC.5(b "hAVU俦wD/ըa22vKAS~?+ܮ ȽrLl`߂lVX?\/N " $hZp[dfrZnF(K2ExfQCWdž'80H7eĞrTRo*@KҎ+k8f]]J^`rpUŮ`#G 5<؟ӎE̺*8]ɏumާ1kh(M9!j7l~Ko°Z]ӳjAj> <Y5OT` * _w=H'7Y>;< Kse7CޏφJ+Y5PAHZm܌%ʻXqQoc 2"'A M_Qț'`޿~Cb+,WKf= HS*Wڈm6 ._sN@ -Ă- oA(VT|]׺K{<:[4nbu.n~Bl54~UJxΞQ^;aVPK|wNjd ^YBBp-4/t&8Ģp&H:er_3rKatKw 2^ 8L(l/Wy o Ç1@/ Quړ*26ba|ۗ88p." fUZ f܍{:i w豅=&_aʞHjX9`>-ҫlA@v_7F% o@>2&=â\4/İ1UΒ65,g7c?,p1rN⦱-w#쥣i%?;N'9M9B IpiGPp9Mg +, gF l¢h 5;*ysc!N/N!i5% -Lo|;DYRlUӆTc+(K&ccGZ6S)l+AF%8ll0Ez?xU2 x GUmJrAǮeUzvPa4LMyC ` hf7ޣVP(nf/^Fs}X@@wNXf޴9Jp3Tp6=q)7o4(*qiˆ]rd[OGd;qt_BP3>CHG|;v{Rf|Ot_Mvq?99Ëvz;cN@*Ӱ;o֋9A+/f"O>-4k)CP*ds-[sC{g"a&SߏLBLB}},zV"'ͲaN:/$K9*CA2ĐNW(;K?6Qx=F`4䆖 bMdP=ￅlm4bOCu4UTҾĹd<0m6e? [E'pi8Ƃ߉x0,L-w'.&2l|k1ԹnCC!@w֣>@€k!HjmSHLdXk{P#K9f.G̐wn`Y٨'A+l+l_(rۗ ݕs>@HvEHݣn m仫5ֺr˷,ni©ʦqMtAwv['2QMFyq,-u' ^.?81]J:U\Pl2EE\+hˉiNF> 8t*ٓSb\&qe!mWm+m=y.uG͡8CdpDCħ2S C}jq7I ʰ#;T5]M%9W(fËa_\"s;\/1!˜<7[.Πj T7PA>Ż5T9Z( &sȘt eкeTu)b-Woy@Rm ss icnx }@]!0/hX./yH#J Bx'E{V2H*Llq2Șr"6pƊtr}a76"pp"_{障eGشrma5 2惶S$)& k(I[ 9FL%NV$|%NRTYCKBH[0oQ1-EmI[XeB@Ud 7\X qߚ(O}9<;0YD+[5PQfJ!0Z/j`Y͂ʆ/1yxrv3A'G}БExra`'8.\KcWw"2Ȍ7ba}G? xB+-[mv|O-l^1|@{w'Go JU:qkE:{+{olN\ B(ƀZ'LB(*ĥRR%};w Pwᐯ t]c_˷i- BҘjp#w(HzIuHQG}R`'M>.4}D&uCc# +)Lt_lLEk/n02oEs䚠;(2ⷊ{;'Z'0`6폏UHdoG0/Rk$¢c(F0tDЈ֝OèA|J1uZn3PZ63)E*ֿ$Dez-c%!Hy!aWép6[+epfpCo 9KtKCc$50Ϲ쁴#EaYϚ5QtnjeaFK=7?a2p:O\k3~i2ȍtS+D刂d]ZXB+eChQ61К7z1A!YvJNX/ZI +l _%If*gX״7g-' &&[,ν:#0sHjD.-+9~j~N+cBGiYhJ h02" \Eҡ"}8o%CF S#.ٽtwy ϮHƩ)iNPJzth;XFlW;At5b ϦLxHِb?{JS$VCZ~iږLQז(v ^(+C+*rjm=`I]Rbk9 4ޛY;W&9Um2Mj~v2b&=5:+pLԛQBOv覌5}d?&3mIzGYpߛujNIj_DExOWaI #؛ dɵ">\kP,eXɤO4|SQ~)Cuo5q0jg4T8Fǿ`r!}:HgbԖGFf1@Vc|l8)Xz[gh.%5b|3p"wYÁ귵 @^pDʸ_]C:v4byv "LһVAlg׷s%X>df)6CPǿqD:yqn,{b B[̴=ZNPTCXGZdٙ  O4:N"AL5;z,5qL>}a;~l |zX/1`oB&/۴D TRVJ? )K}'hIBΊj ^݉j[ܿ$C~`h\PbPgVs0%MmoJs@6[F K÷SNoD7W _qmqOD*q7q.BrkpkGc¡1kHAiI1r2EoY/9Y#c {Lk&"r:.ͫN*~ n3|MlqSanjc5[]=& 0 ϓcϲXH-: _oyTa8 EzB Ry?@jxII9d `h?GFqQkg88&T7tܔS~y ~U͹1L9;lgb`Wie lAf8 uV9eR2b,g.6i舶8rtM wP$KIicqr10bY*Q}O#iL\:x*jٝ_Uk E7yT R4S'm;J GXgMzpU|)]WD=yqrү)ov \Bc$jy;=|dk$>~1i50嵄_n9u*7N6Ht0zfL'lI+>Bi2e&"\CD{blQ-b]77<6<&Wz˹Uxkg  ˪W(u<-۸-J2 ؖj}Bl0S|~.26(w\N\v)VdBiSOYIƊA <@Hh^CWkk.79Gذq0*0어t7tf/BECkF$?- )'OM/~6?.4Ak~RL> T}BpAQMk1ác QH6{08ۮJcAWW ? }|fx"RY0I04'md6qQ(TS޵;ֽwb%yJƥAfLةzR #:PA{fE E_µF>Z+3_:a6+#*-1E!҈+`KN>ƘCA7(h(kA%ǯg78c4q{8njsJH'1a lSx'ًsbގb /FO͢NzLj?#6qʃ_ҋ̏$pš2ÄJ_q&Α h[FN~q{=n麔ѳ?'j&6ÙošAs!tmnp}V;uㄥ*A\]tp 2T)K7"7shA.I$4 \Wi2BG&;Ie]'6O-d3;&FГ8^1RԵ).Tcyr-?ů\XwySd]_7&~YOy]pmt-?Y(6J`M9yAu)V0lH¢gWf[-h\f"JsC`ae-G3P";ތY6[=A Ҳ@S4`V v:2D)47|^_RB{zZ/jyZ(W=!nQ=ybk.B6 -G}_aCL5/^*^`3d)+y:bg;ryʂL7I%24jT9Fc&w  >7^ :Z*w&k|>< %D-E T,2/=h_iH;Wd9!dO++Q2PVRI FOb0WEvb8)$Hyc7Џ}BIz}\f Ǧf_xZr ݢI!$5|*c11*i"* 5P8@[XGŃ*ۉu#Nw}Au[P~Ih:5g&qe\`N6C KE-$q$ !َTHKο,%/<\".U{FS0 ɕ0Q1%?P ]AHDwTMj?,4reY) VKΌň\-4:)$Y/#&AXϼZQ_T֢4k Tm. [&F !nK'C;dsC]1{wسw 'ei[%w`ñxbe6g*m&BbyR&LR}+ٸ Welj.uhk}y VOVc ~ZZ] kSɯ a%Ύ8$oL\~;ŵUD QA %OHb|$<II(+:6<,@y mq5_Ӆi+xـYϑ>8nzW?ou_B+6xݯh0`ƺrrWe ? lȴDQp2 "7W-˕\ޞAC|[2d\GǕpa1"K5*6ؚG=#7d*>.ʚESAo"EQm'K诜m:z$y,bbdf|_}zqK/q-um{ܑV,*>Q,`g@T8tgQ‰Hh~7:+6ML\ցi\ڀ= %#FpUV`-Ֆ?yM'5FnMLB='S3 ߡ4:UHan. y]ڎ%kmsfg[Qai7֜NJS4F,ڬ3MxRT~ h d–-/N-;qp%07Q= *)@Ɓ3dq.YCyAw)~+"5TХ8wmju{ZARPARڭI"['ƗUwtrw4F'& o}"ީE_'q_ YZ