bpftool-debuginfo-5.10.0-60.139.0.166.oe2203 >  A fXW^^fm ./GF&ʘnov.Ҵ"YէꕖNH7"X`wDIGI 4v-u1hQ;)6(pwJiy5>7;~¯i}zK]dak[\1?kݿ"h mwE7ҥ}# y& auJ/'r5sc2fѱ`6HLvI8B&i3ΡS677?4{Rc͆shzB`ޏA.o#stЃrlWX G(ƙF<<0σJ&,>p=?d / U48I^d y     D\(8$f9f: fFGHIXY\8]P^.bcdefltu,vDz04:|Cbpftool-debuginfo5.10.060.139.0.166.oe2203Debug information for package bpftoolThis package provides debug information for package bpftool. Debug information is useful when developing applications that use this package or when debugging this package.fVpobs-worker1640081563-aarch64-0005.novalocalٺHuawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgDevelopment/Debughttp://www.kernel.org/linuxaarch64``AAA$fVpfVpfVpfVpfVpfVpb192b607ac75ea265ce902b4f630f2cf495910dac2c9c2c5fee5e91d6cf0f7ec506a0f986deea5c3b3c1cc41dfa88d2415f290530286e25a897007cf073a5f3183718fa66ddb25de0fbfed98088820aab90f88f4a0e6a270837b449d024854c1rootrootrootrootrootrootrootrootrootrootrootrootkernel-5.10.0-60.139.0.166.oe2203.src.rpmbpftool-debuginfobpftool-debuginfo(aarch-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.17.0fWfM@fDf;i@f(@ff@f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@Jialin Zhang - 5.10.0-60.139.0.166Jialin Zhang - 5.10.0-60.138.0.165Jialin Zhang - 5.10.0-60.137.0.164Jialin Zhang - 5.10.0-60.136.0.163Jialin Zhang - 5.10.0-60.135.0.162Jialin Zhang - 5.10.0-60.134.0.161Jialin Zhang - 5.10.0-60.133.0.160Jialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65- !8173 netfilter: ebtables: fix memory leak when blob is malformed - !8166 net/sched: taprio: avoid disabling offload when it was never enabled - !8124 [sync] PR-8042: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !8172 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !8147 pinctrl: single: fix potential NULL dereference - !8156 [sync] PR-8017: perf/core: Bail out early if the request AUX area is out of bound - !8113 [sync] PR-8023: fs/ntfs3: Fixed overflow check in mi_enum_attr() - !8092 [sync] PR-7980: Fix CVE-2021-47455 - !8116 [sync] PR-8060: soc: fsl: qbman: Always disable interrupts when taking cgr_lock - !7798 net-memcg: Fix scope of sockmem pressure indicators - !8086 [sync] PR-8019: pstore/zone: Add a null pointer check to the psz_kmsg_read - netfilter: ebtables: fix memory leak when blob is malformed - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !7146 [sync] PR-7092: Squashfs: check the inode number is not the invalid value of zero - net/sched: taprio: avoid disabling offload when it was never enabled - perf/core: Bail out early if the request AUX area is out of bound - pinctrl: single: fix potential NULL dereference - !8082 [sync] PR-6808: CVE-2024-26923 - !8002 [sync] PR-7970: fbmon: prevent division by zero in fb_videomode_from_videomode() - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !6874 [sync] PR-6756: vfio/fsl-mc: Block calling interrupt handler without trigger - soc: fsl: qbman: Always disable interrupts when taking cgr_lock - fs/ntfs3: Fixed overflow check in mi_enum_attr() - !7878 [sync] PR-7684: dm snapshot: fix lockup in dm_exception_table_exit - !8071 [sync] PR-8030: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - !7994 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !8006 [sync] PR-7903: virtio_ring : keep used_wrap_counter in - ptp: fix code indentation issues - ptp: Fix possible memory leak in ptp_clock_register() - !8021 media: bttv: fix use after free error due to btv->timeout timer - pstore/zone: Add a null pointer check to the psz_kmsg_read - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - af_unix: Fix garbage collector racing against connect() - !8024 [sync] PR-7961: net: atlantic: eliminate double free in error handling logic - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - net: atlantic: eliminate double free in error handling logic - media: bttv: fix use after free error due to btv->timeout timer - virtio_ring : keep used_wrap_counter in vq->last_used_idx - fbmon: prevent division by zero in fb_videomode_from_videomode() - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !7952 media: vidtv: psi: Add check for kstrdup - !7972 [sync] PR-7949: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - !7967 [sync] PR-7943: v2 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - !7935 [sync] PR-7911: ACPI: LPIT: Avoid u32 multiplication overflow - !7849 [sync] PR-7576: f2fs: compress: fix reserve_cblocks counting error when out of space - !7842 [sync] PR-7757: Fix CVE-2023-52656 - media: vidtv: psi: Add check for kstrdup - !7913 [sync] PR-7853: net/mlx5e: fix a double-free in arfs_create_groups - ACPI: LPIT: Avoid u32 multiplication overflow - !7785 [sync] PR-7655: v3 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - net/mlx5e: fix a double-free in arfs_create_groups - !7795 [sync] PR-7743: netrom: Fix data-races around sysctl_net_busy_read - !7883 [sync] PR-7773: Fix CVE-2023-52698 - calipso: fix memory leak in netlbl_calipso_add_pass() - netlabel: remove unused parameter in netlbl_netlink_auditinfo() - net: netlabel: Fix kerneldoc warnings - dm snapshot: fix lockup in dm_exception_table_exit - !7858 [sync] PR-7846: netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_timeout - f2fs: compress: fix reserve_cblocks counting error when out of space - !7828 [sync] PR-7779: LoongArch: Define the __io_aw() hook as mmiowb() - !7825 [sync] PR-7714: CVE-2024-35936 - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket - !7836 [sync] PR-7681: xfs: three bug fix recently - xfs: update dir3 leaf block metadata after swap - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real - iomap: fix warning in xfs_iomap_write_delalloc_release() - !7818 [sync] PR-7734: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - LoongArch: Define the __io_aw() hook as mmiowb() - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - net-memcg: Fix scope of sockmem pressure indicators - netrom: Fix data-races around sysctl_net_busy_read - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - !7735 [sync] PR-7674: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - !7760 [sync] PR-7749: v2 wifi: iwlwifi: dbg-tlv: ensure NUL termination - !7710 [sync] PR-7579: powerpc/powernv: Add a null pointer check to scom_debug_init_one() - !7754 wifi: ath11k: decrease MHI channel buffer length to 8KB - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: ath11k: decrease MHI channel buffer length to 8KB - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - powerpc/powernv: Add a null pointer check to scom_debug_init_one() - Squashfs: check the inode number is not the invalid value of zero - vfio/fsl-mc: Block calling interrupt handler without trigger- !7633 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - !7641 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !7561 mm/slub: fix to return errno if kmalloc() fails - !7717 CVE-2023-52655 - !7646 [sync] PR-7385: CVE-2024-27002 - !7625 [sync] PR-5930: RDMA/srpt: Support specifying the srpt_service_guid parameter - !6242 [sync] PR-6082: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6151 [sync] PR-6020: net/sched: act_mirred: use the backlog for mirred ingress - !7620 [sync] PR-6259: arp: Prevent overflow in arp_req_get(). - !7615 [sync] PR-5993: ipv6: sr: fix possible use-after-free and null-ptr-deref - !7612 [sync] PR-5996: mptcp: fix double-free on socket dismantle - !6222 [sync] PR-6074: Fix CVE-2024-26787 - !7609 [sync] PR-6279: Bluetooth: Avoid potential use-after-free in hci_error_reset - !7379 [sync] PR-6085: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - !7605 [sync] PR-6086: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - !5983 [sync] PR-5852: CVE-2024-26809 - !7707 bpf: Guard stack limits against 32bit overflow - !7636 dm-crypt: don't modify the data when using authenticated encryption - !7660 [sync] PR-6033: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7627 [sync] PR-5950: RDMA/qedr: Fix qedr_create_user_qp error flow - !7695 ext4: fix corruption during on-line resize - !7679 [sync] PR-7574: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7558 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - !6531 [sync] PR-6486: devlink: fix possible use-after-free and memory leaks in devlink_init() - !7553 [sync] PR-5530: net: Fix CVE-2024-26641 - !7550 [sync] PR-7006: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - usb: aqc111: check packet for fixup for true limit - !7666 [sync] PR-7586: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7662 [sync] PR-7590: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - bpf: Guard stack limits against 32bit overflow - ext4: fix corruption during on-line resize - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7602 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7506 [sync] PR-7402: scsi: lpfc: Fix possible file string name overflow when updating firmware - !7502 [sync] PR-7403: scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - !7522 [sync] PR-7401: nvme-core: check for too small lba shift - !7495 [sync] PR-7397: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - !7492 [sync] PR-7398: drm/amd/display: Fix memory leak in dm_sw_fini() - !7489 [sync] PR-7399: drm/amd/pm: fix a double-free in si_dpm_init - !7505 [sync] PR-7404: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7498 [sync] PR-7396: drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7596 [sync] PR-7548: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7566 net: hns3: fix kernel crash when 1588 is received on HIP08 devices - clk: mediatek: Do a runtime PM get on controllers during probe - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - dm-crypt: don't modify the data when using authenticated encryption - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - RDMA/qedr: Fix qedr_create_user_qp error flow - RDMA/srpt: Support specifying the srpt_service_guid parameter - arp: Prevent overflow in arp_req_get(). - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - ipv6: sr: fix possible use-after-free and null-ptr-deref - RDMA/srpt: Support specifying the srpt_service_guid parameter - mptcp: fix double-free on socket dismantle - Bluetooth: Avoid potential use-after-free in hci_error_reset - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7569 [sync] PR-7535: v2 CVE-2024-26907 - !7362 [sync] PR-5491: CVE-2024-26640 - !6569 openEuler-22.03-LTS CVE-2024-26908 - kernel-doc: fix struct_group_tagged() parsing - uapi: propagate __struct_group() attributes to the container union - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - stddef: Introduce DECLARE_FLEX_ARRAY() helper - uapi/linux/stddef.h: Add include guards - stddef: Introduce struct_group() helper macro - net: hns3: fix kernel crash when 1588 is received on HIP08 devices - mm/slub: fix to return errno if kmalloc() fails - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - ip6_tunnel: use dev_sw_netstats_rx_add() - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - !7517 [sync] PR-7484: fix CVE-2024-26661 - !7354 blk-iocost: Fix an UBSAN shift-out-of-bounds warning - !7345 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !7359 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !7442 [sync] PR-6037: fix-CVE-2024-26706 - nvme-core: check for too small lba shift - drm/amd/display: Fix && vs || typos - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' - !7485 [sync] PR-7476: firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7406 drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7408 backport important fix for broadcom net card - !7407 nvme-fc: do not wait in vain when unloading module - scsi: lpfc: Fix possible file string name overflow when updating firmware - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - drm/amd/display: Fix memory leak in dm_sw_fini() - drm/amd/pm: fix a double-free in si_dpm_init - !7293 KVM: s390: vsie: fix race during shadow creation - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7256 netfilter: nf_tables: disallow anonymous set with timeout flag - !7335 inet: read sk->sk_family once in inet_recv_error() - !7331 tunnels: fix out of bounds access when building IPv6 PMTU error - !7323 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - !7309 btrfs: don't drop extent_map for free space inode on write error - !7448 [sync] PR-5998: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - !7445 [sync] PR-6031: nilfs2: fix potential bug in end_buffer_async_write - !7280 llc: Drop support for ETH_P_TR_802_2. - !7277 llc: make llc_ui_sendmsg() more robust against bonding changes - !7458 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7265 Bluetooth: Fix atomicity violation in {min,max}_key_size_set - !7478 [sync] PR-7424: net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - !7342 ppp_async: limit MRU to 64K - !5866 [sync] PR-5794: um: time-travel: fix time corruption - !7389 [sync] PR-5469: wifi: iwlwifi: fix a memory corruption - !7312 CVE-2024-26686 - !7303 nilfs2: fix data corruption in dsync block recovery for small block sizes - !7296 powerpc/kasan: Fix addr error caused by page alignment - !7273 binder: fix race between mmput() and do_exit() - !7259 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5622 [sync] PR-5566: tracing: Ensure visibility when inserting an element into tracing_map - !7237 SUNRPC: Fix a suspicious RCU usage warning - !7230 [sync] PR-5460: v2 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - !7233 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - !7320 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !7466 [sync] PR-7394: v2 scsi: sr: Do not leak information in ioctl - scsi: sr: Do not leak information in ioctl - !7019 [sync] PR-6855: KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7306 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7429 net: gtp: Fix Use-After-Free in gtp_dellink - !7430 [sync] PR-3972: arm64: make cma=0 as default for openeuler - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - nilfs2: fix potential bug in end_buffer_async_write - parisc/unaligned: Fix emulate_ldw() breakage - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd() - parisc: Fix random data corruption from exception handler - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth() - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd() - parisc/unaligned: Rewrite inline assembly of emulate_ldw() - parisc: Mark ex_table entries 32-bit aligned in uaccess.h - parisc: Fix some apparent put_user() failures - parisc: Implement __get/put_kernel_nofault() - parisc: Drop strnlen_user() in favour of generic version - parisc: Switch user access functions to signal errors in r29 instead of r8 - parisc/unaligned: Rewrite inline assembly of emulate_ldh() - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers - !7435 [sync] PR-7414: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - arm64: make cma=0 as default for openeuler - net: gtp: Fix Use-After-Free in gtp_dellink - !7382 [sync] PR-6428: net/sched: flower: Fix unable to handle page fault bug in fl_init - net/tg3: fix race condition in tg3_reset_task() - net/tg3: resolve deadlock in tg3_reset_task() during EEH - net: bnxt: fix a potential use-after-free in bnxt_init_tc - net/bnx2x: Prevent access to a freed page in page_pool - nvme-fc: do not wait in vain when unloading module - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7266 block/rnbd-srv: Check for unlikely string overflow - wifi: iwlwifi: fix a memory corruption - net/sched: flower: Fix unable to handle page fault bug in fl_init - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - tcp: add sanity checks to rx zerocopy - net-zerocopy: Refactor frag-is-remappable test. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - tunnels: fix out of bounds access when building IPv6 PMTU error - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: use __for_each_thread() - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - exit: Use the correct exit_code in /proc//stat - btrfs: don't drop extent_map for free space inode on write error - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - nilfs2: fix data corruption in dsync block recovery for small block sizes - powerpc/kasan: Fix addr error caused by page alignment - KVM: s390: vsie: fix race during shadow creation - llc: Drop support for ETH_P_TR_802_2. - llc: make llc_ui_sendmsg() more robust against bonding changes - binder: fix race between mmput() and do_exit() - block/rnbd-srv: Check for unlikely string overflow - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - netfilter: nf_tables: disallow anonymous set with timeout flag - SUNRPC: Fix a suspicious RCU usage warning - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - KVM: Always flush async #PF workqueue when vCPU is being destroyed - x86/xen: Add some null pointer checking to smp.c - devlink: fix possible use-after-free and memory leaks in devlink_init() - mmc: mmci: stm32: fix DMA API overlapping mappings warning - mmc: mmci: stm32: use a buffer for unaligned DMA requests - net/sched: act_mirred: use the backlog for mirred ingress - netfilter: nft_set_pipapo: release elements in clone only from destroy path - netfilter: nft_set_pipapo: remove scratch_aligned pointer - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: store index in scratch maps - um: time-travel: fix time corruption - tracing: Ensure visibility when inserting an element into tracing_map- !6038 [sync] PR-6006: fix CVE-2024-26669 - !5881 [sync] PR-5751: net: atlantic: Fix DMA mapping for PTP hwts ring - !7337 netfilter: nft_limit: reject configurations that cause integer overflow - !7254 netfilter: nf_tables: disallow timeout for anonymous sets - !6748 amdkfd: use calloc instead of kzalloc to avoid integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nf_tables: disallow timeout for anonymous sets - !7160 [sync] PR-6809: memcg: fix possible use-after-free in memcg_write_event_control() - !7117 [sync] PR-7086: media: ttpci: fix two memleaks in budget_av_attach - !7118 [sync] PR-7080: drm: nv04: Fix out of bounds access - !7132 [sync] PR-7044: v2 nfs: fix UAF in direct writes - !7154 [sync] PR-7148: scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7176 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - !6980 ksmbd: validate payload size in ipc response - !7097 [sync] PR-6818: mm: memcg: fix stale protection of reclaim target memcg - memcg: fix possible use-after-free in memcg_write_event_control() - scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !6763 [sync] PR-6680: cifs: fix underflow in parse_server_interfaces() - drm: nv04: Fix out of bounds access - media: ttpci: fix two memleaks in budget_av_attach - !7101 [sync] PR-7039: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7083 [sync] PR-7013: media: edia: dvbdev: fix a use-after-free - !6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - !7023 [sync] PR-6988: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7008 [sync] PR-6959: mac802154: fix llsec key resources release in mac802154_llsec_key_del - !7063 [sync] PR-7056: scsi: qla2xxx: Fix command flush on cable pull - mm: memcg: fix stale protection of reclaim target memcg - !6945 [sync] PR-6840: CVE-2023-52650 - media: edia: dvbdev: fix a use-after-free - scsi: qla2xxx: Fix command flush on cable pull - !6092 [sync] PR-5921: ext4: fix double-free of blocks due to wrong extents moved_len - !6089 [sync] PR-5977: btrfs: dev-replace: properly validate device names - !6095 [sync] PR-6029: ceph: prevent use-after-free in encode_cap_msg() - !7028 [sync] PR-6977: wireguard: netlink: access device through ctx instead of peer - wireguard: netlink: access device through ctx instead of peer - !6985 [sync] PR-6964: v2 CVE-2024-27000 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6212 [sync] PR-6178: CVE-2024-26812 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - !6693 quota: Fix potential NULL pointer dereference - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6884 [sync] PR-6740: V2 cpuset: fix race between rebuild scheduler domains and hotplug work - !6960 [sync] PR-6861: media: dvb-frontends: avoid stack overflow warnings with clang - ksmbd: validate payload size in ipc response - !6911 pstore: inode: Only d_invalidate() is needed - !6935 [sync] PR-6826: fat: fix uninitialized field in nostale filehandles - !6933 [sync] PR-6838: fs: sysfs: Fix reference leak in sysfs_break_active_protection() - media: dvb-frontends: avoid stack overflow warnings with clang - drm/tegra: dsi: Add missing check for of_find_device_by_node - fat: fix uninitialized field in nostale filehandles - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - pstore: inode: Only d_invalidate() is needed - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - cpuset: fix race between rebuild scheduler domains and hotplug work - cifs: fix underflow in parse_server_interfaces() - amdkfd: use calloc instead of kzalloc to avoid integer overflow - quota: Fix potential NULL pointer dereference - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - ceph: prevent use-after-free in encode_cap_msg() - ext4: fix double-free of blocks due to wrong extents moved_len - btrfs: dev-replace: properly validate device names - net/sched: flower: Fix kabi change - net/sched: flower: Fix chain template offload - net: atlantic: Fix DMA mapping for PTP hwts ring- !6425 [sync] PR-6291: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6901 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - !6931 bpf: Fix hashtab overflow check on 32-bit arches - !6925 firmware: arm_scmi: Harden accesses to the reset domains - !6921 bpf: Fix stackmap overflow check on 32-bit arches - !6865 [sync] PR-6835: kprobes: Fix check for probe enabled in kill_kprobe() - !6897 [sync] PR-6592: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - bpf: Fix hashtab overflow check on 32-bit arches - firmware: arm_scmi: Harden accesses to the reset domains - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6643 [sync] PR-6623: amdkfd: use calloc instead of kzalloc to avoid integer overflow - kprobes: Fix check for probe enabled in kill_kprobe() - !6387 [sync] PR-6202: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6627 [sync] PR-6485: CVE-2024-26843 - !6751 [sync] PR-6677: v3 olk-5.10: bugfix for mm - mm/madvise: fix potential pte_unmap_unlock pte error - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - !6509 cachefiles: fix memory leak in cachefiles_add_cache() - !6686 [sync] PR-6580: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6636 [sync] PR-6561: md: fix kmemleak of rdev->serial - amdkfd: use calloc instead of kzalloc to avoid integer overflow - !6599 [sync] PR-6584: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6605 [sync] PR-6579: media: rc: bpf attach/detach requires write permission - !6604 [sync] PR-6568: IB/hfi1: Fix a memleak in init_credit_return - !6613 [sync] PR-6543: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6602 [sync] PR-6520: firmware: arm_scmi: Fix double free in SMC transport cleanup path - md: fix kmemleak of rdev->serial - efi: runtime: Fix potential overflow of soft-reserved region size - !6248 ubi: Check for too small LEB size in VTBL code - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6448 [sync] PR-6281: v2 net/mlx5: Update error handler for UCTX and UMEM - media: rc: bpf attach/detach requires write permission - IB/hfi1: Fix a memleak in init_credit_return - firmware: arm_scmi: Fix double free in SMC transport cleanup path - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6475 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6574 [sync] PR-6417: media: pvrusb2: fix uaf in pvr2_context_set_notify - media: pvrusb2: fix uaf in pvr2_context_set_notify - !6499 v2 Add hugetlb MADV_DONTNEED support - cachefiles: fix memory leak in cachefiles_add_cache() - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - madvise: use zap_page_range_single for madvise dontneed - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm: enable MADV_DONTNEED for hugetlb mappings - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - net/mlx5: Update error handler for UCTX and UMEM - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - ubi: Check for too small LEB size in VTBL code- !6413 [sync] PR-5510: bus: mhi: host: Drop chan lock before queuing buffers - !6264 [sync] PR-6103: riscv: Sparse-Memory/vmemmap out-of-bounds fix - !6537 [sync] PR-5273: net/smc: fix illegal rmb_desc access in SMC-D connection dump - !6528 [sync] PR-5468: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - !6545 v2 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !6496 [sync] PR-6407: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5802 [sync] PR-5773: patches for CVE-2023-52617 - !5801 [sync] PR-5772: firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6516 fixe CVE-2023-52498 - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - PM: sleep: Fix error handling in dpm_prepare() - PM: sleep: Fix possible deadlocks in core system-wide PM code - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: sleep: Use dev_printk() when possible - async: Introduce async_schedule_dev_nocall() - async: Split async_schedule_node_domain() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6487 [sync] PR-6455: CVE-2021-47182 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6440 [sync] PR-6312: fix CVE-2024-24861 for 5.10 - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6410 [sync] PR-5195: dmaengine: fix NULL pointer in channel unregistration function - bus: mhi: host: Drop chan lock before queuing buffers - dmaengine: fix NULL pointer in channel unregistration function - !6080 Fix CVE-2024-26764 - !5966 Fix CVE-2023-52441 and integrate the pre-patch - riscv: Sparse-Memory/vmemmap out-of-bounds fix - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - ksmbd: fix out of bounds in init_smb2_rsp_hdr() - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ksmbd: return unsupported error on smb1 mount - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect- !6180 [sync] PR-5093: wifi: mac80211: fix potential key use-after-free - !6218 RDMA/siw: Fix connection failure handling - !6236 [sync] PR-6193: uio_hv_generic: Fix another memory leak in error handling paths - !6232 [sync] PR-6192: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6186 Fixed CVE-2023-52504 - uio_hv_generic: Fix another memory leak in error handling paths - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6196 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - !6188 [sync] PR-5466: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - RDMA/siw: Fix connection failure handling - !6113 cifs: Fix UAF in cifs_demultiplex_thread() - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !6172 [sync] PR-6137: vfio/pci: Lock external INTx masking ops - x86/alternatives: Disable KASAN in apply_alternatives() - wifi: mac80211: fix potential key use-after-free - !6125 fix-CVE-2021-47101 - vfio/pci: Lock external INTx masking ops - !6135 [sync] PR-5717: v2 fix CVE-2023-52587 - !6148 [sync] PR-6101: vfio/pci: Disable auto-enable of exclusive INTx IRQ - !6141 [sync] PR-6047: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6131 [sync] PR-4923: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - !5419 [sync] PR-5317: KVM: s390: fix setting of fpc register - vfio/pci: Disable auto-enable of exclusive INTx IRQ - !5129 [sync] PR-5113: fix CVE-2023-52578 - !5120 [sync] PR-5062: team: fix null-ptr-deref when team device type is changed - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6117 wifi: rt2x00: restart beacon queue when hardware reset - !6054 [sync] PR-6017: drm/amdgpu: fix use-after-free bug - !6122 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - wifi: rt2x00: restart beacon queue when hardware reset - cifs: Fix UAF in cifs_demultiplex_thread() - !6077 [sync] PR-5973: EDAC/thunderx: Fix possible out-of-bounds string access - !6046 mm/swap: fix race when skipping swapcache - !6022 [sync] PR-5970: fixup CVE-2024-26751 - !6034 [sync] PR-5969: fbdev: savage: Error out if pixclock equals zero - EDAC/thunderx: Fix possible out-of-bounds string access - !5848 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - !6057 fs/ntfs3: fix CVE-2023-52640 - fs/ntfs3: Fix oob in ntfs_listxattr - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() - drm/amdgpu: fix use-after-free bug - mm/swap: fix race when skipping swapcache - !5987 [sync] PR-5901: CVE-2024-26695 - !5980 [sync] PR-5812: afs: Increase buffer size in afs_update_volume_status() - fbdev: savage: Error out if pixclock equals zero - ARM: ep93xx: Add terminator to gpiod_lookup_table - !5947 [sync] PR-5831: fbdev: sis: Error out if pixclock equals zero - !5958 [sync] PR-5884: KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - !5842 [sync] PR-5348: s390/ptrace: handle setting of fpc register correctly - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - !5856 dmaengine: ti: edma: Add some null pointer checks to the edma_probe - afs: Increase buffer size in afs_update_volume_status() - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - fbdev: sis: Error out if pixclock equals zero - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - s390/ptrace: handle setting of fpc register correctly - KVM: s390: fix setting of fpc register - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - team: fix null-ptr-deref when team device type is changed- !5942 CVE-2021-46926 - !5944 [sync] PR-5861: ksmbd: fix uaf in smb20_oplock_break_ack - !5936 [sync] PR-5911: CVE-2023-52484 - !5932 [sync] PR-5895: i2c: i801: Fix block process call transactions - !5927 [sync] PR-5863: CVE-2024-26788 - !5908 [sync] PR-4928: drm/bridge: sii902x: Fix probing race issue - !5782 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - !5918 [sync] PR-5870: drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !5903 [sync] PR-4931: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - ksmbd: fix uaf in smb20_oplock_break_ack - ALSA: hda: intel-sdw-acpi: harden detection of controller - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() - !5907 [sync] PR-5811: Fixed CVE-2021-47037 - !5871 [sync] PR-4794: serial: imx: fix tx statemachine deadlock - !4907 [sync] PR-4865: Input: powermate - fix use-after-free in powermate_config_complete - i2c: i801: Fix block process call transactions - dmaengine: fsl-qdma: init irq after reg initialization - !5896 [sync] PR-5808: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5888 [sync] PR-5832: CVE-2023-52467 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/bridge: sii902x: Fix probing race issue - ASoC: q6afe-clocks: fix reprobing of the driver - ASoC: q6afe-clocks: fix warning on symbol scope - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5748 ksmbd: fix global oob in ksmbd_nl_policy - mfd: syscon: Fix null pointer dereference in of_syscon_register() - serial: imx: fix tx statemachine deadlock - !5826 [sync] PR-5785: net: qualcomm: rmnet: fix global oob in rmnet_policy - !5817 [sync] PR-5780: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !4799 [sync] PR-4764: binder: signal epoll threads of self-work - !5790 usb: hub: Guard against accesses to uninitialized BOS descriptors - !5797 [sync] PR-5788: v2 Patches to Fix CVE-2023-52454 - !5820 [sync] PR-5789: perf/x86/lbr: Filter vsyscall addresses - net: qualcomm: rmnet: fix global oob in rmnet_policy - !5775 [sync] PR-5724: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - perf/x86/lbr: Filter vsyscall addresses - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !5764 [sync] PR-5642: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - nvmet-tcp: Fix the H2C expected PDU len calculation - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length - usb: hub: Guard against accesses to uninitialized BOS descriptors - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - ksmbd: fix global oob in ksmbd_nl_policy - !5704 [sync] PR-5507: ext4: Validate inode pa before using preallocation blocks - !5708 ext4: dio: Put endio under - ext4: Optimize endio process for DIO overwrites - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag - iomap: pass a flags argument to iomap_dio_rw - iomap: rename the flags variable in __iomap_dio_rw - iomap: add IOMAP_DIO_INLINE_COMP - iomap: use an unsigned type for IOMAP_DIO_* defines - iomap: cleanup up iomap_dio_bio_end_io() - ext4: Validate inode pa before using preallocation blocks - Input: powermate - fix use-after-free in powermate_config_complete - binder: signal epoll threads of self-work- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 coresobs-worker1640081563-aarch64-0005.novalocal 17169408005.10.0-60.139.0.166.oe22035.10.0-60.139.0.166.oe22030-metadata_list-compact_tlv-bpftool-debuginfo-5.10.0-60.139.0.166.oe2203.aarch640-metadata_list-compact-bpftool-debuginfo-5.10.0-60.139.0.166.oe2203.aarch64debugusrsbinbpftool-5.10.0-60.139.0.166.oe2203.aarch64.debug/etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/lib//usr/lib/debug//usr/lib/debug/usr//usr/lib/debug/usr/sbin/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protectionobs://private/openEuler:22.03:LTS/standard_aarch64/42b9b04cdcef3b4828cd5d31d1a07923-kernelcpioxz2aarch64-openEuler-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter \004, BuildID[sha1]=287aed7e37d6990b760b9f08c5a619155d59744f, for GNU/Linux 3.7.0, with debug_info, not strippedug@a3 2v'utf-887cabde5ed67697c645b7fd4159445e8585f6fb41135f580a7a9761bdd82c4bbc0b8f01e4a7197a21ef206fee88f7e08c802b9ff8bcb5647acd91defdafaa5eb?07zXZ !#,)] b2u Q{LY2䟻8{CՅ 0y[u7>;_]Tkl_[M+%a# u,5 9-TFdU6A_wFz#Ha b~/=adR`3촫\"BHPDu,[j'N)l?{$E8Y&>9U r#_r4+_)7&1ՁNhH':x"Xu㵺_C@whFu@ũ=4xƘS~婅fL71j`}:.?xkk~#2h!.푇X)Yub&,8U6i%GeZ m'd=6FDߍ\L-W'¶uZ'VJ,H}o| =V}Ĉ*!g9i&Qypt~ջ/ (>Olː|: Z)g?լ*&(|,KVmnBDϷ˒HBE_QuZUYqzށ>rGX&q!/imNGS7q&mMDA[L<@b|[@$TlGDvɇDCB'OW}\ٞG?-RK T9{$Gym` Ds!r Xp25)Q`,$t+L &!3J:?S^,֭ `rW}ɘV2PDzp^ "QZfxE葌9{S"T(Mznjxsun,ա`Ch҃ 41O Cra㜥Nٲ\TOe ~c[i3@uz)$FK킜JÌX Z"($>Y[;y ]nᚪ )IYŕX=LZt"˶u {xouGfr*>i("N|^-VcQ 6Ip*E_۷slF)I'ɷD)2[#J؝{~s> :in7l'Vw  21TZW35QT2aۣIiHF@r}IŒ4P0 VV'Ֆ4lJ-fWm]_!20|;5T Iydw_n|1sZAF5pT24D/B#..qla_%6 ) vc V/Ipw#,yɹ`m(ډ _}Y4$ҷq цg3,+-=}OLi22ILFy-,)PQ\&(̖^D3S;痋C8Ցl1@].4$Mxp "`D ~"+AYW +S-|i\r_F"XlBxcBFK>`W+620:0x9f=fB=j@zISKq@yx{X[ml,M~-wh9SD*JaiDh#υ,&& Pm1yBVGn4AA;)5p-m=8_m8xL(ok% ~~2M"8 x 5%tV&Xe צ񯡂0g=,&<*) ;Dx{BYo뚣xrt5pbtmmJ!K>4QՊo0YWsc+sk|kIs3_m~L:2^] k-|rM"2&JI[ ;O];pnCNI52KŔ#!fbk 'ܰ#f z Xx\hz3@_@Z@,@2o,§//l`rڹ_mW]g_ dgf/rK/^Zڊ"I-u3;oRaIv_՟v3tGt { L7q,(C u]9-^tcĪKzkʻpW zqg,ه^HWDsZ;T f͊._ZqӢz;] H,;'Sˬ+4ɼ6l] }N6Z]fEGm|h l`Ck((ԣdzB2CGqgL@YLe י5׆X8ۮsLzQaGDj0͗&RB}L4X4)鮾ih3 {r} P:[T 9au& ?A`~My7aU1}̎tBǙ?_ֱXh}ƈt+e2U`[ب o{ߒKDP/d=. ̘NH# 9-^v%S&\`O^S c{D)?*jS}ıWPcʬ:z1mo^[e]P4#Ji 61RJYU:a%{盷Pޡ;Z m/ 6-lTCC-w Tm1:/!Es/Pμ.ǕAgT?%>G Hm?6htK3:18Hr@~fVDic+ЅYQvH@Q;E Co9c@1kbCr&&)(S2zw|mT?&l{0i-gSboCա:8Ű"N5\S"咉eg ߂k̚KBsZTn,䛈#=EPlս3q)#OWXl4*J̝[HrO_J+ q?thv'VFwg~u-3?qo=bl4Ĺ512c&DxQ+!xLqMr6lnP7#}3GRj7Z~lWeY}"(;Nj5P#Q]_O_l;@Vq!qR -pwM.˦(b,3yO;~y.tR`\(`4Ai}yC0iM7'cP'?I.{zwRګq4^%;}.7r?7Se*<ɍĵco!Zd uod%޼ UyIFP"_Q%=79h .a+9R q s,'\]c'm`<俚"P_Hwv!^Q @Q#䈖f(>-.isOt:ɿ,Ùs qn[o8;`ٴyq31i*¬)$L<)ԭ.-_v/Mc='t-AW-1#sALjMc{h=*$QW xq9XN^|5<~-{+x?{S+2(lFq)؅:EcG I<.t0"4!ۀۺ7;C0a`Nˤfwzd]JH+e&u"$(Y>vŸaUVT޹ܤ|B`QfSdHy3>>ý[gg4{5`'C*G3d;;VwX :[NzW~Ѿ}xfqwbq#~T%2eέ,S*n0 3,Zāɬz1W"4lRěg@0zf;\K$gh'qxI~h_Fl*?5vdN irXO|=+$\^6h 5' VԨ% qK{<lЖH?꡼ȉ0%r0Ϊ{8Q aHةL0ÏAY,MݜI= 'oو7ܻW Mk.w '"t`NϢ᱿-ZbSDZiFhExf="!-|YRK"~%LUYiseYV1{ʫMI8j ֮T}w/R @Lvtk+\ ؾ{ŠYnddw'|[fHǣ*~Gyn:͌# %L,Q` IV&V6d.6D])F >NKܬQePQ| #ml|$Ł{7Ξ8O"N#k_G~*٣V[巜Z+?;% ?N> bQf ^qwkD.>*;7bV΄?d,\332xM1C?h}L<'c ץ"0o?tUy겚J~3tdق'ޯ)(dX18Pj^":e1w.]ڷ=!&ЋPP%Yф9;1]P?1ӭ$2TVJVx\ºesℰM)p/8kC&Ki|G6zDW,]6'^ =Abd(@!)Hm#\DЕڹFO 2^ ewE6fָ0)nz 53t2^vOD=]cAudOPar@m@XdSSE-mR0hdLږg> ~7sr:Qy<5@L6*lV@ML61-qZܓn\I57WŠ'+5<)ڿw{ F\GS=sߨI9{O(aP%J%V H4F*(c%ZN!Î&!a r-je7 ~$|q$ i_ϑ Mⓞ3YPhv6V5yR&o&9ܵ mGrjxH(@*v>Gֈ;`xJw~ N[.2lFܪWF3L*Ԣ;*( >]oB]PKkٴz8B50#M^V~A_{᠂t8ªr/." ܕCw߼CeHً;@Lax|%B.Dqcڅa#˒Z^>qH{kbwf>% w)=J,,TFP&vc =Ȑi52͖$S9?-Ž{C:lnoq޹0 ª(-ş".w |]:ՏURC-ҁjPb~-zh.Y 3Odڀ\_eE $ V4Vmw<CV87fKyF\x9ޤnc9gX WSW -:YmwEǩ1nug>%S)I15%p5ˊ$Rgdbl)/7*իYx8 fdX<8uk8 ?qz`_, uC-;qybgd*kr@1E`_C]X{q(t4UEw⡼Jv-E+/Z.GCwcƼ+ծNp[!J֡mB*Opt݆ 欫Ҡv=XE+cӂpւEhw{zzChR8m^9 oݏV;H!QmJKx4ZA( Z+3f!`O-'er{Bglj!2z~}鐜@ř2]͟=3 lL,)R&0@Nwv] !gXru霅 F[TVTTߔgpr$+vD҃D)s'ТG[\kn7y#!uI( G|z7Tz_m]c5ϺHD_Qb܏J Q4A'cbuZ ɺWJ O#cU (3KJ<ȳxfk୰'.|:1L!]6I{. 9c'"*To%o"+MJ/vZ0S^\O`յZ32Xf13jYeu4FŽB.nCD`}0-k ֝YG ^pv>yo d.J5W/3xrƉ[%* O{$iwU|"P3?5ZT[{%ʧ<I:r=aha ]/˜/vnM+I,4GR,kxܓi`$WRK`5:Ja!ߍYϳ$P#]g ~C|>)~3۩ c@>kckm;$LftE |HdȼܻA R"zxYsA?3 8-ˬ~9wY/,d HB5ַ&j=/Sb?oa?>b0JJ]ʙDApS/ 0Y ~ 0]46&>ϕ%Y)cHtqys8 _#ó|XZ2':sUټlLQXc_) GݠϟNx8lCn O"ci!uijfkd3BeWxܟiF'{\h<#{j;uw`AՑL kˊŞ%%KGq8۬!MGwV/Xp?7:0?q{\Q4E އ7G-]Gȏ{ +ѬDa$XJ޶{KZJ)p*4UXSC@1݈ 2ئd$n 1RC AUἅ oqfg]8S6}a͇Q(ez],;R"6yEGK ]H@>A{F[ ^F#8K)E@ K,\@3C&0gwrxl?nQ{LSݍصӒ9W6!;W~PlSt0@ʣۤ$\IA.*vn'~62o1eUZIyإCXjtn}Z H@ ! }0oQ|%nu@T>GIB LPin6K-lUK*`Srvv*P1v#Fk0/[Z nۄ%`ŞفpGX:՚؀XNI\QAhp;0Ȝީ U|=MF }Hm# %XH F+7+{Ø_$ ߢCvs{XgpHB6OEN bg"wSmh〺Ejs9by xoju7 l_+[ t2CnR҉+6 h `դ$LS/ ɣ&4F|ŕrF2^#215<G}cp'|}Hܷl6>΅sE(eSaOA-|i zR a?-r<_ZGqu/谣75a!٤u[$L^ۅjS9F 8'8<n> xn2tX*]Ō*)pYfsg"Ȕqg낐 =W9ݼ9_Mu;b>7%D~;\w0-[z.feA{rZҐ0Cq9d)T%ъ% s!c?3W15xCLhHe$- Je/,"Ct'AkS?' >70`SC&f:[v@_>Gi!Ooٶ m> ZW le Mes=6Θ7BLִ֊{}ΗfיwWI͗ =u-ǝz˳W%( :|.WEC:l}_kKfT,!Y} Gt{îG7]#|OP"yGQ~\wT2d>ay.ܨşM g OBK:E`Ed,ڋ"h/ymWt 1 =/4myVٖ7~pLaP jU'4sƗBcN|E H=NGNu\edKaE&+r1v;B&y?mF5:/wor7ɬ&!,w2}I9ϮTKzq& .%TĐu<=ʛg]DvֆĜ X} Qxd3*@Xƹ=Uhn1Pۑs6>g[[\ofxo}7wJ&λ'uS.]@,`-LМ(4tQ21Y-P9ai0hQ cxi,g"m?f@`,Qȑ_bڨЖ/+ᒍե%%3AKl5%2 Bn9Ot dLguփ51M:bgfX88w~#Zoket50l!+%] 2sGW O:-Nlfw8Ce >ʤEtAUZno] sQU9e| {(M#q![遭wX&n  z_d ў@^ԀlfY+ >pM~ޒ)ؗ+~"O\:шajŲ,N<Ν,ȜOOq{dlN!ڴwbgP/q:3:_ y2qF]nՂkւ\vSorM(ggT?"걔;'Qւ-E7V{zӊ\/-3{`1 iq=KԹŤ& iȃ" vεl &tw}+yU-Ո 1ÆвndV_9,TF2 uݥGUs0F}jr9 ᯄ]zEJ6@0B(p_T=V3ҀIBq"lfH"5NO_S+/#X ێƺ,4c7 MCob4ŇT@=ViEcxB~cq،K}In,*aEϏ֦N),b<[Î{1w 9AEHf<Wp 5#,jfMWhݘS?{7KY W\+`FLr@ވ}sq K)Z3Sp2,wL2 \\U|JHr y [e]HCREjFDzu{fwʚxc~Vad\oC3/MtƚYh$;屍?%Lv:,h?%rBVBbҰlo˄Ud;]VL#Űzkɿ)+| o|sWf4f6CXnlaw[jDL`Cs$K~|',.qQF}6oQw~!cO{H(3x\׬.?܍'1'k |hOнČJ]eVGDCnP3|'_l.rZܱ#1D/ǻb >QߩzYzgUJjUDuP=\I$K5l|ӳ| a5nu8\Dgm}f)0L!/7hW+hʊ?ذ\b50>$qEhn3nL5FS;KL V@W/Z-`LW]O^(xR{, ªR쾲5&Ĝ^ko.E?.CUxD}y3^<>(%yQ>znoɕĶ&d攛/̨!i}d:f_N 'S&dƍ;Y9PsOq3 ǥe@'}!Y53e&?`?'>A~L!"/D P7؛xąd{pk[#b6t{J#Ȭb,ꗜ =5uؼD0Wd+ G&\tf$"nO"RpFu.-X5MP:U=AdbOےmLdprcA}I+~u$@8"[Ԃ_vؑ/g;Y*ӣV >q(7 i)M3_Ӻ~~ND АܒUt exHӘj :a03Fwq> AYBfGxcSXjWv66I3)ˆ ~|t(]#8J`Ø|98j Yv )[#C* -Kͬ;/F1g,^VׂcLBE (MֳQg'M_C"eD1^$|M02.s޺B6-$|$AjԪA0:Np;'Z#;T :PV[ʭ:2Bk! /l-O!?M>.Uzo?7 -Iڛ' &jy$o~2\15v{N|lf%֮@dR3eh_ؐԻ--$6.ϹYctPyr"$fe\ =5$L=JWDخZ7lP0x*Cio6q {vٙ_R-;* <}P98 tk.QVW7z Jlb壙r.RXXLG(\M\0]W;˷j>c^\,RY6әP؟T8c&X rBU`On.-П#:t5k910̷`?׭+|ȎbYrV^sF6d  MIxoPhpf D6ok2}͢#[啃 *=@| 29*?y>!J9iLH(_頙Jnڋnӵc3&;(\ʇz0QFBDmcP9P94 ?5WEݘj(oϤLot=Dś|!./жr u`ဒbIb%d_ZD?S4I+|dʈ: vBޭK8yR,1kL/Py4Ƹ֩T 0{cӇ-f… _[ؼJ݊$<0 S$+Zh ,]`tƢZs԰;~1M,0SSɃyr^8d/pۖy@pFϠ ]e]yר$tI/ruZQĆyƞ}ROD~8x7D pp1yR"bf[[YUe]Y{^*IbSodެ_IX`X>Bp- K㱚PafqR*3R aryK[h>[ bFQ" IXss6ʫLM=+W[,Y0V!-pWZ]9oX;.!($&H7͕2UKk<*ߢ}}]hn{71=<F(tThFmiMW$ #B 3Rc?69)$278 $+LgHY{LlNjG*Z*`uދ< =-nT7]K$_djA=#L/ ^cȵ$|ʓB,ifu €f ٦ ƭI6ͯPqx~ ׋KL s m`B,0HxG;Vp|f:cݣVLI7*d82T[({X#*,iv{sr /[kDk4"5$HeELae5V)blNoP1s+a)B лȌq%倲;c-`ǕVGFшSq4UrQǷ9V읦t;3)>=~ϗͧY嘌 d713?؃/|)Gh8(_ ?톙\h ;]a1e=x[s w?Q8f`)raU4nկD6U 7yҝl}ޭjjj֏ S2aX/Fid$Ƹy;y& YDo)${h[i=ɸI)N`.QNݯW#LfY]UY\Tizwgj+1%3dTA)oK+?+-j ]f]' ~CvTov)/W7C\@|OuS'?TC.O}= Mװm /TCw惯v!g[eN%78U&~&7OAWfZBKVv0ahDZQoŽ^J0(|xڳ)W-kxPvffM'X|8qXݧ}eLe u*%uc)UEH5Vr 5ΤPۉ]òe e<ď;ƁQKHo Z7T:8swF o[ Tٝ̓+QmJjAw%^}'m7{8r?`Y,W+ UKhxz՚gׁqajܷ smej<_ȐhPB]KUO/E{$'nm~w%fd7X0zg49@JLr[673YDwJΫJh]\(A9Փ)کޞ3#Aba|NθdSA;"Kbeaiq,Q"fkpX;:\Hv/02'#;@p'_TQ}7a 嶙\ օ0q1.m %~/I:EC*W#:Lb<AFǛJ"j:q[K mdwk-;^VRl)![.N4wmS!;`;x}pqr$ &J,Sǽc+̙iav1SGؿfm]+FB(u5E/A։8/ګQ/= [s]Nsa^Ұ>q`l0@Z @ zM?~1x~5&~:EKPNye(=MFj %GS#F A%N6 % 3meU`>R03:z1wtJ~'EoxfZ^vF!v&5%n|71s@d V-v-[wxL.'0x8jPM?>#r.z֩lXp%E0T fY.}?~dXAsE ̏[s:k.ّ3Ti'M"UKZ/8/˔Z'PllT/Q61&*i5/1tQ[S@V7˕1 +1!̿:b1Y]ffW$jQiK0fZ!qR|&ɣw/?8%D˼J$onS^LEQ/D7=;u X Ѿ7L;%/C9$Rxݍv5+&`7S)u斔_`@g PiZ2D=Ȳw`rTAX^*,i>{1-)nj-~́GMX6eŝc9Ggz3zRyΨ![K=Fp?8>n!"ڝT}Čb5Ptjġm?U ?=۞G:y%NݟTik2Ny}oCSy^"ݸ@fIN&8" O8n&ö)c&~$ݘqM ̥X'ٲia jrj%ۂ<]:eHN#@{z{3ǖ vSBA?TьÛ|K[47jVҷN1>QI,@{+tl`4_z7m({y匹թ+ d4Z>KwJ O#*\Dv&x`ic'ڋ.ʺu 9ýMJu?IPؚ6Gڕi5pRm^bsueK:nkA]=Do,ŃqơBMH 1"/Pn]6<5&0 'ǵ#PGN(Vzu c/|Ө)p[z &_gBAcQP^ؙ"[ȭ^$Mikk& V{$Irӳ6 E=T`oj?0mEViCԝ _(Xd2: {l 0ED?[̀B}?w]dc^_$/dwIeՕԚoi-%٩us bxs K4*[5\g#e^UJ]R;&7U{.3H1ősG6\Z`lccKR,O ˣPɌz1KL]{R[ 2ed*BF$ {RH砺À,.ċy4iYv-R <v? ֆ;;Ps!Pf=ȈW}îp6'Z:J/PuJK 蘫HqLIanr*XCHy aj۹RSܗ1q77jL짯pH4{U [;{ 4o7j,s-|i `pDAs iVNRꜵEⲦ!Bl.Ew{<Լ^#Dȓ3ydj}ĚS&܎C w9g53.[mYIX> mf%FщIiUw7/MQ )YX3z~eV`*D(xƪ[ :HaB Iᩏoa -b˾SDii7ƈ9tBQ(Z*~\Szs;uB@y c W)~b(QFAQ1;Y:BWMrzo *t4;ϡju4cJ)"^gߥJ6rBpxTYYu;Or w^dm՝bNEEԯĐBӺ㶞?dx;WteG1昜kΒFiq%fQQ$6T"؋Ԋ ز2UĢvuW^Z?Zv =|r -JBd/8`.p yËLFc_ /nX ,N+}cln|~0jNRkd@η\2wԿ`k~ 0tJ*n,iaqzM\ت0G:ZQJfhM*&3[blWdk@\[ҍqas:1f+ꀥ$&NI[&!L( tUd{qp8rP`ҹ 2V&˷ӱ\=pĭe<VpZ%ZqFlMtCIWRњXJ5Z-3p 3ɭNm?64Y|e x^GP(_ԓSWإ(o}T__GB6!>aOdN(/]ۦilB$mo>)C;7yU]I.OO*#z@ww2^>}q'N 9Efz +|m0GޡNbAw߈`ZZY3}N]y5u{@>edNA8%shkE߶ +C}-f5[S1~9N`xg;SqY"L$1 }WIzEyBCMUR|)Ϋ`<L Jr/fP-&2EGjUh<[>n&τVYcFQ?g ,g#Y&Hgҝ Ju@{yǼePtB,, K7O~s$ژ5f2#N⸰Ӿhi >'beҷ btJy3 Zx'^X!/EOmN@bbJ2M[-> 55 PboV7{ی#8Xĸ) :a[Ϡ 8wRg]]G5:z 89|0Sv["A@a$ن>mdjBeVY+h+B? _4J{\`QApO&cA ad>d{ Sh'JY^]_:i1se8'aW<)lf,ed扙4!<'64Xkm1SV>AbQCCDQLo>v ߫ If̘#0z=رϱ߾K=0*f29 T?&t |0›m~k&CSN^)W9e+89A VDj^p8#uLʭ/}BA1MVӉoC ZW|XϿ w*l(FrRdMzbh󲞍}w:УO 4zj=5A^]Vb$rfۥwoM9ud@}&hiT@B4+h7e+0B?߽et:*"n1?[ZWqELú!;GPޥL\rY] B鑈A ̻p3бr:m;_qck~# : _:gב5/p ny η*qq ZfHiO(E(RqF NgijǼ˸bHI&?'{Fpe  w@j8,8u'7TpGZ9܁Clϕ\XԘ SDd~őwc؂ZCB*V#-_@a-HbzΧ sk8.WJ0$C7E,CEk ?;P~5E똈6hǚ0vt|6Sʷ%(ARK"C4EapI'xc>U 4 &QF "3qۍ$7%37ĺSLҐ74r"~aTC( IP!'Ğ5j7ӬՉk0M8 9jj E2O[v/?tECk+)ʣTS8jCw<2:^[tU@t\hV=_\$KۇJJ/2̧AcӌxWiIcg\Kj&G*Ƽ1~= _R#F>m}%?R gE"\e*xy(r8^f|, /YB}eXa*O{$Sne9tCu̍Ag|4c76!6-@c39?@kϨw%`m?ϼ5t^pICm 5v)UVȺWAjͯ`d=JjlO #_^z]+H/v% UCO4"釗 0^p]P+LRp 'B)~i=:~˲3`AhO絽ZĂocM1*fM0:Xĝ\[n&7 <܃i&K czнuTIS ۲ ԱL<8cwލO`#ʞnQo:Hd`z:|jQ߆M'f}^L\B4 &ܻom8ԓ|C3FJqm?A>O(|HX0vƩerb-x6{P z4[X) PO "7JDanSy-bL~ TBfO;ᙚ}PG Sx_uT{H D+(][sHBOdOց )iFTAچU>.z"a_9j(rW fKZ\_z`׍ OvPAcUNs۫˟"S:[Pf9{%>/,32ݬ*}WeTd{Mho ?ZDTט(X2{Q 3?1L x3 pMHFh%ֳ5 zW%K]ܩwN6: =jS.R6[w56$X^|JԄ(I3 #*dL]'ȍC*nOأKشWLMwF11.pkVW0!xXtr {8x3|5:5㝞=K#pXlFpGtqKmIrKx3Q,nnl*T%9fJP/T0?SM,;*C7-,Shp^rrtwRk\ @ȕ9pVeMb&a ٯ*4@LN;׳Xn^j=R sizAu.`}d]htsiOkRPΌy |Moj[}E(S.̜X%sAI2 gur:Ɲ)5@)7sVȈ5pb\pHobYXp=HC@dtS\9W*YQxi!ΟVB~? @'%coT{|z(ь0^vrj% D9>F렶ö3+fհf! veY(`GMlz眮 V$23đH[sTHwˁhʶG5rH]dE25S=w1pamUHdn,U_"@!p0]9wA=fR;ws,7˄Pң }DAG_T \M2_P/,cӮ5W ᔮK½; ٱ'HI1`;Z1OCd|0B€;s  2!m"+vsߝ^~S J*gAmr2W(y;m8}|..Ɩ Nm[24- (IoctH#xϑngU~ `-So0W*%M5JȶKGxQfpOp%4vhUavV{H܂"y'0O2bνO\4OQ+%~Rh#(4}kZn02}Q/]<[c $Xe 5LwЬkOh{lY'yw_ǪS}GC`.Kvh=/8i^xbRm4@T A=^E뱷rX4Id&-E$yTaeݑEDpxK22"waS{ 2W֍'^X2a׫is[m?@66O*3څB!# Zqq(ò{-*p΍Ԟ 8-8Xb+#@8ˑRpL?]^zߨ/:띫UCS[3B+{ q>*N_/ڏU䫉g ؖ6O+;/vI~D53 ¨Y}|A-O/ſJ`)v3- ۯ2)cAX_=Q}ݏ]'j~R6r}-jRBkeb`a鲂YN"_`5ys=ĐV+(>∤z'AJ)Q o:Jw(ǧ,ɵJ'IB- jKc-uH~<ܔͤkz/ve(s|,ݧ|{s#{ͨ}`p3b2sD=I:s9#o)ד߬7A 5R(-~"8ڴмOQfoӌ_GIB.cƝ%> `,:$Z`%x}.vX|9?J])5ozyz9_cdv'fC)Vg+zbb=B5z;HݩW^o07Ƥt(*|{酒 Rr3N2"_;$xcKz(,kbW֍&U;ԽfL} T8.TKʗ΅57 OS£.񆺴!]S3 WC퉖|^@G&%= ꂁj!5M Pd*vs Դ"_4Gc0Y+n(1Us,2Oh{V^17r⅕8D^ϥ'Å,vKzg+W@\+W " ]k k3Cm''2jz'C*e\|:J= LSM,O<5k,с *9%ZU@Asu УJ;9HQʤ&-En+9.itRH$$e>']|4w M-tЏ::@ǛKr`oQ[#STľ%>,ֹ 丿@?Ϡ<_O}Rë1!˞\R0ۈ*Kn,h%%p|ETE.6@|/ixꜥX-Q\v9[u C|DTB}X2xK=i;mVm:"c@HYϕ8sGMW>"5qF*9sw\g= V+^Jt PS:W9{5h,\(t.a4/16|piYڞa9ѡvs8@+؟&GtQ'=wf_p#T?TauP H7N,D3wC5'F1VQC7N<ߔEO:9ƣ6 /TLuMV^Hm,R YQ2܉P#ɥ3 Xs}`fn ^S5W@ MR78 ^g+ymGy; ]nJ$thP\$ʎ0ytuvPtV97Tp c(ocx;@f?IZѳc 7383Z3,LtbK͛;7i#cyгCyR:S4IScd"cg39zT!!*HBr2ujL/e84eJ3vȝkw>@xlSLdI^,Łb=XMcmBёt ,~>n=?ӂnю U [!:%16g-nW7xX"ubܺ|).0 MI»,e) Lr1jJꓜdyov22G;`:_-oo{j.`B%ZDAݎ$YA'05c9!! ܪ+ ,t=uͅuMzCie/1TNCC|Lt! kC hT@H|"zi &JP;ˢaɪh(G W{- sڇӴth Ep\=$՟;=sZ:"Lupf+,FmXǟ[ιWhpi1޶QI=WO%j g#1 d/>!ĖPPFV; Zk(2AIEM볐rc\YN4tos~,MHqb3/:/ۆ#P r`'9ˊ43Z`9ۑPcRnsR9pH]2BTcKW:WcC"N}o kX` rj,OTtoxvg4X(_%#dZ7:tР_0`3coR&EsR0(](|EZC$b j0Kd*zx` {!Ta h/bd0 RTֹT` Z 2iaiǻ:njW*#ͤy{P̊x>44v,r% 0oOw ٙ|<)aTt`˗ةIxyq" Ps# ʪVp!W(2'Gk7sze1Q}>+Dk/MMxN (e$d*QЩT7 7mzQ l#\k ` mbuC].B:"6YΪ"oN;OTe|Fqʕnk+Z VaZs4RW=ؤ)k|J:.D N%BzvOm9mFx iF;k;Fc'?b(b"guwL9D}54 w9=KYES5#W )9%I "X~ @@MP\<׾CLj~ ,R!I:|J:Ya•8vaOv (!hB6V˼ y0K$% avĈkBš q* \Y3THvF?e^{gs>G-X'H!p"C[Oe<[Zdu|qg$F,ئq:Y#s4(nɞ`I2!^_?lM)}$)Jq{99>=ѧǙ^^)E5ڌ-/ " 9>F[D ,|1O&3~uE'[.)_kմ5X(m|67Y6QKiKZ{˩;ath*MSE]RY' 315eܙ wY6?;hZI]3F ?8f/!m!0l1zph) &SꍠDgDIj>4#ܯazIȢ64R xcBh01Zѫ+4ڭLMЄǏeSZ1@֔: 127H6'Ui~ ,9t5'fMD\֦ zp301YvU^7FP\q.OFh$wSG,{ S9`~㤘/<< *0?e9Xږ,HI(bLY k3?'V>>``LV:=d&Voh%F0漠@w8u_!9tjU4ZFl]vCn hҁ7@|̬ `nGٷz(u@L#TΫ}~ 颼FQ߆ kxTpyG.$ہy Zvv$:0_b]F^#:˒h W0.T&e$~TIr$SDEc.čeJc: %7@q+SΟNr`e.RkO>4 UMk~_ouC^Ú[5hTA2}Ev@m 8G5]ȗ ge|,_K՜)ezuxVp5W벜JWX1bnݿ1pR=T S+ H>Nje欰:x=+9تAHںjƘ/@n- Jf7jҶPORs%IE}oBO0y捪TP3NƩAu%Ud6/{MgMRNZj| <ERi-[cE/p+6rn*ILzf. M[h巸k_O6o{AX6\iD.I.Ҽ0mʞV6Ç=X4ͮkBbEf/9!bJ-l+kU9IǺP :=O%PR+J 8=u?8e":8uk|ދ짿yT_ #ᣜYb?:P©NZl&7  yJEeV3ƨ!3ۜ0zy?5t;G?Iβ(RaKEʾ㩢9ʎFOqiב|Q]7Wcpnb,"6ඡuΖ ؒX>*XYL@] *] >O\ :,mAxYu+k6[pOudru͇*Os*b:rvgGsksS`lӣi).<̽D*Z @V2arVem ;Qpc1QRNj2\;ǍZw2Z>ǠN5Vء֘Uٯ3J,FF !B3V^* ufO:)șFI7J LC %hPq^ ~t>_#!YMr(62tI L֦`e׽Yȥl.ӥNמ#r~9v@Ze };:q0OxL7KuQ :y"z_ZXFs,nQ%HWK ,8|q 1+(GRt$PnP ! G.1Z؋xLJUL"ЄXo*v#slEMjշ܋<$+cb wI+U)-.#sP0y%ٖ`LYRopG oKH,?ń%i}uӰN0M8Њ,,A%4GjDe3 Fp\$lʒ`4^a8eFV @y\WUⱄ$>x:v/OA DX6e[?'Q@i?Br*j.>6VA{t`gm͌5ZƔV2,v2Izߊ"&p6^ oqu嫂rn 0-׾:N}U{wP Ɲm`)}rb)|ʂf/7NVZN\VD:RiEͧV]Μ"^+&7Qec7ּ#LE7W E|1:|"uˌOD@3wpw-81vۭ'+#F_' $-PBk%ETKfߔA`G9 ]V-zHCtqq5 JhW6 H$0mXڍ*Yq`aH\=ZM 7֒&HtfTթD6Օ` 0I"W-t8Hw"_Diij7brV7CIvbG7M}yNXVަv{BFgi#an|H&8Yw`=X%B\<*&f7V !e2:걑:ܹ`.k|TNsƋ<hnNf%Ø6!SH4|$iFFX樟K5-"4hsSAՙorۿŽȃ)q8HM*@mc̟v.IՊN1!FK,׺.61 k2 C -|{ABV9Y`xekvc^9˱1R\|.kn(uLؖo Bi0dl525рdKv)["Ci뛯FxR Q0P%;Mt M:)Y=584W-1<fO}|?©G%KqFA[:@QƲʫ5Jzֱz[R`ZGO2jOh|w+=f*Ap0ջwpЮ0U;L݇v$ !wa"vm]{dF>3;$WI3J alO KHvIag.#! UfCC(R"52KY, N*cwsQ<5; q8ҸMMܥbBlՌBW*jK[y<}miؚI#E|MT-+GE4D22Ǯ*{[[BߗZ0$f@=@[FʚԊT RwP_SDE]]v;n; @JIpRjo%u7{)KY#"}iwuɉ@ x 7Xϋ7b̏VE֚PM-0[ؕY8ĥӓkʛ\,7"ve"w};[1d`-/vvq7 c9R<Shv{Gd.YVc, J#y^/S@2Z'6Kkő*E,~td,U3jDn _-AUAy9_$8~ Ma%^#8 Ccrf! [:W=nDWܶVH5z2G% I0m31BoԸ3BFQ"䶁଍-phEG=+QpQEZ"GZA|s q c~GEߥ!UJ׿bzdtbYXi&-r?*7]ӛ@ή?*ܣʅ+ nkFU9!Ǿr{VpW΄}~u 9Ѣ|сS9\]τ)B>:tcҍG.C^R-rÐ(Ȣ:vYǪlr gG50HܭW ~K]xc{5IzͶ[qȢt'(Mɨș7@o9&O0rikQXM%p1=QOF4Бhg ;LbT0->tZ =s-+Q/'gAXǖ8&l=| Z8kZ 4gSiGn|ފj|o6!8{Dю/Dbޗ_ղiP8CcopɁFxAe hm Fw}y{tVgFpD|}{sc>Љј 0b @-?ncvP%9XsNCih4̏i,`O\珺 c_Lz4s+#9!'lT?{*DFr@%naYGx2/ d>A ]Տ-)tz52~sfs:ue+n)ã["^NW].KOuSk8ߛDU ꅋCPCaH ӜbX6.b{ɓ hjV);ԫJ ?~c|쮀hE(&sT9jd֘:a.UqL- D~ w#cU}ԯp40^k96)GNqfzRkɍOFhA0ga[8V V 9ָL9rq9=`4Ey^ZE5?AݔiJ9/Z)F^BFۜͩ D"%Г:يvP0?&$X\!Ǡ}TrIF /^ɻ{,iGʃ;h!` S+1 ps5=QĦf`YA]m1 Xj(p\]TfT' G]|,^e?l)g>)rk}!h(7gŊ@;#r^ӯ;Y&*i<s oX>KZ1irӳԽM-Xc+{Va㏐h-;C9Q<`$9f.^b^+*O&F^G5ĥy6N } 1p<{]DVۿ?'i1]Wc,JP13Mq#cb4:S&,G*;.+#j(i&zcMNjBvN)&gASG; k@ʆnUhМqHi6˗^^?-Q Ք64cC *SШ2MkHM]19 {"ٕ 9,=l5_fH -꼓xPtF^c TR؍2Vw2vGw1*D=_ ; =KN77" 'v.Y]6vB*ٙ^2}βԤ7^}QҺ:# W>Vʕ/,Pv$qOĨH޶ydaCwݓ+ULS~IWT%J<;65,D 0ㆪBZMfǞcۆXsnBzAr]H%!2{8*.}~Vz5V -cs }BkQTY2ִ8o13pYOܣ"&¸Ƹe<N ͮw҅ ē=oynݢ1d!w lRg #N8@#<ӊ ڂOb$ li&U)!Nww<"Ly8ؗ@s f'f\?7|x1y%Z~'lt3aK8-4GS򯐾§.lجW:\]g~ t6)~D_z#؈ i4| ƸdꄽV5R$G[3 4/ >4e;)h%ˍ>+@ARkUv^shX6~9:aw0鱧&2J:S;a*kg/cHFo\όw HB]ktacL nݚ}4^4Z*S*Z1'B*/HͷF 2 3!2vh5HpdΠ/j%$ނ48ʼ\/[tD Q<ΥF VNN]2U H&,jSD%A~ CO(z2ok;sSPefr7999j5Sq=Y$Vˀ_'휫Obb8.1N/ !fӍw8d8ԃ2dt侬&c{!U$Ptֵ bt(" uz7A~": l}GY,~c#K0*kwSiƶi MD!&Q ÏRFw+h zB{ )in Dh("V+}]e&> 6}'lT?ʐnPτ>(-(ØA_*ؽo#(^f*a &ɉq{ vU]S Mҏ3 "*,87uxolLg·ֈl4 LX^AC"?h2AO^( 4uɨY&BHkգZIJzRKE݇ҕKYP͞3q1ҙ(0 ˆ1w&ʀ$4>}=.Ny:~Cq7Q=_!+n!>yۤr)gY}"ABhJx@7" Dqb u};S?]gc?J.6}5u}]첾>\"*fѠe' Iqbju%WGc#q4OBz獐[mտq[pc$kBt-G(GnHd!S+>To>ya 1bۼ=mepͯkbD_q\v3+sе;F ]l-tDfFFzb78뫲 VF`2?':#ooH)eI8+J\hp¸,;P5}\Mt3=ӊxOM}e@ML^xY"s_|:ѹz1't-a;47R6l$b3?F&9"{ \vMNĻcB)N"kp`V[ =JxZ1M]UzAx)O)] }VEVÀEG( (1;r`3DToE !2OB#1 'a@<1nOMpcdNJ5`QV77vuA6q 9X%ru{: h tT I-OU0o%@LG]~/[֍؄ PcgU/FgھRRF|{d'6n/-F++Y3Y(7Ѱt4!{m6dm̐XBRLXg`q ҥqԂH:{=E~ t( WQu!7' r'.&X Įrl`/KxYpcCraQPֱg_36Y7 L|;u Xi#O$\v:IQ8q򺹇׻d}hU6!fK*%MH`sׅ#H]#r:#U'2@x|~Polr7^c)X=q2K.J2dcWW.6=\i L^#Bmw 3t2gB{5+,䦮Ǩz`HSM10twHV>y䇻Wb= : m-.!ZſUL_`ypGU?X!ܨͳjlR_+׹cGzUfvi;„!8 ކ5]+!F1qpH;G4@ VX_ؽs W,պqY7`$j09֘qZfJ!ٸlƸ.PuKrK_գd`T5" SjRj'i}I(0u]yy!ȫ!ʖ ?`Kl%#Y:NjE#^|B ŊFY3ѳDnA9PUq&mUz0(g8o `vo늮Q q,r;2>dIm,(E !@wΰ ZOd(5 旬>W ыX& Z-)QY)8Q0!NCM1LYQbKe>@w|= r9OPy ;H"jH*U`ٸA1æs??Ab\(m[|NNi˳53n|,h'v'WyY 9vWӖ&w~`%UUG'2aʨMѻ=( nhD'ǘcnăʒ"dYIiLor%q tb-lJ0QކE/mBS񁌔n&`rAhzǨ2Ljq24'.Lً1m yu,M,֫c6}XjitDeW )Nxutd PydZh&:dGV"d5[*-X?R_SZX*i+7,"LC ^2E^ l+5q>R|~7!<<1e4OK рG9hJr HV^@`./T)p$pɴ^嘠TӹOAJuҀp\XϋSJ`He,L_7"mApɓN!CaFA_xV*?y<^'H񉃵oD"Zhk&'T-O›]rF+Yje@VӦ]W&+0bj?F&v۾\H_inш?nCwJgw0o,hy&,hй'jir}&cd'7cyf B9`i"c #)x>lMK5-bG֍).'M?Ym9Zv7M,%Nb>1./[ JL,qdw'/nfnS'3|cW17}PQPU zo +0~'-ַV6J=IÚ.̖ A!Б2˩uZ;͕{ڙJ0 kJM<Ϩwh- axtphK`&0=s6%v<f9,A؅rH9\^0i IԾ޷6I|1 uM,Ѭj9D|ԧP)1qΦl7)#/.*!\TqQ / ]W1sr!݀HQ"mOǪAJAhۥ#wp1w3gkեi+mCJ9a A[S9_4$JiUbl5 <AzxXI[)殙 IA\P{[ x$+$_Y1))1m2(-6-Pxf Mѿ 7xUS@hT$}WӎŒfwKXٮ$lDv=pS"gd/iZaK@AO /tT_h9T7݁Ŗmc`G-?-C"s뻼|KYM4.H{alv=7$JYQx?ӨOшhTn1 "}L}%d8K+no1v3t"G[~F J8>#!H[mPr 4]?H1mAx$-_7 Nv'9geDLҫ\s*/8Zm׺o34`Yh*8f&P !I'ɨ{(Ơp / ~MbGA8Ԯ|a fxD01q|fyٳd|C57t3ȩv 8m5[K} vHGƇҤ2WxV}^5;GX'֙Ý{q]  Q,(%Ypj@q #Km3t 2 '1 EZ37ۀb-dyt E#>P9esmct4h`6%,Gm r]coia_]~x{\T3 ּ"9·ZJ' nP9&')d2?_s .Z~gS4ATlJuqy^[tzVW!K>!@3dġ2`7=6s`:S&og-!̴k~TԝX'PjeL.r{ & ES2nʬ0)%Jyՠ[RUAPpSdܦVPyC&&`#Z|XDWZmX/vӊIMBuUxlݝ K{P/ $QsGOziym(-7}XEk傥qizRz1"Д*RJdnmI=DuKFAʯe=V&f/|!w6/wD]>IR< wtSr%?2B m'm#cB+Sgrm8ʐ*"#$V X- 3&"gU^pSOVljx*DPqvYz"t u'喭oޗf@ \>gNrExΩUհKB3Qg_RF,L P(~g*4>QuTCqg5;i9&Hm'ozClnژnQ9Oy]̆A(s\Ǔ{ߍ[`L$j cv4bX# ):tdJw_51!GP!U,E튅3颼hz1_?_L+@I-b' y"!8=ߢ5߽v6!^0HC7{0R;l*8't_=Ѣo p!N>&cM!OuӡxY p8вJO/Fp&'C‰î$LbgۆIQ#C@suNCKX%B5"αQnJ@gSoui|&vk)M(opߙ`v8nVeAnTAX$w|MO-3:/ EI jMu$zp飚dtT%AKvbML]qp,J XB!0`C}o!UQ=@l6%`+b1rt\Fd)C mЁi' |N;Øy- G)O]EBcqo?}MsLN[0DFvU4Fpz̴x9RomB~]!~%2 ~Ӵ"u@+ VKRPGIU:F(u~yT{#UɑjRb2м="~#ʙ͟AfME%?7vve,F^FFvtU:9O,:|eS?; CF˽MvƻD|ᐸ錣 1c6o-OzCop Ɣ{L];+(rk^w%i'JRQ=s.}XM,Pb.6+Z"$_ۑ/:ut$iR`騊 l MцG\^xlCW aW ECznFO:lKLE_IT/ ,͟ Ivi[0z텞zY}z>TOPLFIo_IsalWBHt5/C/>ysaKc'lk?]VI ]rM~3u 5ͫJ;L-̑`,2 is: o;/mS ԛ3Y_q_gZЌ9c^fo*,T Zb*|an> qyuV>}g* (SSabEMC;k2V$s*A_EoU3b(l[UTO4c)T͓BU${4C{Pф$$~"XQuǜQğ4(!~@%& WmtZ+C-[㣲jZnNN7D \l8JRFyc6}2HXܦQwE?%vk`l ͟*8횱c3FkF4Y@O}r>IJ)<ρ'h:9]-|2qݮ&<49ZQӐPu}6Ha^\5ӌQn.zm- } S *q s4Dx/.f`􇶪ndilj63ay'qNwrs!/B4I;} ?6L8b5=:+G#6&Ϥ~C_j$&3  +Fn->U Jp{O!BSKhǓU?])(g|!ߍ?/:s$8d 翻  nw 2pUXBmوլ9XUJL]rr=W:?9\pEr&&J %H+Y iJnm_deq6s<tOM08M̊-2:SPz??eg {V}#ChQk#IvI3Lo#@Gȹ\ް0MG('Eߔ-3[046Tel$'SB+ff,V?hsxޯP1qϞ>#/\2/FjT\Oq(nr2v^WAE|2`/n%70d6ő.{= ВVx?.ǒTlőcWC[MiiMD?2;{/>Z9b g`˳CwS7oŰ{y` `iW=ՠY5/sdfH*0e,Ao5y#u2jAVc+,Zlcoۭ_Ϭ)d&. "}'}QAS2ľcg,~X<a q]x ( Y a{"Pgپ3Ȍ]K2\eȨKq$x^ 1*acTщ6LK.e'|UnEh/4;3 3n!:m|`2_ V4#[ E)O^8q4KMc.f4I| <{ߜ$r#,TI*ftޛ }[; %cagx|.7 =MP;|-QTmń3Qx1,?̖V${:erM i1pE]˼Hl{=/EJIK<Ξعy,[_: /W_@ƥ3ZBUآohr貂Ld'ې < 8 x"$@%;{Hs ,=X\ѽLBmZ$f\-SR.|d9oz8|%%CLzs;%/'0ڙ[za+bnڟCc_'V CWv sɭ? \m(zE@z(LDy֭lk\5I9dD}> =D!$m_XI̚{p,L˪Dl]pHu f!Z-61 o78 bm ׹S,؊F KDRɋ**)\*fI괿iS71]0v?ީ^_"?ѳj-,+0FK_i!E(;+qS8/V+wds= Pz['5suˍ~ֹ9'=!W$. #ӽ2ŸWl1*TfŚ_FT<47Qjo msg p4qm|E`em7uA t{$MeJMqǛ 2agVK i PfV: 1?#a**Y9LZxb0 ;qr,;S4aAƀy^36%J{wKNuVjT"YcJHBAgD=@ZҒ%>z.x.QLY Jb`g$`" B Vw %lnAYjm}5)xZѫөcuaBF0*z%!?8h:JX[2Cz}~ 9f hA=:b3rÕ8;d5,cŠՈYn6 >?dz $AɫiJ:[|S@rp*+ǝ4jY6 oLwq͹@&99>f7?bЈC!_3KYFyj$VK5((NP3"ܚL;.~dž^+"DAWg/.:6$̆Ei7ѻ9WhHzҩhMؚ8Q[8ˌr HY#NM-S3s>NVaqןT<0@@& C\3qPцEld}uⶲ ~bCόw}i8^8'7+80[Du:Dj<`=e58)JXTՃ) yr6a,+ix`9:¾ZIƌ!,#Tg[|F[JA[-Յ>'y]3)?-^#uLU_=(wRVGVAp! #Dpc޶a8Ld| h-? qi!,gfM+KYZ𾫉bGZꀒfz|>)En^9e& 8O/f}KA(c*}5 %e6B-[_&SAąc0[I˪Aczȅ/-JHv1͞7qoωvQuhj] p(%]T \*pN܉an^h\!]D2}ܤ#2+ q]Ư9E!T&?>W^[dNty54:ph9e lozW]vr(ffJEH@0ZTrK,mIUk$恇I,8j?4'`[^0JBTsyĚ <|6߇RRUqN`Vc/׶|Kno.O7Rdֲ+uJ ]!-Pe8og4N#%'=< |FY5G T [{ƍ K'М/|F2+ڀcK Z{wH! 'i+/s){ t4$p (ล+XאʦT(HCA۵IpVD|z{GdmTvdf*V(:n$!r*8櫱MC9z%?LjXrg( oȟ`gt݃~y5I*E9T HfJnV)0Vܻp6c<6"23,;X,W52!j[ft3LɮxQ9#&gj1  Y+ .n'cq3Vڠy #T\1&ϮV;kF*H`qc.sby /H6 x礑 aW(`_I ̌}&:"-zW&,bPȰU^śk):GJ<;vv> \2۲䴝tN`#kXA= 3͆4'HO~®p}JR0 &y٧FLu5\lJ-пKܯo95(qHǞ<ΥkkM wN0JO7@A8*+^_,PkՒ)?? Ux Q6qp}皍9S&كKfg.S>WaW("ô_9\R7Q#Gl=yaaY3LԮI ?ķZrsA(V[GO 뇺*ژ*ki#;~K8D׋a*;eQߪ U E,-Bk;VrkGBŁZ;0]V"z,UFTþӉ,PEMD(PqrAqUm_fTwTjj@>$䶞Kj3@Z<_\u:$skoCBj^R52V3Vt?どo.!̈́^RN˂.x_j,PRqBv_ ` ь~MH9ꣁLibjj!)Υ$E%pYhN{ja;:liKzR/ }`Nai0ڐgK~'/D. -?кOW.e̛ԹD~f3$}}zkETSJ`&;پ/BzR|lyr(deX1f j/c8.tȿ(g~/# QG9'\) Bt<,(5 daS.89a'r%=8 ۣ+EyEn? -5![,2={͟uN߶T8 LXrďÏMA]$}jgX*m/F |''Tǰ (Wi)3:\:?ل ? 5:vB>~Njpw}` u Av۰a:~v$9%-=}BwQѶE \Jz75H6}ﳝ0 R ,fW*C4qˌ2)vKq:J*NE_uP3'H`ThQ(ckt%s'aI~D;k=Y˥;O*}c^J.}IRT0k=؉CmaûJZA?㹝H,'N~Rl/I0~i&rZP S5* f}B>JH- ۶S~9!'9\,?(lQĒ0ah@λx6"ƜRWN2pMcwz_Z \ėC,9!Q]\^XQ?}!JQf冽2"gAtpJ|WC6R#~Gi/]vhyU/2쯁n.7?,d89[c#8 {1Af~0[Q:4e6p%t;K GDr*)S>z51 $4'PDzc* 'q~ϢZܧ.PzA%s5Й *r>U>vBUYwd]B,$|mL`s7UORS".+sjM<o:zϞTg@K< č1 ׼\b!H͘-7҆P"ǝpͤ懶S`dzG- Yq7_ !Fe(.A"y{P{SVXesL''գ=_%K3RgF=$M ͖1'=u48+*7taWa+{m&p*#Q#i_He @)z;Wk7vBfPɶ"Kэ<.S# {-@[M"AHȌ2#" `;zmࡡ}Zik%ۦȳ4]#ᘙ]qw>7%YeEzH󜨯K[d@L}X2wV Zoh"^J돯cϖ" ⫊3C7n$3HN 9J]-JHrCuHf` ªH B}|jSh{i IN $0*~rO`5I MVUIᖷ,WW@"5:k90Eϒf3EAK8gMwx#T6/ZDZIiC;ZoxL÷q\X}=hobi L7(znȆNIvVO*||Np:vѴ3N Ȇ ~ B'qu>Lv|b9%YCCm&NUkg{ 6mF!ZQϑ!&w,1Pt3hkgQ6L1mnT7pnDgH;!P> <埡fJ6w<̞^Ȁ")Кc;w؀X$T_S~ta1K;ucf>L{VڌŎ%ru@urJa Fyɂx}{LH}Uɽ2}J닉  V yL --1H&8ג/*j*]pfb[ hg"/n8z)!ܵWuc;|?\4'@ʄ\YTcV)pcR]}s-dc9,mY\ sՁTw&-*{YD<\B -`|GX*djh5"Lm;`xuDg*Y5-X=ov[p*&~$(坸r>$}IVW4}aUX BPJ2O)Uf·=UFt"$NUmE>ws޲>Y혴kn26'ڥfMr{[A-4)YeGJr7e@*^ ZP6JDrJ1\' T>T9 dK4Ҩ&Q" E7'tkȯ"ę,u}[̾ʍ:cn]a2,mǟ >`*wl@aBj-dZAdVә;ߟ1|5a0c]S.Fi{BͣjSBEԖtK$X!0zGl.iHLTWSއ=r S#٭}?IU1,eFc %/YۛW~FQ>S<-FG|7š'Jt,d!@ނl\iJxJŽP,ق5gB{YLdnߑxz "^ Ͷ18?Я!G=spWO+= J;Nqty) Ƕ6l61\-F6TF58VQGʧ"{X1?c5^4BRjۅW}r 熪fp-x:<@g7,2YGc0Z;gF}Ic)9XsOk 4 pÎr*kÜxy1g]Υ(rnӜ6O8'I-H\nd $W+;yo?[}&E]zH=a: I.wmz,T&C8GLmql[{ *DGQFBc~(Fz{u$#ϘֈP:1J&'W=sb]Bn^yX&֮)o/`;fq[U>3DXd_ЯÆcS+ "wrqho㍜X@\Kv~e Ab:{CJr#* ]OA,"b]{_ɽ@\RS{fopR= Q|Dz?~o.x91 nv!Om TaE+몤Zn.NpSr0vé*#?"|ETN-͋F(v`%AGZL+<;8J3C:j/_y$ovIP&gpaT+cZ#^ r4 Hp-)Mߤ3iqgr;6$" $BWcηL$ c痦˾J@yx umM@/UO7K9#q̈́/K"TK@цlb{"g4!rȿ|pq6_eq`vgP yvN0_$#A d/60%k766.xeL-34"d7ٞ{j[\b8'u|5"5$WUpty@3}_6]cPV5{ n6 AP#(Hg;p;@bc8:KQ'Jhd2Ynn:Ő׼nSfU/ͬ"`Cvnm iῚmaiWFReI$K]";[tʃeu[[ Dd v|t"hߴV `d;9XZnV#Gׄ2{T)p^_fk^oa5|<^0&:h3#ڠ z 5 |P[or^cy9x6.\.+5 NzdV]8SbW@cw^8 ;MGB5@⍁}䋲!vsgRrIF+rpAIuijV\Kk ~r?o@.M>$جԔ  *i‹0EspshK>):`͞wd\i"l(>Yt@rF]=- 4֥a 9k6Uv 'wm66g9os&mK"5Q!HGK`m $yasK0XeQ(T߅dnڀ 8zѝùÿ ;YQ&rqD,!%0=.J H{# &4Imɧ9j)MI'== J;c? ]7ZfgD1.E's n=).;ܔ(tAֹT}}+id! to>-pJRVٵljH}So5l'/L;>^Ҟ#{z~镸izVʠ˳Iǔ!4O,l<{1 XXC$Ć=k>Qm^A c*L_FHkOmR,rm8!db/Zur)2,N)<SgTo}+ER+lIw!E9v;'I-ΟՃVt"{ )Htu2 Xnsi}Yp (-zL%Bmyʐ-`Tg-Jwy1~4y讅ZܜlJ4GYҰ'\-a,9 csٶ8RiGVt;Ef]Vyr 5(w|61"Pju9[8I~4n?8 [Q؝jެ71WIh]35Ln( |cCB@ x(6 Pݵ=ɐ!^HP)azbR‹*H~GQf%NVӻhͬt % 2=R8&G.Z_NՕq,M@%4QlWk Ay@u|(+*خ _#%k ԯdi|mK,-njk@CEۅLg8d)sb2Ld  vZacgYk$/@LuOĘP%ѕ9xR%`4Q LjP.^CP.,Oz\&M}32}Wu˝_o6B3f|?h)XNu X@y ZBV{՚bJѩ $(=4.O0~ yo rMGkb !:_0O ߀k53OuBmݪkhz~ڿ4T._9"ȣf/d&^i D9u.=g}HF[i*5_z$'nD@P5G6 G&˃?,{LWٵ/ k9rk,}qKmˆ9C2)r% \d8cgy WYȠ֝q[us+Ug;Lq;lۍK*#{[T 0uM3Hu~%"8%CBP#9A+ž\uJ+AһA|^3U]{6K4AlaEm@sQښic7^+F㽞L)UuYdSUwL0vcby3β|!qYLcӼXH@:lO,x:1X(jAM *)+*|/x&P$D"A4 95b;"Ec~JřSR!+X ;M@hIƧ0? cq!)nȲSsr[bxekYnwU qp|k<|"h#BjĭGvp lC1|Dx LnU;FˬQЃ{Qla_DG?{}K}Hn֥> TI UGyg"w1p>,@ش ͊GϩCa wK[DA"Z(qA4lþ&B$-h.sU/_wxEL$:!y e0.U7h~5S3,_^qJ䤠5{ e9.8w"xҎ_Ө^.X,ig fdy|P .1s`ۢS:^D=#Y70~H0/begkwV +U\w&'s1üՔnD2 HV9N# ѹ{*^#f{KJ\Onfs3Iaf$'xi8oSX`Gv#VA QQr ӷj@&z **B 9ziM[mg UA3Yٟ3IJ@m9?HkqS2h6K'jcmD$ IGy̪o~S烝F -jݒSTP ȖdB 6lR+`#˵DY'p6֦{NyG:$|zr OS8?;Jr2+a5p59Aq7ų$] ,747يIuJ"cYgx<4q}⏨fkb'%;`fcԘd- U$psYqJEV1 JR7uQ*ɤvˠc<9Gn^d9"· 'LogE4\6`v0 tR:ګS ra^ksHh0oBw#UJݤcΛQŃ(fBnK,.gcu NJu`tb*ܣHt+4]W]Ax>]{˅!}܅T<TJ@GN=hVɓaekWE<ʄv,Y{#|wMHgT=7m%.#Qqc:dϫA4GF;xN- 3PV+f^8XWrY)^;(fW?f ""HL|.Z< ֱ&Aڌ(O2s늚sP{YmOS8F\CHov6r8%7;u@q;F]>;|`{}:^ZRcpm~wԞ֫eTb}%<廬yz $3Gjh3, %"#d1@ ]]U-P'|6bC3W@i%փ A wBۭH*E Z=T2'/l&$s>p1\7pj:Z}Rd kK:3==fx"4ڿg쮥#NJldCj`Rl?*;txYK_'uzz9Qsv?+woNAni1¨zC`rʿd 71ciEFh̓kfz= @ 1嫒}ro ox0w3eneNr7R E]{x~y 4sr hmw|\0u:r_.z1h.07 Y9P[UI9vKJx'UK6s.϶BZ0[ m`L]=D!G`Słf} .Y>yVy0ݎJZ|o1)HHFZg` 90Urva6]m' Q *%4a8 %G  =Ξwn7ՔqS>&0aH'm QN2*JΊUavIf w6#R~jI+z| P;5e|,T6Dk2X/Y/n (¶{q 8eN'rGcC ^ 2--j#:bIH&V&X 欇|t/vcm`i =D2+H'}qI.`VZYn(1d:錄B%B,V8clk̇}?efQ'$kw~Tt-"0\C)a rAFe FW CC,ۘG%v)45!y\ͪl=S=u xGRUYE:ɖ6Y& jLMI?ShpUqn֐=ӓ\7G 虨yUkH gzSx.=M( ŀn^%~ ,Sq-a%clߧsk%!;c0٬JgnpHl|Bp Aw_!8YIh~ "k2Yxyh]'3s裶Z*ל=jeOwT8>Ea- *l\)?"KI$.vsq֓d4= ?ѽDCf בSqU *ssVveE-| 4`Q7<AA_ĆF=3xHnS‡@D(jjnWJԥ4MMH w8m~d8&*URH~Qtx"񆿠9י2TLU*=!x5I9M~\ OM%oZ3)}PXX&㺁oBB)ufTH6sa[26 7,źQn[$n;p#M2I'p2YqpEAMx~`un&]P|J3!jDdpo7Q+A:פס/s8ve S$z(Ee/"v SS3O&!w^eOPagoqnٟ=EܛU V.(sr$>i+/|S|ó6.A4"fU}'aQ15x)HZF^fk:bLU_wLM]+'*_.zZ~VX `q</;C:`I+VGy]+uU~C43X\g9`gh&ͫvwm+p ٷLs Jo0iV~f)UNY$D(K6C~0 HvM^:L V艅G}o/Glj!*b9 AF2rˁlbc.o`{~u 6'VD}Q+ԃ39ãr=jR;M*`j9=0tDlxsl&vTgm-%cS$5·%iF 9Њxn#Àq!iliF)Vin/=4s |su>yLL2~[T&EQ`eBp T,^R<*mq r%=\R7UO8>`':@E\D6ri0 kBJQl2M!N-06S.lœ|5\{}rO5& oK K|=ͥ0H" L1G'~`<"&H݃XF; ^2i$ǩ曕5V_4YR ,_ u=KKGX]+9gZw{9^ZJzXIB LQ5Ӥ95  {5!qщ atp(#,R 3`L'ssJ& NeZr)Ih@`Kow  :Ny/zt.Xt,辸VVF5ɖfIYqEN>g}6ٶ{7_ Ϣv{bٝ* Ho*4(czf eFAn$FVիB~Ώp8 7PJQ?p!d{NZb`'T0@ kn[% ;MYˤ:K'8ⷪF ܐE3v&T0  jUV?^[7F `gHϞYW'fh1@K'3#z'$rq0;_T㦜jOұ)q,ՙaNj|9HYb̵],HFg¥#/JHWKl5mp.EXrf:V:CMZF6)C8fm[=Ic1'1zM`J肙]c Ԙ]zq&QAR D%~]c{u~mO!"ss~ T v^0qs'km6.%??[ sugBiֱj0Ui{s48էQr#!E?w&`&Al[ja)M$xB#i?Ƿ`&%w:'-;IO `DYgÛ-&J6%dz+Kl), DN }{5Wt{ca4UdDj׫R +x{WGl6i7D=@Uӛ]1ͧ, .9F塠&(Ń/W$\./>!f ScY@La8t?PP!1q.^c|@)]}չ|*qy]f2lIN(Țwb*$Pxo/ !ND- Ώd-CvEZ)(-kOkYNLH&_[;P;XF[%/_2g*(ةSշ*d#khBsT7<+OH:2O_֬$wqTqdg-Cæ'ur!ZcF'|TU\ )6XwaMdo޸jMR߈ZY/3Wl).b{/x a8G t/LNy1h_(/1 Xe5y_yr?6{RQXaeOz%^ʑv[hzQlW*U+ NxplC:S+x6jcLD} /'z3>; õEVVZCa%q+Aj)=b!M:G:oB}Z-`n*JӸd@_m5þ;xGYVTr~@?ZdJ;wc%b}UUB؍i jE2\2C1> "f,FUj<9"RP-SrF,3πjC~vnA C8 ~5uP_)5 w ~p3ӡ3/ bbtINY5[vo1!*yQeo_ N>dȔM}x?V рM"̺w'k- >l؝c{AF0H'ͳu+1q7sU1~2n)_n7`?9<Lu9c}w!j;Yy4qj7XM/|]x+BxKQ#"Yb<3UJp;Y>!dRI* (K4&B!@i$w yB5"sA&)O׽ 4zW[Y/d^Yx)5Wr| %ݠf6bS*57ָ*Q꺋;QZm4+}1U 쵱/uxpJw0gCoӈşa|@Ԫ1GLו OL7F{&}>>lKޚ@II+4јbRyuA7d]BU' zl!|v|+6%I7!i4uaJNw8x/76ݨµ[ #jʗÃ_XfEO2yΝO,H*9 ˴a MYN,66jDʬo& >/а=yBlp ;Dݿ#Æ7qLYMJώdB~W{F'Tˆq:cP5 @MO͸y5Wk;Lf\(%ž3ufoԋkFD3A4LAJ_>/~5snܮ%/Ʃ#)D}QKj-GZ\)}xhC{ G~p#A hT⮮!"3|xD?@ Di ][t4ުX/ig8ドid;VXY09cǙ/[$y4yqf$ 0$%\}bV{#=[M! UR~ȅٱ|H>b euG՞F/p4v^уKk1Adlí U|4_ eAd `h;'gF&F=<ӿ7ߖhfs~}D16[ ?isFmޠeepv93l._P kKk0ӡI坪WjmFHI^G.)XEPVږlҼWd 5+]aB.h@9{w'lV\"k=r KiZ:o@7ܴWG$?z+oYm0..uv|W8.`(;ܯOF fG;fzhq?&Y :" aX~yVhănjz~+[t0]A O?3@qa0W&` Uld֗˗JrVF6.nw&li Yn!(KH_]8f-7| X1V>o7"wLڨ];*#+.L{s) Ո#xr#lY'AjE vQ0CɓyNp8W |f*3MàAJ^_p?}g;8]f(C"O<4h} .D瓐m7*sh!%OiUrMjUWh-AE}?˯{>D ;SصVm(KP[N&0>:l(YXGDu-Vz|;<5h燵ԁ{ri+z {(0ɱ(Iǁ[x爔UumO9M&[)z8${TAU bngB6V0_&; gQtɁ/%$+Ϩsl; +ɴjwșUQ4_qQ+7UEANGMn=3E,)OTC3c7RYj\'ʜÍ)d [%2a)sꄻv –t˛O)g.(KcP8ոMYY "WØW"Q4* "HӖVfg ,^&!韓g:234-w&͏4}C ;iֹe4gR5zd=ɒef&>$Wq<7N@1ix2OUIy"J=r_!P X2ŌP-~f>LW``8ZhF3:A{ E=PL!?7e]0M :_,v[b͍[ T-B,ī2XUneyՈdUct_ɘg_41ڍTw8 m-vwiR7o9n1'F>`LѪt.qikáSMP s]njph mqi0BURu`5/̧2O }6`-Ut Јcү{))TT y"$bÛCqno؆tXS0O&2m,Y/$qaZ{XX\⣚@gi/0kEowqk@B*-\?r(V8 a2.< MHgϳq1"Gt9ܤ \xG[?ZrmhhL?M畗z@4:%S[o_ԛa:Y'9S1@頂Fbiղ&8Qp Jܓ~gzrj+~(\>+29@}>b5nsJ9WCȅOdj3]zU^2-=D=qa,Az dUmDk/,Nu|EZw=^|Ƞ{/m4o_zdli~eͥNe`N'x'GȧA'5:webt&>$B* "rͯ97eD(RѱHxiLe]gtzz?YM,v=JʇLL Uc^KM-#ϙuF7 m^ݿGCvFx:=rh`[*>̟}(SIIO+ "U8wDg<^?nZ͙GnJ1 Ni)jrݕWKr]u7ᰄ TX ̲ x)Iw4 K|P2yB Mܥw  #gIƽv}@+$!!ہyG^In[Je.:-p- PQW8^[-Od2\`ˑ{9klD{. j;&eJ(&+&I;x/JPE~ ͥ2`B%D]]3硋KJc?OYZ2R2U:%Q"5Ӎ}sϛx}V3ΐhr>aSQuoݘphI+<ћ^ Q]H\ܨ嵭2e=9S>V(I)yl/ ܕy|xҭ(<'N;*:8:U!ިJ VT uЋ܀ vy}(npCJWbqR.|a. ]RPhi$t8OD{\Lo:C#}@X}j!Xt % RYh!g H24x-.Áe4udǮojSDwi <)ǟmd`ڮ|kS\v+O_ڲh:T2/E|)(ug!5>| }|O#^xK֞>Ѳ>mIf~ =̋$tP#t$D|k^Z߬DR0-h{ʗ)mmcW9u(Cv_ƊaMT^˾+o1ً 4є/b`4CV17(|.V^] ?CZMnhNb@rUN}ɂ2cU g,\/sՍ~W+¡'.c]YNTjr)}ՏpdQz)ߞhk"{zeAfI$`J A=4BMy>w?qj/D<[ф*@e7Q{ʙE 8[O쇻xs\ k־:VNʑۛ\ZGO~ݖnޑwd%?ׅin*Mgbt7zER6a(1& Xn.=H[% ~7CILgbÓ5Ζr",b3Yvă?*{Y6ro@PysAD˅Gܝ/()àʆZbo͡)^#XP>A?ھ #GrIʧ=%f*Ʒ+DrX T2^tdiM,0yo ?P=BlTlҨ`PqO.b׽/KկE_ ,d%}>XN o:6NYTo I$doY[<곅Dwi!# }Y=05~2͍ Aq\AabcB`bީa @hjjV-.}l^45Y [ⷈZC+hdB>Ad 1TH}Qh@!z_}|h)\d*{bγ.Ӛnvᷧ 8&/޶qKkq:m2CIe8~6hAtB(Oii*8qݷBu~Ч`UiQIgpVY?hhrB:.eT/p{o rkEQFHsi9N*;(uKb[y.a}Ϝ/ٓHiڀ}A{Rec`~}:S>W-pLg]mls,~$̊2)9d&̗P1F "JP 0q ؇8y=7C{[ KFT6b~H蠍 I]DI*АFZ 1';Q#"5a_Hj 7X0zpoA ]nj]= , Y_@ۀmol ,L^:Ay.(_f&F"B:'UJ;Zg( ~s8ri=S.캌_h1kB0;٪W!4+*xrqVM= B[/يY']'RͷGr Hz닢sTy:ճo"iY=00lY5!e ibQP4;w1rХyK<->Xl_PηW&͚7MbVջfFJ'ࠊ G}3R<*>Jv/?Q*=3ass-)? (.?♤\3[-V8ϙؒp^dWgGذצo򗡟G07QQ#DGer A ӓ(ulo}6V7E{Z Ϟ|Hyb!|-!{6^7QFzHo'1 Jd_̴XEA%Lͫsu6̣B--P0B'u;N(J3BIJ%AWr}W՟m<0<=R}m`aՖHH 5&Ypώ`n$o\&*Ky4/2~2u3?$4l=M|F|{e0ؾ V֠~qK-璳ձchqZ0hk =Mӕk'$BHg[c܇nUp=`tX]Íb54r<;[em{ ϼ*8D6 G4qF>Nf;ۘ,O0rBT& @ }T쌞(^NV ^dDm.upT4א(ţ#>})q6H "3Ǚ/3+=0-)!/kmx~d(ikTBs8<vuwOOPf9m V%9M!bдGq JidWwKJ I>wmv :^!-d*1#Z. fs?Aq+ĥ#)a63@,fuuL$ABKtAO -t4nkxIզW֓يBeI9A@vOl & T}u}#xv  dQ .Հk/ɢ"N3*z;*SRSň[Ragu|\tKsLb;#3}g~}x~N9Es_=f3g`he]+`P-LJ ]b$]ҬSeB7R5[|M\*D%W@,Ԗ38ah:9-pTv8l87ii1j~J ha4 AVɪc 8$)h@OY$xl u{ 6-\R+ қJxn+I |,g@*3 A#{On Y+0d&?t"$x]3l'-&ۧʬdhG<~k`pŭPavuCc@e-ݸ!;ܠk#vfH{쌵DE5ytȑ<4ϬO6u$\?٦BR .(dP2Ң~U02afYp!(ji9fDL/{~XhE6ltOמ1++\ ~I w[tq ևE ت@X掋t[SIN WJ]J 4^+d=z ~EuJ򰊽4V\/h*)k5b5C@Z>HUXnl2<~jΏI8Ful]ɂy>4|؍ei}%̺=\<<"aջ nStZ?(w!c9 'z/HcTZuEE%NAM^m)KWPyDrnsqB˳;SЀ6O- V0Kdd5֫jڐ0O$C_|Ct;Ũ&Tm=!CQn~gh>D5m~";I)7lqpAȶ P\DcL[&F' +TFJj Q"~/'guiκ״'u]&$8?%J*$$VdP/ŇXnr~0芓^ne#d#?ȑF0..W.'~ liM,VCW#< ssKjhcԎB8Fr"[z*&} Y/4(hۑAu͓EU\#H0 Kz3u[qC(uR[Fɳ*p XRi ~ySe$zVRzsdsͮ;rrzLz붞BAӲ]>cۨ,k8kmUqG@Q<5[oGëaA!^y]q|y*↦lVdށx #nTAXyEJA| HA_"D2#Jd0.8fH6'~]R< $BTf"<|q[ /f>jLS娵ӺӜ ?_rl+ S8;ާEⲭ| re;G0u&-(i9eBfJGB"ּd8^eP)"F+BO |aP(؈E>v?D 2zx:"bIFYuOǚ9Ǯ75@ҾAā)==eōGNjuQZX)F5UaJ[f.>pQag]D20nHb 9qVbH=~0aր.[T8#Q5n{1Yh!G.LA^r7UЦ:-D|o2!pM^ؿl)8);h4d:[E|>naLݿ`;<,l~ůċn=i~m?̽dwT{j5M>slKÕpqڵumX"+-$@$`fp$NfسR$ 1;i#G]@ӝNO8e.%V 3U{[ZP bB8|h~(v,j)A)wgA*/\!r>Z? +&ڵघk'ЩkUVG( r [z4lФc]׉磟YNF `Pk1^M gpZY ߌb7'|@l˭n+[tb)U}=jJ|JsozL|:(~x-̾pme=ܵ  n!o. Ydi QubΕM>pCJ Ĥ7ʁ{@l&h'10-R4fv C=AMoY"Ha~Bmx4Ζ3$/mӟUNzs&>.> ҄z,X)pkt8`5/&EwsΓ^7 mfzpRnN[xd RrpR]w2l 1e[tc@Zsu2ޘkqFt(" | clZ9u*ѨGihk%G2e#`fۦy߿ qۍ: p|Ӝa1]Keq9-%uUފ^UqѮ*Cn+ǭρ VbM_Y@:۸nև>Ts1}\?D,~WʵrA ʾ82j]m!M3jE`p O L )e  }PH4ҿ)9EbH%09;0Y/Ai(n;%$:K"+>2{E<_PMO /šd[YHEMW!H Tkϧήm>֔+G즥EE6 94¿]Fp ӏbd#m╾ťAs*^\}TFGZN N+el ͢""uxb0ܩkV?^K@+՘$hD"eIAQ|yn .K`XSy|̧fSQҷQ*U ̸,e0m4:/=Vj'*f척W6c]oH??9/tZ]*rzs봑.aINz}@}\k׭5~dM5ϕaI=wF95OeZ%۸*\4 g#TlA;0ٮ*qI%Z!ZtYq~ A=" Y]އseV'Nüg)*> H5M]IF Fx` iکk9tU2ͰV\0h9L={[lvrIUjDhVvuDd#pk*8>T5=Iu—hX# SMt OQzh_}y][cøfnbչ~"z6M|b??suś>0TeR 7:;sI464{vXa1pzCWl4aSD[C.M Ig]d]9#k_MO P<[DVvxhc3+(6( 9jWqMCzzr,^QlmB{rP!Noe? aEK:}tDMq ɏH?iހxt}7faro,m+W'{ sc$(1 -r xOHŶ~1K--ANO-Z(:VBnVK8 tvԯ"èպ#(0bx}{#/WP|@ެ9$E%׺fPER7Dhhn/LBD#+v}usAfylшzQkѝ"Pʄ̄!jit7Ɔ}h ({h(ZtȌ zH\bX_E9&?'l^CDwVj_)#}.h~?->?Or.$D̹O^#8Wh,}rcj0bN0Ep҈]53}AK8BTs/+SVe46a樓w9sS!#{/<#"ei'E&3ڨNd8E4W ŠrId/ٖ|РcRmtz`d)FUҫ5itNhX~tu~y7 Lebh6"{qi7-e0F@hQ-956lrEkInPޞ(}48nצR1-V-dzXTjp'LtOC,uM t_uBe3i=ÔIO aAp Sr@ⶬMgq=/яɭu i vI(ayY7K]dn>PJSgq 2=֣O!tw~P:KXm&|ȩ%@-ʥQ7hyv5w- 52_Y-mP?,_j% B<:8cu#o6xcf9~l rю_bCRt1b3.Nȕ_KfEW/X#ұ1[:ݲLhvaS8Ǚ: >~iB_PO9J34s=AE-^V>J7RPG50*\ G-&(ӑX{`d8Nޣ`Ź8 {)׵-(8vGwRł-L]i?B=ĺvI >oǘeYōAIvd'.fP`@HKo]L1'׎?XF`u`1.mV)_OJ/} [/~DtR$*hTs*zz2X qj0 fFG9HlK:f8v#.Cp/ymHɚ6y,]<ếil֏0 J*; w%pv%aZсgHGf!$WnVϝ`-,i  @Aj^HsUL!&pr~8oG9SO 78麁[k6+YH"yqSxuJU& ɪ)Ћob23Z%6u&8aIÈ@P[sV9)DbyiλB\I/ps"/7$"Mk#8t_Ht1hhEXy{(AHRe`Gu'xw!4W{ Rm =,~p3˯P{ݝk$Hn’jqCM[,ug{ײB,9 _̮Q*|)2n;g[eMyM.&IRjwaL\Qccߝh#sB3z*G$1ul e-T}D'Z,]av@}S+bzvR$g,I<0r4NGP礧Ud$݂q%&£[Gg#5̭ w'ɝ!)mw"~2TD < GY5'M湇8/SpTJwoazݏIJV.[ɄNH'3 V+F ]k,ټk=Bhɱэ,0^)yVkK5VA+ J-S A9ʸlU*`} Λ †7Y<7#r6;z?\}vjd$/ Bܻ Q]ؘ6Xplwzq<9RITu M_fH[,G؀,3]l fSrGʸru j ) hB}!+E$x~ Q@gN٫WrDkw[/B> Ѿƒ{gsU9[I pDm+#V#m&p'f̉uK_e $B( 8H-ڢ!)Y 'J)ƙ&ӳ$Nea;'uO<{wxq`Iaow w3VP+Xdp-6J^kan Z ա j\\Ѳw9y d agwch#Vv<`KY-\h!S)r1^^[U#<$B9w # BS+FY )Ɨ{ϥ:/WRv7-iaZ3u\Iu8^x56% l5-a '+X-BU+Վ|ȅتC6Qy!%*|]$&XFh@b#y27!e/h:XKcPm7s@HSBMxTL;0n O0le)58)^sڙh Jg/į% #^U יZ]gz:yVKuE٫AJ kĥ\flJ렐NhGPVʬV&]qe1;J+A.Tk慼|yB%'G\B T F b.9KùCs:á'9(j.3ʱV赞6ɱڒG(w*>z+0D#UѴQ ]j$ XU!^~pgZl(vl!epKL)R9s!kU6kliYI]e1Jr65*{x>ї|YkN)" ܋?hjwʃgF^l  hJA?6u9F@s^"/l@}Hl{*1q@WL2e_)(B +g :&{q؝ֶJYnonZfGə{$ 9XJe5Qҫ-u缫+tC]OԔ[e<=)16' LQc@F71uԈUucz3xNϪ(!A{jhfmVBSr{չ{qDEyEzsʾ~3mُNCZ)-:oI?]$bY 8EX,T C?V0p%Ak]UuNr dH$!dV³u%o{z7͏,?EZX6>My9۲z_zPi? ">{C{%kX$F9^v[]ƜdJԣgKSc@z~gPx9A]~c+"h&7ӓ "ݿMߩ5i7rzɔ_Ɠ y&"BE'ye^PDV$ X%T<|*z.IX3yڔF؝@57 GPnJ뿛$BD1" D!&; 'R>c,-# p*ga9SC*ȜМ(1 Ήfa1ܪdRJ'M;7N2/[{Tд ][7$ҠQuw ߩqM'xeB22ZfQH\x749MYCCBcgS833([O exHOaTgӤOe~ 9TM퇿}`?.)Q!l±17oe!٧ p}Q>2KՖ_YĈ%}9\LJ6[VIShpj8WOͳO_m"'^Olw̟>ɨ mjNTG2ޥ֙1#&qO"YnCuNkq=| ' f}B#xk:^Ť#9& zodjjnI>ABhXCOv觛jMʞε5M1T0J|^?#ixq O?n5W-Uut~ly<\D6 n*l> YC{^tCeT8mX~o%1w%acvjk,UL5c yD<5Tp u吣s>1+CP|svX3ѧRּigȠXGKQ&˨_vj9Uͬ{\0~ڏPGf~ 91m57,t+lnS]VamkYX&/~8-"(1- 'Pny`<;S; q)Q;cf֔lc =]rBe`mK"ZR Ҹ&GwmG0"VDوhhJ{K 'q>\}"i1!CJ,ڸўS@%Kx/KDc]@`4(i9W1O3f]死췕x<-SKNXugR7_tᥭơ@N.g$t.g%>(8n]51*|\^+N҆-9 )-I6SBT5>w"ĩҪ9Hjy\`=FW<+Sy(AV6hB`yjw XU.6aǥVt>C=fQO)IӠUM?`UYX@sI-d9Rv{%{y-APe)0GoN(k7}͂}J/o jV*ʑq;4Hy̸v2^.Yisk3 v%q}! ab|Q4cpiq h!k&wf# B9B4.\~G-痩G(ea: F.zֲx9vx+/3P I{jFB*A_V%]Qs;N}󳠬|ԆAw֟|y [cciRKT #φ5N^P Q8cEg-2ծRGծʶiK)HP3ub*/x.n#郊d(Ё3W pt[] cDqDh`rPzje*p4 TdOHό!8 oO_eb|Kiw‚]|ZVd(U?;i*A1cY~#D]@'?aY[x# G~G Ni/mH8˹ʧ0>' kHLX%#mo)W#?`2x'8|4]`ƌG%uҧA\7L|]>S&]nRsZTWPI*m ?CT&J.Ec6Ixz(=R) w27p$ $?Ʀ^sΕzÇjbf׈=6Hn%z2c,0p&[q9Zβ"?y7\YO>c8 3 m#TaD8&uQvW!HdSʉx*_ 1>qh9c!|Sh I[ן(B3)e>Twܦ cDY2R$9w%k9lB;4D9|h*`}V6[CpwJʤH^æHִ9#^NG(o۹EF4R(FHF vL^ʼnYGeWZ;*M T [88>< jùy6֣V/*|pl: [)M 3ܠ8\/j|׈9Gy>#cF.fյ 6S\lT/6@#+( `}gwTr;\~hӤ+s}{m(~gpf1}*\a%`V.;34-]hwOV,kyr&yAXfVۡW ,O(+OFlۗ8UPRڔ{NʏyR&؍bՊO+fOGŒ<˂6a}] MZbd]9ЊF?+ +|*,q1JD$ ޹* ^8]ʁ5ĩ׃ݻ~Y5(Xĉ8t!Pxjo凑l[ lWwT֠zR QoHE\Q7 {x F]yDD|aj/jOn1WƊE$,yYaU@Ԍsx+N k?wype a lS5&UZ{"\hQvυ@0K̅9G\a=>3SgJw^@BPt=9Xh(SA?_;FĸKImۦ?VJ+WOwtIQQ1\g/&KύFb!W ';6bihȍ"0C5 [k1moxISkd}1a&C0eöCXf.6@JVv_TF.dT&cAVOfc$\Vqsǝzʂwxwy4%O1D晄EΘ@8٬`D ̅ c\K4PYaXV~LF!a)}bsV{q1<%hgFҬC; X^7 qضY)ث"gn`:;*7kq$u˞&C@-*7<ڰ@ |qMȚQІ? |T'll^;#(bOF+Z31WZGGjew$9}8.!P<o#T'KDڌڞ|]W#  n]j,tbs/c&Z 7ؾq:E26vt<96*W7yAy'@2/T l/d͋+Ilp&H*q$sM1u;Gȉ[!D9dh0OWkzAk!daOf!,3;#-FfUh² .{W̻vvSF~" Wmο}[yi9@Bڣsœpd۵<$TZж{GP-U#98@!ڙ*XS8] `]ǚ5vջU\xt>KRؒiL4BFJ-MJıcHt9~\ϤK< (I=sýx0CQVC#kz49:]9[EP@ZgRkZXܟzP Z+toJ4B=TXNag`ź c5NA$^.aU6%yZK{ҿOL޷Sx -(p((fj۲>BSM欟g=Ծ 2 WA8i&5 {V|}iQ)=czjg~/D.Emn6Pۨ:dG1:KW{/I-U_/ xNB Fw5.5PJPy4+ۋY2jy|?3mc8djb^¬4Mx^ߢ#!'z@SP`ьM(p$<жh+a)gN M"c5%E)NJz,ܯn Ų{ e[Ggcv[(q>d蛵ׯ󰦖k LWӈ>E:/Kkhԧw.TL(oC:ܪT y+'z.0<0KL=PWotFt/B9JP4l,ԔpvMWYτ!ދGl^akMI̗Z:i;ovZRq&ose-Qg1.RNނC}噓L"k􄣚?Yt]j,ݲ.BF8r͎d{6=KCN^ѧ:#KH8![g%\=6_7Th1bddCrZsL~^9ukiA%-_q~GͶш uAңuJ@) q~xԡ+t]P"@1ܼ$JDBUf0o^fqaOsF}\|1%09a>S @ebZV|ix ARb!-?Ѥ__tlpx%Jk%mXNbq{`Hq7nXh)\Kek=߻G["qz>%̠j4+S^zcJ*_FL[Q@ys&ك 3KԚ}I`%FN.8X s\ D1s؉Bo|K!UMO7W+(Y G Y5+0ߕck¶M:kDQ ;DdO €lΧVcH~6>|*JbYԅ"'ߕgG%C8˛!SLb"Rѩ3VC8fÝ&SWK[BL>Q)l4-9+X$vVUtRb]+n ߻|PqDn'JzEDQ {&Y..WmzS|9ߨT )fR*c\B7%@)WhKn|1'CT}{ry$3OȗkƴaX|MA Q}0y h# ȮH H4zQqFu*[gXg y8}qz^ DҊ|i#kTiߊ| m"D̈́12VtR+V7DWTȼy PF[:n 899lK-GsKysL8\w,[@n%87#=/:+D يIK:_CS,Ik1-x2h䓥uͮ:w BK# +KkkMlp D&#)xHY~dxM10Rě3sXhXik#'OWV(of@\xtRtσ Wh[ɊU2/ᓸ5@,8t>|Omr/<ՋfZmش< \R,g.>G*F6h(D_RLZUvtK%Sz^޺v/xv9h* .n}~4Q`Qe`ȷ?r"~kLk6@,/p5%PY.@/ {n? el3p|fE(-0$ДKav]p!C.BؗzS]]1q|2*Pw5۸ zE5kX:rɢ (s:KQfEQ,u N^KZFLk-D7id6g"3 pKӹ^dҀ&RZ =`dC~ʮك@TT,`a{5EB) Ի]こ=­xH9˕(AB>s"eb̗/b@)j|[^:mjcz)RPd:Y4P5ü %cδZ&!uߣpinD:;y'^{ 4,ACV)‘F}a(tEyhƞ; YȫKVmeS~:iM\N،P[i*<9FAROFu.u? HARje-t+".9N+E HJ4V1`m#c0…!$+dy2(=P{K*60jFsE4ڽ)*OnʃU$(ex])/s!צCU´Xa<`o vdVԟzWI@wf>$'Sm8I>g>A*aoxy/Ś'cM).a ߤXJ ʟ*t)4_5>Z:&D GGm#)k\mX͇]+iAHm& ,$B2v&bRe,X;VXdD"R`A 6RPms)루u&2Tҝҫni:].Iȭ: bw[j&5i4@4+(zI<.\rI.AWv|:xe7#ªL`#vCm~91D{v~zB%Q$Ƕ"C+KOW {՝ L`C+wڸcEѱscDCp3N":M9YFŽW2Vܰ%:Ayue`g^7:(q$n87B+>!ڕ,;} cְI- qu$ i4rIW_O?Ko3X2 l^[;Bb qjJcȂje_aYcEn ȼs  .'î @E*/@/OlzQқWRuL(@D }_p{,fGd'>Xiyf,)(=*[Z5aֆe_4I܃`=t+"pګ(jjg9 H[`9Iej{15j5? (gZ5g^ӉLg~" viG}1I% *#jlnC=ڭ [p^b{֍܏=dU~-1zLD}9ƨ:~3P:ey2ЧpHIt<'Moc yBj,V^(k),|?)$H<&$LGSRNOQ3ՙY=<EWF_Vo]IVg1nj}OeKEI뛸lLuCרL? C W]LWH}Ma7 !i$=fN)(S$*0/:\)aZTGmPӅȜD'Y0GSxs{Hwd)c/@TΪ_ݽ06GQ$(ɪrFŐ=3)6UDF8T~Pvp H ̨;]lKO!ԳshiWk Oh=ɑ;Y.ELq [ a~l8 Jz-E`Ce~CEMe}lt%)Ad;b <-u ̞ p`r_^E@ه7/z'"bTZЌ|pxL8/ a]TsgE…t=OI+w!,-) @"21V׍@Č8с>|]V RuHvcCҁsV[]tANj*GNnw 폔UĮU3>WX [auO9?MLx~61miO %"GROQdqmF=1PAP$V4SjE [^G>J!V\[ v/RzSD3nDUB5g~lHmT(Ɋ\?&`BϘPB 3M!E/C.5:nte8s/t їn;Rd Opnxw$Fܣ,ƍdžA;zrg%m9:2c 5p6tϥ Ʊ(+? 6|qť\ FĬd_kzR]f(x pxLVVx xd?0<aꮱwMIѫP /g7\ǂΟ$vv&~QyhgTx|N&Gy06w)#屶O+)8"okM@UlKD*k Ty!6 mgqy .I7'F.# UtNL`x6>?=/ +#-y$wձ gdlZ@4 ق!-%uB"7fT6$Z ׿ b?x_C)ڕYw]k-(g8GIE:%SR/l10  hw>&=et^*ٞZ KD-_D7хoʔw}f$/W!,2ԗi{ ,ߛojd;TB\=:_K]I_IQNH#WN&59&gȔRbD(I g.iDbo 3agY",M\X|Q5ܚY+:d4tpO`x6Z? qDZ[^yI7mQ }XJw;VK,w_A!}G)xr Β쑪:Vl>Q߷ϖJ]ϭ EιGµ3%xk—!@'CKsxſ4SXy&M {8qU<Ż -|p `F՗Wx{ mUh2{/O;IA[@herA`ÛlLwJUIwxs+jpK?Zz2p0Ȋl&bUv^VW8=pm^fHQw涎xAm#= /64F.{cl]D/[I%^ m$tr 4!E=b:D^0+X)lnv2")d/I_Q\bMlGSG(|;y-] oq-Z mi|T 7:GefnSRrR!ßAo!ZJa[F¯quõ"oU /;x ƃ=ݧ%l=wv]rbDo㥤*^xIG%6;A/S׿D/ G|7 >@{&Y, R*G5;۾p*䬑:*vDKW%6wJn?Q=:J1ZY|l),|*Xރ^wM]}a\t/DT4( π˽ۙ-|_yI:ggey n6OmmE)MINyJia&FJF sܪl^WIs̯ӲJ4y$maÙOw'@ٺ(݉sKf~![D f󹹘&[͐ 7mxF.%~ !T&k>-(%wXLƂov 9rh]Wp?zS4'[wZ@vL^Mz{?K$o#窈\`bk-!.{k$cjfW^ G:37*kXk#WʱV |Tb]^h} -%> QT4NJz"A m<rn3ۜAJED;O x- !޼ Wa@xA "dIT|2\H&8X@eri0&zāg==XqUG]^I.g3u*1}pO Ԥl퉹NteLGnu ,_viKd>wp3%]4pmes{TwWnfWF(~qD@OY}s9qピ]#aZbH .jv&`b`JU!7NpKR8-ĢI}2O [6nvY7 peS }oħϙYo==hG݄d_k}|HY>a+ 3p0$V@H |=H[5 C^ Uleǐ9lHb`_R;,/J`|zT6Sq9LjcR W% F=F; VDԶ^GHp\ƚSx\Xht<9;Qs_0d%.1ao魠Cj^&AOj"5*5n+A-ůI7эLЫF@)F;x,BBYT^GI/koHPBGim(tM/N=ՆhXLC>6a b6iV3i)O!D\bld_\& t 5RoMڸVDc(qZp@]T.3 ٳ2Cp7r$rW׸WM0I`;woFXX:#+5NϬVo҃+vJKSY BJF$;9+y ,:KcQx=`W~ݴ67`.F j~c!Qޕ(]s^bON^SND;&#ϟs DuK+89|QISmEӌ…٭q ^9߼Ӎ< Sлe:b;!Ɉ$#dž98.Q7mb<`FSF*YfgQ6xx_'s75˫\TjhhEx-n"a*}RôK1= *zKJ`g|oFUQ[f]ؐ iswKo =5  D;o\?ysW;L v ~Jg<.Ԍ1]'/L{4k㕓v|;W[rD\[D}t"Cb*Eܟg.+ohzbwi=6\ƫ_-]'|$ඖѿjnIǹbvYEסQ .WX 4hEI߬st`Ll#sN "o;g(19&8AQ<{fQ UWw&Ϝ.nXfKd`gvdqDL]> 1MX(RnzKh^m&X(&5bĵk]7uꚸ'+A=iV}ƍC&/KzZnI{Âz8ş'8-@MPtKYڛ55)_!wZ][aۚ6}'m2faU|S5{;d [ɾթzFKJ!asU4Fљx)D] d@6t$=<~̗6ωw;,pU"t{Uɟ_i{KA sSYRqy(?u8sT+o=^HNJ^i<{V3w6AK@1.7ZŞnp.@k;Ӡ.|cM$$F'z<:פ&h"y^opeU^ҔoYmjmD"ODZh@ Ŧ@*s"PFRcSϷp]ѤSE`l ECvxHv ʦޣCM~]oN[!&=OT>F[\w3`F9!^eU}6`IyV9崕pz-d9`a$ Њ9T9f "ΩlsOx8Ta1thC(h 6 1%eWkq0aΉk=Ln;pqLF<jGO"v( 3{rn 1!wBMU}|w8(/Y@'VZ9 bWt hsuzet#3*g֑í_d dzK d\J\HcPUn:M}!6_XA{F!ȂyNȾPim”䶅ݛUat$Y=m;pk&x)meȚ[r~R8i) z_ZEt?#=mC,F:^WLQW~K6V:"76r-[0Cw6 .0יJwp.๖GƟA z9L]/Us9|}[t+ԵK4>k8XψwYoϑ})Z 'D/*ͤm/\G͎Oe^ZN>EHm@\f?W\3$K ,EURCDÓq#Mip> Canr\T8x_*&6vm# Tj\qBK7d\xi(-^)K Rz"-+3` j"SN媗D<aA)Sbhu=xj]hÕ#2-J?6.D 0\N,*5S;Pz}>sQÿN>\,$eT[(՛2f9ݎ#߱@K.bvrYQު! Pv_rR+NCPN,y%3hn&gM$nzq,:4+:D|JRTL*%7䧤ٕ7g&׾40.{3+I)\_=O4[_O`)FV]yLq95(T`ץd+\]5ov }dv> a*>vs|É۾;eX+sgG8{!ѩDg9@jQ4[DfXaz$!m49Z=LJFqm"s z(B/k;6=ܗ(|> 2&*Hx+fIO[Dՙ뎶Jch5*U-nM}#2bl%-c֐꧕p3*; F5$3R%'TdKCF%&o"l\{yx.$:RZ`smzt,4+ u4C`β DIq~(R=]IryL>Y%V Kt֫e,>:8[r[&vb 5[Bɣ;%nG;Z6xNOW'Fc+EƞT.SzHܡK:4/{f  hU! yP}{h~Z>A);+xu+_ LƬ)NPc87 4$J CtBs SfEx{w}PwuWuzx"ա$$Ȱ 6Ǯf_bl3i@s*"LG p b AG,v̠Y"m*7/<&2C60]Kx3:ݫ=~4gGy'`tLz6C<I*8Jl S69xu;}aD;HG~SKY* '})IvgM>{w6hP[?0SVԔia]E0ׄ*b=?T1=M6nYXG,Ϭ,p 4e ;M+w]J?v:GvyQA06fR/G4Ԁ;hV& 8g%fiECهޙY.rYn,XW=16,v^ĔUy-KjZ5Eͬ­`<X#;?{RND4'd5|AqqfQ wQ_9=Y5$U0P3fA\ߝ|'jD>Ӫ|QDbFY źR%`>6_| OAb_zb\,Tef^G5b)XÚ]]7 J# wx !DY@0Ǭؐ?ї9Mj-ҊJ f[ԙ-UBJ Mp!Ԍdb_vӯ;KB0*QKff2 EE*epz9.ӢKxka[1]i}*(e.4W+SSPβwa)3I!}S$񜇀8@\Wk3KZv/|<;=.Qe cpcu&s/9?mX@;ˮs< ?r/."8Spm{F￪a0mCX!v*} uIEf&s,ۡ:c‡K ŕQa= YI/Hj7ܝiSz'b"~0SF:=z0C7FNtݩXVZ=GS e+hj@^n.YE[ _ʘfdGgG1CD˻E)"'ۦa8ψI-SY҅l%m@&{a~VD?:.X|@ me?>#OƵqF$luSCPTp ",ݗ+M`5TGdʬYN|yѹ ,rNhjWH !fDZ LlI\̀ߒaRu#+e$%)VB[VXzJDR0KT_O 8[a>т!BD(ޯvbS<vlf O%B"oM@ %n![kouKnB@Q4d!띊]'ϘX%ߑo#?:k."DīzL Ҁ1 5fieU1]|pqՓ~ @zLyZJCɖ]UؑaПع|\bC@46*)8 ۬cbʫBmZqcFq諾6'TK5QzV12 ā w2{NyQsԸ&[`1?_.كgvůΝM' Z#u?ZJ1yz(y/F0p2Fa+R$n=È3$_p>´tJW}CX+)*5.X[l [B|=pDW&S)2.JB(1;s2rфҟso zMdo0"Ls[FH'T}dDѩS#Hҷ4G/mOF (k,*S{E= i Bߐ))̕ж"pu=֜[}/e0Vءq8ދB+w3j4\sӒmDhvi~# [za/#aۯ.ʲ ת {+JGG5-[oQ0<'nD)~̇Y3 Xp Q6M篕E.o%UO_xZ*K]0;7z?[9$=nH9QԍU<+kh'V0}'{N8;7r@oFy%3@Qox'S="OL5_f ϋ߃-'FD6{ʉfNRxFֶʊ 1MO~=Le#dFx)J Y>yQY Jzjak1tQHk9MQgJ<8H0Dxb,͘դݸ9m-] sI43j5E;ۯw 3F(tT ~;76XEb%XVm=#@rsi2Bsr&$VrD- +.m7_htT6nd%H c! (U8H"Zݼx4h~kuBnZڵkdvXǾ _g3BdO%;\ӄ<͒WFQo:aJJ*9vcFNPcHd}+eCKX5C"tAYR9`-\d.֚Z ҈AUN;t  LBI?qkKdwa/6dĖQa?RdYOv۫ݗ1z p3އS!Ad.:IdqR0㳗Yk&bTA'OQHa5@}*N$f$~/tDnCPַog$\s@>Nx`<`u} RFUiɬ^輆k9ژU)/O~"nGPlY$''G/u:k*}AΝ O2ɒO~XbP%ٓv8.5M3z\G].#+½n6lαT-4;Ɩ^;tm!.'\@u-*jӚb\{(V]{!B :D 0@Ի33#^ vO \:j G@z2oeo,\%2y4&7 k3MGE> 4T[F(`4rrerfw_U%6SAn9V}9 b$OB:-V/|'lcxS˲ -pX-Wu#$ ĩ|jv§vH22Gx^jB1 Pa^BO fGcf{M!즶֭%J = {^Y谳)1+m9z>>g0~3A-{X"˻F#p:Ea(hm~(˩lCImU{v$̡:#`\5V FOv~Oj4q3~!CB<`=홃,'=6#uh5|ҸCh_sMP L;-lo4P QJm1"FLdufV^CBe~x/&#gJt!׾&Oؕ03qro0 Gmd>!i~$VT4zy5s|TUi Kqت ܰaۅW#_q<2[\z;s3zK[y(6{@#m{Tf 2?Ojb М\j*)jzxgQ:jG\Oda4һ9#L8(N5=06WIEڲ"/}-`SV;r/ễPcqS->ѴEL<,iNS ,ҕƺ"02>'Mn;ئH; UXKL9,/ BA {=fvAr(tq9&QCrN2+-D\PAGt^0ޝsQ'Kvz\|Ky K*~St%RRqj!'nOz1Fp8$D"_xɻ1DP{Jܻě=zˋL[MA [;4]@ʡ&ַ Np .lKׄNF yF4-d?6C'Tq}4J aR=IhIvs 5れ综P%sVP,NaGP`]/ґest_3"H# yF‘lSDec̪ME?]I;?pJňP8Au2ثh <5L.d8YD]\02Iqa 2=7㨺{VFSՏZa16iu&d=Y , lg=5%n_ xql9[bKM 6Є T- +cd{45Z7¤ 53]A4BO8 8w ˞k3sUnZyv͌ai?Uw!P HKձN'e;7T >2RʃOws!48+嘛Fr'tB^nT?tTi\Ln#15{@E&R LJ{\ptp;_6D8^ i.EzPJA%!~BrR";xOaAD 'ֶN9{`%${ ?=lo8=@N{ZكotZ_gq{(+wNc7/v]hӎ]FBOݺckIfezMc!LXT)}*,Ry/\SRZ*!D(F$XZ& zbW_&=.e7;RPT"a6\WUx@%jüm/v^cPsVfT?ے_I=){Tc϶Mn|*w&V}(|HzoES )S$ k4QG~/,K'Wn/)\lI PCK?”17ҞN"⑉(C8ZB2wF/dSa޸xch%e"4c'J%!PFBNXO}4g'︜ >BkPv 6%GL*}0 T`W-y3=@t4|1iE"b~ӂRShd כq 4&Sc(e"tlKA#cYh:9ԴVdZfknz^.J&xIF}?]ԗc1K6:3/@k|#*Nl['!Of"iUݮ37x& JסEY^~LgJ 0#6PjS˺^ 6&]L׭sW/=aF.'1*TGPޕowLE8jH]=;;q( )n./`cyU?%KהQj< {'w'׆1NNEsf3 bωAe6d`cڑ*`a{cOPѕx{aoB׏}El7DE-L|K@h 2->$ D4'׸p gĺUja xxYrthC NyMN\JFZa},TrŁ)G{9١⫊(2K]]씨0 zfSZ{|Obzt>tјzyeJԅO"0,%S,v%jM̀ @A `K%\m*0S՗N&+ g̗mpg,E2ꭸP!lܰR#p}DBv R\epqxڽ۪92E)`ڻ OKs+"w=VP#_^P*%nX9iE;x4ߎP<řjzOq>x^49PE,AX"*_|[JEa/Ot+(18*煹ãQe  :bv-Uv<;sOυ4 W7r筁2|*7ƥߕ@Ym}z> A8&")̿K_᫖UwSXW}rMd _Zijr쫕<BR0xs} .9并d<9@,M)2G#Nfh@,CU{y_wDcKaH|r%D{ 3񢅲AQϚ W?vT)3_C!]Y>ϯ!.yК,шYKB%(FZT)q"puúO]TR"xQS~՛(|€XkXVJS^˞p 9ށH1ZL7|sLK@% 4{5ir] Fg[zS x ?pIg5ĝ ?fRiWNR6K06~Mx5v)sڽ.{ }QmݺTSP@6NBY^AAsay ۍh&qtVԜsrM-+mf mN$}/?{V"sW* Kpd*IțUiTYmJ``(9=~,B)E;50Aϻb P;^4\XhjR2#Y[u|:Rw7C孝ITR. p.Ïw p;`*(ag\w[\].5 SYez>jQ5^ pO$ɶD36sU=avj5,,1u UJW$,8 vsg7pS M{N,77GezpK6ZYc.f30 NƖf vƬpRYx27v+;w aE駮pwOSR_ `=6RJ˒ɘ,eZ&3-](; _NCg)?ƅp;MoI r۳o =3TWv,$ƌyϮfnD_!0\/<͖&2OfۉxDX( Y ;((ݙdcC`h3 ;x:!QGYEO4EOp,#`;R/;A&3N? ŮC"X־bX;ZJܭ|lbH3) x.aO`Eo:"|>e fθ=d3lK{ GT7?w3*Mz[Fk'JŠm<VokkK‚|mWgJbT4ArHY5l;HTi Xcq[hɴk?F#:qA62Rup -@!Kc {~wd Cjfm%wHLRd^jBxoӬXYgymךZuAp#:A$8\ `wʡ:WxZj7L7$|j,̶kY JBujp<:xm@Q F5.ĨnRlBtX1W(EmL ˭,&'Pظm"alppG&ї-evՐum։hX6pLޛ' X3P#BJ4aiEbFA K}DZ7A|N']#ҁ6Gy" `osys#G J6ŪĽYvK1RKJ-n2{L%ac;DnEd /ߤ2+ܨ;T;F55b|{#U>4WvxVS\zE߃NO1*J'åF_ֺYMnh0+*UhV@;t?gao*՛k!sE-NG6f{%B{s'ZMC >i56rېHN, övݺ:;gsrBV;ycPūKϋZwS&n>"TLW7bsGEMI:2O.*Wu²j0B;ۦ2 8ؒn BG9v8 0 쪞*,ۉȡ}&qqKΨhZ{̩QfQyϥRO}欓:.6ؖD_{Y1ٵ }ZHʧI>kdѴiD "TՑ=0q.޸Ĉ %DߞO!if$|9\i8ۭ9KկLh qj.y2CNB mp:EAUlM}S<I?V>M^[KpT%;6% %&3A ˺zW⃈R8#3zL>NFAD{0qm'Otz! c3 @a!]]@f{=mR<~ft%FgN  4d7&"짲GK$ba"0(+L;w)C܃s<_ϗ~?lƇ0"U`~BC~ Nn0W!4V=ϊRަUMԁKJ1(8"Ңpbc3h);Ώs:ƾ 3jluR?D }ݠGŘ/0X#t>6#/4&.1%0mswc(c>ypcOUP}W« ϗ6gk@؁ /u+[ EX2?5in[_ȩ}w3hs1}7(yced~G~A xZC vR4)ּx]Q[Zt}D=56Hθ87RW[^3o5BpBH9Q~K,UVyek#OqY%]z;4U;})5QPP_ĜQe"-RE!anFMDabH*IcUA}!QlB8@(S)C $Upt"(:x#wp\%]6,hj,#}xyqeRYQ0JÙ%nrce + a~= ^Xl3D{[}i bH'wlΠrɦK\*=\8Vu>iP07mRsv㨑o<eH=2? Yhl\QEb1$X>W.:WB VpY۫/h) :TL\\7§/F[̡ILB"ʒg0_.PUy#ŜPheVuUG Vc2>-rjbUZ#}6AY/$셚Lo>G& &9b8=#fzam'yVWW*Gî U#ZbYoP!b><\;ZhsTٕhj9Fq#-ɯѶ =Az\vEñ wm"  '{VgY2)?Ӽ/r_1fAE4m39jڣ ߊ|tNpJm;N2@Ujܘ h!=9Mʑ"60MˣNop8朁 7[mYY.֌MA|6 - zt&4}$qu@Ľ|2CBIwaߌmֹD>^OB;~a]ǻe52j0l!!L `vif{CQIw4"':O,5AgA!fYD&h(&y$ HfNW_>DQ׀V[tSo^baSBI;)gC.Enmh{[EeqݢȺ@ʙ1/v&C {jj6LʺJgf+c2 ]_xXA jV]oA7Rm`d`//Į{+BWN}ٷjIƴy<4l{lFMAY_qidkeP]և/F3vxk\Wԅ+! :4n<?4Hy qF07ڗyʎ"d_nx=e'XҤL7?.ЖagK\F|%^t .+\ݯ0Pf̘8 cлz/눈chDt˿a Ɓ+ۢg(2hz(2[SHkC8ʙtbUh7"->1|YtFK٧ɼDؤa8rLJusJg`v5)a<<PA͝^C"FDW}n3(鿱Qզ 89aNŅ$LJ_‡EI.Ƒ|ClR6ljpeGPk^Kqm5yqGr ӆ#!)\D}YnzXxZ]*AƯ*W kq?^Dzr2F~u~<%$<{r>t^Gʢ FxK7 @8|V:fƶcTM$TCƲ0$sm'3y"IDәy vȮƽTz•)@%%F6|V "LuR˄o\H VTDi!zbh/I(,PyB9(,Us5H郞5̋,ϧs/W :͌_.ݰEڔWH"2ϦKcPv2AY$Z$qp)<ɧTy4K c)L5B8 㦉@3b?.. ى.ד.DOm? v,8Z%-V`F{)\u/I|r0Y3WL\ຒR+8'?] 8Z~H:$zN&K\ڝ[r ar!: ~y:VI]\pa?|TeA|z՗GXWL7 y s]i1v(jV34|4n&u5Qɝvߊuh2 ( *,aji)EBnI6n X8h as)JXn|'1 *jFr ̝۽V>I; pi1blf7Y<=PsH c M /dtL?em9H[2<: !v2PB_@!4 cA/v T i8o} 3R1|J#Vl_غM tGDߐMPpꕉ=iTEHd9\L)T>A0darْ.=4sw{ѣ_T Mb5JtܰFY\@2/jR^9G '͚94h:ˬ*|(XRMՈPޥiAea!?7&#oԵ1 |ȗjur!mm?G 2}C\~pzz9u{k~/baD UEvbVig3ՕmMJVjyMn[?x@jE u*/*ObJ%@zt?1.!VU*|G~KܠH~r7{m6ϼ e ASqՍ[x@nf$ݞXm3 "I{VR {)@3w{ɠ_c]o}9Umusil P 5\jFpZUyƫ7<_⁦^@wmr(`Cb7w@E)i1b̡YNl aj2a focBвPx]2_n׬V)P{ VAth.t D-]ߔ%iygZ#)7s wfl583>Ӽh2.E,Kq^%V"4ZZk7}zʶHF9W  0I?Xvybܬo#%;Dg5!^;?S4ksAk{:HgXZ՘㮓vdJV941D,1e mБƓ!r ⅈ%^d ]3"=-GЬn,Lee43â0e9λ;"܇ Mb ]2s# 5B] a htg*cƥv69ȨbF1h*\?"0?d*[,N"rO8|^l\.4#`,bH.ncAN4^Ѫc1 25Q/6%<|EO7DPd0@|dzK]A*KrYPT=Za|F2d>#I\r+PQ=1]0mw1+H^h)<GV$=4Q_|9*,"'!H maYb޴g˪,e9q:s+$a<[|V1*V5n ٍ5GnE &oQ < '; ($&C5m?T(ǩw-sg4ri9*o˦JFֵf nuG` `vk3$kДR7I֫&f4u䧇T`XM?4بvX0'*M8"ݣ*!Y]1M+KQYcq>R΄}7P-dj! GL4~G)9R[ݮ.j1}0$*|~._pcr1"*sOToRnv߭)\>})m A1lÅc|M? u`{f_f]sn~纼^Cy I *x:^kj$Ҍ CV dsSD4H6QUU1j {° _b!-j3FJq?Ft;DY:ThR"{Ĵha?|/ FrnY7$k*2d:o6^a'/ Eb$*P-ܗX: >:2C۸ֻ-_=b$ x7r;zp8X8!R5Uc9D7"ç6̔]2ajNWN) ~ g!F-RS.-Ei]Hxe@oz4 m0A1A(ðt u'FY=/"2i`U2PiykqcAвQNRI*&EӉͳZW|L,w5ㅻ(E;d#`V(%r1U~\$+202qζ)7OxHkOxR%MIHQog|(F(F#O') "֒(~CJԒ$iRʲ[V <fG,s7 b,r 0=dBfۚ$gqb3>eog,ų rö@s"C)L456!#qOEnGˤF=v4j!V=I1,6`"SWh)'s2^XQ%}4xaRR9ҞfLҌaqX򹓙+6Pm6.nC5PħG.\gK=o Uq;TKTݹÀF=Klf]j:\ڲ;AOmPo .R r'-ѻFd`r .Z֯KjzI1C}>T1n,4u}_{>`~bz_ UAycd]j ^A>Ǥ1j狅$h <(/y?侃HH~@-)0UvG^~5cRe[Ǘ" <]059+3c.e4rE0q[ L u je,5A&6QhLHtq,{$Ҥы":مrƽ,%k]PĊ}`M&ʮAɻCrM!6H9'b~) !tp/0U}r>L])X}t :6|R#LÆ1Z/r<]1t]t:e>o@;=x|2q_yVspJʩz=nX!n=Z"Ҙ]o Lt vKsO¯ %۫L a"zk$(ZPlzI8r.Ab)Uk;u>wO[ }0ُpO; Y":Ֆs0} >ڸCGC,qp|aٌ7"5 yGZa͡Jjutfܒ9u?M)XW͵z– ?cP CnZC9J:zdC%WHF37iA@5` I*ASIF۔K2}y Oʮ8vuxN"]Qm)N Uk r>>`@N27JASnij$껼 8P_&|<:Q/ epۓqw)Utl2kVoSg'lq"vs ~NX5bpMK S*U3E5\~Ix+r~љ_L|yMYԧ{v"u΂] 4˛#0̥KS>IDu4.-bپ2`7(hYUY8"Spn⤠6QXP {G{B]vΚGvw1!̝$^@\4To~Wnc+Wzڲb%_f}CdE:'(I2fZ %+%jCLՕPwZ Fh 'cZHXJK3Z\#LAXX.C8O,c=}d1)y䉅1E lɤF4aYZf@|Gβ($3G4/R(&`pjvxڥPŻ`QD-}ciVTQUL噚įdf<Ɋ%'\O'\rDbz[WTdI²%F_>"N "Z=30J*:N N/"ԏc=k+j^D;_ v1H:TVUzQt+^>$GZ`uCIkX(xtP*Z 2Y.OfdcHJH`.J*ni.9Xo #}DƗE"|Dysj Z*$eg˿GϘ idc:^ ZN|5]ƷtP#܊u[^ P|E9d24ʥ4k@E4Rv^ 2Yx!#uK<(bA `|=}si~`[W0gJj~L@Ssc^{*>W,r?s;\H cy(3SDrZEt`u+کk <%<ޅ0yKud+.ӐP`̵x ͽS2v>A!rRwX[YGD$D A/B(k ͔w]$%?K% m"[7K\r|iBkq>$ ĝ:VQi+C #}A~kKVj6buF(Y4ھrJZ>\žB/~y eRI\Ut]H))ʡU; XWnZ3lB(nUKјmBST>;FygMţ.™r$sm2⑧k91} .tDK [4^ 3@YN@ztǢ*Z|3>{=_@oAaݢ6?!/.+.Hp~fe̽: GM4gY5'Im275JhCGURW w@-1QrB5CЯC囏m[xibMe]$$uюW%8_<>+9ă5|=m)rȜ `'HM4. u3r?r2J{:J \u@Ws*{ʒؔa~[_XD_ "ī꣏/ Hk)*"d]eVj|~3E\2c&'ˎ$ը*L89˾df&m*;7qoQOnLRx GYA])^!bf )Wq5&k}&Y6@{г3X<EFI,:VG_MvBչQq^d҃2%E]El3Vz߿Z{alu⌔KE c~~A{G""Ǖxis`+O/dL\{bO!4>8΍_-wíCqG hq[C)xlz_XQ5U2r4=lCWJ[g?th!qVBUP =Kzft,m +q eG3ع]HрFfܬ7F.oY=7gjOW\n?-L*%%S$?`~nr'q?|sWJU$i3l?( JK+[˭0s6$,]W^r4Xb|u]"5߯sp5'4SoJB:=/Ēc|[3W̩Xu"\5]1GxP/']>%5UN1JVDh/OkV|Gx#d^PhF/0تDP]M]%12NLMQRT+$ o^qnǦjfF/YIu@QUSO0{~u!Xh ;TPØ}޷`15auR$+9v۲&؎5<\.&rLDžur7-9JL(2=a9Hz2~s;O'MjESù7}:R.zp lN0FZBmgφX:bP_H@Nڴ ! "rě%Vb1} 5yQFNǽmhgD|-b+~darVhOʃIu;.)ư= T1xΑk$$kI!b\\\aP' Hx`~6Cɠ,#Qөwz 8tcK1NU80hї9q[كyvE.[sgU;Yb5I"JuP@8ʘ+r\;=/M{) m&<$P bIЭ^(u e2'R5$ػtС#i! ?OaHAWT%rG1x#F~o)ff'%!fm.(2)Cv_kdoR5',f\bHç2548Dɸ0ȿ;\> I ]I" <kLTSHv]uu >;njmfܑ7lD@Cp`3=PY 9OsJ+舭Uh6/) ¥ %<+zuR>}h/\0eL4,rx3ϑT q8ԺDe][Kwt@ZHzGhG#H*OdN Ep??wӴCŤsj mJ2:NKqSE &+5%\՘ƴzELrHpKPf&;u Zx0Lq!jD=>+1 ظ@gN&\pHުJj S!k8&pG াqȍSN?C?@gömU7V*׻$I 3_j1yfL$T N&&CMu5MwΊHS*{r~#x6k*9a(eL|R{OuWoENQ52%+ sёN'0%xF,1Nz? 외ѴUlȧf$6C[58(8ѕdE,)$R43zڙYI`: \lq v5`,揷ڈ/6WE1G%CjF&: nq);?wr#ԥx?i,ɂ[=y#v޾f{5oq/5}Nj2FatF\bEb.lCZ5<f;|V:3Suq*DW nlSٮCT+:k->:*s} tuH3o4GX UzPL ;0JD&쩪 NM{ P1ZNvX/mo#f &J V#^UٺP+ {įG^ 0Uc6T9V9͢uw6Xf&Mw]J-Ƽn@̋o fӁuMT`:87忑#xڍ!0'dQ02.ե1#gImf(MEPˍ=TZQxഒ\_[#;zV[$rQ:H @A5$Al2;e?ۃ`Ԋ=y6"; ,V'BPN7՛oj6#I@gMjkFF2x;>Gl* @<՟uP)o;BBZUPuaO^{iylJ-IeIk, ^RdK7(-jA`#B"LOR,Al;; jY$j#)A̦Ff+_%lv> }p3  >٧v1SB/cC4 8Y3)>πxu I)G`/pk&:ִO4!rg\6IDd^f%l~0Xkh0[u:GܻY 97O𠜞ǼWQE ZeMW5Z3Zu %ێ[W?eh&jT~Ag~Q5.ڐr -p C'( ?@Ah{5-,(#ǃIbهN''7Tx{΋۽Ĺ),4Dz2&cs)F|PViܢ63Lr]I%Vp?Ԋ#UT2ܬf*1[8oh.| SPlc1Mșv7#9,K:J;E)4$FxXsA}D*k<6@dT;-3S`! ]T/BkݱmG KFe7e(R&QߪUsW·],!vz&@:߳tU7}P2jYݫԡ f r̦ԒcU;2H;(% _g079M,QvrG"aK-׼<,0mpsZ<[*`u+=.A1@ ?3ݒ94p P2Pn/K;刯*9z˭Uogmn9l5bByA5^O/5 LxAҖؤ|`5awڊ.˓ldÅĶ-lnnԿ~K5H{/Y"Jm-ě g.:ʩDdRX.^yޝ x`eJpɾIfS>E_{ c䊁3+n҇A1_mPHҋnzGɟu 4I7#p,+sR6jkE< ئ+3 L4/>!xñ #9eEdVYy!{m*o)K[Q<F*pʊB(nCluh(M!BBN ιp脼LJf:,/*@:99A6=>&>z|{١&̳grf<b8}2xB+|jp%K }tHZJrLN@B[?5vj&t+Tp=UBĬ>bbf.bp{H IўĽ 79T)RI.dG<_OdU<)o~uRAk 6AW/XJ|؝ߊ~;k-VlM/ŗx ^Fp*Q Tk__ S=g>fAdU1R(tė^{R7]%k'wN2i(Zܷh"KaU$GE<-hi5 )9W$|\n=t=4FOho xP-u :O!08N|!l0j4[:qXaS>~t4h dQRAeڶQДO}-6>!eacI! |Ӊ$w9W8\{9R¢29jҧ INu@'sxx2V#- ^[rm&i)s^dvPa-7"?J/q."vȦc)v#I]6//ej7-5rO/nb$wnvj@^dD$ҼUi[t^~}#.S`ۨ }yHQM<#f x-SW1_Ab‹QƇ[_zH?E!GCNu.fZcU>d9Ghem&Y"q?c}#0R+ZCŖ$4^Lnο++mZ@Yj/B [GඕCbk P TWgy#) +wd3/0zg5`_<">ܒِ3k5qeZ]0U Q)c?r4=j(1ͳ5gپGdhJz"ҥW`zK^)}E"d45z"O+(JTEs$+5}|mj^C>v<8|~ xn.X%t>KXW'4Bm)clboF[&`ˎh" qHrP;E7gmI,_]-BC̚8nsFx&x?tP(Ti6|s_SzcHyFdKAV*ӷKH}g8ܳް$w=KÊ*i˧*9b"٬ilK[HIlSu&zIW8@_NN~D=1DXhH˲hMvΐKp'lRy8}&׼NP|bU`|eNdvVr蚉} h:]付piGjI=9P:ſ3E gˊ`y#'v[ ZT=(̓=t}xВW*7Mfdsg:jr4|fBv΃ae~jݽv:Ҥo8OZźe捥[t6CCZ m}xmp@ ]t,7_Or` z$|ZgVC3$G2Ok'v!͇Veqf5"gz>I%4-m\Q?ö0Q-dT\s^GPʳFq81lmoUo*Z ha3;K!ٱE*5%>= {Oۅ׾D%O0rԚY-!Wh v3z9.L G>"%g2pCjڜnu|)1{z_ʿN'PMs!D}v5c#g;CdQ4Jh*\0yTo;&}5N~U~lGh$ ts5jeh{snpW>;cQ"`"ẙ\#ahLKA*̄ʀb^/2P5i23&cGZID R̳Au?g2pdݥQy*:GhДPyohy48p-TK}Y'1up"#x^a.k:4q%◄"/]_Fo+l08THzhme(%8ۂ_>g4- RG7Pn@vg\t?SrOH;% j졷`3c#TlF{d_w7ʹbt dm?"*_Ң'>Nqdn!`tU~uRfǥ/kA&AS_j#QxyU[rj3GpfnMWX8~-|5MZ6Qzw\g~ƒ#zgx褩,jKBRpmo62gw&[庺瞲d77qP(UjGg\b#oOgW;`N>j iIrRJH^7mm{$^8`g zQ4Z=G4vN zJ.N֔LJR 6w~oݩcԨ!j)QV:a-q4D[dE"ڟ*oX~-3Z=,[AiQ Kpʌ&zC!$ SΝG=-_GCP ъ# Zg.-񕚒ȋ)D~J 2uHa@v-_”ecaDHu"fz ;-=}>)R d˞#t8o 7x "ḅ.]Fcz.SeozkyucL(h,M*4 .-] 0sfJʓ2z%[!n8]-Җ-9\um\5& N(> ,G>"K_*>4jݫ&Eܛ:+s/vUlN.-F# RKX}tBe.u,jo/cx-7Y?.E0^% ?nESx|{y#[빕'r]doS4]x/M\叁6'"c 0岟vugUuk|/ //E^1t =ڷ2S׽hnoF6g8-}7'`k$ Xϲki2O ;w#q6*W8V9?pI)i*>JHEkob7;T[U>dR,.QDOƓfNl<[]ָSKpoD-TX{Jci(]_-^Rj}QwR,h9ŞK+@,ˉo`tx:s[k O(7JP%WE|/j{-UŖ9eNp$_m%c`.,V+ wF4Q!\U||[Ҵ<}ݲ#j쪤MT|aLMA%NYiD 5=,Ty`ss@78t fnnP0AW<g:!۩yΤ |J9ۆvI@=i,v?`P\?N5 gPS³TP$5L ԋl9Q kd&gi(8zJdq֊3N|2FLɮ`w, ~v^AzAC@To;Cӎ;@"Ԛ,^PA/@ጬ@n#=ִwVMȵ?ty~̛91p:9<6EK!+a))r PEH.wnNt*cE"i}t?2ۊ,Yklډbx3Q%T?D5c)Q@y8uwrOڗu,ZNw/zqs W&qo>ܞWnW'G] %T{3?g?sm&T.ch 5&4Fq'D~+җ)T*97\$4Y)&嘑]v:.\SNc/) Ȓqs2hin;խpl@#"z=hgbU9\PԻ!qؠ'xY 3,9 kUp=R::ZQ >EDa7a+y[$ # dž| qU1`< ȕ#,7n]U,Avi/+~ E;!fE$q*F!;D.K<:R>GK="v¯}]2e>1@mqMY6ӽZCdd19hmE&l]1xwAy;MTF){i+bdr Zm㰵%0~!Ho%-#Oba6 BZurIZv Z%$ޑ\T`Q]/Qi館DGHv\$;C&IE0 hEpT AWBA1c O*l_eZȎ Uo1A{@-7ܐUCJ]$%3C 2hD؅mO[h2)u±l*,=¿/+! 1@r黯bd9B^޷ґn˃PҌCaE7Av nNV󕓁b&ev씫*m7Owzh$ڥe:Y'FXV;+[hVު졍?@R]+[gp*c:px I8 3lJ$ oؔQUoM=Zɯ ^a@,Xѡʺd!/. Ч&k.=A8Q%FKDCH{h7edKL7rМ.&ŢX1D\̴J j1)`c8S-]G; laGq*9%  yF# ڢ[`"YQRIk;l=SK^Ν+5IZe(kCk4R\zܚ;]^( @ L> MZ]OhY ւ_MLF0sG.DË|[o4󫝒ɱ%jO"`3)i.X]&wY8AU_o0J6*ڟOvPOfCn0Iqo6 _@|)BizWD,Ҡ [Ĭ sWN('.BE-a5 b:lW:㽪i!$TAE0<7W-65mLuХ`1~!(Fl$)O:eZxVGnw"XէdIҲ}1g\3Z_>&ф,2v2y~ߐ)eFE6۩Z\D؋>m쪟I29 {| >S.PȔ ǡ0F?;iB» tWVQ9++l+\qP3p<`M U5E<94EfA$WK8Ow1s28/n2ug.TGb +r7 O.p9c4FEdv)y'sVV JcR(pMC,' {d) xE .*n=l[1NI@Y= 1f3ouY$.O'B,pL#=RO -\!4DPUVYJ /l\λ~:Rj,S˞Ay3%h 4+><"BWt¥%29R乀dj23O,d8I0L}z{krDUͬhe,Fp xj9_/x> N~w]eMe. b_K^` PXj5tU'$'p@.(8 ]RD#;dMb]>:-Lj7|9}5"؊M@bd+Dy8Mfp~VW1Ŕe9jQ lD\;j\9hR}GD^NDzCA*f`'k9#S_Z)&xԾ*6.M$_0$oUL J!zgB^?T(6eυk"IRwP}@:E8Ьԡ:VxlSJ۰!myF<ku:g6t]ۆQV{5$ ϩ`)e6SmO8wޱ}ۮL73K.̯Z10q_N=%.:g7ם'WQD6Jee/VƯ\lE$ڄTDqۛp*@W;L&:.|vek >**/T$\i;fH֞i~L(M*k$`EϧU2i2m7[WF[h,xb LI[j1LUS]用.cfW8/@K̹jNjtHό ?T漫Yz8d+lmA{앏Llȃv*wJ^KHQhp{Eo!h~,qIOm&r9@{)bwW'"n 2SFbsm:H*C,:Ę!`,"^ڲkS,WVưQ{;qA vtV^䙸10'rD ѭaqV sq I/!!|U[JUNild?'D;r|cM  }S+XiR2DQc((1m|*n eА>!گ3ypfyvA3&W:X׆{$ML~`b˻™$"P3@1g:8s(ؔ')GC2&3+KC#ٽ_0cSj9e<4,_s@UDGJdlD!4`P L* EneT,;=4JQM) UA #qcX (iXEEqNIѝ'8l'W@LKAUJJ0,LBz(\ʀ_6Ś\ 3$BWn eBޮ62tPQ}{gڭJ ,[6h !4jh 2܋@LE=.%w bw9(zQ RDސ,8:l6P[Y3=-)"ecҗJ[ҥQ RI.<uhJV'8$ۚ:YZ& ֲ %3`w! 2þgTkkz1Tk*G٩[ ;-o2knLTs2%ч_N ~BG![Q7y@:A)r\V:]OjhS-& 7)X+i']/,n| Մ[0sX)P`G@?tyZ͠L]=~|scR&-~uɦޜb_8[Qd*Ӣm\4.4a9ɬۚu1}?7~Kp, d'=(H~Q0. [IT0>%<:/'<!\8s&\9Ǽ6pKq:jXz j.^V::F6ӱ ȩ.*(3U% aH4'YspqJ)q3 "ꆱ:"tKkUhVh4n$#Lz4[Gܫl|[uԢE]]vGIk/CEBENa"x&ZIuK'].@]xe;LT:Sli#eQBWͣla3/fzS a'cK0<|&I>jL hGrxR+ A4s,m98z^m 3g%9*>I8uٞxm6$m񸮵(ǟ6# J{FQA}fӕղP/1{li$FȆǢA- ⏰cjoƢ=x) n$k{Ʀoz8Bit]pg-{4_$1)y`"Yz$ V|dgaǢ.;¬Wl۟tQE/XR:RӢy]FQ~ Ot5qphQqz.%rOhE| I!cF0eנmnqSUHEEL򯁢g9߼Ȫ-26:eR8Ƃӽg{V /?puNR4A ѓY)-8;+ѱfg9-? :qJl|6};\B94^6ג@)òpecrdFm 4`W+1ךT>fLmZb9pc@6#cz'$ -hg9bX;'soIdضS}Tx4.sw=H:bBXOPE7@3$oTš5*ɂVppuVX' ݝ览 :w xmoSPz{p)Bئ)a)Lے.`htl|LB~@0 lovsi9 hj<^آ|vX%:.]d]@Wlmꀮ?A|@Je\RpSBYc|*[x̉[QLTəKKUf U!kgQK,|MEAlq9V =0,ZLl0Mz3eXS '@<~< ݀/VNV$xkQ: P8^#%?c Ҷd}훫3AlX׭aGZ1x&&G}}-&kI#L;\iAobpgrA;2i[O`>#bu}X[aq/h̓\0 vWM)Kcwk({ECF\,V V/Nʄ8i xx71QX˱/2bdPa 5)3dn`mFSiΈŎXϚQKh=Ҳ\v{j_ӣ%{ihY.0ؚkOf ^f\z)/8rg+tiJ!t2`=ޱ*5bvM&eY+h 2E>u\?!KNNus|L"68YϜ25q:w6+Ҥ!HCA0_j{ @ma{:ɉ'p7+-3zF7O@WZcp=hC_XIB+S̢c2V0VåZlM"ֻz2âv{_X +O%o-`\h-O/+qЭ4\ɿ|9'~sdEkbs%g[9RLv3ֶ ԕa1l;$pTC׽~aYpXGgz-&} 4GBJ˜=cٴԕ;I9Ki@nQ \jr%YgN5篓IB10-K8*H] &eN<2D념=2n=xi87.k$QĹӱo YBfj?$62D.OHC n ^7Eoec dA!G)H낽Az]<s]<6kaUg~{+seT("ˆ(Or'kCFIg^"ƲRevt; Gӥ{b0r@|9&774[g4?51  \jCR#ț0u^kV(=PF08,hm!㒑[TL:<;y+JQf Iߘ32w{̒uo{o?LדN>_ͧFaeo=.]LKWsTeR,rtM?oN\Gu LslìZB<1Ywyٌ(eI8qñ|B|ZuFg0hI모U'y %kӧ "/xːXJUW_gUSreQzxR*-'ǎ`EǕ(5<;錘pp5r HoBf_7w3X:5`R$KTV o i.di$Z|XBIƹ~? V;9@dF@B$}0hm4LoisμGJ[cɊmܬc#̈"5r<,h׿Sô۲DZ&s_p*6k 3هL@(з&~IS ҸB/7;xO# ϛg HaZ#keS8gJBM ZTژf `F,{3jzGÚD|F/E_Ip_ "UCߐ7.WWzv.N}ᚘ/}ťz)$IDx l+[4$\ǭSIU?D|Z |'^JP AYԃ Y"E{Q<p7/!a:2?Rk^MN1 )=ΌOK,rGO^h}7V$]ЍtNDqB.%J6Ќʱ| J󰖅 /f-Hr0eFpqkofSZL0.Pt S*.Dv`:vʋDU)"ߒךuķpՙ.196S_gcDR^X$=̻de:f};cyUX;323e&(V§E8ͅʞ|l'cGקҧ# {RvOsPx:_w1naLڂ7ЭH4f֖mUo~HcծC0:q"-[ѧ"eկu  c3[0,S]ɖr tv=[KI"_y*+R> E{M1"cB}ikmKz[IcbCUI/ȉ7Ԓe x@\T vt1qu/ܚ#YefZbL|@>"(\p|ք.0ݭe(qB6oL]~S@^\Jq;uIpL)(f̋W?VdeX(h7"0@ GY} VE5{(A33DS^yB3o0!F (]L^.rqwx(Zf|wh: qGa#L]M!GSܺ nҕ;'Dd.VB 3L6z5zF amFH:L֞QpEJ %rK g"*5@aiڒR+=3z.dyS#VWX c_9!c9UI&5G'wŚ҄U1߄l*.RlYqRߦU=d;EȨiF+%q)߲ j&qv)uO\ۡX]q*3=7No?bJ{ xw-93 /R0 WLMP>]I`bnT6GYkCU8W W;.k/`նT_O `;. ;}a/yG J>ε2 Wf\ OLC[Re}B#B7k#F2(I(7I v`t{7Bk5r{#rRz)vۼ;@osN%.W!WXBlt20{Zyj &(]ymC{LҘy:QfZ"mw~U"t֜J`Z=g -"THwH'Oy|gh&ri+u h) |p{T4K M1`i(+YJ((,av: $4ЍQm8wЈ ydr2 J&x1kGEѣ{L[ &wqU{x`(uY|HE $igb?X3@ex%Ip?L|{/Yٚwq +<̾G?D#%k%RCww ; Qޛ.MSb0x{Fզ?X`APo'O-HvksW}K Xhv,b+~AMczsZLa!Kk AЕ\vL#gXX9KEhܒ7 > -.Lk0Pkl|-Ig=4y * gٵ/9t>1C1Qg}i}"Me;[T'YVş+ܱpdf!2wDn_JCJ``WSts VcFXdI@Dnö5.Rv|MG{ilYmWc my)˔#P+kx{v{MYzا_9|9lWXq4? $ ne?n $|_q+(i jEW]j@?T#.q,4T/Y7f+M8x^(7/XW{'6wrք _Gq9( N-_ QR}hcs3">os̊47zx&Sp @whOD4y"/#=+V"~ζ~;$mFw1\G%dC[ȞՁD] pWLR+Knp>mBa4EpYW G fn<@h3fW7֟*/ܒLZk)iEzQ1!jPg,yHn]&ljXcrǾr?x#&R^nڒeJu{zF:GiTlLM써8"AQ (5rw ? x BH-`Cu||f9kVJ7' gǯItOy8ڝfeA6<j8c} Q7_ձAp/ii9v a&{\.+(K'(: b .g` SvP17S5Y zCjH9Ԍwv62!] oW;_* dpa ޘ9XHuEd("[K8܂noɥh/.sx(NjDZoSԾXH*$arH*f|h5+Dx@J^+J|EcRp5H ~:PV I+ 3>,]Y#5.Y8Bͤ*@j*Hjbs:&VTm{>fCGUzpwkzfLM^varg25" yOR񏒍]}Sl? Vxal0_t8Dl[~)-+iճtr5D! jiUjmseM?wD_iS@CyN$8.rt`΁ʩ{ra#DU{ E&.LER\\u8IL"LDK8]9v.c}?,:6N:rI)5H|Ê od9l!N[][=֓Ou+yxcǖV,=87dKRj^ki\ [hUfiMh\%I])*X|wh?L._Hi^mvP#QEqFt֟-- m$qP48)\V -&/J2nKǨ?54awt͈֗!:R!l)\C5EbX !%)m|ЌZ lRK~ sK@Z8l؇9f:? [ .B:W6 V(6E9Ei[@g=;MIPwvŎ^σj/tBb8#^\i,oOC8T%w8 f ^[Qz-5 j֑'w8--m¯u)SNG˂\n$JEkpcDݸߗ?2 kh:x?FjY٠9}DA]nL5E{,p `x7TdRWywvr7[6V3HJNO1bfI.< -1oơ\tPovUoXN}$P"-͍z+2Q(_GmĺOU#]X~64MIH%LE#PA%SGN 08 7*Kgee|p"+n儮moTfbe"kAlvP%[vZ~dVvvn,ȗe\ BH_ߢWy-'D![,˛m蒴cpDML ZqkgĊM Rwv[\_8ex wW dmj9+^M6_9}@YS\Â24I,ӗb] %}m( KrLis=TQDӴlr2^>|Σe{jih>Ui6 X{K o0cC֚Ax V|i8gQ[]>Q7RCQYY@}j+?ÎlG!(f|HBc/aè{8Dcp4,KF1m/N7!Ÿɘ$y )φ_s|ע f/mzYq@N,g|F9(.y,Bc> :&%-ynqPӞײ!3/W;LCV۲-1K; ҉:B;<׿{ Fz%eIt^5Oދ8Z~|>._$c_i\_m;*E 貌L)A췿sH[ IiӵӨ1ߧ8xIMy,PG$XP$ nG/LQ?ˆpe09U}N?hPƟy/L{':g^_Z4Y"`$Y K٤*rD9RqۄK!ZJuBkq.ūOgdĈť(p|h[q6e =f$;-jP!H t/A˒='$ޗ<*5&$EO1{ibX K6aQ9#t?=aWg|Ԑ{)%{8%5꙽rY2N&/=L)?ڽ^gR!cєC50^1;<|t LC[ |zqIفv mu`$!sVD7n[b:)_{. ԼYbM3~x@ttyK I+ gVm[OýZaU"8^! 1Ə~[ED q#sn4XJ?ch q\G!U*="*^rșMn~ $5煐H2/D+SJY4]A{F 3R(X!M-!Fx3')F/NErx/"=eZ1, `B}} lܻ| h)Cj%Al4]eEj<ӆlVH zx@1фt i.nr\bEW~al#~Il+)I\_3Ȧ{ ̙Kn|]&_T&[X{̸˞!Poj_Yl-ivf$."§FYv&%HP d-@B@rPDV^+v"1 Hokbط7 ]sϗ6$s-6 v$ga]r;)*ǁؤF^v~ +۟^M=BOtpnƻ ZՅ'~PP䵕;X4VKӚz6K̻x=[xt".3`tŏ X+O[a9nS',2g^ds}9ő2_gL IRW6>L~r .uPihw[5>ޖeq{ȟ".-A{2oB#5=lO7^m:7E ;X4K_uFf%2AȞ*Q iE DDj( Z׽Ѽ%&e`5s_H0#!B@جceU/㫕外W9w+= abG2fZcnzJ7sq Jd6`헗,>8vr4*/]x8OzW7+Ky#U䈧 'é8LX5ֻ58}UϘ7Ƶ*xU&yY.äC/@BrB,+.#O[Lq9s`2Y䒒ZY3pA+$VS+iTZ 0rDgSHx%B yܽ?GL웁Пw"#lRǗro35[""rBs~-e:n#"Kgya"8fx i%NŖ\e; RA^z '7/x--I4ihlND%iWZknOܻ.ڟKT>^xI͸G/< b*K?=Z`(NH:߭+'Y?@/-̓vORX!JM\ĝ9 gfsy4VE5VH +LB|c!7ZѥQ\]p 497[ZaN7"9xodC&'"D}xo)vPhMy<2)xAㄨ9`nk@Ͳ% >RN0:WOF0Zŝ% ݇}bfA>-?h\5Ŋ삫"q  8O"**BO!º8&;َ'eK(``':O Da&b܍ =3$H#w~-t;Ǽ-f,)i>y-}ķ)`5r9JީƃvntXeOeK (F OE +tVmmљUa|#wmeoYaŢ?ɩk 28}Sk!5-WOסaiX:po7J>ՊqXu$'CHټa\kQcӂXj4%ļRUWz-P .:ئw F ٥ pN w"k9zITɮk&rq4z1RKK{oߥWlmи%ФH,E 8Avda 9ul38<\v4(KyA=%Kު*d+QN dOr92-1$6bw+9;mA|7`*}G=X&d kCz7gbd)N!}'Q紏nÃ>TBRcb’ݏ HShfϔ^Rf<+igzb fWȰ;UxzӄIb)mL0}Ao텩q5@Wa}hz8~/Z82Gd,e"X7Zg5_TU (d87ú3rZ$XS0Q{Pe"]G }aA}<ؿ5[膙p bʒ ʯv +*]t1색UG lZ 2ǸNW}dp,x}=\&V©(tU?q 3Axwȯģ}.' beL;\Ww\ 6tZa5F) ,Ej^˟'~7JIZiqN.huINO;AV}~"x 9;%]{E0Z\J%C;Z%.|^@΢ Y){꣰W!6' j!UIrJ}g8!(AdEp`\*cp_r;ڒJU=br F49i'f:5;.=%Ÿ N^pB6Q>dEEFuSr@= Sb؀@8`^ǁ]@&嗫\>÷/)ya"Yaܢ{`?-A魟?`s,+y)/I,5 8Zy~64a` Pޟ1i[v_dyZѭK}jՊ;v+pImO[/n~*ߪg96'fE',?5%j@ o؄ꛥ֫\{P&=ƼـHtΨF_#{BI=n j}oiqhBxCtoC< .h xͺDlN2*|SHsl"kovpo78;E P@ѾwҤMzCKcd+g7&A2K;O,S ٶB6Q8*lbSk3 _5Y3Ȭvq ȠNDwg#b % xAt4]^k@ ˜Az&o=ko0[B" &GWJ8W)s~ʂf K$PK/^SvBxAJCNҴ ͖mfkCD9PgU3H-'e3ή6z}ykU"];⹳KWnmҸUfj(e1!r|GHh# m꒯Y胗;[ދ\ĖH=@BC\D:$p 쉷0lBk \Pc%Ki=( Q}$Mr0-`SH:,pb @k/Z2 Q5 UTnsMP;. up~X.YDhŏĶ<~ƓIoVӟ7dX.<iU{|27d{H)Cuq 1.fLa9pa'H= z I=HrI8~ 9= Zc*]DA_ڄ~$-=N[ʲ g`s&Y>qVEdƦ~J9Da#g9ZuFjTԩ=^&D[cl( [F8?7cUL-}[p}pny(ɯP+F<:-X4#|?8'hU"BgG.;cN(›%MՁ{#a>UyWoKj)X`y)ո^:I4K1זMpA*Ԃ(Q .Ӎtwz-ɇNB>d0?lSLAx_KA*U)_ziM[yF&luʔֺJN_7N\DWL !zj"P6!oFv$2<q-#`gg)\bqBRj s~G6hj‘1NC%}舤z;yEFuk!ND$qIá+wRR]myxk:}qbI$5ݿə7nV *fwO%ajBD*S }ڈ~tړ^LW,.k|,Sɱ7|p9[4TkZ>:.OYP;hM7NpXcap=FMH VhJnel[VTƺmǛTgS}WCVMROPn*B|C{=?.~Qe4Qݭ&> i|%PyœLx6aʍir{ MA!Qt f^GJi"D[ջӑ^8QLlNƢ"~teཎ!"ߡ J@I햀b]犐N7"e@u%4q@L˷C5bB" BZÔ:D0/# .ADCL{`gGʈRQt?:ʌS`dZQք͋=9k 0S7$CEg"]ej:c*jHma />Cb :e`ULv+,Gܿq}(BF4]ʣ(J"` TK'4;?u1Į=Al9 D@2U| 0dN>a F 0՗U92(lWd%HmWSt ;窂hv8aѤM(J+$LI2{Od| `\I_Lnk)qjY$lT2‰PIǥj[4_ەQ]8/@ěG{ 0^5g 3 kX/{T ʊb=n0Bv<)pez0dZ1rr9܊u//s"}볌n xT4ܑ40bsȋ)!Fւ8\ m.u.0f*=Q7}B] Iq@fX-Tـ5ԧRW|':y{(_J۽3J+%"J/>1"@6眂FC(G #D,->XbD=5H'D7n&SwEuцIZ-Cm_'6xd1z;@K{H=ʉA=ajS$'119Nh?V%rI[\o$5l^醬\2 2\'sX9ޏ,l;|so/* zG뭽yt;Q)LX h*JP~!AŰގqkMLWa <$ ҝHb2{|vRWҘ_i!!b'a,6@^@I짥|ЪIYLVS_ֻKnGY QpĦn8IYE vPf3z|E,y0 [|rZlqoIʺnTRC BTO+{]M޴r@l|[?!χT ^FoKŒlBaN4O:d2eJ_[f!k\e/knGgϤLq ,-)u$E-+!SvQo{!5lچxcАxK|9쪨JMWZC ڇZ׭ `nӵVJ=N9 ѲUv;:T l%"xՄ$n`ZCҕop[( @r;;[h `3la8"l`Us &Ń@i"G;#JQ  /zhM5 t;(.25m/kZ1mRR4uFq2~* U{e>~XfA D0 Hv5m~id{;)#a)u\-L7f!O&PH)c`^uZ=[3/pݨ-< OYAVqUHsBIe6PAGΖdxPnfrfBos7? NmvE%칲pj=vInSF)Ox@2:ح(eQں1y֌8T:M[./9;K;ÎMCamGGG2apdOYWOa\(fE}Sl"ay';EZ. Gnh8jR1h46{I-SQ:Ai\@Qj"c]<#Ӟg8=u{5%k s*%;sp/C Jb{}T,% F B.kd #E7l,(,p 9E3~nw3pdHYz>CRc*phڡDDa'1ΌH u3_j{#aۻ*X"WP"B?=2/1Β:XiAjv!׳V0@3s }P0q@Cop-ݿ}X8[c={(Ϯ߆Gϗ,WX}fFjxtrm*^)Tcl@{5JOO_yXW:7ҸVIrHCZRN\s*Yr1S,SM lGgOu̱cH&@%q{3M?SKG2dմbqKmQ:BV _/Ycw&RE͉Sd3ȣ8u7)xS# Q.PZIW=xѢ>憟I[?yaa/~ +hk)T!v%|S\(v ,fn3AܮE/t91jߎs PUa߷Y%\[#(}WX[bI wI:񨙐R!&̣D[ ֊Ӳ(FyOWAz5T?RB^܊},|vzGs8Εs&AºpBˌ4tZe( )dJ¦4Fb: <3\zR`8xΐ}1O.)8.vk;Q@MdWQR՞2œ]r6HĦ~`.YXnMxRx %@)ܪrc ,&PBbK|"r5UUue^l 4 E,,5FFb+.TO;]DPsLk4M}ZATCX~-ق|w]=y+ 31?)ɓTBXɯR$J^L9<<MvR [:lFr1j|w/*.gu2Y#=j}T7_~+N+AƞF:O\"1ڣ[BpW5 )8tVh@tyEOҵvKʕXe`qZW~N\4._H2ߧnF,;'(n.1`=.\s_OpI;iUǸ//NPHs'G$I M'1cZ;T3s}c/~1L+,3AC4ǽ8ϲ8; dH\]Hp\$gYXѓBdˆ5mcGPE'q(puTJ!n7.-NG[|>'s}@K{X6J_ؤwR3'(ς_l&&pC{@XsNR$6rNX,h^oz1> YU& U#E&O^ is?A3ٝZ*T? t:(leM8t9ߨ+VJ̞2 qn`Dtr=oʐ-$7",nWL(fC9K,M(0ikqIv Bë19Cl24 p{N p|0n C55},sH2ZBg,7x*o1X7nS³c'Z&pPŨ ɰ-$\k%SYiP,Si'W?Kp2ߺW&x-1M:qV0}I*oRLm+1f!Kp^eL-L-@ZUv:SKLǎ"]E;_Rp  '>L6L 0i|pCbھZQQSq!M ) {]h!.~`$9[NqrftƈK9j\o_ŨqO>ȗf聟1}vjD;R\SHFu#\j<=Nva׌Vqj>gݼfUMˉ:lkU2I, (&r F-!ۡ  mbCO ny;{\*U6Y *XY/_^[ȕ7)]XEQiLF߬Pv=,N!0YrqX5x3IqqlM2sqLu 4OO{l9֬V)rߊNR*(p?훦=i= Ȳ(/}l4Y*4W?]DsR DJ~,[ vHi#ٓcq-i֜c2kŰx\`2ޜ1|sER&'V9JۚQ W]=vepNԤ(I)|Ѷ1T=![ RpԽk᭏>ږuWy߭h'2qlC~})fhq'Z*I2w/?M<1Q!PP 5J$>SWv@/t CLe~d%[ ],x}mBͬ1K)/kNO|=142L_k\`0#jC H< NH.mPf,-ǶӉ !h~AdK"Cq3  hq'Hh##􀷴" jE/`jւ:*R;Ԃh\8a;ugzo nQRa:(|H|q&X=ReVfJRb㝘l1ؕI9rvKJ&㾺2KnD!&eVG 豃^MH6+!WЄ ẖA#`\KߴT;"(zc~THuSrkHhofc *u1-Y:4ݓ!"Cі%M.<5Z`:ݎ ~ ѽx?NDx-L6~]"t%MCA֍k]dpJKBGxahIzU,OEmrM;W0!ʼ=R/f4 }GBe4G xp "j]揵T "vսj_yw;͊R8Ǹ&|(dte\6<[qk,$}eQEMJ>fcOm +xĉc)3@jzlVyORiC_9] :zzŦ`C?wIB .%͸)y"vIknՂܑ<"m\i٣zMɚPaz>M >xrAZG m?krn<#4'l5n(0;ݴ ]+M & )1ĒܘǒD%!=Wo?4t[ŗI n]  #A" 4!"8ZI|}@q^O`&GgT9ɧ)naq=Kx87 .Ѫs7riս$|ebR-%N Klur:KוݟHė"^4'4d;yCog &cp*q TFx1U3]2J+ZKd|Xٚ~/c$sG2dEbmYl1f \[WGwnϫHL7N@mm_0=nﶮnB`^]M-ڱA[U\H߹d38خ$[Ƌ;ۨ  WxYd ݜ!g~7ioɤ[1΃ /oOfh,+-L*qt΀={OuP8;f*765@.sK|wIɝ@nDOEuX*= u 47?Lvě؍%Ru;k-X]y+i/*S *ԙݑ )v}ZEI6sK. scdk2߬Q~G8`?綟Xie `]Ê_h xJUu3XRS%5ZbY#u v;W_Dcfo kˇ)L/ާjb4rYX/P8Ao}W|[e|2wZ_6L"JeOFÁQT[˄$a]褉LNXe7>ӧo/Ѐ |9f?%X ԼĚP-sj͈J%F?)%9@4Ǭ{{rcLXdVqQ{C*%oj;~MA2:9'ag-l_FrYPO ߪ}P`$_+aeyk#)+a k׻T9qI=2jv3m#B>ToOʨ78_  ?s!HԿ3M ?c@ RIfE=k]9p 1KkomkqEFvyU5]Nex~"/$*vg]%(2B}HN5`ֿM&E'-. swF3΋B^s[/ /D}5]G`ђH@ǍՖLQT 2<ѣtWv N1xwT{0 drB=?EЗg4ZHݽ>nh8WH`ONٝ<ڡ,ڮhhիa*_z=/?Λ}n ?}?4 S"G_Sݬd sFGL (Yk hg 'cwB!G E@RJ?רB!gɲOm*YH3TUl?nT*fˣhDNd}17$=F"wm4".Z 17x>&4`=GgMH|Schbr![VNyv *8OH1T-跌mLH%q֎b^jT, {lz/,Fxg5cВ ~\CEygʡAwD@&^-ffC.=O'Up] pͿs,n}`&,|*;OءwGIfgZM nF=rBCe?C V`h2R*5sݯS|-6C:(f <GM=s^ d>:Y|n*Xo\'S7M8}؋sJ?2<{!1^hmW?j 143&tFpޭ6VW@?/'?mF /wLe֕t`qR8.MU 0Fix^bЦd+G3*w$ *Cp]Cg]˄'C#uj{x!d6qq{`I j[p{ٰ􋮑NDU㸉YgO2ޚDP1of#;Ol #NeťF#aiƯhaz75QGr+F2Y]!LKO9f=_HhgD`G\ /MqE%(@E+\;Uss>rDY.=GƱs39Λ3EPZuGoWH[}&<70ݚxG2s=V˕Pf3?#a6]qlE,0g9> J6˧iߗBmc BBWbḠͣS n ұ0BNv3G\["K@?3Tyv+8]#+0050v1n/FA)2S 9{ qX.M2q`|9 G~X|a ݈y)N QM}k4zcv+uY;ͺocG4 vVي~YFX P{1G/z]ZEf x5Qڋ;᠌˺ Yi_'"y8nuVr_MS{HǭXyHꍆ]wuT2ip/^׾ZbB$B`d_:Ce1 H٧% TfKHVpſxN$ڋN^ּǙ%Y}#D>`EO4fQ+e-@|UblXW[rG҅1vŌi_=ClM╀LnHAsJi*?|7Ux^ַtYs˨!T GuI @%4p%ne}!p >B.n.Әg#96jݖ:DLoSʯ6GD'ޖDq+8kR&/-aT @i^N#](!\V*O Rs^s.“TOs)094yG'PSRC$#$Ys8=:)~ D#H%nN/dLS4FTf;֟j9̂% V8:DR\;> Tiv$nB=+mOUS'zQD*ӲjcW}()UM7G`41tJsZG*mcކRlC | gM*9So1>^(vwb5h6Wl5U؅ZFx75Wo:$!B^h smEw+R5βwEp?d1JgZIV[TF6%\{/^J<{yG ۠l<8@w펭Jb| 0G5 a M5.48WRdy9}&%4 X?P,gj\mr!1+KRߗΐVITU̮"E B2c7Ԑۓ/ t6(\ωM0\5|) rv{R]8|5&XYq" ļlp22]bU-lNR#%{pC9}3V!bjd;g'BsP ą{+ $dNq쿭8I殦[dV9'nQ9"0VEQ&tH~ufPGɰDԡ+^)n|/7t7oIil0l?:E! z4103K6'&s(Ps9߾A_Dz&i`885 RRoE-~}S{b(qZ_ xz97/ ?tr8ƅ8]}GJgYbpK" 4~эW>)PG߼hl:z<<>}TW,i()Jpe <>*b_h?N2 Gw?AwW9LVl7̨:"WϹZ*6~)mzkM'_<'2lޔ8"leOG i}dGT3?mYs+ܜXKݸr%RoYשFKqwU hfHe7: c OgY5I(~N #} H U^ b7%zC-8%Ix F.m62jzF `qM=EB}O%삷N'AJ;GѨC`SoS#Cƣ +$\42/jU]8k7IMJtD$|\^Gj/PŘ 0P-z2 ?C `M^p nswFPߝw'ȞPuK Dćw6 xiͶ?A^Iܪ~c.r,XL,Io dl$CiK1}q9Ф m`knW<^ dokWNn.=h*nv9sq-MHޮhiS%f+r  '>c!/uDNj0f$qD_nnw``4K+2Y7R03]%]<1cw+]v N5`^sd@3r|MD)?F$~ R6QA{܃#ѝ6l-Ƣ91w](KERȂA*TG`9ݿ %` Ag;!aTFL\ aIpHfQUXY 7CA2 Þjk/ iQ{ yXkLJqN'V;Z~oHYHtr>+j]jd(_WDt@;IV\eOt`F@M\9P$C4'ޓ.iWbk8s#pZ%o'W̜pwP_oY+ jQ{taǧK[+lsk?~C;ϙzPV-.7QٱWщ)Y:K#NWHuѣ7X~6j-j;LNEXsh%# p*sW?DO3E7*50RtQQ3B{5e߃b&#%яͲOg5Gw+ٮHw2-W :\'Nu z.}p0B0#}6QE5!\Cyeu3}PB+- mxjӚ}S9Jaa5#"RmjǰduDOǺX*{ d13 bX+K.5ƇF)oD{&׋a7$Pܱ҂ "sn&7iC a *}JFq52k}^ ̲ؾE84mW)+׶ܓ6d/K#Xr5]?(IFRrH YQ U^{5%4&򅑬3k~;4M\4pԳ!52:]+M?C_&^mU]B^8V7׌ J&I9J{ UAҤTjN6.C>[Bnd ە)s8wi&B l1Uqb̠oF%0͉O>>+$2uLŊqrОxO`LT0~:o瞫-_R 4^gShԘsKw=늓ѠJrNeZIy7`7j?5MxCE9Է|m3 e4%8[uw h4 ^ N2-%y._HT 7Cenrk67U5ɩklV͕ŏJc Y/ZָU!korUGjz OBs< \?Og҆1+9iW %t׉-z_ͽ V*qyhzٯzi>n\*@ &zP#\*GPE{!2AuFwb@V`MNK!bLdP pz _4ZH°WR9Ζ! h}!:fnɑ$'J~ Uqԟ|B)nԸ C89-y<D O< Nb:=!X/w'<Ʊ6vzGMsh WEd ps-gm (3yH!sY*jH\'z~L9lّ/Q/`dwYm)-W nR1 DIWB OF#7tth]N,/ >W>.K|߯bJ"z@wtg&!FB;ǟ--.,pq.`5XD4R[/1̼JXh̢9WQG!P٨^N-'EiY29ν$ւP"GƪP#9{][ !+G׺RtU*l-B2WޯRߟ5y\-vTڝ5fqZFJ7oǎV9'Dqi4zKL,?^$ Iښ*یPN?QӺ}wZŒ4^&w&eI )1 5 YDuDS lVjvzy2t_J%9xQPbf6aLGlz }ٝ΀3`"-֥ˉ1*ԱRiJ|.X"Hlj蜽cW?F|]?FzNaA0v ČW%A' Į(j.޷{~c|8K8LuMݫ[yKjqx{NٲQzѽM5rL]E04 a3 :c>gmNM]t KPઙ'y!C;2 rO =.{x?vGZz)jD% -%=F,mM].Lwi~&Q"? v !YFݳ! 0WROɞ8gi/>HoS" B1/f^0 uMl8*+1 ?aCd$Ez#SpPJ,*'(h2wvH@H W*I8B32gB^㜑x$?OJZ BD'4GSbA$|J„%fؤN})4 ?Ȥc/N=g-1yMܤn(JoE?>r/];P.yDk~ED}g.ҳ)woܤbY%#OEQ9y6\:fj44L)|^YHte]B 4.O ott&# ( ln}4Ӻsނ:GUnt8\ FT9oftgTl$wEjZA4lٕ~*rFR1 W"X9r9hT6L{&h zeGd5ϑE 6Lr{=Gأ6[ǙĎDMld5K_\^  20܉6=( k1F'Y4yw%ޯ/ zU 7hJ] "Iܯq.R;q PMy2z&1wҠ, isN|3^ LLnXl>J3^bOB78~)g$jɰ rí HȯJ#lTZeJT/.xyHSW>sG LSY,:΄fܱu\%x\tT%UϤ/&ZpfrDR6: }XrJɀ)xqΎj%hDIʌxy}Bi6$=6|O)X!@ ip_G6cŏQ%@IOtoQ=oba6SxlI[.C]STs*F eIEOUMqeWΒe0>ӓ^o~*s6~Csag,o@EWzVk\)3"WLV 7o,xQC:BU#k\@T. _5mLf 1=\Aa oKos$ 9ۘRA}(`_`a8E3V^B: ܽ:ɮZCȏorERy=y*M|/YZH #U4<[mH`ߎb4@eEAV.!ZCe(CqW2ZeQTBUoape+eJmnh, =IL-ω`Ū|.)/B=9;gc^mRK(AՐX@o<]6`RU`Xa"Р:hj 5x0/C0@pco@ _:=DgLnatW&c=oXR9ŷ]XsDp)@ Q`l|ra(48"QӐ.Kk>@a(VBI?{vi!_|BV:< r޼!V]eD&c9 QT0S ,ajG{x,o tb~BaB'ţnIyj`1OU_9y0 fr7+"]{V0CyhDwW$iB"k>WSUƹَU5)'U=m,UWHm %-6.g6r*nǓV#/vws8@x`;!(狲fm f.v:$*of~عY//B3KBE&@f419Nб|Y gDR1V@V.s R8 d;[$b'~Ar$am1a-/Q2J6H^xИ16 H{06׶(-:^qB'x뵿1JZyb|_ >>jR$3v_WRr1THNT:+#pW@ŋ] _x'AfbJ&3opn`|ҵӶ1!ۧq{STiٯ\E +?3y7IhrmR`wX(8q{y>`!~xj*/~VcX"K6]< hkWT;jp ko6?!'h׋p@T^¬Φ2 "%ϐs?FlPuw#r `9osAQhfC$9W*Fuii;MzUꑑM%ZZS,>g?ON R$" n}AƅݏWʧt=6fÑ_P] T)c/v-Ogrtk,D.f$&tUp&h2ZB{/AGdr.tC}b~︊61R0Qtʭ|bFl!`{L]Kt9]+x؈&nЫ]" 1bg QD^r< ]>V sԄE?7ĠSKkŃq tRpvd'$'!ٔ34acK=c;w4p6YH< 4u,猻8A[0.0n߬Pe3Ze[ F!(^XI۞t3^By (wM jê"09è8Lr_g^"2Z[ۡZW!U/ޙp eS2WW^c,/H۪)*V~:TB Ҭ{7O=DaO<b0nNt93b#Uh9N +^^ydoτpX VnqH슱^Ko3f3gv5, y_.Gsk5)IUX1 Ζ0#w}O͇H(o$F$K!j2L"!c8w~W^м: >6'\F9I4c(ӭXT5.Um'Հ)K@N@a#`{h2r88oP,w/S ?U(rZ".2lbjW8E 0 y!w ;a"?;}ySV 590Z@. |[~D`zd a,?MŚmm<*U)zhwT&hf#Hm,[僇Dq%N QbŠq&oP%$T;f8H 7ZUKGpfpro͉ MSD$'Ũb Tve׼>(#ۛ'0J-$\r?q,WV:FdJ Ǝdͅk PЭYEʷEm* d큭={ü4cAK ƸIs h :ҏ6װz!96|"y)eLyi t6ʤj'O]FPp@U%g.hIf~a^?%LGV d؇ŠO =Q%,QJ5kLg0D{=h_iwl(8"ޘPYR1z#mN3II5à$~˸(g౑5u{9D#6({)ol `}X`Q;[IK?hc^?3's7of>PĈ<*H]yMV [7RYsyOxK7vbƸG&xMDiL/(9jȤ McdC"Ub?FBtHWHHs%]SFtk҂0ۙ#Wd g7[۩8_ګ> ͹ZpΕU/PɏP-Qӿ3XtςxY HH'8E 6kbg2i0{7 :]eqPئ$7\-kC+5'aYȆLb9e,0zV.eQI~; c[WAs\`uZkɋ}l ɚG@We`K@meU Z0-W$wb*X{=I xxƗ=)ԸcXw8k]r, ٳF-qbXޤ٫ d,AI YbR":XRWI.M{U6'L5/d9,tru@3V<^ʈEQIo C+Pw$ZF0-,7$ XC65)c!0hƛKTO5e):9OA+I5|pՏ;){[$x ܋ng r/懍n5sZ~0ŀ<B̐$0}U!'U|XYdԜ*js˾ EBƹ{H$_[_Q'#~ ܵ{M{=?? [dphTQc{wF)7oOK!֣kg@e!d Anzh=űi6T+928U{!Wu~hpE4R:6hPJ_30wTkTvfƕ|C0B8F~p_s\ QT7+,&ޞ;mwM6ikIIeۋAo ^6f*Z8~ˏVӞ"G2,"^È9#Є2j8?Se v.N]>R,P~ W>:\o>3/(ɋmB c{OWa;{OhgeUY:wv݋SF]c+LEvTᲖ66= uLlOg5\A]s+䫝 ;4SfNRgp'EX$z:OC7s=_l 6-[yH0ن:bDzks}b]Z@Nƃdj}&3!#\޴-@c =Y n #}HF|h ƤN5< :ݘ"@uȠOf3`T9^b`iI=UC# S)\ShV՜H;j}^Z>VwDV6fƴ7~(a`3>7޺˅@؀]cFJLNANI: Q0I͉zW( Z_> VQ04jšL|΁*1s?+ oA m_ }Ӷu@S=O"CW)-^MwX7GXfP uvczn/ߨ=h|m'/` 9N>|zvQ8QK);qFycy<'`gR 3.ePTKuZ7/5tY|#m?[OCB|:dE7yQ.Gj2_vXw׵⻆ AdBHx)]#ñY5#MB _!cF#31FiZbMhiTTᡞvo[,|I ".f䧁_Dr.Zx+Q}/xde  2[EW'd E't[T,.] lBkBP5F=$)g¤Yz,^ZhDCn(QLQ}qy*y]"1C]U2gZ)L]Mb< ޤBya <[<ÌYhR=_l]1 6$z8QNebf"XA畽[rV^?E1xMO v 89"d7b/|)j4m~O-<|<`P6g]!J`#n9@esOG.Z'BONR?Oݦ6–ȳmvQ[Y.,Zm ~O3+ޱW(ٖ{ SF~k\mkЃPr]a غY*#<;ydxS/)|80RkwlJBrY)Raϴzgb 3 5u3yPMs9W mU\nn/t@wkD̾JXE)Lb&Pզj]Mmө9yn<]%,jJ GP;\6Kc?$|~Jbimh[RwaHYinԴ׮Th}4c+ب;[{Val⎵y5=%Vb_-{4#WRp?QZf !{dĪC 8E 4*(ZK: Ұ~ʳn'=ˇ60O]<$ihE2p"J.ى03~+t>z}'iѩfX[87ntfRb@y} DzI^k?rLX25DbyQJVqT<dNd`%y3mgp`ßE];v}@UN K~Q RFjuFZJz5:t{nY l);g$~q~~MӰ6~Q0!^-@ǘ@hԶHG#$$T~DLfj56ۨ)ib #ނ!&ƭMh@`72aSfU<7*CyLhsv;Nux 8blngoٝX eࠩù$<$/[(2w S ,i I/%Ołl2)V ,rf64e!jokPکK|\X׳,-ʄ#}mhi$$ 6Zf;DyRцz[oMjrfj`& yKHͲkU& TS؃ܭ--vۓ `g)؀C1QJr?'6oQiȻclL'[RLȮ}XtqDՎQ\t͏ +7xl>*K(hk})z ޅ=-%0m3,p*OZfuCbT P]Ո | ] pJ@n 툯B"0k+L@\)>wY=|YIS;Yf741!<2ۙ$:L`J:'J̛\\X`ҥ\~(~ @Q?viu5կ inL)MSTX_"ĨYum@yhc.igYqQua$5t`CVW.R`~}-/CqwV*ƭr4,0 Wlr6 LJr'fBdVmk[U#Q6mfOչwrݭ/rQ.)XO YmZڹ[R*-y68dī)ЊL )gΘillDZ8ߐ!xz Ib]4!U)ǦKU}mF"|5¿MC%%ᢑ:2ӭ 4>=毩oY0 #ͻ)]73d2%YrY S ht8}_RU_Q qzp`ćY UjD+)'Ķʎ;3 Ǵϩ]Mxbn3 ;Saga$]~ CҵS>D3Z .V80kHZ;WYAn:.46(:axKm1-(t/i7 9$2;k(PےGےI*%)Q>=5MceݒcF48 1-0g,z{0!㺱L/F<ܣ(ؚ*.x)t JLB}QaxJe͑K'jޣC5"H ^ɘӱX-荾p7VwyVI?t)bW2iyЅ%z_hR~T|.><ގI9M!Tç&WDkϥ]2` m3"K)6 Aq?89n6"2.\Mv?_ !Πw# "MEH?PK '4ZÞߘ W1lzY/g୰FR^I:-~^–9͍Rh넓F#G]rzx<(=ur&l8|cDk>`!g3v EέhJWؔM~wύ;g?ϟeC7cs~"6F'Y6TZ}u):8%ثl)MW'ABt-k)EMxU*,Ŧ#I}hʡ܆pޖ)R4b KJCn4FJ1yk!b ]l hgz_Y{Y"^D\\Y( :#NϛY6#5jF,WYJb-؜'7h/0mJxCtMio"gk˫b:T2dsZ [,M񇸙ՠ*БNH; :UY6o}H'UڨDL%ϐ4/+  ` HEK>'- Q?NC12 Ri;JqPT;ŭEa'&kWی(),85 C.вa!=YqG<~ C3If3ʻ3rrZ_{"0(zIjA 2,݆5îd +2y.B\=<qx3} .&٪/7№N忄G<&rse{J+  x/WsVh#ʪS%ZTχ]+} ۡ\6%oHV&ɮS-jJoMEkAUѺНuN&O%dK[ _eƂb彬QHkf1 }k!fj([/K8F^I ӪCҝ_g} 6)ԓ ]0Ʉ7M3p Osllg:88fEF~;UtZC?>?z?V4$+tT2|{aCy\,kґ )GyW<  P"HdWE CBAseY7AR)is9p,%B,#SHa+\47t%6tGl%<f3wP&2m@B'(uq ?e!C8aMC|a\81q!>q?2!5Q<>]dSe.AX([Ir✮[͈OXFXw=Cnhf/C' .Dd\M(77<_7n=| o ]%.0_ hLV 6Ȏ,֓&y~ˬ8eUl1\١ #i5[T heҺA3 S_<؎^:%.Z}YnjUV(2=gw c]U*,J}#_6ɀ{Ү#-%lN7"y0.._[HMGQ"'yIBv-ȵ=ٖA>D0'p2f {Gy"v Ua׀]Q<hp9ucq]w!A:~QE` rTr./JBNm W)Kbꃄ& ȢF&JYtwX?#f?7]"PuX =z"[lwvlwb@aجF0=Izo!/ɖ%rpɐ-hi  k>HS(t ˎTzRWH7# ?!C~v0}]]9Yl)Q"M9֒*@W^H5f_yH8e:"6OH0j}Qh5 L^7Y<56dm)A\P>tϒ~4[m%"h d+ٝIQ4,feyqTlc7y(a-IzX0rp׋yqWP˝#{!ioJrJS~QqFS=Vb'=8 IMF+D2bT^}p )1X 5ntQ#jy cRH_M׃\q;S1) jE1M 0_ײI:gZP݅5ka76;pXZurK?J pˆ,BB^%lLJ}h[vgT !p2:R#ImӦ|g(.tRA>ǠUQ::k}hyX!}[0K@IgUpj8@gVy/3<+՝QBOꐶ+ѴW)DMLa̋AėzFf98rx~L)mOPx|˙ +AAF*=~{:ΓmG{\6v<#)WKn3*7.HI'dWIi) t޳mp(ڡ$eΗ"+>EӀ1K% Td(ҺPV$PAfR7 D UɺJZsda+Յ.Jy ni娏o?i>]MkE1t_1_TMD!B9X1:`H(VDOާzOgD߅ ''|Kɽ#_\ԇ@; 0i<$O}7$^;e[ T#ɰ|zxO%C( (u&f0 eobt52YlU4aaNÚLwuHp:9l.3fTiɊӍ4j.oify2JF͘J: 0$rB8pv [w d|SU_ x^9>. \,o L&"pmm<(Dy3#"o 9^:yhV;.\Z^٭%j@Bv7_O LkSg*wYĞܾqaO m2k)&x)7~Q+q<:+G&Rqp3 WXt]ò庶+uk*>rf˫8Z;O$yvDBOšB&9LsN19,Dcs8sWb0xi>]/Ue'#2jzEүh%Nolo棘ܸ\fcK )9ȌA[B|V&նLrPUV*s͹>0!Osܦql7RFo.o>\/P" ~<*} nH&&šj1hAWvA˹"9$ u/}\B' "sԩZ'2LA\\-k#^i*[QDRܩ7->4| ,"sviLF5.ƥ8Ƽ D?^XO]T}y־0Ӗ [5a }xCiMc|V[f*RG`C4ZYMWV4V SlP=\ssLc<;0  QR{wf!$˄)Jv^WӅT}^>zHCbi@ގ{ jԥCQ/Dyi[΢OG|1C'&!z;w{*@L:F3*(^xhC]$? )Г'm0=WIU.$Ѝ}X=X#&x ,g;QLbt3EVVgT*Jkbl9BU}[U|9@߹A&.3@a|Ϸ<@lr)%mBS~!ZaVE[’XEٌxH Ӫ=,YXKUx.Jm%@o,ɚAm19Ѩr(m|FI( TMmd +z?e+OjYKhp0aŠ9iy=TxΪ͍SQ'sEûYWdlmiX י淎J9).%O8y l!Ǒ22`$#{6]*#p 3@t}<ʽT `K{v2zOê69O@]a@YIz*?z 5%S` m5٬pgؾh*ߥ(DTc*Ox3GkGƏ_vJ'#OZD.$p|ꋊx $%(t_ Fgw 8n7'GL&_ ֿΠv.e*;Bf\!謋Y@8 PV 7]j-}*Y# (pXׯq{'wpoi&/BPKz#aoTetgzmgH:܌{ܻ>nd#wѝhR(-4Ura'Pz."?182c` s˪Hٔ>khS6eXARa{` * {-eEu~JLz"*[0is^ܿf3(Pt>p㕧_=X8+] FS,Hu%7 Mo$oB]`1n\+Y]!K<"$͔DZM~:293z;b85luf4uQzG^ج}aIuBzK#P.Ex1ΤTOibK)~{I?"@ 9UZH1uju@LkQgR 4s!=g8(;I)sࣽܩ t%DJ 9e\|ZFrչFLOGZ駙G}s)=`pV,}5їNE\şyIQe'ĭ:'fHPu |_ ]FosNlm!uIԈ"݇ʙ^ihVGW\{'}xq ^KFMUY>f c  ᜲ!zAy=9`3"tjˌOQP5x6lDwG`lFsE`Sڮ8NulL@j[uNx?#{˜hٔ =]v u{u}WEZbح( jsS yV{Z fTڿb&"=%wqYAB^V\o[8Ӹ`雭͍hA7e!TI1-Sg^8>)xEAQbU*a7t9`P) mVw\BRPbL&dnf^l93]n~92vHsџ6Ėv>ί\ 4W͋r'r"C`fѵFh(SodKFx?^g`kVXl[;37x4(rq+395{ [m, WnC r%2xX9-́%3(f1aR-xVhxQ|^VW m}REVN&+N[&`48iF ]ﷶI"߻B(8qLoN V&zb$()[]}"Afv͎@ilWlZV(~9>TR'ǖ+p?G읊`r 0rk3h؊y8$0'7Shk>M# M3Nf\@LZrHwr@8Ӎi-Ea]E ~UKDR7&eo an$| @uq=!]IJ|@\*\%;/5QfAݰ~9xTY+_7a!|()fT$ c&.lk=Ω#ᯢt%KH.j">G>`ٜ(/k4HhӎX4ᣣHXq$Lk UkjkS9J-n&t:zsK Ha-usŅ#[OgKӽF x% W(t~氨xj]n⋢])FHRTȎz\fo(apb׈gUᓗ8S(j5rJmSLO#FAe$;D&B@ *Kz:fqxSc5^ڧgV ^oKA O k2&7x=νn3دLn҈_@ӤH? \&oުõSԴx[$S nBO ~F C`f0{~ TS0ߚ_;o 6o"m |aC%d`YKUH` pgEɩZV&SmV0,&ͳ77^Ńw/no//(Ԩ^ڌaI3tL25D"b8Y mN%xq& d9ʌb 4Y j!yݤ/qK#]?#zsY|_T(`PXM^7;Exڈ ux 81#Ofa=Tm|XWS!*)I}O2f]NS(mM}9V1P)3nMQ*cv<=M]@F: t~Vyo$0|l :kgBEY< j`q$c, EL!0T_8Ĝ:'yJz}~XnNrFYq؇HY̱w{+'RN_k-O>r~iw!urË\麚DZ2V9#4xVHP.,93rK|Egr#fo"}=]GifrpF-AUB;S#g(MBZ(s&CY=ᜩeZPK [Q Fԭ;+x}"ı]7jSg6w&߭ #jiVtLw ^h~0+/xfAٶZoT̻\wƀ PCp c/,||35e鰒vv@YPQ΁+Az}hCz8dU zG6i=bv5p?o zRk2옎͇:M2E&+:c޹:' !ɻ'6֑qREQAȫp DAѶvΒ&\2M#wy[<.Av;c'0`pihbPFmdƴCa$.5d }vY6%[DpA؃?٤k1 u:K0^WW0 W$x΃m[LbށЩj~5wP8E=W,-{w]6aܽ'|)wguPOK FSaqQE,Y/fZz`䯕qU6 ֽ`ZpvIJ m`=yܐIR\w`80%PE?IPFkH$Y@E:O^ q엦]uu9ɆBJi?D; 6KgkFǁ2{,:!7ᩰe+ ] B4t.y!B8 iyHkf4L9vb*7(Xݵ)O₉G$ F`⻘ r x| uVRmsx CܿV`$R1HZ/^g<eZEIh͆!Q4rT*Ku;\ _E2Y 6pMNT;2IASֺJ_z*F3 ,2nÂ?rhud&tqI lzv ـ#V ro_MF1g`&\T/~ o,,&_B]. 8t2&K~y.WA\pL|/'sw=eEpd(\{jسDvڥFI ]բ XޭO^Fx\Gka.~(sX'G")&n3ɤw 'm[1\)l XID3~V\VaZ<1б-%pOv|՞%J` o1+ꂲIw':By}y='Е*?] "/(R1- xSӃqCAӓobT E)p%S>q5ʹ: MMc$ьv;FW0{oHb6̰/"Ls,WɋPkd94$AD^e"y{v'9t?{eE}ңfxsgN&u!wDG49WMu Sxco7 ``~Oo1RCp 3rBaڳ,g11ESLq7`['"e^\Z8 J Y :,>Kp;yDIMrbLjU%KkDžknRaWϵIÙ؎|eE$kXAE{v:9J@ěgY[d$ Wp0&E W^୼5 dAL,`>ǧN2Jq2h~;iZ}#0Uw`q^TN }62 8-O/CCǍj22TTyRCV -,zТ\r#J|˜BeQc &l׆&Pv8Ř5m{ QI"A xR~Go Y/T$K1 97)lA{cĉQ t1e<*:5A>C_[| aCKGN^&8w}#79|aqv[u P(:#^I!d;׍q:1-~=Yg ֞Ԡ.PrS;1o}c]mAu-{|cSxsM$6lurS:0ſ/,L]KX?I#O%Mnc0]4bOˌ[{'MD%Gesmk/2VQCΩ鵕] *e7 h w*ʎA{Ͳ/.VN8$JOrNc<-HקOv6hE9"D?& >knT{8كE\9Q69NR2Ӽ?k$;?cj1 `3Dwv ~8io+O""g_QW7JW F?W 4k>v2("qDXFEe@Ny<3qC&V,RoB|qa#)/ś/  CJU╾An(Vo3]'&X5Dz-˘fۯ0K`?~98=vxruݷ#zB)Zb14Ut=z]glp@pU0w#QM+Yx/=z};2<]yZ1RLIicY2j>>XP*"~pw.a aM|"0{ ͉ ֢ёIPs`Zpy7:S2sbP9zW'\ڸk FSŚ53mny1Q?I2kisIG83DԕGG}~=s1@m j0Ps j#@Je ZNkS='qE$:RKAEtຖ&io|UW&mU>MZHJE 7fE.;-KK{"X2LPo@2.꒱>Hy>Ɇ߈[2JARL^>&DIbi_>\Yj!rүu޸TAkgŀCׂ=\MĆ4sɜn:p2&ŇiWCuG޵X(Q̜UQK̠գrwY(_YcűUߣL#gf#aU $ʤ-@d\;srX<'G?Y}S}U2_3])~E5uP# 8וʦ2XHFW WU;U~,BzSfT|_I0?jq">?=;JrCsjlT`Nt!'(߁I,|?4 5TW8/7M ܖCZ;X"4.-LG9=纟Pz;OÎ T=:4ie-%W | ՛JTѲ⬾PJt\CsǟLdڡmz~Mñ[]w84uΊ/E>ȹz& Fl}#&8ؤ έ?9 %`&OϠ|Ɩts79ySR7meO|TzGLך`KHuvЦ/]b!zSfyt6#faDYtwAa_Cޏ T< 5\)NUbbLkD0;wZGg2 rxގgfR)k:?fw/a+wˉ!PvTdT1Ke <VCdQ?%D:_rԼt?&yg<^Xes+Ō'hevR@&]J_S+}TI_Z0k3mOG  WRXs -h^ڑJqa}ʉib98)兽 k K0(LM46s~ hQWV)E1ERS.Ð'aeCScN~۰ck6fIDMW(sDmK6GHZ(/}*|B`9"$B&o -', je7O:WcZk!WzԐTv@~(ܰ]Z,k!avOtΧ9لQx8X y G8s\_8)XvuV# riJ:^bxD2-6&'V޶ޡU5ȡp`_h7 ?Z\$=Dsp"Q $ېs;Y(" %vѲr}zK ("p#h>S)Z˜F1ͣnVFow Ae7 R!]wOxOTf(>~[0Yi *d9"LEƯ!RÊO F zؗp𣔩C!\EYHr.eq\!E@,^J`0r[˱_NΤ2Z{w\?q+9-)1Lg<;t/k^缉S<\apq(Np$t\LD7]+C tYo|KemgT3ۿ$̦U:fRԫTZr&o b5?&TЛ{nPnkY1b_ОӂV/eh8.iU4:![Շ5g4GT)JNuG"&ޘZ]Dd{/BH|:0P'&@8僩)3ߨ+4L\|`!3=AE<D+fĽ>}GL?,X6a-7Wu$ nRXȁ%IK/@R\ǀYxϟS}rN~)aĸ ` `$⤠ƑGH LL$m΁,v`:,&*LrP˕xȂjiڋ1 ;jC@i06+X&W5!9tR<]P{x7 (s6.5gпhmo" z{,'GlcCp-ďƢÑX'Ww4D'fd@P#zkcؠCk0 C&$u"/| +RmҵAAN"<~QUcQfh m%Ut2u?J>Y4C9#uzٰs%l[˼n=c.4᫖,a>uOpJCЋ{Tov;Y}W_ึ/=Ȇ ,~l/ n÷?:1.mԇ^U?1_t?0p`3'I+گ=oZ']gnK$>2 s$Yr \˛8n=ǥWiV5 λlZҏn Z0Nw4᝱.7̴ʤ_*eMRpQ ܤqg%ӎQIP n/nK|(,#;Q:KVO{O=ܴ(H lJSa"k8B2l: 6яS4la{k [j J" [ ECFDDW~SE4Dgxȗdrլ!MX/aR] :~g5_ÔbU*qp'' 0&q/.{&nsuQ05ˌb d{zC&|p2x #H=Q> éUX.>V`GqfЛ $?h[B>Xd4,}{Mj}kJG]1W,@> I;>1@W"15xi'ȼm7o_Rtt G_I;JhQ]B)&aelMِVR}%,> :%'kXtWqj7)E (,6쥻L&⡺)A M1i?c[Np{/5 "d YlCizZ7ĵE ;`NO$9&n\ C^v!s'4YpUH1eі8=MAjs%Y* F V ?m5F@f H>W M1Cqzƥ?gh9ʼuBF!ձ{80zI0hSv)h4,iJ Trv!t? >]9 jHpבh6jA҇˒I;{߂WFѧ؅ʝ=&[7 [5~VԵȧnHIfx 24Rٍym=?$Hk,^+nD;ذ+e,%Kr{Z'|{\5gkә?'z,!)V;s_nUi7q*Xk]GW)/Ɓۊ‘WC=3 9[o= ,F:[Ӧw#Xbh33 ?T4L4ֳIx4Qd?`3=` mX,p~}l*jaó倅RL3좔٬kktကPGT2%t<u ed Ya= Ћ۰@)AP&h5nM:OAcOFWH9_DGQFj ҢaŹ@t¼c#yCEsלgoht3MRTStrzq튁A(*ô3KwŖ?*=1FtɱHM <vZe&> w\Ý/9GkqhduTG=m4 qo.eG,cpY%מ'EA=7 u`Nu(ȝrM'lӊiDg[>ne;yle_J/YYݨourᔛb2Q}yݔ<Tmbia;@MO p[!Y2jq^q=^E s%կzjDyAZ~W7^xǑwZŗ^N:ч<;r _ܑh(|zd@M/9]-gG`*/${TOq3t*P:P8^g x$g8`h!9-4IZCf"jhH'SN֦>n,@& M%NDR y@Q4\y :v'&@y~Z׽V\ Ώ%j⛻bV&fk>!Id̮/OӮ S0+&+t'"J".ynVR;=%ƣB :pOh h;X-8Y/^I{,5_v#8~\()[{'h+1,99tȱ4dtko űWeWA߾}i~i̪mȀHr0=.؃& 'cxĦܳ`*}򡗢q 8cc;X\wNfR[VF|pP@nU!~cЀF7X^;F э~c\á56w),GG 1#>6suoNO0QI*Sd FeD2VE|u_l&9]Tqq3xx81,zb|ǴWwl]-27'siS_¸!7x/xc`v?x+/Q 3 Izw 4? 0ILZ^ҘoeW~Q}[rar1PNVSU[7./S`;8 BiQP/S R8ѧS6R=;\0z-ܯq)We w m=Ot[c4ӑkҹBKbP [`8>EHU]#Qu-# 59c>אm{?Ч`%|yȫ-d;btU^IkA>ns4];yByTUhwevӵvjK[0^ a΄6KEa+2ֶgp&򻠾J&_ߴS!-˩̽uV\栙4_.u`ZT ).QU( ,N֤IrqXF74? g7ժ \iZwK{>i5Eq'"#G;s\+_n 6=A[3N0Do^};MGah k|}p8,:AInc+Qa,P16Ux* \jzbZxr{>s4/|s8pAb+}bVhia*5@"ɦ1#.be-ᛵaN(c3u ^HhIhCwJG(gi/K*La&y;BF,wi J? yJ j5zJ^ݑ8_;Pon^u+cbe$g +LQ#u"aMؗ;o?2B`;|e۹lx!?5]U (CmώQ5>\ ]ͭ^FK!L,14,} joO!&mh'GhDB!~ڞHtt/1(tVTSC.qIo d|kGn v\*l =<_֬D1ƽYXkrJf^ᚘ!?wσh9hÕ#љJp7lC7 !i5̵2?k< [x 8LKNy \u95Dl2=Zzs!Ș H'N&MXͪ yV,NECJy~[Ŵ5DpeAɻv.4 s<y֟aq u2;Ui{}CslĠ1)/d=1o[\ F꫖J[H&i5 վU D9y 45%ϼ Ltnj9`_DHMiu# ?E>5!4k%P<$LμpG.M_Fω5BEw]:xb>mz^qڴf}JVkbme&r.ۙg%rd@Cl):F_5P۬% yTUӝ?55X);?A:jDn_C 4UQ} vQŒHʍGnB$8ġ31쌳[f<m_Hv6 I"8R+k.7Q&?fA)nS/G'^mnAt~gpBI-N:$D:2b|31b.{s>싰X"[ Y4Ej˔U_V@ čNRihvW;mO JZGtIz#-c>/(*Ѣez(~!FrgZW)m (RCGFoydDWkycBba w4gPZpEү;j}4@ f$# #HwQE$5sx[Tbr|4Lz UIym[ Rе'y4RV}%['3UZPq#m.h&+)xڝ+ze@ZT 3irԭUʰ]RkYt"]+75e0"39'{EΣ,b u`mEl]Kx"$1s9|!v}-9{4!Y b0^_XflxbϷ8}90x(`#~r̴"t+}rd-d(NL76L0 ׻0*¨VO0h0יϾE_8'qz.F!OsZ?r CG3Dt',w֔afs”dBrS#8b8mM\-J|t[𻛕bp\"4tW6&%l9h1tOc4"T#B,MS 53Ԃ3@Z;W7G*Ab0i.陣הAmw.Amu0CAQf0fr Ѥw}BAM;l3G,$wN 9_ e@$.%1+^0}_m-c|x_^lFbłJC/e4Myh~t `xCܠ6܈aH*vrB-kyZ! &*сwXo{G$y* .&$>^,v:h$X.ŚL8('G*؆ts,6DI+؟ (9ܯ]p<8R|jvY9K?v)]WtxJ{]RBx@#~CШS pDdlCFs-I0A58;M ZD|Q&gK;"|'gVBeqҟO˦; _3h,߱;e^)KMMoF05'e[IY,.7*>d!Ϩ $۸AB=/EP19 \e:ʶt'Gᛜjm~PGw9Hww)y`j~]9uOF?=U'v#ysg~A P7zs(ujJj` ']bT x])3iƸ|@߻` qԦR@qD.&RQBy,%PMq@  ^Wy,C Ϙ>*@^t00m~Z10K<@6?qtp 6k[]2TO0O5= 8h|r`ulBemH)=|&uGѼ}yoU.jݵ ݮb*3$ ɎRFτA*dn+ۈS"'y_UEi\ $ tZ巴YǠ0? d}lo/t@FO>*A1hI粗2(De0'Ԋw{\K9M#rrEiq3[qWg޺acTN]!v6[CkcE*˗.$ոa Ż8Yf!<=lDdֹg#\,qH}#} %se}ҞZ&$B!]͂FwhɎ6 e}yZ"&6hq@(l:(AUce 9q3OɀVe%1h^'))gJ&PDadYVG6p!ަ0ucٓvj=Wh)#BS8tY!yW!SBJGS;Vɷ :"#96aNOi[Dal[uhY ^>.;RF\k|;j 0>uHB :֭/JpR]b ֽbx~'"|~[[f0iJ$ THgYz[aњ(|= .\3V8E%u/¦E5/٩]W <R\e_b˶S=<:p<&RY[I @S1aMZhn*`A4\b:|E`+>5unżK\|G-Wx+{)a 3\GA¨ `XZc.6֓J!Hy"l})U7nBMR xl"r2ŧ[ ㇿ7尞"=?8n4bvdՀŸI+qJ!Fiݙ>yܿ M?9|-h/`a۬iڹk%e|UsĠMU`jBp-wR mxfē[;<[s5~\TN;X ]"}rE zn%vo+ Vr+z ;Qƾ->?2wL9H;y}B$jzΛ^-? h*]ٍ[ݘdnָuRֲCj,pd~hV.)" '<8GwcoKg gfULK C-+;p0n쌕4'vJlJl݊[szjsva ~ȫ 6;%O}=еGi7u#, x HR/g*Rox[8{${7fͱdd38Vݚy,j|@c&hgGؖ~Z+D#PR uh2^¦l.fw ݞNNݮAV|Է& 5`U5M C[e~jNda+K2:]>?+K; p*,xhknWU[łRB)Hڍg Vd 0A~36 Dmb> g۳vc^0 VRƍ8O"R+B40}jXJ2sL`fa)/rZ먂cU~C49'BO@%Fp'/84wꎙZ!_Ysz6V>q]ʱxcJt}e#6ȭݰ@vpWiߚgeuE&0raa2Hf#" Ӹ&Vh+z]=fRhiz=]xs;O#/xkmI@qb jb60 yXAߝB`*?[(xn5C6B&Vvӆۘm5{=ϔ06 _/T|f-_h$4+۳U9Tz@~VS_Ouf0 hؐ)eݖ<Ɉc8p1y׌CahQy< 7)Όt6L`MhNR=C}Jt㵇uJ-ʜӅ՝f& C!~GW%?XnkpKu6,ߞ\ |:XѳvTGF:nun,J3Z-'j `2PS2-kmR[.;?a9܆y2M־0u+qS'}>22/e{vfUYH<ϒnЌ`x.܅ξFa) \ ~,!GlK3bbH#LSFj[:Rў J[>sx´7ZKNʽʌc@k^qQ`R'2Qz;ҋqS..w+W( .WLx_ Dx]~҂sJ+3HAґn`T 3Ds~X OKH.mP6/"MBr%HdV~9b< xY|PUFk+Ce%^K1ɸ+@iI.ܸ')H^i- Ч h CfT״X챻ktĒ! 'ƫ`woYAIOQn)"s8NaedwI|Z*Z5=)W.X9WEI^f!*o PYt}Uck!L 5O:{ jLX)U[+u배EQœl1D߫!Z?[dq+^? ۤ.J:'I}ˁ}lurr)!&>9uu;;dWbC£hm=x?Y:Cow7< n+!EF'^]mQ* V:ob'ޚsJax6݂3C{¼ts _sHenRsE~E[SA;.{쬯iH$ުĪ3{J`<}>Yt7bIwyGbD~sa8q݅ID X{#E0Rvmh]8{A|_s@|Bici;!7;cR>_ѠLC p1צ1"onSJ)`$<0IXԣtv|\()B uYM-S_4IJFR*'PĀaJF lCsla~V{#J B vdP!xd{ |Wå)M<&^=%yKR4<8;!(cítmmeY z @p%'`xg4/VǺ綳:uޖ8Q]y>}EIM*KYG^lNS!6IHh0|x5~dN-⥓/$:zC5.'#8>}h6ٳEmH >T~X-h0UQ\#(\v#p*ĐWJb9p+Hv%im0tm 1@#e9!i $/6krGHXr<(L;(p-FcKFX!n\xm&$-1^Q OZTXw٘&,bW9 V}vp %ٺNHl=*v1DZcRH}(5cz}뮜0nY- f4L$zL YGjG*qh8|E:6D89/oxAF<T 'R}ʉbZ 8.GC8pГ;1t:k.m/G}jBaj9+tDҒe?W6׊J~jK"]վ'b1|bˋ2ft!ab`k0m54L,=nB=}fKJ<(-|lו]?`{8bdT_ތ+%ŐT+d$FįI>~+6*"~K6֍~Zwwd/.G&9CB+ + ˒H9)# ::~52H;G0݇{V 9$eiCoQ;}G6k2TjJkhk],s5Pѥ~y%B=IJ6YYxYKM0]I//x7̊c* _ ZbC9g5B= o+BUOi2,',S'6 lÊBhq;-DT 20vy8wGF0i[&K5$\FOS]6+Z8E7S{sCph+9IXFu@\FFveYfے(Zܞ\V*^ps%h]OLZq%Q;\xPl 9۶;*{f!fh9H_us<ݤT]{cqGjxR-_5Xt%15U?7ozv1Ue1*[`YHEp4zF'}^ Mſng+c5`ɮ)Xaғ{j>/}c6FWN˅gb7loW8ǩ<+eD'*5/ygȈ49WFeLsSƏW潗RڱDǁLUb#jwo$vNFVUβQV˯VU|~Wnw .5 $Gr~UЌ 7D!æ՝}*wrg *1'nG;Pul5W4q~UtM)ɦ=G\lgsz9~^$wE#TӌDPSȡLJ6W/jSx:3h@7(e2UKNLAF_ A6Pīf4$ Lpl`iF㑎Z=ŮuGD"g,;ŖWm>#~ɃȖYT{gAH?vnNh.)l6BϲYB?w+):&x&# lȅp#BIWv7XP8, [ڡ˵ S-yѴEGM$ <)睊#~åQ/fȋxŷӂ'nzp6sYX{N+ڙr,NpE'l ~6B G ھlk6^P"G82YX7͖# [UG4޼~̤]Q:29k|)e v4ҙ?q׻e ?C/ e4 Fm:oա ^$/.| !ϨySǙMMa\feRza8POT.9(t~ _ `9¬D'#@ŸrԚ*hOeg8ޒϪ/[%&髣cV'ꕕbCy~bN=ҚM[ofgaD? Sf'upf)Ssz_觍ix {c/x݇"塐# aRW5َ-M azGTv?ȟ_s%4ڣW?kߞ5!O]PӥFs j8 9)p(Y"X 2疒am2S#'Iu? c͵X&>`(6Hu,XOiH,)sRqCViK0M,uS_qH#;t2yK-a͆FGϋ&0̙SkPLZwV&%&RqCjnd'-d ى'h':;ުQ&5o\ V3(0fHj`$PCē.]mFnE%pvS'>Ud$\@QM׿%Q*ǻݨ{r418>a !;&t Y5>zDQHv3}~W:E3jG{`aێF|U\@B1Ӎ?P3J% di ֜T !/QpP]jf.xSV;M 3 +뮧M1SBɁ!=Om{$/)cXӥ d[À Q.Ѕ\_LJ%ͻ3'lŪ+}F $5Bht⋺WZ*\]il:fLgx5Ea(rͶ3EkhPѩpuMn{MHӬdw$YT9q/6!ŐAg8=i&~D (|:}J4BJp(GPC@ J̺yҁq *= Ŧ$t re!" bíK {o&~" 'A~ELYlU2opܫd'$YD bjlV췼.HRS5**+ܙL 4'BTE,a,) ɿ=y%1<G_qwX4ܨQN(uf+-*Q4j3Ihs<y5m% ok{U' 8?dEQpM{8Zˌ?z8aYG ]K!e g I23, - O*6lo};ZD c`9 hTcޕg?+:˯WTM94뜩q7 EDJ.Jlvk@kxe Wݶ[\ kE䆨CGOwnF N{q3 áq/xWt$s5ay$/2@*1M\ "ngRd&t-/XF.dk;̕tٯH(Īe,"૝ǂ; u,A6:ɯ#xt҉#Xq'% n Ai;q0,22CA]v[H$r% $ l7UHOi>1IX$YH?C+Xխ-a_layTIht3kTLb> h$;I7NiHwLe7E#: Zx{ 1(O&4Hv2Jbgh>*(e$r@< r6.Rp\EyY1/#[lCpth״3MatllD `7]# ēN"Р׃=O1|.[AM'ɑ8 mBST+^@OkNS䫝[X'6T+q8XH%fMwo*,rohgRe0J̦Ey^mv_\$g6Ju P&A+\ iU,um={H'7iΔ 'X]D*2kaZ;?>iM\ab~3cB @ VJ?} r!㦞YtN vJy_r(nV0&ֽW]hb]ARaSD!kW{[BXaRb,#+Җ1桱&3)Q ̔>|B~m+(K., L(J.?tCҫ(|NG6F= I5" Wf@3#m4Y$i%Mr :JctL#ĚVhm/kC$PY 0el#quZv|_уcC 腦>E.)G2Rsfh3 M7ƍش7~Fwyb2?6aI^-LvHn>/>cp_F: YŽK6799qt?KSlLyrY]]r$ͣJ9kԕДNżts8DA,^/`$p'!h:e _\fYqoCp]0~)"=ɂzwɌl2wG~^DU%j4a(d#[5oD. є^s^=OJqwn]KC$Cn!n#E\֖ƫ6b߻WdBl!ldI)ޡĉB]D7ƟƌJBmۂuUfS%(Ṣ$bkQPx/q1obńXUNMc^!|H1 `lGOKFP1yHn6eH+y= H8w>ZI29S{U ^BHkR@7QDt/֥qx(j,c66_ųeء\Rĺ)77ߛ?acAb͛䰤u+>[I~j:j):v99i#삋@.,_QxhXCbŋ/xUߑ[f~$o]6"iR@ ܞ4nwD" ;5"[&3%k܋T|N ྿19qN,Z ޜN ( T ]x,5-'`RJ|2{> sw0 u9S:2X l&yɠ[Fd۠QJ#WHTy!Kݺ`jiBܞmn۠:<"[NM+P1e=ADa6xIEъ㿢` {4VcXcjL8D6COzIaܥΜ 352OS!st%]۩#|Yߺ'v[dAD.SױK re"oon kd!!| L2>{4`'wW(ۇ &V ;HzGIۦ&%\lƈ9X5 NhkLBJr&cI>nWs\V)ONL^jWAt.еRE?z~-=f5CeJ •9B~e(*zm\69uQ/{\_ zwaVNuIrٻ("]ZIء% qKЫ4=D^Խ~ E$tCuYkoMI٧ʔF &q*wsy>T5$u_X}(EEPc/Nxwj! ȟN+6*@;)$OܟzhM rW+zNv6,$Ung}. |Ucna6'\EYM[5HܱHA`}Bme ޼U=hc.l9u"67Qgר;C_f9c<+˸|_3di#N@.56Lifesɋ_v1ߜ^eӱ}&,lƈ  /lOFo?ArovFBbgB<X\fۂCgl콪{:uբ=ԞT!HX_N&#]m;rԋY REҚ=Íb֫SEYY oL?FҔd_ʦ=s텟Xl~+4>Yû%1Hy咖3Vm5**$a(!sؗ/`1Y%zڌAy/Dհw4QLeܶv3\%厞-#"YT+ `dq0r%vT}o rƽ[N@oRLaf_gq4$2Lek.qjV7y` /hW¦?Bx/8Ydb-W/3l$*C/wjz^1aDd h Se}| o+k4cѠdP[1> t;HIց;{9Ė uuK PRRJ2Z\@5~M=|-3M<wWkxV1[4 N~0ۊי;-^;pq @+Av!ʁ ЗoWg6sq;A\#=#Y>zv[_ڣ.@Y]nQ-* o.i>laH=Xz(7H'׼ڈӡ^bT)8I-,U$&>߬[EY!Yˡ0i*!dsSIQ&|RCu3nq3L3ctnC/uO[aypuӭQ:^%^+ oi]cy9[F= $DĠ7ӡQ `@wyz,o=O6oX1) ty{Qpmdφ䍾>@HG4u(Dl\y-1 ;7-eq"_^Mi@wI^O\rn狻ˑBTExct06US??Y d^aZO72$ aɻ>U!gQe_ _Fd]LK.F2g5zdy:%k4"3⌄n'2eӛi%ul9X:)!:,9,R+kAĦ朑髣M>T=AiBU_?\/QC=rޘ'/6 PVbA5X&5/Òwlokrj&pr8%^RrAaPzf $o`-Q󩓨rl);[.Mj7i˷-Mˎ#WzA ɋS҃c brHդzʉY9JGgU@%[GHP9Xs nP@OL]"^0z@e3lc}dpEaG7_dEJ+bAHJa68Ej-1 zĚji'j9} Lem =jYT4P@Y%#uuy͡i zhGUWA.~P?t# 7حj"0}>0ETU=*4C HNKb@Q~ufuφ8L 82%YmϚ:&zz[{,+ǫ {t3XTY,.tuiM\ɱ\/Y"1U1M.o50ͱ]߳mG2Ѭ,\=-$t}Ki(Si2_b[Ǚ7z5c/mco2I cz;@Ĝ~# ˁ^c*A\O}1q[&} Yځ|rR*9~Q8c#dO}SǾtsLbvC%UG4]-o$y[cBޛS+HO ^2}-'g-M cO D7o9ܧ ,Æ/q^?V@U'Z6w ިwI*@tut-`ſϾ4P9w8-$<3Ӳ%dRK&n3oFi7R6Ne[++[1Ťd{ kfh=8w Sک+X?AM,Ho=;ЫC ”"R?DꓳMvʣdM睕-:c9 W<D:4̈́*ad ,:iD[Ow2h,-Eqe z>(l.Õg^8F@cLk3o~C|50%1vvN .eSZ6=+6FP׋J ;G,@ߦN -LD ?'%ݐ8d6OPRf-ԅDX DoLFI'|ۂZR%˜2)?/!5._V]K3 jBsS{D56{^8Ze<0t#{~z^IWR@@~\€K!tӪBlޥP/C>ͨ@%Ze}Ѻ0:KK'3rgNwؑ 1$+_5W}1 G*^n>i6%vA f2)6=/`k_;R- - _~ƯnNo)$S†>zhBtQűRx I Eq|)aT?(Eײ3uIӎ\Edz ~J1?"حhOCpVzЁvY&L%X6I[@loʍ;-}VEݪAZ(_G ,1G0 1M1Yh}vR_ a qq={*o2MfFSkL--e[H| -LЗ1z,[փʜ 8 n"cTxBK*ʢ@h> =s"Y~%H<4s㜤F Y-NKDE<(sf#T/!O&_^cN;j}V>)"Vj4m4/}/̈́ qkɍwe d/SZAnCږnjl3p/fm ?^%Jvj,04L,#;[mQO &r3~(7V1npaZd8RLTg_+lEaf]+S5#)Ӄ`',ZFg&GtCp߻!l=h[{ Gi^X|7tXā|/ToLuu\BFsH 줓?xYŢ/Ï[ (F_L!e jo?қCGu}nz0}>sP8MuB7s lǏ8|،/;R1b_"EXEkb%zYmȤGe| ڕ(Xy'%L{ȩ6tD4}Owr4S6(:g:>0%Ju:WRePCi@=297[+Iu!7R=!bxtY%Z-R^U׈`@9v>[\;c:yҬ3pVR]nSlDR[K7; Z6F~^r~Y^=(7f{ֿ]ЭMIT3ԝG MzUVe%fPpՐ ӅAPTht<0a8)mk3yu.{'!HbF-Whm)S|n4H6a쨑Iͦ/*(`נHZ2CJl*N= "]Z[g}Pݠ{4F8{'6lwX.Ax|I..=W1JTt$sX.}HaX)<<v&2@@7mPU+ۏN24U(Mk % OZf'f )nh[!>!d[M XG7~*=B9+,3~O0doF "Ur C_Q<{stoP2cy"yQf>f ;̱Tj}|Xl{s긏vK41}5= gݤy҂&$?Pe,<!,73I+A*r`iq,D5H7n"ZZHOzo@193%eKÿBj,CbݧҮKoֈmݙ4~ؗ]8ޚgpf Ԝóeh&͞!WPT峕(|S9jOzEe4QX~Mqb'K >a%hu0ZG[ U-I"?}hԮR]V)҇QFNGK3GKY< ҦdxIr>$%jyIc$ -&*=҄_K"njCBO tlAG;4ҏ2^ga.m[𨳞RD2 |k,K*b&&9u}:=,) [MhKhgHqT >m!O.T7y9H=;H(RUXZ[[-u4iJTGOڌ\Ac7uS. tf~ʪ;90mk}19flwkSUotgn"~'oSVd0HQӈ#LvޅN5RLq悟j*lzo"č/0¨4'}L/^Xa 9܎ ./m ?V Ll5jʒH[J09&:';t>UfRˋ>'2+#^sA%)$w7:epWNѦlPh"Z]*4B2 o\Y  ˳u4c4avBBRRQ@Wu6NF)'V䆎a9yQc\i~DFH#Vxuy>hoU'N8Hj8C@,Ӟ.Y v;k%-Dq>GD旓s>_ =c )l(eT9hIA{|!Qu8'Ԓ\#7.RVCPք|ɭ6-|GxDH]c䢕 _";p7]WuHV]V#Hgd渘vZV\bd7$lVucpހpTӽLaNva"&婌w qd[YC׈V٧#ل.#2VjxK,IO.5.ɮ9Ns Q3.>]W`J/hmEL>G hXM2ݪ;o&mQ)uh]gnY2΋$D.6Hk S$ !?>2*qkyc,W|j(@-'$PS*WN,ӁB锜,[&Y]ggkeTxN 3jF k{Zk}U>{WWPoǖ\Nh>E[hW ZZeP&g_+lO"v ^ ؀X\qVaE6OJ2xH(@eyVK"Vkj zZJ[#b}rScFU]@m[ ~!|6:АZMgNkIC=|(_we11r`":/ Z^ė-j"&.uav^I qS_'Ȕ3JGM$enU? eGY-j?"s%؁ը QBҟLՂ6KRV'q.[q6-V}%JOn@ǷIތDyPUKR"4;_}ڛ W ׏}My(nO}dyc7DnELO8B&¥] tkj@2SboijYhKIwqZ w5N<O4LL~o`2,)8`"ha)]/gW /lG Z>ϹKy^{j i[κPlҩYNex'rį!HcvaKl(6ZK5T?B޳>;v]eZA4zUmٰ+1k9EtV͢VB1Z`e׏,2H Q2$L2o*FtF3ܩȢ({z1A VZRLU8cX=&NvtƐM6Wkl Xghܡl nB3{Oa^WւI;#z}ǖr6o%۹ַ,ͥL҂Z1f NjZ8e3T=Lrl~ 8m(͞1GP`4?d%זjn4Xsc=W  * lM}/9Oq#MSo#kf1p(ʃ6P*Ng\XUy O* ڳ_wR>xΛ!f'-Ihj:gxͥ7ɝ~<>WqcHg5G\ӛkmBr=242x\rBZӞ+֟ߗ3)$P^$<6m~sN$ނ'Pyd[RY酡ϗ=ԂE͗`?sNaBX1oe:(F3PZuILS>H1;TΘ[=C%IͬۆR!``eU(Q uw[S`~v p0L aZ TkL\^Ӕ7yȈiwa ԾrCZCPLB0Ps$Ѣm<ȤO\N:§Z6gjyhBFYu_jƉ"ߘsp{ofP('. }MU:3Ms>vM:z}( y>46/ Zr䳵b@r OTY=2Qg9 )2M1yZďch{9uZQ 8 ‰mHJA|&kQ2*8@m @ó2lB1oϿ?Bzm qcGE>sL%%W9f:|8JJ{jϏU@Ϯ_Z/0M3k؇ d)N'5 fTZ U RE @.ҟdqSi"wZpl*fNed3]71]hbaa ˢh3hz%a!06lis?2t \u6F<ܼ&U)vA3%qϬ/PTUJ8 kA7z%FƝL|߈?uz5v83ba, 1Bakɲc6Q6qA%o}>w[EӦT4_>`ؕ)vme3dHoI][!O: RnF$tiúۅ^&)*p9|Ґ!#لҍ^iP b qV3QfzbRىGKg>ZZ$hFNNdE"Ia Ȅ} Fa<Кx3;()E|oz:JLq+ן~/m : į桶+l"KJGi~Eҫ8F}vTec<Q++uSΠ PI0`jcLaəA=s-x`P4b i\1E U=斔`+Q,7`Z%/겸+ғWQ}47ע/)J%\% cdy'L/0iD/4g VJ oƮ8g'P[MpʹǙig;_Sه[OT : "x4'HVe$TJ˕:ҼE])pUx-&-L͝ ϊYgf3-:&@ 'Fhqh {ʒ.`!3V·nn87x艡n}bIoj!>Q߆rhj4AfE%(׻%fͥ@u$\6uT[Q'탿䐒cvk G* :O%#+9TwRt0M?C3]wwȴt20jړb߱[i}^'*,O\r<xhV_!Xxk RΩG@m,v.i,]w5ӖIqL-FAv(AlBQpjv܈!H`RŒʹwKݭ?0sDI ا`.4i.}SR)6.<ة=~֬;0-NogFBK8˭OlU>|f$ ĭM ,lGHM)El@%JȽV>FbK aWL('t4ytc!<(+853=#R~^h%'j*^x̩{J^YqbP#;fYNb H/}0N+GD4MyxvcK\5t3Oqy!vb75GӐ,:$NW֐G_4_f{'^iU-D?emn&גFE]3c1e!C mE_e4NˮVrX澘K~{2A`N_kxr2QP,֡b:L5@Q/ P@F2/@dyξ X١B.n2:<m/E$3̙mA5/>ז oxOI7ondXDeTB@zfGz~"Ĕ|?8&}$Omڻǿ@ aQ ӥ4neȍ6<4Rg(G71iR۠n 4hZ%vU3ow|=80"A7 RSl5/լbs*Ʌv9/=^t~I'P7o3l4TW˸Ͷ) w}ƍ/-?&4&&@&Y@S5hE "dQjAtxu\R#c4 *>}JПQ&<4̡s.Äu<(H<'Wbz dž[5b%m ?!Ug QC.ř2?a"Q]?ez͎JmL96(&k)bLe*&SѪ#Ij?AЂRdI#+ތ6TP7Imr0Vy:bI^&Τp@8XCK4vjU${UzrfRs[3sQ8jÑâCu0H]వ"7Ғm$6RCA4tC"髬P9@4,|%!Q8Ʋ.ytJSw%v^w].hUnHTc'#F).][߳.0p!y*9.mujcj,&bhDE[qN/? V$M94݄֋紟zoY0FÞAtzEA~ eп 8@0Du2u/%fʰt]YS~km{g򓬽 ,{DoEh5\n;ʂ7pe, ؋T㫋Se`y%&BJ)"謋n)XL2ĴN^]iG/EDŹ\ҩ׆va#._>H!*ޖi7gKpY9)ɞ įa\"DK;29DN,.t5}˷AfdP͒ݝI>2Iw۲J֘6um/ 4?l >C/,VQ_GYlH˪=W2J.ٹ=䁾kg)!hpizbJ> @}F!1Sr=b,bT~_KϢ;PAfPxh/[mKEy7#vZN eۄm/dӭNҟwnkû?YHNLZ9[t{)V*sPi[~$_ؒ Xff*E=莏v5XR\c ⍫Fܛ35o(nO-S1)]h!PizG7+JY꠨+)(Brp !˭jZ]uw/ӱ ޻8:IU(eshZ"*#v|DannQ,׸u a8{yĠʋ#`Qcʝڙ2ׄ΢T[gBӹVClf5Dj65:H5hN|`\ԉ˞-zS)j.joS+Q-3rOPw6Ø|ܸpOb#}0/ Rj-21J$ ~X\=K%UrDhGX<+l뿕&ov*m'sy5J3q,[/ڢt #PN_\D1jMeu@Mx҉3)E OUM`?N"pt<Gm7G!zM^loPﾫ˰ )6t'H+1J%Bt<5ɱi㗢/̗,({4ITv ]WwtFt.t1yx_@U>٧{?5]%nѷciI9v 8mulΗUżRKԀ6>hk!H'Ϛ<#AJnzZM1FfcArj ]11,ikr lݿn I9O: Fu=W(Q/")"#S(1*(7@[PZ2q}׹st9G2nĞ̷^M M9xIkwn ogY0Uy..qS1VA8#i3bXONn;UCpDjÓ^zs'ug{6ޢt%t;LIXV}jx'Yl>moVOڳLkP7-O^SʰU_w^*d *I%%?QҿcE\m CQ=y˥gMpd2mV_fcs:$|Ћ 3AjD40#֞2Z[<@d{Lē@ "GfEyM˨yh!u@i@eۃQEJ댓petQHآqhY^D2yRt<՛lPa0b]_9d \4J®mW+~U97ꥦǾaҦ&YP$R Xa£õE;0bMS͂Ԃv#^9 ;L E%ڕIP51b&u?u!K½KXYL[t`/D$/iR/~6lAh@#,z '6Nh^r͞ȿɵ!Z'58>[v^`ѽE̙`0|qUmX #6񃜼aXL1O2)CA& 6LXCF {֭\8q4p:?Gjnl2#T^(KN!X1w(eCw@;JTwM[U/> sCkX>\fpi”"t7kbG3&' l _l`)ǖ[gyJ=f Mܕ3bϑn\4L}":t~O7?;܁G>o)˫XyXt%+JkXROosN%[RfhWʑҒ#1VV'@CP8ܡ&JH:kr(8?Yݢ-qÈDF@hBF oqW3/zeGWqM`#]DP)LTa$)Ö?;X`)5՛1ֿ~w-͈Vh[߱xMSN،@HL OcAK{ Z=S/b(A:@Q,PdBGWǽ;n(v?I7o*wKYPO_Z+LLOX효1D@;l/XuQ_>k g?;dT-IOEAG[" Jj%,vJ ta2UV7̿.zݡ>bEq!dsٸYM{qoQ&vD R^ǩh$EXPx]D#Sorox@}է0}UN3C ^mXNYX|Om9w@!cZ=tbtӯf@1R2c`om_Ey \WﾦڿՍn8yC@WX]J.@hHʼ٢54, \MV?)X*GQjɻѳZOUwxvgT{m= Dv6x[M)ЦqE;95<Ի[&+ =9?n3DxF&o@8ay]k4xˍ_FA3J/ xΣ,6#WΥk(* VP3 ǃ)#sjl>sؓ7Bl* Y#r+T" _U+CX ee%W |)d26p+H窊 ezVC`RSAq6O?!zTrpQ 140 ^LR$@J yHlhD"s;@yqjyk{;59ۨޕ~1vERDퟃ^xBmvV5ʇ [o8fڋӁHFѠ'çnj>JB*-deݐb3N ̼ 9\i~]1KrT%;ɩ!;wSp٦k`{? tC €w6!yԽf`Zt̃~4_3;qD; [& $O=@֨iwFro!58DC8w7OFV#aTpM3gґ@8nLߙ}+ a/iTڻ1!2,߬)9sy_D*!ՍJ"a#}&&" hH${< #FglنRT+ ͏n_`5#UQ=j9ww3KCҽƚBU72y,gc e)66F*&ʘ;z/b7gRౘ XdJs- d-<w3,} 3/G!+ə`^b] yT*1_C= z ,SE^m?O}Q,^Q.bJ-qX;(,bC Vgwo:Dq0}c;@-o}E2؈ɰI؟&~iUVn>~$t.V7_9xpԕq-Y'Mp 6w,,}뇖FGP }IhdcZUl*)~/MϦy:T@q?=LKEhWɾq#w}pَTOίeA냍Ark=$WP;<MA_:vɋK\}yɽ6ē!Zz>[u=8i4Sfa<|}SZ< df9;tuY$@px j%O?X3'x!88WsޯP?[@WsV+s#w=˖)@89#q9JFr_ozLe|LlKTWݒ[ިrG5$12 Η)ZCZ8ԏ2TDgeeCdivS44݇k"I=|d4~Հ~,vui gM?[F-{_VHk9>MD ]<ç/)2U K]}N(o Y]nNvpMqfFb$`9\Fc[z/`eOj]}ߘwQJ8^xULbCފQ hnc"iĊK(+񊠽9z>/ [GКAI~SXUƇ¥ Cf`&7TR^[mt#U+V_ rC]8ZsF/"`іե攠#SF׉oWTE F=jᡠl¼G/עiQ JtNʘ\9|wos!{B1r70I=8n|~wATvyn٠G5Wi ~B{gKJc8f[mSi~pb4[) <8  loDdBXByW-#[ zflf ƃw;b=OMȫVɵFڲYVw}? >9/"q.:{9^tʼ=J$ca5& N#7.H~Z|HÎt5OMAiS1/ۏiԬbzA-9ٗP؄qX5èeYlt=m#8Lʯndspҩwȍ*X7EG|0GK),7{wV\d`A,լU|t3<]:@ xN~I%ᱱJ ]ц`F>PLI- [/ U':A0!;j{(9h40$,l2 y~vXXۇuo;aAP\qAݭ~q JmoKmuW *{;]7|jVk—ÃEPIK3ʜ"D1J"y|4Wma5蹤8 FkT _WՏHؒEPP$M?Zy;ɗPs;^An4H "FZ_=ۙ A%[Q^NZ=Ml0/ըrcΛQʧICA-4 >1o( Tbumqj&\8U#+Nf͔ola6ѷqq Ҳ'WnC_1OEDvSI(i ~hO\[O}"nl^;K U <͛o7ËCDNtjN(n  [Yn Lvj| Bs=Vwʛk` qnz$'fhӰsCA ڌ3E | 2ׇ[)D7kXc oYA~IOq0P$|oYCF.7?9,f5y\k=+@*1Cη㱪O;8Nh%/83G#\ I"Ds7Bku#7Av,PW 1<,$yCiR!k&Hv{bȲ {~< ZމoJ661mi2p]@ꊭ̙1ӓJ hZ%Lr`?Qzp)S S s)(׆&h琗(ZD%!鷢:*R"™]"Xjܜ3w m;b÷,!MCܝ[C"[j9IL5=iD7qM*%|  3q;5v̌Nr->? *xTLr̪M}sySy%9ޱtaPqQc;Umb_dUHpKC>?Ȭސn.G Q jVz$Nc iMm6ƛ&yQd4Cf(1wGS>x\3G-8+Nz6ͣ/V./냵3U1Er2 kRfUdFpeP^KuCAA:%|Ml'=hKЯ/4Q c5/ @d2fBO'<^/{ 9/u OE./ +"@1SeeKp0Kɟeg*P wLn?R!%4Lv< #ߜU#"7Y= mac12q$nfЖ_ߗ`ɸF>]] y4Ni$jOry? SH(Xm#67DW ohD׻X70X߾:S+S͖*oK TYg,a5d7({evwm$j,A,MJ* \Wvz$u6 FVr>%j' 6g&;;.~=¦>GLhԍrNYV+DRs0y4iA1dg XI 8nϞe{u(|7 ޱYUHi5*Ϸ~sڽ$]O mj*q[BBf%V!q [j:dML ݈ꆏvaV"IW)f\&1PHB&R)f/KٓjѦZB_wMX䙴d\v|lҋzG^aEd@~w1/GoRjM'*W\ J!1a 7B~B @ PƮ2@lc3ՙV1Yv5uc_1He"v^7Js}P_B3j(TKO}he ON33wSKWp)?.vl^eE0t-T*DH(2Ň8(}P‰9(f,.(Uew\ i]jiA~j~H~'XZickS?ڍJ5NN: qAxeBhp2B[<= "-oOCt_{<'2CUEAߖ (Sj}{\1s6Dɇ)p>K[v~b+kP'w*A\:-FVZ1FBiXNK#63vW.^i5v:˩ Pov 3ЂLtDXV|}0KQ `,# 8 DLNMBK[*dT誉O5YU_iFS\=ĸC v""^!Qu :U [og+{֫i[//݅0rB>(FöfLx&3"a134:4L7d%OnRIqk /qإ ZyI|L=[;O٬ӽusX}s鴐m_SH7EV{a}d̻P(8f_g -Q܍Io c |{ Q;q W-yL&d} 9~Cusr6 ՉIKOSOh&~K~_FdGG.pnKҦ?>GzR2FB(e%f!7(„dgB. \@`QyT>\1|`ƳE* ?Ndl$gQv| UP'\7 q[C 9_ap?. F^V6^SgIRy5%z]$мt,DSa>/{)㙻vdz~&0J9b"q4KMF'2I6qQRW\e}Su8㗣gXyۖ-=MyPm͵TPv/"KOM}V)8 l7=7֕K<;MlLW2I  r(}*}æ:Ba x~Ӷj@JډZ_Юyjh{짳0I۴mkF~%WOjִkJ %m'1]-޺- 05cL*"&ƪ E<9Q_ ~Qiy M9*$oRͩQ̉cVsO~ _n@kK5;oAz ,&`AǷFZAS|Y0ȣeMQAf~Cf*>K^{& 4_mcG;.rWҝgV$p(Qc}kg#EXGy 87'1$%o??`Q%ɾ}02sd/u8P#JjE |SUb}NIvx P,8H]V 5_4՟j:/J7ڵ N${KO2Η1j;KPƺ?\Gl|$E!o7H3 JIߜ3 ަ͊Q@.s,7ۅa'AB¶=xi6mTބh6p(]zrOS9:)%YwvDSAɔΉk/y D?6b-!1NR v;" 5ZIM‹(';"`m6j903a"z(!g- tOדҝ&EҀirW{hAdzF].9̔lWb=~Lb{I-S߼'oh-U'## C%%-qa{_Rcf$y6gx^A!qCxq"xk?J6f !0ar)60,u=8?z1jĔPl+Zu`l XX,;o EP9A;0r:2q[ے1Eng:eq%2ZK7|K[ щ2􁌋,I3Rkߏ?DAU .S:LE\OΫ|}rϠE0>-^pB a!#J dn[VT KW 0du%E bu' ZV<[}=4Lp!>ɔjQ[^問7.mdͮ:̸ Rh2Av=|mPh"7T[*2&=": -崔Ҽm^MSoaeү #uk왔۱j5>+xnɮI ub/,b%P[Гe{03CITaiR'빘˷E@ h!7YaQ]UaDJZQأ*|@=ݓ@=A-=xoJ^dGG#vw6pX#a iѐʗc/1,9_ѥ  nh-5Kq"ET4w$Pz a1mB0@8VҖ7>hEmֿr>P1P;)V^cݠ]Buάg-/ HfJ[q&B{PP_/9]s8Tc1Y1v1S]0Q߮?Rb{(qjΆ)G|nK>I% N3x7|ј;$/"!g䅬]+ !P?oJM$KqsL`DFPJ.F@=OMZSVKXxpB*&yA5r;ܻp 3XS*!akT+0";(jA̮d 8@DHV:~} P񸰄dlk'ɳ/" t *?BNT{:P ٙ?(Dq_Rz +mF->?Odckh\rCnhckoF/fh?يP0IR@ʖ;8v L5)v;YD`@B""t*IY$x&x3 N4:8%h1C&.y8>&1 %#@quMOSAj8#P.U\ [.Wu2vVŐQL5#1uh ;MEHWRDV?hѢ%oQ:> Yp)%@/P?gC7vZ{X\g7*V6N#  ױ\FFUlRb|V7P)JW&Mq,[ێ#iQ~( F" sY:4;1۲/e'M)~ˡE4қ;z'}>%ܾ'V_w~\H}) I! +_pIv*y{-dyc^F;ZaӗI€mytݍwQ/G$捰r("%n6, ҽw;VÅfw*醾gG5<":uz[Q.!ive7LAci 8%w1㉣zRvj4rˌ^]8g`‹3w_E?.M3qP-BE:! s1_CE.<Hlc<ѮD1_q]gO,yt&IY{T1*!Id:R2B.. ѿR2)Jx/u&9{mG 4Җ#@Vj]ˌ&o%Qnש<7}b| pEw`x;Y3./݊8qP )E\r.pqAt2E F5iOPN嫶L;!r6ÀL{_wڞF62a7>'lZWE%YobiD]eėhyg݈Ϭ,@b$vɩ՜\|79:]TE.Q, ay39YPʀRD>Eϖ룷7Æ~>ƒޥɔ,ĵzI;\ϗ! ۇ!Az~˶WMM%%ʟGz_ce88UL13vaGLG^i > 245fp]~(F\-dyiXPz}.vTJwD#W]5$LOw++''3KqA0Sؖb[`v:W:vxSnF,1>~.9ђ Xț(!q )Py4ң=$ӛ'B}1zN)ivĮS s`c Ai'+|U/WuB=(2NXk܅RK?jVyuC-O*0[Ήlrp^~Rdi=hO㯷QPC'. {3V^ΚMH}\@*s*g0\;l7:ڑf)(FZǜf Dx}{ǡN$%E{D^=x V)pթJB$ſЍ(z6 B&7(.R\iH?>@Y B'\?d:oǯ?/S`. 2swsYr0#$Jo;q[x_[Co\nK$iPd%ER*J`j#Y*|!7 `>T=B@̼3\Gn4ːML-9FR֡.x4G?+iǹ]S!}>Yx}(bR9%9&e0~DSbͶ{ Ou@S^t,K hT/}b`'dFL P.*ӱ6@./ ?b[Rpt )ʎeG T:v&gbϚoq#L؛,\%t-gQ?:pj7;~a Q#76 E`KK< 3*2M.^aKK qGeykebOCDU}!iNYex_62;_h"SFr 4R ^#KޣZ2V;(GvT?1 /fI3tPs^[n> EX~CPd)P$NjzEor<ݺI&, #`a)(F<ˢbF< [4ׄ[&'c-*SW^F{NmZ+9E&m,BH*$дG^MZ]G mqռ|ZQ=bfh_X>0Q8N˄'gX;սi֧WVu]T<4}Bwba953o/[|_ 8NB,}oU1cR2r.=uO^kfȮAI Ic"tb5b3g}\[4 CٌmN}jB\ߛF^L[au C)}/{QQ)eO^Iv'{BMF'n.ɶl1dϕ,?͜VJM+ N']g;\3T{wfqh>Mo^u#k+_]λ[Ձ5IAL-j.r&oOSN"yL$Vk,5ʬG FP̵unE5[R]y/cYmw[p);PF¥1"ΰ[++ϱ0? Hvgź6U'N/t1-_O2&F܆ E96ܨI<Ķ:,ls"_< M"PJ_ |wdTԀ µŨgM=#X]3)ye,)gv?Sd4u?M!lī2pەNR+1&NH?|1B}PSr_Y9yo*U4~7n0Lc۾Fs4|Q349X KfHmL6_ye }r?+ddŜ,/zuaE_g?lğ<ΕVۜr-~2k~DwLw7Ҽi1m<=N`mcN 9 uyH lѺeF4JA4lvjj@yy x#MTĐA1 5єؼ%ޟ0bG2=kf}:{~X*8aO[I5e 4f.ՒEWJ$]u+89!z2MYhO.hTt75dD㇟ۭ_UFkmY0(`t~(5DemZs 2aÓ9Pj~L7S'[Ą\ԟ$FOMXZx9mʠzIʴkc؜1| /R4̃ˣPF8ǩ( d&_!/17ueU5Vl9?:΂IE5=JdpʚZ>`=q¼il6*`tj(M'\!\OpkӲ:$,O>/C]vIl 6UMښgHGl: ?% $Rp?~gʥ}PPү,3rhlXZ1fķ[P q[lc&PJNa4fJ<wr+r-V }x7rJo)5h05yvB&_g3Yv(~uO:mAfA6=\ċng.Ia @hȐXwU~u-3O?uƩ>_꫔5k=o iw8i}unfp ~`Uǫ¹m˺)-c 6j}nI <*4Ӿ[51г%'SL!xcTmBKAP-+aX[ȻQA ϳMtsO q(EOd隣ռ|yPD2XHT)څf %p:q4L'zl%}⑋zb7mþLIrA}= C'_amuV·yۂ{+gewH'NS[Sk6 vM]͑ow2ST@4Gy6hO5qdU+:>kVNe"cP"1VFpgD *LBTMra[!:KP! 4D_sx`ۜQ,wljO5.7sW`7V}/ 86l L"/&:+I9kb KisX QV;JQ&̙g~h5Q9ӏ+2zZd쭆?fȄhzj'oEoNFv_ YItN(U Hr>18J'BfY5u\a2Oo<i|;$xzU2Lj 1nt hyYrL[쟬5wagWt}kĬ429Ews*WKsӉ}yb0Kf]Rh?AUB86w^XTf#{94>"GIv*w0jr4wElc'"5ԢYgqUA7$r;Rh C}I -G= 0I&:OwPOb[gnLjy.I4u2>ٲ/O 2,aqcװGf+\&7Hj?#Ujo]I<ҕ $]XlAf^V Qs'& >#p3 xɻ0<`|0X;]sT /@=+٥^ Xv:[3H*u6wFNugQ> /-\Y ezw>0 cͤy "3hVaE`nq3IZUƝv>ϏUAdelODwcQglɋ"KyO>1+GmEba oW.Sc b-4iA :TCsK ȮB&jR}bPVg1㰺b05O^}P(V:'%dt !Gqwz0C;]M)5KNV q/!RVǰ{я|.nю6KN޼&:8[N:Q`fќMc|&8d%uhĔFvP_Ѵ&G]6cd!ll.;ۓvۥj*v~҉{v+K#ǭS0/ ٦C =imզ]aO 5&]Mz Iѱ,`Q,ԳR%̢?L3ptU^ޫ`m4*ޣ((n!_Tr||PL9>؃Oxq$䧥ؾO}ǮG_TJg&ꦢSẜW*ڣqttP<5:oeﮍ, Sh͒@ZpIFfHmڀ9u6s c }1}q9τnb.iO!}ȼKrGo/46ƱJH%]WCɶJi]SsL OcN15n74f[",;f&og ,1h+'(>}*SJgcC]l"\*Unm7Lz^_&U49$?MS]5ZC 7S7. lw8" Zܵf4HOg'45%kӊtoovb:DV6i+>EP،ݹ,( H'Y·sc_KZu&DKᒙ~0r_^އZHȷMϫwtzPfIϴP}-=m?5"6*E2熴LCQ|A;M=L0^#C+FXh૫;#9+'+RrD`vޜYr@El\$VPd]+@Htg|GyRL5G. pO0{7]u|32D5N0s 9KjK ~x(ƯDy1/.hUrUS6s C$:y +S]"(\#-kusڶ!ӂ>W0GGQg`4 Ic'@sNiȻ\j;M-%Ejr !QT(˚rtEpq6AsIqbc܎9 B!# :#rȣDf8X`Z6p3`ܶD}%b ֱJ|B#y<#jX(^F|7;v"Uu$%MՇyUA?\6Z_"ݴ$ (SCXR5*x8 pI|Ӊf,uR[%Ut@]?0悺sЮg9nt$1z0LS8r~SP: ]usu=_4Hd_s ٫9EDB PV-1Xe_HJJ6fY+eB6gAQI;3)6<: #؁{Mۉ.Ӷ{i#p:fL_qGu2iEBZ2^9ZѦ ѪWY>E?QD~^Ίq jŢ:BG:.RM6d,Ʊ] ?.VuF9oC-g?/{?<&UE& @^ ֧އ]uTu1βK h)2{ܱC덧͸]%\BlyŸ@,oWTW8AS3jy恗I,,v: ]GY18 Wܓrbãw~p9Pivz^hB"xO_Ul(cL -U ~UX1xl,)פvw$KL4_*1ҿ @YY) ½f!^(˞ƌug10|UrY\Fu[Z6#Uf'[itzsPpԹS3Sd(]I0 (s0{m&7mq#k{8hƵr>O|s^$Jᣄ)$:W2'3] 8^ &sm{` b#e%}#Vr j|E$;g }s[.1 _Aܤ<8e$¯F CU\W3T[ c%yHG!w[0w& Z$ }a<E+n4 FR&,GiΥ[0Y*i4`/~#75 V>*0.٫l_tQWXSY=cى-pjrZ𹇊X B YAy`>2/m:pƧe7\FzEAp#NoP@iLvhCFvM3y,d1;wG4Wdb5ԓU&B$l(ۈf81G> c8Nsi A 8K݁ԛQLA.LD6Uȑflt`"Xn_Y |P Z?^E%@O!WG9eV 7uLc\؝ P@ؿ#]g4[7nVG01`'|; PnֻkJ91h-yObvڝ YYo4;,nc#B֭&UD324jF_UO> sϏ+H ZKLswyP CM31mF9l#9 v崌qCֈq1ΠO,&\u3!+nH8*{0&Yut$4YUY~Xm<VG׬mE~n#$So_H'v1V{RpYB4Rй|W'TV}A2*jز{ c77(Q$~͵^XEol{'pp$S/Z ew| kY\I;i~OUu1>.돕QH"p"-kdny)hSAg(c5[ҳU ZL]}mI"foڃ~BC>'eQD8R+Fw^j%45߸c* m_#r3:="l9Xid+@KLV eHiR̨H+E?M*lH\6G7;fķOA^ #*y։ -ѝٟ~)/6;ŪzQ 7(H-\?6pVx< ~`?ay" L]FNb #jyyGu( ddG YqȡTC2uˣ1%n4Y]Z\j Ndo-QmQ?pj\W إ{CNKCcW)4(p7x'^)RD:nѦ\h)yIA2`w*MFj) o PM\T Z0Nߌ bJZ A>% {6r h; GtaiPz19Ey2dϥ[Kw;hK|XPw[CrlU|MُIZs@ ~tKN8'8UNn4o^1ֺrNvt窪-56 6Ż:9{k$BH$=VtGkM7e##aҽm +v[.Cr*6WgH`pe"e4Կp$o!\$GHbԙ+ۀiJ'#$DI<:SƦwy dh11S%[WJ[S'@JNR Pr7D*usSR*x( 4~EBC3=*L8qת3_=Os !7CG]x(忠ܮL"v&)9Ԝ2VNxOEզMwBXۧ)'zVrdڏQ=OP2{|Z@ƈLQ T#8RQgھri d5nu/)2c0paļ:5ťLB3kuGБّY aqvQ! ,a(^=f@=Fl鈴pV]5 ODAs8tCQ/h ˾o81b9熽0nvVZ<_zcoyu^B2-c1 Ιs ?etO%M>Qڡ4Iv bP7BvEX@!d~efS86O!hM.H މryVg`wYπnअ1헮ZUcc:SP۠awY}ާVkjBSBt4aFͼJtOZE>kz䀯|#~X ȼT>!UjaۻE U HOd̡k̪h;* >^L$ϸ s{Gg"u !]̪h̩ģϜy#7`˪VG2^WL4Q[T@S0=F.<?RX썚g;Sg7),M-Ey%}=ڹIm"Oh2;4ώu/ʝk춬wl \\D$`knql.GP]koMe>nm2뾙5}9y˄^8HK63 cVWL]q$ctda167aYڥ}9n6Yy"OT:gy Jwwß@nq҈֛䲄ZLh1olA]/k8Bw]tgaAҺXOl,O~^qvG }a=@stm$f+S7$a߄F?0Ϟ^y2f?r'i Z:Z`>>&޲0 Q1:0 eo/1>h  wr[vj6`j’8 vn, = 9&M0\XLi%kaBy#0@oL]>>rMnUۓ{TC{Dx濏V9)<6;¼pW6\G;bRNv7Es<z~nQtI#gQ䩆DbK<3u}ofH dAHqvc ub"oyHepɎ2=}cYǮ <6J**iJ!cHΩ(ŒU Gl셑1g Hb SMxG*qNiķY=q[)]P)lk 8f)!Hcg*Iҭ5Mm鎩۰iSԱP:Y֚1'ZoIp݂-EsBD\ƻsE雕s#7Tk-%/ h{Yk0F x7bKn[T:usL5oa x;H63S}-_"mX܅yG?Z\)6[iӜ=/п=׽3:* x (n|ʜ2߁߬Iĝܟ65S)R9C9ñ7i dt\c[/BD¯qKTÑ:ATjU1Zh~gE;g|#%N CVk7 f9(^ ^i y`I ]GF0׃j08dVSs2gu/-.mGuR!N @ l "rDT_S+6[(&jri9BC[&+SE@7ZpͶCte^-s͢GLRh]%*&hTdWq/`In4Nn`^?ӡ!MS\L<"{t#('z?zͬT/3frqQӂzq4sCWƬt[ť{ޒD+)RFωq5 ۚ&ѨIf*8t̹jd.78=>ӥUe#Osn,HpÂ͢gxW7= upCӽ9Pzo/OaBD{p\?KLEi#Ͽ4 4fy7;iehYC2zu9+neN;cG(_\ 5?:2݋;s$Y:j{:TQB\DUo>X:Os3(#~Ӡ5bArՔٵ+d<#Hwݬ+9L R˭3CX '01U5\k` (N$7\D7gsa6Ȇ/vZp;*4 m4L܋4\|JXG"Y+2;# 2o8u])*i,!rхڎ/rkwjk .!tJ4D}/( $4;snӿ,#!jI=Cc2%mJM>SQ2'%4o&R0T|h0o[!e+A@&_c]s{ kr8aaڲq7ͧ/bmA@tffwiI0d@d5d 3 D𘍃uf MLQ6qA7"$)U'Nb. o4S_ypXd'^I h5jŽzNҨrha\ز00zl5q %C]qj,a34[٪_w1_DS:ɃP]NNS'˝O2?cKܨy&|rsN_$\߲4Ij.5m;^yC^1؆}(!{E8˺DVu,q,ErBHEi^ҢyW.m$}ȝZ}Gcy G]rbh2.N,1eK<#Y> Lr7>e)ކL.#'PsW&l7G wН~)յeA8y*E]Byo„%\"kMf j^0ه09"Y,9٣5yIa& mS[V21ekշ^~^#2j=HZżEaG Zm$ƺBs;@Kѵ8>si  }>q +YzFW<0B<)?iˡ2H~_{h_r}h/vD)Wr{p;4O_ƃWہ5ݡZDZ8qhE'_D)_Dobf'nbo!o$k/\L{s\ѩ7|=-9]] -eJ4dڸ@DR?-u60mz^'уckM`![iA7K(,z T"%oR#YIܔc ;Zp9GsrYXD lJö ZG~-~_i0g­3z{2F45{D'RDj 5u3YINnN 0Q0)zS)U7z|X;rb&-؎&P|A=YbV6Op)XX+,ۑXKcɾOXl9[a1& Ⴄb$T&C2,n1V*ePioբy+ȡ?Đ"ZI%W.a  J}N@N9/P${D1L/ %1߰o+)-a9`F=^dh,NkOӟU(܍-nowoMM5ooqrHzpnq P$b3EETyh7ubFiy\zk *1$=c4?P,w !~bCPHeoK8onrPLP`)4Ař1L|G )(PL_ƏG-Ta0ʏj=Dڎv婜>| /ѓ9'"} ȋlPF۟c%EsehgdiPYqQcnkzK=)!֒`^#t&7JʳT[?IP)$BiMn;,Rb 4V94e&2& :VuX%(M[Kѣ}x˺+n--1[:DLftopl'#C6`E6N>G6/9qi }tT;dK&jXYzq@ 'Um\u[m3Ib0U:{MetfNFQ%(s[6ὕ*'ymid0j+ [xBi"嵆Iz) ? [Űe0J^ڨimk_ka0 W? mQg낳A;n¢CwYuͽ%t@Ǵ zU[Zi ֢i}s'$T _%L`9Վ(IJ ]6Ji7R)>8 1Te[U3C#uJZ&A>୏<"L8.. :`I)՝|L+=+r 䐯llX@DpHx'늈&~wV N)ֺ~^$AFm?s4MWvxc*)Ww3c.ͤ)MX-Y9 n>M#E%>V䷠d]ͥvuԙ -gHw#ÃshbkWʵ/ˎLR笆d}&7Y+tX}; ^RuiQ]>=iș61/wg5Ze|CZ\q(;BGk`ܶF+v8gI)((i-|N|ux4JX3f\;')ʓqڝ:T'τ\U d&2ƂӽtZ @r= lcf|ih\7 X1":Ap/7 ȿcTsjj2oHǍzgL,; #ϏGhmHΦn H2B5BOg n;@G4hD9g佾hUr3L-i}YAK2Â;K_T#41"@6h=$_W  ځGpheg~o]6~DpX/{N$M;g:}bw҉F>*®!H -k*E؂RPs0O'[v$l,٣)˚[5$Rą%OC4CvC*I!JV h8G{U-Dp"=l;Gl4l6^':v;erj x,OC5ĵ;Vf_q^Ѯο铕!YU+! %F87ɏkaF"ˈ2HOe9:I`yhJLd 4غUٕ>'*xRiQk*܇- hf'&fǸΝ 0'ACv}\o1}F+kf@} (7 ЃsDTUƧo Y~K<'Y 7b,zT6Zzkh'1x5GEqxp7JCFhv\ϥe3xeʖ6٣HN8!\#d\_9Jh8 }FTNqCBeJӅU"/cMNlXiJsg6ψL[1dv+* aJDe"VONgZ A=BpѬWk8CPLԼk`-Q(ʛ#9 Ap?&[ 3\ .s,YZgY%a~/vx( YK & q'%O|;ؼЊT|yO._3"P7=}xI@4ׇ͂}/+\iM4eyEܰ܍ _̈́q/r?7/ruc,:`ٚ 3Y=`9b@JM @ΰ?gWB^+*äd&m5b2HYJ݌}CT*p݂j %4r5W yӁ/ ~OM)jFFѮ#`)Fz)\ĞsY)1%K49$Y o}b84BJ&J:&ZL*5PLzk7Y6@-o@뾎 T-g$%#)t"gŘ7dȼ\٠mF|Ve=/Hnv}7,LOm }⺴˭ eȐz<Ed~" 4 :L'a\z1NzϵHJ^#+B7i=dϾ҂t˛V|/iP4y'XYX!BАjCI3<`1 yGF! PiX( &V qWsmVᖪSO|/K~TϳPj\M Z]`YV9 I1wg)Jb-XN&.jU3?^ڧVw i|'`'SP<! 37Z-"`XΑN?}'R wr<֖c/G'3{7/)?G Cy@1 eqwY ^D "(OЋEr4{&R2k2'XIWf}˯f:R քW.r'< !9wq ^]W9bw>KJ4#. DoSpSA1q` K$ nwl9kA",@Iw B$hDܨp:JD vA3L!y>į7j=HP3KYơ@Ukڲ/ԲU+pf t)VԦTQN>` ;z1B7/<nf|d4ݓdy~.Ƞ?"yw$A^WؔW^gk_Qɵu҂WgYI: 7k۶s@̚`0ӍVVer1ڂOԈ _yΣ7C'%}0#j}>ߏͦ۩eꖃk3 ~{Q7y*),b;U^ljP.{R-CjWd ӮSu'@7C'DT;55nqSQ9J}ڧŏ/#+ (QLׄd(rqEWVNH~5yT\{ӷ""A'YkTU%yOrB4HN:EOl]N#wp+ \7*ܚ.z 6M[ Q:0G޺$z:D|4˾ܼTj{aj屘xȈGTƧy"BTu(h?3i sDICHzWհvEKvIq)t*9v9^]zG8PÝp^>F⒠yCjEpeTG˵UiHo(`|\: M 0dͯsːϷ{I"U!^;9,! ̓@SٱQS7i"{; BV9b& pqrFG#恽V2i֝_Sg9o!n_ǃ$|I7A@KBfɖ@fwxF?ON~(4hK 9AT\%87JeoW\Ep)KrЩ:zIYQ?v[f@7xG3AIz_/D@orqNUaϜ?E++TYTG1.ᓼ<jjz8E,ΞEǘK~v͠@Μ`HS킳JEWX. 8v-3ʩќ!v)8(씈4_5a0 )T{+DYkՠCK)韇nL$vj.cL)AyTzŬe1IFFqbOՁ.pxfy@R-;Y.TYdk]_Ю6. gKuaCZ=̢2z٪οfM! 7p-ی+zxn₉Ox$ҏl՗q g-(ULɱ\)sB66x _ĀT_EݧDI"Y52R2g&ٵLi1}$>:f~K,',Vș)e$r_cӎ`g{ʋ硫fMk{hEeWj$n4@Qn^~|-U%ȹ).4,HBs'eF=_ ?|#YiHX󋴸J? ЗF\1&.v~>'D!s hu/ ?7\h&>8IhrSZhKnc畿sQxV8 tR62>F {TmZxi1^5jQ#B.MX5|ACt?=`<5~!:RgX H@9F8qYT r.!匘٨GIx!BdfocJ'V6u0AjXxMۣ![1N:\> fZ,n]i!?7[kC.'%Y@Մށ2bKq8|p`rȥ]h/H Zq̤Ӑg!5V3$ [m3e5j$V@cF EןY퇩*!{ρFeIGsC рB臹q{2q sh`0sOM ƅi A켰iSKxI؅x%/.]],0Πzqo:y>xsJPH 0]q LbE Bç؂Rx6*tއIqeyqpo5:ɄȄiX%Mbgr6k7\>^8 H.Ue'߁$ޗj)rSp.pOo7fpM=b%ۭj@;8mZrM~ (+U-3ͷ!t+_MVUxh&5a_zC`_#L#`#-#n%##<5^#v~k~WxgW(Unu|Y1p :)Q#eSaFĆo"}(][ORꄚRf6fd`y[.N]+a~Ks_S=~⃰01U_Z66IF@WN8x*%uA:V?ZNI:5e¡Tp5s^GBtyKwJI "~]+?tҡ\ɔƠZZtIUdat(:M|K{܍AT\B|9,ՙ|@8$WczziLq)u[%wS3iC!PFC(&^L!+/Z͍U" T''Y;lyG rAGqIOjcLwIP2\Qtd^S0hJ=UE<3:햂Xĸ:J~(/ڳS^Nᜦ+@wӞoGE V˃o倣k_}%T@PdI9H_7HE~T$Vz5 Q MA$PM%ڰ+޾YLuC&P)[ϫHǹI_sbXW(ş yZӧ}yKQfM?xYtH'2IwNYgS}c1s=J'8GN &}¾i/AE> [ZWYqa5oTnL#"%.K-48wƳR g"-ٵpE[0;%WMSsGMI'y<ĐQUL^CUϋoљazR3wҪ3њׯ)GG(. |Y%PVx>m7tRuF17=,rKx<`Wog/yL:. ^ekEA?!2phk"x5\P5Z_}bF*EW)%2Omٴ S/zՌ D?Kvc;y Y1s"X:@--Qz]{h;K'7/gbPcóѪD8SwRQ.b Dуuޓ +1<48޼IT+hS0{+&ڶOd6FF 05: vK5#6ސ*#Yɬ# Bܱ?0ˤM rt3śRǽ{6cէ,۲CM d&zښB7*ٰfǿwƔ}H]G]yŁ8SRW4ݎ'ˠvU8~Mi.09LD'l/DnД2#jjs\d4~ ~?b˨u_凿I f"5 6G谙B|̕)¾eը4"!Z~;A);у]Y g;|\7*XmQP¤U?2:Ue4V-@4Za~Pe55յ ?#sAͳQqH)#J߾CHg`s AT0)e͓a`)ؤSkqeo0$x{t7u u'Xebk$P"ךk?M2~{Ʒ?fcp=XEFRb݌mR`0̊qoOõQƈU9EAv5h+#W#N?DĶq#u,Mi|Fg4N_JMz3wK4&^3ϲm'ނ( b6r<4M HMRGBfZ)\qЯqm__Ky,J v[-v Y YXJ 勯V/i5x@[aİ)I=ݷx_ Y2`%/WXM\S9f|Uy(6r9ށ 8\_J xh=ʼ&&lfߘam(/J'~X=,%bu !VOd\Fo*Έ36{_)|Khp:KbUOCB-geDۘ=Ar0Pu2\hN:my;< gX5v2mj*#@wIK:Ϩ8^>لtWhtwȺJ^0 $=;s`>4 L(ZEl(9| Gmhxۂ E9 6(~:(|BƑl`\(`?e't_ vlE>12xPb!1,J?S >ցsnUxZi/j',(" ,&2p4r8M[!W_G\!`]5iVkB}T5rb&Di@|MX- m\c\B0dYs vvp^(^D xP$e<мѬ7WdK=?.6N.oJ+]akh) Ň}yl뽋j(B(cP`?z#ى iV+10bă%r⍾EE"~ҼjwOW7/^^x1V#??k$9Vc\u<l`o~̧I#m D^Ioj Q]ߙ Q꿂,xL,6rūA8BMo֋Isik塰Fya`s4S´@I ALPU<+ ;/cD?[exQ H|5 =2ih``UvRW5sU!0C56S %|PchB h?qwE)z* $|SXxP7j8 ghmx?/V̴7ܵAۨ8䱠 g-5Vl)N(Xp\˾.W4IiG;{ @u"s@+8X|K xlRz>7lֆZ[S8^go82?2D7KYt3* *">RMIF У&W,v"-?,Zs}#s8EMnR4ŬB MwT#*B{ԲtNcW;Mf[]=g%?FP9tz9ݾdw5R.ZT{TqGEBb/7_iR|Cqଊ: uԄU$~]#ehdC(Pwf:YCUXJp^r_<ρ%bE(+}7yMʽal 匚X߻j]*lx,H ;{\ȴm95 b)j80AQnU,޷lt|, B>W}K{>d<T8}6*Lʢ-l\c`b2eZ~-*PRf&+)vMI=pdDuyLS=Q\Rg\V&UR'b`=P|JLy$Evpqr%yJ#V 4e?[X'8g졓G|=8e18VAЅPBet(W\*$ >2dR`<+>`g<x^#zܲe]$>Pz5rE. 3\^)br,T GuҪu GKO)<{h/0ByʷL6 ՇnQ '3k; ǝ`15jEKOꩢ8{S7N8)֥CEQ=O-oi뷥~~UROqOh( qܯxCnۢU"?)$c`<Зy2>EU2듾V>Ѫw '1@s/y?>ulA׿;*kWÉѥᷚw{q5e bNa'MzAu U 5=oGCU R6 ȫ-`%O@ uߗn+/5C>PIq}Vg V>hLEp7b Wdr |CoAi^-wGAn0[?5Qk)Tp:㙂fDT}kG臩IAu 4jPsvKϰ `j8kZC+[(OqɇC}*BO~!xTe2$hӴGIFZ*} =lPZIrrh ߓxw'v4A=QכZ4H"fv )i_h>:N>JLf][j!4g!X?ռWi+ML3gq7mDpE0'uc2"FciAD9>nW4$&0u&$2<-1,fVKh"۝X(lo@@fxFIiv#Ky+f@ؖjU3Gw9m6lcNТG!3;jt/5c0r9Aq,}_o`e+h$ IY@]& Ek-|!g=F-vs43^#0FMtakva#"g'P8AˈF*z<T=0- d%-Б> |o9cjYN^nJq(T>+xIo5eHT2ЄfuQGz5yO`w.|]- nM r)02uuF vw6n-Fr[&> r>Ami8\&|n]<{wl xz`9lW^5-Knkҽ:i72WF=ߔLr8a%ìZ䓍҆f'cgDB䴣K?AQ%s- (@YXL_hOU}? Fi>[Шm\g 5DX@ri:"[˃81Yc#?\ :fO17mQSn Zw^ÛvBЊd'xdg#D*h($v7 i "z 37Xlp5#1C9Ji"W4B k~ Tqt|X Iܠcor7LH}, ״cv2  =w[xٹN[AϩH@6iwH߉Ugm횹? ,U*3Bؖsp=UXA{\55?rI"vZ&T=+LRV۶\!;X'6%K|&BFBV37)ӴQdchu <3-)d Ⴄn xX󤚴VKv{_(PEI0VM;ǻgCpԩU[E~m^f`&C*YQ܍08FkC 2*M2Wv~V%/8 \O싺k7/:,YUÒzGd1k# Wu wg@B'36f|x lpX6vEaHT^tf-?3T[#ǹ8PT6r ohSKmZ rBtSǼk& jWCg1h V;n k͜FHb ;.q(CВJ>T]]R‚V.~3m2I( }^}4Dy֐tA%_a,wjA\$(TOܣҖN4ZR<9({&=":\ǘ.𤩵*cn9 *EGKm կt"Ur|d )WCJI5g:lmq2` \OIىʁ!ʥ'H4$z'HSSgMEb2N^[Ys4wH/gN?'ixZ' *0G)(ꅾGEЦ>hp}r@!C{Lk~zm]Y|}~,|-!=ܥmT2"Ixw(͌{L9K3l BY%3GXSMثܙb]?}gZMO,iD9yc.H|J8XшS\r"m?a9'^@hpqIrhy  OoG \+uBk]bn)^2VUHگ=4RIc'kkJ$X0!ٳH\Sj%L}gEe1N/*jW)}N`j ~ņpŰ6]E2Z2>TYޱi 栭]Q"=nHU%̕c(ɟ u=6=ئq v" \EkP& ƑC_{~l:]2+ٖ<&78J"Cڅiv -Cs Jph ^|Gu|wp9z!xԵyWr&.+F?d]#ry2&Fc ,sXj)zP\טHn(i/~toXjp:ѓ)VmG0QDx7y,XT6ȫ:J'o=~1G9ϫ*Xs.JBjaJmG[>V|N} w ԖM.4u;ڇJ憖y,ݦP"+}ƈJ{x M#k31 v[KۓhEjCA E F*Sk^ qD+Lvu]>)u5ۀ I71$y><{Ez+ksJ5ضT?>]  9#{՘)aӓ K&;lxHTumpDq)ɘu JY1nF{beC!￳6MqSB1f.w> ɼ=^Hȸ'@Q5o~M#0_Hvo*bW>Iczf6i6|Ã˭M AB+ UU"<-/`,lg(?w=޶!nJ|er$wҢ.9DO8 AA-R|༫t5f ^6&8'#?؈`DDs8)A!tƉ*vtǗIEmBrM$Z $˃;_#MXH!*3A%]NAKt/SBV *SZ02u~,n|DyLkO-\< 3bǭ"3 ȁ &KJ+.|cAc+E|J3i8|" l`-O*H9Z>z]z!Ǹ \T\}nYzw ץwvݝ wV-=bHqlkCz.oh^ح~ېCyw):)x|& I} 'E54ޞ04<7\E͗%&~|*LI\Ar_%b=JIavWPb.2C_lYHD5L. DLac$^:YԬA=_]!T|^y0*pk>U]>X2J2 pN_w,&OJr.%1$LKW &A S^&&SZOhi tQM9' VEHyNwM)aP~/s exf;0eͼq&RЁELyUH"2[WSK50E28?S<:U2fk(QW )@āPn2ѫzO}-LqݩuQ0\BKUV;>[22TaMQS>H)CzH1BssVkP[Di{ Ԡc+gχw Mܸϵ`0"&ʮZPWA'ruAFTܕlŁ"♩ў[nk3O'qTrkOrx1zŸ&f*d8&pw53dzu`Kh:#I r6z:8|J[ЦQVB)u hW_-Aه;rP{fY#{& EhUx2|U&QyD`w${;j2> }XHc5)w3&@-~q xqBQo+j 49 6?]C9qh׻bB8$V"tD!7t1.ݶmsIb۰j5hgU $rd%#.e?uu#u-T.yH;%Kdmг^QX /Ԟ fv0Y;܋tRA=;svnn=>HW#̋Zn&3^W(\0WmǎpZ(,4ڵ ioԣ&G*j|ڃ%Xj \[38Iv. c̈́ӻVDa`YkZ0y[nfcN L__-nrZa` $S.h=Umu &pL[f>+[ ]G<&zbTL[]7R{ NGi8gF3V$d?' 'x}]~$ktc'aag您ɬ֐ehj #ߗP%ZMû`q 6,yKzC'u^ FW='&,̓< ؤG+OݤFL5nfL_d/pC&+hJ{nӒPK1]@* .% gXbRg)x6d cQM0UEw.Q.nL8a毶ys ^A%=5LwF$N}GX0)`݅xh,g(V;fHѿqf0p4K]u04L.v΅K8sYƤ$J?\#1 #zćKScu8[*QiX1g՜W!PK%.N&2ZG/i`[[]]q bsJ+0Du_Fk@[ jGU 'F!0ZM[>jj`)zRxC\RJENs$Te3d#sd/ ZԪ+!v~` 7<4ClD91;^\1vN]r1'IQ`WS'EOpd oXD& K\np3ߛ0Ti3T wW>cQp)䞭H>GW8t;Yf*_tFZ?14OU?!+'K LJ:=XrO!hkqHn.d&Iӫ s@ ŴOZ5#G}9aL[1ouZrfTiݗzJ kiZ:Hvs,N>R(&{cfNi}R,֏QW_aGJ$(Q04/9&pHC.?hQ!X$qU Cw[.p&MIYN캛:-NWv=+kX5Gk'ިY$8[I _Nn1t=CM ӑ]m(uw`Y:^&ԍrYkj̺]Yس> ހEC|"?lTI>SzfQZ:krU7m;~+2 mW|Ohl33̘6Sa_qr~A]kÊ^c\NIǼ 2t-'*%o˩֣&`$cPZC7axI1Iin'x}Oz+5Aes a}x1ߚ~DJ$LcH<7q(^]ЯQ]aRr=n՜7ZaPЬ1HjM0˯>ȯfئ/o:*Z-#YoxHP'`&NɓiQX :ZK}tufu(ۿ7oѲOy#3۝*^&H=!,Uw*-I"B;u֏rM( ]r6^Tq/"0[N^]Hݶ)́cБWa/'4M p`5"qU?K晻gx6iۆ6G AWgr?&60;";^94rS`= 甧aj:jNl) :rB#SMyq&BfTصu'KMwql NXO/®F^O__:;oDs t*IIiGv9lc2?w2)MG\P4[h%7>'{G'/_Հ~0U^QG[[="_ˎEHس@J EUO MK1g۫EsKxMa l$#SxMxQ zx=JTKre@v;ٹ.?WN!333{xG7'45S ~Lt~l=tctE'<УŶ=cZx27vKy *k!4 9AuI"Zǔ| 4ZΉuQ {IcuA:yA!fH:OsXasg\1$Ƀ@n1ϴDwӧ:uQ8W5w~!h.ӌXfa*[l=-Hedz1$N,-F¯隚H{;z>Zb-^7K,NBv-;\ÏX C~#CIl|ŎtSU>t< )o#ZF G1S׏p|#ZȖ;{@RFVrS(LFZBnlx/Aζp49bp[,[ 1[-ٮ"vWm5>ɑDT{gĚshȢh7qɻB]5%b0 蛋T379lUsrI|! j8,_2" ~.P07اKg"L;n;<ۭ*+XPD^\&j`͋~}xrCa*[%jBݥ(Hgu[;X7L\uuEp<;7ԠOpY@(ԂDv?[D5e?tTR[]"fJ? X6fbUH JQį@oS"G1:HX^=~})Nm\6Jؽop_LŚ4-nۣ8 ~Jo;۬dϼb9:mpTF$t,0_\gX5U$#ٍU L zme͚~kUqr$^eg%)!`Jb H[D%5;:2u eDXUd}:-O8ʏ\D.ښ/5:y/`4bAv,NWS>R23{H_;\0Fg 93(Dn#EBϜH JHvr '=1M<N˟&ݚts|wO2?0}@D=Ty  ˟q\w1m^CT`t( tv!; @y@v^:XGFhl{snˆ$&v3eމ[,'>+M#@IhD<_>p>%F#4΃Y) %GV3TT[FFL=0p9beu䳥Qcv=s>W5)ϥYdX{jO#Zɗ 9CDycӅanm&S7s$ZSm6IX d10ݍ+[C9 zևѧj g,Pr~K/ @RGq|² bo8 h 1|?[;  F-h]̧ mla (>g>ˆY;؎~ꎰ0csa[p ȟ1qƛGP=`a=zPU,-;c%g%, l[IqL( }we;z! [d_m՟R똝 S-4$s:33N mR ;!%I|ϱ3ø˄$'pXYqޡ ZhU!7 a}qaIl~72&V.{_>;4ɠ;z%WtLN"L|oUbG0~jy|% ,dy$hAS  ?m={oتեQQ\l2+Aec>%'239p2@ciGh\ /$9Aܼ|"SeBhce $pj]7m=d+{_Tڅ=y ́}Hzǔ&Dw2tŴ`7T~CpvZKk U_3&ke6Jm"BwkaWRVp|&6`kJ#Q$YDR-lJq~VGK4g YZ