bpftool-debuginfo-5.10.0-60.139.0.166.oe2203 >  A fXW^^fSF C7R!m5);HRpCiNLz}:x1H} PL\e0g֩ܮlCln%Iox{ǘ\[6ȃkqZxWL3T'4W]M-L`A8=0sѣEJ<+"kq343f7929e6318f715733c6c060986cf8e03dd1368418b968f16a9b22f4e8f14976eed8c57d8be445099f0d8c1419f7775dd3bf2b fXW^^f>!Y[{d8R6h8NqgBg%vE )91! Pg*D6YsF?Xx$9d:BC.vN܏A?QڢĝI{kcOv[=N%)_N-)\#)}qmR8*&&JxDJYV2U{Y2G9{1[FχX$%ޤNewQޤˤ0>p=?d / U 1FL as     ,Dp(8f9f:fFkGHIXY\]^blcldefltuvz LPCbpftool-debuginfo5.10.060.139.0.166.oe2203Debug information for package bpftoolThis package provides debug information for package bpftool. Debug information is useful when developing applications that use this package or when debugging this package.fVpecs-obsworker-209QHuawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgDevelopment/Debughttp://www.kernel.org/linuxx86_64`AAA$fVpfVpfVpfVpfVpfVp8b47d33ca0f3a970a06d91197fe5849fffd4160099ca3612d392993b1813920715b87edf52da1c2f051414839fec330cd5ec0d780a146b0612de827667f8509c632f19873043c7d20e6feaabd61e1a18d3528abd4109a97ba4036ecfa658b8f0rootrootrootrootrootrootrootrootrootrootrootrootkernel-5.10.0-60.139.0.166.oe2203.src.rpmbpftool-debuginfobpftool-debuginfo(x86-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.17.0fWfM@fDf;i@f(@ff@f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@Jialin Zhang - 5.10.0-60.139.0.166Jialin Zhang - 5.10.0-60.138.0.165Jialin Zhang - 5.10.0-60.137.0.164Jialin Zhang - 5.10.0-60.136.0.163Jialin Zhang - 5.10.0-60.135.0.162Jialin Zhang - 5.10.0-60.134.0.161Jialin Zhang - 5.10.0-60.133.0.160Jialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65- !8173 netfilter: ebtables: fix memory leak when blob is malformed - !8166 net/sched: taprio: avoid disabling offload when it was never enabled - !8124 [sync] PR-8042: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !8172 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !8147 pinctrl: single: fix potential NULL dereference - !8156 [sync] PR-8017: perf/core: Bail out early if the request AUX area is out of bound - !8113 [sync] PR-8023: fs/ntfs3: Fixed overflow check in mi_enum_attr() - !8092 [sync] PR-7980: Fix CVE-2021-47455 - !8116 [sync] PR-8060: soc: fsl: qbman: Always disable interrupts when taking cgr_lock - !7798 net-memcg: Fix scope of sockmem pressure indicators - !8086 [sync] PR-8019: pstore/zone: Add a null pointer check to the psz_kmsg_read - netfilter: ebtables: fix memory leak when blob is malformed - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - !7146 [sync] PR-7092: Squashfs: check the inode number is not the invalid value of zero - net/sched: taprio: avoid disabling offload when it was never enabled - perf/core: Bail out early if the request AUX area is out of bound - pinctrl: single: fix potential NULL dereference - !8082 [sync] PR-6808: CVE-2024-26923 - !8002 [sync] PR-7970: fbmon: prevent division by zero in fb_videomode_from_videomode() - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - !6874 [sync] PR-6756: vfio/fsl-mc: Block calling interrupt handler without trigger - soc: fsl: qbman: Always disable interrupts when taking cgr_lock - fs/ntfs3: Fixed overflow check in mi_enum_attr() - !7878 [sync] PR-7684: dm snapshot: fix lockup in dm_exception_table_exit - !8071 [sync] PR-8030: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - !7994 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !8006 [sync] PR-7903: virtio_ring : keep used_wrap_counter in - ptp: fix code indentation issues - ptp: Fix possible memory leak in ptp_clock_register() - !8021 media: bttv: fix use after free error due to btv->timeout timer - pstore/zone: Add a null pointer check to the psz_kmsg_read - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - af_unix: Fix garbage collector racing against connect() - !8024 [sync] PR-7961: net: atlantic: eliminate double free in error handling logic - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - net: atlantic: eliminate double free in error handling logic - media: bttv: fix use after free error due to btv->timeout timer - virtio_ring : keep used_wrap_counter in vq->last_used_idx - fbmon: prevent division by zero in fb_videomode_from_videomode() - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - !7952 media: vidtv: psi: Add check for kstrdup - !7972 [sync] PR-7949: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - !7967 [sync] PR-7943: v2 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - !7935 [sync] PR-7911: ACPI: LPIT: Avoid u32 multiplication overflow - !7849 [sync] PR-7576: f2fs: compress: fix reserve_cblocks counting error when out of space - !7842 [sync] PR-7757: Fix CVE-2023-52656 - media: vidtv: psi: Add check for kstrdup - !7913 [sync] PR-7853: net/mlx5e: fix a double-free in arfs_create_groups - ACPI: LPIT: Avoid u32 multiplication overflow - !7785 [sync] PR-7655: v3 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - net/mlx5e: fix a double-free in arfs_create_groups - !7795 [sync] PR-7743: netrom: Fix data-races around sysctl_net_busy_read - !7883 [sync] PR-7773: Fix CVE-2023-52698 - calipso: fix memory leak in netlbl_calipso_add_pass() - netlabel: remove unused parameter in netlbl_netlink_auditinfo() - net: netlabel: Fix kerneldoc warnings - dm snapshot: fix lockup in dm_exception_table_exit - !7858 [sync] PR-7846: netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_timeout - f2fs: compress: fix reserve_cblocks counting error when out of space - !7828 [sync] PR-7779: LoongArch: Define the __io_aw() hook as mmiowb() - !7825 [sync] PR-7714: CVE-2024-35936 - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket - !7836 [sync] PR-7681: xfs: three bug fix recently - xfs: update dir3 leaf block metadata after swap - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real - iomap: fix warning in xfs_iomap_write_delalloc_release() - !7818 [sync] PR-7734: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - LoongArch: Define the __io_aw() hook as mmiowb() - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage - net-memcg: Fix scope of sockmem pressure indicators - netrom: Fix data-races around sysctl_net_busy_read - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - !7735 [sync] PR-7674: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - !7760 [sync] PR-7749: v2 wifi: iwlwifi: dbg-tlv: ensure NUL termination - !7710 [sync] PR-7579: powerpc/powernv: Add a null pointer check to scom_debug_init_one() - !7754 wifi: ath11k: decrease MHI channel buffer length to 8KB - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: ath11k: decrease MHI channel buffer length to 8KB - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - powerpc/powernv: Add a null pointer check to scom_debug_init_one() - Squashfs: check the inode number is not the invalid value of zero - vfio/fsl-mc: Block calling interrupt handler without trigger- !7633 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - !7641 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !7561 mm/slub: fix to return errno if kmalloc() fails - !7717 CVE-2023-52655 - !7646 [sync] PR-7385: CVE-2024-27002 - !7625 [sync] PR-5930: RDMA/srpt: Support specifying the srpt_service_guid parameter - !6242 [sync] PR-6082: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6151 [sync] PR-6020: net/sched: act_mirred: use the backlog for mirred ingress - !7620 [sync] PR-6259: arp: Prevent overflow in arp_req_get(). - !7615 [sync] PR-5993: ipv6: sr: fix possible use-after-free and null-ptr-deref - !7612 [sync] PR-5996: mptcp: fix double-free on socket dismantle - !6222 [sync] PR-6074: Fix CVE-2024-26787 - !7609 [sync] PR-6279: Bluetooth: Avoid potential use-after-free in hci_error_reset - !7379 [sync] PR-6085: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - !7605 [sync] PR-6086: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - !5983 [sync] PR-5852: CVE-2024-26809 - !7707 bpf: Guard stack limits against 32bit overflow - !7636 dm-crypt: don't modify the data when using authenticated encryption - !7660 [sync] PR-6033: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7627 [sync] PR-5950: RDMA/qedr: Fix qedr_create_user_qp error flow - !7695 ext4: fix corruption during on-line resize - !7679 [sync] PR-7574: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7558 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - !6531 [sync] PR-6486: devlink: fix possible use-after-free and memory leaks in devlink_init() - !7553 [sync] PR-5530: net: Fix CVE-2024-26641 - !7550 [sync] PR-7006: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - usb: aqc111: check packet for fixup for true limit - !7666 [sync] PR-7586: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7662 [sync] PR-7590: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - bpf: Guard stack limits against 32bit overflow - ext4: fix corruption during on-line resize - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7602 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7506 [sync] PR-7402: scsi: lpfc: Fix possible file string name overflow when updating firmware - !7502 [sync] PR-7403: scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - !7522 [sync] PR-7401: nvme-core: check for too small lba shift - !7495 [sync] PR-7397: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - !7492 [sync] PR-7398: drm/amd/display: Fix memory leak in dm_sw_fini() - !7489 [sync] PR-7399: drm/amd/pm: fix a double-free in si_dpm_init - !7505 [sync] PR-7404: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7498 [sync] PR-7396: drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7596 [sync] PR-7548: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7566 net: hns3: fix kernel crash when 1588 is received on HIP08 devices - clk: mediatek: Do a runtime PM get on controllers during probe - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - dm-crypt: don't modify the data when using authenticated encryption - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - RDMA/qedr: Fix qedr_create_user_qp error flow - RDMA/srpt: Support specifying the srpt_service_guid parameter - arp: Prevent overflow in arp_req_get(). - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - ipv6: sr: fix possible use-after-free and null-ptr-deref - RDMA/srpt: Support specifying the srpt_service_guid parameter - mptcp: fix double-free on socket dismantle - Bluetooth: Avoid potential use-after-free in hci_error_reset - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7569 [sync] PR-7535: v2 CVE-2024-26907 - !7362 [sync] PR-5491: CVE-2024-26640 - !6569 openEuler-22.03-LTS CVE-2024-26908 - kernel-doc: fix struct_group_tagged() parsing - uapi: propagate __struct_group() attributes to the container union - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - stddef: Introduce DECLARE_FLEX_ARRAY() helper - uapi/linux/stddef.h: Add include guards - stddef: Introduce struct_group() helper macro - net: hns3: fix kernel crash when 1588 is received on HIP08 devices - mm/slub: fix to return errno if kmalloc() fails - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - ip6_tunnel: use dev_sw_netstats_rx_add() - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - !7517 [sync] PR-7484: fix CVE-2024-26661 - !7354 blk-iocost: Fix an UBSAN shift-out-of-bounds warning - !7345 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !7359 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !7442 [sync] PR-6037: fix-CVE-2024-26706 - nvme-core: check for too small lba shift - drm/amd/display: Fix && vs || typos - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' - !7485 [sync] PR-7476: firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7406 drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7408 backport important fix for broadcom net card - !7407 nvme-fc: do not wait in vain when unloading module - scsi: lpfc: Fix possible file string name overflow when updating firmware - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - drm/amd/display: Fix memory leak in dm_sw_fini() - drm/amd/pm: fix a double-free in si_dpm_init - !7293 KVM: s390: vsie: fix race during shadow creation - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7256 netfilter: nf_tables: disallow anonymous set with timeout flag - !7335 inet: read sk->sk_family once in inet_recv_error() - !7331 tunnels: fix out of bounds access when building IPv6 PMTU error - !7323 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - !7309 btrfs: don't drop extent_map for free space inode on write error - !7448 [sync] PR-5998: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - !7445 [sync] PR-6031: nilfs2: fix potential bug in end_buffer_async_write - !7280 llc: Drop support for ETH_P_TR_802_2. - !7277 llc: make llc_ui_sendmsg() more robust against bonding changes - !7458 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7265 Bluetooth: Fix atomicity violation in {min,max}_key_size_set - !7478 [sync] PR-7424: net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - !7342 ppp_async: limit MRU to 64K - !5866 [sync] PR-5794: um: time-travel: fix time corruption - !7389 [sync] PR-5469: wifi: iwlwifi: fix a memory corruption - !7312 CVE-2024-26686 - !7303 nilfs2: fix data corruption in dsync block recovery for small block sizes - !7296 powerpc/kasan: Fix addr error caused by page alignment - !7273 binder: fix race between mmput() and do_exit() - !7259 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5622 [sync] PR-5566: tracing: Ensure visibility when inserting an element into tracing_map - !7237 SUNRPC: Fix a suspicious RCU usage warning - !7230 [sync] PR-5460: v2 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - !7233 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - !7320 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !7466 [sync] PR-7394: v2 scsi: sr: Do not leak information in ioctl - scsi: sr: Do not leak information in ioctl - !7019 [sync] PR-6855: KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7306 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7429 net: gtp: Fix Use-After-Free in gtp_dellink - !7430 [sync] PR-3972: arm64: make cma=0 as default for openeuler - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - nilfs2: fix potential bug in end_buffer_async_write - parisc/unaligned: Fix emulate_ldw() breakage - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd() - parisc: Fix random data corruption from exception handler - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth() - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd() - parisc/unaligned: Rewrite inline assembly of emulate_ldw() - parisc: Mark ex_table entries 32-bit aligned in uaccess.h - parisc: Fix some apparent put_user() failures - parisc: Implement __get/put_kernel_nofault() - parisc: Drop strnlen_user() in favour of generic version - parisc: Switch user access functions to signal errors in r29 instead of r8 - parisc/unaligned: Rewrite inline assembly of emulate_ldh() - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers - !7435 [sync] PR-7414: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - arm64: make cma=0 as default for openeuler - net: gtp: Fix Use-After-Free in gtp_dellink - !7382 [sync] PR-6428: net/sched: flower: Fix unable to handle page fault bug in fl_init - net/tg3: fix race condition in tg3_reset_task() - net/tg3: resolve deadlock in tg3_reset_task() during EEH - net: bnxt: fix a potential use-after-free in bnxt_init_tc - net/bnx2x: Prevent access to a freed page in page_pool - nvme-fc: do not wait in vain when unloading module - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7266 block/rnbd-srv: Check for unlikely string overflow - wifi: iwlwifi: fix a memory corruption - net/sched: flower: Fix unable to handle page fault bug in fl_init - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - tcp: add sanity checks to rx zerocopy - net-zerocopy: Refactor frag-is-remappable test. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - tunnels: fix out of bounds access when building IPv6 PMTU error - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: use __for_each_thread() - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - exit: Use the correct exit_code in /proc//stat - btrfs: don't drop extent_map for free space inode on write error - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - nilfs2: fix data corruption in dsync block recovery for small block sizes - powerpc/kasan: Fix addr error caused by page alignment - KVM: s390: vsie: fix race during shadow creation - llc: Drop support for ETH_P_TR_802_2. - llc: make llc_ui_sendmsg() more robust against bonding changes - binder: fix race between mmput() and do_exit() - block/rnbd-srv: Check for unlikely string overflow - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - netfilter: nf_tables: disallow anonymous set with timeout flag - SUNRPC: Fix a suspicious RCU usage warning - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - KVM: Always flush async #PF workqueue when vCPU is being destroyed - x86/xen: Add some null pointer checking to smp.c - devlink: fix possible use-after-free and memory leaks in devlink_init() - mmc: mmci: stm32: fix DMA API overlapping mappings warning - mmc: mmci: stm32: use a buffer for unaligned DMA requests - net/sched: act_mirred: use the backlog for mirred ingress - netfilter: nft_set_pipapo: release elements in clone only from destroy path - netfilter: nft_set_pipapo: remove scratch_aligned pointer - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: store index in scratch maps - um: time-travel: fix time corruption - tracing: Ensure visibility when inserting an element into tracing_map- !6038 [sync] PR-6006: fix CVE-2024-26669 - !5881 [sync] PR-5751: net: atlantic: Fix DMA mapping for PTP hwts ring - !7337 netfilter: nft_limit: reject configurations that cause integer overflow - !7254 netfilter: nf_tables: disallow timeout for anonymous sets - !6748 amdkfd: use calloc instead of kzalloc to avoid integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nf_tables: disallow timeout for anonymous sets - !7160 [sync] PR-6809: memcg: fix possible use-after-free in memcg_write_event_control() - !7117 [sync] PR-7086: media: ttpci: fix two memleaks in budget_av_attach - !7118 [sync] PR-7080: drm: nv04: Fix out of bounds access - !7132 [sync] PR-7044: v2 nfs: fix UAF in direct writes - !7154 [sync] PR-7148: scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7176 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - !6980 ksmbd: validate payload size in ipc response - !7097 [sync] PR-6818: mm: memcg: fix stale protection of reclaim target memcg - memcg: fix possible use-after-free in memcg_write_event_control() - scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !6763 [sync] PR-6680: cifs: fix underflow in parse_server_interfaces() - drm: nv04: Fix out of bounds access - media: ttpci: fix two memleaks in budget_av_attach - !7101 [sync] PR-7039: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7083 [sync] PR-7013: media: edia: dvbdev: fix a use-after-free - !6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - !7023 [sync] PR-6988: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7008 [sync] PR-6959: mac802154: fix llsec key resources release in mac802154_llsec_key_del - !7063 [sync] PR-7056: scsi: qla2xxx: Fix command flush on cable pull - mm: memcg: fix stale protection of reclaim target memcg - !6945 [sync] PR-6840: CVE-2023-52650 - media: edia: dvbdev: fix a use-after-free - scsi: qla2xxx: Fix command flush on cable pull - !6092 [sync] PR-5921: ext4: fix double-free of blocks due to wrong extents moved_len - !6089 [sync] PR-5977: btrfs: dev-replace: properly validate device names - !6095 [sync] PR-6029: ceph: prevent use-after-free in encode_cap_msg() - !7028 [sync] PR-6977: wireguard: netlink: access device through ctx instead of peer - wireguard: netlink: access device through ctx instead of peer - !6985 [sync] PR-6964: v2 CVE-2024-27000 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6212 [sync] PR-6178: CVE-2024-26812 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - !6693 quota: Fix potential NULL pointer dereference - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6884 [sync] PR-6740: V2 cpuset: fix race between rebuild scheduler domains and hotplug work - !6960 [sync] PR-6861: media: dvb-frontends: avoid stack overflow warnings with clang - ksmbd: validate payload size in ipc response - !6911 pstore: inode: Only d_invalidate() is needed - !6935 [sync] PR-6826: fat: fix uninitialized field in nostale filehandles - !6933 [sync] PR-6838: fs: sysfs: Fix reference leak in sysfs_break_active_protection() - media: dvb-frontends: avoid stack overflow warnings with clang - drm/tegra: dsi: Add missing check for of_find_device_by_node - fat: fix uninitialized field in nostale filehandles - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - pstore: inode: Only d_invalidate() is needed - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - cpuset: fix race between rebuild scheduler domains and hotplug work - cifs: fix underflow in parse_server_interfaces() - amdkfd: use calloc instead of kzalloc to avoid integer overflow - quota: Fix potential NULL pointer dereference - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - ceph: prevent use-after-free in encode_cap_msg() - ext4: fix double-free of blocks due to wrong extents moved_len - btrfs: dev-replace: properly validate device names - net/sched: flower: Fix kabi change - net/sched: flower: Fix chain template offload - net: atlantic: Fix DMA mapping for PTP hwts ring- !6425 [sync] PR-6291: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6901 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - !6931 bpf: Fix hashtab overflow check on 32-bit arches - !6925 firmware: arm_scmi: Harden accesses to the reset domains - !6921 bpf: Fix stackmap overflow check on 32-bit arches - !6865 [sync] PR-6835: kprobes: Fix check for probe enabled in kill_kprobe() - !6897 [sync] PR-6592: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - bpf: Fix hashtab overflow check on 32-bit arches - firmware: arm_scmi: Harden accesses to the reset domains - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6643 [sync] PR-6623: amdkfd: use calloc instead of kzalloc to avoid integer overflow - kprobes: Fix check for probe enabled in kill_kprobe() - !6387 [sync] PR-6202: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6627 [sync] PR-6485: CVE-2024-26843 - !6751 [sync] PR-6677: v3 olk-5.10: bugfix for mm - mm/madvise: fix potential pte_unmap_unlock pte error - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - !6509 cachefiles: fix memory leak in cachefiles_add_cache() - !6686 [sync] PR-6580: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6636 [sync] PR-6561: md: fix kmemleak of rdev->serial - amdkfd: use calloc instead of kzalloc to avoid integer overflow - !6599 [sync] PR-6584: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6605 [sync] PR-6579: media: rc: bpf attach/detach requires write permission - !6604 [sync] PR-6568: IB/hfi1: Fix a memleak in init_credit_return - !6613 [sync] PR-6543: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6602 [sync] PR-6520: firmware: arm_scmi: Fix double free in SMC transport cleanup path - md: fix kmemleak of rdev->serial - efi: runtime: Fix potential overflow of soft-reserved region size - !6248 ubi: Check for too small LEB size in VTBL code - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6448 [sync] PR-6281: v2 net/mlx5: Update error handler for UCTX and UMEM - media: rc: bpf attach/detach requires write permission - IB/hfi1: Fix a memleak in init_credit_return - firmware: arm_scmi: Fix double free in SMC transport cleanup path - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6475 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6574 [sync] PR-6417: media: pvrusb2: fix uaf in pvr2_context_set_notify - media: pvrusb2: fix uaf in pvr2_context_set_notify - !6499 v2 Add hugetlb MADV_DONTNEED support - cachefiles: fix memory leak in cachefiles_add_cache() - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - madvise: use zap_page_range_single for madvise dontneed - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm: enable MADV_DONTNEED for hugetlb mappings - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - net/mlx5: Update error handler for UCTX and UMEM - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - ubi: Check for too small LEB size in VTBL code- !6413 [sync] PR-5510: bus: mhi: host: Drop chan lock before queuing buffers - !6264 [sync] PR-6103: riscv: Sparse-Memory/vmemmap out-of-bounds fix - !6537 [sync] PR-5273: net/smc: fix illegal rmb_desc access in SMC-D connection dump - !6528 [sync] PR-5468: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - !6545 v2 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !6496 [sync] PR-6407: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5802 [sync] PR-5773: patches for CVE-2023-52617 - !5801 [sync] PR-5772: firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6516 fixe CVE-2023-52498 - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - PM: sleep: Fix error handling in dpm_prepare() - PM: sleep: Fix possible deadlocks in core system-wide PM code - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: sleep: Use dev_printk() when possible - async: Introduce async_schedule_dev_nocall() - async: Split async_schedule_node_domain() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6487 [sync] PR-6455: CVE-2021-47182 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6440 [sync] PR-6312: fix CVE-2024-24861 for 5.10 - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6410 [sync] PR-5195: dmaengine: fix NULL pointer in channel unregistration function - bus: mhi: host: Drop chan lock before queuing buffers - dmaengine: fix NULL pointer in channel unregistration function - !6080 Fix CVE-2024-26764 - !5966 Fix CVE-2023-52441 and integrate the pre-patch - riscv: Sparse-Memory/vmemmap out-of-bounds fix - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - ksmbd: fix out of bounds in init_smb2_rsp_hdr() - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ksmbd: return unsupported error on smb1 mount - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect- !6180 [sync] PR-5093: wifi: mac80211: fix potential key use-after-free - !6218 RDMA/siw: Fix connection failure handling - !6236 [sync] PR-6193: uio_hv_generic: Fix another memory leak in error handling paths - !6232 [sync] PR-6192: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6186 Fixed CVE-2023-52504 - uio_hv_generic: Fix another memory leak in error handling paths - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6196 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - !6188 [sync] PR-5466: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - RDMA/siw: Fix connection failure handling - !6113 cifs: Fix UAF in cifs_demultiplex_thread() - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !6172 [sync] PR-6137: vfio/pci: Lock external INTx masking ops - x86/alternatives: Disable KASAN in apply_alternatives() - wifi: mac80211: fix potential key use-after-free - !6125 fix-CVE-2021-47101 - vfio/pci: Lock external INTx masking ops - !6135 [sync] PR-5717: v2 fix CVE-2023-52587 - !6148 [sync] PR-6101: vfio/pci: Disable auto-enable of exclusive INTx IRQ - !6141 [sync] PR-6047: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6131 [sync] PR-4923: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - !5419 [sync] PR-5317: KVM: s390: fix setting of fpc register - vfio/pci: Disable auto-enable of exclusive INTx IRQ - !5129 [sync] PR-5113: fix CVE-2023-52578 - !5120 [sync] PR-5062: team: fix null-ptr-deref when team device type is changed - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6117 wifi: rt2x00: restart beacon queue when hardware reset - !6054 [sync] PR-6017: drm/amdgpu: fix use-after-free bug - !6122 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - wifi: rt2x00: restart beacon queue when hardware reset - cifs: Fix UAF in cifs_demultiplex_thread() - !6077 [sync] PR-5973: EDAC/thunderx: Fix possible out-of-bounds string access - !6046 mm/swap: fix race when skipping swapcache - !6022 [sync] PR-5970: fixup CVE-2024-26751 - !6034 [sync] PR-5969: fbdev: savage: Error out if pixclock equals zero - EDAC/thunderx: Fix possible out-of-bounds string access - !5848 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - !6057 fs/ntfs3: fix CVE-2023-52640 - fs/ntfs3: Fix oob in ntfs_listxattr - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() - drm/amdgpu: fix use-after-free bug - mm/swap: fix race when skipping swapcache - !5987 [sync] PR-5901: CVE-2024-26695 - !5980 [sync] PR-5812: afs: Increase buffer size in afs_update_volume_status() - fbdev: savage: Error out if pixclock equals zero - ARM: ep93xx: Add terminator to gpiod_lookup_table - !5947 [sync] PR-5831: fbdev: sis: Error out if pixclock equals zero - !5958 [sync] PR-5884: KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - !5842 [sync] PR-5348: s390/ptrace: handle setting of fpc register correctly - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - !5856 dmaengine: ti: edma: Add some null pointer checks to the edma_probe - afs: Increase buffer size in afs_update_volume_status() - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - fbdev: sis: Error out if pixclock equals zero - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - s390/ptrace: handle setting of fpc register correctly - KVM: s390: fix setting of fpc register - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - team: fix null-ptr-deref when team device type is changed- !5942 CVE-2021-46926 - !5944 [sync] PR-5861: ksmbd: fix uaf in smb20_oplock_break_ack - !5936 [sync] PR-5911: CVE-2023-52484 - !5932 [sync] PR-5895: i2c: i801: Fix block process call transactions - !5927 [sync] PR-5863: CVE-2024-26788 - !5908 [sync] PR-4928: drm/bridge: sii902x: Fix probing race issue - !5782 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - !5918 [sync] PR-5870: drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !5903 [sync] PR-4931: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - ksmbd: fix uaf in smb20_oplock_break_ack - ALSA: hda: intel-sdw-acpi: harden detection of controller - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() - !5907 [sync] PR-5811: Fixed CVE-2021-47037 - !5871 [sync] PR-4794: serial: imx: fix tx statemachine deadlock - !4907 [sync] PR-4865: Input: powermate - fix use-after-free in powermate_config_complete - i2c: i801: Fix block process call transactions - dmaengine: fsl-qdma: init irq after reg initialization - !5896 [sync] PR-5808: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5888 [sync] PR-5832: CVE-2023-52467 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/bridge: sii902x: Fix probing race issue - ASoC: q6afe-clocks: fix reprobing of the driver - ASoC: q6afe-clocks: fix warning on symbol scope - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5748 ksmbd: fix global oob in ksmbd_nl_policy - mfd: syscon: Fix null pointer dereference in of_syscon_register() - serial: imx: fix tx statemachine deadlock - !5826 [sync] PR-5785: net: qualcomm: rmnet: fix global oob in rmnet_policy - !5817 [sync] PR-5780: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !4799 [sync] PR-4764: binder: signal epoll threads of self-work - !5790 usb: hub: Guard against accesses to uninitialized BOS descriptors - !5797 [sync] PR-5788: v2 Patches to Fix CVE-2023-52454 - !5820 [sync] PR-5789: perf/x86/lbr: Filter vsyscall addresses - net: qualcomm: rmnet: fix global oob in rmnet_policy - !5775 [sync] PR-5724: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - perf/x86/lbr: Filter vsyscall addresses - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !5764 [sync] PR-5642: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - nvmet-tcp: Fix the H2C expected PDU len calculation - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length - usb: hub: Guard against accesses to uninitialized BOS descriptors - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - ksmbd: fix global oob in ksmbd_nl_policy - !5704 [sync] PR-5507: ext4: Validate inode pa before using preallocation blocks - !5708 ext4: dio: Put endio under - ext4: Optimize endio process for DIO overwrites - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag - iomap: pass a flags argument to iomap_dio_rw - iomap: rename the flags variable in __iomap_dio_rw - iomap: add IOMAP_DIO_INLINE_COMP - iomap: use an unsigned type for IOMAP_DIO_* defines - iomap: cleanup up iomap_dio_bio_end_io() - ext4: Validate inode pa before using preallocation blocks - Input: powermate - fix use-after-free in powermate_config_complete - binder: signal epoll threads of self-work- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 coresecs-obsworker-209 17169408005.10.0-60.139.0.166.oe22035.10.0-60.139.0.166.oe22030-metadata_list-compact_tlv-bpftool-debuginfo-5.10.0-60.139.0.166.oe2203.x86_640-metadata_list-compact-bpftool-debuginfo-5.10.0-60.139.0.166.oe2203.x86_64debugusrsbinbpftool-5.10.0-60.139.0.166.oe2203.x86_64.debug/etc/ima/digest_lists.tlv//etc/ima/digest_lists//usr/lib//usr/lib/debug//usr/lib/debug/usr//usr/lib/debug/usr/sbin/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection obs://private/openEuler:22.03:LTS/standard_x86_64/42b9b04cdcef3b4828cd5d31d1a07923-kernelcpioxz2x86_64-openEuler-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter \004, BuildID[sha1]=3b6184d00e72c7715d7f8c4c870588675d1c6b3b, for GNU/Linux 3.2.0, with debug_info, not strippedC \N+utf-8cd1dc9f384f2a6a20486d581bd6c413844501491f305df72fa36d983c94b029df56d0426fe9ef4401d7751171a19baa52eb91e3115c180e62d397fb3f6bf1798?07zXZ !#,,?] b2u Q{LY2p]]zTwo_Ľ9Z7מ^dB)[zsRv,76aԮgr8e.9*i056l Sg+w4P:?Jgk8'M zO@0xݲmψzG\EA[9PX)anjEn;Js-Ү#xKh Q>ھrA싞IY[R`N7 7,pzKҙ[[ ]$miM/% _mEyJoyQOH[ OpQ5Ot;/95[@KCVCr>SGeXl6erO_rtu",f=%XuaW?WtHo٩+}j xᨮq3EiD)03elnP/& k}>,ij"`[N kQCR5d{*q KlYnilYyb2F=Zl75BMdgz?fHz/ [t3-;)K1{_ZdK|UOo&szٸ@+G};+Fж3L؆u[vXŗ%DGU(h$zf[79EL_@zdU9Iq{-}He7:(^:sӌ V|4ף88we_ʏ[lȥZ]jv5:n-2e\[NO>w[ډE"}8 127ɀl3fĢsTOb$sS poXumȪNτ2`ʪ#5R;Q|E2wD4 K(I*Xl6ԧn`u;+_argj;mJ,/=n~R{R VlG@W"\`^wd8}ݔTpߪ]4p:͛5[/`33)LUT4łUQ ^`ʑxKGKl'e-c*pzC`/A'5kL'QƗ.M97AA;~iEKǟWg 4B=mK15|Nɿ Ǣeܴ2,_N[='@gO/y0F;."铎JR,U\ˠJYT{\PwpD] ˽T~ꎩdOu} H)BZXJS`mPNtzx`\NS~S^_pG Sz ϽmX2StdX\ @:3>.Hq>E=W $l@isy/+ߜSL `ċ>^Fz11,5jȤjI=I]>2lx7])A>Ԑwe.c0 .!;:!U0$[jC[ؗd%5H',.mҡm9g

5A+ߖf9Kt30N)>fBbHZ@vUZן&n!G^ޔ$_VMR{h5֯شHR2){)` eZ*#D9[=c:RrА)Vf4v|n~;*(vt7H5;u Jz~ ^);HHrΊDZ ] K;1+P/^6aMcqˉ2A>9r\?h~4I֗r_ UaV@ߘtgQDFBPE ]%)<>X)C2,`iI,L!e9`@19vKo 1HGʬ8x`}Z_)4Tbzqr*p^M!:ZW2lO 1|:TEM [Xg;Kڞ-3uO-;S2X?6$Gq 輞cjHiSy#S8yM6H(p>s.Q7dܠ5>ﱪƔb$'V_^ͪƬZ]n=V8j]oKwuK} i.3 wUw!p}C>v!N FHVZ،(_ohdqgV{?F%+ehAU{b0+߈@kQZ$\]?S"tOnv2 EPԓ%2%geJ(oBRvGT>~PڶRQx"">iŋ,'N uGc9RD]ㄖCLz9PAlRE[AjԝLT|ɍ/GATG{ B*_1%MWł^U3FI&,ϵTR&rq+J IdӗB>72&MDB ^&3 F=aK\"bUb2u#-SLLs̤n15b>ƾ[mj?.WO6t(gxFi9~ㆻ&-Lϲ'HZvunPP> i La0Q])y?T5Qu4{llWAܛ~0r!!iq:Z0KÒ%+ ,sN@WwWy>6}ބ4]酪vk5]{"d5i7=8->%> /~bb*UӢ ܑ/˜/ ;Țo-lv4JexI ZKp/B!U2iul[R]{OX<]#]>B/~ÉgA:Ӧe"CWn]z,^Zn]!E"v1D+Dh]g] y5!LFMyY: c@,Z*%oo~[]56,Xe<Ζj/#M╨ ,hW̱Y9DZJc\JRrh 6(VL4lV-8K>ÜY}f.)4OٴVՒcfՎf;u9i99h lVADw~@ZZ!`^}x{^w#zA_<&9 jS 0c[wь0cbkAԞ7!I`T΂Q#YכX.XVuhN_ ApMIBeA4U \.#`> wifbH sfd>$c@oK"*MMwڹ#5)I$0!_DU6n-fVvVcBMWk4ҹÜаP O)A + `6->yi<"n! Ӑp@8B7a u}J}vOvkVN[؅l@UΞxqRR,a̵wfՑ}M>^A9ۻUśUuwrە*:Z}u`9u;F|dYK֪OD"ъʢz Nw tӊ~4z̐3x_Pґ jYE }uu%D+&`Cfh) @ 6pEBKxJBF$0Y=b6:WP`Ssģ8$xW3ڠJM|ܝ;c-(0s&#BLB~Wo /A. r]5L@.$4`1a>k!%CbC\O5,bmWnѤK+ :?,L䉍9w"˰[~h(x"(K}_c-S'*4YS&zKKEUp*_<`ۢu[9Z(6Ȁl=MQh-xY_O8Wܮ/~_Ad L%%*ud:JBâ8G!Ccy1lb /ƈ"ttJDHj=f."\q4֥%8^~%[ù@Svdxwl=Kr;P ‘-ۻ ,f>Ʒf\QhĬHEU)? $mwn 9orh]3_aB#D :n J&öSR@o2e"@Kd"‰h%Q,J}FRZYb .^R_ji0޳TAHK#֊GDzdP\^+s$5d7SW8i`qwecOi/}ܴ/iD-VV4lriAL+-DĎ|Rt aI=o"ʑ.f㙒/{yb;6[ 8a ,k pP8QҼѸ:Aw}z*}'i_z>~ɉjhXj{p|p_ٹk` z^fDmfF|׸i;-|&dz- =H![e8heTUUBo'ĥy\7 0ÝE-QK<(#c%Q?LnhA7SRͽZvm.`D2VH"P]p)Rl5+ 4@NZSb%VϯU#dK_\A!MDV,+W @}"֥+瓒Ez_~Piw5z6poPE\G)t&QE{t/{e9dB%rثo2Ϥ+2M;6]E^2ע!Y)DhuR f jsL # Y8۪[Ն]&:Iq"""_@ɵɋ:rw L-ver)heUӯ#cu~`zŸKE j vmnv < _X C^g4y<8ڤ-?\6Ht,7'u6PbݒC~I5'25vț i'/2HBCKB Њu8:#տ0E: ߧeǚVIJ $ޣ/[  ʃD #j3wBfwxOxn6P)N/L lijfnpr{̪&ʜτo[GF G'֜,r`ڹ?Oӟi:@9%h#^j%78jbX_>'V:ƺnvIXjM Q¡c# J@֛ F7jʅugo>YYU4C̮]ܝ% JjLQALqRrY6E%+AϮ3K S2:5 S#tc1+US98;@/5Ae? rZʬߣiH2M~Qg\RPx;u~phg-fүx 38y&t0gؗu`ǚws h#UJW6{?b,,4q R6N,'[da9WqsôO4ίk|s;cN"ytH}Y$Qx!r7 XaI)wC^jXQ_osGLÈ}@"aXKd"hפw]m?3IB>ɉ`&bQPCi=)ЛX:z4]FKZ;PChXHQ4J&L;EǓ_fs|%*hMЖTnFjT T9 /Unea?wuy '&2m:˸W4a2t{BޡM{@9G:TN\;E ֆ]Ǫf@MB  qg~;kHR$0m>&\Um^x*+q)T;#U[d]q_ҥȀ˺}d-w(0i2sc'e̯8 ӝ wnc#/~LTH7OK`rxbb!W$d9$tThe4>a7)CI= x|׍Bl͆tƤhv}it9tU7zk`j2\5gt}9j2R2FDd8у5ս/_ZZ>FFE, X yiHHXQp?3j)WTdgh4Mܔ媞&j$/ LS`(`n?T ہ$'P:g%ŮȀ>'?TqiIĕSjT&׃) l_9VȆP:f%G6qBF%Jq+#pB@$O9҉'\vte1!l6i 1sp[+ǐr=f[jTI.Ʀev8s[J>ヽDMGF _4Yҟ$ᨵW9M}Z9fS4pU2FNШ`xJNPvƼ|8}zE|ƙ[&3^aIf BHkbG P%2@4`{XHyAE*>˼D!5iCk0]msً =1e1"H V0{:P6"d:JhjNgko(gϩ,VvptyIdJQ6FlFrc%I٘FNKIɲ!`NܯW,M qUa[wP\U,}d/쒭2O5yW_{Cc/nr%Ay˲]rdw*wd$Z { 0M"iy\ oWJkfi|2/O1}cv&]),R')e@"R@ƴ@/\A=nfd6K{*ֶ0Os{UyNiSn% +1J{n .8 Sl'D.&)lr|Oۤ(7B ʟR/K_`85dqtWH_A7evlq5yGv[>~Hl>:&CBٳAa@vOFr&”BGaŅ*`ܕZ!h_ϕ -U˸hlC:¼,AA`]}? lt}܈&9-;=صՁOFMo@dFq lt M%w /t3W[ A N;1N"R}ќa4]_IVSU†9z6ʒ1e\k#Oz]Zc"w[ӭϜķ'Ec CGE-8W 8+YDw- ks+e]a K]B/+ Y8yb].n]HඑBM{{\hip{YbZi섢&(rA,=$XJMun^3R^K4rЗRydŘWͲ V1i^i fUߓ_J_2.el h#Y'Xn=>3WGL(:++sm :sm:Kn wۊ*j*Zc-H0vkb桪^a`p>w(nzYu/^ߋ`EcJD x;%)Yrz(qQKDZ&ݣtgl5ưmL)iw"B.p2IuXF*%1dtJΨaF"%Fam>aGd>NuG[ד3\CcF3vcVP~L_vH 1<U,ᾫ{ gJ(, h&tѸT7h.ZfS v—{We~r6{2 ^rég~}R)>JOb KagNV mUj}'u4uݟ-UOo*(Ix_ʪ2πCpl,BNBU߯JPQ~ ;q}=[ʓS1$qQhAD:r?zsFH%߉sC`ʦuZemd[-05}^r-~BMmմc?Xyn2N#G*dȸڑ@;a/ cCp $A"~>BoU+YOjdmc;`) D$3_]0t P*X]jU{'u̵ih'eDƒZ@@EAR!_@4pc=;@M\(ӂ6s&qч1f,+˽0ufƺ؝9 luFA`}-X#XALj`F6,ɗE&hGݸ?m"~b`gM&4,{eT71Ghq|#W4ʎ%~){y5W2pqD[ hWvˉrَ8Xf#zKByK@ahӟW~ڨj{-]L4JX1]s /~dP? Q'nVgRCQuPg^v^m>s5`4jA_zKij6Te fKLlBpVQ(X9byzSs`/uЖ2J)$ w-ZEht+2*Smsc[huQǯ`^ꀞ_DI>_+zKCFJ6 l1$yOp[N u +eDJ-2v9!PHR'NF  _c& ~Rf( $iY^b]/`Ug{2#W*/e6(OL-IY1Dʫ!hIȥYwݙFpe2*AQ PmQ>Y۫Jm'bYZQU Y&P;U8E\ J*ot,vLTW~8eO+.xp$p>0%4T%\s*aj[ p'x%epn$_YRP̡<c1jφ6!RQ) +l+Y 9H6J=/afb`G:3t˭R"i$zpŚV96k%z1F- D3iuqu|*kAntڦ~slֿ٘kh;wY@i?rhk(F,`oӁu)Ck d$40ona1KgR11 -Z|3:R{ؠ[[3 ١@e"fux"Zp B3WnT$'bFق|V )1k{iZϫҳTYnawfc0x=juo>Y~.F f+?Ļ:5nf;h0+(¾פ;LD [0c) 0UEPLj_0U /Yˈ:4J¢EX)Fzǝb.ȢS̓si*ty`y1ȼf.7Qប|KG'Uija#_P˴  ^T7OC{$yP P"n{yf)s2.''>w~~.B9^PJ{N=?rM{pU_di X"wHxﺫIVG<(V dpc\۸.ș-y{Cp*Ae >v0IM 9 *"[&@`F8*lV_P7?j^86"&qDT4:τα&( mwVL$OsTv\ Ȝ'Ə^K -X~;zjA37ұ)Ф*x[%Wp ѠN5fCm-τB ?xΓP(믣_.O)WXn06Jmd,]^HȲΠڷOgב8=k~{TζL4Z$лc.!s1q9;J0<LV0G:&wNUj"4P {)=2X3-6SᲤ~z;>,"! $ʭ{Z}VgmS 9o^Voxx;.fjOX-BbJZ@N͑f4LarִBeI@_X$ueͳz p 7Fk=E⇢\3MZ+WhCuIP[YuzΪ)"Xkb14Fehxos-;%U˃6~gP[Cʔ+l-&a^ŭ.PA.#2;MRO䅊_}Jd.;΂CBE;?r4S͒@N)H[P`e7 \N`ຑ)6CZTR !_YTy&–j܋V2#'El33Q<r$},$M:6k8gc'"ap*Azfx(lA6;?4t+]3:h3^d(FicHBOy,&{\{3N8>u[nL,ce+X|_v?8U.&x| })s<8ަs坿/{ԺR(wjƤ쯯 PQjj 3)ps]n5%Ut`Xs X8AS˟3lv̏9ο+L*tyi.vtea=pA*]tT%g4CNCHQMX;kW*Q/ AE (Y$4̷Q bIs@H j!ݧu$hϭNh_2W9<5a;"]$Ď RzKD(W-mWcx ^Wt],S@qQG-h7 &ss|Y$8l9b"Аoܣ%>z8ѐVEM^&ݨb!Da+osƴ_J7(@i shxoN؜l'=r!~ߞ?4eTˠRq;{1oc[פ U#Or; /r!xo!`yU`ff _/~XdيсZWy)&%IFs\v#P׎g6eޏb-"X%b},>>+莠,/2c5nl0Qؗ2bB=bn:< 0?VNK,j]X3XšȵS<9xІhvs ~)H؟; T$V'S3>Ȧ^o#F%F` "b2T(WȜp6iTz5BAL 0w7}-33$Hur(k_`Oic Uظ2ŋ 60ipWJ9+]Q+s%n>2ў|!Obmmi'Xh!o[=4Qcu7KQanQc>\ f Ǒ_y)}¯Xh7CDW}zg27-NH3CP S>?6cq1NkrhZ뢋< _smBmLifM \֝/zw]-Anvi|Yr-46~|aDqcFl ZLvAkgqAK8DŽۉ \x龆 kM=TH`<a;*↺L86aUJGAOv##62Vm݊'z6wLVI,¦p9  ;}Y?u0= SLd@!xƏI6흲 z-)@Ttj&VﾉwO?8tnf "%Lt2`iW~ װ}{G%=^c*5AqG8A4S$8gvӱYIu}~lį)6v8[\ci=Spa#Dh,.QɃ*]0&Mʔp^Q:Oo,+ ~n3ݰ {.&f++tVZjq ۤ Or^Yfm *$78n*3M#<#*J>ہ306!&%"ȿAB7f>lpWwl7j4QrtHC`p0UZJW&,|8ֹ'*C T(1_;Y&?X,*M՝b޼ })(m!8Ac5bK* _"~AorU KPjGFrHE%p-ǩUux FcB(z~-;htFC_ ; ,G0 T8P}WU^D+JAߖ9 B&!~r5=fR  k#8%>3-Tnq}E'YzU;q //$HщKD"- ?eJKjW*S!2 );wYѤ/U@a5MɊO"߿!"&XKlu8 xlBbx!%MC(I6ː$G0vѴ0sklK$(KGIUFl"A ]=u8sŦ{*2x?;q9PeV W"Nz1ǫ:b{qhUT@;F!V vNrG%KlvǭJ6# DypVP.ΖXݜ]\F xq*=T {k.϶x_u/O}cC|$|ԝBp2qY/f8*EyT !%>p9ja-SlKNDN {~*#-@YG{Ur:8^MZ(ih7~>1,zf+9uXXG8֕s۳o{eɛӵ:FkOYu] r?8!ǹBJ15T^(eЍݩApu H;"<#Y\wo! 9 xXqd'UiIߞ4EZx;3d.C*f\Wz~>yi+}qֆiӉZpd5ǜ_/Xh0n=&l5Pyj$ZA&{HEaIǩxXH}5Y`Q'R*q9 | m9ŸM Q ܛ5:huDTYVꝉpXM\thQu<İF/ܫ}%G ,wٔ -A]#\= ^aBT ҭ0Tq F̝8)5@mW:Nt <)1Ҋ* :JTXfľ] ӎyjoS} ԓ#9Jy!~JO'E=7ڇ3Pq  琁 |8L8nxp}I8tQUݎ+IHLffR_LO(p?r(I-EƮ XI^v*  ˲+ Q4EYԫH^*:9\HT/seṊ>]GR$.ntks+M%X',ܖT7bۘ$s/u>xBJKuUiD00=bt>n]!y/#<7}|؎הـ:X}+/-h%F^WICڭP."Bba{ &c?ĥ 4,@ yuY  IQ9YYMoYߍyiCN G&z`(o5PNx(8~۝ټC},@[0G}PéiHP'ߞ d'ĸYp*R}J Yx'o !8Uq.{:,w?dmW+۱y _GS՞*^0h6ԅa&<m7@F|EѵjzTCBlފRg  PMW:y0 nd?PAr`Y]l 'r"tG5".>v%\[R@'}iduR 6!Nw|NinDX538+\f :@{L":@WU(zbzZIϔIԀ{hOgF= 1w>slGtR2irԿ= Ƥ*Gdo&K l e;ro L5 0k0sNR+U]^$m>a2A<Ʈ>XlI~ >(B_7 qTf2펎NC$d6\~Ɗw- ܆^-o=׃4 TU򴴜+ǿH h2%!w-7X7Gemϸw(/Ls^" !e7:`k3Š쳋A! @:ii W&RwJqqf@QG!9W= 1Y*O`miH?nOD_TՃ$PM1xmaz9NXԂ Qd(Ao.L|6mFLU0Dsbf}ww!P?DfH3I-W#߬ܟc27yЗ>1 ũtf@0]4~F 6OynWy@t˅PN76LHZ? }47FR7] }K1Y=kHKgϙ*dk8Z֥>jvX80.G/amtK‚oV^b8  8f,ΥXgQ uy سh d&G`bȧD/8YLw,|A" *|T@,DŽ9!j&!JN0SP{@n1n\qԋniF rjQDx;dیklǯFC. ׾"ae{|QM`$ pENJ:Lx-""4 lS`2Ew@ɠKzOc F_AQ}l'әiի9ŧƙN xr}*q|(lk!7i*3(6hHSZ5;Xo2#[rڋN1h# BC am$L[YSz0|ERa) F[:7>.R`,}V3J%y;GЕ5 ~Ħ}MmA113B L}ɦ$=sYT>9< "2vF\Q[0e@^b!J/ˍ*yv |6v`%8Qe+YC~v2Ȩ|$ rR0 YA?$pj*"uxM9iЃaegT*:k4 Ƭo1Ny#cS XI6 o=Ol7)aܢ¹iC6@M8r6o%M%Y8n`GPpDd*x>I` Ӿ=s+Rgw3jtl݇$O ZC+@zYo q*k|e𧽲0R=\-  4ū{fhm6 ǩh d we٦xZ 3߼0ha6On|CxnF$KN:92mG b%,LJ\6Թ{uizΟo,NRQ'zHn t,d*҄FƬZT{5H1sq#dH(=j̑8s5%ZBT-FmMド̟S(3>f[6]ZcW8z R 0dVnέ%-hK+,ya{wUp]%#1wVӋɰ(#Jt%L)CAi78*3}Bg,xE \ Uzlf0{?y!{-8 ِK]CI6Q#&A ~תTm$mNuH8;9286U4c94)"F5WauwxǎŮߧh}kTb2a2ɔe~Jے(M&yhG[$𯱜ZCK&\DԓP$NDR3.jGdi!pa#w.fbWpP\zJ.lͅax U*m~ 6 A84wQBVS~(xmeJXAp$9:;501ﱩ2#lm@.)epvM얬MX9Bkzhp*HvFOȘOWqНw/j6uΥY-!Xuǃ`ӎcsf?2ڙ. Z!}( Trr&jBqZ*'兗>>x0<)QLԏ-o-Di˵dE7i*ǍvZŪG$ x { YX"*mH˖\nK^<赌 .[cą/AYR.υƍx?&!7,d3mUz7㌧zu3H?:<.C1~1_svXƓ/Qa){ 5~eP/jhŊ#N-?!Jm SdΉ~Lن*_m1&4Z*GL\wJ ω*Pดi 7dD{d@7\5J}p|E2 E}|@ #b>]VD]^OB44 ŠRŔץxϊMS\˨%Uܘ)({]#7\KFܑZ/} u@ZK᧽ 52mw]5+@;h,[~?GVKlȅ^_EnF.%Phsvh;m%}ܪ1Dtg`$Og󴱰d%K&Gw!W I=*P)WdSGoOyMl;4P#3N o &<S8M| 7}BT?W9BlR/"םo7)Ta"Vp;̇S&9`|˺9&At^!N0ٲ|BuIiKCln=_rj{+!Ļ4Φcn0vfM>WXcѾwK[ $tiv-֋5d*< PjxsBI7I@*,T8-f[]SIA(rd߬-LAh_sN"acHbѾ0(DND(x`w kWɶ q? S$1j׶mlw.Ep87?>bPwg4uhol"lYP7f;ORVa=x#nA\OU0JhJ0;h’Cw8S|*֝e+"x/@Wzђ6y3SfbA=ثF-?-"E-UDZFrI:Lwܝ~]֋J= s`D5O `v=Npfv (,j TF䬽i!uR`*gm!|%?o'Ġ>64l.$=~̯yG0p=.u7jw k97dP9̒4;n}O?>fj>^9_?Xj MWeپL1/Xbf.r~}y(޵[zpueCI@ 97s@4d4].["g|{W8" $ [#ŬP:{|fFYjàdNKbGBȡzFp3͋>geHG J=E\_qz}9cvdUx'=MBuh>7J1" o}F2pZ|Q!mx_O{N 2I}'$XJ+KnD8twێÍ*f'a\-9yls-j peO3VpM*9/ApƊ-e,;Jv#ODD;`H~.ȓ ǀ+{]o̘5@/ 2D7z7`Vf%rM? tRS4rn݁K{oKd'@!*9aU%c=Uie/[EjQ dBGG85h*@\H*F JZ޷`÷Gi(gX';\'_}~*HgY?(M/o03AS⹰|߭ߔrxg+ս,2d^GX"Eeg0C_qi==t| :1K4yn1"g9ݼ Gm(>?u!M,O`˙D|i:.s on8Ahqjs0ͤ^7,3"AgAV/^y4T+midԡ][ /k#7-.v}^E "CxeCT]yoDF](u{b}ᏅXtqG_$}W9 EUp,"2:})1~;:uPf&ISzc2PXab-Fy/m3MԫcUЉˤ`LFho>_96ݫ \%"W} oU)14suj~XxHX>$#!2G^3vDnvCBO oHy KVՕJ>ߡ`RxG ;d%rv`3g /Si>dpsj.ݑIw*W. f SsL-gko;EHaX߈I!;cƼRs=ޝ|}^ Q=+TK ۯ1TH}ܨD,Y#](D1O[$㾏Ddjm5Q[zҫV8xL,˝D :2_EWCw Ie9srv8q֭ɤNsgҿ#g0zu6GSy$? CJ1=xtv@*TK?Bhui~o$-J8MOtRJұ[r58* jI {v |-:;4&ys"Os_MhI; Ƽe6#U侲GX8㬴:S$i?Be,WPN w |}~cd8%*ǹ/me!~R/#Kn 'f-B)@9G3i|. JbQd've<[6ɹР\fu-+?7S̤C>%CG9kl s!b"9TM-&0ψ>F@!gp \ L,Q3v@N6IY|Zuۑ%FC_+]ISgs8q !8KZ'ʁ*OvUQ&{%R =sK+}ߊfA}d48~vm W#줏:_A>EynJqGgwy z+7( N.6܋/smH|w|&Ʀiv~ĎyPO'Yhx+ MLX y%qpr]%dP4ξp?Yvs`a"eAe)J[pH+x2^Wܡ3Ȝ-Fׁ<ޣ7JT܈-JFjG_=ؙiy}Ϗ߇mq=C{y7¤*HpM|s%ܗԩ,ѧZxep{#B6Jdq1rƜ{KR=1$kiԹօ*w[[oVD`ʿ8hSKbPp~b`έAI MwS)U)DiNfk€-ВiLHUN @SnO!p-J:+eq0òBPnG™faZDʱԌp"iV|ڔhC׺+83aË)E<߂E.pyy)őB("ӟ A>hvI4\ù}ѐmՁ1-:K|~{_?evʕF/b}}U‹ZyR/UQ&G~>wG_mbJE ?HkdKbTw̮@2-&% Q^2 `#%0ŞOFصlV4,ڡK%: 'W?$ 3$(PV?Puqb|,@Tzx:\IPBk_|8`ã{t<#jaJZ,m_FC%: ?|g?{(%> !6eQsbJ*քy>nd~uXvgԞt$)с6+}`{/RA9Dm鸣Kup#ܪ>L KTȉd&F 2ȧ6 =sr>RiF}t&xtW|, NJh; T^ߦv}Lal[B{>UC[ ćxȌtYl9>GmaW*qLfe5 S!A]4W7J:|byGҺ( K@Sʹ8I\w]'"񺋣g!P xfZ,I)%I f XpfɍյFߓY-7.w#.`߆Ԋ;5.@c*ٗ +Jʽ'QޓEZ w]qncm =^6a%6XX'ƶL"c_&ʃmWӕ/hW5_JtV FgS}k18C&&&E0.V_e;sp6qG ?8IL,S=ζ.)et҆-v$<'zY(tSN ZqqPzѱ9[be^Vj` #^L"F6Jן)6p[酜 ^^<2?}Sqxo-Nv<1onh[F0i8CXĎ ?iI>VU4?Dy'tŐި} 7&G?`)~D93v a۶CU98١#Guzy5i M{cg-sp+(.۩/7@QՌnzcGǂzB==t ]6lMqK-9 |^aOm6TR'(_B]0Y^հ1^[зhHd|1 8O1p9YF&'6aư}NXwfP5LD;{w 7}T1CZm*Yd>wκ,&kF7 RtW9W'( WUTy4Fa1];DĈk 5NsW!oSuS^þ&3b0pf ZJ4nx5kدJeMՃ06V[J13F"dwRV)NvY5)gvwW9~2vd# 3] zY yY#V䋛Ρb,*$GOvlu3^ڨYiēF5R[JSëJN[duåN&ƢNMg=&jn3Q{1 n>Uf%73DYԔX@iVqW#;YS\jSC ~b_}Ճ˫nsviWK-,ZS.UfTwdRzФӰ)VRMC47T' ŀb(/s݀ ' ʰD? @~ayWcو(\ c۫D}셓K,6wӪSmO\^nM CMwX2$<t,9|F"3qZTsFa_0 ~Zs7^hp^߀LCb `^,p[E#q^u8'+m}e5EŦM$ (}G~Pĩ4(b%$àI&ܭBªTa3+Qs}.9ϲHLz4.<0_8emFY*w(2W۴J%o35{ *a5sO.0 -nt.B]`C?7oC[}Dfs3G9IlÉޠl?o!eXMs(C!PҒS. zje%*k܍@N/u„ 6|%ONqèHG]F&/[4N<7s,;ɐ3gWƣY #Q \p[2 v6=Ο *lms+XyQځ'tU9d-xg)޿CByX q  D[̾+!؀ rBj?IYYPZтz{ 58({He֥I^ʘ߰WjηX6 d o 5M<}~F4b,Τ{H5  ry8ys;OvǤ&Z53v TvQwJHܶ)8r3Ǝ?\tcB"މ a|vfSѭj&nBHFjU`W^[mF-28:rRq3 tC?,n#4֓@/P%P>0Ң: η f¯02t^MJͩ 9l}N}cHls. 1*Z;٪mr 4L⑵y oŷC,Xlz*&ąƪh%[~IA>ÒV;m8#;@"Gm8^4hٟ b'^Q/#Itהa݅0x.BL 9?7DR.&Aq:EO]lȂC-?rߝ#UYHT>xQZqaϮD0;6_-Jjrx9 >uB9)o_S)ڣdǹG55&D-!RS UATDÚܞ1w|*Ω{$yߣDb(2C:-re*o2[ UÁU"iNX2Ï%wEY>8fr# 2ObG<hwd> #)Ż7bP95 R̼,uܠΡӔMT8I"g T؏y( h a+3/pw=>$Ivw>A ICNbygpο>?ʖ}KfYjY*PTu69դ`: )BvC ~ML7̄L%Ywޡ:k^ +3R\ǥIx"bS8t+v^B_K_*$J#y~#X:xr޻U)w뮅ϖ`5-CBoVf*Yp!OX0+yMD %xA(iz)u; Ilbq L_7 a]@T3=Vp:%\?+j 'j /]rp cݹg.'*|G`Z43L V.fŅ&/X)Hgd±BdzwшF?`R KJl4+^ i^^zt @4}A"Ii^N bԒ1}f%a?~X*sZ"6IEUA*_I4f#:qSb['m]]D4:XF½[:_c<)dL̲ NwvVҲ4-Z R+S%RĺGQ 2?t4kwbKs:jhBKdK[Km/sTo+4h} cWH%$(NgXB룻z;0,g;ZZRf^2k[8<79.}Z oeVˮ43eE ҀdSJ؞Xsp ),SKj2;A?;sNzXT[ƣUIF;6wgAu6[LH3V4܈=b Uvs]mr%rm|?7o,OH%,q em#e櫫1 a'Ny}o>PCv7uD Lu[D@mwj;>ii\yp4t ۝)asل RlsA1 >@j{*=K{2-vm$%m57v=w=.@*X'EX3RM_.a>h.lHxƣD X!(ytvSe9cZ^%* #4k(Y jp&ONߩL|aو &;=645Z 9UӐW/nVaN$E |0ccq~E_47l̎G?0[e%85776'+HFc* kZUbB! f Ⱥy#SGIA֍N`ŰTA8@3VN j$֚=Νm#zuK߻)Ta;A)phAGVթgJfQf:ˉ0]Ny, ߃êƳs4%5y *~qw; aO/lx2"sTBn}ϝ=6[*kͨCz_FuѭYNN 77!~/&"SSP]xx:,n'uOYRǵT-Q5ˣ%P؟lذU{C$]qes I;o(yk]XW !@7$Q>_IJhhJ/}(a$2i^*d6>e HF"Hhc}|c_ CwbP֎,x,md&jĉI unz]bp@CDyjE؜郶|ѧuJm'ܑM?'oL[I[}RZ SnAK34Hk {bk=E5=uCϛ{b@Erw^}{E;[ZRy߾Zp8+EIֈD(X'DGmǥ61إ 5ƍW>n:W {u9yĢ#cl/o.jT|k 47OmC+n/ %,+rd 7i@\ǠbBOX33")"x1 \ۧ(~v'sj(>x`ᡊkj"ղPk(ȜMўV8ʇ`MrWˊIvn{Fw;eMй|8^pZFFAcQJ! J T~ֺWOp]ƭ mGJ)mq_lCɃP!x/iŷ(h<:}EWռ>H `HκyyI{qiw~=jk8>c]GR-6gz-MMSI؟w"2[! ,0Hж1_;)l#=߳zMV#îsZiR0ZH'dx+x(>0U|Im9&G Dx'5(rX%&2M~Uݲe*DCH~'|'bUTK͸xsP۠zu(cnl5 !&\B}Q-BÛ _+%DdWvR2ijC*ޔv%eY۬] 1O56ѿŇCߥPmKeиϧB?)m$>Sn .|Y&pDF ŊNŕ⦬&c;%Ewݐ难:#oCշjsNW#C[]:tO',.* Q&'\>lWFsaC$^'種;WMρ8rJ4/Ǒ.(is&Ԓ}->x)jKqP'WOut C_=]`D1 @d]j–4HWyܕHMz܎9peKɂ7%< M,SE$&zg2ZķDlEv"qC60+XMޜG X/8Щ7//>sA(JN~̶&yR_;^9DY +wN`b9vTf"%K } جۖ㥽oK@@ s3hKk%,x#/<:卅Fbh\Rh\e붐779E n$˽L$qAYoh7`e+QRcA7-8YV%T=D=ou 9FL|zu-Fڳ߽Olu Dql+ CLmZGi C J=b[;p>zdH$f8'wē(_}ޤ]紈'PuH끵:pGֆM_: )QOl^s a]^wPPkcn1@b~AަR?0hG`1M^|}Tn^dF(8Vy? zſ1޽;2>u!&um8њd)Kc&'yޤK*aϧʮ)'hLytġU~*4SoP|@W.#T48[n V3<z"K[N}l=RTL 1 Sc?5~9z9'f Gf2 D9w`m}>~ܽL‹{"ìgӵomHG@e<^whlνWhf8o{-D"ZkZ3SZ!Y(]I_g|EWȴ, f5 cnM] ; OHewh22NK{)Lll}Ps5.7MJ+f\EC"cJ'cei}nN%N՘ ZT,԰Q]4S`.E៏E%]?_Cr=} =Hj!4;N6\L)+,մcK1:#]}ȿ]OIxX;Li٨LO6I`:3 V^,LbH&ʕ܍+Vdm jV>^n_ 6p0}f&_ b*qo)wWbJ8.Cx >& # ^$#¼;S͞xhEC-SMjD򌛒}3 龓ތ&@ Q=BI6bD\|tzt}2heɨn+;(>?A!,O͸≂ wnEՠ5NkZC"r4o.{8F9=w9)miW_.@79I\'B/G_{(Ůt=>Xh Z:7lrE`ྷR|VeӥoZ&9ӰO$ W(O2AU`NPQ#@Bz 8G?՜h:Kb2O 2| 0&FxhHhJkٟw%{\koR'>їj[7ĄLԘkr z|vW^+nFaXӅ~!#̋Qm}<l}-dn0Ԗm'(VΡ|iiM jkI{̈́"! t\xZw^%Î5NL~rIl\J]WT:tuek +G WbC?TVIKOBhLob0n[} \V>ggev.BȣW~-Xjxnaًg%WYjSGND,kdo V K;P?]iZC+ ;6,eo Xn@IpT 7:m<_e_N5{ta Ls>M]FeP<˳f͙X0m Quèe{'N7ǃtC=Wd 픴YPFm"ox'IBnjа CVmod(Gu>>`⭃1ai0))},0lRŌ*O'z Yt FɴK98'>>thP~=`;%褘=:(VBq{-*F=cԝ.t,$vL:,NJvRv7dCW(o_iؒNWQY 5Z¡_b:+%%f) qQi;@vq^0k|g9H檱Y01nx]`d_ϱ'w]ѧAMK{W h lޱ|$]*`mSe0+* q!.Tu)4rb p,m^ ؞$, WEl4шWoQ34\Lp\e%o}cr|ž.P~ h9΀`ӭy}Z:/p^~]0ֲv(vRfUYSIv (|.Ӻ)0&xJqP&;c^ b?U=ByKؠh3֊Ht@|¹ᢂs^}$o1**ܴ`?=+ lF˸W=3|+$ȎZ_+V>sZOS(6l}"=/\^Bb|죻 VIM鷇RpPk 8y7kdGUAaiqiw,j[s&K[dFߵM:y OV\ShUjq%A3C`re9lNNm$AHm\cΒKᵴx[R&9}-Ȃ 8:4.b=q9}0}K,1=Şnv؅ KsRib{qU :LUXi'^YBO\?DsviӺ^@4c> v` E ΤM[)m"&@\B Rx_q=g9Ą#[ QèT")Y^`i;݁Cˮbȉn>z6~[y#?5{87m:C(gLKu[^f2 o&e7qf Nm.o !Կ9k.N0#! ͔8iClL_0[*ek,(QCN*/ ՗0& OuzT""P R@Va;!QʋDlH{]P^'P؅tV}RfuF`:}Yz{ξOK _Xtjn5K I:Ɓ@CIl0[$90TS>kΉG~ڤ_jMۛ@M>8ޑ*X H(Rwd;Lʮ mE`}/K}Mt\Qa$[tcNȾva-w6:} BMꯙ=ג֝Ҝ*-џAdCY MG)n:LqABlyjmmF9D> +EL 8zVo?ey.?6rY=?1ӡJb?g&ob5dc<6aR>bHNנYEq_\G x΍x6X)'l^J\Evȇ`z- {|?M-dpv"F00?q ?k1SЙNuncW~ڿ[%!f (kaA?Cnҿ6bgXxe_ӵ8]Ez3`8PfM`pA FsQAF-fι[ h-Zҝ0s67h^gryrkCJ8РT/+խF+>䙛3yۼDhy5LF~<.[f)Lw}Qgd^͓(ҦǏbJF}dn}US}AO7hPW-dh"Ks)Jd|ؼk`P 2 YUt+X6S72TdefBIA0=:w)X*s>ݿέ*,8@=FХp8N+@p1 zϩoD=t8:K m)Vf̝\Fz!g}x |r4yiѳB>:Xb/2-:sIk{\R!{̛ XimL[bL=jfas4i>X8"a]; *ԣm mFeaa@ E 17x - vr" f' \M/#p!OM^pLlMƃZ;3Ro*dy7 Du(7Ll 4"wW0*E?H+1[ď? 弴Oxғ@$#wM'̀^9s_[ɔe=6bO>~ͱ7)3hawljaFĨonV+=Vʍ \v>7a&rc Y1&)9oq4r'_u}::;qDšo:\ T@jGQOY *Q g}Z+3R x @E§GڃNF_8J>pҍ _$DW~ۜъAg fGs_ʷUƷpV" ZJZ (X@ .eZ^͸VQ1pjm`2m i=̄<A31[h<犱쫳'H1*( o䯡7#슪FNz?f-k[I7mx ["s-V@h,fO'WT4hAgc3B)&% b>g=0V22$@_2@|wm%ZlQuJ+eq'ΊF'$/D'}W/քJ FjrWKH4<$w( iUm|ʰ6 PꧣityK0fuP("-j-P~B~[XI4ԿQE@ƛL72SN{(i} H)KpR0a7>댻.:a2Vep37t!wQ"\Ҕ-1J^atM0n+ȡGg n㫍DEi$-2̬+Zo`6yu`ƚΑݽÝZa"-#2_y7|Y DA͓LA-cG2#HTn"氎Y˷GK;7t XQvޫ:]RZO'7y&/۷CmD>Z$7FAI^&6l- mV{^y@s2 BSZٸ0t=[R~+^ ST i7,fa$ g~-~о[}εY%eZ!b0bmt -, % ,=_O"7c,e#i@# ddTDm'6BBkŮM/%+h;bR3J\8n JYbk.v){  ܋߱o$} rOo]hRׄW7{2[X((S0`Z2QCq\Ӯ^ǽlF6 nw1g\v@:Ih4 ,dEԘH }ٟIj[R 2R+W @I~ I” ^,rOn@ak!wsvܔWc_D-Pj"}kk”jʖ1Y"hYq"QmLa4@17S`˳h[ IPfa/ ҤA  ^O;!RY *Iy*3*3S"3_o,3, 2_Ym Yt=m10I+ U?,/VP) 8~30c@HV0F:Hk%V+3x?r7ڗΌ szQ1 ?iR9Ey7΀ hu%蠩Z+A T8d :;)bn/_DoFEwm;{> W DD8%tWv5@s(O$oXr@G2INڷS]:QWG3zkPY ĺ90R6xNTiUڦBPPVV6C7˅_(m6 Df+ hCz j13ӫW@ ub\ԨV{uV9[wUM4Z׶:mzM!A-٫z"|:i|;TX nM96⭗ x0Ktpp,\|%CCh7q=|F׍a<ў.Ʃ+2P\Z=(\V3JKR ,ڿ^ӻU JҾX)6U~i߅cg%4G_, w~m}0a s-V۪Ш:IǢ/(6`QyoRkG7u *!ua4݃g8xkӮdz1KY'f@FƑVmpǴoW9M6/GE:\✺|1`5W' Fl( ucV6*8#Jy8+UGz*q;Q3|XJhTs *w0E[%W!Kھ`7Q[jMZ7B ;Áb/0ļb;$AUf/YiA!0@yFߡ+G á#z+w}5U/l}'%_7}9\s.0H(EvB39&\ѱ l8_>,;`x_ha~uMVЍ`bDk< kmdIx&Ȣ/08 %A: R jʙ(\`ydn=bY9]xEpۼ/F|WuyDJ+ĆEJ<* # ,hX)@-X1g9*S2^hMd$?}%HʟsB/Q@w |^ueYi| [I$17$gZ"Kk| h0oީ,ҡWO_(fP @ezc$,q1(E_8Ls p7KZQ[#C?{H"^j_,zfj(Vob6dO/5,xQK,^rz ZӸb-|උL ė:P{XBu#O0ԑ[݃IgxlLʞ0کHhWbW.-Ue4{s" tw"-U0ʹ4['zBNk+ZcQTLL `6)dCZBdɱD Z8Ҽ; ,B<k;/ýÈn菵CPQ٭DarM7> *`a)EXwxt 磪W5o g>Ww>Ε7*겫;$zf}j͑|`㒋9]kEns0iJ#3s)D`CI-AYJz0B '-z%лSrT?N7Yc/+cpS? [ϋ~([$5 ۡlG{! z)bT*} xr}roOX 4#cuڢ<27Ω.czLM v|̆vYVeVu dP40ZeLZ^g6]B/[bϼ%T̫C*Ot21~48ˊrvwAC'té`-ހ\tz?uxS^鞔2""#:(k=|T y&QδO#u#g9kh Ì~Rj3&7K3M%I,.eBs`s S@#.fs:-B>vLwܺ A.e9iOA 1 +V©>$RI9 ٓTb3cD6 w#T3. OYu nhsovo-3[mS*<مN>Z-*`WkmQQGgFSQα""LIs_?&lY{)N8 XԀTH.5#Z~+Nc\8g1N"ܑ˧;Ug^6˴)1j_1 $Q&)`*̳ ~o?|'^DĀz390Tzq/l853M3:E wwmqiFD|š#%6 C!4IRn @jR@׉η('s&[\&x 7;\]71c*?J"v>햘'SC 5ߧ :Tەqtj~aqu6>-I#=_s؋Zԁe/)b I6x}gql$zU {Fa"A 5:a 5Y(@s^'u.gAj%_U UJ3$Z6 yBѽ΋I{K]Z7!Z"#Dq¸| .AAY,Y銊qVO*y]|`2<>\ɸqJu0X9$ S6O%>i5-\R c q~Y=?k@ukAoJMߵO)1_Ao%%sl(}5c{ږ o i[;5Ղb?4只YϦg7?-&jNċχIVjXd m='ufA4X?{0ˢCNn3'pGo=<\k'WҜ'PbKnlj p!1詪ufM:$0MѪrƯ')ۜ5n73aNnϿo5#u2]'ȦÆxqdpdVHZs5(##Dr`V#-7XZGRT,k rfZg3 ^7YXKsYǎ$4\U:de[4gs`,y)yE]|.[4J3<‰^B4`3+r_ЄK ɸϓtP',;BԡyAeOT&ZzdRW٢*  =FQR5=Qԟ@\㲓ˣV4h-\ǟa,_L^L_`jTv9eqaOF(V--7ɡ?^GiM䤮_ծ#b( {MP5SN*FyL/w@-[LVdY>*boVjI3Kr þxrZ-$.%!;av{gId*<"~-4l b ]Qʡmy:Ns}艑" x3"'ko )p2+l@a[G o8_o"R-}DԼg-e:9\y|}Oьh t`vNDNq P*D&[j+T>#:kѮ ;\!BΔ6Ss1"{~Ғn*Zz唵Q( wzԍ- :?VٹEMd)\\Bsc "L9:򽈴!S˝glْ<=e?}sL;*h!e*@֮POK%|m#I'5 6k*  @ox *~Dnږgu*Qh%2FF:6ڐx~mr  1Q(ot)`qڈKR.eILJ9[˺%]y!1 n5@cs .&`4t%7wk''_sW*mz%g&xZp)dp%*yݧ䝀A!lXi5e.)g@B\*Ůfv:U6e2%ңcB= a) q;Өe%tF}UWΤV`:gz4B90`k[~He? ƘY4rNWqٝ-mtC!e_cظnp!UT3l\{)]K-Kڜ)PRS{u]qf`f ~$ba B5dGP+>nʓuam?,4=DDam`{R֮Tѯ{o9X, ]sVU *Sw+m?OG_]9#=}n w&C!uJ'%N#1jv VQmWr_#Z-7I5#xȇsi\͑~Xx P 1"q "E44 iY&| 茴9g-ƾXܟZ{>\'`1'8MW _Cv8‚ACU1Sk=pXu,u Ρz"erZ-oDZ lI-SJfvI3i%]S+EqOyE 0H+)y4)H}%2 t?2Q4K}݄e)C&F(u{2>"-c=\\S3,؋FDžǔL/*q>ϊ$KX6Sdd{XJЙh 5$\aۡ;LuT WO0!k"ej_w ֽҸnm326I(|DY^K C&%Xvf&fDel!e2D8Ϯ N+4O_ 9r 1vJ4664w@f(oHH…v.}oϵ$49nzA@R7L+VmJ݄2NV jR*L^Q ^JMKԍ~%Xm;g*ZJ?VD=կm.;KWCPf(a28)OUaV'^Lo& Ql^(Ɓ]%QO++#AL5̦qydō# õ]@1+iF_, OJxP(JpR0Sy_Z7ƉtI.y s/~uS# ZL@H4/ qgz*G&=. ❃,< B졼NS#&hk.L$q Ph~~Rа <\P+y N]5_vKO/‘غ[W~d  qI?)a\PכkimDEJmzpI\y)XZ&/36RM8v$[6{COÄ2L~O筘\E d2OՊL k#QVfJYM<Ƨ4>kg=Z_RΘQ2𛧝I $4cf ԏ泆ݤ&J-оg/qڻȢГȤr׮HI?GO/]!`@5:0W_8)^B*֙׌L,`ϱ2ɶL]:#tXFDwU OA@35j|kD1d%IT`fCnJE޲pHO)뙂3{ip<{ڈcsMaITXeU#&L{M5\(SRKCilsIxQNFj"{/{jR=TR4Bekp :&Rqp_Fxp*g9]\D^{r #\h -p~x^J]||D 'c3%]޸+VMZ`ӆ*1sadw MTb{Cf+5*c^@pE,xZ"b8-÷ {6-eU}xI>z|˺r{yoܮ[S5 {<|fxcyuiþ\~apa$}^̩{ڈm7gn~c:5WIsyáHv* "Bz3uVC",oVPl:bOT:dX$m78~EGK|@ ǒxOp*4cV6Z-< 9%o@HcZ T:W\ZF%yZMEeHhCS($T1W"yxKW؝mBQ&9;_a8~J `* ~S6e5̰Tٌ<.wDq@RP~}GWRBAV[+7 !v {L]LK(rMz3RI; ɌB8VjN6g?`0 LR'Wi3> YoyJxAd{U!(0k,{"$,-&b)D pljs2>jȼEgv ,wzfeZO~ۮX $ɜkQ9)1kΧ*30i5q39iWJt3 {N 9"[}1Qy]s@X1gLEB`EXX5k9; )vYKu0ԽpQ]I-̍do%l]W%Y,Gqa&PˮƴU.yc2s Bf&}RN> ?`DhHW7[¢RL'ff3\f =B?,?cD{86NА/#pld!9 l'zOrJ)#$]n8\iL*["ngHG혀O ur@J̀58!=wB:)LK@E;9WjEF 8EkYW̅㨼fm 88t;7hUI"-,z]O\k'퍛&EZ9a:Ci-('[_bc59Tjbl"n).͡X7v"' 2JUvQ=0YbBn6Ku2:<&7У W+[Ʋ6SU7#=;0k = ?5%4dm2>xIHKC"6@ZzLUXjBoՑ z,k8=:*q!U hF %6I~Ky_si/=^2u@ҤMzDV$ Vb%r`gp:DL7yVQ)(jbޖgȘHH|Lmf_9\ B1 ֆkܪ~yR*LL*E,;|} q ;=z[zH%`' |YP̠ J`KJO%ɞkv +pD+1i$v &M/ѳ0|j@ٗ0pHJ+R8֣Ylpw.QMY?fYOEmKv#|,- :"6R A&;̲-)tg_SsǗ{$.ޝom]#D&P|aRۘ6b?ٹ ǟjtiC4md<?I S[Wwut[_t}[qt``3N+g^0*+N.6ֹ/dꑑ{GsI6lG/6Fmz=wX`7!w5mzFQJJužFiYk&[k֠iDC'Y?* Z_F*tp:cE>[ݵ}?XMY_V X7Z,DXfatqqj?lzU5Mm5@Hek]&Z[7 ",$2Ú7>C:ӟMbZhrV(E,Qډsu-C~SOYݢC)H(,Aohy/=c$BD%30,eyR c<ݞ0w5D"ZR#&Rp.,' 惓KP@nwl/_-VUqbc.H&""c>f#ЋJ~/2efz0T#>#| ?qf q]Q664 տp#wR㪫YJDwOLGWcd,<^\;q%{vH8PBhY)e~NϏyNqPgZuE-SZ/&36mn:\X8l@*z1sVN`ww%$a/< B0sÕ]'0^ ̊ N];{I)Dy#9a|~)O/үyX9L -Z2Nַeՠ--xhA1_%ZV4HzҰfpswɁromFq*v':-䛣dU2ެ*_jq<끁LR O Tx:$iʇ;s-ʂ>+ꮄ6Fz6+L Ȳqfx

k?qKX>s߯>ukh(6gY+>ɫZVj@ , q>Kd4 U{1([]].o!Qѯj/*XD\!C?e*"Fe3 2U.M5 bP >NePUfU̹h]ũ+ (? c[g U mqɓK쵶&xӑ/>m$iJU"t =*K6v|JmJNd7TYjjJ)sB_sv9z❊TyCgNh.a1?JܗMd" yM:UѵNo$kK'.xф՝uJ| D,/*2i]j»- Pp݂N1T qA'zH ޕR"/o]{`2|ߣ]X'6sv㸣 ӌBg/T aZQ9lXb(С} B4 B:[Eo9?/sT=4IAXk+E s&꽒ܣAf=0L4!B?B9FdzOT~-a]-:yyUqbJJ#؃%^2i?$ !]#Wuw<<{8eo$mPi_~Q!nitrjH@ $d1zO*w%ܠ$0o0h3]EZ>QIe+,!fJ6s- PPJ c|5@l7JXQB%,j;v`gaѦ] ԼSJ_m?~踏 P79 ht"~ +0u:|JW*e:QbȡUi#l+0WMih@a 0m/:Ůflso?{tYIN`G(B)ŕ2;4B}wxaVKM_[)pX؎o{V陈+ך-f"xI1c$^dT,腭ٸvG^mhq(zB$X,O M|p}..uM000%Æ%RN6 l)J*x@xoD:6MoRLJMX6Q[&܀d~V <>g)Jƃ @pJ;ƞ-30R@KWՔ0)>ޱ~kOU|}a#mE> 2W9e|w4\_D]vIpN*ҠsJ揂xϜys暍/ V+{s*QHf.i i60N6u baau&_,( X}T5P-] >+L/q@]{&IB̺S8Y(؝hN04ίB_s+Fvi,pu:75 Hf_z>K*"%MM[}P"tbOԛJzh"^n,iL1vT[K|xk)}h@2^bIO+qrR[8#6χ O$fqGЕtǸ9=)(Kj5.WnWaaK&Sp!q\x}yVK?nVka+B.LuMl!nE޺ L+БO0 TgSeTK)rYK+DmAs/Z2ޥb ՍOOhO8ryᱢlσd:\nIXf eȆqӧrsz@v`)L֛|.0TSV]R L@4N^5H<@:'ƉrW)s)},R[Y0*k36;u+[l}-R=Uo _di׃oF)AFBwM#i~.ҡ]{pTMS]z `vjdl`/7:P}J¹\StV+Zb% Oq cQ'RZjz.RKaMk"suqa$&,>i-$j:Z*32r<#NۇM+۬=TC[3vd).CC"Y'f@ W½!MK.I^ Ǯ AKOY+~\ Đfx#^$̅.#IeXJƨؙ6rvKnjLNyg8,yZrC3W$F=6eu~ߥ4s}(qGs(EdL~3¨T c'a{dhp#Bm-KR l3DQ٤Q/Qls@\?DM6ajqgtEGȺ1F2qlVw A__D')[64g8SUq 9Hqà kT%kR=؀d2QmH_Xyh"9I^y_%VM=IKG PD W5F'aC|QՖۧDe8ye Mt/p 7旭 ڧT5?1bJ4obDI􇑨!W_ɒ|EۡxԶJP ZećeAFޅUsR%`S/vѐ >sݪ= FpnSL>XyhXP,q Df Dw1G+4$~ЭFA}?Ni*/?ec :wbaXRh ţP\en3QQ1e DoInm`H["+ 8>b“򵤈ѩ+'3$>'bM2~^iDz!]OwGFUʖRI-C'Yhl_2l-?aNGzMyT@hK ,;*A&]t/ C!@s?l`;tjryϱKHwcI&+'p #7pl[S|l^O5g\i9 x]QK,Њq2+pGE c[gcTOy6#Ԩ*A\ӿR'DI먏epDgVzL@g-YvN ԼRpwS{}"UÁ)YЯ(di]vvX&w1:1_WjrB2JB0r&ScaQ9r. :LEr2b'iY )+T9;ن&DScceVEE*_ 7s(T;F;`A¦­~[@~$pu1muqmƏb `u)aCUW&܅hYpI!|k@a*IⱣA-bOZqiɽa&#e}".^$IRf8`wEATحyI7v!_!P[eWD7SC2!yݐn1gׄ$qw9!4K#6 Jd~HGqoE?sERP'|T["<'˶Ynøʞ~oW A4"4Xiڽo4K;kCLϔ\f4ڹI; XwgQ 'x7r!7u~9 bA3blU m3lt(`Gh:L $wAAjt]:xboˡQ*Q T!D=++D\_@r0XfZj >R'\WŚK~oW!o1gaXֶpU¸QfiC.O;#&r$yxA[|2&/M܇c#USEJ#,.:%L"^I0ȎC' 30 AFp?K3^Ԥ,GpI8Z)Ÿ5˼REi JV*Dbj~@ᐁv=Pn*C L@C ]e ڮ%y> "M1YEO91!!HVO׸[rn LN W/U |>ցUT8 AUuGu5Hz+;Ѹ8F}|kד!#R> 5K>:ܺ'|Q8B'/ʭٯ=Zn4?JӴZ12A%ғĚS`n70*U|\_S>{EV20(Э`ǎA]0)8-=0 =_grv}8fʦ;S"Ć Ӗ0-;c{5;r<2NK||.LW90A"pC|xB 0Y9"'/t NkuIIoBɧ(1S<&D%<Ғ190pAd{BÆj؃TW3r3I\!e!>RA9v#RK6;@mcBs+,;BA6aZiGlE(aƭUt(Up33@"4c gP[LJoqxcy#5{]ooVCS AkNr}ZT>5quP鴭:jਝ9<0GZ_:P6i׿ /erEJ~9 Z%7; ܕ"Գ:~Q,GwkMd))DN9׏ | v;n {Fy(}x8Wmn5KGzI L.DlD #0ΡyڕuPQ ^pâ6?rBK󊺃ڪP^Xz1a09f1AL.U8lxi VMĞ{SZtFfACdL_sg}>BXH)IѢ,gf_a- CдɊ*T9zp>+#-^B(cHm[ig~ Yt;%1)]m ķYKgY,3A9"{y{p޴o=0%3[~K/jq:QG?Nӡ0Le→U3l&qJ6i(0u58!C[Z2iM΄ϯP[NQʁ`=C1rmT9r?aTGuϋw~XjtWVwCڂ,o\-O'4$H4GP:pZ^7 .1*55̬ -Pit'ygשX򭜷ArNA"7ddmZ0?c/Y_/="#7x, W;Bzo@KPii |H~'iܣBI(6d}N݂ 5N"]@+Qjh\jUC)<`,8ַ4st+q,SchW'Vt=x*%(T[e9qH QI!Lmf9dUK<΂b-M ;aTwK4iuRrScв7T- U*2vӑHǿ&[lHf<[-UטU՘a ۙ#͖|M#u:?R9zOg1|K'J`.KO$@RAJ: i(#jUOM Fo1Jbft\q{-bXzō\ճr :gWo)Ҕ PFp\b `ikbo *e~Ek)݉ya};fK?7|Z"Ᏺn (B|m>y=\ E)B]MDPG(K,k&I #]"RRH ]')~x(lEc3'795WKpGjVvC{b-7Jxo޿v|a j[/g. tK[ 1sԄz7(~TZ"Ryb( nLɒG9Bw9uK1Zjy ӂ}QM6FZ5M::2ۤsM\1j4&5Kɰ$ɾT_WJ&'9Ή];I=sL0\hs6;|>\gOKl?C@-pfd2Zq묪~Ӵ b.7Srf8f.[Yp̝nhӖQ!Q'T=WYԄu)6eJ[1eXCO+6bfAh8p U7,b}iDxFR!߇Ψy+bzmd߬] |ύ' )&R?>[ਞÚ3(PݐE)Ik+nCr*b + xAmyZ=9"qjCyp1LS*eoµan&! Mg~4mg]]u934THOf_"E q4, 9:{vR#\y@Z_}f,_%Eh띆 {G;BR QLOyl16{Yrަo&~K D{w9jcV|#Ix9V,]zs0TM?7UJOQrq}Y3Y{z˃M%~M VIVǭZ{8±ScWQ@W<Aڧ7kNSa( 0:hఖ-?(aM&M0w'^hn5ss SZ rH@<[tH4Op[8?D~ V[/`tHB$L0@Hw-rD\=a/I}=-}ܝSql` "Wa||FN!NEnj݁3qq^SpV>+RN3WEs%[:AL )dLIV/[j/ mɼUq"$&{?)-G%<ɊZ~;f,RW!>=~K\CCN~wF y!i6T G83؜ hlM[J6@z:K6Zh} y9hM\Jr~޾luY`MPA~Z+LӅ*dUzeH6ߊH4}wt]FK=##.BȿSpUj*HȰ)KTT#u-38AՕ'"* ^E{yݨn$}z|d)ѴP! '(-@DQ>^!h zd? "ܘD75m_xm1e~75Z~/HOc'j_G]@ ztk+ONW|Eӌ> @1yT}m׼}Qa$MXv8ȹR <"XjJaV,{WxÀONJwNx[TQ"hόimWa9vN`"y7 0n9NbS WU-a]PH`F"hSD$ ڎ(yO$=@pʦ#f/hCIJɜ4/7pƶHȄm"'))$8*_{&gcd1ߥ{ 28P bc5uط{cA_WIh/:ղ[6=!Ԙl #9_ʳb L rԔ3AISX#)l X- 'MX'GM ŹQkg, '~$}z{+Z#Is>Vy]Z t!҈7"RcȇqG]L8` /2oXPK (u:h0 RxvnOޑWAŸN>L6z αrܸD@Ado+`] ޘ]lis*o'SdW`^.L|l] BYEbݥC"4KR-2 \J*sW.W٫DQVw>G^q3pui3'9y,l$!41`zG?X_) ˁ 6*v#WJѪgۙc i4 WV[(NBbiHY% ?Oe'~B W=g'aY3@h`1;) s=Iqޓ p?Bk^h/T@5"2nc:εB ^y#'D`2@ f3=BZ\!>TS+S`!wJ-zƺt[r\ؐA'ӭOAܓI"QMm J~*D w>bͥ]i!g OZ[>p' (EM W`GzE͸5^K)5gn?ە"MP[;t笯WGĭ08zFP_uq_/0^8{`4C^Pe`WU6bK@J3=\L1XZķ޷ntC>`6iBA )4(> {Gg/RNS,' @%#XT}55MG1v@ g :]m`f577 /SZB?Ef @ߝiW 2حPee|WO<>g!sAi~)ze{quyi,sG[' %"$b\'˽;b%uA63}-hS-meUBˎ\nCo5DOx& w\"dz?Qz{Ј *K?)MAl-p $3='%5KGEgZ=0c>L p )*frazm|璔ٜܹnr퉽<[$_rBlp`2>RE7%}|o8YOGn!q ANQ7>oqןaQ3%\+€`ꇻ\^fvfQ4w!o>6Aب qCr}-"ct@%.W@P!LDm?8Km?7Dy:{9ƣ4@JkNM.+ EڂH0kM;Zխ R$=4eGŚ1?-ÚZ#ߑ^>+z u;_PH$S g#w2 p=\v'ͨG%84m"lTc#Y,jw%pv\uZXLWיx-kdNný{6ha)rܥ#XnLԀA=ۦk*[WGng5@TivpoBaܝYwi++:$ 1͞Ϻau4IS&"%MQ)lvDZP@Ÿ!SXiRO,*еMS@.ۃfڀ]G%Lkmxg1xyIy*6K9{]aUH*[GP.UPQQn:EyL׸S_77a:.F{"`Ngs@9P#4* &~o4 2T־.<(g[^''lS5EZv@hZ6M"m}1HYɰσiYK{-mC1DZ B}xtQr#D] Py|t@D-5] 93#P>:-%!vrm=ڻ e6R ]tޑIP~[1`E.dI_Ptס)?վ?:fGZTrAiN1ya()>kd {ʻ%ZX}gJ GaTl9 \8 v\` 1浫 ]뉳w_v'T@+͔Sdz7A3,6Ҟ[pЉ^nUe捤ŏ3M6~(ц!S6 |ηԗ͔bmmZ+UD[q43&}/?ʉ3Ǐ /,nЗzPςpngVT+DV8fN\jcC}"{"R e4sNl< ",t #2J o p8卷/b*m`b;ڱ[Ij);8ɤcg߲o%RpTQ0PFigZbKs`5%pH'ʇ+RQGȬ[R|_AN 4-u| popGNŴZ~QaVښ}m͆ԜӎM;=(A=AKgWY2ډHPݗ}co=9~V*E'el6 ĐJΡse|!b5[Gt^ԍwG>djc&r2W4{zSPo=;iabأKCɉN-h9!E 76A}dvq-;|v[Z*4b) 370Q pUS˶kx68;簒,جk'ֵrU>P=Qᕘ4AhJ]9|޳ [93j*-M֫ւH@TLd\Ry0%Nd0m09kXQ.ؖѻV 仈,"1H90a];}.?E20b. ׋^6oH"k@M(n}̴Zٛ2*Lepݲ(n> ~=.:7EBYlLD\Tٸ0KƢ}܍٫) QC)WHIp^nTU|!hz7Kf9ChcϿiyn31ݬ; *3^8}'.o+* ̳2M_=%>,m"W,G&5{{5 Ά36 sq~;|)c<Ɨcz%.^ NH4w…V@~U_+m꧵ lHC Rn.|P/5X7;W-1`z3Ml z-Yms~ٸD~ʟ)~+l0R)|Mg ~|ݗϋ) /n(V̊z剱p_1c5ej_ 'K?)ݲj عw )DBWY\kk]wWԟ }g 0tê\D7&pjI#tOܺ]_g0{kShe]]okgW)͘촣tokv0R!ei`&;$Hq +Q? A"PemΑH+LM E]\K:Mj?4I01ArzPE[-5Ys~9I '=fV!e>.u^xƝXx7G WO姂%N$4& t7"ݫ"g[ePӛ+qwH%(Z[Ye}!ǽ[i_Qt<.4緽A )=(Rxvr]WMtL[S#0 PzQU 2TFy!e֤ixee1~0UatЮ|FR[[ǐX ZCdU86t(`3Tdhs0FXK=S*` IMFcTR]ۄE'>VFE(L!s- Q_rQ#\,ce@7eNXD $OMF34n*%[iohI$~ Rb$ZL|?),S*@9ȆI) u;\߇akrX!g$1mT]Q? 7>ʏ;ZČ7f,*F3#ezãRjg=t*\?9^o/zJQ+z~ۦh\gJ˴~Qq|—ѧ)b}73[?3_eQ̿5ǰˮd9K؁ZM,K]WIh>m8ja`F!kM<ѥ?{|=UJ1]Ƀ#QSi4:'1g0鼭-99{aN]1Y{?4&7PO 3 RО/ܕQLMo׮*+J$O1w`\BW< G %K3z4Jp6U0Eh$}hD6?fa,Ts&%ڷiv{//X3J^{ɭKر*To͛|kY隐țZ}H1c$87Q!srTP( g)'?s]1+%F߷޲- "ޡ=}0ːAIа3ΎsVB{_Uz *P&؎sLx'{ۋ\-٭n Jz(8/X7MU~˜詬]mANi#Ahs8uҏ:YJD~7+mDm ѭBZPM!to)_BP=z LKDגNHP6w#|ZS^GDYn|e5}Ao $+il9MW/q W&/I,IAɮD&!3"sIIx4/#ha{-q\㶕ٲ(]l+Mm+r1bYZczͅǮʔ^Q~b~3 6rn]' c Dh:֊ga,FcܷAf'ďT $ILp@sҾTĿ]VC0Dݜzynm >8F)Xmt5(z0AFsa@l_HNLz?GUb*V( AX) + ʷhh6{SO^SfN"y8zlz(dBxe}M3%bExɌ:Ev@-/":o:{شAn[ģaNr;&h5ЉMH/ KCϊRKsԊ]% ziE ir8?}!haK,AG0@xv0/ۉPi(ʘ^fE2 #7.z(zj X!Y53X]a,ߔIUv}p%oisG1xߊN Hͮ>P}g=9BY?#b{dEMOn0Bz3.fQp[rmÑoq:9DGپb {Q`$c&Q/% t0wJb99e,h [\sVpj.lأC*6m'ט6n%W|]%j4VF<@KYÉD,@f6Qd48 9˵NsGm0ccи(!,U8$w.| Y&{[HZ:\`\4%[,H\[5:r6=f"_/$EkݯS024>DPe񇣵Z6opڦ TM9y({OsadQvB[V )9eGyǢh~.~I0ƺx;3T^ih*0h$M/rss5|VmaKx~a/],hyx5m9*Xό};j)&kk O8ן@uĄ2:g::GUWh3$2u4Fm(I,0Ƿ韦nIqFhN~,b]ĒvoBpXnN?T{U,˙#zIu@}OU;lPüX T?mPW,6GtpƸ d|d}yZ D+"<3e#9k+lۮp`yXUSN !lyI(֊TK'#S.a0qnQSk+ocq~w(-CGݪp@i.%7v[a~Wǥ|h..P9<*!NS;/][ٺY9w?M 0WPA F Yi=_^\杔ZC./dU]OցŘ/<%+7N~G|J＜bʟֻ gy-Nᛠ1.z7S a;-D֨d#7JEg˝AѢ@\>$?$q;\X>O#~eG kX>ϥ ? ImP BTD|e W1%y,}^3;BCշ]Gci"P05snMB秣DB',Bqg~!,; +Dunb>Bo3s#r_haIvu޳ IjR6Ov#X]kfYwl3ewl#(P}BPK-׹5Fv3R|~+J;'JזU\ G>À#]x Dm1LVbAs&Q\*\DaE7u($q)f_ңoaMvf2R"c-zA=! 6NZӁ˶'tq+=3X!j"Zi4qKe4>HKN2;FOa8CȾp'Hk@&wpVbG\v`aB#i5,,=?0Z[o,t\Z*Fkx40|bmIhO[W&ڬxW3X ,mc06Gp#y tn3|&[ J ᦸ|ldzekDaL) N4 hjc|e|0M5rc6&8/ogNG~(!W[l{! \? HN!Y1UwLfav]p4O˾aggݥ't"}C5'\2x`T3K6ubnw 0c ר>xaR|1 ]1׷+ZcSʱѢ>λOҎgY/Pbj/Q]#1>|͓S0z} _2i汶=%@!NDѐN#V@E1p62)#r&cVZ 8<:F W]o;3\f͜4t sh0>WeG|SA3h}=r2!_$C~g[w" UD&!I rMӕE<膬e>a?SKa6&|{\f]D #(@.8=}p0J)|&e }s ^[:QmmcM$#h]7(G68j7  ڿۧW~|fܽGĮ2;qd 6Q)[VB _.b~V S|e `sKf"QCKH;2gw>=!iq~Cq+Wu:e?8*:IaV%k󑓂*li b9OhW|g=Gfլ3*.jɘ#.jO䦓p%fя(1&XA*d@DY| 8Q,58P1phFEzX`~mΖjZ @TG!u!뱵?5qxMnx qzyم3?YgשA\2ү1 ~{eʗ$:I1u`q~lhi1]ۼnfԳ 7gDL-6#_!6U8[iv(M11P+!97ǯy_3,d}%,LQ3~xY\Gcbhߔg@RV$*u۪ƓWzp|ŶII#<5d˘0=_vlzi$l2Gh 2RM׋ G,Ø#jЋ8XZE;pH6hp.f Wo}.Qڂ:0Z=b :LjUrU]JYuv][ha36DM**RLt_YidTVX+ PX$ROl4tCd-A.^"hh: ~4L z'atܼv_̾qo.Gjڽ&ЦV(m)霫bjQ9{s/WF`t>Ȝ̿䗎{ ׶khSY;sRDYYʑr-OREv!}?|`{P+QB{r]&a]9qYaiLN5fHF5|ςwZ~y^_G7ӗF&l{͟J|0 N*hAo3;H@gȻٿgV :7USPC14߅vGD|/:+4Ç1<&gaxvo.6ģ3 O_Z">] C ıo7c*1t @*u|KZW̝씛j|/D(q9jߣӯM/6B ntB }˧ F<Rc_͜@)1:VѼHULJ- ٽZ!<9tr|1?ȷ9*sCMp45oh WBpQ\ĩ Ki͜mSV=\;V5_77#taOqG?hWk^CH}6YGC"Dt4]+yuPWˁE+M?vsًOq{q~lѴ*u' jfHT; +:i$>Lotk l"ԯw !W(uJy~nn}WZ0lbF^QSveW@&NJCT@o\'L1D0+k,.F9OXc)-oFHGL):kgzxC@yGUB,L'~a$݁0ເR%C-h1eqz^{򔫱1WsO`E,b* upg`!Ao [,x0r)#pfͣ -?w/(|W]$֊ܔJL[QºӶXAdB¶Adts'8 A!k keSYg}ɱ%\(DuȀc"ʆᑒ~wbOxd!FƎr Nr>/\&g͂T62c` wOh&<Ο"3ntqoO]nSso,JO)^f/TĕvCL_tzG":)k*(9ܘJ{kI˝-Mijη`犉 Y6]Yj8Vxx*ZU\^XM3qRlTNWhXE!R#ps?O/ 3$ԝd(Fp- SΛ⛄Yx#?ʆz7C9 BKs}1xbbj([F4zeYΡeJmP^rn5c-̎32&ҦC2tEmE@(LA TB]H*]zoKAQ߭O8[U;,.|+OAP\J hOiZ̙\ Џaͥ66`ҳB,S^vi,4FfEƩ,!,@MԂ! $_2Y[ss0 ԻpX;UHOPDՎyXb,wSy` @/SMVVƙiy,0/kh辑Th4~Etw㡺e}yrhf=ӷ/G$ҧb~rni'~^#Q\%<[q?1*#;4YNd3@+fKOܴw/L[0'LޕdL]]ߠygtKtQ%).:BE0G=SzC8fi4BR~[?\zN/ 0H07ju>' CJ+wU͵irk*D%LmLᏺ[iu|NAkM"˒j䒚8_BIx}Bf M# n%(̀HF%&>%l?EQ3D*ȶAQsH E8NlM]T4@4+!嫡YU\*l@x1jhhyDқE͙uWvW47mk hsC)akbyDh S% .oӻ=ȻN'H`H:Gf-uJ&H? ARZ:-$+l%r1pB~jQ\9f`O`h@D 'Fu_U&W8?fKCLtioh;î[rbLhh` hÂU /FHSBG6]A%jZm Ԝvm~0?W5ňҪ'{T7J=wDnl?ӕ:?+CV6&,S M *H,X Ɣn Q 0i%=Dڨ`p ڙ~eλmgg< +Kaҟ, |AjMtrUe,wӜ3@v^Y\w}R#LV0:?rN&Ej33MV Cɞ8TG“@"҆(UB.W|@O6O5E"#iۣwh{:UJ܅+D8 +{g!H G\,3c6Ҍl6 '].]J?àCvPkMiM1b;;nذK._fzg#Vu`l'+scKpw%,0ZsÜz!Ay0XTuʢ[['UUWF2f J񙑧_d_)(_v(d)4)57̨C$}鋰:?p+r$!E\Y:ɖB?s&8>RMß3R*IұRXSEq\[56/$֓9` J+y+a;" H_|ChPrv╻hᝬC6!Vx2ȕ\UN"D\u?6`}(uJQxyMC*͇._0N%PIߨmi&b .LmcB-@ԩ"|f'*n]rCZZM2 חډ ,6.{81?%FHFKNgiF7ps!8)L0.'|Nվġ~Ce?6CA"qbdKN3Giŕw徾yҌ,Z?}@mBem;}= ,s +܏ժ\'0Σ$x¥b*~?)7-El>L`BZ6IBgeʑ<a$%u?(ng(}^AcF.oRH9cT@p jg?7xB74J$+AClGsp4P%e:k]I#Woe]0xld0Qyt==O^ɕ|~0N|@H4^g﯎_ ~zEٟh`'*IK%TAxO#? ^/JKѳ9@'5&-|wk>YmwΉyʼh+֤UxX{#_Bzj!(` @u5ebbkj׬DAe D_P!Ɖ4hI)*6 q;х #)'[չ]X\/8*$Rb+M6l`G^nOq%8jcy<"v)[[G_팲xq n3 |N950-dӱہ ?ybK5cv̟@) !j< @:+?V9˺ IyWFpQ7YPd>*OMZ!ߗL$@X#@t95Difs.Ba ]]DGSa@t4TA@lh7*Uv|*'04>4SH6@ԁV{7ʯmEA8EX}c!ě'*χqZ)]W-r\ĝ&v@'sXEUԑɺ5 bt*Hsbh-. :)O!GX ސtZ=OJ4m=HМNuo&tS}v5gI=h"T _M0(3k/@|7]8AH0])(["e_i]e6n2OU3U(ӷ<ya>,-q4U$F-"hET@+֦~[C6-ֱrSfw@1l}YX^V68DRhl2aușe0nBXsmz5!2t3&ki G83㡜g-2b,I!n| ǫtKwxTZSB6T ā^R8aCl~[-_N U4 D$'!T;S<%>GM`㼮IpgU d&zr|ʚ1Ts+T,Qf.XG<F" 2XVEPEFV*Y%ۋ_鯤X!)QumKX6/<"==H1<Wn,LiKw93ړv!DJl ~@0z҇0m's<-~#V#e;+:8迵юxb9yr֗~mt^18y]aG'6%m?*r;~qïtpeC}N2-Zf(ȏhf7]^L%M UIPom+ݨ̳`yJ@ IMUƝ#zX 0W4NBnt[t:z_HVmK"M=,mUf&Wio(V-'6 r 5C@ۤ:6YB\_ʬ( Z+rF)pc'LaQT7`A7fbfjvP0ђ/DbR6hkNtۍZtoA] MeoDS%6tLW &`E0r&(9?=bmeNyH,;ᖆFD6xh!m!wrq֨0)ѭ%>)?&| QpCYH^qwha\A/͜Ι cETF_AˏJN]2جt|J%7Y1ֲ k\ Rp x P*)6y\@s `t1U"J[<6*˓P YjI)wrC9Ed{%{1}jx-QyBՑ0t w:gwq{+_ &rߪMS3#gG[ɹ?x.LYL~g O8&7Xe`WV X Ix͕r %Hj'3scp%gJpz|Kxu4;pLD{)ɝB9w}J6ʅ7a FU2u~=Ѱ87H|9@v!?ڪ꽳+a8j=L˱RI˰v+`˺jڋVRw/_O66=GxOvD"ݚ#[Ot#D\欵8#p<ʍz^ṷ%YU*Zn'!;;#"l*6Mt97"%վoVpRRU w:EB/M !Fy/##>'ԦLFy+N5nn} !#2 e6M^uɦ,Vo=?7| %ەh4p !Rٍ=u\%7 N:SBR-꩖BsdR01a z)GMh@Ut׊2oƞ[}wPQhm^.X^=XP'VSHePQUX3,٫~T_iL}=&limő^P}gH$§%_#0 ?~Tu$:i@|}n`/]P"qYߡWZI6?$b͆Fo<ف a' h\IݿͲ:i {3 m K R}|$B#+G+;oALyq%R`TfBÜaa F%eЊ~.D<ݼ$ ;Y!vDC ؿm$)W(fnzJ٩@]W #(DՂ16ӂgX('f.@D3wM|m+'wS(t}GْjqɁpExd t(†? =KcEf6=06DY4< S`+ɰ\yc a[ y`]F"ҊoѼreXmvDGDǰ2Qjv9Jh|bz0:54gQEL Ç O^}|02_ڡr: cQʗ2Or%܈֛os4Yr}|+k W`ĺzs1ԉra9^$Ȝcdzy}Rpp*cS`0=t5 >~"Xcg/N&X2ňGnBEn͂  P*X,٧$םG=:^ ӄ/ ݬƳ*__'(a3W8j$r镸P5P:!4p.QTM%0EPS?P n:bEjIWJe\]T$4P|>)!H?a~񃨔@qR%ڙ"&nfH PD:Y \b/9w(z'=[2TNh˜!s [j,wѥϠ,pA1޹̕wF!=a; P!6(p@;p'+)*aX51hMV7>(~܍o6_yOcF%u#rA̡fEaHJ`vcљ[{ r/#H2fy_&'@Vq#8Om@0ɓQ6kFJi Lf}[#TੴJ Ux Ao.aZ}ZB=r5)A@vAerDwZ"÷Aț`[,xPDt Хe) /֔pi3smg%9U%)۹mA=PqbW2 ]w xP\sipd֩l Zj>^NqB&ٍZ fK0wFN7ǚr U{*rߟrBtFN\F CMOc@^{+2UD9ig7!,1j\&Jᭈ3H뫅}Yu6"kGS 5OK-=yQ /6 [RB6w)ce~?b4 ӍPK/A/&/C̒`<吰+BI"NEf6kx2Iߜ1bsVT/bg~Nh@ٵׂi|Y9:+gc?9dYk䎙2562q vު`EUeqeNQ0qC6xonP .ЇcECv ڬh{Y')!UE7Y{ɰђ-z픘Om}#m&, $H7)!L3+V tGD | w~7V,L8;9}TŤeڕ$־GՅ h<1\8?@7_Crd\d/$iC& >ߞs/m[cXG!| |";ƑPi.M퀔z,v`Tl q -/ I"'υ9==僨$1!_ ǛkޚwQhz?gGM;s8M:*n _mv\KN"KTsYMɞuԍ>\q3[PT,s!FJ8]wR`zC{F(h)~6|/jONDu(dq#XL͉ˌޜ~lF=:D*WWZa1ƒ8^ |ъ^k+ Ɇo͝-y61 y4wza@B q"3X+o1f*3#?k:ydAw՛ɾ9 ŪRr$\)+A.ւ ]:FJI( 2l6߳9;6MbM㬾?uaE宯׬]C܅wppS"']vm81:@|&0uű[ nkl`۴+sF@9Xhs\ 8ܿW%EVM2ߋ>W&>ݵNrK9gGVW4qYNϊ UbO ifN ewN.k ԫm%kKDh_i-qGtkdLdF*l݃o7Z V2 s = O{ODݘ_$iP~3#uL@^0^'2,{ᐜE˲;ZdM oKx̆)-?ZkHJcXǔ.K5ݭ<nN&t/Ay=m;u1t i?ȷBQ׶!^Ȗ=IHl[ ; A.o =yzIV])f({=if\N?$ ]=iPt5 E!ʋ2Ua-p̷4UްL<`YjFpk2,]c!;LюsK` - H'C/4C8[g@S&g R3z_gKrXQniۚwʪ4}{m`KG Eveξ1a<;f^wCuu,uFx*YV^f?MCv쯧A_ڵZO'v g?mz4)>y\6KQf Dg"Lp960}`:,r ތIuF5ۘNq.<5g ߕ S|!wX!7~^Xsg0e:;pZjHS9&F'0?9lmvL!6Jꇳ?n' /M! ʥpcn_ׇ>8, /" b_+&$p56@e!m`>[${Z/miZ^QSB.(_]/V7, KoEȣ^{,Ùil@3S)K+r-8(Ѯ#>VAIP&S:'C7qVL0h4D)b  ?:aބ nf-2F,Eׅ.P4w`XӰ%J,ѩ_`R@W@,/u{Jm Ri~޽F&a1h/|‰GˀsjI4ޢA^Lj-$-֟݊OهD+!n|^:ҞLPVrYyQn!*u 9Յq2*a_- 1yލFҀ׀pvx*aSUÐ,1K)@PY/ MljټKwTPD:m^,[@g>ăAдxs7BAI1);š}y@\SPe91ܝ!|"Kt? :j s~c_ -'9r:]r-1Gd8(ߵtM@O'8x!Thxfy,fg=#Gc6>\=kkƩPiAXbA% o`a3u\l]I:b➰GdyzoE#/03~5wxSFH¡3VʹMGLaݬ\wMַwNlJN@)T"c'".ihėf|Uu":r;Ǭ}uh[  IK'q#Xxů'eϚߊ8 .7} 6MH KNJu<;GX_|\~ QLD0M.CmR8rKP^5p۸=gbM'#x~d4 2t\*UsSPrW[) )]&mޭ%J%Y{0wҨv܍Ye*,N@\ 6Lݒh7ӻ{"8Thξ=\֢c~[/1D9|2 8f X2S| DPSF -Jbpj~Wo#٣@ wT4.hHփS? QmݞuʲD*sW6taU7Z|X (T)ʡ:tj/F)7N[Rb.$͠f/ꘉUQ#o]M}ZԆQKQ4;%R6C' k۹-J&>jq#jK ASXުR[0j Ah4R pCĻ[ ѺyB;(#C2khqo#fa/t%dN"y$hian`Y^oe+p9%^C{,j=-vRKwƆOA3Ne$T;/Fd~虪i[3b<"p=Nh쒎4Kh>$S}M}\;rB?7^QlwS_J?7-v.g:+ q:q-5e3Bçzԝͽ A_G:3>oq=1M osM{K,M@f&:ŽWMvWH8|wB1Ooo(w> B\U3f`aݵ_*hb0f4`@Y0\ؗf&1E¯\8 r4Q 6x7;bT릇۬j.?'&1Y4:Hq$ʲA4VWEq[42&7ww(Z[VJHLqxV>d]d9tuvYY' _3T߼j|%"^KZib~sAG_Seۋ+rpC܎".r[I> D lW,qHoHw"qyY}PKAuN $Rboj8rlWI) T?ĸ/͡ܛfb//ؘ,:fe}uAOS~mݑTc'I'\DYweԓxGN| 2 7j uZƃNSE j/˽@^ [[腐 _0":u>aq6"(F xBg_p`A'DbhUQh1;U 7TH?]O=Hқ Ɩ;$w&B=¶lI~ZvMrx_ 9/mhXho$/ZdhKK1p 7|]G0S [6.s"&$K~3:^ nZӓøLcΰ W(ʷ] 4&ddA,~!Np## BTG2_c>2A/Ž12 8(n}-}9>l;K,;"/uۘCA%vGަ }<MWG]\$po ]vWvI*9EXi%|.M'n%yCO-H5Mig):JJ>xіpb> ͑!3Ӄ ubGް8!] p!s3 o !-LeP X k8=zO END`Lt!GɋA ۺ؊ 8jMɄB_hnO _JgU%M8% 8>IS~Ƣ4:A?c)@+4M< =< ʞs.ojΒ# y-}mri1=S/ .`Qj0K{(9T>`1NWQ ѫW ԷG7B?KSgtar>ޭc;g2-{z[z(E>ona?$;:`D PܨW4Bo_Kn 9/dhֺ4T-3}UfقQ ;ם(5cD{h~g!3DGVg&^w:jnJn?{S[rQÃf ]&n6 =WJ')Ecj1y:zP Rh:V47RjBv]ϢXqɉt^$Lػx rՏ0y^y޵=P}!eLQ r #8Uu'xgg,cHN Ƒ^$AFaOnWxMŠԧr5(.w -/YdvwIvI hT! )DJlX87Tp|_w X2֘'<:Ie A4z9 7?~bHR"6}P@Xњcy)gq._!" U_&䍺, kKSXMm; T;hNQ|лQ /wԦҺ"(g^=a;$(~Sx"/K㊞cu"AM-lAEHzeM|]x~ga a#]Yloo2L߽_V " AYkݛ_#pGfd2<6iP:w|;5TK8Ad (&8c_ocwU&g;eG!'`g[ɡvK2İՀ%" H''SȇgbtqoB2"< 9% zǕ%f5Q, L<.0`1!> tssgLKɊ3J3ٵ i޽I,w 'Ԗc4$7w|GzY-z=/MyˑFtʽ3X"'_AoaiyNJ<+$lK 4j/K]D /zw Ϸ,=%=a#G+禃 |j? FB޲mnПό-U٣p{#吨`З"8 BF>a>xBlEbnrO\|}J2NzXf1k?4[C:8! -.KN y+]ݫ>PH } f㔵)Hlތ2 im* )?z3vuʔuoll([^ϖW>Om8`8~]+TnF s.W Bfܤ5'ݧ4z;NjӘ3quJ=ex%h:#fn`eKzpMΨTJ{KKq 2hwP`u5mIފ-gqsI^`{ՊsXaKB5KKU91Y /.BHw01C7, zmU#B,)Er͗vI[cœM$1^ ™[5Cgn>Oahmxg~襐?iɽ%1=6k4 ܘkX'%K"5ɝ#$ 2su71НeIej{ԺŠ/<zvL H2z`z_@ߨ78\6pVC%6) JoJWO.$f M_B#Y;_^=K$͒zAU()ܕWH3}kGpBCT3FǹYXq-T@L.z! -R{ LqHjkGARӴؒMDZDgt1bQ5)͋oP|U8p*uBe>З/9W(א;4vM- e vz8+GfikZbI¼g+/LuP5E{L=>3zYmQҀ~9yfuY 뾷cnaq{O ?D82Zr7eq/h89tig1jH3$cKJuQt&,NʉTz8sͦvZɎ[(Ԃm=ƢX@\Eu쾋A"s6QrY=Tۘ[AAfRHrK?+_) k=*>`?f-ED@kSwv49GpHM18Ȝ<Խ]8 uvprG1P\fV 1]PrD08n!ѵl $]jg~YF;{_R*HZ%yTNaؼF5 5r'=P?heAwC9`"Nx>W%uż|ltr,=6zo: h7-Hv..Q`Y\V}/\~c[J@CUs!]GN:#g3S**)ӗʧ :Ê_%Ky" ܁Ah\aOJE{'I Yc" ..RcxntI`"688Y~o\o|9gW&[?w7릐T5GVrS 2 @rdmU.6BSiWäɝPI9ZI%4԰vb!'Z:5rPɎ*K0vFᜤ"?iӚAIm=f/+z)8/DKck3Wpn"b Um@qIC_,vLI^=zs+0A Bp~\2HwM6W6>5.'BニC nṧ@ֈ =p9SK\͔M#±REBAuGL@91%w1XV|Ma\92D Ќw6ݸ ?`$ҧzs','}; ^4;8^"b/gIr@)8 hA:We+lK@ |m2`y1bؓNol@4Sv+lM[z>|CUQ2#۔$;er(-7>-2މy$W/%S9k‰7vLJ|.5oe(6 NE[Jy8gby>D;YeډdEո !&O,-kFk}epj!o8;E,Ef~|8ӥ Hxః41n/,/qLp>S-6\yXx()21QX'.Kj}*e#MƎXvx!#4p`nCJ1FapuΗvN$ؽ"GW ՆƎæxLo۫ 4W1<G?=JUhхn]K.ahdw-AG9Gj[',FKR--^bVP>%(Ay,Xu{֏f { J~ 5xi[CcrDYc)3O/ [|YtKod LhVr#](YӥW -{B ggY9݇)gZ9!c<f&? 뚠dU潤`K #ʀ܈Ա KbZBB]%Bmʖ9yk(~yϽgYrحj)UU ]8iSiv )µ걸)#E\Dg bA+-F}5Z_FC ԰vrl8=KaiJ沽T G'^6]ͻ2.Z1aܚIm)#cnӴ>cPMBvZ?pp=H&!F ́M`%ꇝV.C^%i_kwQr\z*TsbMĤ"xd4\St+UVOv(UFw|svXud 1+ $c ="EhSy)bzYR_eQJQEN 3d~O+tJΓg0Xիd'D}vp;b9X6.mMoM/ٰ[و1iJ6BWۙZ0I?PlT-ȯ. Kr)>~"U>7me؏ͺoO@0(/nstsw㋭2?۬w_:g۰lON֖lѳQYz~$JddUw0]9G<^3`azҼ`dr<]~::`r%72vh#Fȥ*R1*P{,G2y/~>\/%x*5ԏCU"ofxm!(!X ~%ӁgW[ӲNnWGVQ=PG PlؗJgV*s1XS43v+>,p:Ԑ (n3|,v 0//cm=,֩d4@虭H)l %.IFՠZPPFmzmܷC 'E42A˲JԛARNJHC;Qi^2] n=9&^sùqqR2E)5"Hk61zrw1:yg#(jN1ӑq{% 3; S,u?R{qi4kU.p?jT\5ZHI@_8WR<L%#wڨkjMGGV!\[ۢ7w h{WWYL^zdMy/7MJD-YQzmyS:V |r~JQÔ6!{~S IOo嘈GHGn S|?#{~#̓.kNP`X5ɖzѠ>wV.R>x!1'U>8^M}BecY(?GMy0)C=Ak K` .<{`nJ|f"DRkiIa,Z2< 5nLf %T0RU Yɜ5ȭД9+hSfEovo1ƻIZ<+i/kշ l/)|<0Ub _ω] %^pnٖB^EލQ|j>Y=d+5/hqGajDL5w"n+\b= yH- AP}qyΰ῵$$,̾{i+i(CN_Y+W:N6`64s`9H P$I?7̣5rٕ)Z<0OhZn:Mҿ~p(4N[,+Yr/j6*%ʽo|T*Qc?xrrW6q{6R.<%IحIg(_̹8JCPC/*3B#~hqx\lxa/hRځ栎WV_`lɧŧkq GoUBlq.Vfc8"1PAwh>`aTZ0WB}Uː]:T{ۚ >!'bE7j5 E6D ke5n/5ZtJ5<]QΕMKbtXi;F$׀X7^EޞC a2oѪpզذ~C4  @NkI% Ayc5xLGi1F?ϘW={\K_p!3gds5:*\aYlw<î_wG5zˏKwтHx dJZ[u\F|[vb/+D/Zv˹^1]^n c07Vΰ,-꿲`^Hx1j$\NAwiE@ &Ң3E6O=E鎏?Cy5:yDۂ{R 4oCu![1'%Z2tћ# 1K԰E) ^!BeBadur ,雉9>rQ: 7\4[?uoo/ҵƢ$`$a\^2u/ F$.6*b9k_Do>%`~gQ2=Û18dL JN_c }~bR#^[W3<m.BO[`֘( dj҂Y(#mYvgبq}"A> e,5TdN*(Iɜ/%np5OW=r{XM|Юy$}iGrPX "r.(p5VfQ[v*lŚ49 C(MYr7q ]įk1mTSrb GH,WqTHclmX7aW"dj2g3N<4)\`T roVR6%4?V7=;0tcM\Q6]&%'0رf[ %wٹx}atަ`2`z3_seay+!mVXm刺lSv07,Trjnn\2 6A߸=7ކyG -rØD% jO >jlK85ҳWPn=^΃#G'"A!sӊy%~WOAIlU5`N^a"@37M^p 20-Akw=˝*2Gj 3\ LmC[o-lTW?0+2hc2W *Gu7p΂"|vm˵nwtF% i[a'iЯD]]r6Ix2"K˺sHź sM1e~}$H`eZq~tJ]zo~܂W0ڮj14s =岪& `n @E+͎Gm/6}?f4iO k0e8Jޢէ\yl^oZ)X/ibS{|D`>yL sʯ2)Bg7IgomGJZ}@B2Ӷ@ oĐn2$\B3$~CyD*wTپ6XAp*0JA#ːi- A>m64?sY)t]pmw]KǺs$!ڳ(plSTQ~ lkM;X((Y| xr+,þ>H=w6c4/떼 9J#c۴23co"է;g 69yQCWM^k5GLN5x3`gTR9DŽy1&""%6 f=ΚòNݘʕ6lgL&JN%_ZlFJ5_>Ŧoݨ!N[ 5;:N! ߚDIˋmkEjWSBWk. >] Q b; C' TUR>cl ”'[(с(bc;OSt\fѧXĹ#0WkQtpIj4ö1VbdĝG1;vb؂7ie—Sm&-+|J]*5Bdy *nrt1;xٷ\)RzmyI%N )i\-9% )nF§ۢ#?='84DڒTm J'-ѱD^,IrQ$βcG7X̐|m?FZQ|{9y eQ܅{1P^hڦrE뛧Tps/v2Z 9;,ϋ掩C_K5 RJT|jߑj5<چ`+H+5@LW1W\grAgޤq#+=eZOQ%x'uoscHCJ}ݽdٰ8X!H3TKZmEeUmNho{OJ&Wٲ&~s['] #d> ZL|YJ;JamJ l$Σ @WBqGP";Vao⎤r1k*mf;*vR Ǚ_[XOCŦw֨G$K. ux+gYNGM.<ndxA7PΫqm⟕پr{LLn0?l,]ͱª] /gTA6]6 ;Dh!WU y@ N A1 CBEڌ~$̟\KAQw1ےzmi6j [}mϜ\OgܿQKT'7U3bJw聟è) @*=рs=QlA*~Ưz%NiclFSJ16@MSIv|̊k%iDwk'&OBH/Ǿvh=aS, V l ŮD=`„#@O(6̗{bn67.85~\ćshJ>&"⇏gW9lwM|r2o1/sbat O\v(u~@DLbS9u^t˴3Nm cB ܇ޤ۵,BS*Dt/#<Z,T:$ tyFu+:!Y^+~}*F|*ѵԆ҅я"<']KG<]쉮(I !V\Z1%ǜP8iAdb&;<\*Ǐ(@ >=qYͯuDc颖Wޮܚu)IAB%.Nl~.МUo^Nab\aC -0R6XM|GVl0 O0r19?|Qj DN"u V -_Va(wH]™]@ErfxSJ&ZVa`Bˋ>9z+-)W|(^LFb/jrFyt`koPȳUڳ\*18}4HQK0 -i~N߱ab-1Y,4.aV JC qOA91Fig;^Т6JbaVp2<1l$JgN.udDz-PQ,Oxk5ܫؘ|bSl+.Lij C&ŀ*\I+O&DhTXU:w΅QMubpFJ] ڰWR-ފqKT.ITS@~>AH؄GameU2ǗP7Cڧ2hHVlxo|#̥^Kuht?<3nz7Z$L™hlO9jH0My6k9 *kwZQڃh5sxvrF(rT2l &bgط?b>EAѼGk^`X5vmy`ugRXxFm=jj|sW9;|B10!] M{FewݝIS<֍Rt5XS_JUNj`V]eA?E1BX).icpV|nUzCp'C؋FQgx=ԅ5JJϰj&\Mί)( vWiIao03SHJ3@Ⱥ=RI Gv6;2gf*Xsd@≟"Y/_`w%q.XPUYVA)n4+bAǶpB&EkdwzJȳS&gJ J[ͣ}i.h q_k:i|d"[6C1NV\1 2&{IM `K<.V }z 8)wЎxTО)p@fY-%nm<!X&qo)8h".~tv ,tjz٘58҄;P.'G*PkE3.SC'6ݟ`:[wwHF1*uW&5.E)/g B {7,I$ȷ^ kT A"3prtۄ|ЀgaR@+-.6e>c.H^8/k)򬾉r3_23z!STmxxSDž~*7fV^Ą!q$Pr"=Ͱޚ-5"ދoL1xϨ=wgT݂0܌$oE A3krL3Utʨ͢-Rd[L1M/f>?gh>[!^sgsWW,s11Fqզ=|yX^~:N#l٩)FҔt ;=%dZ>\q8$t=?pSn ͙Pe3E^R0JLH~6NǾ ,SkmU(30RSU'MӘIE%Ltsi0`-nk|K\[?ޕt ܷk4qeM gI8}コ9UΙ4jG .*n(Qq>t~V4}17"=7٦'^$*"\|r2xŝ-Ï؀&xD {_sk{ 7WLVt@fqG@*9@)WmߤP'EQ=c"x >5T9 {&+Mr? /zUQ(hYK(5}dsWU {u>39Wp6䟋+GӪ.n Tt*2U9MՇeUaU6dTz' '{D#*/MDdcC;_?I IɃY 6UCu=!,jXFST0֬|(j kO{y.ꩱV5ڑ.afa3f'tĈJ Ba,IFfEY|>Vd<}ޖ7Dv6혠:h%yvZ+3 _;$*t"{|:PW e)8V{Kw:؛k3d2#i i*r aR_zJc;J4^[>>dy<6JH&#AQ~8޴w%c{3vܗE#ϲ=H\0v3%m| )8x|n֊P!.m&@UH}ש5GѮoQboǰLbjErW"^|Y6κμgz}Vk~ыv7&-t$s;Saĺ€P =GoBGUzZ$xA #ܵUYmbD",`ph;uE Ws\bSB\k'8x:ח .賛w\@CǤB9N8BR 4V gg(4)cojeh-COA0$UzL>eWA/ݓ>Y-]Yd`#⋀{Y*b44ꤹp J/-C._GdaGjn7wk%^qE)vY%nDUPy' o >MD6Ŏ/Ԡkr*bDJ~\3}^r40R\_<,PAq3m P!LVH_FL,Abyz0XU[: 3f9?+@ŢmH:T ,g )!6 4O"۞`NvAP{E'W.ݡg8A GG3Mι 1+]% Df2knQ'35@E,!6Mr#LIGx/ƀedY.sDZ}6XPSnY霮%tzX b JУKp然Y ef= [}gÙ jsp~Ƴ"36(\Cz&`Ժs=a^A+=Z7~T;=/@bb#sFX?<V8G6Y2zkѶp7 z"zOm,EN8Ǟi%d pۛPSd1چw9rĶ-Y[g?dk^Oդ]ϙ*- pA}b> u,qn|=*Y+a uq[&MD< H<ՂB<cm 丮U$Vkz hԭQyҖ L˲I #۪>U48<%$욯UZbbw2~c:{IןލM!g}ՔN |(spcj +[fw*3ݍ'vd`-!`[sXͻ&-S95Nk{R F)BA.7hnEk͹y؂xJ}=eygsZA|&$Ճv5`~TVhB@quq-p!xs*ONxY0`\Y.?Z7ApA,#|v u!u1Ar tԪos )8gU|)pOU}VT"fT)c͡ZKgHVSt^xK\qID%F=U'{5 ؂ux\u}?k&*o2[ _P f;8'5Y{dYQ(o@ݸ[#8uGIBc8ܭݡWA&!i{5(^VBKJdt{֗c0P]^_?G@}T[]['+= i<\_FuȮfϫCgcsG<gP&81C^)ICp4V 8NueֿO( ap@7;"Eʞ\̒W_+&YL P 3OUu!}SDiNZs!tsmY^]02Z]AzOz+Jfyf&@4 raUY2 (c*$-dIIF/*F W0I@9߂$!׮tx1>@R՗d75!x58.'1=v79(BQy~8rbh>U{0G6^Dَ2w2aӛ@^>01'3[plO Z8: ރXi#r& K<>JSS颿WejYU!#AeHɏ$0 &-&W^m06Wl;hYsoi  iӣ+4Ϟ+P^QRݝYDh oUAMFl/EΔ<20QN&]+Q/+4R6獻D(&u&f⥨ŻZSh8JO'4}Y;EA 0",'[>{h kk>[WPx_E>fq.XYC3$ n7›z$h'.b/۞lAw )ҍMQfwT9ׄ_1:m5O%m8Z Dl-S3Y4OQ{Q&zԒoo[*DUo嬭 ZiocO&Z+q[Q/(9 \=e@ԑWʦ5Z)ei# rK`p&[(uX+32xX4 RH4Wj9adh3DĠاoH%^JW )n!O|Wɽ?&ʼeɰLy3l] c *EP?&oC1V> 580N\ujS4P6/C:Z`d]B?uf-ܲ&2?^uGImWB\qONP.*|LnV5;2sI(f!Qx{KkmN;u0- Q"8"xY,W";šVyIY[6fݻ4K*PvVa%Sࣼplj<Б_dɩss:ǣ`߻Y>hbOYM[hFօ U_5|QCNH$ck$,/鹲apxf Wx౯ۛ-}AY uW׼.•EŤyBd,~'҈JɂM=?ӥIO+[Ty1O+ v~)BR|u5#{ 6ti %꘹&o.$4#2?ɸANtZ35lYZ͟FS(H࿿ KbrЅx}uh g[NH^NJgQxU3㙿t[ 4imaN\ H11*rWiBӰ<*nxΝ#o6Gy+:ڒʏeVqr|qGªPJbN͍b͸2 օ&qv+W"vn6?55hWnYNBFS$p/ -#,&95ļVOWqJjqla' ([oJD}dԩgƜ۹&7||xaB\Dy\\Dnw91@J; goӍu5 Xమ =1,OvK6.c+[[;7]X4yc:Smu#JNC66\ `$]Ӎv (X q141-b;僦Ee1jq`yn (]AK:h ^h,z8)A 3X=A5bkBʇzh0,SN`h1_hkMOݚ^s6bۯKN(Aqp5Osm FRҙ uʧ&SrwF4u"kdk0¡"dvxŖ)^ @z1$V8OqSȸݙQ[w '0finpoMgW(.`&k Ǚ>L>_"_y銙aXEf"81NY!$71e=Ei5fv|bEZ1_u{K4e]0S3<0I5&TXX?}As)):5ҩMY糩-/{֋XDkAH$#T Dos%Fky5]rmef3d6T L?SQ2p$I)GxCv@N!X:(}CcOf.?1a-ءYqCN&M{697Kᖛɾ5״ITl@F Y%h w.NpfBNݠ=|`X-fLJ/wzm|Uņl+d-m2yċגd#Xz?i-Ӥ'ᯈFEA  !T(8cϾ~2kt!|F8B Gq >xGkB9+}1O'83&m nH_ʞ~osHMy/{*L RJ<(2:'J^f)@ "mO_Ob*ң]H'GYh&$ɬJZm^v2P┩ҮXPwGWvM'7:(4,NLj'ՖuHDUӒҴ&\4RE~?$ ጗9g F(^tWIm+Vφ\ Ϊw#kfEVe aMVZ5r/{bƞnCBD}$LFee7௘}C) L$n;#cq5/s{|>H %.Q;(e "ԕloͦ 돟m9{[z"]p"Kǜ w?*vut(/ Gd |Oz$[p nj$QZͼEuflK_faLǻ%DuK]Bx׭-F*ߕ"R6 ,KBAR1I4Tggo4V) ܔ3&'i DU;}4CGѹ4CfkJA-߁g^a25leAZ3j&+uu +; Ċ %؃ihk% +AL6`uwQO<XEHRq~ϧ۸ߥ_ l_-c|BP{SkG=|Z1rX{e{[DRj<ă)pĊ81|ɖAkNAwlqhN07dפ pll-͆* 7$tVLY/0)7KjB$A8[}Nw ̒q@uG@8}%(nG!dRd=!R_k%IyU8i_T%V/3IҐcQ)Ȇ/pA +%lQktVe^ 6\Z$ʤՃ==P\SӋ7 Tv. -LC48OMzJ3|}[XJGgDpM\`(ƌAhE'qKs}b) {N~U'Gu5K<گdV"Uvi198!ߩڢӜңꅘoQIJ1SaqY tN.ݕE:7Z{6&~_3ncXQl3[a ;xWBgK뺷)`<ło 6, g,yވVc*ϲ&aWdD? Q:6H]]U,myu)Zf\8^ Άb;{]ݢPHz*>*ػsP4Ҍr X)mVv̪dUr L$LOD51[]vܜǣ4qv[~KN<< :W !YcY DRA:3 ~cNrxҜk<DY`ExAG%b?rަmDϯ9.!7G|5<=_-6*&#? Z`Ў=}ߞLiz9It+,OĊ%jW1{H,0:M߀MÁaȇ;֢K#˼ʺ\^uf^w lZh74`,pS~C6L=I:y<=/xЌԈOA=GpbKU;e`\bBo񩷅|%Kk [2|`Y1{H3OuV;ן={UJ Dm[ -ҠT$YJG)/*/,uI37~z%?eH=c>RY;)*XUc'Pmùc7H乱087cU[32" fv5!G(ukuJyQ}w"[*cz7RT%2`Hk&c u~`찀YIr=ghjSqzEEKSaڴh!\) H'H,/tnnOQ@nr}T<@25{7Ǫ_"e0Q4v`IѰaie}!M"G!b,df 8`RՖcȤi}wś{$ \ouJSHyXmrƤ=uS޳x i50p9R4Yh1FJpMѕEܪB~:~4IP@pTֺ%vYw]b7"2u5zEZLV~@CJ?hdބ` k,(Ґ =*T3}}:6x;yǟ\ X6~-zzFĩ qcl4gvXkt!3Q_JAJv`odˀU \,u>},)e,Q@VנFp&d@mut`Ƽ{$]{wp/羸KMwo@0 75jϭ5CdťKC @͵\ 5ڕ[IV 6`zW jBh[ |"[@ϴ95Rf>-<{CYJ"k] .f4glU5 qs:lF}VQCB¾pMU ˆb6ky>ƀqIHӖ|257^F ]⠐8}˩) ܎J"~Ttd^Bd]Y;hؖ_4ga0Hc§w g@2sd+vr>g-Os_[ԀBGf:o j1V׏c^Dt%'$ϤT%Iî?aL=eAGi4簩oY3QmeR bA{yiu %AiNPH%ҋfmq]rUT@C )2x}4c-r: yh,ݗ$'yěz>HRVdT;y'gnC0Ή"mrꋃ? gb]p|KʛQE7B\$<9mYE23f8"(򆽹5?m7*]N[Ps\ ,ǝY :rT6[*#!*O[-"8]0 u<-@GJA[B@oLrף, 'yXӃ :EOy=I6d ҮCїg 9hNJZmY#AD O.ڷy@!%Y5EqO`N;\["{:@-~l bzadw"\bNcE͕5$!'`ndn&wvVĦ!d;䢏a wAT&[ "T_(Cf?8vHkĵ{/JFU!pu-nU?Wey49g¡R9Ưx82Aa`)e Z\v:al%bKq{ O10PR#Jjf-hi vMPG u)]*{yðS,0("^Os}bR&ǿWnvO#΁]t|̍QqS~ W&6E'y^jKf)'lѭĩf3iXeXDsH:'>̩0WԕjIOsA^ XQPVV;s-_G7tك 2jY{*L2'bFiI̿3`NWJb淍oV27@M# !t (3*WSr0c\qF!'u/A߂dlN9+ ӀVnl ,nQK%?~Q9E%{鯟'GNJx<9]2^Džo)ȋ1^[n-s34,B4uǵ7 2 ޝfJkI-^tR"|= qṊ?iZq6?PΘ01i?TMWh[4OC!Uiö́ZyXA #n\&*Y4up1 Kjq!H7C51tZ_Xn 4 %;&뵱%dוcDZhôgs5ClLw Q-f;!s[__eYHj)8i/%Ʝm^}eAkH-Mɏoόl;A+wIgk6o?dO~6O9~}`iI)C)@K>&gg7-2"F/"KY&{m63CLF .#yiԵ7cmP5˃ŪeX"D-6Hc)LB-oTj/(Z>nоC2U,;S- wg]ce&f!JW Nf_bLR5 j6 o@A2 *^jlT$$z]5pǥWlUm@hEr+/K541NmA)/ja¢DCkv[ŲY #/)ziC), @2gަ2m=l6!Ϫ ~ݑ&- ܄Q/a.}{Mn4h%7> +GG4uyzLVp,{'?X%חXD#8uh1U5}i@R"E0 l,ehM. l]Tn@ivYG(MuY|aCkbcdEWE{^Sy_'juKawud\Kyl< ц'pt_W l^a t߼b&Mdu3ZK\5&Ϲڈh|ͤ?Lm12&72[$)ZID;nFx?q%3ß,*[LIS($`:{f7bJț$]H/7o0}'*Ӳ4>G%gUɜ&3o]3cY~KQo̗\ѿcV;ߴӕ-&G̸&MCF㬫| liP2yHuNPoֳzm7I2et5ߝ,߻*x-AXo|4%^ae' ]X]{u.Gi9%60WP"t>CѵM1Px^th7"Ib|iyIL=_ yYp59ޔp \9kv8\?C-Oʏ:JėSLPô03k0҃c q,C#'; [f3"VVqo XonLX֯z2LfBgx?CFS"-}7ҩ17CB1o 9&nQYx JiۼY%N#dDh?TBBJKDrep)ԙvNZ{^Nqs+UHo6^t\PNaI0!UAPW,24,6Rp@ϗWX2yz?3jЧ2 g^k'+IF͓mL]4׺vSF8%w @BU; B,"U ZxE_{wz2K-_Mr s9Ƴ,& w?(Ƭ[+5P r–..T=T$Q~2V~"]8/!c^ Ӧ#/[ mҷp2O z,77 `UZ6FPfs= .#<ݙ߹i!SeԊAgWްOˌOipz6ӓv]vF)Qp|\qω {`Ԗ0l&hZ `5|zh`b .s6^e Mq{i-^XL-)UipLg,Ъ\*? ^#լ8m/Z&1?vB: }3޲@l7f#:w<E%BeJJK%Ĉ, X"r=B9\uy &3jvrohcC./x.%"}$˜Yt0 K#*n3xfZTYPnUm=f{r'7k 8p #?5D((1ߏvTbl[V)U1sݛidyLO˩#u8N&ؙCWZ,tKQLgO~z 8|#Jr̫Dfk&X k$:G)8ҤPb;H/(^f$XKfiR K!XUP w1{R*^#G#,>KfX3m;vC w|rObvd1J*Y^}N*o) ^EV&\hՇTC_DSˋ(Ý"HKcL)dؓP{ {b\3Pߜ(#>_hQ,N43vۋ2_tpmm"b^0+f= 'i;tbm2e5MEhLp cfO"ϹּOKȕhHLG[*\]պbeJtÊXxeI6,"'yIGjS9U?F_Eu:#$nHbD@5Kv%ЙZv9Y'&wOX{pkL[i.>3 fv uk7M QH1[L%c /+ \}+8 `.}'vIkϫOʣP;l@SȔ tgD>kol%؜/l(_a9ڪuW\oDV :Vڠ1 $- |CDv~cX;kWnbPZSOm lw^*Itۈ778<:W AZsebj93 "l@MXB"G |7]\'rgrqv3a n9(7jY.kLx#t.V,(J~zj{!ۯShi)YKh(_ĐzT!:5x-4~JK%poRNO:WbԀOfirTԦ$뤢B{8ւ}a,R*r S 8;qA=d`<X)mq^%I{{M֖܁S8aIb<󊈿5K T7tPTKoq*Y<̶d̪CO23g{ves 0[B`W!+Fʯ1 Bļ,ԸڊB>'.M}>8#f5|!`էhw&N9#lLO&n5F%m>*1%4 c{`ɮAB33I]Bť9ضe)aH|ǣ!ިAwsʮ6{ڟ"]; 7]r 1F$,_DMD/}ǀQꧠYZBU>v37鄑؄-pk5hc.r)=bIbfm?toH - ŽG֏: َ4n-?BvR2%I l=9nEh?~ʩ2kj#|iRC8ɐr*S9ܓgbj}zs`x޶J~6?N);}&_"zI  <ț?+UzK w/xΤP3[ix398a3!O}͋sqoNY|U #4]Z1LM>"]NdjUѹ+XK */ZXԀswf,"hޓ5tZH[:6 d+H^E𣽾lyo\߬'R*ɞ)\u0"e蘇9haFc,:ByqK d#󏸼Sʜ+ X )O-ʽ)7/%Z$V.dwn|"iWͩ6Ǿ ;|#v*ML"ḰG;UU:G~RqM3( .[ j}!ߘàWLJi/O`ohL\s:gzP Lϑf5o#O\߸k }S~ q䞾-BoMw3(i~>c㷦,C>)Fg8뱿I[>CU16:,X:XFb"9|!}8P ?MIJ[/wK"ȁJN5T $ S !iB_qq>YV >ox z)mc2׻x.F:ѯV,fцifH= {9fy"-Ml7J}-AJm\)Q]Xؒ(% i|9@,LWJ,dJ@iB[gIKeSt{Չ [wb=1A&ֻ9dz/a$+1|vA"<7{:$83{ X/6I\kfc؟pgQStr~|oenխ$ M#PY)GYF4WO 5hY>5%9*ҵ)fR۫ޤD .#o#sVf[aeoI_ad_!Өye H+3ci ] LJލ78Sx8&7% )E{BdtULm"Ħ&VfmE3:xK:`;B@'zUu?7y"R37+i,E ^ZϜ(W`óIW":E*9}*F~w_a.c}f[ӈH>qh|mg/Kx&M"vEcFx#=ZE]X VԑFqg[tj%s~sk 3խ%~T/Vzflr faa&.vZ{lAfckhcIzW覸T'.}.ydl83?kaj#ײH# –읽_A;%`Ў{QX܏8Q- \_QIjo5`=*,F)13Ӟ)sz*< KLUkh>J1S̕ժװnXpFۅWuMa]5t(rюw@Hd u;- ?rFMƘ'9%#%#/- }5WȔgUpCK OCK,:p脎MO V!yW&:Q/@c`?&rJ^HAJ4FH ~$ PMgR͕Mi|!bSUN^UҞPZmjJWr4p*Ei}[D/4vriR s@D0O?|h|P$CtoD} c٢|ҊNZוvr ƜWqilt uw[?vRl|Py:_~1z7jGs9J*l΄btP-@;ՎeԪ0+(~PW=tz1̥aCcKx*IṠ̓L!O8Ѡ26|ѫ`"Tkyۙ*K@;8٫:*h;s*]E47?OѲaALxݏ!7bi:Xܥ:r\q궦HhxUbγMm`Y?Lyf2ПГ%_6U%eNHdd])ĤrǮg#_!cVtH13T8k֨\vSAE9[̍'+ 2EȊhA3ưQ4߄ʛƒ_A\ۜ7H`YϢP/|Y^aN17;m{#G@si(!Y_!mmʑeeQT`S\O?æ:: #x7;~ x @:ԝ4lP|F{mD^2k9tYԫ~D@z4ޔbo?8N?U >V-%{O/ JgM/~Z娪| O^os+:޼ 2/e+qg5Mgz,QA/+.9#>W(n>#gy[ԖY~+v{<Ɨv-Qݩ|zݳWZ[MF˝*&Gk.gXD눗I7>#(r$y,H+!%nui'"Ǖʰ+CaAG&]DKts^^ {rųR=;;*_4PMT8vbzyg XFt )8OKpE*ċ#L3 g2 @r t.ֹ(UM[cVY@m-vݗ t.U!<(]"WmS^N*E"x/8'uxh bUMFDjbî{кv,a:uHDi^YӗXcAcSR?ؙ W,V$!j ͍h\D,JholZ;V0@C:V4xZ_3캵N,:&X?ə:#ݰG<^V ݻNr,V rM'"$'M-(Ko6Q/̳s@ ,?RS]Bҝh9cϯODی42G/y&ut3//~:t{UmpMO]9NssSbøUZ5I)Ur WFrqyE:킩*|MzJ(D5:.Y <".ޮ(k@L>(M [ﵙlP-|6$ok]"v("mg*GmxrJj2¿iH]!7ٽڞ I~QMD% GĜ 8ȭ ΰȸ5e/[ȭY,鬨u:fmJ8rhZHˢSպq  | E" N0*7OAQoc#ǶHnLy|%~!AdxUֹܚ=- #xTqꙚbP} Y]ӳCiGԭ1.x+rA}ji*dx-Px EmǛ@ ilW Zx?o4Se}o[qs>X[j\nn 48""K%U߃޴\+OհH$1l #i51i6v"MTa+ _bT{Z'rbp l'5S(ݘfl6:]}FV!H+^6lgү-ʬc i?v]5ܔW#+v' dYryE>ӤAKn:֒op?|}J 󑭎q1֤%?2ٯa"(tΟ4M̳ Ӂ0*ts:G~ b /Fs2+8 eQU?WKƥy+0]YtT*+h{.n'aH+IYd\S6 tm5>r ,TP[ءi/,t/_fiWi ]mou2=@I/lɎA w$zTF1K6v; e 4,!D|S(_(Jp_naltU^L_gvPoܵȸ M\ d:NS}ޭk7*eB<Čdg+<^eJ'ma4a<ĉӑM4R1It =e/_x_>VLbPKPk2_aJMM( zZA40D"̌ЮLS$gٰVab/CG/Qf΁A]J$YYr ,5*L+7/tuXG1>Б[|cV34]'8!lQ U(|\m 4]ʮi "b^!FK.cv{f#jYw.nuXS%,s?4^faܝ=ݧZKޅ^>&5x6xy̖oO\5B[㜋.-'nk\o Х9cPc,bQwt%㱨v:c$UdV{7^ a{l\ʼn󁽹v5vq+Ahzhi`{ns̭'51͵FreT'qzj.j 2 H- O6,,&}rrΧB/%cIoPmfi ]}GO o AtJEMcWirsrrk5Z-P(Ͼ^:0SxPYKAuug9pg7}p {y+ũAg(C`/i'g&sGˬt3^o s-uY2b'Ү.ZQ#W[ KǚZ]V/bDd_^|\ezt0p${VN<.1ro2*MxL9p^6~D sr-Bgdmxh>uu`U0'_0*v{1P͇DI'}F 8gSVo i*P\M{+f)~'y͞%,htFb9F^3W|cj_L5]DYt:LHծpɖ~ރMdOh=;4/?BnGR\ýge'>DϪU‘2)ߧ73?3tpݱ2To&XfVJyCT, cvHh)*|x_!atoWՊNFx[;u)"ZM7XA%}7e1 DHHte1(cp‘n+'@qE3VFah{o:PǤ˞&ڽ8kg2*Zo" 9Z}冀Íq@t%Jc%n-͠zՕVANM?P^9J+_4t=JT = iM6GOԾ ^^`KI"(cBbِտ),ܮC|5Fr|Y;|BC-&x4t IA_uH3GڻYKpy6l?.-5:4C!\!y'5_MɄLFy-=1Q}b Qߛ:KB*aj MB-=gيJH킸 ;0z.jH y=x}^ʔ2[+,BzEJWURǁLnVNf=E/G$z{2[Y#Z_!µ; )3@]Rz,?͸DSݛWTZ(u1u) z*+[ MS%g3\hB,-GyQBmEMmťɰ+ $ay 7t8. CgK-+l<$EO\;dLD1*Lܩ].cv{B VpmUzwz99s~7xeG5h0MVGf]B(y*|I&fO g[wVkN._aKL|tG8=yY^D85RWxK4i\\`=OL5>AmjCq/R]޺rY2-f8L?z` 5|si2;zq\֒~̱ ,FMkE8|Q~ WCn)f3m"muc?Ր@t}QVKTR+QΙcw3FPZ|S\2ɜ4;Zp. םd ar?XgFXFڑnu ?;`eq ߄m,Xs# ^?~ iCPJoiWj&G\cq~jw\/ɿ'q=y)ubePKm jYl<1'2 >(JR&0^e.Fi(ܐZ_eo BZnϺzaDM9V7h,?^+31i 扞k\I rO>+_|G}G3\ nqn6mX #t45X{5 G,D^FVuNQmf8ilr$y\,>'I/~ӝ!C|( !`QViFe wzyĦVtlw)jQ=2;qls>r-Yȏʌ:I?>g2C#S/Wnn]p"y!mBӻR ȗ] ,[<ך:Wښ yyWJ8Q|yFõY&X W&X-c:]_ ԔlWG6',ZeF& ooS l"¯YKcXE>>l=9W+k͙Oe.fG*rn„kn Quc>=o'۟U{NyD6"H4s 熈E0j}wxLg&*!;e:p>#r33NX2#:,XUTj a"٢(JtKz_&3+寓eC^&@Epx9Fk/^bfgAI!۵G=!1m̿8<\dHE\FefI*9Z|bʌz%+\sH>9؏dPXO#fC3?/혙+~y tXYܲR~d+4euoG%R(έRbɍ(K@HCBE;K4Qͺ>rZtر4}C8)4; Jsx7}Ō? *Xoe% #d&z,wS~SI~["_"e)stR=pWEe65p]29.: %Z5飗ya igdhKM?z^@\ʾxrd}缩[zʧM,i)0vZA9~ p=p}aPdf`oF8Z)LAkDINw3Nv"IMRSkgC(*w"T/] 5:-}$ yc+=2Á41?s!YTGH܀W#@* N$p>&bJG` Q/I? Xo:Y%~?ʊec⫛{Ehd!t% E^ҶN DH_REI+o3`SƊݗH\|W%((!6?l[N#p}] LLo.D]2 *}^-o3)ۦEgwW>P6zuYĈ<u#[މE(b7p CֻM_- XTC4oVTىW g|>3"ll8/X\޳YqŚ sB-~W+$8F 4Gٹ5?6~{/H۰Ŭlְ/=ALTmԚϗeQPpO#&pِiYF0qG^b`![X nY +.Ќ˷ oݰ屬jΰݖ;^+?pDagqLD~/1h#"߸/i(N$&$M88lp4Cͤ^q?b],.<ʙ=T{gz1RY?_#Jok |kQd/T~ m):uG툍tX6i;=Ӆcxc'M)nFq8 p< > de3_r}ټ[r#V}TMqCSjS"brֿєlU:>V.^M1rlSy{_2?)?/I,*+3IME H8Z=;NxJyx+X]/ZX %y% (د9NܹBȔD6bcIs%k+E)0ڳ ~K:>t _u]~tOu#ߪ[n;_DB!oLjD 4a^]݋^QË44#+/#Tj%GݤaGiPJPhe~q9fEK9DͣFjIm G%IUki?B̊;w[9Q;|@bQ⏍d'#{V45 ZpN SCڸA_OFx;SNK և;sf L{_<2+jf39f9{Ʈ0!Ot1`͟bF=BhE!X-oJQblcޑJЀRyI_oP?Ű|t)($+K5*My:fK^G ixf 0Y7MP; ^Na$ۣ?tp޽20 ! LjG;܌"4R[/^bM+s6QrDv2JXyK bJC-4PfXpsg0RiV:;pCeܝ}[m2bD%?vFIW1tgםw=СK8^kцç-;kE%doG}G:4Xv&kXja^\%+_p*nH`=nOX\=5p_H)` #pRcWMO DTO@/N%'.0ʟ"^ gI{8-u/,-{g&Ld^{~bX7$X2YvՇRA,?`yYv]J'1`ɜobi2x 濨GWM5Tf zJ:a䐀2_{|>!ua vJrDOZ"rۊ|jVGcMinkj>Mx2}\Ss@l?~ m t;k 1ߝwݴG3zF[ :g_l8+͖ TïU6/2'>$&d#V?"0B凙)5.}@qx\F#6¥ܱeG0< HqА&k鬾lQJZOs#x#7- Vx_宝Ww`w3H+Y:[:/BrRs"YQ(Cp#8~!?:2JX3Q,%A[bFhX0JntyS2&b?mQ/܊2_)-~8rxp6CɣN/Zˋc.8'%5ˀR.w4X2#CRR6*|vU>skF~^WiƶSȜn}qwU=1Q'ǍES3K7]5el k{Le\F|#MG@l5F*Q/#*106RnZ5X\^ťʄ^ݤ^z! ` `[3o-[ n:ѱ Kb(pr/U:oŌӸ0c lyĿ[,Ұ4Iʹ"Ku Θa)C-X>H#/<NֳJ>t.KgC:@~M-\h́ǔ ~a΃y'$nT8}O=y;U('KmhG?m ɍQLEuTz˙;{3B5!6!a4 %괯 pY#ڕ͏Z+IGsL@ w_R^klK#>6wA~"cT8ة<$:Zf.vSRt~lm`pkʅsۦc$rtM}1fAF#Xe(ki&)]!= =EsU5RtVeqB*Ը!q >Qe|y$1A 8aO+xHVgN#tI`$!UdL!:UL9I< >xΈT(u| 󼜪[35k4+5E*}Z],|^~y:2T,y6, +62ް=Ţ n:!\=LU)zmʟS< >xEG֢1E !3Brj9^ܠ$iΣb}U@m.3B2 \=UHpBZT\F'Wq$^Y{ReGcb"hjrxYcM/ٮFiٶ|TC =!nCz`e){99ُ:?7Ul|/V4&A|_O.ۈNOċlA[8!0rXiΚ|Y3 ޮf 쉝\O0skIZKל7Xh6&$ԲGAbԡ(9|b2Y4h.a3^BC>)͢eFo.CMC ^J_ Ąx2Gjl4aV$Uۻmn?sl7096 zh_+[F<< FrC*L9+&m+g{rүk 16pfWH]E?}s7C]ޭS\ tV y Vޔ a>(9Ʌ:݄ͩn1đ! +Fd\6|,65ZcfD#Sf#8Մ"avjʧK8 Vt9I^ODfP+Eү>{qR8c]_#|L7E^(:=gny "KWFY\j%G?ڪ67{}蛎19 ABM. Z}o9O_YE8`Y |ސ;ڞ:r?-dR#onQ ETח/)W㇮I)VF]ɴm¶V`JfAٙ=|ӻP5'y jiϽ3iveIe; ylj{H86i0&T,uZs~=WaĜAyr3'ݶScLRNIߐ,gZݨ4J ~7.]ۭ~B)3 "}XQj'>lR+LZ1я?WZQWE=5.}8>!-9BaJ{wJnSj!b+Lh\^Q <¼ȏ]p%.ݽ] 7Ϭ׬Ę12+$zM/xÛ7 Ջӣdqx#bRQ- Y/zv54@ :T2X94cZ ʟYyh7.߆Qmy5hfscٔ'cϾ𡍱/ + yub ZK!#bnQ2G1aX_Ӄnԃ7Ƚ̝/k {G yS)ǀj?mc?/4&I:!BBf*$bQ>re\eׁ*NzB(&X֦r7 J: ZnscEtӀE,Zpw6VNt* aRˀ:+AGO؉02A߭K=ŬَA~]2>*P Mxf5*d`nj$$E륲n4jbd^ځD =]n=֝c]+Q]΍XZ.l rwN.ܣ~n -|)˶2 R8tI#=z;m]~YB oit#>j:׀9-]nT|Mףn@Ҹ/-xѲ,gNrT}[ lڪB M펕@Jv&0<ϵgwC}Q*nRGwQ ."N 7%u.B|=P0O~i5R rPSASBa\ 3Ǥls\:&EKXed ,vEoA tN7Ke2nm$YP0On,nXBrhۣGCLT7"g;d_.+_Q3iNkŁ*y_1EwUa'g_2GQ.Qi`/.j_WD+ E5^?tпJ(ׇ@3Fûc82s^ gMUlU1DZFyʫI3̊e?`f6d9OVq9g^xѱ%\}tBܳFn#-+#: & Xjo$|)[1CݫoB_76r6;g8 $ QG ihqC^ud0ьS,\jrܘS3X%qa ybv6aN]*PQy[70V;$>uHakŽ`dJg:+ Ԯwر|~~c+Aư̧Un>)zcȉSuNfhfJ% v7bEHܸpV;G/#;.ѻZԅl?%L|E`%;?pY|v=~6"e?|nlBy# ׽*[6!aVC+ cOn +|xa <)<+0a24 n~G5㩴)0c4:Lt^- s5G=Sadiv[u?~9pwDGL1>|%2,\$&kIACL8`7D3ݒOS%If].,RsF< K[ طs5N󫑂.7>:6#7V˿=!wIY]n(Ra6 KRMq0q|Q'0, >}ti|3曯JD ,1O'#W0XЋF^1f!,6q\\*.Ujm++V_wW/[^qSbduĸ\ܓm- ooBHj4YSZIFtjOm6[Q4oϩT;:tv4jX>UU< aGKݎuT=޾3e, O:szI}ן؃lx ;ĉcP ^3!ЅVb0 N8I'/D;B!`E&1ٮz/xO=~6WEAɼNƸ),IRx10WMLIGK@kc E qmViwViMH=`cnĕtzou Q`$Жh& ؇vXÕ85k%띄Zf&f/Uـˁ8x@X*{h`ֵ}&ْAl6Ք%FT*͸9Bu"X"q\ uw7|arX5K19 &$"*ft؀3=(cFcqtWESՒe{u3#hnw蟠qѭ!9xZI }0omskwy@(V5Oe$alN9ƏغxP9/7|Y=KQTK'5|v#}ؤXF.P0|򇚓[v*1g;A:ɩYx3.XG|!SwKy/cйLwQ3'hÃΕK[<`IaetiitV➟'AAt0SP__;>=sjDM"֮Q0jQEnڽ}. u=ALOS!ޓ@qn|w?:KABXWV'"'UXK`XDccɩEe480Wk}RSkpI(U܏Ƀ2Baj]:V[$&D 589[!˝@ϴrf*Os_Dei8"}VեkH])[1:rA58&DZh06K88 3%Eڒ4uNq m IQی}Ȭ3s6UPgv/CGdڸ+_1E~džxOP?b qz-ȅ/a},~8 *=kQ_(!W;4P,lXmkh[td-&"W!yM0;&jJ:ɳxf hc2ȊMvYt|kJ{pgw7ž*9R{,BIiuQ+?LPy41k3 u)cDh{ ՃrFNx Q8EW#D[d,2c\Y?uVu f0dMrayqsV[Ԕk}oN,Wx=\Ra&hfeNMĕvs#& 1V)+kWRa-iZi]gQ0<'">$RY<+\afm7C0^Ԋi }"eҁ|xMCq,9Fu;GydDs e.`o;:QKt$ 샯UL T~=qԔ Ny3/2o7'!:``sm%0r{6P.>mjTo,V#Ogr@ed} 3cv憺lbZ2z_N_MaYj!'10ى)*} : @i LO20" Q.<֎`R[Yں|ZiYId)Sq¹Gx._;CQt8s8)֭&~;^NFE)\>CX)cd h?ˈ^M[3 0D(52 /UF!f-! =łլNIzӺ`1A?aT.c">?[Q8[VPwW,6qUVp"| uE ;2OE 'A=DGvzzy a Trw_BNbqJ:^PPy߲0ۅ${c<sXYfoRdH!u5av>lf:H<3>}?Dzρ~橂`<<<ؾt[<c؎ߤ7 e!(l):'9y`AFFz,  -u7XG?`e):g5o :(xNeuh~Sƛ% YqiR$B5W@tO@E;Άav^\Yo2xGKeo_=d,^忝#VtRm/kfkfэ[ZYZsDW'j^6{1DžX[q'֥pIV@'->~Tz!_#f4wC|$NmGZ#rۄ[ b?oQYqV8xAKK5sjPub^LM~?8a-{Lm%B855u{f@ A%N>ON";Q\|4 NZ%\F!1X'\n"$ 9tpD~_u|%Yq.y_R JH@{t"4ȍk 1rJH[tۣ*W3/-YF5ښ/^}xkNYDuL=>ɒ'eKJ 2m;?PfAӘ':@oYq5 Wd忶XcީZ}&f\V q:2 mHt$2cz 4yEL}2[չ\bLgkJHN70+-IC(xYfvqBѹиѥCTpj09Aq`exefӶ DR|p B] z%]ȅ3~=ς͐~){#OdGGj%!Ymb%RZQk& |~JPz7uwE~ Ƅ-bƱrAY|t|_ޫ՘Rb 'l~!r]'VjWg2\yT׼ϥD`^YZf6;R|rvlHӽ!2 WG(!&p_-.s4&PUSBeW6]6:PEDŽX Ž޲+w$;N!MțpKKZ5[;;qڔFnK+Y8.߻ozeGwyd8ȉUTSA4TSMiM> S5&wU8=sKS>aŅJxGiu=6vxjv9wh%Qge-'*Wכچ5c|g۲2v_0tw ;tIjl`ʬb> ؔx@oN5<Rcsagva_-qjS`C-,ޱ7- ]J(Գ(` &2DZlƲm=P̍Y]\RcT[WMĥod.R)mҚ* 23 h1ݗ jCy8SVXtމWl~a݅I 0TvAҦHa!3F6byl9SWRdH!X̿ŅH{x)Si(=S }ϚYkrσ)\;ȡ]7lWųv!ڙlyxYs[$ּ=cÜ7OB?UQ:,CS!smaNCP P ^J)8Ң(e?T%ܐe}|uF/#Q0Z=ToP^T#N䶰6/r[0P'N/*U]Bp1"l{NuI|Mv,d PiMǻV<%wm-~y՗ۛ-6YϾ;OdaUoƁ;k>qGb %osӾQ/{_buff]Or b[ U #6.bsҟģ`BfHZ089/GUh],L[6۱"d5PO|B /O̴U ScYښz}-FٞDk! :Ydq.1w kf#oR3ev)thAr&A2 xˠ$ejn؝Mr?ceeX}vD}A哃3V^w]~|\La9. ak+YdY^'R*y\$_zqJQ>{[6m؈|AD;SV]7g!g"q|pDe@  1Ҹ-֒}17:,r{IJ[KbUsXJN`AR?1u BߛJH~X d4"囆YKk`d"QRtQ]>{cPa^&GZxm)384Ƀur5]ޅB݊0FY{(O'%)nln.=L'~_F1"-08_Jm/oB҃1e;G)awJ W^BRp9rh RƛS!Bi]d.vß tEbe69 @ϘFS͓38ki]H>*4+4lR#% F50-EcVx\$ a2dMȽvQp4abZm5wy3HB5_[ZML9oSG 2r_|S,aJu,b5|`+g_ƶi0-hEh9 5v~b5*0zɠ FҚxCbV $i}%Ry׺Ns{]Pz~VvLC-I:d*Z#ӨV vg:pq*mV}YIV?w :< :Ϻ%n`nj?>'c Jd.3OEWtԏ~Qc<4I46nk&t#OVPǨUe"UkPw0N0R#&jF4qsaS"0:\H|RmT?%^i﮷4HK?^pe+g%Vʈ5I/Eh6ovFet{;Zտh2 bp1Wı%Hp]8EY곍20rΆ 1˱]W&4Ĉ8+H(Ol,PMBro^4o7jz=zDPoߣ+Gҹ[8x'Sn20pDX۷ܮit]>adߔ%F=r~+ R y`y79MP?%Q7ƶG۟6DLX&Mm6*kmK5{l̴̃V¦FltȲ?u-wrZKJg!Ƭ-gਖSH%$ƪn%M{D(ծ?r7XrrC$~28 l|P1:UfR,Gv `c\ZY><7`Ao-~U)H4HRdXFީBH0LY8Z< 0 PCTr񹃗+6twhcr ^&蚑#eu.y⻑밎uSL{>ZQjf=+49l'Cԍc[q(4LU)6 ֳ^>SfLjk^l#8e`QJLhKk?&jVUw[nOpF.EouC4c-yPWV#ld7H84<]Ki2v!h("bN+er!c8;€e \.h\n샃 ԾqC!rh&F|ED4@G2_a#^DƬY_a~Rz7‘}'8puJpIifW&t_R;/>"xA5|,rTU۬?u4^kA DUxaEy9a Ax9p]'A+d"Vi4{8@5]= LxBL" s8pӾ)T%5X);+dL:G-/8XBN4K`Q%~:r~Q&IC&*Fu[mcۿG\yɠ\ &fS|Ye}'K@ -Jbr``!:t x9_3U`)A!jZ.=tim& 'c`g XI~L4ܪ<=2%j PqeRV>~cׯ,b]O(_NҢX l)  #Ė-]aϕfcm4+ŕ+fɪ >aUsqo,}WrY R.2tCiW8gk{Ȥ`f*n)TyK)ɇ0aE<uhQF;_W?\Pi>_2yOB$virnF!0}?8IL<}ǣ LP!Ud!-"-hfB3_3WTDj':#} o<ID FLoI Y7x}K,9@W|@'^xB7~. Ȝ j-AF+&j͆ݒ:~ eװD!&ecUsJޫc$u/s cܐRup3Pݹ9 D)X P~)ӖM֭tȿ-Mk4шU%>]sbw`uQ`r(p5< e't;D4kڈ6Gy +l.e[}29Q0y(jJx `~&zM|Q3r%ψ?C*n@1i_)wjb8aPȦbM/~vغi_O`wDOQ?`| 9&>å,>d#*lؿ$ORsOٕfvăH45e]8VjHX݉Ѻ >u>Daè5M~W5k?=Dc!1H;MKMH$ [3H.sO, ,(7oM!xʠaCf&cM <6Ėc޾sO/H`{EB3*Uf_7A7Rp~$EZNA#]_c;j;3ݯ9+FCKVz^AW߼=ݡS˕;R}U!qNۄLXc%vJϧ-^dnؽOl*If<ųk-JnFPa͂`k, +zŁ*fEAab'xcKSǽ WqQ@]*{]1=wWKj Uy_57 ;LCA6T)E1Qq7 }8¯ ka nԐ@Iސ/jvd.W|D{~«gi1A fx)_Oq Cwgs*]y8d\>u)"6xF0,SLgΕ%>۬ KUn˯)JAm[wmf38h" IJ@nQ$qk4GQh[zNQ,LuK} O,[BۺT %};kYW*#D63bd?]aV%ƞo!tM !3'Jq_wO0kgrC!beMzPK$ yrl+'A7WL c=/nfX8L'<̯EH," 'K2pͿPh =`FSf#A~0ȳʺbWRZ}*[81Vf8Ey;\#^HоʊƞM@4GOWOJ}~E2,(m'z;`׍|RIf;ZX4Oبտ4;iC>Qh"&C3o\MC\1+\R΍1rF*Lӯ=αQm1!SΞe"6q(Pp/FƋ@SAUqGy Sn¦%ֿCw/mG"7sF:c{n<|5l;1)~30T߬x^&ξY,WRM,ɛ) I& \qh/N&Ϝ Sj7uʰx{G?b!ֿ҈ԋI@oH;^LU3}F)Gˀڨ :n&MϾKiָr5SE}#~N/|~K`͡n,7=R.5X`e|3GVZDߐq2ӱIxeGҿᔰnE:Y!M3:4c$ 6?Ŵg K1v^7?UJ#W|Ԍ8SaV|-x _IuA$ayW_CRunWrΗpc2@BD(S+_2`J'::k/_!+BCJOTõ["0t)DME쥕h~^@*"4ry|/k߮ɨ0 cHC]:WBCZ/ kWǓAq#ƌXhD<4 RIͻpΨlaZ;GgmƄy 6M?&  xNlᎊԊ=.27Uǔ.|CN@dug"^$S< Qs7 Ր'jFMDLFKi k>~.otCKr{'r0 E˿:tb˝DM2-./Ub\s+N]Q6ܨ &#Aw>%Jtr!`UNYjNE8L%`lPhk^d`oLJ~"-D-]sGIH})ze"i^ymN Դp3&Gwa.BnjFp@Z3ܕ ᜗>?%IXۘZCX1ZD)x$ 7Mb}f9 % L"-\#x휊0m0du-r,Y2[S[cͰ3rƃ"nI[X m^hjSm#'Ї}yHSY$VY!֏E<7٤xw[ T bFT #D+ U]\\s}M@6IxCFRRtj]שt^6L\Fk2pC+/s2l}"征.Nk>|-;dtN{ WڙĜػlDwuVkG:g젌"L6F9 vP,RkJU р2[ z7G "GKla-Jp%S`x^ MbOx?Ah?L8fֽBLẃA˓Eaˉm_G@1'U ΉoKχIbЧg]՚ mNڐz>fSK9LYb@5*|㒌7'0gyߚ'9;67-C^%I|tìA;6ͱX7e )7 *4;+gꟐu^0SV|kgV3`!uFT{SKjJ1Ul~Xckm riXcPsْDY%JOk…1{hP-Ďf!7d7UR7**7i]9"zn%<㎖G!bdY7.iVe@Eo-̓clyi)ۻBR<Tkd'LL$vZ -%#P2Ťr멏a;u'cdwNv2tq} .K66js9ns/P;YKQxp.2 "` n8 '=&o@,˰fC–FѢ_7j'h5?.Ok.&8||,ٻwX9sYY{y͞sq+S3JrQW<*>gc҇VYe8 &HM)'{1"J)od'|kcrTz!vns]x/J;R& +f'^a `0X[x8 [4,:U/^CuTm2MjMm][㻬^GBry^1ڋ7ѥh[-5!%p:xxsDz+fEgE#UTwv_y1q1Ҹ·a /#G|qg>D]lVXTk[5`0w6>4Aȇ4%x78axa}zQ0ۓZm$_Td6@Of8Z]ƛx 4bb|r]`~WŘ5, sl*p ꝴZxh֏n,c.%kF# қuB| x1OTrz6`D{rk'Vf &`\VczQ!L`*D;l`EɭQY(N4B>wڕ{ظ26H_K) ȵ$/Ix]l`+MG108HIJ6e0 78 7ꫢlPM3MQ{` U &wi!FČxedodSJZi#2J$(w:y#%w3G H6GRېchrT`io0jT`!]@!t$\i>D[%(@ć"2AROoY6Dz%l*Hq7r1H0JB[EwX>x̄) PIpB_ J/fB^ k?!&پ$͂ G4*myfӂdga*%H)};Dk]z.G7䘵zA$C[?fg[FBsOhZmH͊`,]'a]5=XbF Di_F̲<ΆjamW&:YZ_m6f%q٠+b1>7R'Y@XF)A=ݗگ啟;ID"[Q`HB-9kk>p&H3vxTF=ƺglz^u)|Ty를t+{e!:b~5Љ_05yT W-cel7F[JV#`6dJ̽5v )9*dp(q X-}ذȘ:dxVkdPp䓏\SZ Lf?Xq.j"TkXd*D|.H8PROp7sS0IЮ #v.Ђz?4m~3戴'N"=oՙs]N}'vXYo6ǧӿ{E^!bTe,V^ƲW ݓя?g7( -gT~nKo0"ful4sA"<}u@`QO6?3 EVVcr 1j[:>)l*:uIX|$,`LDڸױro2'hwh}]'"r m)H%LGl 53sb4g?7~l(kp2rF͑X>R6쇪Nb:yC1@9W wS勲!LVb|:;Wcf-kX^=Yε%d86 qWc& ۗi7Yܫظ}s5VvW~an%ە UDPV ~^f>ۦqvM`mmʵob*{þəX҆ $BP38ug6'duW:qOfq_F`|C.Iq[Q| i_\5YwXnJo' 綖?6>;s8m%op.$b4(z0Ũ ~ZKQǜ%˿ir *+MFb.{>8&E%Y(-[!u,i !n ƹCݶYs6C-A>Y jA3fT4K\BZv QC{NGqAv_k]+kkHJxc) -zYpLh3I!)bsp˓b9|'A45oiɇf}cY7'4Q>qTpf:N?fL>UL/ ZtvQAԈrc72¦Y:>]ND1^  Ƣ@9\n-eZ?A~7{I=bU:gPbM90aݩ󯲺@P}UX5h%h Akb*\CгwNrzX)[uB3;I1-Cc9 #f'29!B]޵ԄI]9: ('\=' y VM8#,E\/@}Q?1iL]p!n+ٱjf-;&o=v`Cgqw4F *Hi̪ n`5![lcH:eaY+?ظcМ;f]M).ݢڞh᛺n]#i=T3Ѡtϟ58SF{Z7V>μiu;x#qXk ឥD5H柈ՙ 簾{9f~N/;9H3ąIvغfyꅈ66j%Ji84<+0m}TUU#'끺F[C*&i%14 f!( ؿuhji+CF>Ɏ@T6eDMLX ]9AH&僕j"tC/~8W<*Q[W+N7nQÕ{^ݙ@Kzx `do^>16iPTM0dD p.r$?K0 MGf` [S9Ytg02B@'\DW&Y.D tKRA73@G|r}𫜿w4q~Mm҉ӰERZls+JWjtJZ 3vt Yp^`(U@fXs>\MMp"J^!=~uuGK1SqG#X)|~xفM Y(]z5.0zވ@ ̤shՉUI!K"a& fN@ˀGPa,%z$65<53aV! {T=ze # J& mmK)V$H[j)q6n'3{ox%E$?T?=ʂ{ ++97| g>^=`-& wSGoD^l5\J!&tu1#92öRէi}^ԅ~,s@Vˆcfq[+qsw#!uɱG,#@KPX W4]a4O0linQѸ>DԮw6㊚KߵEs=&l}^ABCOȈUkbЭ@nc3b9r@g!=;X.3-G-&;UH1HU'܉9B IjD]WuXR86m  E @#G$+nͨ:O YXh"qz"ǿkpF/ b4$|@5Jt iv L#ͨ)p9;cdL/klX5Cd⑑QJa .v GKYR9Pn00HhXe 52lhJ:U}') RPX:siL  pzZ{PUZn]NmG6߷*Tw]ku,Ae,cZ O!,ws^8ʀ%´#2֥A&IStEciaūg^Z;)@IeN˺].T^6NB(/ݱѢLTUc[/!nJ(5GX$^ҷ?irRg0vQ+H^ %n_UCQn4ϐǧihͧ6}BzOW6EarՑw!;ʬ")tբl\SBI2:Qv8ڟ"@_cӽTs r6_ll*MKnwtHz\mJQuCt%2Ti F*ǔs;z·rLEz3!DI/{v`V'sߛ 9߮;Itï;SgݽU+z, 1mס]~6S9"%+!vH{G9T5=@bϧ+Yɉg Y+ñp*ņ d4HOŜz}$htBq^\TxWTI>c5=Bm.o8˼Rz]uG ۦylM‚sP-k9 '/d~4t) ۯƞeWDx墷ի{ /5E}+pUgtR4n7'," %WWjDfLfGIFSrIsA+tFTu%+x?YYqZˊ7XȖѧ D/@2n°{A,WNaq3Λ/&5psiyŹC"@Zߵ 0jSC ˢH)gsߋ0l@ڌjQoN"w!w]Eu$$$ۃwboIDyeQy 58&L7' |A=s+r7\_zNmy}AJ 0/3/hFiD=Ii.j'jM?_LeB~8u4Pm%pmO ڧQYP$MǐܷCi'^$]1V) 1{#`P{G5J2:5P5h[<`M&Kb Kj``rmtPD0C0@̉%I~)8z~YA_ i'+~F*Kri@IXb\ºxk-C=NqIE|uiP\k}Mo:&KÑ$3_.xQ۷4YqfT"[!%Ε qxKM SE#(,Hcz.5eWetp0f-ټ0ThbtZZ+ah[ŻJ/̍e3_lL`~kʆB )l%jh왆tMT >+;Cm eJ9N Ɣ+<@j.R֦B9)KLݛ mVYTrpM[(Ni{]9<8+IJ#ǹF`@Y_Gټ-invś O Uu!gd}yS䮘Iv ե=-MVQ -γ2:qЙr<1(2r{\ì3R ފ-ȱsPB<IwoZ' R<$oƭ4'PVDu"˵14 zR^R mӥܨ{wA (XDu3;~.<([<5 (F;%?El3F5[2$=;8eF~ ɣŎ4;]GK 3J.yj:q$Da>|SVú"|D%܂ve Y%P׈9R%QBد⪱f:!H^Gzf#<\H[EM˷R.$jtZ`3pr)kQ aSaף!О:>ȴ4WT}oNLٖQGn|E=pID(KM6|AЎ}.#x[} icUǚ2w}C4l7=*Fܥ\?(5/7˕8lALJܐb:e("!9EȬ%!b~F> _MA71WOlLŧYnFwK Y D_DOOߍ0A͂btj聆'3=a=dW&[l#v]HYO:@#q_ :W$ @/"WA]g4OKt.{V;*%H@ *&2Uoz3b FRbwS?j(dfL ܛj9C@8,BSxj7TLrTz@tU1^oiٽbJ]Td p5{5"7R@>1q]~],P"x\[MbBlkDA]Ǯ̠3Ym O7`:}2XMϩI΅mЄаb3׽w$x醕Rm"^H_8m v" QJ i0{)ϓ(ay#9Aˮ3ͩ} 5;M{"@ncszlQF>5{nmL Q vga۹V2?A밦!1Ļwﾛٜә3I'IAvT`v+F-],e$e5d4 NCIv#bӄ\s1 ̿ +X.魓7lHJ"7G#FB#Aj^j6 HQ,@wo a3&Qw\ky++zi:d\5nCnҝixk={vo?bZ}Iᐮup-&w,Cn89U;{԰wwX iq,ГmSsօS "Mo*Uv9aPRZs ~x'a/wA"4 kQdwА l$fG6Tz0X5-fOwB;+[ѯܛdK2?:,"@װ UIOǰX^7gU/3S1w>1 9`p>褎)JI94}"T9 &k闻Ypu ^~Ms0U Eg0*` 3^3ɎzA#F 4a<օꁔWl:1Zj]e ^d~e{]Yƴzd"UM'Xgtcw\( ]Q-`~Vr\+/$0ĪǪhG)Zj &ʴP'q\!\U^[v99/:q-ZK6]뎍|)KmZZ|zŽ*bE/Vb6)W yj:  pC}s3dV~.1B8GUѬ]:e(_co39C2 "Ҽ4j*k(u^@JHa#MVBn Xpz.\rb-6>v=iPqhlFQ(weцT\L=c8,j$%=8hc8K= ޛA}f iqq:|]:Q(_ܑ~ZC;kKmN&ΖHYlOc-սՕ f'4trW2;QedEJ k fV c uV. <3!u ]Km!=m T&gE[3`uHcy+P7eZNLxk}|V܏(Yv;YN 2HDCSG=lЧZy0sԿ@h2b-b˩a}WGb1_MP86.;d֝4ҁ7\}vt4{wyxۇ9h﨧h|>۩]jdwW[қfR [_4% ':_yc}GDoCϿ_B,cN:I[nA.N7Qi_AJ1R܁+>=7ٺȞ1 QQ5/K,7DV3,N_x&ǖ`̔ oF )+aO"'S.TQb"H [zu@}B0~J='Jv*{q9H q 8ӎj)9c^=|\ ;jԉmKti"P[D6:w= K?pօŏ?uWp]D^ QRI;|㕬e2ou;1OXRVM-gMs_KsQm &kZ~6?\<Ѥ00{悭ZG&?ֈ~Ml$Ъ@<}sBuJF V5]ϮYTaiq:Oz5xl䔚]8w%E*HA|СdM?^h'ewe,ɋԿXJY ].LEpn΀ 5y+l;$ OKi7'hYmĝaFJh˒[ƒO*A+rYʎ ﱹys(RX}!L]pTsU!a:Joc_F}47qzؘVb`/k 8'UzMn tuzz|yPe{5tĹ`*:R5!ivp*`#'"SэumP'KXQ1D>XgT4kÇ2qf9!rԯ1c?UP2nb\O)텻!R11:OR9* xג}'wN rIR@z$\ލH#z\D_rs{UquusjPYmɉ%Y' 8[ XeHhߧ>N{ 9/>5+G7N;UtrܔAދO2]zsEB~B|T3&hȮYtb_ $xW35޷g5bX|C綕Tiw,(rIC"1rjm0s(S" j[V4[FFrWƤȪwrWh$L>s|S4eY뭌W+P-X^ L$W۠EDb6y$坞\¡ ou4 gc_vɃ {HGbesx,y;B3Keݽ9w |!v[l- werjfxU#t~W+rq5`4T@ӓ`}ɣK+`?F>ҢXaPjC7>S>ලgeŘp950KАlkZI/2E{Ir=Kp3)/8=OaUiPBeG5LGgp6 y.\hgKJru/ V?*c#yU*1"󹫤 8EodӾt^Mv.GKL*Sp $ F/ΚQGܤ]CRHN~ E;N.?dF]zAA[%[ еJ}yr=Ϩ@MRƒEox6nbm{pO7{[gHb..A m->lHhE.S3Bt+ )ٕ>w>Kk|ƴkܼd^T"un'n /] YI`3יCn;,+$2t.JD+`q,635aga-g$_|Kgަc-6 O3i7,[0˓Fkee[31I}X,w >ƆwnBdOXK +?,$Q`߸wҫVU֚'iy,9{{Lf4^f쯙OdΧS' iqd~B`g4@)1$s. Eۢ)'*ty.A"Sp,ބV/ڄDj1h{F ^4G|p9U??ЦJ {43e&+udpIz^ h`aqeEݗcz6Ԕ Gƥu]I6eqlj\q &iY]!DQ;OBЇ_pg(zoӹua0w@dLf:ؓC[rq'<[q;Ii-kB^%@DK,(~ ;PtBhTxi^8EI (_P21fͬW)ى5xȗ4ë"KZou7^*@>bIRMwVJZI-ǧ4=\mQ4~q4.zQn0ALjѣwwko0bS9+'fJ3UPG ]S'$J 7=.G#EIѱ=gR$3x9(^F 853Vx\ b jBY520*0]xmXךQߖ׎Lvl9M9y3E$TeQ=/uw2OVkof-C!^5߿cbs hND| {&}(SȜ3#bnv8 E}-g,Ik͉ݼwJBn!ݨ]h}ؽ@]嫳J<&]TctGQJ0W&]?p4z76zcEt:aù[l׵crJrXZ_& ӃgQ_<`& y"VP2dh6kv WLލc~$+p$ :}[*,YG~y!Yk HK0~ zk'yZS"ҮhWр L%D;`8[{w#pWa^X21.Dɪy- /|>4/j>GIDa96}2 '&R S>Z @3*؞Ek]h(=W{+N+.aBCn;Ԑ_гvdOYu4.@@\`^} !GTE#ꠐq)eP:vBy8C3O&nû˰B?n&jB>CTP *:q:s-U7 'YqZ}mSc}MD,R{ކ}e4|SOWV ʟo2VU Fm4BGO5IP`YǴ!꡶cz;7}<% & d?Um Bt)Ї T}Pՙo'Hľ[ܩFa2j!6+%Xfi[>XQ/8"N[+2į֘RB"6<>O՟Ik]5r,i ıjL%w>11skJ˯_/+8ӯL+(-`,WZЀ`LTq$ :.ޭPEg Sݍ #bO뽐cWXHtI.PQn#OL׺H|UO0WDSKd`4fx.d .z-[4}O@"@Qa[:m@Iˍ@!w0lO:&귚X,+x [fzw?|m_kd YO(5nIv^v@מ2D4?f%f VȗI9 i䁹!bc'nrmvX 6LW^{xwbWHy?ޑc Fh@;9 Zӊyײ=sЀEzGLsk"7l*Fr)uwY |c$ycԑsL7 IpA_-XWTu&=зLZT|izLmĔH)FkKt"=FRthhb<-mMHU8{h[ȵYR4bP{24xq[Wor7uӵ 5voPrÝC;7svi buC;}s3PgKv%~̊[ogV;lE#,kcQӜgX0Y#&;ؔ5%ͳgW!~:XɑKmj|MKy}.rw͚|pOr$⭑J+;Қ@])7^e*F'xH_ADhC3"1UP>\&m{7e: .)(C&}q䂏,bSx k/.A$K*Gc'vQ^ {i&?Ff~^Ȩїgߢt)/_ {J͟1|OZނeYe]>c&:t趔$߱L}wB%ղɱ~6t á$o::*갠6.n?|~h=?tGpe9f>_%ک XXH$gU#/T=*, Ct#Bm"Nn~3](FkKۿozYw?.`liR澹L+kG<0& 'TNɒYr_ҥ㔴+Z$@5`Da*3Ч~dxbEZ!3*2c ͇9 4q ZtA'B& YA}y>hY#|zŮ{oQoTTrd}' o|n"7rQ @"6"CS^]¸ jYt s$`6(֭z]zCPi k2 *jRzlAٴ 762F"h3m bۺ˓:\G>rZeMSf<g{>ϣ fmݑy_J7/teH:C0M U+|j^{zsAeb6Wa+F3p-RCiIg F!D wVCBcZb*SgqœhQǨvZо*U.0CxΊ;V/VTVrquY_=Q^Y夷Fh m'BތH=2O_~GMML޼Is)cKڳ7BOe-4'XV CfzFCWe MU=pVM5| t%TO%{`o5J!.D*0.>W>Gl-*'4벸nMe&. dj<6#H%Ϩ5Ok=B@%Q !eVKψHQ/d琗EdXbvrlJ݌ F_"pr@O!@a۳m&<^7H*h89 Z9[cg$!"lLnR<`^?]*l6 y%-*qqކ~nspO 2c ` uu lTX]E+?5n!ȏ/k(|ϺUus*g UE\S+BO'eGԐAO-O^# aMѴǦ(lE/, y+__ϒ<vXLSvsQ\88w+98lJ'F;}Si@p,QE)c4D~c}<d Ϯ/9½xb ^8mGs-uMRn{m1[lfDkFA:ԈqC-}uqgB 005T"oLFksEQPj85ԍ9O Ǜ?-,8KJοut/pćbFrߎQ#!]ݑ>qB<9UX*vs'!lɡ_i ̴xƽpg^f#S9g>8Q{UgX71’RtA-]NGECv"4vH5&CIL+GHaVYKIovyZh~1ЮDrbAu[rhd(; jSw0CcdˬΟ]Ԗ_ɄLMy|䉞 ט6mL[pO-dT%a8(˧fѪ3<o'PE½DLB v}yʚϞaҡe׾7\g2D%#̍ Iٔh׽ބ9xr AhrLĩ_ϸnuA̷Bea 1tYr+[b;ےHSn{=_k}@s֞.e 9d0afy*u5__!ީm=*:ja(Wy~H?P9U27 +[3EvE~@[q` A&$d尶?&El?LO& 6zQF=㹒2(f 6N+B,ye?b\I Qh%rT:n |ˮ&M"4v|~JI%`ow<"9fr45cJ-&[?QK7JG%sb7vD뻷Tkj5_~BXJ{'-7^o؀燢r%I)WUtdg#v-ӲoD{ 'q\0hK"ʧTPF2k89(((D 1G J !b- FtV%eV{pZxҼnF=2 Nϥ^17 v7>m U' X>Qy[Z0e Oa/\$9x<oK0߿e)kFEvLkxW"9~,N=56_4ULޜFPw\;!O2Q(|.ˌ26.Iq\yǰT][|YK!)O[`N3#r5Iv~s QQ5e2;!1%Y2*Wy3EY= @*JZqNƲGx kvC=f^w2o)mR@l>#,L kFL`3]okz~1rfVܧI7 bYs@vUٸq$oဌ FXRoLb8 r 6N!fjW ,"ҭ1ߐopH!?J*@fOcx< #i]~lnjuáաgZ S5xV 4'ЀVm H5pqf I4=|C9{a% p}N{&}uװ@!@CRעO,ΫknUaCPCMY90{zԩV@\-~\=\9#3{#ڢ+lM,kw@z΍]+aPw4)aKU1؟IB ؃L,X^nTI_ "p!W.`uxZ,ɶ d*6oEYʬ0 &d\N rL'& *v=A{Pa>_-8C5*nMGLsx)/)|#bEtz`B tۜ_&^/!-L(GuJ\?АJ$ՀR{>_njR`FS|<;h?.>U9f[W70-B.dTthm19H,x kG$4gz H,#I(h!ƧAj;5OuX+{3L Ru{3ccԋ oJ*!٣Ü3Ϯ ԁ{8|oC;R`BgUy(JѮX}$nb-@zY|4ץQ DX|_eҋd>% 9;*&P%:3}L'FH͗^oBU3]V\9U9ķoܶ$32ta}64]BeYec1%Z/'nS(į}_5,~dIT|݂0`-T[wе{^ʪNU(w'aĕSv=  [?=de<]Ģqm,^vGl]`TO>}-Z"WA=3ǒNLA au :S"Ołȫܫvd>14h?'4=XDGD=I2:6R>S6v{hM8t)y)­|wRD%j,]%I-_I i܁`dZ7j_@Ii%0W${Ж0{iP4R5sX੹V0.v8OKM+Bs~xQƗƷ˴L͕T89ҷ(Q}孲Ke W2@SSҳ\u ;=ceۖ\{CDwK Ўg1,de\q|d#$K)E8hˣ CP?b98}^7AP)JQ>lfVjvZslZ',#j*.YƨL0K!9m@$`49EB/زhd|?kձ~9V/"w dgc3\: C˿sZSo5dlۣjjSYCIlC&e8 (IzQ9?Z`9nxSdO.% \="Wdzhb=a>xnjߡ)[9kQP;. ~.*ͫ\Wzyx[Z#"X0eQ3)Kt cf $,J޾L.xuUZۿ?ۓ#3QкE@ُėX^f8hDTG%j)y4\x8qic{Y5m6Ff)&Uut?[v%2P dծƫ`CïX<(MK ,Or,t {f'^8XQHC.j;GPь!J' ;EԉA =Vg{C=56t7 /9ɪQge;.8_:T[sbʍ\gp=̆ރ}JpN/A M_BɆ㍚ӈ[53G"Yi`hyȱx$ 71"n@ăldz-x6.֒RZsE6U#: o#E^K=*kr,c 0|+V掶 COwY^,._GDz, -qkI1 Mo7^-ѡ iOf6A赹ansZ5-{0:~hqNH2Q=@`Wc6<,05ۏuD;{F8e%uIM]2g~JRt>e+ M:H ;~O:Fٙh:U&R Ȅ \D*ΈoK̻?#*L2>K 4%;6=IbeBETQ#j7ѿFK jH mt .V߷R~(-< ~5- ]3/~ c>P^ꒅXxdPM n?yB.Ha hO-љO|;3c +EC JXα;fسa )oliԮeϲSsՖ=&p۩D_qGR=fңvV!'f%eBOP*^?lN1z*+mKpd@T\rӹl#E{P/S,+;M)o}ǧ[APԳ(Uϭ;9Tny(~]˩-ٮͺ`% QĈdS+JH^ka?=苠ͼP?83{NQɬ x 2;n|uxzB[@\\ŴvHRug (֞a\&K\ u* NAT7if8BlANt馏9_.}Wu$d%+l5vb 30^n kWzuihqsX=Vh T=2%q;P=yBBx@ Y&pnV/N(x>6]V^VxYk>x~LW[ rF:$L+'["7.SF3BDka:ҦzzY=qR}h ӏrҥV؉緙ŧXeپy#PT)9.1AA?ٗ<N63)U[*h7ljdIEOWD-52gB~~=ɤ_;ooJf3&?(>_' G$egyf&cy1#fSN^}׭ֺŦ:M6/x5І)^R="/qd7Q®FٕM=`̆zf8 YץvL@h͜i~?U<&7ӯ5;:.(K_ 9nL\3zb,!z&-U{2Mg/8d GJ-ƻɘq\=;k*VQWv=0bJEoMH5 s'E򙈮L?W*4nMQ "w:{r [s YS.ꢜ7p_ s6*f.Ή JT3[F:u u}_G%gѼX ÏM;v8jZr y dR?[S*T_1e u@ª-}?mt)V4Pqg 0ha-UZ/Ґ HVmH{̇)0CnOo\q/SJ8\|3/%ys_%ojzs >0p+Of6a؊jv8*W2G=ŽqIa螀1z/˗Gd̈jF {UH*6k>'\ֻ)ϸ9@,^yKp=M f"hKUq6+Z+~-?=Ժy{^%lԌY?+HuO~%&)6lb'u|/wت/9>$WgZU ʍHr9F*qͶdѢzH`% @Ow2Y4`: m,CMXbtM0$E?y!COvm#K=| J7 S3oE~bItw6A6|{֬l\:~6q H{2@fa&vO'I2_U[SI'R![IkOd'v`>-9@2 ,+L ؀7gQ.٠Oih# bM~?JZ<2mރ5y(T؄sx%׽QInGM,,ORܶtRu6e?7P_ܘPvrb)_40.DfJgB?CE5v/a;}Ep%bѺ%88A@C#DCv@)'Et؋G&c}<TRMvs_ATͥ,QQ*=kxr"5`x1~FyTpgSF@dreW,_S'J!*ڶ\lCE <(V8.[?]nhlY2J(u0 mk n/.sd"bӤ'nV)|q {,X/۬g"ײ fn ZUbG.M6<9_w;Jo(y. $~P 0'_xtNVKȜPlji8|'PuNvs=UpۘsnToEI$ nG sphp8ۚ%v@NiXLG"/dv"[<+ uԤLR /ѪEcal &I|22吗ӛpl R_ z1a :˥Y)Bwx)ISj<1NE"x瞎KEG 뮅AY L,^bгX!Kc@xCqxCN$`ϞD拟V'u2e?|&{Ѹځ@Wn,Npv6է9Yq$`Ղ@ncf&(ڙ'h\N7ԝn)֯:4vcjcrR(-4(!x ȍa.~z6_rYXE͊nܜ F[^h4ǘ m @}< E*r?({:ROwaYhǴX=&tn~!jף:%Ix(H9P :#\^ 9vI ^~K@GY-iN#3"N-p|Nj;Qem{DAb(X (ݳS^vxҗGn ^s6Bz2Ppc#lob #n4HU|D'#V$%7a%%/qEJi\nW8ᩀNw$Sh|>l.KM/QOb^]@♈HV,-s-1&ZXv!c(_2qe>̳ }䇶8/{D`?0Ec P'rYb*=yK l9nUj d߉PoCT<0bu}D wxn!]*ξAʶ,^cܰo (ahG _ƒ, #B_E~t;KOv("6. \J}.XqyC8+.@V+cm d^.zNc/-r.+[䜫u'ﳿ̾ ~Dh]ݚZM$`X}qk!sҥf,C.̬v#'8@G V7dwr=+or|8Yv-[\S%ClǼH\>,ݬ䦔VeB}b&o0Nb3BHZSlҸ itur]W[?~}SB>t!6#;_J 'TؑgtC^_R@;ߚx23l$_+@|&xAb0{[&?DPx~A@ r!!a>l5ސ轖̲z̄,L7X4pCD?b _ 3B* }F"~)YH輎P# I.ݗz dfFΩ,/CI8u!2.Wͱh| h9S?!SK` f oZ Ov&śr tœz!_<%f/:w n%[; @\@AЩo zi%/1R>:G4W}8Y1htf} ^=uniT%D80Vg?!L4$k{ %md7|HGWl-Vd~5i"Ydu),V֭CЕQN2?զ)U 2bܚ߰ JFCۭ#Ls5- u= 0"q1:̹h>bY wQQPf)~e6czص+KQ%42J q",T#i7(K\1:aHe3J-)۽= 7!}Ƴ'1S <$< O] ()#qU]{W/劋ɐ_2^6Zf!J3}?^i%s\Ts|;⤬|B}wt6$n,Qr9lJ:sN -{n$E?НO-H]~'ߜK0VBiȖ TH*F#z0Ql l{D\f?j`Qu &,6(ì3 Wk$d {;C_b]#N`k9%{[ViN5HE"afJ+=05Qoh`NI_WS,)_\מb8/z˪6Z'!C8pS  st@7I6"T퉝+2M)1ຠs:<?ə5LokHb?gpͅxcс>#EbL`쀼JR4٭H|qa5k.) kJ5Prz+X^&4Ƀ㞚ä#Εͦ "ZcF8dZQT InsM9pKDC$onّi͎&E+O7)kty4NyUj4>_P $1 A7 ]A#*UK++ oZٌApޞd.uddg,i9{),MEmUn/W@ πclrX FoP&^Qnr7峹1 ݷ} 5kEqA- ٱ=`bU yŜURj^ Y bԷnA_[/E_#  `)]:&GC0]d[qjIy7ˬ4+:zOEÆ7+I(%C1f;?=yU 5M w=ֈȌ]|L﯄1j`*iʼj1`;Vc!쇡`ҋ p٥*yMYxk7 9SWx'OP; y+fNyQ'>ƞ+v'ԫGm 79XҒѢ7LӚ׉QhX`o7'cب&swqqm3d}>A< ˠg'CKmvoU:4S%"OP!AҌi^Dְ:'S9ܫ@/+1E;[Gr)kC;ng+)(=܂*3i*2b9CcU.^GR;*h]qu0|<ƣ0-G&:8`4]8&dr00IfQ Sױڙ``(Hd S|A ^'_{ _% 1ozͪsn ikx'ƚ\h sWnQ,~b9 Aw̹=h)y\ȴ4 qftj^ Ҽ 8ڥ2^߯',Dg4v7UlN:ΰvs2vx^$6h_zkA(!A Y"VHð6oMs~ ey.6dͣ|yhZ=YDBoDG h3A}Z0cK`w$p0u*Hln s?\AMXjUdmk ,jfs]qKK}f{9qa.w,WAlq律EikFZCT2{޿wu.% T/Y&Z 7!Ճ `"U% gi<ȉKsomD+=#;SCߔ<`Z~ht7_q('3OwFJ5J 0j8W|&?r+ݮ^\ņDiH;0ՅL֜|ׄڼ$fZk8zk]Q\'˩e_4&XcPT7ߡQ SOc09Q:Dpni&s P~>r/׊xZ 6vEY{#]u|c8ٰAmH;<9M08~Z>#%oYУ=[ⓡl\O!cN$ i^l=VGڬK>9Rms f[`UV4p80yeuF`wsq}&aijd^r%SAWvDF\E144U8 X0z ga̼ 6FvJT}kq=uc\Z(n!ܫHS G>|OX=ѩb[o̴ѽ@VM''&'_g<(گD%1ږvptJSUiya)Q9#19~Kgc3P<}B܀8!Pi Afܽq"X6JvP~՛U/ȐOf@ms貛m00i:w m8RX4ţ[ vtw<C*cOrP 4Ck3`V)TV 'F~HJs U%^h!Ltsfb2ǹxnptmAE^պVNӜ R@̀YM)I: /t?S 8 U,ܡjO8$D'=?~ @7`MMY&eA35#$9dPT2 ?ߺ ٙ niu<n>0 bCB'Qf]!{{mPKe EV9|caUPQO9]SkI%WY3;WRNgoHs*K)-jS D`NjT ?aWʌ8Y]c95ŀ޽xo){=v=@Rq\v5EEL*s+W3v! E\&HJYɝNI\6\MoW擏4&̀[S)8ϬQxlNj%e9`BU۹ьrȄ~ 8y %@ 1(-OQ9"L@*ޫ%7.,M>rG9 tlӣB%աZN˙`jӖu8 [(Ipp&p73z賋љ;|/2@GXLtVZ QW7J]05sfHU3mYiq}r=x.{!9vN \?׸=NtF,UBoij҇o6iﵕh[.!ռO'kFkqv8>, b.5c,v '|8ORISx=>blɂ$ j_x'{htNeՐ:?LTWfX|IW)QT[Y]fnLP=H񷘍#v8cG#888)s JZKvUjk5Oհ&F']Kac=B|:W6폴]PP ~hk>j\OpQ=:煺^&=lNOm yꙅ.M|sZƒ#Nj<&oNf"Z5ǛH-Aj(>?e.ug/ThTtA{ 29S_z)wB`MXN'5=\Z&z(H?SE+uYV‚<4 `6m=Y~c]ЦߙJ[wn!<跤0g(JꝃI#pю]A LNIpt8yH /0<~,b )aVxP{D(P^5{G=b[^YY .dI@j3Ug]ȰS3%=g%Qo\ꪼH݂T/iQ89u oD5'G|~_K\Lj]Z'?nlEXRmM;qHk9ت^Xιezo$)j4̖ONG3")+#u 1 CÊM\zcԴ3-4)*#6l$ڨb>O78mUt-B %?l1 O灔5/:{dqv6_]=h%eLc+:CLԽKQ0?Ji^%I}pE_[IWDncurB=$0tE6 CR^FaĕUjrC7'#lH_ V][j'ҠY˟+'F2DiPn" >v2\+g])PT{imV2*gz*)NVC27tGV[/9$)KkZ#O nYVJ XmN7&!;a,PRLղ:;t!C|d}{PxjhO.=#F"݊R@]wn?s9kUb,$6BRyU\\1>2k8fCo ײ}'=RkmK]qD Ƚsyў~vG,|\N_gQa7@GхU%aeZO% /RF2WMfK= *B(ZgԶ?]Im?=9|l"Dcp ̾ȷ&+!'eޟۇxFqOzKfkIbv0g8z͒ ~yo/l^OāNJe^C} !raܽ5bnJzSrt3vAǶCUGY]D6.I6!9mACWPhΤ!o8|9=X譆?wroWBkTƺAd,hr7YB]&Z[UܡWBUX%n \vkޖqj:lYԗSk.yH]g=t1ـK#ujKCv!+ㆍ}(?A.&מg T\g+sFbzGJCv˯@ocѴ@78X[PɞU/Uce½! TYmvj&hԉ /9  Kǚ4+O:(11(s|H QnoaN*ߟ!Ț⫩&{ޫ|xV 24o2i1.f1~EDdZFdSX'3gFSQJ IkشBCXD[97c9YMKFQH=f+ZB g8h>{wV=2¶>1yPu&@3lTz^E.i"o+0ܽ ɑPNc\Olo]*u賳};U~Hњ^a7j+ur;$k"4Q6MnjEeFp9 4i=(}6ƻAnmJ9af{= 1dŧ<p)<22'q>< ":NDW8P ך  f҆ݴK̏7HfsaghAGxi0Rh,*=}ͅ9&1X-8p^!w?XC.A_V5`xGv&f'4?Wyﺶ6l|FimCu;KGz<$Dum=:O%MaK Q6z=Y]~Lx=DGsxڴ(U(2͡o08f{c)v7=~+隣7hݫRMEVv[*z0EgfJT-pE&&sI~VbٙU\Ǜo54yp`Εɴq-EoBKp-cu d/ %fcf_ZR j ݦ=r&>Xj?=r}7!^5f<υ=l< .{v,1s-Zt`EGnm2%KRlrg~3Vk.yݹ~WUGg6ߧ?[j"`46-k?c ;-Cke dJd ɱm>/:#$a"U8)Ӄ1_FBw.5#1@Śj>L\9eV݀!\Ž|K7`)h]J_i,u) ھC˖4?)1S95YTGKWiU9Jm`eDap\YAڜ;U<"AqVғ $`C鉯L U[}E4*ya }J0 Ծ9n.}|P9&c̢sZ+_G`J¼[LnΥ1Pd! !Ϟ'™ j %RHR.E@25 ү u }ӅKir+qyS%Ys;L`pIniqT,wKy]8V#4f$~0* ktOx-D1u)ASy3@Z*0Z4X pcX{;W6H fi^跘Uw۔N\i}]9]FA\zWwtqj\U0rbj5[ "DWb!mazˆ7 arbJ*{m _MA>7850tX`lF; U!uK{u񲪏4R68b"_~47x#c%+(5D7|"c΄RЬH Y)NK}; 6d`F:%uQr:w:qgJq2(EF:5}lY)|Ñ3(Ǎx%ύ&ܾ8.3@oE??-L=Mc:"zy9a n +%E!G5`ɻ ΃(Qg}]M6KCz* Kp$E^n $d7nX9sGx* *E+R+ݛnE)GPFy`SeA@Iajk\Eiv\e&xsFCD:.?٪'r"}xZ<7|D\۽f\ˣKZW%lzČ 0@d q&:<iy6|i\ra9]Qb6U 'v;tIFek?\,E{=e+Q8Am(ӕ"+SN.vA$'lu26d*N>!(DtE  F~]CF{/퀳]ݙ^=&Z. G@7mK̝~TBj'Y;nݝntK8E2,F 4rOj Q#z0G s@q v .'Ct?-_Т mF- M,Pyc~hm/dj/E j>n~C$Wh/(aP  iʑԩיͺ'm挓tlž7VɋEl+IPw 0msK Ǹ~!X%6@ڻieطqi,6+1vb_qhs}@HF &1[1YO-K,q9|' =`\i+fe={E,cQ#VO=uL]ЛO\ AD?TxdQ}Cn8g$ODnU !C'ZF Qzkpm=X)DZj WFվn m@D7⇖-*9%7v0dybB=+t?-9op:bɃ3\V8D)Ϳ뀝`8䏲=rIg2]z:KP7\0hp [)a؜4 +^f|4SAeQ\ B4^fƯ0oo6Itԫ?M!U@;fD#{A@'g? x˘ e5n@1)pL@UT b|nBXv{ pk*ٸ8)ǼG9^W`s^f-8 L8ts:3S Ns*0+0@ֹE,hM\X wŸfĔXHDx5!`Ӡ6'@"R؍]&FFDYâ_ӍU2ra 7oS=*C)5>S!1b3Dz!KӽR]<3Ww3n}F^0βL0AOd}IYJǹv:vTDgF=7 O>wLpБ q6K\mۙ'ZOGyf}!Jwdsͤ8*rbƗ3M5u&"~Z~ ]\4I'%ձ eývex@`I6-x B*SZ}lIlb%Oy{pXqխUս$eÊtqD_1\>Q:Sף9 &[o{eʈ4˘" Nj<|1xjpCA&Q[bYJQFQ|`k@jf5!)~ 7|IB 6;|y-C雌d [@>1e,EVŞ&n겸 b8f0USs Ŕ(џn+A .bHJ&a,>Df7FoYQ"M=M>] 64X6bvw?O0oF](- ~e&mJ}5d兪f{1mQ7av4A\kUeQ]"AY#ES/ӻs0": 7⨯ ]4zaRZy$DJ&7g(~:n!K$|c3ro _0B-V4'5OjMwWv{c0J M`TZ5Dt~\ |P>΅SF,bT*:?m=,otHI`^{f#f\+N,&̥HOTPϽ R)&Y";tc)R3K{N V76(Uց3ՙP" igg,QG,>S{lGLA#uXZAb Mxx.Fj#9sb<"u"9NyO0~󟋂jM3>בR9R*Pomi)}dݕ/jH_<o<TIP-ɳZk`xdE="E]fST0'什+l2Zl>v4=v=uRH=Ir$x2!cV'^W.tRD'p[VhT܍8c-M?F)š~UsG!YrgR̴~kN-8$gk8ds1_C ƾi][ϟج)*os::3l:N0TTE;Nم^wF ^ ^0Iۊl[7p2E?32`Jʍ 6l~[gL>Y9c_-(HnHΖv B+hkx:/mԤQouSUJWS΢* Q n=.m?GuHM* ?OWuzS^9m`} 7@cIv +QuX6_V8puK PLڀ=>?ٿcƓq~tGBąaCx6}q?ܚolm^Ojl cuEJ |SaYG$೛o'i Z<'Sym@Fs#FPQlKQ @yӴWߛt1t6.>SAtV 7iPv3"ZDOŬ'ӣ, 4K||f%{\&QXS8xzRmڲu_b* wOx*T`YPV>wIHϒ(kΎե^sIх.vSNMJ2%(i“L"77c{+v`Q$0XO3^YPS&E.O]ڕKE:OW7kqU_pw*%4N (Uu\z|DWĪH#.iBX=B شMPrki`pT. nNItdM8ZyM5!xmZ+>>Vi.堧X~lamӲ dOQ#Da'r"c|\&O_QQ[Dw@٣`~DC&|QxWbX8{o2_9폴/U'@pA;64KtX%zk"gtz3 4*dJpY6979^W<._ iVo"X_m uӹnd,65M}`ʏ?;q3"Ujv剷F6*o]W)ǬU+8R\vliHM,gexA^LD{r&=:FcEX 5r-뎖Ϝ-c]Ts9vE~wEaQF>dJc+՘CaFV 7s%[AvQVu$a9｟W+?ڻ%q;suŽLf=N㖹^WY'1YTf LGyV|]^S_0VCf@q>/iM ֖ Reyf7ʋ'TߡxbqאУv4-EF4bME fFEt^˽L>E1[tt̺lC #(Y~\ԟY࿪rhzYFӿH`PC)vzMIWU*`oܕo˳꥟QFjnrX, 䮕r[\0 ?mDVPIW5&ˤ RlXO pvW ԂȺlt$[[Īk]\!iGCk M2eʧ>$E.}DI~Bxg$͡x[.Ni'KhzW`cPUѱ4!HX峽e\{IA5wTt. y86xǏ9 u4bC˕$TἜ8ďf>^i z l&NA h֎;-4#f l蒣ͧ^ѱwW PTxHOt0VzdU5z1:(/踊؎> %x)/7Tpcq`֟PڮõO)( &Tspv{;.̛sw!b_47x&+6lȻw4YIE\ߖH LQiX2(!\+N LÿO~˷_LeQv#ͷGZS>5Dqf/t#Ngܽ9`%*pxZ"@f_A<$NiN7ѦyZ攖ę"dx0 ֥H Kdv##%Q8?)]ʲ0Ac{Z`斅ۇHCR^"g}iBTzDryVK9lr3%MԋIf" cFsy|^(ENUoQ+Iܨ]{92;-^L sizxօMռT}N)B HkXzTmx;o9y4ͣ(TSղECLdRM;yvZx<*h sǙ}!S@+sHr[}0yT8 ,,8'L,ѦJ;e{@ӽ^4]yE1A" '8!':z-3/pn&>{S".n 6y{tJruAx룢m_kot<-x;&6y#[郁!M5P=9=8Y3Bb.&X7k}h'|iO#A)+xj(=ᪧj?%T zйF"Ov0eϙ7&lA A 8i'Mo;F #Fss }ڂUYalY!u]"0J*olum-ϜaX|r4fW+}+ -[7 "&[shMxe&6!M,{l;gx7jUCsIfwo\VX V; x{w9^vL2g2ObWLمMWcX\P"ϞA{XyōDĤ90jPKΠTƵhS:[FN Io$t$~{NΟ iaZ{TsP \R&tJyV(9)xR.jż|eB+m4{PV(#_0@߅NcJX7B4ӻe 1qBi:<Z"lQJ}*e_ipҳƀez3eϑȑБ4O%1YB$ giX}U\1*r<<(X7Q J-L>vd`7L OhgK " 9VXt 64+9 P4Kl䉴h @6# o1,oZ0j&30<9:DMU񝸽bZ1D UD?W};8wuΧ57U™5>.Egx)jǢ=^c M@_l* g<}̀LJBH/Y$?z(! Yb+$d5b'uoC c"xc/^O*,y1M Pgɷ6>*=\dʠ'nu4 +5&]*c^h?_I9,N toZ[&m>3xAGP%W AT\? G:=\iQ l3W4#!jTf$.֤m3QX"z'#.M1e0$'RLr4g*Z-ɁsmYH˻B.2l{M Ŗ<#E(tx! u3-6N-PV"%Kvzx܌OJ2-Nmh+ n0r!x}Ӳ N*Vp)Pee)Ѯ7G+ aL e)ÓW0 !9R(m垉jD/mcia[ct%g5+ "UG% (~jYK4&[2rnO9k*Idtg`p֑yhHkȓ}*Ц<<1)6KV˫ ':wlm@KԠ5 Kh>Ͼ 䴅2,>fK`v|wY>_vgVA~Iqú.VkbT͸fjx^: o-֡rpAM뇦**#LAO/F!}j5B?XTBlD>;b 㒗s[b< rޏ7!%_,N"]s*?ӈuVZnʇ(0KaJk>6k)ztܖM*ae_HadZ9VrM0 #5C0mspa{. j1G n%vs(4;y X _ h{RH!13_)Gbm 7qH^w-'w<0E0U%yzePaK}.A)U/(3J1O%~1`n+}3{Sz艊T ܆x!#VpEWDq^FB`/>_q]Uz 0Iio{i r#*u(z/Bk 1.n<̿շN%;q$EuWTFewtMF^~=A0ټpȌ=ng‡4}kIXPNzYF>6csz/P:|E su:PjiFz z<ϲtFEoFT]/48F>Rq& %{b s^\7y|u\fwH1`&pԟs kNk"Z:fAV42` _ޙi썗9khG)d0%=4FH~K/n[Oy@X8A'b%qZc^C m:ʭM٦ wZUߘ`x辎 k@8K&'"j-/xND'},_kYNVk MzD5KbZkSԃSEx73 xMjK0Kl\?W3kYpWQpߞ6B~$6?DQO.)#}T4$Tchq$?|mn 1]$pZk;hk,FYr9R^y`*ߒ@Ǝ2 *۠^p 26$6˻u|h{%cJ>2ޝ@H-flXޥQOV.6=ޏw_VD5`Y_QYuجpOuݳ; TXE8s ,n*}+$a7k`rg7JdgA:ϕF 읐ʉ4':&;҇@uY8oKk)u)i;pk`P%+ďIQ{JHǖnh4geI]&qLRO.da|x2꣒fšG9/ЧyQc8Scw h"$',?y+rMgadkbT*uIqg˖}"I]1Js#Sr'z.¤T0i 9EgcN6'=ÓwSt =8_<|ҷɇ8eR*L]Iv+ gʜ!=2fi{Spd5j/FI'd׻ɽQ<^0tk9!͌b`ĩL0>2=qxSr燆|JB íVy#ɧg*kXs7 Ϯ UՂNdA,ĺ{ '!uҢ)BNbR@]7\'$zsX۰4Cٶ*Q"?s'A8rkY.rFC$r! m J+l~)p5݃/<0C; ୚(tО+))9ٞ[A(R'MP0'O~D% h1TjXϮ?ֵ *[˼6bfiX/BR= Q( \ W L\H])W/ֲ9و?'r|yb5fx3rk 9ی_!kk^=_y~2}3CG3bdJlKkd ӑ=cF^? e% ȅqF~&S ~ vn%rf MKE3%T߱xUE\4&űMĻQ%0x qdc"b&*bN#\5Y⺝,~C0 ͈Ǜnoc k@;Ri4y'Vғw9BQH2 @ufȅۙV54)R6 uM;l KԐЪ}mKc]CEiIz856ɠ63|&l͌ -д qkX<J?s=Ϧt:X~Dt^1_P9L$F(4Ve`\[熲bk-0RٌOmJ2w5vŴ,28{_s ft-q e=XMVϷnfG ώdݓrZo8)/k#8!@ɞFg97^jy&N8f(l]'ޔ 鐻W߃0[MfSE'_%fHSij dZe-+?㌅V}/\CRSY{MPIfXE5Ѭ*yKXʂNv݄MiIy2 6%\`3P|=sB.A[E0 Xz hӃx"LcF iY݉Vs/:!Jƹª="5ZC8xZ\"@1_RP5xfF$PզnakjԏKd]EVu).&3_G}B\n)L^o5-jDž@0eW7  i|YlyA*&,FXdN2[i-D0zh}M6]P#CObj-q؆P)^Jr$JƋ HȢ(s}e u<QQ*rs.qzĦT$Ug?^.2j>:p}_?X^QE_]8ik'1)9ЖgnUxf}:P#FqG1;&⟌,+{8EiS#5D뽦T +J\p6^> Sg#aBֈ-0 d"vVNR| '"=#:b0vL|Ju_SzX.1(q|@7򧻾 v#0C@  jjU=*Y KRX-^*<d?fjXP˫%GsBKP^}!Ӵfl='p [/@(^2x^9զ IUske9j%%戅9 3U풅\,?\; 3!!{⅃2DxN\0o3?nsD0gϧqW RCi?:&"dFұtЁ ?6\ŗ3 x3%ȷw[􄼘QH&8O;!/LX M`?CO 0h7H?3˅o˖ҍjksSIOɎCa;䂛czXM-~۴*pJ0pkeml2m>6KK6yZyq[x["mNsΏl1-K>7D<@i9hP2LmO-L/WPdVT6Q6ܛ@i#GגPJ~#rr.sBIlEe6\N?n  ^D^?*Wc ~,X>$Ѕ<yb"J"pocIz5;.yMyolG9q'hbǾ-:u[=/Ŝ,E\Oi:6x:y* NZKƊJHw͠ҧd'ZJ_> 1EG3b nƆږk Shqv~N Sc CsziZT]s5.LM'Zw|i1CxZS̜P]ݨ|QAA^c`Etk00%ߗWq#Xf[wARèS3qR2E/ET˸GWlf}l$5¦q o`rs367ݛlUNX,>i~j,pGNPx uI- [e&Jh l#^`4^bv'ha<""gl̝?fyJos̒Ϣūm`&y :%YWGwV& EaE:LQ_3RJJyf3wnqe.czoG\"?IC. U,NMFT[t5:;}Gy%G^j"ɗ)cad; z{ɱi|֎S:jaMO@AptR-]_H2OgV>/Zm֍˕X1H)$!q^5{:iHt>4QL_/*`gp)7eݩQo!qZw">euÐL@bXN|ɡ+j,{!+#~z~5&N_F!h \gb ͡Rm uty|4B`N)pȓ.窴Wc݋籟9Q`Gl QNcpݕC?.ޯ&0\n#DKZIt(9 &VEwήdĖq{:?(QL?6p^bܫ ~PNůH0}+FA1Ź Kf|*[^OUBY1h5=G4 :G؟1[9cv'O-fXĈCd#/,r|\^G~0,^a~TnWkz*BxU%;k^}_O7~ "|^o:XN>2-Ŕ0U;W" ;5oG|Ŝ2<:=VǍ~wz'0e;~XZ3Y Tk҅YXV/g펚:{+ѓ:8?5b\ǐd=([$<8Ŗѯ<5'M>t2 #;Q]Pv4pzUWH/xv|j0;7>94dӚgpzV@=PLJܥiIJTTNa'[8W[2Q?xbBǨ7P;Wqj|g5 >hE9C/7\TCЉ@SAoXgp A㡝a2ow? jfRޮ>j2]ȷ;9m{s 0e F F7[nB708#u){Wm|%!#vlA }#a$?j;Teۙ+Zz@Tz4)IPWo43jJ:ɉ(x{?D;w9+7 7>T˼)"ßon|z~;ưðq&=.^5 >*!D$iJ]ySK15{=g ܭp#_$^b2D;nAN: w.5<2GIj=k}#^qO)H_+T\zHّ|zo>UgZ mY@7G>W`P t*g7na"fD]ަQXr 1E#RG4o$ڽyn;[UC , dO_Z"jlSy]'"Z,2c* ħ~`*UWg:AWA^|^Mzq<lZz hWb@= L7[|#XwEhaH?1Ry"h* `9"%OަY|5; 14bW)x2݄qZ0 iA҄HW ]v]ĪHJWD}zϔzp{ 0;l3E⠠n^o=&,'H/xK삳R} 0ɍtXB86wR^{rO͗ðЂb]Ti...#\ M8= T8 KtkdiY)`1I USŎA\ l.1y fWQ _o 9zԝЦNBh)R`; ]Q2Co<#0r o\ q2΀'PG{ ^.b5c=+ 芶Xxsb$:8MCܒ~TEq#a˻Zw3ظD+䟋K !AX>Gr*~rokM.IiNXjYzM[x#բ~xA_|qs֖wrGMj.'W(:5s>kVc~ww/칤A_X0>J0_0vߎ3F;SG[7+JN=7!j 5U[xٕnl<Cj*\ROD×t|Fz"?s.׭0)l:$qMc#b!>V7ӴM{$Vdd!m_c11CH|J7.ӴMYdQ[̭IἩ6f.9쳟Ik/,b.6mhAH[vQ2&EQ( >•hj)?9s5FghCvJhj|>{L3)ύi3q{t߇.ҝ<d8_0(-@Ʃc=zm:QX5_D=@?[:1u {-qz1tL&wo})Ki$rSX+|gOjҡl) cv_b9* IM_e QHI3ngHEzs P8 }n9>Iw5&ۍh1y1c[KE_>wRr2xt["՛٦t7|doߑߝsQgL8+rg~uB9-ɰ-IKOA)OމI=8nA>h&c}`KnG[];]^{D7Tm3AX&!%D)F_YV*2=KO0odNn7~![*WQwC.aol`@rB?[W\ }!'>3,x8uX! [ )#;:K1'k ٽWn,˙7alfc wkc8iYUmB|)d8NX Qof?o23ۭ&=]Y!#kxþ$<[Vr=u·c԰YP$j+[|9k]P?Z [Nφxy0 CZr[Sǯ[:=`\A(_Zp;*\?A8-Ih-kݥV=ixKu:e"rF# &SQVbU 5B,ZW+CFFJ}Ӈqs 1}19 ß}sjt2i,}enp,#K-EZ jjhVn(XкKI66 ߌ):_Ne`;ǰ 7˨x–4&cHN(4c?v/PeOUO!]&/ql]A5z#<}gSPYnFSo M|)A%N7Բtеk˺$RM5%J,L,g\ S]1?4"Ӫ%_Eفla.8]=lᛰ/B u.bFBĔANcva8].HJuZڅMMkX%uK4$Y]CŌ]nQV;> $SX4 (kvwbu-_!)ZqPIV`AR2P 9g!#24O`boǤژe2&f 7rEnr\UCTxBm:!Cpin8ѩD;kU93H~*vJSEXЙe[9*$l!t E`_4M`t(e> >Mnae7uSJzá I?>a.Wwbk$z EȻ-HF2yƞQ%`d@K#zhyCև7q򟴙ۇ_+4r]sþdCOL>WrM֗^ Ds nM|V, 8z#j&$ {~}xsgt'ۧaJJ3m,h(*@ "7I}Z3jn=:bq]!{PP$Ju6Z.1)ӣeԋMI?ZGEq6sl,iHbH\1-L?c`` 0\;9R߇tb4Jjr=T>'ư0 :$ɫ¾^bEjP@B|MTv*;S}6dF5u<}:M8}=" G ^ t h<Dm%Бl:0j6in7ƥo }UViPA|ȶ#MhiHB04W%pD~ԓpZƥ yO'8/WxwKd͹O8Pe"!NA}L 8)MS6o@>* $58+>yy剃Be$ 4"q y p)ejKyzӹ7#A&J9-Mj`RAjU+A'JIJlӿ|ЊUOM1h:c4A:Үk]4=?2UEulfȬ rJ7scw'Ry҆ <%7B#2g.i*RGtL>M 3wt"iWfO'Q\? z,Ϙ5` 0*fL{IlmnҩƝS|2q 4d)n]hs }Yb"mRU[VJ*bOEGYCxxRMh_X,|gJ NBΌtQJ6>lbuX>Ow#\8|oz*Md^EzUC*E^MgCD cf1䮿*(˚<UE8ɱT%.jWOWv&^ dV<\T<~KyPtz@e71Zp>%.s`yW{›36Rd̓;MyPMM1 ƕ fP~pX~W2K:w|q[.Wg|nbJq\`V~Y݋gh0ƌhz o G;aR*b ^ NNۊ r-o3:#&Y=85#+brHI~`wm)+Ii^ =#)]>jY7z$`-"GGBXؐ=ФC]. eb:*.D1hwBUۆzAs\Z#Ϟ խm=k:C$OC-NPd'/󏸘Rn .wo ]sf&+z$0#}u+q. ߳M?'HKJyhoA97᷽vEn4():B,r6ϼiez VH.釢S-ZCmٝpg-XV@GtTqX\x̷rE]^\=hN|[tir''A"ȝ8߻I` lV`Gq6 Wsp@O_lQ }`%w#Rak0 WXY8m3*@#`vo݋Yً$ͅ z/{]VԤ5u5%#8dB %}5pdQ@6K,\rE9EI!=7[!$**j| }%{e@bX_ wm˕|hj2qs3h.g쨌QRR5KsXk]1f}3:qT+h2 &jUG/cߵYu%g$H e6KӪv] KxC6h@ ijnJ0LNZ\kɂNɎ9 ǀ}rak7'jvȫ_-$=G ?VfQ~_G?/CZ~*$zwGx㗘#yo"6k oY̪Hp%? _sB79{څP谫{`mRDT))%3pGLB5OPWp _ iZ,%n^a ,Pw%4+V0QM2!TZqFbs U ɼލ%= S=&H+_l+i\|M7|,U/rZ)V@EsStڦB5 Ƽ$/wh*(oaf"+mDjB>{Pz&k#ReƖ a3[~;ױ2^ syK}i:E$#Y9?$ Ly_fXY#L5s|{2oqtև۴Ҡ̿',p<}E7M9d(jqG6ÿAMz$}ʳ5uU9ƍAIYsXm7d9?\@k.Ch#yCGb/ TETky!.ӐL_zi4;ϴ.?e7  R6tc Fl\2EIQ`hFwWJaʷ" [yHOO [\`+ljLq+z1.n2F!73OoF-5oI)Xp<2 =.Ëh4bc~ D)(>-4ł`? Bbπ PxT+4=_/&Ei+AƚthG#(d0.34fo!#`ǐ W?†u1kV]0 5ln:Ё:3 uM [ S'd[L[E5DAV.K-ZDB1\:N &/;ޤD@o}lʜuC|BTpB~ N?Pr`FlD &U9C;4P ? նgg cS'QIo'ẠEP̳@-,Wgz(;o2cxEq yr^>Lv"M\ž=#.J'&W׺!ElaֵV=BMȌ)!v?&qVHU#-#@ T&I?ib5[`! %#C, 5b zHl6ơ~SKgS>H :=q倏{>Qj(ڈr]aI(Jh?3rQ90;dR!v7ǼtI~&MJ5i ėAx&ˮ ] ٌNM;recuіZ:5f bK WZs6fJH|Ajwz^:OHߜKs+#FG:[]v|\RpLO{.&<#,]VM <[-%$e&"`A;DP ̕=aܜPbѲݿXθI/,;m_JGMWRܐ9aag OUg^e _sdeJij6Yc_B46vװwq.20/hF†,NىgBQs}zeZZMu0[9ֆN,$7?9t C# bSF=C}u.?je_D酽(e$aIcCG3ӚzmoFd(bB3:Mb PkȠifJ׆Cqz#HR 'Z%ϋ%ꡀ$ ?MVۻCJjZ̪᪎&%oZקы\7oٱP?l0Pv3YEZv%e$]XNEsu"*?J"MG*v$ÂļRt  _]Jl5gq݁(w&VUPdNgyj U@SRp#1'0Nb"< {ҽ]P%+yxCyUL x<v5 j4eR6j@1rBo:XWgs^4XfZ>>#yP,C0b e7Ǿ"W$(3Jh9R-Gs8?ϑ륄+N[L1(ǻ%mwF &<;V1!EP>$ EwT fs  nMσ˷A8MHg{W)m SQ4` 5-&fX%΢>NQMfjqBܱ2s2"_2"# }F'5Z'EO٤No{\dǿphC" t@_`Lo`?a@w1}-KR-0鵍G\ʛR)k.M9bc8Xq1ܱE Bk!q([ Mff_+n)ndH {"ѨwtxVkj/+. UG3zxQe =m#i>i:LcO:P&[!}8>ulh p{lFGS#}H%YYWtb6U:*nZOj?wN@y9%]p"Ql檠!<=bC*ܟ'"&6aJJ5w#ҿ gTe1 0SvQВz-_va!\SoNXg|K[?}Ъ LW⸢~p71!+zfag ٫ 촷$ 'p9J833?7 h(_m&ֺ`@@wkI!AαuI L42Afbz]д + u`  oˆVC̄x\q9d?k1c.r{H"sf/7уu.#%yG",{ RׯAlT/+C>}OH- Ztgz4v$_WJxR,kf1X;n3p<ܮ)D_ވ?$+Q̻>VKlaLnWdQA*=!RU4Bwt#5Fiv?b "%:Ї TJc^Kއ{-u2"sW[0S?=[":lyxRODD-MM40tWg;&3,)Jw˲peR|ՍvV5H]v #&:À@i6Pr4o<tAgNG ĥBt}J7@Q7]Lj5cu֦m #<ՔhHw7[L~3nM_ G#zE D;u~`h-6&O@{@Rt8se:DdCWjv3 uqoJ$ Lpɀ)R"4;:/w?U_h4@e݀{6պ6zW@}gvPOS5vZCjZG ȃ/sǚO3O,bNh[GeH"g.Zx/_jJȨ\}l' 7spnHa4 ǏN\ 3=4/UOKw"-JWʂ'k͙ʍs"6\d`lõi~aZH%Byh  TZ+M='n]=,t>WIK/Y(pz|$UE$I;+arfm$UÙB Q%^֣k#N tN8.<GlJӯV%ݯqܐ2.SsIB_2Y,*k0T? x~mbh BYe{a/E1@NQ06EjX v:@#rd߳7:wU[ԑX&4 ۀa2o v@hF= Q q1hbZ3 i45iAEUɄpZI.K疙0xkb"Aȳ(RQ~ӌtdCz~ȥ2LoXw9&-$Թ Nٔu?#Di^7OyVz AHI$w]JҒV'/={UM 9h'>'()ޓ$Hg>Z;1B&; d׬goCUWA3y7 M}>#:Pgn]a zenGȁS1p@EHR57vgA5>ΔBŚF?bXm IbF!  7NAjv؇o;FmlN'[dn#?6SmHf*dZ'dZ8㭾rNdȋ[&[!~u~ȏݾ%CpGt:GYFR%II`_"EKg jLIx mS ,쵈K yfqn0:pcS봩~܏Ń.tMX0tQ*H{=?>{}KM_< dIxL6^18:VqfkZG Dh/[ A:|ϙ˄*WExDkULrm,| (ɮ~-T:K@M"82s]êM^a_&/%bxd|=ƴ;6Io[ []McCVukxe5]|ckg0WŖȂQ dYŢ4m'pK˶TM"Eԛ :EZ4"VÌMzYma]m&]~$%zdʤɹEܪ { W,y*lEϕT,x@ѦbHJʾ%pu5n}VǔrvZ-H6KUT>g m}ԝUӌKc鰁xNZBD27|%fK*yM kZ-U  &3@Ntg}'W쀛Q"WVtqTP3'];.5J$fcg!e}s]$\VY B왳GByh RO)g;;1G!xX %P]/}˶^qRa"kyaV2el'ܡc#! 1 k>6s'C6\tDZnbOyo߷ :7WZ!N>yTVk~-O%7 0H4T9IP|Wzt1dz9Wd6hƨ-y]fJUWWjr|tmH/};A"C frK̍8+@<2Yx+x1@A7$)>oJk`tLu=OB;w?x+f*֮ʰvm%xFVd\/ +4Q&{7|uJ t*yTe$+[#fER#݊u0Rˋs:[gucE/j8c](` УkQL}sN%l:f|?F?O90*12G~$E 7%Cmk[CU?頤zΦSK>4,&tVD2c+}֬ѱvCL7314|'+&3n!lC}2(@| |Dq92, BJ|Y6ed2#w䚘Oꯗ#gFNY=xgV%u!7 ,6;AR& uJܹ6ǘU[i|'zʓNjQar/w'a@3ǑNg¸4uCgњhom=g]qΞ$47Mڵ:@i>qPc}v.$.%wP^k)cf%ǥsxrQ[+(AƄ2ƃv݇4P9(m^& >9u=:Qvw>@V |淲u[EiNAA@{嬔֡KX?]Fck@IuiAsLk=*-ݰq5 9A<)Xq;5{fk p. x+Eړf5-{J t8Q_wtpݡ w+ ,leܛqFfx °lbIu!/in6bv8WEtjJsTo>3Z۠iRs qd5o䐛L Pa@@tG n|H3^~dbld-0WQqL%iLA_߰7QPAK:O 겫zM 'P iE4Գ2ň9wE^>8 Bk,u#CTֱ<+܂}J~ow: 0{>O'bPMoRq잌#(uk@*@;߄LNڨr/x'."/4RQ35U/Qrtu&tP5ݱC}.ĒhHI. ;-Ě~zyݬm>.4<̦VC@dauc!x Z%K..}:%Odƽd3_|OgB•8wu ixkI@z&7gy,8$\Dљ+4$+ݙXj#N?--&_A4ݲ&V>4b!:9*ѝ*Ph&a/ LA-ϵнS4G3UezwVz7k(}#ihd˃= ThM9߸0V(;)` Y\ۭC.KNH#yhJH}͍5`tBLbˉY TJJ=6@XG3PUs)Xc5gHCrm IvɈ5!cfXr)rQ a*  TOź.RAD"Ճt&}u!5LOӀ>fFi&h3(3ۮsW`ȝe* a3[-}4獖xXbF[Bgګnt]ir`<_6T۬8]ZѼ !q,76c+K޹B ɘ3Q ('ly$};sn,;j0a~z>/.OIpOotK8G=R\7$P{ʾ/dK Ms;؎W|s9}ܩfӑIj${:Hd,matQwif[,;E1bpr$Sh^h{Kp S*!ޛjD_x;z^ȚQ(rl;3Y @_@FX K5-ƍT ֥y7L< /3ys~DChi礖3! S|Z b2tT.wa.H@ /YZ_Sv1 h p9 fVɤ>#G 8k\J_;nm?Xf5W ?5eS7+1yb n%ONMT ۹%`๹ʠG!~h!gV;UF Od=DtiC Qf\4y*4f75b՝VRMWC`d> m- .xPjmiW5k>n\6A\k.֍4&I{E9ߓRIDfcJFyb1b@FUJ4 Qy|s0e92uM@-rۀ$ uNDbks!ﱦwYN}W,*2N9QPFX"p,tiےbLD!iJ<"J񱤐=%w蝲Ophr 3ne^,񡢷=/,^wI0NA!(,t+GoZ9 yDRԑ}|ZҜ^/P.Xr12u[@!l#F#B۔1yҿyR !ۮT]Z7{_{"ujRt`u~<\Z1ո$e]y]N}Dn c1aؔx*bpeƆ"mM+>#k6rr lq}-R#@z0'k+IO\V4{cWhԏCɶV tםأШgGӤ CJ8a)cb1(hVp!ubq D yXMcvfVa{K!_|W7RAE:G ׀F[/R bZ̟LJ/S9߯8XGEz !pPI[U5GhQ͗x~ ._ہ{tɫ]-Y`(9j(OW[":BNSsRxhR`.݂ t&FB{?0?ft8zj[ p \N{.KV~.l;=L1N ClbS/0czKY}#bK+czK;5ED;GZWFYzQk0Z[°-:N0i)&Eoߥ#TAKX% '@w* n ,m~`p!+ pr2+3{t̩Bp \eqUsf/1E~(XT +4?2̒Y6l΀hW\>}Y0M DZއ)m ܏Kw=8\͎(1>Q WƯ10Ut٪6sċW6p9G[bNA 6qpXwe ոo0rLo!4жwLl|/|qa0;b1X,;KT5OyI}?٩CdཬZAKI} 7WӒ"x,O_._߶nԝgM^$qLj͕"e4m n rr%DSac2>qr]Qi&igr̹J}6G}*Ox< -t?>^~|{Q&g5db4I]%IhhHwjV-h\{~":֑3B羭2ű}&%uo^zNBPIbB ;tg \ -?:w7ጚ,:R>R-tYc5?H Icni18mht*k~Z#Wfhy]s++%vY' ov@"(o0JB%GVH)j{ ߹>hU,0Q oEL;kfPҧ6%8LԆfz<QبKzXeRJ "t$Q~e'V5Կdckcte䦊F[5p$p_&t bEHhD>#zV@*vTڛV<'u Yd="'aHPdy46=wy/AvaQA;9aBIIH mqAS'ҹ *>sGe/tPp$ХvDΖgGw.WBPx1c$G<rYңWVD>}>3W[t!02} v5J'/4x_QH" Bۇ2AѲ< Jk-/5W +M̆mRLIq/VcG$bXRLY\L$xH#Gt|_1uswmN]5 Guұ)vMЉ_`mژ oc$aS+ ΅筒ȵS<Ɖk25ofjn1Wq!EMO6-mt5ÿ́_?XmT \P`?z8^RE$T7$Pwd?>]wV2x{"QhYKgwpGWҰdm _p2>wNŜ/)BRJv=U9HRDku9G\ Xh֝U>{.⥙=~p:;yeCGWJTj:G$J8-jn5[%v7%|:%S៌+NqNHO\2lW&P+JƋk6ص#+QgS-7bv[ן]Z;xHo er>U ;tka>=GƥnNţ 1Դ2DdvW 1Vb$Lɪ 8O=+ɥ)ӿQ;;|&-8N[mKuJmh͋2Is콳s$ebeΥYI4-8)]Tz֚Rj38] `hV!˽*CIh&9E QHPjhh$TO=`ǫVV)䖒YORKm-<>"]/Zs6NƝd`@~ {kc5ԢB. R&L ~edTlLP.z*TRaR'_*$hhv{l K*ADA)=&s>g+Y_:rOkRt8mDS4*(C1N@w o|_aտ2=jK5%67uڧ-SeL!"D抂_=k췷 b{o~`8iZ)w7$جbNHҐY9x+pR|JKEl{MQ\We R{(+ #.?aX+-@!>O)Mmo?kUMxgTo~P3!>Wí\ͪUb&HDR Wkk <8Q,S@cU31^zhl_pHg!i\El,UJd1X<}.+T|,/|gCM$A .E枈]5<Tetk|w6g _9mɠ#T ='&:E NQҕQ[%UurW8^ƴWd 5c+\˥LE̯2NlVYĐR nA:$b}g~yMx፬_:l L$(S3/o -6j=X]FѴCuXr`.S0:gf0;2wy/@_LZT N¿i;ϲQ >5m+4JsERh~Ur7?J>J?RE|Y)33t~Fzliq͞S#`w8vt{3uҘ OJz=g,=?r1J!(4mjBj=1-! CD4t9Ը{Τ>OޫG\2 __]XTJx)˕RS,j%,C 8axK`+J3&͇g(P*)E5!?zI7oHj~-UwGv}Gc]{Lz_7R6OoNbi [%$g#!Z8Z*Wt~R.Rs:Ui 0vvxwC fܥ&mL+չbջ43',EDP nzhمh[8tI$,j +nóF~[(EvẀf:egMeW,jv/vgPA9UM6pz%Ȗ_U0V!QChܡ骇qXRM"{]*-*=ƗNbYe0 ex򌤪ROC+Q2rd]SbP98kpY2h{WIb两AGAc;7@dAS,9HZḀj<m9`(D~7~1~4 ]7m s/gsIl_|[ʭ(=akg/DgNP!=j\ߒ#!oT❞MU~$  NQ{>E@*" O>6& Vб~QgђyF-"EB#70( ptpH"Tۖmd댸&iN0Vzz@6z@5QMf|Oe+@t8:6 )&H]1BToObGzϖAQX#z-#p}d'z[ 1.F}A s$e Rܳ7B.0hgBst3BK1ƀgQ3GMw>s#qQ RPa_c%_!sZ!\zv+Xdf`w v~IwT'1GM~^?ʑ=*IM,tsJ7׵Qg`>&Cv4eZI;ZlpLŽ0ʡm<ۈh}Z@USMs9c4d4vRq#MOW]Ir4h*uIR9!r_֨a;L3!+mU!LHg[mQ&| yv CsIsUH`#n48P8>XI<[gFp%&M9VFbesb$fӗy K^wc#}UŝbP.^ jб%&,*Q`iW9He|jn pv1gh'qB{KhK7T'q93G27hs򸘉v)c•0[V Abz0 )F4foѫ ("XSL1m"\ \bW護)2 _BԡkPbAOtfC/qJKjQzJW‡Q~N&ڍyN*8x{hWS +˜W~@ꬠBn+1_p)zR8@Tj&/ O,J}WZ+F#c07 J\幤tJI2C5Hq<)n nL b:=y <Vr29L} 4K(O_a>6 3ӁR~Z1]EA9BR q1Nt/RvCpڡoyuZW1*puoqςj3N@6Pn&?I~!ONN]tmt}َEyL)O<4bN@vC0:V1E6YFT}W13_ĦX#t@G#s&1F^hm )a<SpbX#h۩ ?ZC̶q+3-.r4Aűh 2zߺsr&!π3%6$8b? W\I68MsX2s7|5 Ts\ؒ4N^cm!啙Ly%+Ȥ\7(1/F$~8xD}bE\bv`3#E{.jb fWPWae\*}:~DUM 0oU0{m4BD ({El۩~Ѡ|'5F1&*ITEueQψ0ysͨzno"Aȫe8:~r_i3z]b%mgM]Xgzkd6_r|Sm5FV4w<(8U%2[+¯4r5m,HO%L!d8wbAVK 8]yM^ i{YꬽbSyFFyRhw#ODAG曱ZpCu==0qsedxd~B~䵊1k9KAի^ %k&3@V)m(!De!~xzM%nk VI[ITdqs(s9ۓ%$f:3Rv27>w}ɏ7PO1/Td2Ktq\ Cۈ GdYW-/l+ F _RQY:=9RVsBOvݪmC ݑtpQvI[2ƴ' Io~PtDy%"S+&]ҭ+[X}wݠ7\/ys|cIʱ 2źydCChAJ@Y {^ }mEaT [a]JI=Ixf>: Sy=R$Rcd-4!GxN4\%05 ɆٕJܶ%gz8uP-|=||~Z2W8n, -nFQώ|4Yc3fpᅥNbIx'm>Jqp:~go O-͘gNk&mV[=M`/γ̒hnu'jjg驓2GԌ qVN~00l^l%eUtxB5:V_Gv;Y uNO Ūc0oZ]ippX.5dBE*Ue0cA eZq'r28qjeu8g)k |E׈ZvTl<&ͷE7B5+'uݜZհ}Z%xtA)(똡[T{NS\8rIFطy#i!'$.Y9J'I`"6LH–" G}YX-C|h o"_ꊰ$-Z(jXuPGh> ,uF-0!GF6JN{Kwp+j*{@P}R3lpک!fM H dgv+["2ar3)-` x#-$_v"^.`/"ߚߌf-ֈ?epT:XlLK(X7.k'`]Y'`뵗9G=7YNxFVZ}Z.n-{Hn?"y&/Q’H!!yb1O+\aPrsaSܻ8 Q$馫}۬<&q6u9*ʴ WnF Grin$3Ԅ.?v>#;BX_}-G ^ءbڰ;*؛w:KJ~_<0(&O%8;ɳp>'YY ]f$Z*hA7L@b[y~Ga^O-'5%ߦݘQ L:aYt0YugO%_ ~lN`+vJ<ۂFdq%πaW9?:QTئzrmP?+d)X(Ywc>//E5Di%j\p -k_uӸ$eNA~iXgUe\sX0Ϟ5ym";g۲X7vՠ5`m\L-VʒBog6#KYВ0POJB;›_L9jAZ,NB{ΌS8݌-3;K~#=܁2̽(kp!%)"

7:;<9Y-eNdd! Rl\ 2?{(إ;-:ySeG5-?N} iR}Y J v >-&|+d b>>)B+ݵ;FJ%hpuy50l ܖ8ͩs&6|sK1'a ?! ط2?`UYgu}d7] ՛{A7"}Yӗ u|0z:AdUFXYl72ܳԂ0("'vrqҳҞWHv/if>' 5iIc3ҷjfK43Ai?V~pJ?Sξ}e-#vC"#U٬ ( AJ<^fN!5c hM|/q(4Iy) 2t@xoYA|) t鈵)/K*&Rdht1[}? A2Ѝ@`*qU:qK`f¼| v| & wj3[5mIq?#zvH4mPwO3gcͦ‚^\IFkB{kEp.B!gA *^V3k'3+[ U(44׉u]!Iݿt0@9+ r".$E:\(s"m(pA{1:㳛q, ]EqUe>gPT8c?s1$+r?cG A VeB$Q&6ڛ(CПCH,RkhNU[_hC/eu:$A٦uy/DlE `ֻ|=r >5ڗԱI&跑YcJg@S*\ zLDyE>|7RRsy6QaGRIZ d#LHpTm N"aޚI5"k>.M"C E@㑐29iz[t9SrS(ꧨ[?  րoݽHO~ {˔-cc3P^ rF=UjĔ>jg鈊TP&މh>(vh^Yx&?rWh1Jbw1.o"%^\mAy0w,;moN$!q\s[aAFAr-xs|pf=v9[^I d1 & mi4?3q**k/4߯wM2% ќF.x\n(cON Nޛ~ܚD}&ziGvWz8Mja8 % x]q+lboQC6A3kecÒ/}Xd"!%`ȍ4A@pBG\%u{B֜fm(fR"*e/fr+n-h~pvұҶGHNxrOFߛzY!!Y(k옲dU+X#d/퉾&ij.9uj9G#8r#51Fgu8_)`*Q3M'۰q4{Z3B] . ž'Y"bU8#v18XH۰ ؁D{^2W?EPFhŢ*JD2I\FeCe9 s|uSsVǨsv68|:5(?7 fRvp'!>,6}%M/l#" 4Ћ:)EQ] 4$op vOzoXb`d~ zEd -@.Y_f !|7*ݝsyj'r\ϤQ6t"$:^N սF9l󉭹fOws9^]+SkXă)J?MQ"8K׭AMRpP*7} Z 6MV:wj :RmlCF4SLSn$5J5AE/Eo1./Y/|IV]cc1OaiW-$[VTk1`԰Tqd2k~mޏkX>.x9x`;q ,ϓ7 My;\=P[slB`nݠ#&vD$l;Q<|{'|_:Yc5Ը8XďB-Xɇ|` LhŪx3/68!? ̯0FbԳ+%1]?JSh0j<5 FS]Y󏾋gzi#^(%{z(EW["[+O$_ZgMFWG8є ׬q,2PHty,I!"acklmbV™)=[_sa㏬PF !&}J<=-م3`!,z,,y1O]M B6LhC3ղ8G~aUo[*N0ayyi` Ͱ E"yS'Rk̍xLN=P5ǔg1k/;irDw~mn}l>ɡ~G 8TBLg5ZP2{MH+qxFۀ9@?_y+Z\r1ϴ<MMNdg('JQUj7E&<Y/eUlBcP{P8_2アa qI ~TDEi:c^yG;˟i*~Lk'ة*1GVR/͡<Y=Ȅ:DTCp@ BoNAY]a-§ƊaUƒF"G~uJKm\B,Plw:׷V7X9ӷOWFKz O 5u mnT,o'a*ѱS T(r1ODT=2N{\ W8X_EGmd jіo<'*,q>Gam.C6X]P1Ffp;P jA(#0J ģwAO!UK lG`;71)-$<~#$ǒ(oҚCb䦷pπLi](C ardyI:6֝ :pӺ*,uZ?0Kh uU 9JaZGSL|t2ӲS2vg%;Gd.+9uj0UD!Lkk=,L/nWqPx R׮[Վޗ ozd;ݺ^k"Lh@ֳ7jޢZ G~I'v'?'s;U Z|z40-.ëK0`bMfW~0X J4}^i{N_7~^:烐t֨u`NmGNY(%`EnЯ{9ju%zjU[NTP ;`)d)Y$8蚙RBG#EAA_Z"0/N(ܒq+o!AR7׎1Mө7u1`D{+;'HPJпx15,bw_<}ܳ#Q:~1 {$sd~qvhXV^ח.tGĤ1d[x+~*ǐIV7a4UNe7_*oD4g׼Q9P=d7@S(Iގ?iJ ӉqQןF4%`~, Rh3*,gŸw;a-'Zsl͍[D<.l-@e]Xx_oTDf] aj&ɑrl n)2H_C!L{j,3Ԟe(SC1@lmTq1 |\2k /i6=C^,/hlUf6=bwMwݪH#MnfS˚{{|}efg垔@Q|'~;ALSimUZ;Nwk>"tO1\C!ky b#QA/oDF6K3! p 9]ᚾh$1B ;)>tx4K F$_ؿ= Xݎ>C lzu$" xO;U3Ľ94(x>LGvT4߬OkyNZљ .* !)XՏʮD_]Od˚dƴ"Hm-@3&*}N|-Q_=c|})O`yC7 p՜Luh塲b0]n v>*SlwA܏Cr&k iyS=Iâw5IJԈJ@?(KKo\)Oq]5h}ID~?ANG=Srg;TYfΪ!$=|ǞjεH~zM!'^h"XUD TKWURa?SоzPX(kFGIXRD[BhFCn͆kΪ@Η=YG4*Bx &yY.Q6k&+RN{$&LUߣw֏J.4gD~ʼn> 'HrLBſY" dN َT5g|^ Ao hEɝ晼fZ7֭ B6 \%bFזc2閌Pwy6;si̗Qʒ9kzYkw)vW@#֌9+__0ut*0_F2^"+׼2;7xʆOF[y\ytIKȟѾf[ s~KpM9'xÒ[|/:Gmeͻ4o^fol˖"+%6Q!>`kQ?i].7=?XDgJib%paj<}Vw?b}a Vi(uW6cfy.]!740d}q8j煯I[oHI+&2x޳\ 3rL6sbV,J֐ss5_DF\]m&xqvLMZJL~4q&Ue 9wj^\q MRn.3;-1QFe@9" m35vj]7#vm #26 j |tYdu27fPIhIFrH Zx=o[nXe;{`|)Z+BK!{6CyM{2~f\=Jt s,Env,+dB.ѐs3 (PMXpc;ow0~({d]ɶ> \ eݯ?m#S-.~$-63KU(ޘJOMo.ZAL܍tg gfYe&̮NUА_lh'YnI,$OHͶu&Q]2ΔhPsAɦ?,A` u@é61ۜl.XjmCu,Mi{b/X Q1WP5gl6/g3ȹu9N?'NJ^)gہt(l(2hcd w1A{6YLoC@@B< HӟqcI~hn%1A"yZ̠:<\_-7zCC{Lv"͎^K$2>58(dg7X+d81p2W:#<dld\8k6dŴov L#rhqΧ qCt=1i&|>~l2 , 8Y~eSU?=ݓ3>.z^Ùc Ttve%moT }'Żj`Ѹk+GN^s|5'j9@xc9h˵~3׈s;82˦WGӫa%=DI ͇2u, /.dՕuQ'=7 Yg$nu9l_.1PF#úlf a_2j|  OQs0ݏRZ Ypxuަ9Y2ܰD-%p\Rg2@LĻH(n$=6PZ gW{BiXH0b`sc/eMJj|h,@OàB.Uy+}SF ܞ9W6cZQ3I֘B[=][bUvzQ=楁:1 ix0Fu3PZ8ysw!̜V"ؽn"bxF"֑S;PPR+^bMרP U0"xcAL]'/r0$G9gzwbSvpu! la̩L$'\-]kKQ/<(}m\h8czRORV]BiQѹJ.iG94RÛ^Ve3 \22I7іlnb/0s]`̿~!|Ck ݂z}x7?K)h>f]0UK8 MĐʙ d@oe>WU¥t MVۮ"Gxv?$Dӡ( ]+fhsϩQA4e@9H8 $]TE-LG}=Tx.'+Q8W uJi&aFY-^my7 x=Q!`X21 U:qz՞Kmĭi|W0!3b2VsCCiHyt~ruxHi-5D$kTFk%,9b3]uE[UbM1zzx^<9VD$՗i2ew.6QT9) -wxnb>?SNA?iȄ_RRKg8 O\?%=o .Dh\OV"k|2򩿯snpmTd],3Q?R@^*<'9Yjn0fj&JDnbe17 q:Ѹ?Y\%`p[˖I¼ۺ‘?߇sƋ!7AΎ:sJƒIUJ^G,ޥYdT QKb0B/# U WYCr?eUj 81kl!bà" $D68N?~6--xewDLDAdmT8JqJDw9-}zPEIy'3JTM0;A􏾂&?dԕ?* _CSD>VMȭD|;n!ztoMk]yvui} L񥧟Hں]̡s(y~"T&1x]Uda!7@'vkɭЏ/RP7<$/khEF)f[wfSY  e٦ ͟eWLZ`R.:pi! $T&Z T*EUGPMs6>R~:CY6&Yv34iټ\C2@(=gniDQԷ !LQDž}MՅEoِdqwꚄQ{Cr@"CŤZZHѣ*f/j!<3,bJuοA tfN­IPtỲ<8+6CFRSB9|̚fvJ68mN'6/qDU9-l'$]hS|}f_.}?2nl'Aj|wT*_XURxl!9/ru|YIIڧp43 {g=@cSj/3@ ' ?;DA{n]ђ_+˾zۮ9f?2[XSf`lU`^I U{(l@s`FAk#qŘ}H@O߉A=rL@]:KBF#2P։W=|W"KxZԱx[y؟.tfrӘ%A*N(Sd8X*)QIpv@ ?<6wٌwθG S E̖ݐ8+YY@$c2QҪ%O&:wאVp&cJ*yrޘ|>oC5FYBB f1 Ds?n8`˗cߟl+9i+Nye0t^"ahN/պL,̘i]Yf`Xu13O$.(=wZl!6`]Aa^2Kȁ?i9:剟[. ۳Www=1TAR*ߞ9r .{F9ƻNA (d){nݲϻvqa4ޒsA6$/`ߟEr/ԗԅZCr [`E"cqs!ghh%҂˄۞*!K]Z]py@~`-E: s'f>NR.&7MivB[0!,鷘a_B[`\rOFĭޖngpj MӁyQhe?xD7c% w6:5*Ny3Z Ѧc3i> YsgB9!dTfVzz)h'с,Dz\6vǍZ +?Ok x th/#Ⱥ$p\Ƃɂ0=; "])=`ISDӓA{ᅂ<QeiJrsבD\֪_߻JҥYϵI bCHҫ/1B#RTEq v;b)e{b¡F9"9ѡJjZgí#M4M  _` JJ{yid՟쏲H 8/džia­2=0>lU0|k:z7HQ*Cz9ށL~΢or쉄la* !JY o-E=Wf x8MpJ+!ײi?\?A^y I1]tK0hL 6:P?< r}J%B\+9ڬ6ÈMXA#~0yW'$^kMr-5AZ偞߃ty' \Qv<[a{eXpzf Bʫvzsz oJok-6˲Y$9ˆ 4}f%(='.v,,_킪~;6fؾC =d_ˣGdòЕSQtC%ǁF椇D"k?z"V|$d{fy)<̳oЂ'2A-dr)z>(x>5b˚/;@uOO'աy ^ˀcLWU[V 3  ^qw#~ pCtmZ2Rz= *NaX7#-%Cxs&:L{.凫3!rL^~^\5D #P*޽ +7BC| &:K"*WB'[(9zje8ΈC\Åyl,tI8 mye#TW\hMaƮ.o4}J5w xldݿID iĝN JL9 لZ,nGīk*c.f2x;fF-l em1APK]ilNضg3LIcޑPW"gK#atG`~/FҋT'p//jkM-*~"@@4h*ǁJ|g! H zT6bIs;JjcǎG-6ɔU໴YS4`+  n &à?`>EaX`ic ^zյ;z;I,dYNb(z(c%({Q/A..#tse,^Kf{ Z®ryײAa\ 9ų3WuCmL @^MҨjmMrǕ6p[C;^8tnI2_^(}8.0cXc#N RS\5Pr7BqjJ#"do sj W{˨;XgQq?2 @+I/nqt\_o"e3ZֿE/UrW+MFֈgNs^:>CiI TB[aɕ]$ߜK<7VXپ("RGigc*G/qw;Ec.o kHĵP@(0<_3ڀ)|s "^\ [K3D/'_*TygIcKɢY޳3-F0U~UT1k>;G\)GZRM WQtwI@WTد @>H)օ羪n+BrPK zgWY($crmiEhC:a_cqZdxuȟwF/3*ր){Y.ly|iQ@Ny'ʽaZ?Lv€Llakpݾ(s-C oǺmsN~+xtj;09濔u#.ś;gڮkWPQ?|EJskn ĩtl!lR%UX6dWH1Z2L?wO= Z vkQM_0|^IYe$QU !6R%?*O!8"T4бAM OX'Ⱦ% >i_ G3k:ȑX 9f\M5d@U"?9#CX}6o~I2LX'!-@@50eܲ{l"!1*i(y 0jtqX28>/ DgG\_FdR@k_)|Ҡb i<12MxЧ*. t#RAn}cr!Z%t?DDQ^<\OEO@GtiCjj.f]7N5ˊ4UaFBvpɒM-w"hbr&h}.cHM @ıip8*=yȤWi8 F.aF4rgԘ:vUDC,8>8}*fz;z4~;řiq^sت_V[mTjb}ZbVZk#{GCGG%hXZ?`Xzg*fX,e\]7D|dW`aצ5Ȳ+1pǶ 0;xO6WK=譠a榈Kqf5Q{ҳ^{ryH~-xQ)o,*rԢY?ʚG[Цwhfɐֶ`T>uK*5bFYjQ/T&dx-%nC`·#ezm+zW1Wmg}$u? U\E_1&Dp /ޔp} OuPcJBADZ,WN 4 )1bӗU$xW^v6Ra|d '!W\eEOµSqԄ6N={n۬GG*2StK bi?u·;Lh8΂Z|X{KMji߆E{-YGQ6[4j,!ܑodž!~Abc~9ȋ]L|4\ b҄aD} 5pn޸SӀME-M'x]7)-jt3 (fU-'-ƠwC+@fh'WC,bWM]L LDM5.Sn6FmFH/$U8? 饿(1eWҊb͛2h=ZW*ω-SgJd֨ YZ=&M ]m՟䮷,zB a鎀ʾЋq-Xx'w8lw3ex1dJi`:`2|n3̟s| N)Yr*-[˦ &6JE @-DlNuء,|2}=卙Ӆ Y\ށ[V:OR͟)#ʎ9j OM&qo)r kQޅr C?C廑b#ԭh P kuμOTpr1>=bqdVsҋ×ORHR+' B4>p*g#Ѵ\/[id7{,dQO^Mm%k{qinu#ŒEbf_CSP!Zdlb8(^2&(ѹAb9\TjYIѷ7 QfwtM9)Q9cgTZ߲46-FufҚ94"-\͢Sc&:Ki ӅwQf|IGhK ; 9O/j囪0m[(p\:Jn݀= ؉`zoS3mvpoq4ƊwM%l=@RM>y;wvaYzC!e-N 6"x դdͽ+|?Bnv}wg #ES\yi挗h]슏JNX79O|BlE1Ԑbt/ö/ʔY&sQ2 ?DKU}NaWgګp_j$lqR'bBLi eTO!8co@k-89c+{qSʓr|8Yc<KnbXj$~iXwBe Vejhv!%_\o-lvf2ܭ[~&~3Lik95.YjVm]fImZ"ZӼs 1l/Dnu25o~g@%qjdFp@}"00&q-Ӯ %,7N>wO3(YZ&|J%>_0e]hk6> ߫)]1.?,9lDJt#Rc|?/2nfIJFJ/zF8"+! V ")hUn ޻ܩ"ѫXɺgDktj*U^/zfСy Y#UD@% *k\8 .f͈바Trwm iýQ4*Yl _FI ?n1, E@2g{d|ڞUg?SMͲ+z"cICFҺg;Rj-,9h/ y9сdd%ˮWk|³g;RZ}!".!*rU%h s]Y u j[r]<\H qqDw6bDԀ Q"Y* :I]wh, CB'%1G(QaLY>$L[SIWY9;x"w>aP3Hjzԫ uz@#R8ܳk8n9ޥɮ2Go.f)΂0+])lv"<<~~rMX!1z nL ܏68_:6K4 (f25P1ؖ!3HA^ {#L'wMZhAzx- uRvqEb/u&|3ouX]͟@ӟQbR-1n&͜,2GQPC D)`/LCl3H(4Ue&-KA5ri]hf ^WT]rwz ѷRIUy$43yLPD$ w_QGHj۞{IF+xZ ӭVQ)\77%C4]|c5Woڑ@N+p eKA&ZنDdXP5|m8h3 2EQ!^5F>)o,ߒLf%$!(>V9-]DI66T^&ܧEa N AՖy0t챧9G3[yJN~;Eahz@0ijQQn}~Z~vL<6f)ɉDp# ].#Mvf Cw8_LnLdlP"Ku*b2n:25zd/QtC2N#U򵢬qaˇV|ρS%v}W4dM:1j]#3[,2C++HiAs}CB' HH=rQE:+L}0'c)eC^uxpw -Jޙ̐йyJ>rR Wīp6BR Dux:X-]'Ny.MV&^]0׿ҚP*$r?5M7L kv 1l,G F qa9-s!#!iHB 6y[5d;uG*i3 ǿ4yW՗G[J$Nf[;;J1t(Qf^_aA|'k$.80nxOw!?.$0nZV~.M}Ʈ +ojN @Jjhc5bR)x?EKj{^+Kx ܰEF cR [9XKUTqBw*;KF_\(ź2v0OXKr\!#􄡿!5CU(ѓ!FiBwɓ*c;q>Ϟn ƺe qZC0|˃<#kF\ CÔ1s:٥S "׋aS0͓[d㤐ȾbO_G6Χ7e$Wk,A֨*G'cQ./GR){,Bޡj6Kd 4covrKp zV2B3uvPMUQ1ZKգ%'E.dс tK ~!dhjq Bc]eG,[׸/k$H݆qv6y`o`1ȶ82~OG/_8J4}1=ڔVjU| ,IT)pުaV"/v gUF 'wgCuצK`kULZr[Y\yPmīb+Co9 XH:bcKi0xژdE z]BWtƯ"1ry?sd`ݤO,n*+M5O'}F~w:z 瓞";9wVCA]^ڊQbg9 6rmŒC].SZ9Gs6ɱIEw}*Or5MBAr=Sf y頣C7"YsbDMl"w\T.6<Ю0Z.d,=YNyI ś9V@an$Y{-ii)_-Wxhr_EbVpNk?}Qʲ}K_(yVhCp߮DM)"k70(PQpU.VRd.ˉ.KVܡuiL׾ Z! Xu쟖EUMb~q Uh?ՙ@@;)(g䘵l !][$%ěs6wIs[\{}yَHQ %4a+ZT7q 5D?Z=7B 4Z~0zg)/ J2'Dewø1l>8넄X!LjI f=5sh~#ƽ֘C޵ k-&4.H b֝F_:mSVNI8OO< a7&x9G N'n Xk.L<'6bBWA n[{feL‡j]]&zeKneڤf3Lzu<[Nvn6 We]kѭ3Q)_$29TuZ6~gi.|5r| ~+"L\!BۧO)B3' 0XU{GgiZ%ȯe8u%TM;0fQl^>&T=dHwki&.oK*y(8ihǯ@DJ} 8?,ؗS&!F#-{:c 9RPU@~MO)Yś$ aҍR̗X2:+-5KgJ9毨dk*/2ZԁQ ~ Ҳ4x'HwO!Mywϔ"3}x=đh[̊Ա_`SzmʮwktTq OE`Iek痍a54$l9Nz'!H +cެ-ҩ^}4K?r[tvZ]艆訚'&%c?aYZk !!]YzQk %vxv9ϮP`"Db+}0M9t xw/0.M >lZ%D:әĥKܮ :,ބ͵׻I#"63l6`0f0lo^(zꙮ[Ʈnt߅Qk^?6}٤ Y֑e][ )I-R^~qg6}UrǨ6\׋3-hK\f"ׁ[07@<4X{Nv_Aѓkw(j*bqQYԂLSjt^wJCZ/5oo]$Kcj[sX=AY ]h/d`[7mȤpa@4bQBHʲ 8jxh(k`2.I߬*fo@2\BEk+@ɬ1 ֒9ZU19hp:U Vۋ>q" h:â|a>:1^"'MR|<%(6?*J5l-( H-7UY)AlpW;׮d⹋'pQV\ޣ$#MpΦv/:-o/yӡkMR$YB3ICQP>Ry\pȄJ"F!_(۳k)#\5Fgk{tDZ<8!aOJirޞ9CU%\w'&dE ǚ9 .! JlG%8<{kۀЯ "k +MKϜo}|?WguTy ilZ8av+jtlD[HUXN}o?!Ǟ).L&4ӉDMTmӨq_ZH'۔] R&LzeENL+J3Kk(Z:JIٕ߳| vsSG w;OMC:C ʠD%vOzg`օ=Vfv% #0>1\ai;VZXGFR7-P;oHdiLTH6$%vEǜf~Wx!kD>W5E9\b ]/ .2Plyȡ@*Bx=զT VU*9@w lXfC w[P;E}qx$ܚ _lӗ9ߞ)Ԟ=]l4[TBd\uyrL\O&|~HI (\4!^8|nIf =f1^5CՄ|7 ؁@PJ'a` z1jJZzNuSRMHNP`, {c1[ZN~fJe",c1Xraʛo4qytgH1p T]ZgNuqqݕ+ Ri┵P e;/ĤHԇeɟ7'LWTes߈\hLQjw1a߬^$NYg9A/hp!ݺ~M1<3od,۹7g1x}4e"JG# F7 .R' h^u@8B7޹c'gqωZڑ'" 'zbv?*>D^nٶ" `_lD}Տz^%cdIU8} { $0%u<܌;nKDwtw4I.Ws (u 7kmYk6=89Nһm͐+23XRN ";sTP`)yK,is*Np&՜:*\pk[DjX+TZgK3zX#W|>UTjjoN:9ۇAXi>S?-ʰ<-AZ j & no !Ӱ}ؖ0%~"Y/cg8o_V^kB.ԨH&ݟ*;?%R4Mj`x" @MIL9y.aS;IPa'pA[RXǵf𸜲TRzij0XalJs(|olC@ ݟ=TȤ N6Mu}`j*EQv :ۃgsJ@ y1 >f!⇔v"?g&A+ y a!lKpZw0M ~&J;X1DE6i*z2u.ëTDM(>\a%#OvNhHJ*0wG5XY%f Ȫ˧rWlS#np=dFGvɪ"j=_Es2<sI2}9ȇ 𳲹.jҮt6Vڭ8qC؁d~K. ?ʴTyhw-+ߵ?C )Pp~9SasswiU:Y蛪BY7^QUՆXt,7c:wUH$mŀdݖ=M*XE腯i%Bj,OV)a{C#-{v,iu/kMPBicQ.:yQ /Ij+mx,O`ULâ<N=uG1}4FB+j1 ?ڙN4Dl􆂝s&]߃*rhz>(JMKs>Nb_!0hRЋ,9"tqO̼!By:^僓$M7}m6kbW'cR/IнaJ gWЧ?i#DhwOۊ֍ v$}HB,Lt/\\c_ZQHVPO Y ^5@FI}~tY%2.!sюmF5Z b#X #7m\")>GO_$ 8x1)D!póVswĐ4-z7yէbT4&(aK M"ӯ*;ʑ<7e A9/uR' .pUCԅ/.An|Lο&ɿ=x`5K(*-/Ɋ|hg{z`x-8:ܾUec^<8=KLeВ8YA#ȭG_cw%;1 nH^F+p g L~|ǫ\gD|r=_a-k7I *lb^>m4hKmdk/0qbSJxZ۹}^"ݞx:@br]ǹc悛;b!r(/iD If-y@6bV zeh`f]5?3HC; wƩ1Ryްy%NMnk`Zzuםe1?cIBEfaYܙ9pVv+g/ǏGҡ+ib_v'Ņ;,I4u8rf>:ume?'9 7_"un|ڝMʼX[&BZX+mBvXK+́&Ii΃o ҠE.N{E}FԨfRI')Ҥ<ÒӍu^m^oWͪxp.L#m8ULF [ >SS.'[`sbdsBݸLUhe-jmC<޹Sps=R˞)>E٣'C ";](pȶ }]El4PV51#} m=>^]5_ cV}4# >M&m!(L8yb$Q2Ɔtta)Ǭ_ zx+w ,,nbF\, J.br1y*Ż-䊐$>^RxB)kX+f θ&j@LObF臕?V^DdVNHי؋Q. 8Ҹ0]=hDq  3bJiz*u\.>8ן:NAp.kg#9AP}*LtD 4Gb+b$ tK6ԋtD#*Ӣi]DSQ{$$}ܶ嶻Xf!x5k/ϧ-_zDdO՜ɚj%d!p>2*0*v}.P{Ub1 XM D%$qBh{Bz n~~1f4aB/' ֟!%wO5MYd hER#`A˴>mlgb% oLB:oQcRRp>YbfBK{)V`B2J  1 kJN L1F5@>׵7I!/5Fu $!OEL힦GW?C䥧L/;7t՗|4LM$Q ag(Z")Q¬1Ϻg* ŀQ5+ r!,ITHˆDn#YL'͇4/ %;4[#[ l UhK/0@>]tr}$} rӼV櫪F- KfN3=ﮆjHF&,)K:Bqk<}IPv'L#RLŘm zij[&Y;y"|%G:_X2" X<\H| r鹿$oҁ)|ᘉUۺLGun]@ 09s04m ia%i xKnW)]gsшR+&1Hdm#5Z VNȍ1`<6֤Ps<('qW/Kt1/3zCŔd}luD`1踴sI9!J. j.l ،X;% 3V qaR$bwǓܮ'R(toh :9/G(Z-lyuzKclvϮ H%TLo`HtƑ9w#ٍLnDqfOH};M2pExjrL:UyɿrO"#Ը@+l,a K &sǕJG 9:״]\u_^2rHE| {$&*$R{1s}oZ,1IQ\Ktx'doCtϳ 6A_jA>3*Nxa%ZظD 3[iᝄ'F('-̤`z^LHm [nxDuAl%qfbd; P#w#A#4+<Ęk躸4,? Q1u׬twYI#Sk LMTM B`j\sC2\} KƂ:=?%^.~4!ejqHMv!b }H6/`4u1Omپv+ #fܐXWpF{\D <.7{osww&=7P6b¤,|G&>7cKy$t@hIQ0$ P#Ćh*ؤSL;*lclݡ[)([-Uoo%Wᕚ:<0A"[?80j'h2 8Qޤζ>qN0Vg4ŌI6Ѻ%"(G Q0j$O`_p|ÁKכ步l h %iCe)Lvb㚟ʹ8]E; |;:ͱK𞗓ED'랅b-M8םW*мM0\bHNOIy-& .pizso~ɄaÉUQTo^#.>0A&s3tFHp;͗ Axx7@ ,AW6z۫їjxa5BC&X)ϝ%92HKͣ `f:IeehL,9#L]19F-/`{kd5+쬶S˙lb1+ Vn^J-0 h`aOKw|r[Of#0}#4|"BykCåЌKG f %E׆P3 J!".aK7#3ԛphǹ *C9]$_lR2`^Ņfrɰ(wn0>OųKwS?;x{_暃@Ԓ_-ŧ9L"a)͠shY_b_JO 5Zf T<GVO}nU  -;]_Q 7ZHo5!1@ʈg_?<5; š40Sgo3X'?Qu2a#&fhTSÒ{ӄmuK^fU;7[Z(潫F_Ȉ2ݎdbogCf1~;EFx?u|{U ћq S]8ə]E%4nyqI 2Ee@6 ( kRa9Ӌ\n~& յ]eĽGR1,H%9Žd'Ȅzipp95i$.YHjˌ|paT+z 9oq4Kطz R{lg9h)x6< GX.zC9GxJc<IMM%&m.)ߥ* d&;vvmca=5>ZJ:M-DwVY6H2`Dv 5̷h! B@4w$U)~ڟ2ܤ(EZc`ikUmt. BWG /`%Ž `?V"Kg97JtrĥgA@ /u<2ϐ ԤUG?0WC"YkKx\̝7aI87l\_yNVnXWHްfn6Mg- z\eTV :y;ƐYdV?f׮iC XnڮҔEeQ2 :څHOJ][#VD`ۺi~WZ {OwaT1#OrȾ]K+ߙdեgy~`6br=7muΪysяݢH@<3 5:1qSI75.&^_D Ty*~t:Tj- &ylMV?v%S\{񐚡ZX2|y]ktx47k[C[* 6Ae bqPlQ2<,%2ܟ~A%@q+cc(E6FYl>݃j~zc7-UYL۪+j$m"ARDY620j)D{ק\v{m;__dM})?p=Շ{w΅,"5:<}RrvLb`$35ͯw5]31k9ڠxχ/&V85uZw|@n(O 2.ג;-5=lzN3)bwr7cY"F*dӶ~㦵PE )"\PZE%4W}@a\UڰiSl-dE8 ħU q< FNGXzH[j6W9s2rX6QȧleY8IL @הZfdjKס56S)s'UL,HoO{{@X=BSB{5 6/ox *)D} l.?pÐ00z9K%PphןNgaVt_$=B4IO=mNO Ƈܽ\MoUYXkH w"p:8?.9]RԤRkYcVʙqFsT< ̭PR?yc=BmWs a1d^z(zz4~ lZBx s@ cxz2E7z!\KmS-8@8^6&S8(iDcew5'IOt"lRHBtVH٨l&Z2#APo"n~#yϥ'75gZv{Gb[`\Ըb\`@qA[wLE#ݜ|NERHS#7hx e/v~e_n6GL幠O |؍ 靠4U:ZBf"ឹRpu3vݙEQ_2S^ler24|V H뗡#xp3}R&]Nwy]'w,v"Fr8=a8z u(QO29G_ >VƐuQ4^v"t#{-v9]l@S]aJo7{ 144u"P3EMKJu:YBV z%n}`vrL(PT^BWg&}+E i" U9D0jĬuI#14l'La3sрECǒSULתutl`R\]cR{ٹ8뉨N-j'ŚH )nd$~|y+X&/V.b )bqXuҒU }c S4*OI hZZ MF59k9/#!^SXxKjFf@!#MEmu/|CFDtD+Yl1ZBH+q<}h9 Cq @tJKCӊ˥VMݜ.AԜ&25ZҀY =0ǨaYE3|HzLFp鐵j/>lM[$9Ar%DCެ"w̅گ)8<l PUkn{|7.3@FbJDGnARu4H[\ek!QGr6%&e9:‘S#=6_9N BG~KWL pkW\DzQTcDRjz6S%M cbwu܆!+k{*8Aub\˄ XMbNL:!a5&*3h.J /F?^ڗy23QW 58b/IŘ8"h` H$N@7dS[ce䎶w~Au dI#:\7n5&/m {srޮ9`k^\j:;- J'^3B>lݰ`wC"}3~ܐ$re5n BkR5M٦{6Pz/1v q&Rv=ݮ7}m`Ba1?*1y;/:'Aþ(r|9TSoN0f`U)nf2\if2ՅWu]SnN["e4j5DJXGP|$Zƭ\7#oڼ!l>R;I0ZnS>Wߜ+q>coafqpx+fʋP&pv. Pطva 5&)R/h[qBa"4k'(gKDK hk{F>ݒzGM -%NN9:/|/.˩ $k*tH EXԎ>C!t}5 l#Šk%N8$ͷ`*؅z:(LD".B'q&CwpٟEv"FKgԋ{QkT#K F>syp؟W/;W#*M&fU+E]"ЀB Mx}emYc8:9=(#P{]^ޫ ԧU,ԙ5۩9+u#>*W#ZVݗ0i *^Vi-:mn_NiZx2F%bGJRB܈1 =tQ$%d9j9DWOk_Gcޑo%* ^;{Έܠ)Tj@9Q O`\ɗ-lRdo;`~mW$lތ<;Rw٦e._ Xte!/c%ӓΞ(frH=?קqdtmnrXtfI)"7Ëa`:Cm Vk ,\a4c:;>'<գ5ߙ~yؗl6'aip+-cF& X1H=ȼ2B+=WB4_}6k ޢwJc1ٻ߷iĺhlÞDʴ7ðqԌ?ə0Iȃճ}dF&~H *D6 =gF80*ƕYTB퀪Hw6L=0|އ`i$ ioZ'Wv3g,w { F<)_r`w#jwqІSY #&z{>žf\Z0uߍ\9[}L˹/{gBx`og\_liOc}'Ϗ;~wΙ<(=iYdTlo㼩jLGQ]sC;i)$9 lPL(gMl0lu Vd{;f?,e uJ<#خ lT>6;7W1|:0'D*1;Abqdiu~hn= D:JȟЇ`[]lv|N(T枺RaC}#8HN78 sdxTaY2uS|fH<9,A]ϊmD7,F6. LFY7o+g۰YOo=)h#bX?eKHJFds6?"x&1] u}DoA& ;N<$?Xn鿶5lW3֪͗jhM[,kTT"^JJTzٛV0"hy=?c \)Jy4iS\hbX&7ӝY+m,_ FީR YJ-#Yru ^ ̺%Pػ{-%+<6Gj[mް]wVZckj Je^Jb3xyNH!d*Zl{[^ #mR5Eػ ?[#g IQ;w\ 3kcr%EGC)Fk5tCLY&k{˘^gPf6@/]wWSp<:k髭19LU1D;$&$o6F A#PFp }7DS0uTޜ(&%3<؉rNaC k]C?j 0NJg:ұGibF$HG@a,+i @6[옆ϒ` ' SCl L#aN/8*IWNٗ21eLc=ԍ?OTlβxvK0,LoC9Ÿ`󐤡"ݫ|L\EP:,w?%[У5b|L\V6[lآݟ_^؂< {;4՞z\&QV@3lg>P(]w*Nף08u-]Mx.վ%j׹D&IH9;ΙJ}שLuUDj(h-RaM*:ؐFk9:px/@{#w= X;W3KE*l5)Nt2 /R^6L O?geI΂&6Fg}7쳆Q!jJ7WP+FJkj3ɭx[ez?`ۧʩnRikRN/ಇY-Y'BdE [Uaz9?`PsKm x(_7W$aBS9+\|N f/|ʲ4s> ;Sugo>NU|h(T:WIz{?rk"mtwKLĞ#̄OFV&`ǺQ$/wAԕs~ Tx y3EYGtb摤PXDVeE}U3>b_m 5voabވZ\U"fA*j{Ά(4P1eM|3|:+X#%Sg~BI*qTXa1T/p~Wu5c6)GEr0 'Lӫ( y:BL>]1OJ#0pKwuQ񉵮U9 h&2@N9ݙ#7cl_!WME uKOif(dy5Vw#K3 T8`g_59NM!-aXZB?7Hjd29 ,mҲTySBi&=i a0n;lC8Y~Q `jC.͢N dEִEW{w1ADL}Ch[i1CH1u#гV?VXkB-3}fy*T W\ )3E*: 1yxnPѵS"}¯zWRl#*L.#kl>G<]Z̈́0\tj|end5=c݇7PoU}%^kx~4e4)!Q@"$ R%87,:cAr Ox@*]!X/>IJz/5HvI_ߗZoB$Dytbc)evg wFD,Wot4 ȱl06)d&s!dLv@'ƋߏtԠȊT\؛iD'dXx6k8;`.{ sMn,\!}/yCmFOi]ܩ}X yvE.9Rb~ yEl(F9[_^};3 =WJ1ֹvt'nujE j W*lp&S1:lwrtBLѯ-DQ,@"ޢHTHC|zIsk8-󵹤9@\2LϬmi~hīC 9)يr$i{NH,HB.H-lMLxە g#i]r^|`.N&!Lb/"߫Fe|uשiѣx˯7Dp0ى< =uܵP}ڵ 6Ebn7)[P^EyDvdO1-lفǐgG/8PIxxcmt먜Q6?OٮbEV:1}dM MBRa.*0b (mjmSt8@GvkO[ڮbe(&mba"ϐ'SoG$\ƦAŞD;p5њbpr_y0pAuR$cK\ MqHet0]H1_~c$(J;`mAzoVׅ̉+EX3bw#~>/y K 'zvBUp̷o`ikFO~.R).:md2X(Y?%ڦu Q\r$C7 r] W * e [G BRE :J& 4\E(AWU,,8(sZPӁQ#cPG=6a/a'L/XȅyeT]j{x_)ѢR}y}8/ҷxk\7RgrjT oS/Z$kC2015GD^P;B9Yܕθǥ voTk]2V+-cn P^ Q9,qk3Z Ù>x-=&PsB<{&֓~2WbakR@0`Jj+Cړ )O0 krXtWe[`CdkbR`ylҵ:E LI/tg)K)bCz==Z `pK&ǣT̚?L;7j-NsPj&C z-Wբ0wqڝg RQ똲ӳ/# Z Y"~۰YSh+U.Y7]~/UBrBAc(ܨQ Wfʕj\VL封V]ȶ[؞:lclx@{Avʜ}2jo=3Jk6ґ7 X^pQoYjNJ2 |oh+iE+&PL:I Vpr/QM Y5V7嶎a*65{(e<]7JKEoػOrho6wS *Z-rPO=x4uVj$i+fZgE7,R)K#yW_Pd?u6}LϏMO$dP$:8!3 g$c"W:O4s7b' =$d;J jӨ~"թ%BМIG 6W7~vSi|!tR2hc4\=TԖQc )Y).j 2˲9s^.!_mOT)臞B8K9"#(dj"0 Z-5<.et$PVO-S<`懴 ϭ]$XZ[WPTfmOi "?ǟqݓ6EI ,JeGز~oS@O~rDxA';1/؅@$R%,n K/-Jf'Z&0>sP~)pp h qԡY#a^ )sJGAbD')(2#SR $&[e 'ԱL'z*qN;QXUCm3z\fAqå"e$w\8*<a$19w5H+2lA|xTʹ EU2zXVkbl\zX[ : fGŔrW^YJ){7\@WƘnK+åV{lM(aCZhpc;BU'_]RWkoW3KvJAu7W: [t4Q*.?9lB1ʛmA(Q kpy |`-;6¿Wr1]}򟝚8=VE) =Ѱ"t R9ORX瞕1#Pu, 3M;&d~Sr)ZnQ9]vjbץJ͹e|pOhʲT`߯~# NDlRhmN 8YkS{6#n!Zi3 ]t uN'.!ߙA<{7c7!fe[FY[Å[s; {$uٺS>?rGpȮ:yוȤ1{  E}EM}#%(qa1_\k_"w NlKgځ!˧^n3Hѱj#ᄜgȉU\CbI4R=D'[G?7<@v_佛RI!\ŮKK؃PuLBƘ+KwяmጓBy8v=/UY)J1&1G@jp7Iqs5&(3vQo%% OwScF0$n1 rʚlU/ҿ}eٶވY:a^ :jGƑ}kw]K"s hnʜ|v)*5O=x UIH,(/a_&"7~{YKj?^%Ma#\_d3b\-[|OҀFTv?L7{Wjs%^dWzIoΗ"o2/"VH3u3id,9R|ga<Ղ>OR" P+wФrMؚJa}_(:8j(: 01 Y@]2W_I{`Ng d(RΌ/ԢHdQ(*qMMRNHPk ~pl!'MAJM4'|.?;xu륄ژ, }3EBlyWz6zjh'4\n }e u׌E~JPuR ˗u ـr>/'dLqWl6 #W:Ī4A ]3jiI?ffNR;26iQw$^[zbc[C^1qLG! 0֔rIUJY3˱W^:V9Ս\4rr6"1aɻۀ &}:36+ͯ̇ )*t2T!vB ջkM(W ӌbVגV ݼ_dE`֭&|6 `]t#=,EV#oziU/ B%JOmxnj"o$k=I}cJi aA16WBAm'h0s<3l3U<Tۣ*Wi" }:+.r@P /^ڕmN`P/S9Ѿ5Y ~ߢlVIk YM&vif,7 b-GT6øal672ٺB\%@*@ ـ dY_mљ?cеX0Rn䦟ΡV{/ np1sxʫ yJk7GE9E'x@~ @zIX6e #v&s ! a4h-,,){DG3[~.xVFa[9`d2a(YIϧ>$QB-B#W2CvGye3e",ٌn-C{BhW ,{>(4mY~{A XRc>#!h6[{EL睍q`CsGiҰ9k-@X]6)jSGEY`'ìBݣq2M[~v#;kQ$зGw//z bi/ F~ i.-,IY'd vE$+:ǠǛ"lDVDk-XY*UlufcJ{ o/[MZ-SS㓽 ѹ\9ȵؼS@'@)K%~BȨ4Y3"!K!)sal ܍X3u8*QIU e K<`+i#\hsqLdA݀DTyG\ quM,D~$.VG4cF#ϩ:m hySDZ5CTU1)M!oRmRj%o"@ @@ -@Oê+ ]<& k-Kfs){|v,R6e9tѰ%ŝʈPQguH= }h[t~IJ"NJ/x| 2%EЭ%5=B'W#"^$q Z rC:11gP@ _/B9lWf1>@w"?/N$}Rc2|IaA*]Vkp6*f|aCR< _aU~:@kpI#瓀_fޚo4|Kўxo;$Jמt Cf | 3żocC\J쉛8#R`ԚA*ZV\b^lgV:rO,LgkG T'4<[A^.} Q)ːvsv`G@=+yܲq'^~J~;v"m]Y>5#}5 an빝䋌E˷E2ޮ/MDhrY9G%;&vg 09ip?$AsValO/m^=?+eNMw1N1q#m455L((nn.O`05O\ORҒ N#Lc40 1Sh#=Ocf;%'uU` V@;>s ]iA`A&nLnxP$lǣkcC^zN`Tܷ%IKe~sl/50ȴa Ym5njt( 2])^3i9<ڲʣoeq_|cG.U;@ ܍x@싎Ls,*5PrT#ӦxT3*GMr$n )  AυƁm^}W ==S`{ tC`gho܆M[|pCGP&u|3>$)TDMAT2ȓ pd]a\B4h斂'PX4|)@#CL1nߞ*v9κU-tmX%C_bRbR5NA`ޓ*K*qjths'k,D2UY2D2ha+Rд#i`C"qSs̔,fKu4ଅ";gۋKiXNocVI,Ϡy#<] /6LT][d ( w|)DnWE?$xE"Sz|Sj=5`@v\~:8ڝ,21{v9߂&sA=(OQ$8C#y   - ֩2]460̶ke*54{,O68b7O<َ*-T `Ǔ]+fvKx%Hiو]bԬf:k;ZJ& !l(٢1m^NoIs/S|ED #m>W"r,D0Nmdo1"~s k4ww dLdZ*vyubc0s- dyo_н/CҦ _S7$,kXh=IJwi%%f?Up>H~|K<|a#O{%7\$?*=Nz0=}fƬ8snhw۸ffkA3W#adq&OjlZ|%`"+jF5-nJwK?n6 Fg~Tp-ΊȬO(rajaDϳƂ%as(XJrɌlؾbws>r-``q){i`ats.0tpd\e@kyx*%-ǢD#ٱ* *o4]s3ΖqqyÉ[ÔټR k$w]/_yn%~1^?=>S&-38H>ߜ+[tSp\aǜ zGaN]ڈ^|dLsNpP#Tk/[)\,g?vVм`钡6`nN$-paBr]U2"rÌEO X0j )@B>A"Z+kSݑd-3FYuAtbKuxgp5܅ uMv(:QԾ Gc! XN2a{ Q<'ʻ0](DPʿnz8Y80}j0 ft) MӏrQhGp;\B!q~L>)1[] LN{Zt5/Y7M$%MsT@+qȞxS9j%¼ׂ 7h(w{%!vR9{,T54 ҘI8~P:=#Fz)pXh-CC6nn4U!;xx @pA;HXxPu#CwYWAՒ+7 ^QV 〻()W5^ļXX&|7gq\x"$La%S1'~eRܖ n&4snc 5tW#{vlWu~*͖ԷSi6bjΞS|qLA!*4)lz;xRg&"8ECp韩񁿿[$w,7q*nTl ^+R݌zt4Ȕ>Wfsmtź ^DyX(1xԼj rv$6??0]+cy@cٵRI.-߃~T8}TͿhyfMAaAZ2GϿ}΋<=Ds@Qz J,T\Eɚ=j#kSV\/RDw[dKO_,\tV _gM8ばIg f`(>z1l)%mmxA#A.wd"eQz Y&\Rrin'o3UX 呐ZYA]F!;pf&b,WY G4p(Mi=70dw(MEl -$?fnWoH;nY)î>`ڶO\/;hk!,WBk͕Tt8-[0 2I+0>4(9sdcn0Hp@oDJwܟ7~1dv@l+kben?-'U 2V?:V0ڵhg9ojMO OfK݇DYpXW $M|~TdEێ|5vq&+)]^$<7HU+>UcZ )vPaO%J,.@TYl@"qhAyYbWH=!&B#:gGmn&YHk%giek&,L;`R'/=\N,XMqҦَGޤ<YB=] Ȼl먱(ZdAm5A "ʉ³'Ou]ŷ D/Ɔ"@11A[\GZޅdt}GX5=Se.a￷n4VgW| т`^݉6;3Cx}L0q*R uk/I`"X":?DBX[R~, ^_kL<4APt-FӒ~x #w}ɶ9moc.UfaLYp|Z3D:[o |c?>('셹?B^2)u}g2jc^Hj 霕kO~ZB5d ɯ[Ej~"kTf"hFv,naLų5Gj;+hʑ^A  H-VF YkGr<}8prseG&pzI7npkgdz*1Bo xye"I198#/GM?;4$suX86{])Yuq&OٌI z-@1pܵw܄䓅ekH,2-@uc=ѬX[m'IC45-g@碽#h*OomW6L&EF 8B?A'mݰRԸY (> qMq[4a }x7;X cu+YBsvy' |K}$þAD`맔LJRn3M3/\,5R>unB:׻H?/Tq5vJ=oz+7 L=~g:.Ӕ3rxZL ox @?{f=!5ǻ 5 EF%_lP1pҲ֧>8]~ _{{˙2nyfm^Ăaø(ֹ`t .KfĢN0\:Pn1M4xPa)[/M0Q5;+/TVb[LVW鈚Sw(՟SIj4Mq԰Hf:Mѿ!U]BIa/C* hR!O~R"(^ƙT(@e_wwkJ@ENW2`'Lts*(2M)ɔ5RbX̂<%~vv0eb+yg}=皃h0m|5Y]~A:m<-$!_iw͢mJ_/@<c?'ϏrF˩N.Y<V)9Q/4Ʋqv<}XէL&S"`LU׿/%f ź"^G_h qJ|7KҡYLbH9I uߙ"x#.GHE!9A64B14aY^;ErV%Ж:}py< ?d=LC`id{SȺzͣ 5PI>WmHګؚ\ms{q1qn]b0RlC?UCmSx8m+s rn%02%_ acNѦ3`sݥ8 Cɔ킕>} }?( wEjbdYzg0ZOzVl>ckn>jČH^C)zOʩZRTuaW!oQnr?!k6$NJҸL>!vWnKYiSF/ʕnZz5cF$ ȺMgQWQi&8{`Pp@܂ 6|eB8)=wT1QV +ҿd@f[So7^vseCZʐG+-UB|s[Hz_;w ~s-s^`lKPc  'Y-#]ӵJ)2qf$dO|dw0uPT8v#FaEn$U8brDGǰ;a`ۯf_Sð.Ѯ#9_^䄯 Pv\;/#Q^pt_D؝I .˻TG-6k ?f4l&}evqm|LUKom l;}Pg/C2ip?n_v <ҴO\/Q!+ʆMC 9`^GQŸb7BgmV9u~.z̷oicbR 42kF6,ZASy ,6 I5 5@Oֱ׃^cr!;iԟq!2s!\na |CU=i1E$& Wrmp/F R+0TܯK2'sq/=A:߻E&(e8GY)`IZ@Kr+sa<k6_;J[3\%9b C8ykd"PWtM*Rm <Ѳy#Fu(4-el֠7Ɍ5#qh{$}gwެ^ y  k\>f8$I@$@Y!FO4| +~saueYWp>lG lW@CGI6OAڪ00=7YC9}ݍj[2_ jy{nN:`_-H̤p""ڣs*\-/ 6QϞvT5a=G7,$_ss %L61wX1=۞*֋J21#ۮU)h&U9Z*UL%CXÝp/ N3vS6AY|meYaZNuhǿcm^e[u$e^k]FRb`SuuH#` ]FJ(˺gIJ*ҁg01˛鎫s##sw2ᶋ2-n;2$3j6B >钋.Fkݶ1??ntʏ5ZE220-IfeWoE' u!Izl>tʀPxB4|}{ M}`?tHLIrl48)"UU׻~xNІf8Wo"I=BU*]+̼h9@.ŞPQN!R po{fMd"7h`|ȳY3uKO?c)l 9X,hIRūAy%gz!-Jj* nkp!LU+4^/j| RSm RWv?—iH^U7S:tgջ/Iб#\>G_YlA5IgC_p6^Beu/>U^لqm: f]OaWSA\WwWJc`vRx~ψ0W)N?H 6Ĕ݊u :3W . }0&z l,eBLjW@^~,3v(7A-qkc`KS#|:\Lv@rpykOPZ"g) vJx3n0Lπ& #ƹf8zvDxkYx<'u+mEvWJ刺mϼڍ?9U2/(/1 .')AENi}N2`H˯wb*\')zu~mգua> JOY" v~ۂ޳>&~UZGy1'3Lw%I傢53r=*_QؾQ[_T_\^ MC $o hY"DkV{/GYJm.=2FdK!w2 +/ͪj``gvg0o2Hr4ZۆSݗS/A0GѸu2); :+ sN`H[T#]ɩ5YxN};ӮPnm@_t ~Fi++gw ef#|O"l:* )ŰCH ڂA†wl{|]|I[ B7F? ?{RcxrCD1Us(Gz(}ب$3Qw$ܛk':_9'ո'b=]MTng[=K%hp7J}s_vL\u sH76PdӋ4%8 VSZʸM ,;U(&=BmeŧϬo]`c4 C" pZ]_&/-C esd u.gAY6C^h`zͼ^ɏ| ~"(gQ}mo2#y^4{Y '@ct32i(r%IaOp=C:y%Gn cȖvz$E]zЃHg )׳I/`_2jiR緖M>hkv;lӥאI̫ +Xabvє]T5$o)NZV- ,}'σn]ȩ yI܈iMO[+6l85@C_]1j> ᔇ-䙳OqB&ܩW}řZ;޸>DL{a@ mˀ"5 7tL4sF`ӭV}3{?uLBfLB=/>byؕtA;RL<ղr&t߾W)"`&^2kFLOiy窝d T.u;~ŖӴP)H1Zgԅ**9MhK;2WKH\پ:[$O 핡tHYbK1[.(]o)zYxQщ]?$Nt^۽+A`ξ:l$'Aqq,լz=LNId÷EyW^;D/Ҍ,!՛NhvlLI0jd`cҽ_($xOd!2fh["ҋTW{5]g@;Xz̶3wuGz0uQtTKEB"ewൽ~p9.ࠑ){`4F~ɌTKETْƅP#3hJ(z?G% ? d3kxl34J(2+7sZmVQܟ4eN(=rSl6G|+S/IZ3I(_8_`WL5${w3}٘C䵿4[db"tU֖rΧ U 8싑fv7] 1|#=Ysm&@wQ.1-9ĵF q YZ