kernel-tools-5.10.0-60.138.0.165.oe2203 >  A fNW^^f ,5,|-@٘#rm3*6T[b>LL*>9wKG,g^4vyDeoF%myRĢZU1 9Tܫ*x$اs/mOeNudzs *x!5Nl_(8$Qr(JCd:) VWpI?d * S  !-DJQ&8'' "' p'  ' s' 'L'''!!!(8 i9i:0i>۫?۳@ۻBFG$'H'I\'XݐYݬZ[,\P']'^bYcYdeflt'ut'vw'x'y z 04:|Ckernel-tools5.10.060.138.0.165.oe2203Assortment of tools for the Linux kernelThis package contains the tools/ directory from the kernel source and the supporting documentation.fM5obs-worker-backend-test-0001 Huawei openEulerhttp://openeuler.orgGPLv2http://openeuler.orgUnspecifiedhttp://www.kernel.org/linuxx86_64/sbin/ldconfig if [ $1 -eq 1 ] && [ -x /usr/bin/systemctl ]; then # Initial installation /usr/bin/systemctl --no-reload preset cpupower.service || : fi if [ $1 -eq 0 ] && [ -x /usr/bin/systemctl ]; then # Package removal, not upgrade if [ -d /run/systemd/system ]; then /usr/bin/systemctl --no-reload disable --now cpupower.service || : else /usr/bin/systemctl --no-reload disable cpupower.service || : fi fi/sbin/ldconfig  87(HH8y(( 9hX880&x .J'"!%s 6 (큤큤A큤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.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkernel-5.10.0-60.138.0.165.oe2203.src.rpmconfig(kernel-tools)cpufreq-utilscpufrequtilskernel-toolskernel-tools(x86-64)kernel-tools-libslibcpupower.so.0()(64bit) @@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/sh/usr/bin/envconfig(kernel-tools)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcap.so.2()(64bit)libcpupower.so.0()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libncursesw.so.6()(64bit)libpanelw.so.6()(64bit)libpci.so.3()(64bit)libpci.so.3(LIBPCI_3.0)(64bit)libpci.so.3(LIBPCI_3.3)(64bit)libpci.so.3(LIBPCI_3.5)(64bit)libtinfo.so.6()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)5.10.0-60.138.0.165.oe22033.0.4-14.6.0-14.0-15.2-14.17.0fM@fDf;i@f(@ff@f f @ee@eZeee@e6@ee@eeeoeg'eTeKx@e@@e.w@e&@e e@didd@dhdd˖d@d@d8dD@d@d[@dr@d@dddq@dw6dldcp@d[@dI@d?d6@d,@d(d$(@dddxc>@cU@cccT@c@cc @cj@c/c]ci@ci@c@c~ @cwscjDcb[cZrcN@cGc2c)@c!@cc6@c b@bbbL@bb@b֜b@bb'b@bbbx@b=b@bbbkbw@Jialin Zhang - 5.10.0-60.138.0.165Jialin Zhang - 5.10.0-60.137.0.164Jialin Zhang - 5.10.0-60.136.0.163Jialin Zhang - 5.10.0-60.135.0.162Jialin Zhang - 5.10.0-60.134.0.161Jialin Zhang - 5.10.0-60.133.0.160Jialin Zhang - 5.10.0-60.132.0.159Jialin Zhang - 5.10.0-60.131.0.158Jialin Zhang - 5.10.0-60.130.0.157Jialin Zhang - 5.10.0-60.129.0.156Jialin Zhang - 5.10.0-60.128.0.155Jialin Zhang - 5.10.0-60.127.0.154Jialin Zhang - 5.10.0-60.126.0.153Jialin Zhang - 5.10.0-60.125.0.152Jialin Zhang - 5.10.0-60.124.0.151Jialin Zhang - 5.10.0-60.123.0.150Jialin Zhang - 5.10.0-60.122.0.149Jialin Zhang - 5.10.0-60.121.0.148Jialin Zhang - 5.10.0-60.120.0.147Jialin Zhang - 5.10.0-60.119.0.146Jialin Zhang - 5.10.0-60.118.0.145Jialin Zhang - 5.10.0-60.117.0.144Jialin Zhang - 5.10.0-60.116.0.143Jialin Zhang - 5.10.0-60.115.0.142Jialin Zhang - 5.10.0-60.114.0.141Jialin Zhang - 5.10.0-60.113.0.140Jialin Zhang - 5.10.0-60.112.0.139Jialin Zhang - 5.10.0-60.111.0.138Jialin Zhang - 5.10.0-60.110.0.137Jialin Zhang - 5.10.0-60.109.0.136Jialin Zhang - 5.10.0-60.108.0.135Jialin Zhang - 5.10.0-60.107.0.134Jialin Zhang - 5.10.0-60.106.0.133Jialin Zhang - 5.10.0-60.105.0.132Jialin Zhang - 5.10.0-60.104.0.131Jialin Zhang - 5.10.0-60.103.0.130Chunsheng Luo - 5.10.0-60.102.0.129Jialin Zhang - 5.10.0-60.102.0.128Chunsheng Luo - 5.10.0-60.101.0.127Jialin Zhang - 5.10.0-60.101.0.126Shi Kemeng - 5.10.0-60.100.0.125Jialin Zhang - 5.10.0-60.100.0.124Jialin Zhang - 5.10.0-60.99.0.123Jialin Zhang - 5.10.0-60.98.0.122Jialin Zhang - 5.10.0-60.97.0.121Jialin Zhang - 5.10.0-60.96.0.120Jialin Zhang - 5.10.0-60.95.0.119Jialin Zhang - 5.10.0-60.94.0.118Jialin Zhang - 5.10.0-60.93.0.117Jialin Zhang - 5.10.0-60.92.0.116Jialin Zhang - 5.10.0-60.91.0.115Jialin Zhang - 5.10.0-60.90.0.114Jialin Zhang - 5.10.0-60.89.0.113Jialin Zhang - 5.10.0-60.88.0.112Jialin Zhang - 5.10.0-60.87.0.111Jialin Zhang - 5.10.0-60.86.0.110Jialin Zhang - 5.10.0-60.85.0.109Zheng Zengkai - 5.10.0-60.84.0.108Jialin Zhang - 5.10.0-60.83.0.107Jialin Zhang - 5.10.0-60.82.0.106Jialin Zhang - 5.10.0-60.81.0.105Jialin Zhang - 5.10.0-60.80.0.104Jialin Zhang - 5.10.0-60.79.0.103Jialin Zhang - 5.10.0-60.78.0.102Jialin Zhang - 5.10.0-60.77.0.101Zheng Zengkai - 5.10.0-60.76.0.100Zheng Zengkai - 5.10.0-60.75.0.99Zheng Zengkai - 5.10.0-60.74.0.98Zheng Zengkai - 5.10.0-60.73.0.97Zheng Zengkai - 5.10.0-60.72.0.96Zheng Zengkai - 5.10.0-60.71.0.95Zheng Zengkai - 5.10.0-60.70.0.94Zheng Zengkai - 5.10.0-60.68.0.93Zheng Zengkai - 5.10.0-60.67.0.92Zheng Zengkai - 5.10.0-60.66.0.91Zheng Zengkai - 5.10.0-60.65.0.90Zheng Zengkai - 5.10.0-60.63.0.89Zheng Zengkai - 5.10.0-60.61.0.88Zheng Zengkai - 5.10.0-60.59.0.87Zheng Zengkai - 5.10.0-60.58.0.86Zheng Zengkai - 5.10.0-60.57.0.85Zheng Zengkai - 5.10.0-60.56.0.84Zheng Zengkai - 5.10.0-60.55.0.83Zheng Zengkai - 5.10.0-60.54.0.82Zheng Zengkai - 5.10.0-60.53.0.81Zheng Zengkai - 5.10.0-60.52.0.80Zheng Zengkai - 5.10.0-60.51.0.79Zheng Zengkai - 5.10.0-60.50.0.78Zheng Zengkai - 5.10.0-60.49.0.77Zheng Zengkai - 5.10.0-60.48.0.76Zheng Zengkai - 5.10.0-60.47.0.75Zheng Zengkai - 5.10.0-60.46.0.74Zheng Zengkai - 5.10.0-60.45.0.73Zheng Zengkai - 5.10.0-60.43.0.72Zheng Zengkai - 5.10.0-60.42.0.71Zheng Zengkai - 5.10.0-60.41.0.70Zheng Zengkai - 5.10.0-60.40.0.69Zheng Zengkai - 5.10.0-60.39.0.68Zheng Zengkai - 5.10.0-60.38.0.67Zheng Zengkai - 5.10.0-60.37.0.66Zheng Zengkai - 5.10.0-60.36.0.65Zheng Zengkai - 5.10.0-60.35.0.64Zheng Zengkai - 5.10.0-60.34.0.63Zheng Zengkai - 5.10.0-60.33.0.62Zheng Zengkai - 5.10.0-60.32.0.61- !7633 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - !7641 hwrng: core - Fix page fault dead lock on mmap-ed hwrng - !7561 mm/slub: fix to return errno if kmalloc() fails - !7717 CVE-2023-52655 - !7646 [sync] PR-7385: CVE-2024-27002 - !7625 [sync] PR-5930: RDMA/srpt: Support specifying the srpt_service_guid parameter - !6242 [sync] PR-6082: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - !6151 [sync] PR-6020: net/sched: act_mirred: use the backlog for mirred ingress - !7620 [sync] PR-6259: arp: Prevent overflow in arp_req_get(). - !7615 [sync] PR-5993: ipv6: sr: fix possible use-after-free and null-ptr-deref - !7612 [sync] PR-5996: mptcp: fix double-free on socket dismantle - !6222 [sync] PR-6074: Fix CVE-2024-26787 - !7609 [sync] PR-6279: Bluetooth: Avoid potential use-after-free in hci_error_reset - !7379 [sync] PR-6085: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - !7605 [sync] PR-6086: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - !5983 [sync] PR-5852: CVE-2024-26809 - !7707 bpf: Guard stack limits against 32bit overflow - !7636 dm-crypt: don't modify the data when using authenticated encryption - !7660 [sync] PR-6033: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7627 [sync] PR-5950: RDMA/qedr: Fix qedr_create_user_qp error flow - !7695 ext4: fix corruption during on-line resize - !7679 [sync] PR-7574: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7558 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - !6531 [sync] PR-6486: devlink: fix possible use-after-free and memory leaks in devlink_init() - !7553 [sync] PR-5530: net: Fix CVE-2024-26641 - !7550 [sync] PR-7006: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - usb: aqc111: check packet for fixup for true limit - !7666 [sync] PR-7586: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7662 [sync] PR-7590: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - bpf: Guard stack limits against 32bit overflow - ext4: fix corruption during on-line resize - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() - !7602 cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() - !7506 [sync] PR-7402: scsi: lpfc: Fix possible file string name overflow when updating firmware - !7502 [sync] PR-7403: scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - !7522 [sync] PR-7401: nvme-core: check for too small lba shift - !7495 [sync] PR-7397: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - !7492 [sync] PR-7398: drm/amd/display: Fix memory leak in dm_sw_fini() - !7489 [sync] PR-7399: drm/amd/pm: fix a double-free in si_dpm_init - !7505 [sync] PR-7404: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - !7498 [sync] PR-7396: drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - !7596 [sync] PR-7548: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7566 net: hns3: fix kernel crash when 1588 is received on HIP08 devices - clk: mediatek: Do a runtime PM get on controllers during probe - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - dm-crypt: don't modify the data when using authenticated encryption - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - RDMA/qedr: Fix qedr_create_user_qp error flow - RDMA/srpt: Support specifying the srpt_service_guid parameter - arp: Prevent overflow in arp_req_get(). - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - ipv6: sr: fix possible use-after-free and null-ptr-deref - RDMA/srpt: Support specifying the srpt_service_guid parameter - mptcp: fix double-free on socket dismantle - Bluetooth: Avoid potential use-after-free in hci_error_reset - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - !7569 [sync] PR-7535: v2 CVE-2024-26907 - !7362 [sync] PR-5491: CVE-2024-26640 - !6569 openEuler-22.03-LTS CVE-2024-26908 - kernel-doc: fix struct_group_tagged() parsing - uapi: propagate __struct_group() attributes to the container union - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - stddef: Introduce DECLARE_FLEX_ARRAY() helper - uapi/linux/stddef.h: Add include guards - stddef: Introduce struct_group() helper macro - net: hns3: fix kernel crash when 1588 is received on HIP08 devices - mm/slub: fix to return errno if kmalloc() fails - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - ip6_tunnel: use dev_sw_netstats_rx_add() - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - !7517 [sync] PR-7484: fix CVE-2024-26661 - !7354 blk-iocost: Fix an UBSAN shift-out-of-bounds warning - !7345 PM / devfreq: Synchronize devfreq_monitor_[start/stop - !7359 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - !7442 [sync] PR-6037: fix-CVE-2024-26706 - nvme-core: check for too small lba shift - drm/amd/display: Fix && vs || typos - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' - !7485 [sync] PR-7476: firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7406 drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7408 backport important fix for broadcom net card - !7407 nvme-fc: do not wait in vain when unloading module - scsi: lpfc: Fix possible file string name overflow when updating firmware - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - drm/amd/display: Fix memory leak in dm_sw_fini() - drm/amd/pm: fix a double-free in si_dpm_init - !7293 KVM: s390: vsie: fix race during shadow creation - firewire: nosy: ensure user_length is taken into account when fetching packet contents - !7256 netfilter: nf_tables: disallow anonymous set with timeout flag - !7335 inet: read sk->sk_family once in inet_recv_error() - !7331 tunnels: fix out of bounds access when building IPv6 PMTU error - !7323 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - !7309 btrfs: don't drop extent_map for free space inode on write error - !7448 [sync] PR-5998: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - !7445 [sync] PR-6031: nilfs2: fix potential bug in end_buffer_async_write - !7280 llc: Drop support for ETH_P_TR_802_2. - !7277 llc: make llc_ui_sendmsg() more robust against bonding changes - !7458 netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7265 Bluetooth: Fix atomicity violation in {min,max}_key_size_set - !7478 [sync] PR-7424: net: openvswitch: Fix Use-After-Free in ovs_ct_exit - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - !7342 ppp_async: limit MRU to 64K - !5866 [sync] PR-5794: um: time-travel: fix time corruption - !7389 [sync] PR-5469: wifi: iwlwifi: fix a memory corruption - !7312 CVE-2024-26686 - !7303 nilfs2: fix data corruption in dsync block recovery for small block sizes - !7296 powerpc/kasan: Fix addr error caused by page alignment - !7273 binder: fix race between mmput() and do_exit() - !7259 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - !5622 [sync] PR-5566: tracing: Ensure visibility when inserting an element into tracing_map - !7237 SUNRPC: Fix a suspicious RCU usage warning - !7230 [sync] PR-5460: v2 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - !7233 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - !7320 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - !7466 [sync] PR-7394: v2 scsi: sr: Do not leak information in ioctl - scsi: sr: Do not leak information in ioctl - !7019 [sync] PR-6855: KVM: Always flush async #PF workqueue when vCPU is being destroyed - !7306 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - !7429 net: gtp: Fix Use-After-Free in gtp_dellink - !7430 [sync] PR-3972: arm64: make cma=0 as default for openeuler - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - nilfs2: fix potential bug in end_buffer_async_write - parisc/unaligned: Fix emulate_ldw() breakage - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd() - parisc: Fix random data corruption from exception handler - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth() - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd() - parisc/unaligned: Rewrite inline assembly of emulate_ldw() - parisc: Mark ex_table entries 32-bit aligned in uaccess.h - parisc: Fix some apparent put_user() failures - parisc: Implement __get/put_kernel_nofault() - parisc: Drop strnlen_user() in favour of generic version - parisc: Switch user access functions to signal errors in r29 instead of r8 - parisc/unaligned: Rewrite inline assembly of emulate_ldh() - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers - !7435 [sync] PR-7414: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays - arm64: make cma=0 as default for openeuler - net: gtp: Fix Use-After-Free in gtp_dellink - !7382 [sync] PR-6428: net/sched: flower: Fix unable to handle page fault bug in fl_init - net/tg3: fix race condition in tg3_reset_task() - net/tg3: resolve deadlock in tg3_reset_task() during EEH - net: bnxt: fix a potential use-after-free in bnxt_init_tc - net/bnx2x: Prevent access to a freed page in page_pool - nvme-fc: do not wait in vain when unloading module - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - !7266 block/rnbd-srv: Check for unlikely string overflow - wifi: iwlwifi: fix a memory corruption - net/sched: flower: Fix unable to handle page fault bug in fl_init - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - tcp: add sanity checks to rx zerocopy - net-zerocopy: Refactor frag-is-remappable test. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ppp_async: limit MRU to 64K - inet: read sk->sk_family once in inet_recv_error() - tunnels: fix out of bounds access when building IPv6 PMTU error - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats - fs/proc: do_task_stat: use __for_each_thread() - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() - exit: Use the correct exit_code in /proc//stat - btrfs: don't drop extent_map for free space inode on write error - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - nilfs2: fix data corruption in dsync block recovery for small block sizes - powerpc/kasan: Fix addr error caused by page alignment - KVM: s390: vsie: fix race during shadow creation - llc: Drop support for ETH_P_TR_802_2. - llc: make llc_ui_sendmsg() more robust against bonding changes - binder: fix race between mmput() and do_exit() - block/rnbd-srv: Check for unlikely string overflow - Bluetooth: Fix atomicity violation in {min,max}_key_size_set - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() - netfilter: nf_tables: disallow anonymous set with timeout flag - SUNRPC: Fix a suspicious RCU usage warning - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - KVM: Always flush async #PF workqueue when vCPU is being destroyed - x86/xen: Add some null pointer checking to smp.c - devlink: fix possible use-after-free and memory leaks in devlink_init() - mmc: mmci: stm32: fix DMA API overlapping mappings warning - mmc: mmci: stm32: use a buffer for unaligned DMA requests - net/sched: act_mirred: use the backlog for mirred ingress - netfilter: nft_set_pipapo: release elements in clone only from destroy path - netfilter: nft_set_pipapo: remove scratch_aligned pointer - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: store index in scratch maps - um: time-travel: fix time corruption - tracing: Ensure visibility when inserting an element into tracing_map- !6038 [sync] PR-6006: fix CVE-2024-26669 - !5881 [sync] PR-5751: net: atlantic: Fix DMA mapping for PTP hwts ring - !7337 netfilter: nft_limit: reject configurations that cause integer overflow - !7254 netfilter: nf_tables: disallow timeout for anonymous sets - !6748 amdkfd: use calloc instead of kzalloc to avoid integer overflow - netfilter: nft_limit: reject configurations that cause integer overflow - netfilter: nf_tables: disallow timeout for anonymous sets - !7160 [sync] PR-6809: memcg: fix possible use-after-free in memcg_write_event_control() - !7117 [sync] PR-7086: media: ttpci: fix two memleaks in budget_av_attach - !7118 [sync] PR-7080: drm: nv04: Fix out of bounds access - !7132 [sync] PR-7044: v2 nfs: fix UAF in direct writes - !7154 [sync] PR-7148: scsi: sd: Fix sd_do_mode_sense() buffer length handling - !7176 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - !6980 ksmbd: validate payload size in ipc response - !7097 [sync] PR-6818: mm: memcg: fix stale protection of reclaim target memcg - memcg: fix possible use-after-free in memcg_write_event_control() - scsi: sd: Fix sd_do_mode_sense() buffer length handling - nfs: fix UAF in direct writes - !6763 [sync] PR-6680: cifs: fix underflow in parse_server_interfaces() - drm: nv04: Fix out of bounds access - media: ttpci: fix two memleaks in budget_av_attach - !7101 [sync] PR-7039: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7083 [sync] PR-7013: media: edia: dvbdev: fix a use-after-free - !6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - !7023 [sync] PR-6988: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - !7008 [sync] PR-6959: mac802154: fix llsec key resources release in mac802154_llsec_key_del - !7063 [sync] PR-7056: scsi: qla2xxx: Fix command flush on cable pull - mm: memcg: fix stale protection of reclaim target memcg - !6945 [sync] PR-6840: CVE-2023-52650 - media: edia: dvbdev: fix a use-after-free - scsi: qla2xxx: Fix command flush on cable pull - !6092 [sync] PR-5921: ext4: fix double-free of blocks due to wrong extents moved_len - !6089 [sync] PR-5977: btrfs: dev-replace: properly validate device names - !6095 [sync] PR-6029: ceph: prevent use-after-free in encode_cap_msg() - !7028 [sync] PR-6977: wireguard: netlink: access device through ctx instead of peer - wireguard: netlink: access device through ctx instead of peer - !6985 [sync] PR-6964: v2 CVE-2024-27000 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays - !6212 [sync] PR-6178: CVE-2024-26812 - mac802154: fix llsec key resources release in mac802154_llsec_key_del - !6693 quota: Fix potential NULL pointer dereference - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() - serial: mxs-auart: add spinlock around changing cts state - serial: core: Provide port lock wrappers - !6884 [sync] PR-6740: V2 cpuset: fix race between rebuild scheduler domains and hotplug work - !6960 [sync] PR-6861: media: dvb-frontends: avoid stack overflow warnings with clang - ksmbd: validate payload size in ipc response - !6911 pstore: inode: Only d_invalidate() is needed - !6935 [sync] PR-6826: fat: fix uninitialized field in nostale filehandles - !6933 [sync] PR-6838: fs: sysfs: Fix reference leak in sysfs_break_active_protection() - media: dvb-frontends: avoid stack overflow warnings with clang - drm/tegra: dsi: Add missing check for of_find_device_by_node - fat: fix uninitialized field in nostale filehandles - fs: sysfs: Fix reference leak in sysfs_break_active_protection() - pstore: inode: Only d_invalidate() is needed - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - cpuset: fix race between rebuild scheduler domains and hotplug work - cifs: fix underflow in parse_server_interfaces() - amdkfd: use calloc instead of kzalloc to avoid integer overflow - quota: Fix potential NULL pointer dereference - vfio/pci: Create persistent INTx handler - vfio: Introduce interface to flush virqfd inject workqueue - ceph: prevent use-after-free in encode_cap_msg() - ext4: fix double-free of blocks due to wrong extents moved_len - btrfs: dev-replace: properly validate device names - net/sched: flower: Fix kabi change - net/sched: flower: Fix chain template offload - net: atlantic: Fix DMA mapping for PTP hwts ring- !6425 [sync] PR-6291: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - !6901 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - !6931 bpf: Fix hashtab overflow check on 32-bit arches - !6925 firmware: arm_scmi: Harden accesses to the reset domains - !6921 bpf: Fix stackmap overflow check on 32-bit arches - !6865 [sync] PR-6835: kprobes: Fix check for probe enabled in kill_kprobe() - !6897 [sync] PR-6592: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - bpf: Fix hashtab overflow check on 32-bit arches - firmware: arm_scmi: Harden accesses to the reset domains - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - !6643 [sync] PR-6623: amdkfd: use calloc instead of kzalloc to avoid integer overflow - kprobes: Fix check for probe enabled in kill_kprobe() - !6387 [sync] PR-6202: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - !6627 [sync] PR-6485: CVE-2024-26843 - !6751 [sync] PR-6677: v3 olk-5.10: bugfix for mm - mm/madvise: fix potential pte_unmap_unlock pte error - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - !6509 cachefiles: fix memory leak in cachefiles_add_cache() - !6686 [sync] PR-6580: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - !6636 [sync] PR-6561: md: fix kmemleak of rdev->serial - amdkfd: use calloc instead of kzalloc to avoid integer overflow - !6599 [sync] PR-6584: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6605 [sync] PR-6579: media: rc: bpf attach/detach requires write permission - !6604 [sync] PR-6568: IB/hfi1: Fix a memleak in init_credit_return - !6613 [sync] PR-6543: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6602 [sync] PR-6520: firmware: arm_scmi: Fix double free in SMC transport cleanup path - md: fix kmemleak of rdev->serial - efi: runtime: Fix potential overflow of soft-reserved region size - !6248 ubi: Check for too small LEB size in VTBL code - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - !6448 [sync] PR-6281: v2 net/mlx5: Update error handler for UCTX and UMEM - media: rc: bpf attach/detach requires write permission - IB/hfi1: Fix a memleak in init_credit_return - firmware: arm_scmi: Fix double free in SMC transport cleanup path - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - !6475 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - !6574 [sync] PR-6417: media: pvrusb2: fix uaf in pvr2_context_set_notify - media: pvrusb2: fix uaf in pvr2_context_set_notify - !6499 v2 Add hugetlb MADV_DONTNEED support - cachefiles: fix memory leak in cachefiles_add_cache() - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - madvise: use zap_page_range_single for madvise dontneed - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm: enable MADV_DONTNEED for hugetlb mappings - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - net/mlx5: Update error handler for UCTX and UMEM - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - ubi: Check for too small LEB size in VTBL code- !6413 [sync] PR-5510: bus: mhi: host: Drop chan lock before queuing buffers - !6264 [sync] PR-6103: riscv: Sparse-Memory/vmemmap out-of-bounds fix - !6537 [sync] PR-5273: net/smc: fix illegal rmb_desc access in SMC-D connection dump - !6528 [sync] PR-5468: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - !6545 v2 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - !6496 [sync] PR-6407: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add - net/smc: fix illegal rmb_desc access in SMC-D connection dump - !5802 [sync] PR-5773: patches for CVE-2023-52617 - !5801 [sync] PR-5772: firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6516 fixe CVE-2023-52498 - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run - PM: sleep: Fix error handling in dpm_prepare() - PM: sleep: Fix possible deadlocks in core system-wide PM code - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: sleep: Use dev_printk() when possible - async: Introduce async_schedule_dev_nocall() - async: Split async_schedule_node_domain() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - firmware: arm_scmi: Check mailbox/SMT channel for consistency - !6487 [sync] PR-6455: CVE-2021-47182 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - !6440 [sync] PR-6312: fix CVE-2024-24861 for 5.10 - scsi: core: Fix scsi_mode_sense() buffer length handling - scsi: core: Reshuffle response handling in scsi_mode_sense() - media: xc4000: Fix atomicity violation in xc4000_get_frequency - !6410 [sync] PR-5195: dmaengine: fix NULL pointer in channel unregistration function - bus: mhi: host: Drop chan lock before queuing buffers - dmaengine: fix NULL pointer in channel unregistration function - !6080 Fix CVE-2024-26764 - !5966 Fix CVE-2023-52441 and integrate the pre-patch - riscv: Sparse-Memory/vmemmap out-of-bounds fix - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - ksmbd: fix out of bounds in init_smb2_rsp_hdr() - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr - ksmbd: return unsupported error on smb1 mount - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect- !6180 [sync] PR-5093: wifi: mac80211: fix potential key use-after-free - !6218 RDMA/siw: Fix connection failure handling - !6236 [sync] PR-6193: uio_hv_generic: Fix another memory leak in error handling paths - !6232 [sync] PR-6192: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6186 Fixed CVE-2023-52504 - uio_hv_generic: Fix another memory leak in error handling paths - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved - !6196 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - !6188 [sync] PR-5466: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - RDMA/siw: Fix connection failure handling - !6113 cifs: Fix UAF in cifs_demultiplex_thread() - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - !6172 [sync] PR-6137: vfio/pci: Lock external INTx masking ops - x86/alternatives: Disable KASAN in apply_alternatives() - wifi: mac80211: fix potential key use-after-free - !6125 fix-CVE-2021-47101 - vfio/pci: Lock external INTx masking ops - !6135 [sync] PR-5717: v2 fix CVE-2023-52587 - !6148 [sync] PR-6101: vfio/pci: Disable auto-enable of exclusive INTx IRQ - !6141 [sync] PR-6047: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6131 [sync] PR-4923: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - !5419 [sync] PR-5317: KVM: s390: fix setting of fpc register - vfio/pci: Disable auto-enable of exclusive INTx IRQ - !5129 [sync] PR-5113: fix CVE-2023-52578 - !5120 [sync] PR-5062: team: fix null-ptr-deref when team device type is changed - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - !6117 wifi: rt2x00: restart beacon queue when hardware reset - !6054 [sync] PR-6017: drm/amdgpu: fix use-after-free bug - !6122 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - IB/ipoib: Fix mcast list locking - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() - asix: fix wrong return value in asix_check_host_enable() - asix: fix uninit-value in asix_mdio_read() - net: asix: fix uninit value bugs - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock - wifi: rt2x00: restart beacon queue when hardware reset - cifs: Fix UAF in cifs_demultiplex_thread() - !6077 [sync] PR-5973: EDAC/thunderx: Fix possible out-of-bounds string access - !6046 mm/swap: fix race when skipping swapcache - !6022 [sync] PR-5970: fixup CVE-2024-26751 - !6034 [sync] PR-5969: fbdev: savage: Error out if pixclock equals zero - EDAC/thunderx: Fix possible out-of-bounds string access - !5848 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - !6057 fs/ntfs3: fix CVE-2023-52640 - fs/ntfs3: Fix oob in ntfs_listxattr - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() - drm/amdgpu: fix use-after-free bug - mm/swap: fix race when skipping swapcache - !5987 [sync] PR-5901: CVE-2024-26695 - !5980 [sync] PR-5812: afs: Increase buffer size in afs_update_volume_status() - fbdev: savage: Error out if pixclock equals zero - ARM: ep93xx: Add terminator to gpiod_lookup_table - !5947 [sync] PR-5831: fbdev: sis: Error out if pixclock equals zero - !5958 [sync] PR-5884: KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - !5842 [sync] PR-5348: s390/ptrace: handle setting of fpc register correctly - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - !5856 dmaengine: ti: edma: Add some null pointer checks to the edma_probe - afs: Increase buffer size in afs_update_volume_status() - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue - fbdev: sis: Error out if pixclock equals zero - dmaengine: ti: edma: Add some null pointer checks to the edma_probe - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - s390/ptrace: handle setting of fpc register correctly - KVM: s390: fix setting of fpc register - net: fix kabi check warning - net: Fix unwanted sign extension in netdev_stats_to_stats64() - net: bridge: use DEV_STATS_INC() - net: add atomic_long_t to net_device_stats fields - team: fix null-ptr-deref when team device type is changed- !5942 CVE-2021-46926 - !5944 [sync] PR-5861: ksmbd: fix uaf in smb20_oplock_break_ack - !5936 [sync] PR-5911: CVE-2023-52484 - !5932 [sync] PR-5895: i2c: i801: Fix block process call transactions - !5927 [sync] PR-5863: CVE-2024-26788 - !5908 [sync] PR-4928: drm/bridge: sii902x: Fix probing race issue - !5782 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - !5918 [sync] PR-5870: drivers/amd/pm: fix a use-after-free in kv_parse_power_table - !5903 [sync] PR-4931: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - ksmbd: fix uaf in smb20_oplock_break_ack - ALSA: hda: intel-sdw-acpi: harden detection of controller - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() - !5907 [sync] PR-5811: Fixed CVE-2021-47037 - !5871 [sync] PR-4794: serial: imx: fix tx statemachine deadlock - !4907 [sync] PR-4865: Input: powermate - fix use-after-free in powermate_config_complete - i2c: i801: Fix block process call transactions - dmaengine: fsl-qdma: init irq after reg initialization - !5896 [sync] PR-5808: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5888 [sync] PR-5832: CVE-2023-52467 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/bridge: sii902x: Fix probing race issue - ASoC: q6afe-clocks: fix reprobing of the driver - ASoC: q6afe-clocks: fix warning on symbol scope - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - !5748 ksmbd: fix global oob in ksmbd_nl_policy - mfd: syscon: Fix null pointer dereference in of_syscon_register() - serial: imx: fix tx statemachine deadlock - !5826 [sync] PR-5785: net: qualcomm: rmnet: fix global oob in rmnet_policy - !5817 [sync] PR-5780: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !4799 [sync] PR-4764: binder: signal epoll threads of self-work - !5790 usb: hub: Guard against accesses to uninitialized BOS descriptors - !5797 [sync] PR-5788: v2 Patches to Fix CVE-2023-52454 - !5820 [sync] PR-5789: perf/x86/lbr: Filter vsyscall addresses - net: qualcomm: rmnet: fix global oob in rmnet_policy - !5775 [sync] PR-5724: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - perf/x86/lbr: Filter vsyscall addresses - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS - !5764 [sync] PR-5642: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - nvmet-tcp: Fix the H2C expected PDU len calculation - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length - usb: hub: Guard against accesses to uninitialized BOS descriptors - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - ksmbd: fix global oob in ksmbd_nl_policy - !5704 [sync] PR-5507: ext4: Validate inode pa before using preallocation blocks - !5708 ext4: dio: Put endio under - ext4: Optimize endio process for DIO overwrites - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag - iomap: pass a flags argument to iomap_dio_rw - iomap: rename the flags variable in __iomap_dio_rw - iomap: add IOMAP_DIO_INLINE_COMP - iomap: use an unsigned type for IOMAP_DIO_* defines - iomap: cleanup up iomap_dio_bio_end_io() - ext4: Validate inode pa before using preallocation blocks - Input: powermate - fix use-after-free in powermate_config_complete - binder: signal epoll threads of self-work- !5681 [sync] PR-5266: llc: call sock_orphan() at release time - !5689 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - !5685 [sync] PR-5253: tomoyo: fix UAF write bug in tomoyo_write_control() - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - tomoyo: fix UAF write bug in tomoyo_write_control() - llc: call sock_orphan() at release time - !5432 [sync] PR-5232: jfs: fix cve issue - !5637 [sync] PR-5617: v4 Fix I/O high when memory almost met memcg limit - !5664 [sync] PR-5580: CVE-2023-52622 - ext4: avoid online resizing failures due to oversized flex bg - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - !5646 [sync] PR-5493: arm64/mpam: Fix repeated enabling in mpam_enable() - !5634 [sync] PR-5518: dm: revert partial fix for redundant bio-based IO accounting - !5631 [sync] PR-5521: md/raid5: fix atomicity violation in raid5_cache_count - arm64/mpam: Fix repeated enabling in mpam_enable() - mm/readahead: don't decrease mmap_miss when folio has workingset flags - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM - !5618 [sync] PR-5606: mm/mlock: return EINVAL for illegal user memory range in mlock - dm: revert partial fix for redundant bio-based IO accounting - md/raid5: fix atomicity violation in raid5_cache_count - mm/mlock: return EINVAL for illegal user memory range in mlock - !5471 jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix array-index-out-of-bounds in diNewExt - jfs: fix uaf in jfs_evict_inode- !5533 media: pvrusb2: fix use after free on context disconnection - !5447 Fix CVE-2021-47094 - !5501 [sync] PR-5316: v2 iomap: add support to track dirty state of sub pages - media: pvrusb2: fix use after free on context disconnection - !5137 [sync] PR-4933: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - iomap: add support to track dirty state of sub pages - !5027 [sync] PR-4987: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg - !5438 [sync] PR-5286: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - !5323 jfs: fix slab-out-of-bounds Read in dtSearch - !5328 UBSAN: array-index-out-of-bounds in dtSplitRoot - !5435 [sync] PR-5355: CVE-2023-52593 - !5310 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - KVM: x86/mmu: Don't advance iterator after restart due to yielding - KVM: x86/mmu: Factor out tdp_iter_return_to_root - !5389 [sync] PR-5259: CVE-2024-26627​ - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - !5371 [sync] PR-5313: bus: mhi: host: Add alignment check for event ring read pointer - !5287 [sync] PR-5231: af_unix: fix lockdep positive in sk_diag_dump_icons() - bus: mhi: host: Add alignment check for event ring read pointer - UBSAN: array-index-out-of-bounds in dtSplitRoot - jfs: fix slab-out-of-bounds Read in dtSearch - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - af_unix: fix lockdep positive in sk_diag_dump_icons() - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg- !5343 CVE-2023-52447 - !5365 v2 CVE-2023-52452 - bpf: Fix accesses to uninit stack slots - bpf: Fix verification of indirect var-off stack access - bpf: Allow reads from uninit stack - bpf: expose bpf_strtol and bpf_strtoul to all program types - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf: verifier: Use copy_array for jmp_history - bpf: verifier: Improve function state reallocation - !5181 [sync] PR-4805: CVE-2023-52451 backport to OLK-5.10 v2 - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops - bpf: Defer the free of inner map when necessary - bpf: Set need_defer as false when clearing fd array during map free - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - !5277 [sync] PR-5246: ceph: fix deadlock or deadcode of misusing dget() - !5293 [sync] PR-5240: powerpc/lib: Validate size for vector operations - powerpc/lib: Validate size for vector operations - !5225 [sync] PR-5197: drm: Don't unref the same fb many times by mistake due to deadlock handling - !4852 [sync] PR-4847: btrfs: mainline backport - ceph: fix deadlock or deadcode of misusing dget() - !5191 [sync] PR-5164: nfc: nci: assert requested protocol is valid - !5184 [sync] PR-5156: RDMA/srp: Do not call scsi_done() from srp_abort() - !5123 [sync] PR-5109: CVE-2024-26586 - !5097 [sync] PR-5078: RDMA/rxe: Return CQE error if invalid lkey was supplied - drm: Don't unref the same fb many times by mistake due to deadlock handling - !5200 [sync] PR-5178: net: nfc: llcp: Add lock when modifying device list - net: nfc: llcp: Add lock when modifying device list - nfc: nci: assert requested protocol is valid - RDMA/srp: Do not call scsi_done() from srp_abort() - !5165 [sync] PR-5117: fix CVE-2023-52527 - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - l2tp: pass correct message length to ip6_append_data - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() - mlxsw: spectrum_acl_tcam: Fix stack corruption - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations - mlxsw: spectrum_acl_tcam: Make fini symmetric to init - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure - RDMA/rxe: Return CQE error if invalid lkey was supplied - btrfs: fix deadlock when cloning inline extents and using qgroups - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit- !5153 [sync] PR-4645: f2fs: explicitly null-terminate the xattr list - !5146 [sync] PR-4925: v2 btrfs: do not ASSERT() if the newly created subvolume already got read - !4667 [sync] PR-4646: binder: fix use-after-free in shinker's callback - !4830 [sync] PR-4803: CVE-2024-26583 - f2fs: explicitly null-terminate the xattr list - !4748 [sync] PR-4672: uio: Fix use-after-free in uio_open - !5068 [sync] PR-5033: v3 Remove WQ_FLAG_BOOKMARK flag - btrfs: fix double free of anonymous device after snapshot creation failure - btrfs: do not ASSERT() if the newly created subvolume already got read - !5083 [sync] PR-5058: net: fix possible store tearing in neigh_periodic_work() - !5085 [sync] PR-5064: net: rds: Fix possible NULL-pointer dereference - !5125 [sync] PR-4891: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !5079 [sync] PR-5051: dm: limit the number of targets and parameter size area - !5000 [sync] PR-4988: ieee802154: ca8210: Fix a potential UAF in ca8210_probe - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - !4838 [sync] PR-4742: block: add check that partition length needs to be aligned with block size - !5065 [sync] PR-5032: net/sched: act_ct: fix wild memory access when clearing fragments - net: rds: Fix possible NULL-pointer dereference - net: fix possible store tearing in neigh_periodic_work() - dm: limit the number of targets and parameter size area - sched: remove wait bookmarks - filemap: remove use of wait bookmarks - net/sched: act_ct: fix wild memory access when clearing fragments - !4984 [sync] PR-4339: 修复pmem_legacy_device未被编译问题 - !4963 [sync] PR-4901: fix CVE-2021-47036 - !5011 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - !5005 [sync] PR-4979: CVE-2021-47028 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() - mt76: mt7915: fix txrate reporting - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate - !4731 [sync] PR-4706: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - pmem: compile pmem legacy device while libnvdimm as a module - udp: properly flush normal packet at GRO time - udp: skip L4 aggregation for UDP tunnel packets - block: add check that partition length needs to be aligned with block size - tls: fix race between tx work scheduling and socket close - tls: fix race between async notify and socket close - net: tls: factor out tls_*crypt_async_wait() - tls: rx: simplify async wait - uio: Fix use-after-free in uio_open - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - binder: fix use-after-free in shinker's callback- !4955 [sync] PR-4868: net: openvswitch: limit the number of recursions from action sets - !4960 [sync] PR-4940: apparmor: avoid crash when parsed profile name is empty - !4951 arm64: head.S: always initialize PSTATE - apparmor: avoid crash when parsed profile name is empty - net: openvswitch: limit the number of recursions from action sets - arm64: head.S: always initialize PSTATE - !4754 [sync] PR-4737: blk-mq: fix IO hang from sbitmap wakeup race - !4813 [sync] PR-4702: efivarfs: force RO when remounting if SetVariable is not supported - !4795 [sync] PR-4747: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - efivarfs: force RO when remounting if SetVariable is not supported - !4791 v2 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump - blk-mq: fix IO hang from sbitmap wakeup race - !4722 [sync] PR-4694: v2 mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path- !4466 [sync] PR-4256: scsi: core: Always send batch on reset or error handling command - !4681 [sync] PR-4662: v3 CVE-2023-52435 - !4691 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - !4625 [sync] PR-4531: fs:/dcache.c: fix negative dentry flag warning in dentry_free - net: Fix compile warning in skb_segment() - net: prevent mss overflow in skb_segment() - fs:/dcache.c: fix negative dentry flag warning in dentry_free - scsi: core: Always send batch on reset or error handling command - Revert "scsi: core: Add scsi_prot_ref_tag() helper" - Revert "scsi: core: Introduce scsi_get_sector()" - Revert "scsi: core: Make scsi_get_lba() return the LBA" - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request" - Revert "scsi: core: Use a structure member to track the SCSI command submitter" - Revert "scsi: core: Always send batch on reset or error handling command" - scsi: core: Always send batch on reset or error handling command - scsi: core: Use a structure member to track the SCSI command submitter - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: core: Make scsi_get_lba() return the LBA - scsi: core: Introduce scsi_get_sector() - scsi: core: Add scsi_prot_ref_tag() helper- !4515 [sync] PR-4431: v2 patchset for CVE-2023-52340 - !4443 [sync] PR-4290: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv - !4613 [sync] PR-4521: xen-netback: don't produce zero-size SKB frags - !4591 sctp: fix potential deadlock on &net->sctp.addr_wq_lock - !4548 [sync] PR-4461: netfilter: nf_tables: reject QUEUE/DROP verdict parameters - !4607 [sync] PR-4588: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - xen-netback: don't produce zero-size SKB frags - !4585 [sync] PR-4562: v4 tracing: Backport bugfixes - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super - sctp: fix potential deadlock on &net->sctp.addr_wq_lock - trace: Fix kabi breakage in struct trace_event_file - tracing: Fix uaf issue when open the hist or hist_debug file - tracing: Have event inject files inc the trace array ref count - tracing: Have trace_event_file have ref counters - tracing: Increase trace array ref count on enable and filter files - netfilter: nf_tables: reject QUEUE/DROP verdict parameters - ipv6: fix kabi change in struct dst_ops - ipv6: Document that max_size sysctl is deprecated - ipv6: remove max_size check inline with ipv4 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv- !4497 [sync] PR-4362: ubifs: Queue up space reservation tasks if retrying many times - !4446 [sync] PR-4321: io_uring/af_unix: disable sending io_uring over sockets - ubifs: Queue up space reservation tasks if retrying many times - !4095 [sync] PR-4090: ida: Fix crash in ida_free when the bitmap is empty - !4422 v2 drm/atomic: Fix potential use-after-free in nonblocking commits - io_uring/af_unix: disable sending io_uring over sockets - !4117 [sync] PR-3975: md/raid1-10: limit the number of plugged bio - drm/atomic: Fix potential use-after-free in nonblocking commits - !3858 [sync] PR-3756: md: mainline backport - !4281 [sync] PR-4270: fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug - !4240 [sync] PR-3228: net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - !3155 backport Broadcom NIC driver patches - !4193 [sync] PR-4015: drm/amdgpu: correct the amdgpu runtime dereference usage count - !4190 [sync] PR-4014: drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - !4233 [sync] PR-4013: drm/amdgpu: correct chunk_ptr to a pointer to chunk. - !4185 [sync] PR-4012: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - !4232 [sync] PR-4010: drm/amd/display: Exit idle optimizations before attempt to access PHY - !4180 [sync] PR-3955: drm/radeon: possible buffer overflow - !4225 [sync] PR-4149: block: remove precise_iostat - !4348 [sync] PR-4268: linux Mainline ubifs Fix Patch bacnport to 5.10 - ubifs: fix possible dereference after free - ubi: block: Fix use-after-free in ubiblock_cleanup - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup" - ipv6: init the accept_queue's spinlocks in inet6_create - tcp: make sure init the accept_queue's spinlocks once - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum() - drm/amdgpu: correct chunk_ptr to a pointer to chunk. - drm/amd/display: Exit idle optimizations before attempt to access PHY - block: remove precise_iostat - drm/amdgpu: correct the amdgpu runtime dereference usage count - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/radeon: possible buffer overflow - md/raid1-10: fix casting from randomized structure in raid1_submit_write() - md/raid1-10: limit the number of plugged bio - md/raid1-10: don't handle pluged bio by daemon thread - md/md-bitmap: add a new helper to unplug bitmap asynchrously - md/raid1-10: submit write io directly if bitmap is not enabled - md/raid1-10: factor out a helper to submit normal write - md/raid1-10: factor out a helper to add bio to plug - md/raid10: prevent soft lockup while flush writes - md: raid1/raid10: drop pending_cnt - md: drop queue limitation for RAID1 and RAID10 - Revert "md/raid10: fix softlockup in raid10_unplug" - ida: Fix crash in ida_free when the bitmap is empty - md: fix error handling in md_alloc - md: Constify attribute_group structs - md: fix mddev->kobj lifetime - md: properly unwind when failing to add the kobject in md_alloc - md: extend disks_mutex coverage - md: add the bitmap group to the default groups for the md kobject - md: add error handling support for add_disk() - md: convert to blk_alloc_disk/blk_cleanup_disk - md/raid10: fix improper BUG_ON() in raise_barrier() - md: use msleep() in md_notify_reboot() - md: fix double free of mddev->private in autorun_array() - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks - bnxt_en: Query default VLAN before VNIC setup on a VF - bnxt_en: Don't issue AP reset during ethtool's reset operation - net: bcmgenet: Restore phy_stop() depending upon suspend/close - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()- !4324 [sync] PR-4266: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4289 fs:/dcache.c: fix negative dentry limit not complete problem - !4285 [sync] PR-4257: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() - !4263 [sync] PR-4255: drm/amdgpu: Fix potential fence use-after-free v2 - fs:/dcache.c: fix negative dentry limit not complete problem - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - !4222 [sync] PR-4213: netlink: fix potential sleeping issue in mqueue_flush_file - !4205 [sync] PR-4203: mm/dynamic_hugetlb: skip unexpected migration - !4004 ext4: fix some ext4_lblk_t overflow issues - drm/amdgpu: Fix potential fence use-after-free v2 - netlink: fix potential sleeping issue in mqueue_flush_file - mm/dynamic_hugetlb: skip unexpected migration - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS - ext4: avoid overlapping preallocations due to overflow - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()- !4129 [sync] PR-4100: netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - !4125 [sync] PR-4022: netfilter: nf_tables: Reject tables of unsupported family - !4055 ext4: correct return value of ext4_convert_meta_bg - !4061 ext4: synchronize the casefold bugfix from the mainline - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_tables: Reject tables of unsupported family - !4077 [sync] PR-4069: tipc: fix a potential deadlock on &tx->lock - !4073 [sync] PR-4064: smb: client: fix OOB in receive_encrypted_standard() - tipc: fix a potential deadlock on &tx->lock - smb: client: fix OOB in receive_encrypted_standard() - !4040 [sync] PR-3981: vhost: use kzalloc() instead of kmalloc() followed by memset() - ext4: improve error handling from ext4_dirhash() - ext4: reject casefold inode flag without casefold feature - ext4: correct return value of ext4_convert_meta_bg - !4016 mm/filemap: avoid buffered read/write race to read inconsistent data - vhost: use kzalloc() instead of kmalloc() followed by memset() - mm/filemap: avoid buffered read/write race to read inconsistent data- !3986 [sync] PR-3715: appletalk: Fix Use-After-Free in atalk_ioctl - !3989 [sync] PR-3668: net/rose: Fix Use-After-Free in rose_ioctl - !3416 Modify the kvm code style - !3983 [sync] PR-3915: nvmet: nul-terminate the NQNs passed in the connect command - !3795 [sync] PR-3771: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - !3763 [sync] PR-3686: Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - net/rose: Fix Use-After-Free in rose_ioctl - appletalk: Fix Use-After-Free in atalk_ioctl - nvmet: nul-terminate the NQNs passed in the connect command - !3924 livepatch/core: Disable support for replacing - livepatch/core: Disable support for replacing - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg - loongarch/kvm: Modify the kvm code style- !3853 [sync] PR-3694: Fix tow CVEs of CIFS - !3773 [sync] PR-3594: CVE-2023-35827 patchset - smb: client: fix potential OOB in smb2_dump_detail() - smb: client: fix OOB in smbCalcSize() - !3799 [sync] PR-3659: atm: Fix Use-After-Free in do_vcc_ioctl - !3824 [sync] PR-3822: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3794 md: protect md_thread with rcu - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' - !3780 [sync] PR-3447: dm: add error handling support for add_disk() - !3778 [sync] PR-3379: md: do not return existing mddevs from mddev_find_or_alloc - atm: Fix Use-After-Free in do_vcc_ioctl - md: protect md_thread with rcu - md/bitmap: factor out a helper to set timeout - md/bitmap: always wake up md_thread in timeout_store - dm-raid: remove useless checking in raid_message() - md: factor out a helper to wake up md_thread directly - dm: add error handling support for add_disk() - md: do not return existing mddevs from mddev_find_or_alloc - md: refactor mddev_find_or_alloc - md: factor out a mddev_alloc_unit helper from mddev_find - ravb: Fix races between ravb_tx_timeout_work() and net related ops - ravb: Fix use-after-free issue in ravb_tx_timeout_work()- !3624 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - !3621 netfilter: nft_set_pipapo: skip inactive elements during set walk - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet - netfilter: nft_set_pipapo: skip inactive elements during set walk - !3583 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - !3580 [sync] PR-3577: perf/core: Fix CVE-2023-6931 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux - perf: Fix perf_event_validate_size() lockdep splat - perf: Fix perf_event_validate_size() - !3292 [sync] PR-2843: Add error handle for sd - !3288 [sync] PR-3222: md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3252 [sync] PR-2946: LoongArch: disable 40bit user space by default - scsi: sd: Clean up sdkp if device_add_disk() failed - scsi: sd: Add error handling support for add_disk() - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() - !3179 [sync] PR-2825: Add error handle for driver - LoongArch: disable 40bit user space by default - !3017 [sync] PR-1203: Revert "locking/rwsem: Prevent potential lock starvation" - !3229 [sync] PR-3161: fs: Fix error checking for d_hash_and_lookup() - !2956 [sync] PR-1613: arm64/mpam: implement CPU_PM notifier - fs: Fix error checking for d_hash_and_lookup() - nbd: fix uaf in nbd_open - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup - mtd/ubi/block: Fix null pointer dereference issue in error path - mtd/ubi/block: add error handling support for add_disk() - ubi: use blk_mq_alloc_disk and blk_cleanup_disk - scsi: sr: Add error handling support for add_disk() - block/brd: add error handling support for add_disk() - brd: convert to blk_alloc_disk/blk_cleanup_disk - nvme: add error handling support for add_disk() - nvme: use blk_mq_alloc_disk - block: add a flag to make put_disk on partially initalized disks safer - nbd: add error handling support for add_disk() - nbd: fix order of cleaning up the queue and freeing the tagset - nbd: use blk_mq_alloc_disk and blk_cleanup_disk - loop: add error handling support for add_disk() - loop: fix order of cleaning up the queue and freeing the tagset - loop: use blk_mq_alloc_disk and blk_cleanup_disk - blk-mq: fix an IS_ERR() vs NULL bug - blk-mq: add the blk_mq_alloc_disk APIs - block: add blk_alloc_disk and blk_cleanup_disk APIs - Revert "locking/rwsem: Better collate rwsem_read_trylock()" - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()" - Revert "locking/rwsem: Prevent potential lock starvation" - arm64/mpam: implement CPU_PM notifier- !3193 [sync] PR-3128: fix ksmbd to release the ones allocated for async work - ksmbd: delete asynchronous work from list - ksmbd: fix typo, syncronous->synchronous - ksmbd: fix possible memory leak in smb2_lock() - ksmbd: replace usage of found with dedicated list iterator variable - !3103 [sync] PR-3082: fs/dirty_pages: add last read check in seq_read_dirty() - !3185 [sync] PR-3152: scsi: scsi_device_gets returns failure - scsi: fix kabi broken in struct Scsi_Host - scsi: don't fail if hostt->module is NULL - scsi: scsi_device_gets returns failure when the module is NULL. - !2970 Add error handle for add_disk - !1394 [sync] PR-1355: etmem: fix the div 0 problem in swapcache reclaim process - fs/dirty_pages: add last read check in seq_read_dirty() - !3078 [sync] PR-3022: fs/dirty_pages: fix some errors in seq_read_dirty() - !3075 [sync] PR-3020: fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - fs/dirty_pages: fix some errors in seq_read_dirty() - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb() - block: Set memalloc_noio to false in the error path - block: Fix minor range check in device_add_disk() - block: clear ->slave_dir when dropping the main slave_dir reference - block: call blk_get_queue earlier in __device_add_disk - block: check minor range in device_add_disk() - block: fix memory leak for elevator on add_disk failure - block: Fix the kabi change on blk_register_region - block: Fix the kabi change in device_add_disk - block: fix error unwinding in device_add_disk - block: fix device_add_disk() kobject_create_and_add() error handling - block: add error handling for device_add_disk / add_disk - block: return errors from blk_register_region - block: add the events* attributes to disk_attrs - block: return errors from disk_alloc_events - block: return errors from blk_integrity_add - block: call blk_integrity_add earlier in device_add_disk - block: fold register_disk into device_add_disk - etmem: fix the div 0 problem in swapcache reclaim process- !2997 [sync] PR-2902: net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !829 [sync] PR-739: Fix kvm-unit-tests vmx_cr4_osxsave_test case failed - !831 [sync] PR-601: fix test_vmxon failed - !2918 fix some bugs in loongarch kvm - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - !2976 Add script to check & update openeuler_defconfig - config: update openeuler_defconfig for arm64 - config: update openeuler_defconfig for x86 - kconfig: Add script to check & update openeuler_defconfig - Revert "kconfig: Add script to update openeuler_defconfig" - !1562 [sync] PR-1527: arm64/mpam: fix missing kfree domain's ctrl_val arrray - !2043 [sync] PR-1327: Huawei BMA: To fix the bug in the iBMA driver code - !1896 [sync] PR-1853: ring-buffer: Fix deadloop issue on reading trace_pipe - !1941 [sync] PR-1900: tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - !1983 [sync] PR-1905: tracing: Fix memleak due to race between current_tracer and trace - !2652 [sync] PR-2377: tracing: Backport bugfixes - !1402 [sync] PR-1399: bpf: cpumap: Fix memory leak in cpu_map_update_elem - !2633 [sync] PR-2615: preempt/dynamic: Fix setup_preempt_mode() return value - !1808 [sync] PR-1768: bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - !2811 [sync] PR-2716: ext4: recheck buffer valid after page unlock - loongarch/kvm: disable hugepage during migration process - loongarch/kvm: Fix oneshot timer emulation - loongarch/kvm: Remove SW timer switch when vcpu is halt polling - !2899 [sync] PR-2884: LoongArch: fix two cpu hotplug problem - !1424 [sync] PR-1354: ubi: Fix return value overwrite issue in try_write_vid_and_data() - !889 [sync] PR-886: net: sched: fix NULL pointer dereference in mq_attach - !900 [sync] PR-890: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - !2019 [sync] PR-1965: crypto:padata: Fix return err for PADATA_RESET - !2896 [sync] PR-2867: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - !1512 [sync] PR-1357: SUNRPC: Ensure that the gssproxy client can start in a connected state - !2753 fix memcgv1 oom meminfo bug - LoongArch: fix two cpu hotplug problem - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - ext4: recheck buffer valid after page unlock - memcg: dump memory.stat during cgroup OOM for v1 - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo() - seq_buf: Add seq_buf_do_printk() helper - seq_buf: Add seq_buf_terminate() API - ring-buffer: Do not attempt to read past "commit" - ring-buffer: Do not swap cpu_buffer during resize process - preempt/dynamic: Fix setup_preempt_mode() return value - Huawei BMA: To fix the bug in the iBMA driver code - crypto:padata: Fix return err for PADATA_RESET - tracing: Fix memleak due to race between current_tracer and trace - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed - ring-buffer: Fix deadloop issue on reading trace_pipe - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - arm64/mpam: fix missing kfree domain's ctrl_val arrray - SUNRPC: Ensure that the gssproxy client can start in a connected state - ubi: Fix return value overwrite issue in try_write_vid_and_data() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: sched: fix NULL pointer dereference in mq_attach - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions- !2860 bugfix for CVE-2022-45884 - media: dvb-core: Fix use-after-free due to race at dvb_register_device() - media: dvbdev: fix error logic at dvb_register_device() - media: dvbdev: Fix memleak in dvb_register_device - !2846 [sync] PR-2840: drm/qxl: fix UAF on handle creation - drm/qxl: fix UAF on handle creation - !2800 [sync] PR-2782: cpufreq: Abort show()/store() for half-initialized policies - cpufreq: make interface functions and lock holding state clear - cpufreq: Abort show()/store() for half-initialized policies- !2717 [sync] PR-2678: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2739 [sync] PR-2443: CVE-2023-37453 - !2733 [sync] PR-2688: nvmet-tcp: Fix a possible UAF in queue intialization setup - USB: core: Fix oversight in SuperSpeed initialization - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() - USB: core: Change usb_get_device_descriptor() API - USB: core: Unite old scheme and new scheme descriptor reads - nvmet-tcp: Fix a possible UAF in queue intialization setup - !2701 [sync] PR-2672: fix CVE-2023-46813 - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - !2710 [sync] PR-2694: LoongArch: add 32/64 pc relative relocation type support - !2664 [sync] PR-2579: LoongArch: default IPMI related defconfig to m - LoongArch: Add support for 64_PCREL relocation type - LoongArch: Add support for 32_PCREL relocation type - LoongArch: Define relocation types for ABI v2.10 - !2644 [sync] PR-2543: psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n - x86/sev: Check for user-space IOIO pointing to kernel space - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Disable MMIO emulation from user mode - LoongArch: default IPMI related defconfig to m - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n- !2690 [sync] PR-2666: net: xfrm: Fix xfrm_address_filter OOB read - !2373 [sync] PR-2258: ext4: do not mark inode dirty every time when appending using delalloc - !2637 [sync] PR-2454: igb: set max size RX buffer when store bad packet is enabled - net: xfrm: Fix xfrm_address_filter OOB read - !2535 [sync] PR-2370: ipv4: fix null-deref in ipv4_link_failure - !2524 [sync] PR-2440: netfilter: xt_u32: validate user space input - !2530 [sync] PR-2411: netfilter: xt_sctp: validate the flag_info count - !2527 [sync] PR-2410: netfilter: nfnetlink_osf: avoid OOB read - !2658 [sync] PR-2628: ubi: Refuse attaching if mtd's erasesize is 0 - !2663 arm64: fix a concurrency issue in emulation_proc_handler() - arm64: armv8_deprecated: fix unused-function error - arm64: armv8_deprecated: rework deprected instruction handling - arm64: armv8_deprecated: move aarch32 helper earlier - arm64: armv8_deprecated move emulation functions - arm64: armv8_deprecated: fold ops into insn_emulation - arm64: rework EL0 MRS emulation - arm64: factor insn read out of call_undef_hook() - arm64: factor out EL1 SSBS emulation hook - arm64: split EL0/EL1 UNDEF handlers - arm64: allow kprobes on EL0 handlers - arm64: rework BTI exception handling - arm64: rework FPAC exception handling - arm64: consistently pass ESR_ELx to die() - arm64: die(): pass 'err' as long - arm64: report EL1 UNDEFs better - Revert "arm64: fix a concurrency issue in emulation_proc_handler()" - ubi: Refuse attaching if mtd's erasesize is 0 - !2647 [sync] PR-2641: Fix CVE-2023-5717 - perf: Fix kabi breakage in struct perf_event - perf: Disallow mis-matched inherited group reads - !2563 fix cgroup poll UAF - !2519 [sync] PR-2437: crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2558 USB: ene_usb6250: Allocate enough memory for full object - igb: set max size RX buffer when store bad packet is enabled - !2595 [sync] PR-2573: media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - !2566 [sync] PR-2557: Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - !2580 [sync] PR-2476: Fixed five CVEs vulnerabilities of ksmbd - !2613 CVE-2022-44033 - char: pcmcia: remove all the drivers - tty: ipwireless: move Kconfig entry to tty - !2552 scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS - !2584 [sync] PR-2571: xen/events: replace evtchn_rwlock with RCU - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 - xen/events: replace evtchn_rwlock with RCU - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() - ksmbd: send proper error response in smb2_tree_connect() - ksmbd: fix racy issue from smb2 close and logoff with multichannel - ksmbd: call rcu_barrier() in ksmbd_server_exit() - ksmbd: fix racy issue under cocurrent smb2 tree disconnect - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - sched/psi: Select KERNFS as needed - kernfs: add stub helper for kernfs_generic_poll() - sched/psi: use kernfs polling functions for PSI trigger polling - USB: ene_usb6250: Allocate enough memory for full object - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() - scsi: mpt3sas: Remove usage of dma_get_required_mask() API - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix - scsi: mpt3sas: Don't change DMA mask while reallocating pools - scsi: mpt3sas: Fix a memory leak - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region - scsi: mpt3sas: Fix use-after-free warning - ipv4: fix null-deref in ipv4_link_failure - netfilter: xt_sctp: validate the flag_info count - netfilter: nfnetlink_osf: avoid OOB read - netfilter: xt_u32: validate user space input - !1561 Add ACS quirk for Wangxun NICs - !2514 [sync] PR-2499: f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - crypto: drbg - Only fail when jent is unavailable in FIPS mode - !2485 [sync] PR-2340: xfs: recent patches to fix xfs issues - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() - xfs: update the last_sync_lsn with ctx start lsn - xfs: shutdown xfs once inode double free - xfs: fix off-by-one-block in xfs_discard_folio() - xfs: xfs_bmap_punch_delalloc_range() should take a byte range - iomap: buffered write failure should not truncate the page cache - xfs,iomap: move delalloc punching to iomap - xfs: use byte ranges for write cleanup ranges - xfs: punching delalloc extents on write failure is racy - xfs: longest free extent no need consider postalloc - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup - xfs: block reservation too large for minleft allocation - xfs: set minleft correctly for randomly sparse inode allocations - xfs: shutdown to ensure submits buffers on LSN boundaries - xfs: don't verify agf length when log recovery - xfs: Remove redundant assignment to busy - xfs: remove redundant pointer lip - xfs: remove redundant initializations of pointers drop_leaf and save_leaf - xfs: xfs_trans_cancel() path must check for log shutdown - xfs: fix bounds check in xfs_defer_agfl_block() - xfs: AGF length has never been bounds checked - xfs: journal geometry is not properly bounds checked - xfs: don't block in busy flushing when freeing extents - xfs: allow extent free intents to be retried - xfs: pass alloc flags through to xfs_extent_busy_flush() - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup" - xfs: use deferred frees for btree block freeing - xfs: don't reverse order of items in bulk AIL insertion - xfs: validate block number being freed before adding to xefi - xfs: validity check agbnos on the AGFL - xfs: pass xfs_extent_free_item directly through the log intent code - xfs: remove unused parameter from refcount code - xfs: reduce the size of struct xfs_extent_free_item - xfs: rename xfs_bmap_add_free to xfs_free_extent_later - xfs: create slab caches for frequently-used deferred items - xfs: compact deferred intent item structures - xfs: rename _zone variables to _cache - xfs: remove kmem_zone typedef - xfs: remove xfs_setattr_time() declaration - xfs: use setattr_copy to set vfs inode attributes - xfs: set prealloc flag in xfs_alloc_file_space() - xfs: don't assert fail on perag references on teardown - xfs: fix dir3 block read verify fail during log recover - xfs: propagate the return value of xfs_log_force() to avoid soft lockup - xfs: keep growfs sb log item active until ail flush success - !1141 [sync] PR-953: xfs: fixes patchs and backport patchs - PCI: Add ACS quirk for Wangxun NICs - ext4: do not mark inode dirty every time when appending using delalloc - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM" - xfs: atomic drop extent entries when inactiving attr - xfs: factor out __xfs_da3_node_read() - xfs: fix a UAF in xfs_iflush_abort_clean - xfs: fix a UAF when inode item push - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb - iomap: iomap: fix memory corruption when recording errors during writeback - xfs: fix hung when transaction commit fail in xfs_inactive_ifree - xfs: fix dead loop when do mount with IO fault injection - xfs: fix ag count overflow during growfs - xfs: account extra freespace btree splits for multiple allocations - xfs: force shutdown xfs when xfs_attr_inactive fails - xfs: fix negative array access in xfs_getbmap - xfs: fix BUG_ON in xfs_getbmap() - xfs: use iomap_valid method to detect stale cached iomaps - iomap: write iomap validity checks - xfs: write page faults in iomap are not buffered writes - xfs: fix exception caused by unexpected illegal bestcount in leaf dir - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks" - xfs: don't expose internal symlink metadata buffers to the vfs - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items - xfs: fix maxlevels comparisons in the btree staging code - xfs: sb verifier doesn't handle uncached sb buffer - xfs: fallocate() should call file_modified() - xfs: remove XFS_PREALLOC_SYNC - xfs: shutdown during log recovery needs to mark the log shutdown - xfs: xfs_trans_commit() path must check for log shutdown - xfs: xfs_do_force_shutdown needs to block racing shutdowns - xfs: log shutdown triggers should only shut down the log - xfs: shutdown in intent recovery has non-intent items in the AIL - xfs: AIL should be log centric - xfs: increase rename inode reservation - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int - xfs: check return codes when flushing block devices - xfs: remove xfs_blkdev_issue_flush - xfs: fix NULL pointer dereference in xfs_getbmap()- !2420 [sync] PR-2323: net/sched: Retire rsvp classifier - net/sched: Retire rsvp classifier - !2366 [sync] PR-2282: sdei_watchdog: Avoid exception during sdei handler - sdei_watchdog: Avoid exception during sdei handler- !2391 netfilter: nf_tables: disallow rule removal from chain binding - netfilter: nf_tables: disallow rule removal from chain binding - !2389 nf_table LTS - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - netfilter: nf_tables: skip bound chain on rule flush - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: reject unbound chain set before commit phase - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: use net_generic infra for transaction data - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" - Revert "netfilter: nf_tables: skip bound chain on rule flush" - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE" - Revert "netfilter: nf_tables: fix chain binding transaction logic" - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain" - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR" - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails" - !2378 [sync] PR-2359: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c - !2299 [sync] PR-2287: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - !2297 [sync] PR-2286: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow - !2273 [sync] PR-2156: drm: add inspur drm driver support - !2238 [sync] PR-2163: Fix the two problems when using binutil 2.41. - !2277 [sync] PR-2269: etmem: Fixed an issue where the module reference counting is incorrect - etmem: Fixed an issue where the module reference counting is incorrect - !2124 [sync] PR-1778: nvme-pci: fix DMA direction of unmapping integrity data - !2186 nvme-pci: fix timeout request state check - !2188 nvme-pci: fix mempool alloc size - drm: add inspur drm driver support - !2249 [sync] PR-2224: ext4: fix rec_len verify error - ext4: fix rec_len verify error - LoongArch: Fix module relocation error with binutils 2.41 - LoongArch: Fix the write_fcsr() macro - nvme-pci: fix mempool alloc size - nvme-pci: fix timeout request state check - nvme-pci: fix DMA direction of unmapping integrity data- !2214 [sync] PR-2210: jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2231 [sync] PR-2086: fix CVE-2023-20588 - !2239 [sync] PR-2169: net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2242 [sync] PR-2230: media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - !2237 x86/speculation: Add force option to GDS mitigation - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() - net: sched: sch_qfq: Fix UAF in qfq_dequeue() - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space - x86: Move gds_ucode_mitigated() declaration to header - Documentation/x86: Fix backwards on/off logic about YMM support - KVM: Add GDS_NO support to KVM - x86/speculation: Add Kconfig option for GDS - x86/speculation: Add force option to GDS mitigation - x86/CPU/AMD: Fix the DIV(0) initial fix attempt - x86/CPU/AMD: Do not leak quotient data after a division by 0 - !1877 [sync] PR-1826: x86/speculation: Add Gather Data Sampling mitigation - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev - !2170 [sync] PR-2153: netfilter: nftables: exthdr: fix 4-byte stack OOB write - netfilter: nftables: exthdr: fix 4-byte stack OOB write - !2149 [sync] PR-2095: io_uring: ensure IOPOLL locks around deferred work - io_uring: ensure IOPOLL locks around deferred work - LoongArch: export lsx/lasx related struct to user space - x86/speculation: Add cpu_show_gds() prototype - x86/speculation: Add Gather Data Sampling mitigation- !2143 [sync] PR-2126: netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2107 [sync] PR-2090: net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - !2105 [sync] PR-2092: netfilter: nf_tables: skip bound chain on rule flush - !2108 [sync] PR-2085: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - !2113 [sync] PR-2097: Fixed 4 CVEs of the ksmbd - !1779 nvme-pci: clear the prp2 field when not used - !2081 [sync] PR-2065: dm: switch to precise io accounting - ksmbd: not allow guest user on multichannel - ksmbd: fix deadlock in ksmbd_find_crypto_ctx() - ksmbd: block asynchronous requests when making a delay on session setup - ksmbd: destroy expired sessions - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). - net/sched: sch_hfsc: Ensure inner classes have fsc curve - netfilter: nf_tables: skip bound chain on rule flush - !1925 [sync] PR-1883: SUNRPC: don't pause on incomplete allocation - !1748 [sync] PR-1649: Enable TPM TIS customization - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch - dm: switch to precise io accounting - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug - SUNRPC: don't pause on incomplete allocation - net: hns3: only enable unicast promisc when mac table full - !2047 [sync] PR-1752: ksmbd: validate session id and tree id in the compound request - ksmbd: validate session id and tree id in the compound request - nvme-pci: clear the prp2 field when not used - loongarch/config: Enable TPM TIS customization - loongarch/kvm: Fixed extioi hardware emulation bugs- !2002 [sync] PR-1911: ksmbd: fix out-of-bound read in smb2_write - !1626 [sync] PR-1621: fix three CVEs by backport mainline patchs - !1817 [sync] PR-1788: exfat: check if filename entries exceeds max filename length - ksmbd: fix out-of-bound read in smb2_write - !1979 [sync] PR-1446: Fix the default return value of dm_pool_dec_data_range() - Fix the default return value of dm_pool_dec_data_range() - !1384 [sync] PR-1346: dm thin metadata: check fail_io before using data_sm - exfat: check if filename entries exceeds max filename length - ksmbd: fix racy issue from session setup and logoff - ksmbd: Fix spelling mistake "excceed" -> "exceeded" - ksmbd: limit pdu length size according to connection status - ksmbd: Implements sess->ksmbd_chann_list as xarray - dm thin metadata: check fail_io before using data_sm- !1891 [sync] PR-1784: tun/tap: fix CVE-2023-4194 - !1885 [sync] PR-1815: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1866 [sync] PR-1821: nbd: pass nbd_sock to nbd_read_reply() instead of index - !1780 [sync] PR-1766: xen/netback: Fix buffer overrun triggered by unusual packet - !1888 [sync] PR-1835: tcp: Reduce chance of collisions in inet6_hashfn(). - net: tap_open(): set sk_uid from current_fsuid() - net: tun_chr_open(): set sk_uid from current_fsuid() - tcp: Reduce chance of collisions in inet6_hashfn(). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - !1827 [sync] PR-1813: ksmbd: fix cve-2023-38432 - nbd: pass nbd_sock to nbd_read_reply() instead of index - ksmbd: validate command request size - ksmbd: validate command payload size - xen/netback: Fix buffer overrun triggered by unusual packet- !1838 fix CVE-2023-20593 for openEuler - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/cpu/amd: Add a Zenbleed fix - x86/cpu/amd: Move the errata checking functionality up - x86/cpu: Restore AMD's DE_CFG MSR after resume - !1775 [sync] PR-1729: fix CVE-2023-4128 in OLK510 - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free- !1756 [sync] PR-1742: cxgb4: fix use after free bugs caused by circular dependency problem - !1763 [sync] PR-1749: Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1668 [sync] PR-1657: media: usb: siano: Fix CVE-2023-4132 - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() - !1753 [sync] PR-1737: ksmbd: fix out of bounds read in smb2_sess_setup - cxgb4: fix use after free bugs caused by circular dependency problem - !1744 [sync] PR-1727: add support for timer_shutdown() api - !1731 [sync] PR-1713: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - ksmbd: fix out of bounds read in smb2_sess_setup - timers: Keep del_timer[_sync]() exported - timers: Provide timer_shutdown[_sync]() - timers: Add shutdown mechanism to the internal functions - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Silently ignore timers with a NULL function - timers: Rename del_timer() to timer_delete() - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Use del_timer_sync() even on UP - timers: Update kernel-doc for various functions - timers: Replace BUG_ON()s - timers: Get rid of del_singleshot_timer_sync() - sw64: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function - ARM: spear: Do not use timer namespace for timer_shutdown() function - !1617 LoonArch: KVM: fix vcpu timer - !1639 nvme-pci: set min_align_mask before calculating max_hw_sectors - !1714 [sync] PR-1711: xfrm: add NULL check in xfrm_update_ae_params - !1632 [sync] PR-1604: net: nfc: Fix CVE-2023-3863 - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID - !1710 [sync] PR-1618: LoongArch: fix some config not defined - xfrm: add NULL check in xfrm_update_ae_params - LoongArch: fix CONFIG_TRACE_IRQFLAGS_SUPPORT not defined - LoongArch: fix CONFIG_ZONE_DMA32 not defined - LoongArch: fix percpu area not allocated as expected - media: usb: siano: Fix warning due to null work_func_t function pointer - media: usb: siano: Fix use after free bugs caused by do_submit_urb - nvme-pci: set min_align_mask before calculating max_hw_sectors - LoongArch: KVM: fix vcpu timer functions - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect() error paths- !1702 [sync] PR-1682: netfilter: nft_set_pipapo: fix improper element removal - !1674 [sync] PR-1596: ksmbd: fix out-of-bound read in deassemble_neg_contexts() - netfilter: nft_set_pipapo: fix improper element removal - !1656 Revert "arm64/mpam: Fix mpam corrupt when cpu online" - !1640 [sync] PR-1551: ksmbd: allocate one more byte for implied bcc[0 - !1664 [sync] PR-1605: CVE-2023-38430 - ksmbd: fix out-of-bound read in deassemble_neg_contexts() - ksmbd: validate smb request protocol id - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h - Revert "arm64/mpam: Fix mpam corrupt when cpu online" - ksmbd: allocate one more byte for implied bcc[0]- !1587 [sync] PR-1557: net/sched: cls_fw: Fix improper refcount update leads to use-after-free - !1582 [sync] PR-1480: ksmbd: fix wrong UserName check in session_user - !1598 [sync] PR-1547: binder: fix UAF caused by faulty buffer cleanup - !1601 [sync] PR-1581: psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - !1614 [sync] PR-1591: net/sched: cls_u32: Fix reference counter leak leading to overflow - net/sched: cls_u32: Fix reference counter leak leading to overflow - !1592 [sync] PR-1585: ksmbd: fix global-out-of-bounds in smb2_find_context_vals - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n - binder: fix UAF caused by faulty buffer cleanup - ksmbd: fix global-out-of-bounds in smb2_find_context_vals - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - ksmbd: fix wrong UserName check in session_user - !1467 Fix null-ptr-deref while calling getpeername - !1573 [sync] PR-1535: net/sched: sch_qfq: account for stab overhead in qfq_enqueue - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - !1558 [sync] PR-1548: mm: memcontrol: fix cannot alloc the maximum memcg ID - !1380 [sync] PR-1351: dm thin: fix deadlock when swapping to thin device - !1349 [sync] PR-1294: dm stats: check for and propagate alloc_percpu failure - !1502 block: don't set GD_NEED_PART_SCAN if scan partition failed - !1477 [sync] PR-1345: dm: requeue IO if mapping table not yet - mm: memcontrol: fix cannot alloc the maximum memcg ID - block: don't set GD_NEED_PART_SCAN if scan partition failed - dm: don't lock fs when the map is NULL during suspend or resume - dm: don't lock fs when the map is NULL in process of resume - dm: requeue IO if mapping table not yet available - Revert "dm: make sure dm_table is binded before queue request" - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - dm thin: fix deadlock when swapping to thin device - dm stats: check for and propagate alloc_percpu failure- !1524 [sync] PR-1482: CVE-2023-3567 fix patches - !1337 [sync] PR-1335: bpf: Fix incorrect verifier pruning due to missing register precision taints - vc_screen: modify vcs_size() handling in vcs_read() - vc_screen: don't clobber return value in vcs_read - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - !1515 Fix CDM node problems - mm: fix alloc CDM node memory for MPOL_BIND - mm: fix ignore cpuset enforcement - !1489 [sync] PR-1476: ipv6/addrconf: fix a potential refcount underflow for idev - !1485 [sync] PR-1452: media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1494 [sync] PR-1445: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - ipv6/addrconf: fix a potential refcount underflow for idev - media: dvb-core: Fix use-after-free due on race condition at dvb_net - !1371 [sync] PR-1254: Two CVE fixes of ksmbd - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() - ksmbd: fix memleak in session setup - bpf: Fix incorrect verifier pruning due to missing register precision taints- !1289 [sync] PR-1262: drm/msm/dpu: Add check for pstates - !1455 [sync] PR-1358: Remove DECnet support from kernel - !1438 [sync] PR-1426: netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1459 [sync] PR-1425: loop: loop_set_status_from_info() check before assignment - !1462 [sync] PR-1436: Fix CVE-2023-3117 - !1429 nbd: fix null-ptr-dereference while accessing 'nbd->config' - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: fix chain binding transaction logic - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - loop: loop_set_status_from_info() check before assignment - Remove DECnet support from kernel - netfilter: nf_tables: do not ignore genmask when looking up chain by id - !1419 [sync] PR-1415: Fix generic/299 fail - !1348 [sync] PR-1295: blk-wbt: don't show valid wbt_lat_usec in - nbd: fix null-ptr-dereference while accessing 'nbd->config' - nbd: factor out a helper to get nbd_config without holding 'config_lock' - nbd: fold nbd config initialization into nbd_alloc_config() - ext4: Add debug message to notify user space is out of free - Revert "ext4: Stop trying writing pages if no free blocks generated" - !1411 [sync] PR-1408: Replace the hulk patch with the lts patch - cgroup: Do not corrupt task iteration when rebinding subsystem - Revert "cgroup: Stop task iteration when rebinding subsystem" - !1388 [sync] PR-1312: quota: fix race condition between dqput() and dquot_mark_dquot_dirty() - !1391 [sync] PR-1376: jbd2: Check 'jh->b_transaction' before remove it from checkpoint - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork - jbd2: Check 'jh->b_transaction' before remove it from checkpoint - quota: simplify drop_dquot_ref() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active() - quota: rename dquot_active() to inode_quota_active() - quota: factor out dquot_write_dquot() - !1328 [sync] PR-1325: jbd2: fix several checkpoint - !1331 [sync] PR-1314: ext4: Stop trying writing pages if no free blocks generated - !1339 [sync] PR-1286: ext4: turning quotas off if mount failed after enable quotas - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled - blk-wbt: make enable_state more accurate - ext4: turning quotas off if mount failed after enable quotas - ext4: Stop trying writing pages if no free blocks generated - jbd2: fix checkpoint cleanup performance regression - jbd2: remove __journal_try_to_free_buffer() - jbd2: fix a race when checking checkpoint buffer busy - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: remove journal_clean_one_cp_list() - cgroup: always put cset in cgroup_css_set_put_fork - drm/msm/dpu: Add check for pstates- Fix error provides- !1366 [sync] PR-1324: io_uring: hold uring mutex around poll removal - !1369 [sync] PR-1287: ipvlan:Fix out-of-bounds caused by unclear skb->cb - ipvlan:Fix out-of-bounds caused by unclear skb->cb - io_uring: hold uring mutex around poll removal - !1342 [sync] PR-1272: xfs: fix some problems recently - xfs: fix uninitialized variable access - xfs: set XFS_FEAT_NLINK correctly - xfs: don't leak perag when growfs fails - xfs: factor out xfs_destroy_perag() - xfs: fix warning in xfs_vm_writepages() - xfs: don't leak intent item when recovery intents fail - xfs: factor out xfs_defer_pending_abort - xfs: fix mounting failed caused by sequencing problem in the log records- Fix x86 provides error symbol- !1311 Fix CVE-2023-2860 - !1237 [sync] PR-1194: fix memleak with efi_fake_mem - ipv6: sr: fix out-of-bounds read when setting HMAC data. - !1274 [sync] PR-1253: media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1303 [sync] PR-1283: media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1299 [sync] PR-1270: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - !1269 arm64: Add AMPERE1 to the Spectre-BHB affected list - !1264 [sync] PR-1261: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - media: dm1105: Fix use after free bug in dm1105_remove due to race condition - !1187 [sync] PR-1177: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() - media: saa7134: fix use after free bug in saa7134_finidev due to race condition - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code - arm64: Add AMPERE1 to the Spectre-BHB affected list - !1255 [sync] PR-1247: HID: intel_ish-hid: Add check for ishtp_dma_tx_map - !1128 [sync] PR-1077: drm/qxl: Fix missing free_irq - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - config: Disable EFI_FAKE_MEMMAP support for arm64 by default - efi: Fix UAF for arm64 when enable efi_fake_mem - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS" - Revert "LoongArch: Add swiotlb backups buffer" - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() - drm/qxl: Fix missing free_irq- use full version-release instead of devel_release for mkgrub-menu- !1250 hugetlb: Fix some incorrect behavior - hugetlb: fix hugepages_setup when deal with pernode - hugetlb: fix wrong use of nr_online_nodes - !1238 [sync] PR-1181: relayfs: fix out-of-bounds access in relay_file_read - relayfs: fix out-of-bounds access in relay_file_read - !1209 [sync] PR-1185: nbd: validate the block size in nbd_set_size - !1232 [sync] PR-1220: mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block - !1224 [sync] PR-1221: media: rkvdec: fix use after free bug in rkvdec_remove - media: rkvdec: fix use after free bug in rkvdec_remove - !1198 [sync] PR-1190: memcg: fix implicit declaration of memcg_print_bad_task() - nbd: fix incomplete validation of ioctl arg - nbd: validate the block size in nbd_set_size - memcg: fix implicit declaration of memcg_print_bad_task() - memstick: r592: Fix UAF bug in r592_remove due to race condition- !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch - !1167 [sync] PR-1162: fbcon: Check font dimension limits - !1171 mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - !1163 [sync] PR-1098: proc: allow pid_revalidate() during LOOKUP_RCU - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks() - fbcon: Check font dimension limits - proc: allow pid_revalidate() during LOOKUP_RCU - !1145 [sync] PR-1136: gfs2: Don't deref jdesc in evict - gfs2: Don't deref jdesc in evict - !1024 [sync] PR-947: locking/rwsem: Prevent potential lock starvation - !1073 [sync] PR-1042: xfrm: Reinject transport-mode packets through workqueue - xfrm: Reinject transport-mode packets through workqueue - locking/rwsem: Prevent potential lock starvation - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath() - locking/rwsem: Better collate rwsem_read_trylock()- !1103 [sync] PR-1089: power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1108 [sync] PR-1090: fs/ntfs3: Check fields while reading - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write. - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support. - fs/ntfs3: Check fields while reading - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot - !1031 nbd: get config_lock before sock_shutdown - !1060 Support dynamic_hugetlb on arm64 and fix some bug - !1057 [sync] PR-1028: fs: hfsplus: fix UAF issue in hfsplus_put_super - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page() - mm/dynamic_hugetlb: set PagePool to bad page - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken - mm/dynamic_hugetlb: isolate hugepage without dissolve - mm/dynamic_hugetlb: support dynamic hugetlb on arm64 - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64 - !1034 io_uring: fix the problem of - fs: hfsplus: fix UAF issue in hfsplus_put_super - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x - scripts: Fix issue of module signing with openssl 3.x - !994 [sync] PR-990: ubi: Fix deadlock caused by recursively holding work_sem - !999 [sync] PR-928: hikey9xx: Fixed incorrect use of kfree to free sreg - !1010 [sync] PR-924: dm: add disk before alloc dax - !1013 [sync] PR-920: dm thin: Fix ABBA deadlock by resetting dm_bufio_client - kernel: don't call do_exit() for PF_IO_WORKER threads - x86/process: setup io_threads more like normal user space threads - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() - arch: setup PF_IO_WORKER threads like PF_KTHREAD - !950 [sync] PR-929: xfs: rework feature flags - nbd: get config_lock before sock_shutdown - !971 [sync] PR-969: kobject: Fix slab-out-of-bounds in fill_kobj_path() - !986 [sync] PR-954: block: iocost bugfix - !983 [sync] PR-946: icost bugfix - dm thin: Fix ABBA deadlock by resetting dm_bufio_client - dm: add disk before alloc dax - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown - Revert "PCI: Add quirk for LS7A to avoid reboot failure" - hikey9xx: Fixed incorrect use of kfree to free sreg - ubi: Fix deadlock caused by recursively holding work_sem - mtd: ubi: wl: Fix a couple of kernel-doc issues - !975 [sync] PR-968: Fix ORC unwinder on paravirt {save,restore}_fl - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations - block: fix order error in blk_release_queue - block: fix null-pointer dereference in ioc_pd_init - blk-iocost: dispatch all throttled bio in ioc_pd_offline - blk-iocost: don't throttle bio if iocg is offlined - blk-iocost: track whether iocg is still online - blk-iocost: fix UAF in ioc_pd_free - x86/unwind: Fix check_paravirt() calls orc_find() before declaration - x86/unwind: Fix orc entry for paravirt {save,restore}_fl - kobject: Fix slab-out-of-bounds in fill_kobj_path() - xfs: kill xfs_sb_version_has_v3inode() - xfs: introduce xfs_sb_is_v5 helper - xfs: remove unused xfs_sb_version_has wrappers - xfs: convert xfs_sb_version_has checks to use mount features - xfs: convert scrub to use mount-based feature checks - xfs: open code sb verifier feature checks - xfs: convert xfs_fs_geometry to use mount feature checks - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown - xfs: convert remaining mount flags to state flags - xfs: convert mount flags to features - xfs: consolidate mount option features in m_features - xfs: replace xfs_sb_version checks with feature flag checks - xfs: reflect sb features in xfs_mount - xfs: rework attr2 feature and mount options - xfs: rename xfs_has_attr() - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight - xfs: log items should have a xlog pointer, not a mount - xfs: fix incorrect error-out in xfs_remove - LoongArch: defconfig: Enable a large number of configurations - LoongArch: Add swiotlb backups buffer - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers- !904 [sync] PR-903: backport block bugfix - !962 [sync] PR-937: tcp: restrict net.ipv4.tcp_app_win - !959 [sync] PR-925: tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - !955 [sync] PR-938: config: Disable CONFIG_EULER_FS by default - tcp: restrict net.ipv4.tcp_app_win - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - config: Disable CONFIG_EULER_FS by default - !930 xfs: missing lts patchs - !935 [sync] PR-922: jbd2: fix checkpoint inconsistent - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support - jbd2: remove t_checkpoint_io_list - jbd2: recheck chechpointing non-dirty buffer - xfs: validate inode fork size against fork format - xfs: reorder iunlink remove operation in xfs_ifree - !912 [sync] PR-906: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - LoongArch: kdump: Add high memory reservation - LoongArch: fix __ffs not defined compile error - LoongArch: fix ls2k500 bmc not work when installing iso - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m. - ipmi: add ls2k500 bmc ipmi support. - fbdev: add ls2k500sfb driver for ls2k500 bmc. - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation - md/raid10: fix incorrect done of recovery - md/raid10: fix null-ptr-deref in raid10_sync_request - block/badblocks: fix badblocks loss when badblocks combine - block/badblocks: fix the bug of reverse order - md: fix unexpected changes of return value in rdev_set_badblocks - md/raid10: fix io hung in md_wait_for_blocked_rdev() - block: Only set bb->changed when badblocks changes - md/raid10: fix incorrect counting of rdev->nr_pending - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request - md/raid10: fix uaf if replacement replaces rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix io loss while replacement replace rdev - md/raid10: prioritize adding disk to 'removed' mirror - md: fix io loss when remove rdev fail - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev - md/raid10: fix taks hung in raid10d - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() - md/raid10: fix softlockup in raid10_unplug - md/raid1: stop mdx_raid1 thread when raid1 array run failed - md: fix sysfs duplicate file while adding rdev - md: replace invalid function flush_rdev_wq() with flush_workqueue() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - block: don't allow the same type rq_qos add more than once - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost - blk-iocost: don't allow to configure bio based device - !867 arm64: kdump: Avoid reserving low memory repeatedly - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch - arm64: kdump: Avoid reserving low memory repeatedly - LoongArch: LSVZ: Support PV IPI to reduce VM exit - LoongArch: defconfig: Add PCI hotplug support - LoongArch: defconfig: Add memory hotplug support- !862 Backport CVEs and bugfixes - cgroup: Stop task iteration when rebinding subsystem - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init - sched/topology: Fix exceptional memory access in sd_llc_free_all() - block: Fix the partition start may overflow in add_partition() - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum - iomap: don't invalidate folios after writeback errors - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor - iomap: Don't create iomap_page objects for inline files - iomap: Permit pages without an iop to enter writeback - md: fix kabi broken in struct mddev - md: use interruptible apis in idle/frozen_sync_thread - md: wake up 'resync_wait' at last in md_reap_sync_thread() - md: refactor idle/frozen_sync_thread() - md: add a mutex to synchronize idle and frozen in action_store() - md: refactor action_store() for 'idle' and 'frozen' - Revert "md: unlock mddev before reap sync_thread in action_store" - md: unlock mddev before reap sync_thread in action_store - block: fix wrong mode for blkdev_put() from disk_scan_partitions() - block: fix scan partition for exclusively open device again - block: merge disk_scan_partitions and blkdev_reread_part - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources - net: stmmac: fix potential double free of dma descriptor resources - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller - !796 [sync] PR-765: LoongArch: fix some stability issues - !784 [sync] PR-766: LoongArch: add kexec&kdump support - LoongArch: kvm: fix bug of kvm's hugepage - LoongArch: defconfig: enable CONFIG_CACHEFILES - i2c: loongson: fix irq not freed when remove module - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty() - LoongArch: Clear FPU/SIMD thread info flags for kernel thread - LoongArch: Remove generic irq migration - LoongArch: Fix secondary bridge routing errors - LoongArch: Fix kdump failure on v40 interface specification - LoongArch: configs: Enable kexec/kdump - LoongArch: kdump: Add crashkernel=YM handling - LoongArch: kdump: Add single kernel image implementation - LoongArch: Add support for kernel address space layout randomization (KASLR) - LoongArch: Add support for kernel relocation - LoongArch: Add la_abs macro implementation - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible - LoongArch: efistub: Modify the address where efistub jumps to the main kernel - LoongArch: kdump: Add memory reservation for old kernel - LoongArch: Integrate initrd operation - LoongArch: kexec: Add compatibility with old interfaces - LoongArch: Flush TLB earlier at initialization - LoongArch: Add kdump support - LoongArch: Add kexec support - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188- !800 Backport CVEs - netfilter: nf_tables: deactivate anonymous set from preparation phase - xfs: verify buffer contents when we skip log replay- !775 Backport CVEs and bugfixes - filemap: Correct the conditions for marking a folio as accessed - Revert "filemap: Correct the conditions for marking a folio as accessed" - netrom: Fix use-after-free caused by accept on already connected socket - bluetooth: Perform careful capability checks in hci_sock_ioctl() - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack - fs/ntfs3: Validate data run offset - xfs: buffer pins need to hold a buffer reference - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode - fix kabi broken due to import new inode operation get_inode_acl - ovl: enable RCU'd ->get_acl() - vfs: add rcu argument to ->get_acl() callback - bpf: add missing header file include - uaccess: Add speculation barrier to copy_from_user() - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs - scsi/hifc: Fix compile error in allyesconfigs - net/hinic: Fix compile error in allyesconfigs- !723 Backport CVEs and bugfixes - USB: gadgetfs: Fix race between mounting and unmounting - prlimit: do_prlimit needs to have a speculation check - ext4: check iomap type only if ext4_iomap_begin() does not fail - dm ioctl: fix nested locking in table_clear() to remove deadlock concern - net: qcom/emac: Fix use after free bug in emac_remove due to race condition - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() - ext4: only update i_reserved_data_blocks on successful block allocation - can: af_can: fix NULL pointer dereference in can_rcv_filter - RDMA/core: Refactor rdma_bind_addr - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - scsi: dpt_i2o: Remove obsolete driver - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix double bpf_prog_put on error case in map_link - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - bpf, sockmap: Attach map progs to psock early for feature probes - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser() - bpf, sockmap: Fix race in ingress receive verdict with redirect to self- !632 Backport CVEs and bugfixes - bonding: Fix memory leak when changing bond type to Ethernet - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition - timers/nohz: Last resort update jiffies on nohz_full IRQ entry - xfs: don't leak btree cursor when insrec fails after a split - xfs: avoid unnecessary runtime sibling pointer endian conversions - xfs: detect self referencing btree sibling pointers - xfs: introduce xfs_buf_daddr() - xfs: move kernel-specific superblock validation out of libxfs - xfs: bound maximum wait time for inodegc work - xfs: introduce xfs_inodegc_push() - xfs: flush inodegc workqueue tasks before cancel - xfs: drop async cache flushes from CIL commits. - xfs: limit iclog tail updates - xfs: need to see iclog flags in tracing - io_uring: ensure that io_init_req() passes in the right issue_flags - io_uring: add missing lock in io_get_file_fixed- !588 [sync] PR-585: x86/speculation: Allow enabling STIBP with legacy IBRS - !591 Backport CVEs and bugfixes - net/sched: Retire tcindex classifier - drm/vmwgfx: Validate the box size for the snooped cursor - netfilter: nf_tables: nft_parse_register can return a negative value - netfilter: nf_tables: validate registers coming from userspace. - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - KVM: nVMX: add missing consistency checks for CR0 and CR4 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition - xfs: __percpu_counter_compare() inode count debug too expensive - xfs: fix memcpy fortify errors in EFI log format copying - xfs: fix memcpy fortify errors in RUI log format copying - xfs: fix memcpy fortify errors in CUI log format copying - xfs: fix memcpy fortify errors in BUI log format copying - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size - xfs: allow setting full range of panic tags - xfs: don't use BMBT btree split workers for IO completion - xfs: fix extent busy updating - xfs: get root inode correctly at bulkstat - xfs: invalidate xfs_bufs when allocating cow extents - xfs: attach dquots to inode before reading data/cow fork mappings - xfs: invalidate block device page cache during unmount - xfs: add selinux labels to whiteout inodes - xfs: convert buf_cancel_table allocation to kmalloc_array - xfs: don't leak xfs_buf_cancel structures when recovery fails - xfs: refactor buffer cancellation table allocation - xfs: fix type mismatches in the inode reclaim functions - xfs: don't allow log writes if the data device is readonly - x86/speculation: Allow enabling STIBP with legacy IBRS- !574 Backport CVEs and bugfixes - driver core: Fix lockdep warning on wfs_lock - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity() - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size - ubi: ensure that VID header offset + VID header size <= alloc, size - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output - xirc2ps_cs: Fix use after free bug in xirc2ps_detach - ring-buffer: Fix race while reader and writer are on the same page - loop: Add parm check in loop_control_ioctl - ext4: Fix i_disksize exceeding i_size problem in paritally written case - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev' - ext4: Fix reusing stale buffer heads from last failed mounting - btrfs: fix race between quota disable and quota assign ioctls - dm crypt: add cond_resched() to dmcrypt_write() - xfs: don't leak memory when attr fork loading fails - xfs: delete unnecessary NULL checks - xfs: replace inode fork size macros with functions - xfs: replace XFS_IFORK_Q with a proper predicate function - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork - xfs: make inode attribute forks a permanent part of struct xfs_inode - xfs: convert XFS_IFORK_PTR to a static inline helper - xfs: don't reuse busy extents on extent trim - fs/xfs: convert comma to semicolon - xfs: xfs_ail_push_all_sync() stalls when racing with updates - xfs: check buffer pin state after locking in delwri_submit - xfs: log worker needs to start before intent/unlink recovery- !550 anolis: bond: broadcast ARP or ND messages to all slaves - !561 Backport CVEs and bugfixes - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver - net: sched: Use struct_size() helper in kvmalloc() - net_sched: Use struct_size() and flex_array_size() helpers - ext4: dio take shared inode lock when overwriting preallocated blocks - ext4: fix race between writepages and remount - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nvme: use nvme_cid to generate command_id in trace event - xfs: don't report reserved bnobt space as available - xfs: don't include bnobt blocks when reserving free block pool - xfs: set aside allocation btree blocks from block reservation - xfs: introduce in-core global counter of allocbt blocks - act_mirred: use the backlog for nested calls to mirred ingress - net/sched: act_mirred: better wording on protection against excessive stack growth - net/sched: act_mirred: refactor the handle of xmit - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate() - anolis: bond: broadcast ARP or ND messages to all slaves - !558 net: hns3: modify reset delay time to avoid configuration timeout - drm/loongson: fix compile warnning - net: hns3: modify reset delay time to avoid configuration timeout- !541 fix CVE-2023-0266 - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF- !529 Backport CVEs and bugfixes - block: fix use-after-free of q->q_usage_counter - block: move q_usage_counter release into blk_queue_release - Revert "block: fix null-deref in percpu_ref_put" - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk - xfs, iomap: limit individual ioend chain lengths in writeback - net/sched: tcindex: search key must be 16 bits - net/sched: tcindex: update imperfect hash filters respecting rcu - tty: fix out-of-bounds access in tty_driver_lookup_tty() - fs/ntfs3: Validate resident attribute name - ima: Fix memory leakage in ima_store_template - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound" - coredump: fix kabi broken in struct coredump_params - coredump: Use the vma snapshot in fill_files_note - coredump/elf: Pass coredump_params into fill_note_info - coredump: Remove the WARN_ON in dump_vma_snapshot - coredump: Snapshot the vmas in do_coredump - mm/swapfile: add cond_resched() in get_swap_pages() - mm: slince possible data races about pgdat->kswapd - mm: fix null-ptr-deref in kswapd_is_running() - fs/ntfs3: Validate MFT flags before replaying logs - fs/ntfs3: Validate attribute name offset - bpf: Fixes possible race in update_prog_stats() for 32bit arches - bpf: Avoid races in __bpf_prog_run() for 32bit arches - ext4: make sure fs error flag setted before clear journal error - ext4: commit super block if fs record error when journal record without error - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() - arm64: errata: Remove AES hwcap for COMPAT tasks - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated) - kernel: Initialize cpumask before parsing - softirq: Don't try waking ksoftirqd before it has been spawned - bpf: Prevent decl_tag from being referenced in func_proto arg - bpf: Skip task with pid=1 in send_signal_common() - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() - !460 Backport CVEs and bugfixes - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work - irqchip/loongson: Fix syscore ops registration - irqchip/loongarch: Fix some issues of irq controllers - drm/loongson: using hdmi hot plug status register - malidp: Fix NULL vs IS_ERR() checking- !512 Backport CVEs and bugfixes - livepatch/core: Fix hungtask against cpu hotplug on x86 - livepatch: Narrow the scope of the 'text_mutex' lock - livepatch: Cleanup klp_mem_prepare() - seccomp: Move copy_seccomp() to no failure path. - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - ftrace: Fix invalid address access in lookup_rec() when index is 0 - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs - mm: optimize do_wp_page() for exclusive pages in the swapcache - tipc: add an extra conn_get in tipc_conn_alloc - tipc: set con sock in tipc_conn_alloc - ext4: fix another off-by-one fsmap error on 1k block filesystems - mm/vmalloc: huge vmalloc backing pages should be split rather than compound - HID: asus: use spinlock to safely schedule workers - HID: asus: use spinlock to protect concurrent accesses - HID: asus: Remove check for same LED brightness on set - jbd2: fix data missing when reusing bh which is ready to be checkpointed - !502 [sync] PR-476: LoongArch: fix failed to boot - !498 [sync] PR-479: LoongArch: update network related default config - !496 [sync] PR-448: LoongArch: fix some pci problems - LoongArch: Initialize screen_info variable - LoongArch: Fixed EIOINTC structure members - LoongArch: Fix virtual machine startup error - loongarch/kvm: ls7a add iocsrw emulation - LoongArch: fix signal handler name changed - LoongArch: defconfig: update network configurations - LoongArch: pci root bridige set acpi companion only when not acpi_disabled. - pci: fix X server auto probe fail when both ast and etnaviv drm present - LS7A2000: PCIE: Fixup GPU card error - pci/quirks: ls7a2000: fix pm transition of devices under pcie port - LoongArch: Fixed some pcie card not scanning properly - pci: fix kabi error caused by pm_suspend_target_state - PCI: PM: Fix pcie mrrs restoring - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space - PCI: Check if entry->offset already exist for mem resource- !485 Backport CVEs and bugfixes - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit - fix compile error introduced by LoongArch commit - scsi: cancel the inflight async device probe when remove scsi_target - scsi: fix use-after-free problem in scsi_remove_target - ring-buffer: Fix race between reset page and reading page - raid1, raid10: switch to precise io accounting - block: add precise io accouting apis - md/raid10: fix memleak for 'conf->bio_split' - sctp: fail if no bound addresses can be used for a given scope - ext4: fix WARNING in mb_find_extent - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress - scsi: iscsi: Move pool freeing - xfs: aborting inodes on shutdown may need buffer lock - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM - !474 [sync] PR-447: add perf loongarch support - tools/perf: Add basic support for LoongArch - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - !467 LoongArch: add kvm support - LoongArch: kvm: KVM support for 5.10 - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig - LoongArch: fix compile error when using make allmodconfig - LoongArch: Export symbol for function smp_send_reschedule() - LoongArch: kvm: add initial kvm support - !453 Backport CVEs and bugfixes - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix - LoongArch: remove __ARCH_WANT_NEW_STAT - LoongArch: modify defconfig according to other architectures - LoongArch: Change definition of cpu_relax() for Loongson-3 - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000 - LoongArch: Use alternative to optimize libraries - LoongArch: Add alternative runtime patching mechanism - LoongArch: Remove the .fixup section usage - LoongArch: extable: Add a dedicated uaccess handler - LoongArch: extable: Add `type` and `data` fields - LoongArch: Switch to relative exception tables - LoongArch: Consolidate __ex_table construction - LoongArch: fix SECCOMP test error - LoongArch: fix vmlinux ld error - LoongArch: enable hugetlbfs support - LoongArch: save one instruction for arch_local_irq_{enable,disable} - LoongArch: optimize for syscall return - LoongArch: refresh usage of sync - LoongArch: use 40 bits address space for user - LoongArch: Support loader and kernel interface V40 - LoongArch: Enhance booting and resume compatibility - LoongArch: Remove redudant csr save/restore - LoongArch: Support Power Manager - irqchip/loongson-liointc: Set different isr for differnt core - platform: Support loongson laptop generic driver - LoongArch: Adapted SECTION_SIZE_BITS with page size - ACPI: Support ACPI_MACHINE_WIDTH for 64 - spi: loongson: Add LS7A spi driver support - i2c: loongson: Add LS7A i2c driver support - LoongArch: Call irq_find_matching_fwnode get irq domain - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC - LoongArch: convert p v s cache to l1 l2 l3 format - cpufreq: Add cpufreq driver for LoongArch - LoongArch: Fix section mismatch due to acpi_os_ioremap() - LoongArch: Add vector extensions support - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function - openeuler: pci: workaround multiple functions can be assigned to only one VM- !454 Backport CVEs and bugfixes - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() - neigh: make sure used and confirmed times are valid - HID: check empty report_list in bigben_probe() - HID: check empty report_list in hid_validate_values() - Documentation/hw-vuln: Fix rST warning - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - x86/speculation: Identify processors vulnerable to SMT RSB predictions - radi10: fix leak of 'r10bio->remaining' for recovery - md: fix soft lockup in status_resync - md: don't update recovery_cp when curr_resync is ACTIVE - md: Ensure resync is reported after it starts - md: Use enum for overloaded magic numbers used by mddev->curr_resync - raid10: fix leak of io accounting - tcp: Fix listen() regression in 5.15.88. - net/ulp: Remove redundant ->clone() test in inet_clone_ulp(). - net/ulp: use consistent error code when blocking ULP - net/ulp: prevent ULP without clone op from entering the LISTEN status - net/tls: tls_is_tx_ready() checked list_entry - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core - ntfs: fix out-of-bounds read in ntfs_attr_find() - splice: don't generate zero-len segement bvecs - rds: rds_rm_zerocopy_callback() use list_first_entry() - tap: tap_open(): correctly initialize socket uid - tun: tun_chr_open(): correctly initialize socket uid - net: add sock_init_data_uid() - ring-buffer: Handle race between rb_move_tail and rb_check_pages - blk-mq: use quiesced elevator switch when reinitializing queues - ovl: fix use inode directly in rcu-walk mode- !419 Backport CVEs and bugfixes - net: mpls: fix stale pointer if allocation fails during device rename - x86/bugs: Flush IBP in ib_prctl_set() - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - binder: fix pointer cast warning - binder: defer copies of pre-patched txn data - binder: read pre-translated fds from sender buffer - binder: avoid potential data leakage when copying txn - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed - net/sched: sch_taprio: do not schedule in taprio_reset() - net/sched: sch_taprio: fix possible use-after-free - nbd: fix assignment error for first_minor in nbd_dev_add - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow in safe_delay_store - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter - fix kabi broken due to import of 5.15-stable io_uring - io_uring: import 5.15-stable io_uring - task_work: add helper for more targeted task_work canceling - coredump: Limit what can interrupt coredumps - kernel: provide create_io_thread() helper - fs: provide locked helper variant of close_fd_get_file() - kernel: remove checking for TIF_NOTIFY_SIGNAL - entry: Add support for TIF_NOTIFY_SIGNAL - signal: Add task_sigpending() helper - arm: add support for TIF_NOTIFY_SIGNAL - arm64: add support for TIF_NOTIFY_SIGNAL - riscv: add support for TIF_NOTIFY_SIGNAL - powerpc: add support for TIF_NOTIFY_SIGNAL - x86: Wire up TIF_NOTIFY_SIGNAL - iov_iter: add helper to save iov_iter state - perf beauty: Update copy of linux/socket.h with the kernel sources - perf trace beauty: Update copy of linux/socket.h with the kernel sources - io_uring: correct pinned_vm accounting - file: Rename __close_fd_get_file close_fd_get_file - io_uring: don't hold uring_lock when calling io_run_task_work* - io_uring: don't take uring_lock during iowq cancel - fs: make do_renameat2() take struct filename - net: add accept helper not installing fd - net: provide __sys_shutdown_sock() that takes a socket - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED - Make sure nd->path.mnt and nd->path.dentry are always valid pointers - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* - fs: add support for LOOKUP_CACHED - Revert "io_uring: fix soft lockup when call __io_remove_buffers" - Revert "io_uring: deduplicate failing task_work_add" - Revert "io_uring: don't take uring_lock during iowq cancel" - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow" - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request" - Revert "[Huawei] io_uring:drop identity before creating a private one"- !410 Backport CVEs and bugfixes - x86/kasan: Populate shadow for shared chunk of the CPU entry area - x86/kasan: Add helpers to align shadow addresses up and down - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Randomize per-cpu entry area - Huawei BMA: Fix iBMA driver bug - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - ppp: associate skb with a device at tx - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together - bpf, sockmap: fix race in sock_map_free() - bpf: make sure skb->len != 0 when redirecting to a tunneling device - cifs: Fix use-after-free in rdata->read_into_pages() - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - media: vivid: fix compose size exceed boundary - !405 kvm: arm64: fix some pvsched bugs - kvm: arm64: fix some pvsched bugs- !400 Backport fs and block bugfixes - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap - ubifs: Re-statistic cleaned znode count if commit failed - ubifs: dirty_cow_znode: Fix memleak in error handling path - block, bfq: switch 'bfqg->ref' to use atomic refcount apis - cifs: sanitize multiple delimiters in prepath - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop - crypto: hisilicon/qm - modify event irq processing - crypto: hisilicon/qm - move alloc qm->wq to qm.c - crypto: hisilicon/qm - add functions for releasing resources- !386 Backport CVEs and bugfixes - net: sched: fix race condition in qdisc_graft() - macvlan: enforce a consistent minimal mtu - net: switch to storing KCOV handle directly in sk_buff - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock - mm: memcontrol: fix potential oom_lock recursion deadlock - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: fix null-ptr-deref in ext4_write_info - xfs: fix potential log item leak- !369 Backport CVEs and bugfixes - mm/vmpressure: fix data-race with memcg->socket_pressure - of/fdt: Don't calculate initrd size from DT if start > end - lib/cmdline: avoid page fault in next_arg - mm/memory: return vm_fault_t result from migrate_to_ram() callback - net: sched: disallow noqueue for qdisc classes - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - xfs: Fix deadlock on xfs_inodegc_worker - net: sched: cbq: dont intepret cls results when asked to drop - net: sched: atm: dont intepret cls results when asked to drop - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process - rndis_wlan: Prevent buffer overflow in rndis_query_oid- !357 Backport CVEs, bugfixes, performance and other - binder: fix UAF of alloc->vma in race with munmap() - io_uring: add missing item types for splice request - xfs: fix overfilling of reserve pool - xfs: always succeed at setting the reserve pool size - xfs: remove infinite loop when reserving free block pool - xfs: use current->journal_info for detecting transaction recursion - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - fix kabi broken due to may_pollfree - io_uring: disable polling pollfree files - sched: disable sched_autogroup by default - driver: char: delete svm.c - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob - fs/ntfs3: Fix attr_punch_hole() null pointer derenference - tracing/osnoise: Do not unregister events twice - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails - mm/filemap.c: remove bogus VM_BUG_ON - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - fork: Allocate a new task_struct_resvd object for fork task - tmpfs: fix regressions from wider use of ZERO_PAGE - tmpfs: do not allocate pages on read- !348 Backport CVEs and fs bugfixes - io_uring: kill goto error handling in io_sqpoll_wait_sq() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - ext4: fix bad checksum after online resize - xfs: fix use-after-free in xattr node block inactivation - USB: core: Fix RST error in hub.c - USB: core: Prevent nested device-reset calls- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS - bfq: fix null-ptr-deref in bfq_pd_offline - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - ksmbd: fix heap-based overflow in set_ntacl_dacl() - ksmbd: prevent out of bound read for SMB2_WRITE - ksmbd: validate length in smb2_write() - xfs: fix super block buf log item UAF during force shutdown - xfs: wait iclog complete before tearing down AIL - xfs: get rid of assert from xfs_btree_islastblock- ext2: replace bh_submit_read() helper with bh_read() - ufs: replace ll_rw_block() - udf: replace ll_rw_block() - reiserfs: replace ll_rw_block() - ocfs2: replace ll_rw_block() - ntfs3: replace ll_rw_block() - jbd2: replace ll_rw_block() - isofs: replace ll_rw_block() - gfs2: replace ll_rw_block() - fs/buffer: replace ll_rw_block() - fs/buffer: add some new buffer read helpers - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type() - blk-mq: set default elevator as deadline in case of hctx shared tagset - dm thin: Use last transaction's pmd->root when commit failed - media: mceusb: Use new usb_control_msg_*() routines - block, bfq: fix possible uaf for 'bfqq->bic' - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - scsi: iscsi: remove .unbind_conn from iscsi_transport - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport" - blk-mq: fix kabi broken in struct bio - blk-mq: fix kabi broken in struct request - mm/dynamic_hugetlb: fix clear PagePool without lock protection - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page() - x86/cpu/hygon: Set __max_die_per_package on Hygon - block: always align request_wrapper to cacheline - block: fix crash on cmpxchg for request_wrapper - clk: imx: Add check for kcalloc - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix build errors in some archs- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute - xen/netback: don't call kfree_skb() with interrupts disabled - media: dvb-core: Fix UAF due to refcount races at releasing - wifi: wilc1000: validate pairwise and authentication suite offsets - wifi: wilc1000: validate number of channels - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute - drm/amdkfd: Check for null pointer after calling kmemdup- proc: proc_skip_spaces() shouldn't think it is working on C strings - proc: avoid integer type confusion in get_proc_long - xen/netback: fix build warning - xen/netback: Ensure protocol headers don't fall in the non-linear area - livepatch/ppc64: Fix preemption check when enabling - block: only use cmpxchg64 in 64bit platform - efi/libstub: Fix build error in efi-stub.c for riscv- block: fix regression for dm - dm: switch to rq-based after queue is initialized - net/af_packet: make sure to pull mac header - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO - sched: Fix null-ptr-deref in free_fair_sched_group - arm64: fix a concurrency issue in emulation_proc_handler() - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata - Revert "ipvlan: Modify the value of ipvlan modes" - workqueue: fix state-dump console deadlock - preempt/dynamic: Fix typo in macro conditional statement - jump_label: Fix usage in module __init - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw() - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak - arm64/mpam: make mbw_max/min not less than min_bw - arm64/mpam: Fix indent format error in resctrl_parse_param() - arm64/mpam: decrease dom_num when domain goes offline - arm64/mpam: correct mbw_max/min if remainder is too large - Revert "add barriers to buffer_uptodate and set_buffer_uptodate" - pinctrl: core: Set ret to 0 when group is skipped - pinctrl: core: Handling pinmux and pinconf separately - ACPI: APD: Check for NULL pointer after calling devm_ioremap() - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer" - mm/dynamic_hugetlb: fix compound_nr incorrect - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - scsi: ufs: core: Enable link lost interrupt - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU - perf python: Fix build when PYTHON_CONFIG is user supplied - Documentation/ABI: Mention retbleed vulnerability info file for sysfs - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 - md: call __md_stop_writes in md_stop - Revert "md-raid: destroy the bitmap after destroying the thread" - mm/hugetlb: fix hugetlb not supporting softdirty tracking - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() - ACPI: processor: Remove freq Qos request for all CPUs - s390: fix double free of GS and RI CBs on fork() failure - asm-generic: sections: refactor memory_intersects - loop: Check for overflow while configuring loop - x86/bugs: Add "unknown" reporting for MMIO Stale Data - perf/x86/lbr: Enable the branch type for the Arch LBR by default - btrfs: check if root is readonly while setting security xattr - btrfs: add info when mount fails due to stale replace target - btrfs: replace: drop assert for suspended replace - btrfs: fix silent failure when deleting root reference - ionic: fix up issues with handling EAGAIN on FW cmds - rxrpc: Fix locking in rxrpc's sendmsg - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - net: Fix a data-race around sysctl_somaxconn. - net: Fix data-races around sysctl_devconf_inherit_init_net. - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix data-races around sysctl_optmem_max. - bpf: Folding omem_charge() into sk_storage_charge() - ratelimit: Fix data-races in ___ratelimit(). - net: Fix data-races around netdev_tstamp_prequeue. - net: Fix data-races around netdev_max_backlog. - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - net: Fix data-races around sysctl_[rw]mem_(max|default). - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: tweak len/truesize ratio for coalesce candidates - netfilter: nf_tables: disallow jump to implicit chain from set element - netfilter: nf_tables: upfront validation of data via nft_data_init() - netfilter: bitwise: improve error goto labels - netfilter: nft_cmp: optimize comparison for 16-bytes - netfilter: nf_tables: consolidate rule verdict trace call - netfilter: nftables: remove redundant assignment of variable err - netfilter: nft_tunnel: restrict it to netdev family - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families - netfilter: nf_tables: do not leave chain stats enabled on error - netfilter: nft_payload: do not truncate csum_offset and csum_type - netfilter: nft_payload: report ERANGE for too long offset and length - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips - netfilter: ebtables: reject blobs that don't provide all entry points - net: ipvtap - add __init/__exit annotations to module init/exit funcs - bonding: 802.3ad: fix no transmission of LACPDUs - net: moxa: get rid of asymmetry in DMA mapping/unmapping - net: ipa: don't assume SMEM is page-aligned - net/mlx5e: Properly disable vlan strip on non-UL reps - ice: xsk: prohibit usage of non-balanced queue id - ice: xsk: Force rings to be sized to power of 2 - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout - rose: check NULL rose_loopback_neigh->loopback - mm/smaps: don't access young/dirty bit if pte unpresent - mm/huge_memory.c: use helper function migration_entry_to_page() - SUNRPC: RPC level errors should set task->tk_rpc_status - NFSv4.2 fix problems with __nfs42_ssc_open - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() - xfrm: clone missing x->lastused in xfrm_do_migrate - xfrm: fix refcount leak in __xfrm_policy_check() - kernel/sched: Remove dl_boosted flag comment - vfs: make sync_filesystem return errors from ->sync_fs - fs: remove __sync_filesystem - pinctrl: amd: Don't save/restore interrupt status and wake status bits - kernel/sys_ni: add compat entry for fadvise64_64 - parisc: Fix exception handler for fldw and fstw instructions - audit: fix potential double free on error path from fsnotify_add_inode_mark - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc- blk-mq: don't access request_wrapper if request is not allocated from block layer - blk-mq: fix kabi broken due to request_wrapper - ide-cd: don't clear rq_flags after blk_get_request - iommu: Fix error handling in probe_acpi_namespace_devices()- staging: rtl8712: fix use after free bugs - drivers/perf: fixed the issue that the kabi value changed - drm/i915: fix TLB invalidation for Gen12 video and compute engines - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock - l2tp: Serialize access to sk_user_data with sk_callback_lock - Bluetooth: L2CAP: Fix u8 overflow - dm: Fix UAF in run_timer_softirq() - dm-thin: Resume failed in FAIL mode - mm: hugetlb: fix UAF in hugetlb_handle_userfault - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC - ARM: 9059/1: cache-v7: get rid of mini-stack - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6 - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir - mpi: Fix length check in mpi_key_length() - dm btree spine: show warning if node_check failed in node_prep_for_write() - dm btree spine: remove paranoid node_check call in node_prep_for_write() - signal: fix deadlock caused by calling printk() under sighand->siglock - mm: fix missing handler for __GFP_NOWARN - Fix kabi change caused by reverting patches - Revert "iommu: Introduce attach/detach_pasid_table API" - Revert "iommu: Introduce bind/unbind_guest_msi" - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist" - Revert "iommu/smmuv3: Get prepared for nested stage support" - Revert "iommu/smmuv3: Implement attach/detach_pasid_table" - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs" - Revert "iommu/smmuv3: Implement cache_invalidate" - Revert "dma-iommu: Implement NESTED_MSI cookie" - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement" - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions" - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi" - Revert "iommu/smmuv3: report additional recoverable faults" - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE" - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE" - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING" - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type" - Revert "vfio/pci: Register an iommu fault handler" - Revert "vfio/pci: Allow to mmap the fault queue" - Revert "vfio: Use capability chains to handle device specific irq" - Revert "vfio/pci: Add framework for custom interrupt indices" - Revert "vfio: Add new IRQ for DMA fault reporting" - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling" - Revert "vfio: Document nested stage control" - Revert "vfio/pci: Register a DMA fault response region" - Revert "vfio/pci: Inject page response upon response region fill" - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD" - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible" - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()" - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()" - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL" - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL" - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'" - Revert "iommu: fix build error when CONFIG_IOMMU_API is off" - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING" - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log" - perf/core: Fix reentry problem in perf_output_read_group() - tty: serial: uartlite: Disable clocks in case of errors - cgroup: Fix race condition at rebind_subsystems() - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() - xfs: fix memory leak in xfs_errortag_init - xfs: fix sb write verify for lazysbcount - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() - xfs: prevent a UAF when log IO errors race with unmount - xfs: purge dquots after inode walk fails during quotacheck - xfs: revert "xfs: actually bump warning counts when we send warnings" - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks - xfs: async CIL flushes need pending pushes to be made stable - xfs: don't generate selinux audit messages for capability testing - xfs: only bother with sync_filesystem during readonly remount - xfs: remove xfs_inew_wait - xfs: mark a data structure sick if there are cross-referencing errors - xfs: restore speculative_cow_prealloc_lifetime sysctl - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd - xfs: factor out a xfs_ilock_iocb helper - xfs: fix parent pointer scrubber bailing out on unallocated inodes - xfs: fix uaf when leaf dir bestcount not match with dir data blocks - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent - xfs: Check for extent overflow when swapping extents - xfs: Check for extent overflow when remapping an extent - xfs: Check for extent overflow when moving extent from cow to data fork - xfs: Check for extent overflow when writing to unwritten extent - xfs: Check for extent overflow when adding/removing xattrs - xfs: Check for extent overflow when renaming dir entries - xfs: Check for extent overflow when removing dir entries - xfs: Check for extent overflow when adding dir entries - xfs: Check for extent overflow when punching a hole - xfs: Check for extent overflow when trivally adding a new extent - xfs: Add helper for checking per-inode extent count overflow - xfs: flush inode gc workqueue before clearing agi bucket - xfs: check sb_meta_uuid for dabuf buffer recovery - xfs: Fix the free logic of state in xfs_attr_node_hasname - xfs: reduce kvmalloc overhead for CIL shadow buffers - xfs: only run COW extent recovery when there are no live extents - xfs: remove all COW fork extents when remounting readonly - xfs: don't catch dax+reflink inodes as corruption in verifier - xfs: fix soft lockup via spinning in filestream ag selection loop - xfs: return errors in xfs_fs_sync_fs - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - PCI: Do not enable AtomicOps on VFs - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default - scsi: hisi_sas: Prevent parallel FLR and controller reset - scsi: hisi_sas: Prevent parallel controller reset and control phy command - xfs: fix incorrect i_nlink caused by inode racing - block: Fix kabi broken in blk-merge.h and blk-cgroup.h - block: don't merge across cgroup boundaries if blkcg is enabled - ima: Handle -ESTALE returned by ima_filter_rule_match() - ima: Simplify ima_lsm_copy_rule - selftests: bpf: Don't run sk_lookup in verifier tests - bpf: Add PROG_TEST_RUN support for sk_lookup programs - bpf: Consolidate shared test timing code - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs - dm ioctl: print error when HC and MD do not match - block: fix use after free for bd_holder_dir - Revert "block: Fix UAF in bd_link_disk_holder()" - block: Fix UAF in bd_link_disk_holder() - ftrace: Fix use-after-free for dynamic ftrace_ops - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" - bfq: Make sure bfqg for which we are queueing requests is online - bfq: Get rid of __bio_blkcg() usage - bfq: Track whether bfq_group is still online - Revert "block, bfq: move bfqq to root_group if parent group is offlined" - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - blk-wbt: call rq_qos_add() after wb_normal is initialized - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init - blk-mq: fix missing blk_account_io_done() in error path - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET - stack: Replace "o" output with "r" input constraint - lkdtm: Add REPORT_STACK for checking stack offsets - arm64: entry: Enable random_kstack_offset support - x86/entry: Enable random_kstack_offset support - stack: Optionally randomize kernel stack offset each syscall - jump_label: Provide CONFIG-driven build state defaults - ext4: fix super block checksum incorrect after mount - Revert "block/wbt: fix negative inflight counter when remove scsi device" - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c - !287 defconfig: add helper script for update openeuler_defconfig - configs: update arch/x86/configs/openeuler_defconfig - configs: update arch/arm64/configs/openeuler_defconfig - kconfig: Add script to update openeuler_defconfig - !264 Add LoongArch support - !297 tc-testing: fix a bug in gitignore of tc-testing - openeuler: net: txgbe: fix arm 32bit arch compile warning. - tc-testing: gitignore, delete plugins directory - !277 net: ngbe: fix ngbe checkpatch warnnings - LoongArch: defconfig: Set CONFIG_TXGBE=m by default - LS7A2000 : Add quirk for OHCI device rev 0x02 - stmmac: pci: Add dwmac support for Loongson - LoongArch: hugepage table replace tlb - LoongArch: change global registers to local registers - LoongArch: Old BPI compatibility - LoongArch: add kernel setvirtmap for runtime - LoongArch: enable some netfilter related configs - LoongArch: defconfig: use make defconfig to save a clean defconfig - tools perf: Fix compilation error with new binutils - tools include: add dis-asm-compat.h to handle version differences - tools build: Don't display disassembler-four-args feature test - tools build: Add feature test for init_disassemble_info API changes - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules - LoongArch: Support PC-relative relocations in modules - LoongArch: Define ELF relocation types added in v2.00 ABI - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS - irqchip/loongson-liointc: Fix an error handling path in liointc_init() - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse - irqchip/loongson-eiointc: Fix a build warning - irqchip/loongson-eiointc: Fix irq affinity setting - irqchip: Adjust Kconfig for Loongson - PCI: Add quirk for LS7A to avoid reboot failure - PCI: loongson: Improve the MRRS quirk for LS7A - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers - PCI: loongson: Don't access non-existent devices - PCI: loongson: Add ACPI init support - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback - APCI: irq: Add support for multiple GSI domains - drm/radeon: Workaround radeon driver bug for Loongson - LoongArch: Add writecombine support for drm - Input: i8042 - Add PNP checking hook for Loongson - LoongArch: Add qspinlock support - LoongArch: Add perf events support - LoongArch: Add SysRq-x (TLB Dump) support - LoongArch: Use TLB for ioremap() - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP - LoongArch: Add sparse memory vmemmap support - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init() - irqchip/loongson-pch-lpc: Add suspend/resume support - irqchip/loongson-pch-pic: Add suspend/resume support - irqchip/loongson-eiointc: Add suspend/resume support - irqchip/loongson-htvec: Add suspend/resume support - irqchip/loongson-htvec: Add ACPI init support - ACPI / table: Print CORE_PIC information when MADT is parsed - ACPICA: Events: Support fixed pcie wake event - ACPICA: MADT: Add LoongArch APICs support - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA - Revert "LoongArch: Provisionally add ACPICA data structures" - loongarch: efi: enable generic EFI compressed boot - efi/libstub: implement generic EFI zboot - efi/libstub: use EFI provided memcpy/memset routines - efi/libstub: add some missing EFI prototypes - efi/loongarch: Add efistub booting support - irqchip: Select downstream irqchip drivers for LoongArch CPU - LoongArch: Add subword xchg/cmpxchg emulation - LoongArch: Cleanup headers to avoid circular dependency - LoongArch: Cleanup reset routines with new API - LoongArch: Fix build warnings in VDSO - LoongArch: Select PCI_QUIRKS to avoid build error - LoongArch: Update Loongson-3 default config file - LoongArch: Add USER_STACKTRACE support - LoongArch: Add STACKTRACE support - LoongArch: Add prologue unwinder support - LoongArch: Add guess unwinder support - LoongArch: Add vDSO syscall __vdso_getcpu() - LoongArch: Add PCI controller support - LoongArch: Parse MADT to get multi-processor information - LoongArch: Jump to the link address before enable PG - LoongArch: Requires __force attributes for any casts - LoongArch: Fix unsigned comparison with less than zero - LoongArch: Adjust arch/loongarch/Kconfig - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI - LoongArch: Fix wrong "ROM Size" of boardinfo - LoongArch: Fix missing fcsr in ptrace's fpr_set - LoongArch: Fix shared cache size calculation - LoongArch: Disable executable stack by default - LoongArch: Remove unused variables - LoongArch: Remove clock setting during cpu hotplug stage - LoongArch: Remove useless header compiler.h - LoongArch: Remove several syntactic sugar macros for branches - LoongArch: Re-tab the assembly files - LoongArch: Simplify "BGT foo, zero" with BGTZ - LoongArch: Simplify "BLT foo, zero" with BLTZ - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ - LoongArch: Use the "move" pseudo-instruction where applicable - LoongArch: Use the "jr" pseudo-instruction where applicable - LoongArch: Use ABI names of registers where appropriate - irqchip: Add LoongArch CPU interrupt controller support - LoongArch: fix kabi change due to enum chuph_state - irqchip: Add Loongson Extended I/O interrupt controller support - irqchip/loongson-liointc: Add ACPI init support - irqchip/loongson-pch-msi: Add ACPI init support - irqchip/loongson-pch-pic: Add ACPI init support - irqchip: Add Loongson PCH LPC controller support - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain - LoongArch: Use ACPI_GENERIC_GSI for gsi handling - LoongArch: Provisionally add ACPICA data structures - loongarch: drop definition of PGD_ORDER - loongarch: drop definition of PUD_ORDER - loongarch: drop definition of PMD_ORDER - loongarch: drop definition of PTE_ORDER - LoongArch: Fix section mismatch warning - LoongArch: Fix build errors for tinyconfig - LoongArch: Remove obsolete mentions of vcsr - LoongArch: Drop these obsolete selects in Kconfig - efi: Simplify arch_efi_call_virt() macro - LoongArch: Make compute_return_era() return void - LoongArch: Fix wrong fpu version - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler() - LoongArch: Fix sleeping in atomic context in setup_tlb_handler() - LoongArch: Fix the _stext symbol address - LoongArch: Fix the !THP build - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS - LoongArch: Remove MIPS comment about cycle counter - LoongArch: Fix the !CONFIG_SMP build - LoongArch: Add Loongson-3 default config file - LoongArch: Add Non-Uniform Memory Access (NUMA) support - LoongArch: Add multi-processor (SMP) support - LoongArch: Add VDSO and VSYSCALL support - LoongArch: Add some library functions - LoongArch: Add misc common routines - LoongArch: Add ELF and module support - LoongArch: Add signal handling support - LoongArch: Add system call support - LoongArch: Add memory management - LoongArch: Add process management - LoongArch: Add exception/interrupt handling - LoongArch: Add boot and setup routines - LoongArch: Add other common headers - LoongArch: Add atomic/locking headers - LoongArch: Add CPU definition headers - LoongArch: Add ELF-related definitions - LoongArch: Add build infrastructure - fbdev: Prevent probing generic drivers if a FB is already registered - serial: 8250_pnp: Support configurable clock frequency - genirq/generic_chip: Export irq_unmap_generic_chip - mm/swapops: make is_pmd_migration_entry more strict - initramfs: Provide a common initrd reserve function - initrd: Add the preprocessor guard in initrd.h - PCI/ERR: Retain status from error notification - tee: fix memory leak in tee_shm_register() - qrtr: Convert qrtr_ports from IDR to XArray - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() - tracing/probes: Have kprobes and uprobes use $COMM too - netfilter: nf_tables: fix audit memory leak in nf_tables_commit - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - powerpc/64: Init jump labels before parse_early_param() - smb3: check xattr value length earlier - f2fs: fix to do sanity check on segment type in build_sit_entries() - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() - ALSA: control: Use deferred fasync helper - ALSA: timer: Use deferred fasync helper - ALSA: core: Add async signal helpers - powerpc/32: Don't always pass -mcpu=powerpc to the compiler - watchdog: export lockup_detector_reconfigure - RISC-V: Add fast call path of crash_kexec() - riscv: mmap with PROT_WRITE but no PROT_READ is invalid - modules: Ensure natural alignment for .altinstructions and __bug_table sections - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - vfio: Clear the caps->buf to NULL after free - tty: serial: Fix refcount leak bug in ucc_uart.c - lib/list_debug.c: Detect uninitialized lists - ext4: avoid resizing to a partial cluster size - ext4: avoid remove directory when directory is corrupted - drivers:md:fix a potential use-after-free bug - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown - md: Notify sysfs sync_completed in md_reap_sync_thread() - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed - selftests/kprobe: Do not test for GRP/ without event failures - csky/kprobe: reclaim insn_slot on kprobe unregistration - RDMA/rxe: Limit the number of calls to each tasklet - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups - PCI/ACPI: Guard ARM64-specific mcfg_quirks - cxl: Fix a memory leak in an error handling path - pinctrl: intel: Check against matching data instead of ACPI companion - gadgetfs: ep_io - wait until IRQ finishes - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description - zram: do not lookup algorithm in backends table - uacce: Handle parent device removal or parent driver module rmmod - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - vboxguest: Do not use devm for irq - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch - usb: renesas: Fix refcount leak bug - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: ti: Stop using legacy clkctrl names for omap4 and 5 - drm/meson: Fix overflow implicit truncation warnings - irqchip/tegra: Fix overflow implicit truncation warnings - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info - usb: cdns3 fix use-after-free at workaround 2 - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported - PCI: Add ACS quirk for Broadcom BCM5750x NICs - drm/sun4i: dsi: Prevent underflow when computing packet sizes - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - audit: log nftables configuration change events once per table - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - ASoC: SOF: intel: move sof_intel_dsp_desc() forward - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file - kbuild: fix the modules order between drivers and libs - igb: Add lock to avoid data race - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - i40e: Fix to stop tx_timeout recovery if GLOBR fails - regulator: pca9450: Remove restrictions for regulator-name - i2c: imx: Make sure to unregister adapter on remove() - ice: Ignore EEXIST when setting promisc mode - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() - net: genl: fix error path memory leak in policy dumping - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry - net: moxa: pass pdev instead of ndev to DMA functions - net: dsa: mv88e6060: prevent crash on an unused port - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages - powerpc/pci: Fix get_phb_number() locking - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag - netfilter: nf_tables: really skip inactive sets when allocating name - ASoC: tas2770: Fix handling of mute/unmute - ASoC: tas2770: Drop conflicting set_bias_level power setting - ASoC: tas2770: Allow mono streams - ASoC: tas2770: Set correct FSYNC polarity - iavf: Fix adminq error handling - nios2: add force_successful_syscall_return() - nios2: restarts apply only to the first sigframe we build... - nios2: fix syscall restart checks - nios2: traced syscall does need to check the syscall number - nios2: don't leave NULLs in sys_call_table[] - nios2: page fault et.al. are *not* restartable syscalls... - dpaa2-eth: trace the allocated address instead of page struct - perf probe: Fix an error handling path in 'parse_perf_probe_command()' - geneve: fix TOS inheriting for ipv4 - xen/xenbus: fix return type in xenbus_file_read() - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` - NTB: ntb_tool: uninitialized heap data in tool_fn_write() - tools build: Switch to new openssl API for test-libcrypto - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc - ceph: don't leak snap_rwsem in handle_cap_grant - tools/vm/slabinfo: use alphabetic order when two values are equal - ceph: use correct index when encoding client supported features - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - plip: avoid rcu debug splat - ipv6: do not use RT_TOS for IPv6 flowlabel - geneve: do not use RT_TOS for IPv6 flowlabel - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - pinctrl: qcom: sm8250: Fix PDC map - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - net: bgmac: Fix a BUG triggered by wrong bytes_compl - virtio_net: fix memory leak inside XPD_TX with mergeable - SUNRPC: Reinitialise the backchannel request buffers before reuse - sunrpc: fix expiry of auth creds - net: atlantic: fix aq_vec index out of range error - can: mcp251x: Fix race condition on receive interrupt - bpf: Check the validity of max_rdwr_access for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator - bpf: Acquire map uref in .init_seq_private for hash map iterator - bpf: Acquire map uref in .init_seq_private for array map iterator - NFSv4/pnfs: Fix a use-after-free bug in open - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly - NFSv4.1: Don't decrease the value of seq_nr_highest_sent - Documentation: ACPI: EINJ: Fix obsolete example - apparmor: Fix memleak in aa_simple_write_to_buffer() - apparmor: fix reference count leak in aa_pivotroot() - apparmor: fix overlapping attachment computation - apparmor: fix setting unconfined mode on a loaded profile - apparmor: fix aa_label_asxprint return check - apparmor: Fix failed mount permission check error message - apparmor: fix absroot causing audited secids to begin with = - apparmor: fix quiet_denied for file rules - can: ems_usb: fix clang's -Wunaligned-access warning - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II - tracing: Have filter accept "common_cpu" to be consistent - btrfs: fix lost error handling when looking up extended ref on log replay - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() - mmc: pxamci: Fix an error handling path in pxamci_probe() - mmc: pxamci: Fix another error handling path in pxamci_probe() - ata: libata-eh: Add missing command name - rds: add missing barrier to release_refill - x86/mm: Use proper mask when setting PUD mapping - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU - ALSA: info: Fix llseek return value when using callback - !280 ksmbd-introduce-new-SMB3-kernel-server - ksmbd: add reserved room in ipc request/response - ksmbd: limits exceeding the maximum allowable outstanding requests - ksmbd: move credit charge deduction under processing request - ksmbd: add support for smb2 max credit parameter - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION - cifsd: add Kconfig and Makefile - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob - ksmbd: fix encryption failure issue for session logoff response - ksmbd: fix endless loop when encryption for response fails - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT - ksmbd: Fix user namespace mapping - ksmbd: fix use-after-free bug in smb2_tree_disconect - ksmbd: fix memory leak in smb2_handle_negotiate - ksmbd: fix racy issue while destroying session on multichannel - ksmbd: use vfs_llseek instead of dereferencing NULL - ksmbd: remove unused ksmbd_share_configs_cleanup function - ksmbd: fix kernel oops from idr_remove() - ksmbd: replace sessions list in connection with xarray - ksmbd: use wait_event instead of schedule_timeout() - ksmbd: fix incorrect handling of iterate_dir - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small - ksmbd: add channel rwlock - ksmbd: smbd: fix connection dropped issue - ksmbd: fix reference count leak in smb_check_perm_dacl() - ksmbd: reduce smb direct max read/write size - ksmbd: don't align last entry offset in smb2 query directory - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: smbd: validate buffer descriptor structures - ksmbd: fix SMB 3.11 posix extension mount failure - ksmbd: fix guest connection failure with nautilus - ksmbd: uninitialized variable in create_socket() - ksmbd: smbd: fix missing client's memory region invalidation - ksmbd: add smb-direct shutdown - ksmbd: smbd: change the default maximum read/write, receive size - ksmbd: smbd: create MR pool - ksmbd: smbd: call rdma_accept() under CM handler - ksmbd: set 445 port to smbdirect port by default - ksmbd: register ksmbd ib client with ib_register_client() - ksmbd: Fix smb2_get_name() kernel-doc comment - ksmbd: Fix smb2_set_info_file() kernel-doc comment - ksmbd: Fix buffer_check_err() kernel-doc comment - ksmbd: fix multi session connection failure - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Remove unused fields from ksmbd_file struct definition - ksmbd: Remove unused parameter from smb2_get_name() - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 - ksmbd: fix uninitialized symbol 'pntsd_size' - ksmbd: remove select FS_POSIX_ACL in Kconfig - ksmbd: fix memleak in get_file_stream_info() - ksmbd: contain default data stream even if xattr is empty - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec() - ksmbd: Fix an error handling path in 'smb2_sess_setup()' - ksmbd: change LeaseKey data type to u8 array - ksmbd: remove smb2_buf_length in smb2_transform_hdr - ksmbd: remove smb2_buf_length in smb2_hdr - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() - ksmbd: Remove redundant 'flush_workqueue()' calls - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() - ksmbd: add buffer validation in session setup - ksmbd: throttle session setup failures to avoid dictionary attacks - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests - ksmbd: validate credit charge after validating SMB2 PDU body size - ksmbd: add buffer validation for smb direct - ksmbd: limit read/write/trans buffer size not to exceed 8MB - ksmbd: validate compound response buffer - ksmbd: fix potencial 32bit overflow from data area check in smb2_write - ksmbd: improve credits management - ksmbd: add validation in smb2_ioctl - ksmbd: fix oops from fuse driver - ksmbd: fix version mismatch with out of tree - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req() - ksmbd: remove the leftover of smb2.0 dialect support - ksmbd: check strictly data area in ksmbd_smb2_check_message() - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value - ksmbd: missing check for NULL in convert_to_nt_pathname() - ksmbd: fix transform header validation - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT - ksmbd: add validation in smb2 negotiate - ksmbd: add request buffer validation in smb2_set_info - ksmbd: use correct basic info level in set_file_basic_info() - ksmbd: remove NTLMv1 authentication - ksmbd: fix documentation for 2 functions - ksmbd: fix invalid request buffer access in compound - ksmbd: remove RFC1002 check in smb2 request - ksmbd: use LOOKUP_BENEATH to prevent the out of share access - ksmbd: remove follow symlinks support - ksmbd: check protocol id in ksmbd_verify_smb_message() - ksmbd: add default data stream name in FILE_STREAM_INFORMATION - ksmbd: log that server is experimental at module load - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info - ksmbd: prevent out of share access - ksmbd: transport_rdma: Don't include rwlock.h directly - ksmbd: fix read of uninitialized variable ret in set_file_basic_info - ksmbd: remove unused ksmbd_file_table_flush function - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data - ksmbd: Reduce error log 'speed is unknown' to debug - ksmbd: remove setattr preparations in set_file_basic_info() - ksmbd: ensure error is surfaced in set_file_basic_info() - ksmbd: fix __write_overflow warning in ndr_read_string - ksmbd: fix permission check issue on chown and chmod - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default - ksmbd: smbd: fix kernel oops during server shutdown - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon() - ksmbd: update the comment for smb2_get_ksmbd_tcon() - ksmbd: change int data type to boolean - ksmbd: Fix multi-protocol negotiation - ksmbd: fix an oops in error handling in smb2_open() - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4 - ksmbd: fix missing error code in smb2_lock - ksmbd: use channel signingkey for binding SMB2 session setup - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT - ksmbd: fix -Wstringop-truncation warnings - ksmbd: Fix potential memory leak in tcp_destroy_socket() - ksmbd: add support for negotiating signing algorithm - ksmbd: add negotiate context verification - ksmbd: fix typo of MS-SMBD - ksmbd: move credit charge verification over smb2 request size verification - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid - ksmbd: fix wrong error status return on session setup - ksmbd: fix wrong compression context size - ksmbd: fix typo in comment - ksmbd: fix an error message in ksmbd_conn_trasnport_init - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO - ksmbd: fix unused err value in smb2_lock - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr() - ksmbd: remove unneeded check_context_err - ksmbd: handle error cases first in smb2_create_sd_buffers - ksmbd: make smb2_find_context_vals return NULL if not found - ksmbd: uninterruptible wait for a file being unlocked - ksmbd: free ksmbd_lock when file is closed - ksmbd: fix the running request count decrement - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name() - ksmbd: delete some stray tabs - ksmbd: change data type of volatile/persistent id to u64 - ksmbd: fix memory leak in smb_inherit_dacl() - ksmbd: fix memory leak smb2_populate_readdir_entry() - ksmbd: fix read on the uninitialized send_ctx - ksmbd: remove unneeded NULL check in for_each_netdev - ksmbd: Fix read on the uninitialized pointer sess - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap() - ksmbd: adapt vfs api to 5.10 - ksmbd: replace struct dentry with struct path in some function's arguments - ksmbd: reorder and document on-disk and netlink structures in headers - ksmbd: change server config string index to enumeration - ksmbd: change server state type macro to enumeration - ksmbd: change sid types to enumeration - ksmbd: change ACE types to enumeration - ksmbd: remove SMB1 oplock level macros - ksmbd: opencode to remove ATTR_FP macro - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry - ksmbd: opencode to remove FP_INODE macro - ksmbd: fix dentry racy with rename() - ksmbd: Relax credit_charge check in smb2_validate_credit_charge() - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security - ksmbd: replace request and respone buffer macro with inline functions - ksmbd: replace SMB_DIRECT_TRANS macro with inline function - ksmbd: remove and replace macros with inline functions in smb_common.h - ksmbd: remove getting worker state macros - ksmbd: replace PAYLOAD_HEAD with inline function - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro - ksmbd: replace BUFFER_NR_PAGES with inline function - ksmbd: remove macros in transport_ipc.c - ksmbd: set MAY_* flags together with open flags - ksmbd: factor out a ksmbd_vfs_lock_parent helper - ksmbd: move fs/cifsd to fs/ksmbd - cifsd: add index.rst in cifs documentation - cifsd: fix WARNING: document isn't included in any toctree - cifsd: add ksmbd/nfsd interoperability to feature table - doc: cifsd: change the reference to configuration.txt - cifsd: fix build warnings from cifsd.rst - cifsd: update cifsd.rst document - cifsd: fix WARNING: Title overline too short - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION - ksmbd: remove unneeded NULL check in the list iterator - ksmbd: use f_bsize instead of q->limits.logical_block_size - ksmbd: change stream type macro to enumeration - ksmbd: opencode posix acl functions instead of wrappers - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename - ksmbd: opencode to avoid trivial wrappers - ksmbd: remove ksmbd_err/info - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function - ksmbd: remove ____ksmbd_align in ksmbd_server.h - ksmbd: remove unneeded FIXME comment - ksmbd: fix overly long line - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd - ksmbd: use list_for_each_entry instead of list_for_each - ksmbd: remove ksmbd_vfs_copy_file_range - ksmbd: initialize variables on the declaration - ksmbd: remove cache read/trans buffer support - ksmbd: add support for SMB3 multichannel - ksmbd: fix kfree of uninitialized pointer oid - cifsd: append ksmbd prefix into names for asn1 decoder - cifsd: remove duplicated argument - cifsd: set epoch in smb2_lease_break response - cifsd: fix list_add double add BUG_ON trap in setup_async_work() - cifsd: fix additional warnings from checkpatch.pl --strict - cifsd: fix potential read overflow in ksmbd_vfs_stream_read() - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly - cifsd: fix memleak in ksmbd_vfs_stream_read() - cifsd: fix memleak in ksmbd_vfs_stream_write() - cifsd: make alignment match open parenthesis - cifsd: enclose macro variables in parenthesis - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob() - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes' - cifsd: Prefer kernel type 'u16' over 'uint16_t' - cifsd: remove unnecessary parentheses around - cifsd: Alignment should match open parenthesis - cifsd: Blank lines aren't necessary after an open brace '{' - cifsd: No space is necessary after a cast - cifsd: don't use multiple blank lines - cifsd: spaces preferred around that '/' - cifsd: braces {} should be used on all arms of this statement - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN() - cifsd: alignment match open parenthesis - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash() - cifsd: call kzalloc() directly instead of wrapper - cifsd: add default case in switch statment in alloc_shash_desc() - cifsd: change success handling to failure handling - cifsd: fix wrong return value in ksmbd_crypt_message() - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message() - cifsd: len can never be negative in ksmbd_init_sg() - cifsd: add the check if nvec is zero - cifsd: never return 1 on failure - cifsd: return zero in always success case - cifsd: set error return value for memcmp() difference - cifsd: remove unneeded type casting - cifsd: simplify error handling in ksmbd_auth_ntlm() - cifsd: move ret check before the out label - cifsd: just return smbhash() instead of using rc return value - cifsd: move fips_enabled check before the str_to_key() - cifsd: add goto fail in neg_token_init_mech_type() - cifsd: use memcmp instead of for loop check in oid_eq() - cifsd: add goto fail in asn1_oid_decode() - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID - cifsd: fix xfstests generic/504 test failure - cifsd: fix boolreturn.cocci warnings - cifsd: fix WARNING: Too many leading tabs - cifsd: fix WARNING: Possible unnecessary 'out of memory' message - cifsd: decoding gss token using lib/asn1_decoder.c - cifsd: fix invalid memory access in smb2_write() - cifsd: add support for AES256 encryption - cifsd: Fix potential null-ptr-deref in destroy_previous_session() - cifsd: Update out_buf_len in smb2_populate_readdir_entry() - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe() - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path - cifsd: Fix regression in smb2_get_info - cifsd: Remove is_attributes_write_allowed() wrapper - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info - cifsd: remove the dead code of unimplemented durable handle - cifsd: use d_inode() - cifsd: Fix potential null-ptr-deref in smb2_open() - cifsd: move nt time functions to misc.c - cifsd: remove unused nterr.c file - cifsd: remove unused smberr.h - cifsd: Remove smb2_put_name() - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd - cifsd: re-implement ksmbd_vfs_kern_path - cifsd: get parent dentry from child in ksmbd_vfs_remove_file() - cifsd: add the check if parent is stable by unexpected rename - cifsd: declare ida statically - cifsd: remove unused including - cifsd: prevent a integer overflow in wm_alloc() - cifsd: remove wrappers of kvmalloc/kvfree - cifsd: fix memdup.cocci warnings - cifsd: use kfree to free memory allocated by kmalloc or kzalloc - cifsd: fix memory leak when loop ends - cifsd: remove stale prototype and variables - cifsd: use xarray instead of linked list for tree connect list - cifsd: remove useless error handling in ksmbd_vfs_read - cifsd: use file_inode() instead of d_inode() - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir - cifsd: remove calling d_path in error paths - cifsd: remove smack inherit leftovers - cifsd: fix wrong prototype in comment - cifsd: merge time_wrappers.h into smb_common.h - cifsd: clean-up codes using chechpatch.pl --strict - cifsd: fix error return code in ksmbd_vfs_remove_file() - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated - cifsd: use kmalloc() for small allocations - cifsd: fix wrong use of rw semaphore in __session_create() - cifsd: remove unneeded macros - cifsd: remove redundant assignment to variable err - cifsd: fix error handling in ksmbd_server_init() - cifsd: Fix an error code in smb2_read() - cifsd: Pass string length parameter to match_pattern() - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used - cifsd: fix incorrect comments - cifsd: remove unneeded FIXME comments - cifsd: fix static checker warning from smb_check_perm_dacl() - cifsd: fix static checker warning from smb_direct_post_send_data() - cifsd: Fix a use after free on error path - cifsd: fix a IS_ERR() vs NULL bug - cifsd: fix a precedence bug in parse_dacl() - cifsd: Fix a handful of spelling mistakes - cifsd: uniquify extract_sharename() - cifsd: add file operations - cifsd: add server-side procedures for SMB3 - cifsd: add server handler for central processing and tranport layers - openeuler: net: ngbe: fix ngbe checkpatch warnnings- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing - !257 [5.10] [Feature] ：add net-swift ngbe NIC support - !263 svm: Delete unused ioctl command - svm: Delete unused ioctl command - openeuler: net: ngbe: add ngbe module source code - openeuler: net: ngbe add build support - openeuler: config: add NGBE MODODULE CONFIG - openeuler_defconfig: Enable TRBE and TMC - drivers/ETM: fix error in invalid cs_id - coresight: etm4x: Expose trcdevarch via sysfs - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0 - coresight: etm4x: Add support for PE OS lock - coresight: etm4x: Convert all register accesses - coresight: etm4x: avoid build failure with unrolled loops - coresight: trbe: Make sure we have enough space - coresight: trbe: Allow driver to choose a different alignment - coresight: trbe: Decouple buffer base from the hardware base - coresight: trbe: Add a helper to pad a given buffer area - coresight: trbe: Add a helper to calculate the trace generated - coresight: trbe: Defer the probe on offline CPUs - coresight: trbe: Fix incorrect access of the sink specific data - coresight: trbe: Prohibit trace before disabling TRBE - coresight: trbe: End the AUX handle on truncation - coresight: trbe: Do not truncate buffer on IRQ - coresight: trbe: Fix handling of spurious interrupts - coresight: trbe: irq handler: Do not disable TRBE if no action is needed - coresight: trbe: Unify the enabling sequence - coresight: trbe: Drop duplicate TRUNCATE flags - coresight: trbe: Ensure the format flag is always set - coresight: etm-pmu: Ensure the AUX handle is valid - coresight: etm4x: Use Trace Filtering controls dynamically - coresight: etm4x: Save restore TRFCR_EL1 - coresight: etm4x: Move ETM to prohibited region for disable - coresight: Don't immediately close events that are run on invalid CPU/sink combos - coresight: tmc-etr: Speed up for bounce buffer in flat mode - KVM: arm64: Handle access to TRFCR_EL1 - coresight: sink: Add TRBE driver - perf: aux: Add flags for the buffer format - perf: aux: Add CoreSight PMU buffer formats - arm64: Add support for trace synchronization barrier - coresight: core: Add support for dedicated percpu sinks - coresight: etm-perf: Handle stale output handles - coresight: ete: Add support for ETE tracing - coresight: ete: Add support for ETE sysreg access - coresight: Add support for v8.4 SelfHosted tracing - arm64: Add TRBE definitions - arm64: Add TRFCR_ELx definitions - coresight: etm4x: Add support for sysreg only devices - coresight: etm4x: Refactor probing routine - coresight: etm4x: Use TRCDEVARCH for component discovery - coresight: etm4x: Add necessary synchronization for sysreg access - coresight: etm4x: Detect system instructions support - coresight: etm4x: Detect access early on the target CPU - coresight: etm4x: Handle ETM architecture version - coresight: etm4x: Check for Software Lock - coresight: etm4x: Define DEVARCH register fields - coresight: etm4x: Hide sysfs attributes for unavailable registers - coresight: etm4x: Add sysreg access helpers - coresight: etm4x: Make offset available for sysfs attributes - coresight: etm4x: Always read the registers on the host CPU - coresight: Convert claim/disclaim operations to use access wrappers - coresight: Convert coresight_timeout to use access abstraction - coresight: Introduce device access abstraction- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - btrfs: only write the sectors in the vertical stripe which has data stripes - sched/fair: Fix fault in reweight_entity - net_sched: cls_route: disallow handle of 0 - net/9p: Initialize the iounit field during fid creation - tee: add overflow check in register_shm_helper() - kvm: x86/pmu: Fix the compare function used by the pmu event filter - mtd: rawnand: arasan: Prevent an unsupported configuration - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" - drm/vc4: change vc4_dma_range_matches from a global to static - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" - tcp: fix over estimation in sk_forced_mem_schedule() - mac80211: fix a memory leak where sta_info is not freed - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: Add infrastructure and macro to mark VM as bugged - dm raid: fix address sanitizer warning in raid_status - dm raid: fix address sanitizer warning in raid_resume - ext4: fix extent status tree race in writeback error recovery path - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix warning in ext4_iomap_begin as race between bmap and write - tracing: Use a struct alignof to determine trace event field alignment - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH - KEYS: asymmetric: enforce SM2 signature use pkey algo - xen-blkfront: Apply 'feature_persistent' parameter when connect - xen-blkback: Apply 'feature_persistent' parameter when connect - xen-blkback: fix persistent grants negotiation - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter - KVM: x86/pmu: Use different raw event masks for AMD and Intel - KVM: x86/pmu: Use binary search to check filtered events - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook - KVM: SVM: Drop VMXE check from svm_set_cr4() - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() - ACPI: CPPC: Do not prevent CPPC from working in the future - btrfs: reset block group chunk force if we have to wait - btrfs: reject log replay if there is unsupported RO compat flag - um: Allow PM with suspend-to-idle - timekeeping: contribute wall clock to rng on time change - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification - dm writecache: set a default MAX_WRITEBACK_JOBS - serial: 8250: Fold EndRun device support into OxSemi Tornado code - serial: 8250_pci: Replace dev_*() by pci_*() macros - serial: 8250_pci: Refactor the loop in pci_ite887x_init() - serial: 8250: Correct the clock for OxSemi PCIe devices - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports - PCI/AER: Iterate over error counters instead of error strings - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails - usbnet: smsc95xx: Avoid link settings race on interrupt reception - usbnet: smsc95xx: Don't clear read-only PHY interrupt - mtd: rawnand: arasan: Fix clock rate in NV-DDR - mtd: rawnand: arasan: Support NV-DDR interface - mtd: rawnand: arasan: Fix a macro parameter - mtd: rawnand: Add NV-DDR timings - mtd: rawnand: arasan: Check the proposed data interface is supported - mtd: rawnand: Add a helper to clarify the interface configuration - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component - HID: hid-input: add Surface Go battery quirk - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer - drm/mediatek: Allow commands to be sent during video mode - drm/i915/dg1: Update DMC_DEBUG3 register - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - __follow_mount_rcu(): verify that mount_lock remains unchanged - Input: gscps2 - check return value of ioremap() in gscps2_probe() - x86/olpc: fix 'logical not is only applied to the left hand side' - ftrace/x86: Add back ftrace_expected assignment - x86/bugs: Enable STIBP for IBPB mitigated RETBleed - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection - scsi: qla2xxx: Turn off multi-queue for 8G adapters - scsi: qla2xxx: Fix discovery issues in FC-AL topology - scsi: zfcp: Fix missing auto port scan and thus missing target ports - video: fbdev: s3fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y - sched: Fix the check of nr_running at queue wakelist - tools/thermal: Fix possible path truncations - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - x86/numa: Use cpumask_available instead of hardcoded NULL check - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() - scripts/faddr2line: Fix vmlinux detection on arm64 - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - powerpc/pci: Fix PHB numbering when using opal-phbid - kprobes: Forbid probing on trampoline and BPF code areas - perf symbol: Fail to read phdr workaround - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time - f2fs: write checkpoint during FG_GC - f2fs: don't set GC_FAILURE_PIN for background GC - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 - ASoC: mchp-spdifrx: disable end of block interrupt on failures - video: fbdev: sis: fix typos in SiS_GetModeID() - video: fbdev: amba-clcd: Fix refcount leak bugs - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() - ASoC: audio-graph-card: Add of_node_put() in fail path - fuse: Remove the control interface for virtio-fs - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format - s390/zcore: fix race when reading from hardware system area - s390/dump: fix old lowcore virtual vs physical address confusion - perf tools: Fix dso_id inode generation comparison - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - mfd: max77620: Fix refcount leak in max77620_initialise_fps - mfd: t7l66xb: Drop platform disable callback - remoteproc: sysmon: Wait for SSCTL service to come up - lib/smp_processor_id: fix imbalanced instrumentation_end() call - kfifo: fix kfifo_to_user() return type - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - iommu/exynos: Handle failed IOMMU device registration properly - tty: n_gsm: fix missing corner cases in gsmld_poll() - tty: n_gsm: fix DM command - tty: n_gsm: fix wrong T1 retry count handling - vfio/ccw: Do not change FSM state in subchannel event - vfio/mdev: Make to_mdev_device() into a static inline - vfio: Split creation of a vfio_device into init and register ops - vfio: Simplify the lifetime logic for vfio_device - vfio: Remove extra put/gets around vfio_device->group - remoteproc: qcom: wcnss: Fix handling of IRQs - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() - tty: n_gsm: fix race condition in gsmld_write() - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() - tty: n_gsm: fix user open not possible at responder until initiator open - tty: n_gsm: Delete gsmtty open SABM frame when config requester - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header - profiling: fix shift too large makes kernel panic - selftests/livepatch: better synchronize test_klp_callbacks_busy - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init - rpmsg: mtk_rpmsg: Fix circular locking dependency - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() - serial: 8250: Export ICR access helpers for internal use - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: samsung: Fix error handling in aries_audio_probe - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe - opp: Fix error check in dev_pm_opp_attach_genpd() - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() - null_blk: fix ida error handling in null_add_dev() - RDMA/rxe: Fix error unwind in rxe_create_qp() - RDMA/mlx5: Add missing check for return value in get namespace flow - selftests: kvm: set rax before vmcall - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/srpt: Fix a use-after-free - RDMA/srpt: Introduce a reference count in struct srpt_device - RDMA/srpt: Duplicate port name members - platform/olpc: Fix uninitialized data in debugfs write - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() - USB: serial: fix tty-port initialized comments - PCI: tegra194: Fix link up retry sequence - PCI: tegra194: Fix Root Port interrupt handling - HID: alps: Declare U1_UNICORN_LEGACY support - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() - RDMA/qedr: Improve error logs for rdma_alloc_tid error return - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare - RDMA/rtrs: Define MIN_CHUNK_SIZE - um: random: Don't initialise hwrng struct with zero - interconnect: imx: fix max_node_id - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() - usb: dwc3: qcom: fix missing optional irq warnings - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() - usb: gadget: udc: amd5536 depends on HAS_DMA - xtensa: iss: fix handling error cases in iss_net_configure() - xtensa: iss/network: provide release() callback - scsi: smartpqi: Fix DMA direction for RAID requests - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() - KVM: s390: pv: leak the topmost page table when destroy fails - mmc: block: Add single read for 4k sector cards - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - memstick/ms_block: Fix a memory leak - memstick/ms_block: Fix some incorrect memory allocation - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - intel_th: msu: Fix vmalloced buffers - intel_th: msu-sink: Potential dereference of null pointer - intel_th: Fix a resource leak in an error handling path - PCI: endpoint: Don't stop controller when unbinding endpoint function - dmaengine: sf-pdma: Add multithread support for a DMA channel - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() - KVM: arm64: Don't return from void function - soundwire: bus_type: fix remove and shutdown support - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks - clk: qcom: ipq8074: fix NSS port frequency tables - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock - clk: qcom: ipq8074: fix NSS core PLL-s - usb: host: xhci: use snprintf() in xhci_decode_trb() - clk: qcom: clk-krait: unlock spin after mux completion - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - mwifiex: Ignore BTCOEX events from the 88W8897 firmware - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE - clk: mediatek: reset: Fix written reset bit offset - iio: accel: bma400: Reordering of header files - platform/chrome: cros_ec: Always expose last resume result - iio: accel: bma400: Fix the scale min and max macro values - netfilter: xtables: Bring SPDX identifier back - usb: xhci: tegra: Fix error check - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - fpga: altera-pr-ip: fix unsigned comparison with less than zero - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - mtd: partitions: Fix refcount leak in parse_redboot_of - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() - mtd: rawnand: meson: Fix a potential double free issue - mtd: maps: Fix refcount leak in ap_flash_init - mtd: maps: Fix refcount leak in of_flash_probe_versatile - clk: renesas: r9a06g032: Fix UART clkgrp bitsel - wireguard: allowedips: don't corrupt stack when detecting overflow - wireguard: ratelimiter: use hrtimer in selftest - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - net: ionic: fix error check for vlan flags in ionic_set_nic_features() - net: rose: fix netdev reference changes - netdevsim: Avoid allocation warnings triggered from user space - iavf: Fix max_rate limiting - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() - crypto: hisilicon/sec - fix auth key size error - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version - media: cedrus: hevc: Add check for invalid timestamp - wifi: libertas: Fix possible refcount leak in if_usb_probe() - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - i2c: cadence: Support PEC for SMBus block read - Bluetooth: hci_intel: Add check for platform_driver_register - can: pch_can: pch_can_error(): initialize errc before using it - can: error: specify the values of data[5..7] of CAN error frames - can: usb_8dev: do not report txerr and rxerr during bus-off - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: pch_can: do not report txerr and rxerr during bus-off - selftests/bpf: fix a test for snprintf() overflow - wifi: p54: add missing parentheses in p54_flush() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - fs: check FMODE_LSEEK to control internal pipe splicing - bpf: Fix subprog names in stack traces. - selftests: timers: clocksource-switch: fix passing errors from child - selftests: timers: valid-adjtimex: build fix for newer toolchains - libbpf: Fix the name of a reused map - tcp: make retransmitted SKB fit into the send window - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq - drm/msm/mdp5: Fix global state lock backoff - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() - lib: bitmap: order includes alphabetically - drm: bridge: sii8620: fix possible off-by-one - drm/mediatek: dpi: Only enable dpi after the bridge is enabled - drm/mediatek: dpi: Remove output format of YUV - drm/rockchip: Fix an error handling path rockchip_dp_probe() - drm/rockchip: vop: Don't crash for invalid duplicate_state() - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes - drm/vc4: hdmi: Fix timings for interlaced modes - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails - drm/vc4: hdmi: Avoid full hdmi audio fifo writes - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration - drm/vc4: dsi: Fix dsi0 interrupt support - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type - drm/vc4: dsi: Introduce a variant structure - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array - drm/vc4: drv: Remove the DSI pointer in vc4_drv - drm/vc4: dsi: Correct pixel order for DSI0 - drm/vc4: dsi: Correct DSI divider calculations - drm/vc4: plane: Fix margin calculations for the right/bottom edges - drm/vc4: plane: Remove subpixel positioning check - media: tw686x: Fix memory leak in tw686x_video_init - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set - media: hdpvr: fix error value returns in hdpvr_read - drm/mcde: Fix refcount leak in mcde_dsi_bind - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - crypto: ccp - During shutdown, check SEV data pointer before using - test_bpf: fix incorrect netdev features - drm/radeon: fix incorrrect SPDX-License-Identifiers - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - media: tw686x: Register the irq at the end of probe - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() - i2c: Fix a potential use after free - crypto: sun8i-ss - fix error codes in allocate_flows() - crypto: sun8i-ss - do not allocate memory when handling hash requests - drm: adv7511: override i2c address of cec before accessing it - virtio-gpu: fix a missing check to avoid NULL dereference - i2c: npcm: Correct slave role behavior - i2c: npcm: Remove own slave addresses 2:10 - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs - drm/mediatek: Modify dsi funcs to atomic operations - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - ath11k: Fix incorrect debug_mask mappings - drm/mipi-dbi: align max_chunk to 2 in spi_transfer - ath11k: fix netdev open race - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() - drm/st7735r: Fix module autoloading for Okaya RH128128T - ath10k: do not enforce interrupt trigger type - drm/bridge: tc358767: Make sure Refclk clock are enabled - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() - pwm: sifive: Shut down hardware only after pwmchip_remove() completed - pwm: sifive: Ensure the clk is enabled exactly once per running PWM - pwm: sifive: Simplify offset calculation for PWMCMP registers - pwm: sifive: Don't check the return code of pwmchip_remove() - dm: return early from dm_pr_call() if DM device is suspended - thermal/tools/tmon: Include pthread and time headers in tmon.h - selftests/seccomp: Fix compile warning when CC=clang - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment - soc: qcom: Make QCOM_RPMPD depend on PM - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - blktrace: Trace remapped requests correctly - block: remove the request_queue to argument request based tracepoints - hwmon: (drivetemp) Add module alias - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created - erofs: avoid consecutive detection for Highmem memory - arm64: tegra: Fix SDMMC1 CD on P2888 - arm64: dts: mt7622: fix BPI-R64 WPS button - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP - regulator: qcom_smd: Fix pm8916_pldo range - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - ARM: OMAP2+: Fix refcount leak in omapdss_init_of - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg - block: fix infinite loop for invalid zone append - soc: fsl: guts: machine variable might be unset - locking/lockdep: Fix lockdep_init_map_*() confusion - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 - hexagon: select ARCH_WANT_LD_ORPHAN_WARN - ARM: dts: ast2600-evb: fix board compatible - ARM: dts: ast2500-evb: fix board compatible - x86/pmem: Fix platform-device leak in error path - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values - Input: atmel_mxt_ts - fix up inverted RESET handler - ARM: dts: imx7d-colibri-emmc: add cpu1 supply - ACPI: processor/idle: Annotate more functions to live in cpuidle section - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - arm64: dts: renesas: beacon: Fix regulator node names - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: findbit: fix overflowing offset - spi: spi-rspi: Fix PIO fallback on RZ platforms - powerpc/64s: Disable stack variable initialisation for prom_init - selinux: Add boundary check in put_entry() - PM: hibernate: defer device probing when resuming from hibernation - firmware: tegra: Fix error check return value of debugfs_create_file() - ARM: shmobile: rcar-gen2: Increase refcount for new reference - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name - arm64: dts: qcom: ipq8074: fix NAND node name - ACPI: LPSS: Fix missing check in register_device_clock() - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks - ARM: OMAP2+: display: Fix refcount leak bug - spi: synquacer: Add missing clk_disable_unprepare() - ARM: dts: BCM5301X: Add DT for Meraki MR26 - ARM: dts: imx6ul: fix qspi node compatible - ARM: dts: imx6ul: fix lcdif node compatible - ARM: dts: imx6ul: fix csi node compatible - ARM: dts: imx6ul: fix keypad compatible - ARM: dts: imx6ul: change operating-points to uint32-matrix - ARM: dts: imx6ul: add missing properties for sram - wait: Fix __wait_event_hrtimeout for RT/DL tasks - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() - genirq: GENERIC_IRQ_IPI depends on SMP - irqchip/mips-gic: Only register IPI domain when SMP is enabled - genirq: Don't return error on missing optional irq_request_resources() - ext2: Add more validity checks for inode counts - arm64: Do not forget syscall when starting a new thread. - x86: Handle idle=nomwait cmdline properly for x86_idle - epoll: autoremove wakers even more aggressively - netfilter: nf_tables: fix null deref due to zeroed list head - lockdep: Allow tuning tracing capacity constants. - usb: dwc3: gadget: fix high speed multiplier setting - usb: dwc3: gadget: refactor dwc3_repare_one_trb - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC - USB: HCD: Fix URB giveback issue in tasklet function - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion - coresight: Clear the connection field properly - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - powerpc/powernv: Avoid crashing if rng is NULL - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - PCI: Add defines for normal and subtractive PCI bridges - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator - md-raid10: fix KASAN warning - md-raid: destroy the bitmap after destroying the thread - serial: mvebu-uart: uart2 error bits clearing - fuse: limit nsec - scsi: qla2xxx: Zero undefined mailbox IN registers - scsi: qla2xxx: Fix incorrect display of max frame size - scsi: sg: Allow waiting for commands to complete on removed device - iio: light: isl29028: Fix the warning in isl29028_remove() - mtd: rawnand: arasan: Update NAND bus clock instead of system clock - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() - drm/nouveau: fix another off-by-one in nvbios_addr - drm/vc4: hdmi: Disable audio if dmas property is present but empty - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode - parisc: Check the return value of ioremap() in lba_driver_probe() - parisc: Fix device names in /proc/iomem - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() - usbnet: Fix linkwatch use-after-free on disconnect - fbcon: Fix accelerated fbdev scrolling while logo is still shown - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters - thermal: sysfs: Fix cooling_device_stats_setup() error code path - fs: Add missing umask strip in vfs_tmpfile - vfs: Check the truncate maximum size in inode_newsize_ok() - tty: vt: initialize unicode screen buffer - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED - ALSA: hda/realtek: Add quirk for another Asus K42JZ model - ALSA: hda/cirrus - support for iMac 12,1 model - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - riscv: set default pm_power_off to NULL - KVM: x86: Tag kvm_mmu_x86_module_init() with __init - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value - KVM: s390: pv: don't present the ecall interrupt twice - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case - HID: wacom: Don't register pad_input for touch switch - HID: wacom: Only report rotation for art pen - add barriers to buffer_uptodate and set_buffer_uptodate - wifi: mac80211_hwsim: use 32-bit skb cookie - wifi: mac80211_hwsim: add back erroneously removed cast - wifi: mac80211_hwsim: fix race condition in pending packet - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx - ALSA: hda/realtek: Add quirk for Clevo NV45PZ - ALSA: bcd2000: Fix a UAF bug on the error path of probing - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - Makefile: link with -z noexecstack --no-warn-rwx-segments - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning - macintosh/adb: fix oob read in do_adb_query() function - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 - Bluetooth: hci_bcm: Add DT compatible for CYW55572 - Bluetooth: hci_bcm: Add BCM4349B1 variant - selftests: KVM: Handle compiler optimizations in ucall - tools/kvm_stat: fix display of error when multiple processes are found - ACPI: APEI: Better fix to avoid spamming the console with old error logs - ACPI: video: Shortening quirk list by identifying Clevo by board_name only - ACPI: video: Force backlight native for some TongFang devices - selftests/bpf: Check dst_port only on the client socket - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() - x86/speculation: Make all RETbleed mitigations 64-bit only - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available - xfs: prevent UAF in xfs_log_item_in_current_chkpt - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - EDAC/ghes: Set the DIMM label unconditionally - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - page_alloc: fix invalid watermark check on a negative value - ARM: crypto: comment out gcc warning that breaks clang builds - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - sfc: disable softirqs for ptp TX - perf symbol: Correct address for bss symbols - virtio-net: fix the race between refill work and close - sctp: fix sleep in atomic context bug in timer handlers - i40e: Fix interface init with MSI interrupts (no MSI-X) - tcp: Fix data-races around sysctl_tcp_reflect_tos. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - macsec: always read MACSEC_SA_ATTR_PN as a u64 - macsec: limit replay window size with XPN - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: fix NULL deref in macsec_add_rxsa - Documentation: fix sctp_wmem in ip-sysctl.rst - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - igmp: Fix data-races around sysctl_igmp_qrv. - net/tls: Remove the context from the list in tls_device_down - net: ping6: Fix memleak in ipv6_renew_options(). - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - Revert "tcp: change pingpong threshold to 3" - scsi: ufs: host: Hold reference returned by of_parse_phandle() - ice: do not setup vlan for loopback VSI - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix data-races around sysctl_tcp_dsack. - watch_queue: Fix missing locking in add_watch_to_object() - watch_queue: Fix missing rcu annotation - nouveau/svm: Fix to migrate all requested pages - s390/archrandom: prevent CPACF trng invocations in interrupt context - ntfs: fix use-after-free in ntfs_ucsncmp() - Revert "ocfs2: mount shared volume without ha stack" - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - net: usb: ax88179_178a needs FLAG_SEND_ZLP - x86/alternative: Report missing return thunk details - x86/amd: Use IBPB for firmware calls - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: Add bt_skb_sendmsg helper - ALSA: memalloc: Align buffer allocations in page size - bitfield.h: Fix "type of reg too small for mask" test - drm/imx/dcss: fix unused but set variable warnings - dlm: fix pending remove if msg allocation fails - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - sched/deadline: Fix BUG_ON condition for deboosted tasks - bpf: Make sure mac_header was set before using it - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - KVM: Don't null dereference ops->destroy - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - tcp: Fix data-races around sysctl_tcp_max_reordering. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl knobs related to SYN option. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - ip: Fix data-races around sysctl_ip_prot_sock. - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - drm/imx/dcss: Add missing of_node_put() in fail path - be2net: Fix buffer overflow in be_get_module_eeprom - gpio: pca953x: use the correct register address when regcache sync during init - gpio: pca953x: use the correct range when do regmap sync - gpio: pca953x: only use single read/write for No AI mode - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - i40e: Fix erroneous adapter reinitialization during recovery process - iavf: Fix handling of dummy receive descriptors - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around keepalive sysctl knobs. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_llm_reports. - net/tls: Fix race in TLS device down flow - net: stmmac: fix dma queue left shift overflow issue - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp: Fix a data-race around sysctl_tcp_probe_interval. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - ip: Fix a data-race around sysctl_fwmark_reflect. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - igc: Reinstate IGC_REMOVED logic and implement it properly - drm/amdgpu/display: add quirk handling for stutter mode - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - pinctrl: ralink: Check for null return of devm_kcalloc - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - serial: mvebu-uart: correctly report configured baudrate value - PCI: hv: Fix interrupt mapping for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Fix multi-MSI to allow more than one MSI vector - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" - net: inline rollback_registered_many() - net: move rollback_registered_many() - net: inline rollback_registered() - net: move net_set_todo inside rollback_registered() - docs: net: explain struct net_device lifetime - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication - riscv: add as-options for modules with assembly compontents - pinctrl: stm32: fix optional IRQ support to gpios - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems - kernel: add OPENEULER_VERSION_CODE to version.h- bnx2x: fix potential memory leak in bnx2x_tpa_stop() - scsi: stex: Properly zero out the passthrough command structure - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown' - blktrace: fix possible memleak in '__blk_trace_remove' - blktrace: introduce 'blk_trace_{start,stop}' helper - ext4: record error information when insert extent failed in 'ext4_split_extent_at' - pgp: Check result of crypto_alloc_shash properly - net: tun: fix bugs for oversize packet when napi frags enabled - irqdomain: Fix driver re-inserting failures when IRQs not being freed - nbd: refactor size updates - nbd: move the task_recv check into nbd_size_update - nbd: remove the call to set_blocksize - Revert "cifs: fix double free race when mount fails in cifs_get_root()" - scsi: libsas: Resume SAS host for phy reset or enable via sysfs - !207 [5.10] [bugfix] : merge net-swift txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig- atm: idt77252: fix use-after-free bugs caused by tst_timer - fs: fix UAF/GPF bug in nilfs_mdt_destroy - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - usb: mon: make mmapped memory read only - scsi: sd: Revert "scsi: sd: Remove a local variable" - devlink: Fix use-after-free after a failed reload - nouveau: fix migrate_to_ram() for faulting page - mm/memory.c: fix race when faulting a device private page - vsock: Fix memory leak in vsock_connect() - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - mtd: rawnand: cafe: fix drivers probe/remove methods - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - net: mvpp2: fix mvpp2 debugfs leak - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - kprobes: don't call disarm_kprobe() for disabled kprobes - block: fix inaccurate io_ticks by set 'precise_iostat' - arm64: fix rodata=full - block: fix kabi broken in request_queue - blk-mq: fix kabi broken in blk_mq_tags - blk-mq: fix kabi broken in blk_mq_tag_set - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags - blk-mq: Stop using pointers for blk_mq_tags bitmap tags - blk-mq: Use shared tags for shared sbitmap support - blk-mq: Always use blk_mq_is_sbitmap_shared - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() - blk-mq: Add blk_mq_alloc_map_and_rqs() - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() - blk-mq: Don't clear driver tags own mapping - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() - blk-mq: Invert check in blk_mq_update_nr_requests() - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() - blk-mq: Change rqs check in blk_mq_free_rqs() - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" - block: fix null-deref in percpu_ref_put - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - objtool: Fix type of reloc::addend - objtool: Fix code relocs vs weak symbols - x86/alternative: Add debug prints to apply_retpolines() - x86/alternative: Try inline spectre_v2=retpoline,amd - x86/alternative: Handle Jcc __x86_indirect_thunk_ eg - x86/insn-eval: Handle return values from the decoder - x86/pat: Fix x86_has_pat_wp() - serial: 8250: Fix PM usage_count for console handover - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: stm32: Clear prev values before setting RTS delays - serial: 8250: fix return error code in serial8250_request_std_resource() - vt: fix memory overlapping when deleting chars in the buffer - tty: serial: samsung_tty: set dma burst_size to 1 - usb: dwc3: gadget: Fix event pending check - usb: typec: add missing uevent when partner support PD - USB: serial: ftdi_sio: add Belimo device ids - signal handling: don't use BUG_ON() for debugging - nvme-pci: phison e16 has bogus namespace ids - Revert "can: xilinx_can: Limit CANFD brp to 2" - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 - soc: ixp4xx/npe: Fix unused match warning - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - ASoC: madera: Fix event generation for rate controls - ASoC: madera: Fix event generation for OUT1 demux - ASoC: cs47l15: Fix event generation for low power mux control - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: wm5110: Fix DRE control - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: ops: Fix off by one in range control validation - net: sfp: fix memory leak in sfp_probe() - nvme-tcp: always fail a request when sending it failed - NFC: nxp-nci: don't print header length mismatch on i2c error - net: tipc: fix possible refcount leak in tipc_sk_create() - platform/x86: hp-wmi: Ignore Sanitization Mode event - cpufreq: pmac32-cpufreq: Fix refcount leak bug - scsi: hisi_sas: Limit max hw sectors for v3 HW - netfilter: br_netfilter: do not skip all hooks with 0 priority - virtio_mmio: Restore guest page size on resume - virtio_mmio: Add missing PM calls to freeze/restore - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - net/tls: Check for errors in tls_device_init - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net: atlantic: remove aq_nic_deinit() when resume - net: atlantic: remove deep parameter on suspend/resume functions - sfc: fix kernel panic when creating VF - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - sfc: fix use after free when disabling sriov - ima: Fix potential memory leak in ima_init_crypto() - ima: force signature verification when CONFIG_KEXEC_SIG is configured - net: ftgmac100: Hold reference returned by of_get_child_by_name() - nexthop: Fix data-races around nexthop_compat_mode. - ipv4: Fix data-races around sysctl_ip_dynaddr. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - icmp: Fix a data-race around sysctl_icmp_ratemask. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - drm/i915/gt: Serialize TLB invalidates with GT resets - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - ARM: dts: at91: sama5d2: Fix typo in i2s1 node - ipv4: Fix a data-race around sysctl_fib_sync_mem. - icmp: Fix data-races around sysctl. - cipso: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - inetpeer: Fix data-races around sysctl. - tcp: Fix a data-race around sysctl_tcp_max_orphans. - sysctl: Fix data races in proc_dointvec_jiffies(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec(). - net: stmmac: dwc-qos: Disable split header for Tegra194 - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - ASoC: tas2764: Fix amp gain register offset & default - ASoC: tas2764: Correct playback volume range - ASoC: tas2764: Fix and extend FSYNC polarity handling - ASoC: tas2764: Add post reset delays - ASoC: sgtl5000: Fix noise on shutdown/remove - ima: Fix a potential integer overflow in ima_appraise_measurement - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: kTLS, Fix build time constant test in RX - net/mlx5e: kTLS, Fix build time constant test in TX - ARM: 9210/1: Mark the FDT_FIXED sections as shareable - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - spi: amd: Limit max transfer and message size - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count - ext4: fix race condition between ext4_write and ext4_convert_inline_data - Revert "evm: Fix memleak in init_desc" - sh: convert nommu io{re,un}map() to static inline functions - nilfs2: fix incorrect masking of permission flags for symlinks - fs/remap: constrain dedupe of EOF blocks - drm/panfrost: Fix shrinker list corruption by madvise IOCTL - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - wifi: mac80211: fix queue selection for mesh/OCB interfaces - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ip: fix dflt addr selection for connected nexthop - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - tracing/histograms: Fix memory leak problem - mm: split huge PUD on wp_huge_pud fallback - fix race between exit_itimers() and /proc/pid/timers - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - ALSA: hda - Add fixup for Dell Latitidue E5430 - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: pl330: Fix lockdep warning about non-static key - ida: don't use BUG_ON() for debugging - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo - misc: rtsx_usb: set return value in rsp_buf alloc err path - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - i2c: cadence: Unregister the clk notifier in error path - r8169: fix accessing unset transport header - selftests: forwarding: fix error message in learning_test - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT - ibmvnic: Properly dispose of all skbs during a failover. - i40e: Fix dropped jumbo frames statistics - xsk: Clear page contiguity bit when unmapping pool - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt - ARM: at91: pm: use proper compatible for sama5d2's rtc - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - pinctrl: sunxi: sunxi_pconf_set: use correct offset - arm64: dts: imx8mp-evk: correct I2C3 pad settings - arm64: dts: imx8mp-evk: correct gpio-led pad settings - arm64: dts: imx8mp-evk: correct the uart2 pinctl value - arm64: dts: imx8mp-evk: correct mmc pad settings - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values - pinctrl: sunxi: a83t: Fix NAND function name for some pins - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - xfs: remove incorrect ASSERT in xfs_rename - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - powerpc/powernv: delay rng platform device creation until later in boot - video: of_display_timing.h: include errno.h - memregion: Fix memregion_free() fallback definition - PM: runtime: Redefine pm_runtime_release_supplier() - fbdev: fbmem: Fix logo center image dx issue - iommu/vt-d: Fix PCI bus rescan device hot add - netfilter: nft_set_pipapo: release elements in clone from abort path - net: rose: fix UAF bug caused by rose_t0timer_expiry - usbnet: fix memory leak in error case - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - can: gs_usb: gs_usb_open/close(): fix memory leak - can: grcan: grcan_probe(): remove extra of_node_get() - can: bcm: use call_rcu() instead of costly synchronize_rcu() - ALSA: hda/realtek: Add quirk for Clevo L140PU - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() - net: usb: qmi_wwan: add Telit 0x1070 composition - net: usb: qmi_wwan: add Telit 0x1060 composition - selftests/rseq: Change type of rseq_offset to ptrdiff_t - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area - selftests/rseq: Fix: work-around asm goto compiler bugs - selftests/rseq: Remove arm/mips asm goto compiler work-around - selftests/rseq: Fix warnings about #if checks of undefined tokens - selftests/rseq: Fix ppc32 offsets by using long rather than off_t - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 - selftests/rseq: Introduce thread pointer getters - selftests/rseq: Introduce rseq_get_abi() helper - selftests/rseq: Remove volatile from __rseq_abi - selftests/rseq: Remove useless assignment to cpu variable - selftests/rseq: introduce own copy of rseq uapi header - selftests/rseq: remove ARRAY_SIZE define from individual tests - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - ipv6/sit: fix ipip6_tunnel_get_prl return value - sit: use min - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c - xen/gntdev: Avoid blocking in unmap_grant_pages() - tcp: add a missing nf_reset_ct() in 3WHS handling - xfs: fix xfs_trans slab cache name - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX - net: tun: avoid disabling NAPI twice - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - epic100: fix use after free on rmmod - tipc: move bc link creation back to tipc_node_create - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - net: bonding: fix use-after-free after 802.3ad slave unbind - net: bonding: fix possible NULL deref in rlb code - net/sched: act_api: Notify user space if any actions were flushed before error - netfilter: nft_dynset: restore set element counter when failing to update - s390: remove unneeded 'select BUILD_BIN2C' - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - caif_virtio: fix race between virtio_device_ready() and ndo_open() - NFSD: restore EINVAL error translation in nfsd_commit() - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - usbnet: fix memory allocation in helpers - linux/dim: Fix divide by 0 in RDMA DIM - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/qedr: Fix reporting QP timeout attribute - net: dp83822: disable rx error interrupt - net: dp83822: disable false carrier interrupt - net: tun: stop NAPI when detaching queues - net: tun: unlink NAPI from device on destruction - net: dsa: bcm_sf2: force pause link settings - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: usb: ax88179_178a: Fix packet receiving - SUNRPC: Fix READ_PLUS crasher - s390/archrandom: simplify back to earlier design and initialize earlier - dm raid: fix KASAN warning in raid5_add_disks - dm raid: fix accesses beyond end of raid member array - powerpc/bpf: Fix use of user_pt_regs in uapi - powerpc/book3e: Fix PUD allocation size in map_kernel_page() - powerpc/prom_init: Fix kernel config grep - nvdimm: Fix badblocks clear off-by-one error - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - ipv6: take care of disable_policy when restoring routes - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - net: mscc: ocelot: allow unregistered IP multicast flooding - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete - tick/nohz: unexport __init-annotated tick_nohz_full_setup() - drm: remove drm_fb_helper_modinit - MAINTAINERS: add Amir as xfs maintainer for 5.10.y- nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs - r8152: Rate limit overflow messages - nfp: fix use-after-free in area_cache_get() - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - media: pvrusb2: fix memory leak in pvr_probe - binderfs: rework superblock destruction - libbpf: Fix use-after-free in btf_dump_name_dups - sch_sfb: Also store skb len before calling child enqueue - sch_sfb: Don't assume the skb is still around after enqueueing to child - watch-queue: remove spurious double semicolon - watchqueue: make sure to serialize 'wqueue->defunct' properly - kabi: net: fix kabi broken in sk_buff - io_uring/af_unix: defer registered files gc to io_uring release - mISDN: fix use-after-free bugs in l1oip timer handlers - ubi: fastmap: Add fastmap control support for Module parameters - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl - ipv6: Fix data races around sk->sk_prot. - io_uring: Use original task for req identity in io_identity_cow() - tcp: Fix data races around icsk->icsk_af_ops. - wifi: mac80211: fix crash in beacon protection for P2P-device - ovl: do not fail because of O_NOATIME - x86/ftrace: Use alternative RET encoding - x86/ibt,ftrace: Make function-graph play nice - Revert "x86/ftrace: Use alternative RET encoding" - tcp/udp: Fix memory leak in ipv6_renew_options(). - kcm: avoid potential race in kcm_tx_work - ubifs: Reserve one leb for each journal head while doing budget - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 - ubifs: Fix wrong dirty space budget for dirty inode - ubifs: Rectify space budget for ubifs_xrename() - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted - powerpc/pseries: wire up rng during setup_arch() - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - random: update comment from copy_to_user() -> copy_to_iter() - modpost: fix section mismatch check for exported init/exit sections - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: Fix refcount leak in axxia_boot_secondary - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - powerpc/powernv: wire up rng during setup_arch - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc: Enable execve syscall exit tracepoint - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - xtensa: Fix refcount leak bug in time.c - xtensa: xtfpga: Fix refcount leak bug in setup - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: trigger: sysfs: fix use-after-free on remove - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: accel: mma8452: ignore the return value of reset operation - iio:accel:mxc4005: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - f2fs: attach inline_data after setting compression - usb: chipidea: udc: check request status before setting device address - USB: gadget: Fix double-free bug in raw_gadget driver - usb: gadget: Fix non-unique driver names in raw-gadget driver - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci: turn off port power in shutdown - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - iio: adc: vf610: fix conversion mode sysfs node name - iio: mma8452: fix probe fail when device tree compatible is used. - s390/cpumf: Handle events cycles and instructions identical - gpio: winbond: Fix error code in winbond_gpio_get() - nvme: move the Samsung X5 quirk entry to the core quirks - nvme-pci: add NO APST quirk for Kioxia device - nvme-pci: allocate nvme_command within driver pdu - nvme: mark nvme_setup_passsthru() inline - nvme: centralize setting the timeout in nvme_alloc_request - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - virtio_net: fix xdp_rxq_info bug after suspend/resume - igb: Make DMA faster when CPU is active on the PCIe link - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - ice: ethtool: advertise 1000M speeds properly - afs: Fix dynamic root getattr - MIPS: Remove repetitive increase irq_err_count - x86/xen: Remove undefined behavior in setup_features() - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - udmabuf: add back sanity check - net/tls: fix tls_sk_proto_close executed repeatedly - erspan: do not assume transport header is always set - drm/msm/dp: fix connect/disconnect handled at irq_hpd - drm/msm/dp: promote irq_hpd handle to handle link training correctly - drm/msm/dp: deinitialize mainlink if link training failed - drm/msm/dp: fixes wrong connection state caused by failure of link train - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - igb: fix a use-after-free issue in igb_clean_tx_ring - tipc: fix use-after-free Read in tipc_named_reinit - tipc: simplify the finalize work queue - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - drm/sun4i: Fix crash during suspend after component bind failure - bpf: Fix request_sock leak in sk lookup helpers - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - scsi: scsi_debug: Fix zone transition to full condition - netfilter: use get_random_u32 instead of prandom - netfilter: nftables: add nft_parse_register_store() and use it - netfilter: nftables: add nft_parse_register_load() and use it - drm/msm: Fix double pm_runtime_disable() call - USB: serial: option: add Quectel RM500K module support - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Telit LE910Cx 0x1250 composition - dm mirror log: clear log bits up to BITS_PER_LONG boundary - dm era: commit metadata in postsuspend after worker stops - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - mtd: rawnand: gpmi: Fix setting busy timeout setting - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - btrfs: add error messages to all unrecognized mount options - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ALSA: hda/realtek: Add quirk for Clevo NS50PU - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek - ALC897 headset MIC no sound - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/via: Fix missing beep setup - random: quiet urandom warning ratelimit suppression message - random: schedule mix_interrupt_randomness() less often - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - serial: core: Initialize rs485 RTS polarity already on probe - tcp: drop the hash_32() part from the index calculation - tcp: dynamically allocate the perturb table used by source ports - tcp: add small random increments to the source port - tcp: use different parts of the port_offset for index and offset - tcp: add some entropy in __inet_hash_connect() - usb: gadget: u_ether: fix regression in setting fixed MAC address - zonefs: fix zonefs_iomap_begin() for reads - s390/mm: use non-quiescing sske for KVM switch to keyed guest - clk: imx8mp: fix usb_root_clk parent - powerpc/book3e: get rid of #include - igc: Enable PCIe PTM - Revert "PCI: Make pci_enable_ptm() private" - net: openvswitch: fix misuse of the cached connection on tuple changes - net/sched: act_police: more accurate MTU policing - dma-direct: don't over-decrypt memory - virtio-pci: Remove wrong address verification in vp_del_vqs() - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak - KVM: x86: Account a variety of miscellaneous allocations - KVM: arm64: Don't read a HW interrupt pending state in user context - ext4: add reserved GDT blocks check - drm/amd/display: Cap OLED brightness per max frame-average luminance - dm mirror log: round up region bitmap size to BITS_PER_LONG - serial: 8250: Store to lsr_save_flags after lsr read - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: dwc2: Fix memory leak in dwc2_hcd_init - USB: serial: io_ti: add Agilent E5805A support - USB: serial: option: add support for Cinterion MV31 with new baseline - crypto: memneq - move into lib/ - comedi: vmk80xx: fix expression for tx buffer size - mei: me: add raptor lake point S DID - i2c: designware: Use standard optional ref clock implementation - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - i2c: npcm7xx: Add check for platform_driver_register - faddr2line: Fix overlapping text section failures, the sequel - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - certs/blacklist_hashes.c: fix const confusion in certs blacklist - arm64: ftrace: consistently handle PLTs. - arm64: ftrace: fix branch range checks - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - mlxsw: spectrum_cnt: Reorder counter pools - nvme: add device name to warning in uuid_show() - nvme: use sysfs_emit instead of sprintf - drm/i915/reset: Fix error_state_read ptr + offset use - misc: atmel-ssc: Fix IRQ check in ssc_probe - tty: goldfish: Fix free_irq() on remove - Drivers: hv: vmbus: Release cpu lock in error case - i40e: Fix call trace in setup_tx_descriptors - i40e: Fix calculating the number of queue pairs - i40e: Fix adding ADQ filter to TC0 - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - pNFS: Avoid a live lock condition in pnfs_update_layout() - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - random: credit cpu and bootloader seeds by default - gpio: dwapb: Don't print error on -EPROBE_DEFER - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ALSA: hda/realtek - Add HW8326 support - scsi: pmcraid: Fix missing resource cleanup in error case - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm8962: Fix suspend while playing music - quota: Prevent memory allocation recursion while holding dq_lock - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: cs42l51: Correct minimum value for SX volume control - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs42l52: Fix TLV scales for mixer controls - dma-debug: make things less spammy under memory pressure - ASoC: nau8822: Add operation for internal PLL off and on - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() - nfsd: Replace use of rwsem with errseq_t - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config- binder: fix UAF of ref->proc caused by race condition - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() - wifi: mac80211: fix MBSSID parsing use-after-free - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - arm64: fix oops in concurrently setting insn_emulation sysctls - wifi: cfg80211: avoid nontransmitted BSS list corruption - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference - HID: roccat: Fix use-after-free in roccat_read() - wifi: cfg80211: fix BSS refcounting bugs - mm/rmap: Fix kabi broken in anon_vma - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - zonefs: fix handling of explicit_open option on mount - PCI: qcom: Fix pipe clock imbalance - md/raid0: Ignore RAID0 layout if the second zone has only one device - interconnect: Restore sync state by ignoring ipa-virt in provider count - interconnect: qcom: sc7180: Drop IP0 interconnects - powerpc/mm: Switch obsolete dssall to .long - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/bridge: analogix_dp: Support PSR-exit to disable transition - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - ixgbe: fix bcast packets Rx on VF after promisc removal - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - net: phy: dp83867: retrigger SGMII AN when link change - mmc: block: Fix CQE recovery reset success - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - cifs: fix reconnect on smb3 mount types - cifs: return errors during session setup during reconnects - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/conexant - Fix loopback issue with CX20632 - scripts/gdb: change kernel config dumping method - vringh: Fix loop descriptors check in the indirect cases - nodemask: Fix return values to be unsigned - cifs: version operations for smb20 unneeded when legacy support disabled - s390/gmap: voluntarily schedule during key setting - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - x86/cpu: Elide KCSAN for cpu_has() and friends - modpost: fix undefined behavior of is_arm_mapping_symbol() - drm/radeon: fix a possible null pointer dereference - ceph: allow ceph.dir.rctime xattr to be updatable - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - scsi: myrb: Fix up null pointer access on myrb_cleanup() - md: protect md_unregister_thread from reentrancy - watchdog: wdat_wdt: Stop watchdog when rebooting the system - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - serial: msm_serial: disable interrupts in __msm_console_write() - staging: rtl8712: fix uninit-value in r871xu_drv_init() - staging: rtl8712: fix uninit-value in usb_read8() and friends - clocksource/drivers/sp804: Avoid error on multiple instances - extcon: Modify extcon device to be created after driver data is set - misc: rtsx: set NULL intfdata when probe fails - usb: dwc2: gadget: don't reset gadget's driver->bus - sysrq: do not omit current cpu when showing backtrace of all active CPUs - USB: hcd-pci: Fully suspend across freeze/thaw cycle - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - tty: Fix a possible resource leak in icom_probe - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - lkdtm/usercopy: Expand size of "out of frame" object - iio: st_sensors: Add a local lock for protecting odr - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - drm: imx: fix compiler warning with gcc-12 - net: altera: Fix refcount leak in altera_tse_mdio_create - ip_gre: test csum_start instead of transport header - net/mlx5: fs, fail conflicting actions - net/mlx5: Rearm the FW tracer after each tracer event - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: mdio: unexport __init-annotated mdio_bus_init() - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - bpf, arm64: Clear prog->jited_len along prog->jited - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - netfilter: nf_tables: bail out early if hardware offload is not supported - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: release new hooks on unsupported flowtable flags - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: always initialize flowtable hook list in transaction - powerpc/kasan: Force thread size increase with KASAN - netfilter: nf_tables: delete flowtable hooks via transaction list - netfilter: nat: really support inet nat without l3 address - xprtrdma: treat all calls not a bcall when bc_serv is NULL - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - NFSv4: Don't hold the layoutget locks across multiple RPC calls - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - m68knommu: fix undefined reference to `_init_sp' - m68knommu: set ZERO_PAGE() to the allocated zeroed page - i2c: cadence: Increase timeout per message if necessary - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - tracing: Avoid adding tracer option before update_tracer_options - tracing: Fix sleeping function called from invalid context on RT kernel - bootconfig: Make the bootconfig.o as a normal object file - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - dmaengine: idxd: set DMA_INTERRUPT cap bit - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - tipc: check attribute length for bearer name - scsi: sd: Fix potential NULL pointer dereference - afs: Fix infinite loop found by xfstest generic/676 - gpio: pca953x: use the correct register address to do regcache sync - tcp: tcp_rtx_synack() can be called from process context - net: sched: add barrier to fix packet stuck problem for lockless qdisc - net/mlx5e: Update netdev features after changing XDP state - net/mlx5: correct ECE offset in query qp output - net/mlx5: Don't use already freed action pointer - sfc: fix wrong tx channel offset with efx_separate_tx_channels - sfc: fix considering that all channels have TX queues - nfp: only report pause frame configuration for physical device - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - riscv: read-only pages should not be writable - bpf: Fix probe read error in ___bpf_prog_run() - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - jffs2: fix memory leak in jffs2_do_fill_super - modpost: fix removing numeric suffixes - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - driver: base: fix UAF when driver_attach failed - bus: ti-sysc: Fix warnings for unbind for serial - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - serial: stm32-usart: Correct CSIZE, bits, and parity - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: sifive: Sanitize CSIZE and c_iflag - serial: sh-sci: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: digicolor-usart: Don't allow CS5-6 - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: meson: acquire port->lock in startup() - rtc: mt6397: check return value after calling platform_get_resource() - clocksource/drivers/riscv: Events are stopped during CPU suspend - soc: rockchip: Fix refcount leak in rockchip_grf_init - extcon: ptn5150: Add queue work sync before driver release - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - serial: sifive: Report actual baud base rather than fixed 115200 - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - iio: adc: sc27xx: Fine tune the scale calibration values - iio: adc: sc27xx: fix read big scale voltage not right - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - usb: typec: mux: Check dev_set_name() return value - firmware: stratix10-svc: fix a missing check on list iterator - misc: fastrpc: fix an incorrect NULL check on list iterator - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - pwm: lp3943: Fix duty calculation in case period was clamped - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - usb: musb: Fix missing of_node_put() in omap2430_probe - USB: storage: karma: fix rio_karma_init return - usb: usbip: add missing device lock on tweak configuration cmd - usb: usbip: fix a refcount leak in stub_probe() - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - tty: n_tty: Restore EOF push handling behavior - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: goldfish: Use tty_port_destroy() to destroy port - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - iio: adc: ad7124: Remove shift from scan_type - staging: greybus: codecs: fix type confusion of list iterator variable - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - init/Kconfig: Add SMP to the dependencies of QOS_SCHED - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended - tty: fix deadlock caused by calling printk() under tty_port->lock- netfilter: nf_conntrack_irc: Fix forged IP logic - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix check for block being out of directory size - ext4: make sure ext4_append() always allocates new block - ext4: check if directory block is within i_size - ext4: make variable "count" signed - iommu: Fix compliation failure caused by iommu_device_register - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - blk-iocost: don't ignore vrate_min on QD contention - !157 Enable NVMe over TCP for arm64 - arm64: openeuler_defconfig: enable nvmf tcp- KVM: arm64: Try stage2 block mapping for host device MMIO - KVM: arm64: Remove the creation time's mapping of MMIO regions - ext4: fix use-after-free in ext4_ext_shift_extents - arm64: kdump: Properly handle the 4G boundary - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" - MAINTAINERS: Add maintainer for HiSilicon PTT driver - docs: trace: Add HiSilicon PTT device driver documentation - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - spi: hisi-sfc-v3xx: add address mode check - spi: hisi-sfc-v3xx: fix potential irq race condition - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection - spi: hisi-sfc-v3xx: extend version checking compatibility - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - sched/fair: Fix kabi broken in struct cfs_rq - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - ext4: only allow test_dummy_encryption when supported - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - RDMA/rxe: Generate a completion for unsupported/invalid opcode - Revert "random: use static branch for crng_ready()" - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - bfq: Remove pointless bfq_init_rq() calls - bfq: Drop pointless unlock-lock pair - bfq: Avoid merging queues with different parents - thermal/core: Fix memory leak in the error path - thermal/core: fix a UAF bug in __thermal_cooling_device_register() - kseltest/cgroup: Make test_stress.sh work if run interactively - xfs: assert in xfs_btree_del_cursor should take into account error - xfs: consider shutdown in bmapbt cursor delete assert - xfs: restore shutdown check in mapped write fault path - xfs: fix incorrect root dquot corruption error when switching group/project quota types - xfs: sync lazy sb accounting on quiesce of read-only mounts - xfs: set inode size after creating symlink - net: ipa: fix page free in ipa_endpoint_replenish_one() - net: ipa: fix page free in ipa_endpoint_trans_release() - phy: qcom-qmp: fix reset-controller leak on probe errors - coresight: core: Fix coresight device probe failure issue - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - vdpasim: allow to enable a vq repeatedly - dt-bindings: gpio: altera: correct interrupt-cells - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - ARM: pxa: maybe fix gpio lookup tables - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - phy: qcom-qmp: fix struct clk leak on probe errors - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - gma500: fix an incorrect NULL check on list iterator - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - serial: pch: don't overwrite xmit->buf[0] by x_char - stm: ltdc: fix two incorrect NULL checks on list iterator - carl9170: tx: fix an incorrect use of list iterator - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - rtl818x: Prevent using not initialized queues - xtensa/simdisk: fix proc_read_simdisk() - hugetlb: fix huge_pmd_unshare address update - nodemask.h: fix compilation error with GCC12 - iommu/msm: Fix an incorrect NULL check on list iterator - ftrace: Clean up hash direct_functions on register failures - um: Fix out-of-bounds read in LDT setup - um: chan_user: Fix winch_tramp() return value - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - cfg80211: declare MODULE_FIRMWARE for regulatory.db - irqchip: irq-xtensa-mx: fix initial IRQ affinity - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - csky: patch_text: Fixup last cpu should be master - RDMA/hfi1: Fix potential integer multiplication overflow errors - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - ima: remove the IMA_TEMPLATE Kconfig option - media: coda: Add more H264 levels for CODA960 - media: coda: Fix reported H264 profile - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - md: fix an incorrect NULL check in md_reload_sb - md: fix an incorrect NULL check in does_sb_need_changing - drm/i915/dsi: fix VBT send packet port selection for ICL+ - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - scsi: dc395x: Fix a missing check on list iterator - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - dlm: fix missing lkb refcount handling - dlm: fix plock invalid read - s390/perf: obtain sie_block from the right address - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - PCI: qcom: Fix unbalanced PHY init on probe errors - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - tracing: Fix potential double free in create_var_ref() - ACPI: property: Release subnode properties with data nodes - ext4: avoid cycles in directory h-tree - ext4: verify dir block before splitting it - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - bfq: Update cgroup information before merging bio - bfq: Split shared queues on move between cgroups - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - iwlwifi: mvm: fix assert 1F04 upon reconfig - wifi: mac80211: fix use-after-free in chanctx code - f2fs: fix to do sanity check for inline inode - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't need inode lock for system hidden quota - f2fs: fix deadloop in foreground GC - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - perf jevents: Fix event syntax error caused by ExtSel - perf c2c: Use stdio interface if slang is not supported - i2c: rcar: fix PM ref counts in probe error paths - i2c: npcm: Handle spurious interrupts - i2c: npcm: Correct register access width - i2c: npcm: Fix timeout calculation - iommu/amd: Increase timeout waiting for GA log enablement - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - dmaengine: stm32-mdma: rework interrupt handler - dmaengine: stm32-mdma: remove GISR1 register - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Don't report errors from nfs_pageio_complete() more than once - NFS: Do not report flush errors in nfs_write_end() - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - i2c: at91: Initialize dma_buf in at91_twi_xfer() - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - cpufreq: mediatek: Unregister platform device on exit - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init - i2c: at91: use dma safe buffers - iommu/mediatek: Add list_del in mtk_iommu_remove - f2fs: fix dereference of stale list iterator after loop body - OPP: call of_node_put() on error path in _bandwidth_supported() - Input: stmfts - do not leave device disabled in stmfts_input_open - RDMA/hfi1: Prevent use of lock before it is initialized - mailbox: forward the hrtimer if not queued and under a lock - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - Input: sparcspkr - fix refcount leak in bbc_beep_probe - crypto: cryptd - Protect per-CPU resource by disabling BH. - crypto: sun8i-ss - handle zero sized sg - crypto: sun8i-ss - rework handling of IV - PCI: imx6: Fix PERST# start-up sequence - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ASoC: atmel-classd: Remove endianness flag on class d component - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - powerpc/4xx/cpm: Fix return value of __setup() handler - powerpc/idle: Fix return value of __setup() handler - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/8xx: export 'cpm_setbrg' for modules - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - dax: fix cache flush on PMD-mapped pages - drivers/base/node.c: fix compaction sysfs file leak - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - nvdimm: Allow overwrite in the presence of disabled dimms - nvdimm: Fix firmware activation deadlock scenarios - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - powerpc/fadump: fix PT_LOAD segment for boot memory area - arm: mediatek: select arch timer for mt7629 - pinctrl: bcm2835: implement hook for missing gpio-ranges - gpiolib: of: Introduce hook for missing gpio-ranges - crypto: marvell/cesa - ECB does not IV - misc: ocxl: fix possible double free in ocxl_file_register_afu - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - can: xilinx_can: mark bit timing constants as const - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: cros_ec: fix error handling in cros_ec_register() - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - PCI: dwc: Fix setting error return on MSI DMA mapping failure - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: cadence: Fix find_first_zero_bit() limit - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - ARM: dts: suniv: F1C100: fix watchdog compatible - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - net/smc: postpone sk_refcnt increment in connect() - rxrpc: Fix decision on when to generate an IDLE ACK - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix listen() setting the bar too high for the prealloc rings - hv_netvsc: Fix potential dereference of NULL pointer - net: stmmac: fix out-of-bounds access in a selftest - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/core: Use a char pointer for the cooling device name - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/drivers/bcm2711: Don't clamp temperature at zero - drm/i915: Fix CFI violation with show_dynamic_id() - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - x86/sev: Annotate stack change in the #VC handler - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - ext4: reject the 'commit' option on ext2 filesystems - media: rkvdec: h264: Fix bit depth wrap in pps packet - media: rkvdec: h264: Fix dpb_valid implementation - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: ov7670: remove ov7670_power_off from ov7670_remove - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks - m68k: math-emu: Fix dependencies of math emulation support - nvme: set dma alignment to dword - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: use inclusive language when filtering devices - Bluetooth: use inclusive language in HCI role comments - Bluetooth: LL privacy allow RPA - Bluetooth: L2CAP: Rudimentary typo fixes - Bluetooth: Interleave with allowlist scan - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - media: vsp1: Fix offset calculation for plane cropping - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - media: aspeed: Fix an error handling path in aspeed_video_probe() - scripts/faddr2line: Fix overlapping text section failures - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - ASoC: samsung: Fix refcount leak in aries_audio_probe - ASoC: samsung: Use dev_err_probe() helper - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ath11k: Don't check arvif->is_started before sending management frames - perf/amd/ibs: Use interrupt regs ip for stack unwinding - regulator: qcom_smd: Fix up PM8950 regulator configuration - Revert "cpufreq: Fix possible race in cpufreq online error path" - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - iomap: iomap_write_failed fix - media: uvcvideo: Fix missing check to determine if element is found in list - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - arm64: fix types in copy_highpage() - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - x86: Fix return value of __setup handlers - virtio_blk: fix the discard_granularity and discard_alignment queue limits - perf tools: Use Python devtools for version autodetection rather than runtime - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/msm: add missing include to msm_drv.c - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - perf tools: Add missing headers needed by util/data.h - ASoC: rk3328: fix disabling mclk on pclk probe failure - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - libbpf: Fix logic for finding matching program for CO-RE relocation - selftests/resctrl: Fix null pointer dereference on open failed - scsi: ufs: core: Exclude UECxx from SFR dump list - scsi: ufs: qcom: Fix ufs_qcom_resume() - drm/msm/dpu: adjust display_v_end for eDP and DP - of: overlay: do not break notify on NOTIFY_{OK|STOP} - fsnotify: fix wrong lockdep annotations - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - media: hantro: Empty encoder capture buffers by default - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - cpufreq: Fix possible race in cpufreq online error path - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix error handling in analogix_dp_probe - HID: elan: Fix potential double free in elan_input_configured - HID: hid-led: fix maximum brightness for Dream Cheeky - mtd: rawnand: denali: Use managed device resources - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - drbd: fix duplicate array initializer - target: remove an incorrect unmap zeroes data deduction - efi: Add missing prototype for efi_capsule_setup_info - NFC: NULL out the dev->rfkill to prevent UAF - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - scftorture: Fix distribution of short handler delays - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - drm: mali-dp: potential dereference of null pointer - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - nl80211: show SSID for P2P_GO interfaces - bpf: Fix excessive memory allocation in stack_map_alloc() - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - drm/vc4: txp: Force alpha to be 0xff if it's disabled - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: hvs: Reset muxes at probe time - drm/mediatek: Fix mtk_cec_mask() - drm/ingenic: Reset pixclock rate when parent clock rate changes - x86/delay: Fix the wrong asm constraint in delay_loop() - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - spi: qcom-qspi: Add minItems to interconnect-names - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm/edid: fix invalid EDID extension block filtering - ath9k: fix ar9003_get_eepmisc - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - dt-bindings: display: sitronix, st7735r: Fix backlight in example - RDMA/hfi1: Prevent panic when SDMA is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/powernv: fix missing of_node_put in uv_init() - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - ARM: hisi: Add missing of_node_put after of_find_compatible_node - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: versatile: Add missing of_node_put in dcscb_init - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - fat: add ratelimit to fat*_ent_bread() - powerpc/fadump: Fix fadump to work with a different endian capture kernel - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fs: jfs: fix possible NULL pointer dereference in dbFree() - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - crypto: ccree - use fine grained DMA mapping dir - PM / devfreq: rk3399_dmc: Disable edev on remove() - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - ARM: dts: s5pv210: align DMA channels with dtschema - ARM: dts: ox820: align interrupt controller node name with dtschema - IB/rdmavt: add missing locks in rvt_ruc_loopback - gfs2: use i_lock spin_lock for inode qadata - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - eth: tg3: silence the GCC 12 array-bounds warning - rxrpc, afs: Fix selection of abort codes - rxrpc: Return an error to sendmsg if call failed - m68k: atari: Make Atari ROM port I/O write macros return void - x86/microcode: Add explicit CPU vendor dependency - can: mcp251xfd: silence clang's -Wunaligned-access warning - ASoC: rt1015p: remove dependency on GPIOLIB - ASoC: max98357a: remove dependency on GPIOLIB - media: exynos4-is: Fix compile warning - net: phy: micrel: Allow probing without .driver_data - nbd: Fix hung on disconnect request if socket is closed before - ASoC: rt5645: Fix errorenous cleanup order - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - openrisc: start CPU timer early in boot - media: cec-adap.c: fix is_configuring state - media: imon: reorganize serialization - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: rga: fix possible memory leak in rga_probe - rtlwifi: Use pr_warn instead of WARN_ONCE - ipmi: Fix pr_fmt to avoid compilation issues - ipmi:ssif: Check for NULL msg when handling events and messages - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - perf/amd/ibs: Cascade pmu init functions' return value - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - net: remove two BUG() from skb_checksum_help() - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - mlxsw: Treat LLDP packets as control - mlxsw: spectrum_dcb: Do not warn about priority changes - ASoC: dapm: Don't fold register value changes into notifications - net/mlx5: fs, delete the FTE when there are no rules attached to it - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - drm: msm: fix error check return value of irq_of_parse_and_map() - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - drm/amd/pm: fix the compile warning - drm/plane: Move range check for format_count earlier - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - ath11k: disable spectral scan during spectral deinit - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: megaraid: Fix error check return value of register_chrdev() - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - mmc: jz4740: Apply DMA engine limits to maximum segment size - md/bitmap: don't set sb values if can't pass sanity check - media: cx25821: Fix the warning when removing the module - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: venus: hfi: avoid null dereference in deinit - ath9k: fix QCA9561 PA bias level - drm/amd/pm: fix double free in si_parse_power_table() - tools/power turbostat: fix ICX DRAM power numbers - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - ALSA: jack: Access input_dev under mutex - sfc: ef10: Fix assigning negative value to unsigned variable - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - rcu-tasks: Fix race in schedule and flush work - drm/komeda: return early if drm_universal_plane_init() fails. - ACPICA: Avoid cache flush inside virtual machines - x86/platform/uv: Update TSC sync state for UV5 - fbcon: Consistently protect deferred_takeover with console_lock() - ipv6: fix locking issues with loops over idev->addr_list - ipw2x00: Fix potential NULL dereference in libipw_xmit() - b43: Fix assigning negative value to unsigned variable - b43legacy: Fix assigning negative value to unsigned variable - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - btrfs: repair super block num_devices automatically - btrfs: add "0x" prefix for unsupported optional features - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - perf/x86/intel: Fix event constraints for ICL - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - parisc/stifb: Keep track of hardware path of graphics card - Fonts: Make font size unsigned in font_desc - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - cifs: when extending a file with falloc we should make files not-sparse - usb: core: hcd: Add support for deferring roothub registration - usb: dwc3: gadget: Move null pinter check to proper place - USB: new quirk for Dell Gen 2 devices - USB: serial: option: add Quectel BG95 modem - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - riscv: Fix irq_work when SMP is disabled - riscv: Initialize thread pointer before calling C functions - parisc/stifb: Implement fb_is_primary_device() - binfmt_flat: do not stop relocating GOT entries prematurely on riscv- efi: capsule-loader: Fix use-after-free in efi_capsule_write - etmem: Add a scan flag to support specified page swap-out - etmem: add swapcache reclaim to etmem - etmem: add original kernel swap enabled options - etmem: add CONFIG_ETMEM macro definition for etmem feature - config: enable CONFIG_ETMEM by default - add ETMEM feature CONFIG to mm/Kconfig - quota: Add more checking after reading from quota file - quota: Replace all block number checking with helper function - quota: Check next/prev free block number after reading from quota file - RDMA/hns: Fix gid idx issue caused by free mr - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT - scsi: libiscsi: Teardown iscsi_cls_conn gracefully - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization - scsi: iscsi: Add helper functions to manage iscsi_cls_conn - blk-mq: fix io hung due to missing commit_rqs - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Add RSB VM Exit protections - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901 - Re-add padlen to the structure alt_instr - tools headers: Remove broken definition of __LITTLE_ENDIAN - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again - objtool: Fix elf_create_undef_symbol() endianness - kvm: fix objtool relocation warning - um: Add missing apply_returns() - x86/bugs: Remove apostrophe typo - tools headers cpufeatures: Sync with the kernel sources - tools arch x86: Sync the msr-index.h copy with the kernel sources - x86/kvm: fix FASTOP_SIZE when return thunks are enabled - efi/x86: use naked RET on mixed mode call wrapper - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub - x86/xen: Fix initialisation in hypercall_page after rethunk - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted - tools/insn: Restore the relative include paths for cross building - x86/static_call: Serialize __static_call_fixup() properly - x86/speculation: Disable RRSBA behavior - x86/kexec: Disable RET on kexec - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/retbleed: Add fine grained Kconfig knobs - x86/cpu/amd: Enumerate BTC_NO - x86/common: Stamp out the stepping madness - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Fix IBRS handling after vmexit - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Convert launched argument to flags - KVM: VMX: Flatten __vmx_vcpu_run() - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - x86/speculation: Remove x86_spec_ctrl_mask - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/cpu/amd: Add Spectral Chicken - objtool: Add entry UNRET validation - x86/bugs: Do IBPB fallback check only once - x86/bugs: Add retbleed=ibpb - x86/xen: Rename SYS* entry points - objtool: Update Retpoline validation - intel_idle: Disable IBRS during long idle - x86/bugs: Report Intel retbleed vulnerability - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/entry: Add kernel IBRS implementation - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Report AMD retbleed vulnerability - x86: Add magic AMD return-thunk - objtool: Treat .text.__x86.* as noinstr - x86: Use return-thunk in asm code - x86/sev: Avoid using __x86_return_thunk - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/kvm: Fix SETcc emulation for return thunks - x86/bpf: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86,static_call: Use alternative RET encoding - objtool: skip non-text sections when adding return-thunk sites - x86,objtool: Create .return_sites - x86: Undo return-thunk damage - x86/retpoline: Use -mfunction-return - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Cleanup some #ifdefery - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/kvm/vmx: Make noinstr clean - x86/realmode: build with -D__DISABLE_EXPORTS - x86/entry: Remove skip_r11rcx - objtool: Fix SLS validation for kcov tail-call replacement - crypto: x86/poly1305 - Fixup SLS - objtool: Default ignore INT3 for unreachable - kvm/emulate: Fix SETcc emulation function offsets with SLS - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - x86: Add straight-line-speculation mitigation - objtool: Add straight-line-speculation validation - x86/alternative: Relax text_poke_bp() constraint - x86: Fix objtool build warning - x86: Prepare inline-asm for straight-line-speculation - x86: Prepare asm files for straight-line-speculation - x86/lib/atomic64_386_32: Rename things - bpf,x86: Respect X86_FEATURE_RETPOLINE* - bpf,x86: Simplify computing label offsets - x86/alternative: Implement .retpoline_sites support - x86/retpoline: Create a retpoline thunk array - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h - x86/asm: Fixup odd GEN-for-each-reg.h usage - x86/asm: Fix register order - x86/retpoline: Remove unused replacement symbols - objtool,x86: Replace alternatives with .retpoline_sites - objtool: Explicitly avoid self modifying code in .altinstr_replacement - objtool: Classify symbols - objtool: Handle __sanitize_cov*() tail calls - objtool: Introduce CFI hash - objtool: Make .altinstructions section entry size consistent - objtool: Remove reloc symbol type checks in get_alt_entry() - objtool: print out the symbol type when complaining about it - objtool: Teach get_alt_entry() about more relocation types - objtool: Don't make .altinstructions writable - objtool/x86: Ignore __x86_indirect_alt_* symbols - objtool: Only rewrite unconditional retpoline thunk calls - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() - x86/alternative: Optimize single-byte NOPs at an arbitrary position - objtool: Support asm jump tables - objtool/x86: Rewrite retpoline thunk calls - objtool: Skip magical retpoline .altinstr_replacement - objtool: Cache instruction relocs - objtool: Keep track of retpoline call sites - objtool: Add elf_create_undef_symbol() - objtool: Extract elf_symbol_add() - objtool: Extract elf_strtab_concat() - objtool: Create reloc sections implicitly - objtool: Add elf_create_reloc() helper - objtool: Rework the elf_rebuild_reloc_section() logic - objtool: Handle per arch retpoline naming - objtool: Correctly handle retpoline thunk calls - x86/retpoline: Simplify retpolines - x86/alternatives: Optimize optimize_nops() - x86: Add insn_decode_kernel() - x86/alternative: Use insn_decode() - x86/insn: Add an insn_decode() API - x86/insn: Add a __ignore_sync_check__ marker - x86/insn: Rename insn_decode() to insn_decode_from_regs() - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() - x86/alternative: Support ALTERNATIVE_TERNARY - x86/alternative: Support not-feature - x86/alternative: Merge include files - x86/xen: Support objtool vmlinux.o validation in xen-head.S - x86/xen: Support objtool validation in xen-asm.S - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC - objtool: Assume only ELF functions do sibling calls - objtool: Support retpoline jump detection for vmlinux.o - objtool: Support stack layout changes in alternatives - objtool: Add 'alt_group' struct - objtool: Refactor ORC section generation - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S- netfilter: nf_tables: disallow binding to already bound chain - netfilter: nf_conntrack_irc: Tighten matching on DCC message - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE - video: fbdev: i740fb: Error out if 'pixclock' equals zero - block: fix the problem of io_ticks becoming smaller - KVM: x86: do not report a vCPU as preempted outside instruction boundaries - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write- netfilter: nf_tables: do not allow RULE_ID to refer to another chain - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table - netfilter: nf_tables: do not allow SET_ID to refer to another table- bpf, cgroup: Fix kernel BUG in purge_effective_progs - bpf: Don't use tnum_range on array range checking for poke descriptors - configfs: fix a race in configfs_lookup() - configfs: fold configfs_attach_attr into configfs_lookup - configfs: simplify the configfs_dirent_is_ready - configfs: return -ENAMETOOLONG earlier in configfs_lookup - af_key: Do not call xfrm_probe_algs in parallel - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: drop tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drivers/tty/, stop using tty_schedule_flip() - pipe: fix kabi for poll_usage in struct pipe_inode_info - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes - bpf: Fix potential array overflow in bpf_trampoline_get_progs() - NFSD: Fix possible sleep during nfsd4_release_lockowner() - NFS: Memory allocation failures are not server fatal errors - docs: submitting-patches: Fix crossref to 'The canonical patch format' - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - tpm: Fix buffer access in tpm2_get_tpm_pt() - HID: multitouch: add quirks to enable Lenovo X12 trackpoint - HID: multitouch: Add support for Google Whiskers Touchpad - raid5: introduce MD_BROKEN - dm verity: set DM_TARGET_IMMUTABLE feature flag - dm stats: add cond_resched when looping over entries - dm crypt: make printing of the key constant-time - dm integrity: fix error code in dm_integrity_ctr() - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries - Bluetooth: hci_qca: Use del_timer_sync() before freeing - zsmalloc: fix races between asynchronous zspage free and page migration - crypto: ecrdsa - Fix incorrect use of vli_cmp - crypto: caam - fix i.MX6SX entropy delay value - x86, kvm: use correct GFP flags for preemption disabled - x86/kvm: Alloc dummy async #PF token outside of raw spinlock - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator - netfilter: conntrack: re-fetch conntrack after insertion - crypto: drbg - make reseeding from get_random_bytes() synchronous - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - prepare for more fine-grained tracking of seeding state - lib/crypto: add prompts back to crypto libraries - exfat: check if cluster num is valid - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - xfs: detect overflows in bmbt records - net: ipa: compute proper aggregation limit - assoc_array: Fix BUG_ON during garbage collect - cfg80211: set custom regdomain after wiphy registration - pipe: Fix missing lock in pipe_resize_ring() - pipe: make poll_usage boolean and annotate its access - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging - net: ftgmac100: Disable hardware checksum on AST2600 - nfc: pn533: Fix buggy cleanup order - net: af_key: check encryption module availability consistency - percpu_ref_init(): clean ->percpu_count_ref on failure - pinctrl: sunxi: fix f1c100s uart2 function- net: fix sk_wmem_schedule() and sk_rmem_schedule() errors - KVM: arm64: Use generic KVM xfer to guest work function - entry: KVM: Allow use of generic KVM entry w/o full generic support - KVM: arm64: Record number of signal exits as a vCPU stat - VFS: Rolling Back the fmode macro definition and structure members - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback - Revert "NFS: Use of mapping_set_error() results in spurious errors" - random: Fix kabi change of get_random_bytes() - random: Fix kabi change due to enum cpuhp_state - ALSA: ctxfi: Add SB046x PCI ID - random: check for signals after page of pool writes - random: wire up fops->splice_{read,write}_iter() - random: convert to using fops->write_iter() - random: convert to using fops->read_iter() - random: unify batched entropy implementations - random: move randomize_page() into mm where it belongs - random: move initialization functions out of hot pages - random: make consistent use of buf and len - random: use proper return types on get_random_{int,long}_wait() - random: remove extern from functions in header - random: use static branch for crng_ready() - random: credit architectural init the exact amount - random: handle latent entropy and command line from random_init() - random: use proper jiffies comparison macro - random: remove ratelimiting for in-kernel unseeded randomness - random: move initialization out of reseeding hot path - random: avoid initializing twice in credit race - random: use symbolic constants for crng_init states - siphash: use one source of truth for siphash permutations - random: help compiler out with fast_mix() by using simpler arguments - random: do not use input pool from hard IRQs - random: order timer entropy functions below interrupt functions - random: do not pretend to handle premature next security model - random: use first 128 bits of input as fast init - random: do not use batches when !crng_ready() - random: insist on random_get_entropy() existing in order to simplify - xtensa: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - arm: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - riscv: use fallback for random_get_entropy() instead of zero - m68k: use fallback for random_get_entropy() instead of zero - timekeeping: Add raw clock fallback for random_get_entropy() - powerpc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - ia64: define get_cycles macro for arch-override - init: call time_init() before rand_initialize() - random: fix sysctl documentation nits - random: document crng_fast_key_erasure() destination possibility - random: make random_get_entropy() return an unsigned long - random: allow partial reads if later user copies fail - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: check for signal_pending() outside of need_resched() check - random: do not allow user to keep crng key around on stack - random: do not split fast init input in add_hwgenerator_randomness() - random: mix build-time latent entropy into pool at init - random: re-add removed comment about get_random_{u32,u64} reseeding - random: treat bootloader trust toggle the same way as cpu trust toggle - random: skip fast_init if hwrng provides large chunk of entropy - random: check for signal and try earlier when generating entropy - random: reseed more often immediately after booting - random: make consistent usage of crng_ready() - random: use SipHash as interrupt entropy accumulator - random: replace custom notifier chain with standard one - random: don't let 644 read-only sysctls be written to - random: give sysctl_random_min_urandom_seed a more sensible value - random: do crng pre-init loading in worker rather than irq - random: unify cycles_t and jiffies usage and types - random: cleanup UUID handling - random: only wake up writers after zap if threshold was passed - random: round-robin registers as ulong, not u32 - random: clear fast pool, crng, and batches in cpuhp bring up - random: pull add_hwgenerator_randomness() declaration into random.h - random: check for crng_init == 0 in add_device_randomness() - random: unify early init crng load accounting - random: do not take pool spinlock at boot - random: defer fast pool mixing to worker - random: rewrite header introductory comment - random: group sysctl functions - random: group userspace read/write functions - random: group entropy collection functions - random: group entropy extraction functions - random: group crng functions - random: group initialization wait functions - random: remove whitespace and reorder includes - random: remove useless header comment - random: introduce drain_entropy() helper to declutter crng_reseed() - random: deobfuscate irq u32/u64 contributions - random: add proper SPDX header - random: remove unused tracepoints - random: remove ifdef'd out interrupt bench - random: tie batched entropy generation to base_crng generation - random: fix locking for crng_init in crng_reseed() - random: zero buffer after reading entropy from userspace - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: make more consistent use of integer types - random: use hash function for crng_slow_load() - random: use simpler fast key erasure flow on per-cpu keys - random: absorb fast pool into input pool after fast load - random: do not xor RDRAND when writing into /dev/random - random: ensure early RDSEED goes through mixer on init - random: inline leaves of rand_initialize() - random: get rid of secondary crngs - random: use RDSEED instead of RDRAND in entropy extraction - random: fix locking in crng_fast_load() - random: remove batched entropy locking - random: remove use_input_pool parameter from crng_reseed() - random: make credit_entropy_bits() always safe - random: always wake up entropy writers after extraction - random: use linear min-entropy accumulation crediting - random: simplify entropy debiting - random: use computational hash for entropy extraction - random: only call crng_finalize_init() for primary_crng - random: access primary_pool directly rather than through pointer - random: continually use hwgenerator randomness - random: simplify arithmetic function flow in account() - random: selectively clang-format where it makes sense - random: access input_pool_data directly rather than through pointer - random: cleanup fractional entropy shift constants - random: prepend remaining pool constants with POOL_ - random: de-duplicate INPUT_POOL constants - random: remove unused OUTPUT_POOL constants - random: rather than entropy_store abstraction, use global - random: remove unused extract_entropy() reserved argument - random: remove incomplete last_data logic - random: cleanup integer types - random: cleanup poolinfo abstraction - random: fix typo in comments - random: don't reset crng_init_cnt on urandom_read() - random: avoid superfluous call to RDRAND in CRNG extraction - random: early initialization of ChaCha constants - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: harmonize "crng init done" messages - random: mix bootloader randomness into pool - random: do not re-init if crng_reseed completes before primary init - random: do not sign extend bytes for rotation when mixing - random: use BLAKE2s instead of SHA1 in extraction - random: remove unused irq_flags argument from add_interrupt_randomness() - random: document add_hwgenerator_randomness() with other input functions - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI - lib/crypto: sha1: re-roll loops to reduce code size - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: blake2s: include as built-in - crypto: blake2s - include instead of - crypto: blake2s - adjust include guard naming - crypto: blake2s - add comment for blake2s_state fields - crypto: blake2s - optimize blake2s initialization - crypto: blake2s - share the "shash" API boilerplate code - crypto: blake2s - move update and final logic to internal/blake2s.h - crypto: blake2s - remove unneeded includes - crypto: x86/blake2s - define shash_alg structs using macros - crypto: blake2s - define shash_alg structs using macros - crypto: lib/blake2s - Move selftest prototype into header file - MAINTAINERS: add git tree for random.c - MAINTAINERS: co-maintain random.c - random: remove dead code left over from blocking pool - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - ACPI: sysfs: Fix BERT error region memory mapping - ACPI: sysfs: Make sparse happy about address space in use - media: vim2m: initialize the media device earlier - media: vim2m: Register video device after setting up internals - KVM: x86: Properly handle APF vs disabled LAPIC situation - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - Revert "alinux: random: speed up the initialization of module" - !71 xfs: backport 2 patches from upstream - xfs: fix inode reservation space for removing transaction - xfs: fix comment for start time value of inode with bigtime enabled- module: check for exit sections in layout_sections() instead of module_init_section() - afs: Fix afs_getattr() to refetch file status if callback break occurred - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - Input: ili210x - fix reset timing - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs - net: atlantic: verify hw_head_ lies within TX buffer ring - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: fix "frag[0] not initialized" - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - selftests: add ping test with ping_group_range tuned - nl80211: validate S1G channel width - mac80211: fix rx reordering with non explicit / psmp ack policy - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - perf bench numa: Address compiler error on s390 - gpio: mvebu/pwm: Refuse requests with inverted polarity - gpio: gpio-vf610: do not touch other bits when set the target bit - riscv: dts: sifive: fu540-c000: align dma node name with dtschema - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - igb: skip phy status check where unavailable - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - net: af_key: add check for pfkey_broadcast in function pfkey_process - net/mlx5e: Properly block LRO when XDP is enabled - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - net/qla3xxx: Fix a test in ql_reset_work() - clk: at91: generated: consider range when calculating best rate - ice: fix possible under reporting of ethtool Tx and Rx statistics - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: systemport: Fix an error handling path in bcm_sysport_probe() - net/sched: act_pedit: sanitize shift argument before usage - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm - net: macb: Increment rx bd head after allocating skb and buffer - net: ipa: record proper RX transaction count - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - libceph: fix potential use-after-free on linger ping and resends - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - arm64: mte: Ensure the cleared tags are visible before setting the PTE - arm64: paravirt: Use RCU read locks to guard stolen_time - KVM: x86/mmu: Update number of zapped pages even if page list is stable - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - Fix double fget() in vhost_net_set_backend() - selinux: fix bad cleanup on error in hashtab_duplicate() - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - ALSA: wavefront: Proper check of get_user() error - ALSA: usb-audio: Restore Rane SL-1 quirk - nilfs2: fix lockdep warnings during disk space reclamation - nilfs2: fix lockdep warnings in page operations for btree nodes - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - drbd: remove usage of list iterator variable after loop - MIPS: lantiq: check the return value of kzalloc() - fs: fix an infinite loop in iomap_fiemap - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - nvme-multipath: fix hang when disk goes live over reconnect - tools/virtio: compile with -pthread - vhost_vdpa: don't setup irq offloading when irq_num < 0 - s390/pci: improve zpci_dev reference counting - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - crypto: x86/chacha20 - Avoid spurious jumps to other functions - crypto: stm32 - fix reference leak in stm32_crc_remove - rtc: sun6i: Fix time overflow handling - gfs2: Disable page faults during lockless buffered reads - nvme-pci: add quirks for Samsung X5 SSDs - Input: stmfts - fix reference leak in stmfts_input_open - Input: add bounds checking to input_set_capability() - um: Cleanup syscall_handler_t definition/cast, fix warning - rtc: pcf2127: fix bug when reading alarm registers - rtc: fix use-after-free on device removal - igc: Update I226_K device ID - igc: Remove phy->type checking - igc: Remove _I_PHY_ID checking - io_uring: always grab file table for deferred statx - usb: gadget: fix race when gadget driver register via ioctl- crypto: arm64/poly1305 - fix a read out-of-bound - posix-cpu-timers: Cleanup CPU timers before freeing them during exec - net_sched: cls_route: remove from list when handle is 0 - tty: serial: 8250: 8250_port: Move prototypes to shared location - mm/slub: add missing TID updates on slab deactivation - signal/seccomp: Dump core when there is only one live thread - netfilter: nft_compat: use nfnetlink_unicast() - netfilter: use nfnetlink_unicast() - dm-mpath: fix UAF in multipath_message() - tun: avoid double free in tun_free_netdev - efi/libstub: arm64: Fix KASLR and memmap= collision - efi/libstub: arm64: support strchr function for EFI stub - Revert "mm/page_cache_limit: add pagecache limit proc interface" - Revert "mm/page_cache_limit: create kernel thread for page cache limit" - Revert "mm/page_cache_limit: calculate reclaim pages for each node" - Revert "mm/page_cache_limit: shrink page cache" - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug" - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache" - Revert "mm/page_cache_limit: add support for droping caches for target node" - drivers/perf: hisi: Add Support for CPA PMU - drivers/perf: hisi: Associate PMUs in SICL with CPUs online - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU - SUNRPC: Fix fall-through warnings for Clang - usb: gadget: uvc: allow for application to cleanly shutdown - usb: gadget: uvc: rename function to be more consistent - ping: fix address binding wrt vrf - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: Fix race condition on link status change - SUNRPC: Don't call connect() more than once on a TCP socket - SUNRPC: Prevent immediate close+reconnect - SUNRPC: Clean up scheduling of autoclose - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - net: atlantic: always deep reset on pm op, fixing up my null deref regression - i40e: i40e_main: fix a missing check on list iterator - drm/nouveau/tegra: Stop using iommu_present() - ceph: fix setting of xattrs on async created inodes - serial: 8250_mtk: Fix register address for XON/XOFF character - serial: 8250_mtk: Fix UART_EFR register address - slimbus: qcom: Fix IRQ check in qcom_slim_probe - USB: serial: option: add Fibocom MA510 modem - USB: serial: option: add Fibocom L610 modem - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: pl2303: add device id for HP LM930 Display - usb: typec: tcpci_mt6360: Update for BMC PHY setting - usb: typec: tcpci: Don't skip cleanup in .remove() on error - usb: cdc-wdm: fix reading stuck on device close - tty: n_gsm: fix mux activation issues in gsm_config() - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - firmware_loader: use kernel credentials when reading firmware - tcp: resalt the secret every 10 seconds - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation - s390: disable -Warray-bounds - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: max98090: Reject invalid values in custom control put() - hwmon: (f71882fg) Fix negative temperature - gfs2: Fix filesystem block deallocation for short writes - tls: Fix context leak on tls_device_down - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - net/sched: act_pedit: really ensure the skb is writable - s390/lcs: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/ctcm: fix variable dereferenced before check - selftests: vm: Makefile: rename TARGETS to VMTARGETS - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - dim: initialize all struct fields - ionic: fix missing pci_release_regions() on error in ionic_probe() - nfs: fix broken handling of the softreval mount option - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - net: sfc: fix memory leak due to ptp channel - sfc: Use swap() instead of open coding it - netlink: do not reset transport header in netlink_recvmsg() - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - ipv4: drop dst in multicast routing path - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - net: Fix features skip in for_each_netdev_feature() - mac80211: Reset MBSSID parameters upon connection - hwmon: (tmp401) Add OF device ID table - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - batman-adv: Don't skb_split skbuffs with frag_list - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - !48 Fix kabi header file being repeatedly referenced by the same file - scsi: mpt3sas: Transition IOC to Ready state during shutdown - Fix kabi header file being repeatedly referenced by the same file- x86: Clear .brk area at early boot- netfilter: nf_queue: do not allow packet truncation below transport header offset - io_uring: use separate list entry for iopoll requests - io_uring: add missing item types for various requests - io_uring:drop identity before creating a private one - io-wq: Switch io_wqe_worker's fs before releasing request - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: fix missing cache flush for all tail pages of compound page - Bluetooth: Fix the creation of hdev->name - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL - nfp: bpf: silence bitwise vs. logical OR warning - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - regulator: consumer: Add missing stubs to regulator/consumer.h - MIPS: Use address-of operator on section symbols- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - RDMA/hns: Recover 1bit-ECC error of RAM on chip - RDMA/hns: Refactor the abnormal interrupt handler function - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix the wrong type of return value of the interrupt handler - RDMA/hns: Remove unused abnormal interrupt of type RAS - ext4: Fix race when reusing xattr blocks - ext4: Unindent codeblock in ext4_xattr_block_set() - ext4: Remove EA inode entry from mbcache on inode eviction - mbcache: Add functions to delete entry if unused - mbcache: Don't reclaim used entries - md/raid6: refactor raid5_read_one_chunk - md/raid10: enable io accounting - md/raid1: enable io accounting - md/raid1: rename print_msg with r1bio_existed - md/raid5: avoid redundant bio clone in raid5_read_one_chunk - md: add io accounting for raid0 and raid5 - mmc: rtsx: add 74 Clocks in power on flow - PCI: aardvark: Fix reading MSI interrupt number - PCI: aardvark: Clear all MSIs at setup - dm: interlock pending dm_io and dm_wait_for_bios_completion - rcu: Apply callbacks processing time limit only on softirq - rcu: Fix callbacks processing time limit retaining cond_resched() - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - KVM: x86: Do not change ICR on write to APIC_SELF_IPI - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - btrfs: always log symlinks in full mode - smsc911x: allow using IRQ0 - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer - bnxt_en: Fix unnecessary dropping of RX packets - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational - net: emaclite: Add error handling for of_address_to_resource() - net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() - NFSv4: Don't invalidate inode attributes on delegation return - RDMA/siw: Fix a condition race issue in MPA request processing - selftests/seccomp: Don't call read() on TTY from background pgrp - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix trust state reset in reload - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - hwmon: (adt7470) Fix warning on module removal - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - can: grcan: only use the NAPI poll budget for RX - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: use ofdev->dev when allocating DMA memory - can: isotp: remove re-binding of bound socket - can: grcan: grcan_close(): fix deadlock - s390/dasd: Fix read inconsistency for ESE DASD devices - s390/dasd: Fix read for ESE with blksize < 4k - s390/dasd: prevent double format of tracks for ESE devices - s390/dasd: fix data corruption for ESE devices - ASoC: meson: Fix event generation for AUI CODEC mux - ASoC: meson: Fix event generation for G12A tohdmi mux - ASoC: meson: Fix event generation for AUI ACODEC mux - ASoC: wm8958: Fix change notifications for DSP controls - ASoC: da7219: Fix change notifications for tone generator frequency - genirq: Synchronize interrupt thread startup - net: stmmac: disable Split Header (SPH) for Intel platforms - firewire: core: extend card->lock in fw_core_handle_bus_reset - firewire: remove check of list iterator against head past the loop body - firewire: fix potential uaf in outbound_phy_packet_callback() - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT - iommu/vt-d: Calculate mask for non-aligned flushes - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - mmc: core: Set HS clock speed before sending HS CMD13 - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - parisc: Merge model and model name into one line in /proc/cpuinfo - MIPS: Fix CP0 counter erratum detection for R4k CPUs - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix insufficient txframe size - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix restart handling via CLD command - perf symbol: Update symbols__fixup_end() - perf symbol: Pass is_kallsyms to symbols__fixup_end() - x86/cpu: Load microcode during restore_processor_state() - thermal: int340x: Fix attr.show callback prototype - net: ethernet: stmmac: fix write to sgmii_adapter_base - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - zonefs: Clear inode information flags on inode creation - zonefs: Fix management of open zones - powerpc/perf: Fix 32bit compile - drivers: net: hippi: Fix deadlock in rr_close() - cifs: destage any unwritten data to the server before calling copychunk_write - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - ASoC: wm8731: Disable the regulator when probing fails - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - tcp: fix F-RTO may not work correctly when receiving DSACK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - ibmvnic: fix miscellaneous checks - ixgbe: ensure IPsec VF<->PF compatibility - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - bnx2x: fix napi API usage sequence - tls: Skip tls_append_frag on zero copy size - drm/amd/display: Fix memory leak in dcn21_clock_source_create - drm/amdkfd: Fix GWS queue count - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - net: phy: marvell10g: fix return value on error - net: bcmgenet: hide status block before TX timestamping - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - tcp: make sure treq->af_specific is initialized - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre: Make o_seqno start from 0 in native mode - net/smc: sync err code when tcp connection was refused - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - pinctrl: pistachio: fix use of irq_of_parse_and_map() - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - ARM: dts: imx6ull-colibri: fix vqmmc regulator - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - wireguard: device: check for metadata_dst with skb_valid_dst() - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: rockchip: fix RK3308 pinmux bits - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - mtd: rawnand: Fix return value check of wait_for_completion_timeout - pinctrl: mediatek: moore: Fix build error - ipvs: correctly print the memory size of ip_vs_conn_tab - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: Fix mmc order for omap3-gta04 - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - USB: Fix xhci event ring dequeue pointer ERDP update issue - mtd: rawnand: fix ecc parameters for mt7622 - iio:imu:bmi160: disable regulator in error path - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - video: fbdev: udlfb: properly check endpoint type - iocost: don't reset the inuse weight of under-weighted debtors - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - riscv: patch_text: Fixup last cpu should be master - hex2bin: fix access beyond string end - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - arch_topology: Do not set llc_sibling if llc_id is invalid - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - serial: 8250: Also set sticky MCR bits in console restoration - serial: imx: fix overrun interrupts in DMA mode - usb: phy: generic: Get the vbus supply - usb: cdns3: Fix issue for clear halt endpoint - usb: dwc3: gadget: Return proper request status - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: typec: ucsi: Fix role swapping - usb: typec: ucsi: Fix reuse of completion structure - usb: misc: fix improper handling of refcount in uss720_probe() - iio: imu: inv_icm42600: Fix I2C init possible nack - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: dac: ad5446: Fix read_raw not returning set value - iio: dac: ad5592r: Fix the missing return value. - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - xhci: stop polling roothubs after shutdown - xhci: Enable runtime PM on second Alderlake controller - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: quirks: add STRING quirk for VCOM device - USB: quirks: add a Realtek card reader - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - lightnvm: disable the subsystem- lockdown: Fix kexec lockdown bypass with ima policy - fbmem: Check virtual screen sizes in fb_set_var() - fbcon: Prevent that screen size is smaller than font size - fbcon: Disallow setting font bigger than screen size - inotify: show inotify mask flags in proc fdinfo - block: prevent lockdep false positive warning about 'bd_mutex' - block: fix that part scan is disabled in device_add_disk() - block: Fix warning in bd_link_disk_holder() - ucounts: add missing data type changes - bpf: Don't redirect packets with invalid pkt_len - Revert "net: micrel: fix KS8851_MLL Kconfig" - block/compat_ioctl: fix range check in BLKGETSIZE - staging: ion: Prevent incorrect reference counting behavour - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - can: isotp: stop timeout monitoring when no first frame was sent - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4, doc: fix incorrect h_reserved size - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4: fix fallocate to use file_modified to update permissions consistently - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - powerpc/perf: Fix power9 event alternatives - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - KVM: PPC: Fix TCE handling for VFIO - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - sched/pelt: Fix attach_entity_load_avg() corner case - arm_pmu: Validate single/group leader events - ARC: entry: fix syscall_trace_exit argument - e1000e: Fix possible overflow in LTR decoding - ASoC: soc-dapm: fix two incorrect uses of list iterator - gpio: Request interrupts after IRQ is initialized - openvswitch: fix OOB access in reserve_sfa_size() - xtensa: fix a7 clobbering in coprocessor context load/store - xtensa: patch_text: Fixup last cpu should be master - net: atlantic: invert deep par in pm functions, preventing null derefs - dma: at_xdmac: fix a missing check on list iterator - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - mm, hugetlb: allow for "high" userspace addresses - EDAC/synopsys: Read the error count from the correct register - nvme-pci: disable namespace identifiers for Qemu controllers - nvme: add a quirk to disable namespace identifiers - stat: fix inconsistency between struct stat and struct compat_stat - scsi: qedi: Fix failed disconnect handling - net: macb: Restart tx only if queue pointer is lagging - drm/msm/mdp5: check the return of kzalloc() - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - mt76: Fix undefined behavior due to shift overflowing the constant - net: atlantic: Avoid out-of-bounds indexing - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - vxlan: fix error return code in vxlan_fdb_append - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - reset: tegra-bpmp: Restore Handle errors in BPMP response - ARM: vexpress/spc: Avoid negative array index when !SMP - arm64: mm: fix p?d_leaf() - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: add RO check for wq max_batch_size write - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - netlink: reset network and mac headers in netlink_dump() - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6 - ipv6: make ip6_rt_gc_expire an atomic_t - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - net/sched: cls_u32: fix possible leak in u32_init_knode() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - net/packet: fix packet_sock xmit return value checking - net/smc: Fix sock leak when release after smc_shutdown() - rxrpc: Restore removed timer deletion - igc: Fix BUG: scheduling while atomic - igc: Fix infinite loop in release_swfw_sync - esp: limit skb_page_frag_refill use to a single page - spi: spi-mtk-nor: initialize spi controller after resume - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ALSA: usb-audio: Clear MIDI port active flag after draining - gfs2: assign rgrp glock before compute_bitstructs - perf tools: Fix segfault accessing sample_id xyarray - tracing: Dump stacktrace trigger to the corresponding instance - mm: page_alloc: fix building error on -Werror=array-compare - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead- KEYS: Fix mistaken sizeof call in pgp_key_generate_id - KEYS: Add safe guard against faulty PGP key - KEYS: Fix error path return value in pgp_generate_fingerprint - block: fix mismatch size for flush_rq - crypto: hisilicon/sec - don't sleep when in softirq - xen/arm: Fix race in RB-tree based P2M accounting - nbd: fix io hung while disconnecting device - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - filemap: Correct the conditions for marking a folio as accessed - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()" - net: rose: fix UAF bugs caused by timer handler - nbd: fix race between nbd_alloc_config() and module removal - nbd: call genl_unregister_family() first in nbd_cleanup() - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default - Driver for Zhaoxin CPU core temperature monitoring - scsi: iscsi: fix kabi broken in struct iscsi_transport - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn - scsi: iscsi: Fix unbound endpoint error handling - scsi: iscsi: Fix endpoint reuse regression - dma-direct: avoid redundant memory sync for swiotlb - timers: Fix warning condition in __run_timers() - i2c: pasemi: Wait for write xfers to finish - smp: Fix offline cpu check in flush_smp_call_function_queue() - dm integrity: fix memory corruption when tag_size is less than digest size - ARM: davinci: da850-evm: Avoid NULL pointer dereference - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - genirq/affinity: Consider that CPUs on nodes can be unbalanced - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - drm/amd/display: don't ignore alpha property on pre-multiplied mode - ipv6: fix panic when forwarding a pkt with no in6 dev - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - btrfs: mark resumed async balance as writing - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - ath9k: Fix usage of driver-private space in tx_info - ath9k: Properly clear TX status area before reporting to mac80211 - gcc-plugins: latent_entropy: use /dev/urandom - memory: renesas-rpc-if: fix platform-device leak in error path - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - mm: fix unexpected zeroed page mapping with zram swap - mm, page_alloc: fix build_zonerefs_node() - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - drivers: net: slip: fix NPD bug in sl_tx_timeout() - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drm/amd/display: Fix allocate_mst_payload assert on resume - drm/amd/display: Revert FEC check in validation - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - net: axienet: setup mdio unconditionally - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - arm64: alternatives: mark patch_alternative() as `noinstr` - regulator: wm8994: Add an off-on delay for WM8994 variant - gpu: ipu-v3: Fix dev_dbg frequency output - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - net: micrel: fix KS8851_MLL Kconfig - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - scsi: lpfc: Fix queue failures when recovering from PCI parity error - scsi: target: tcmu: Fix possible page UAF - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - drm/amdkfd: Check for potential null return of kmalloc_array() - drm/amdgpu/vcn: improve vcn dpg stop procedure - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amd/display: Update VTEM Infopacket definition - drm/amd/display: FEC check in timing validation - drm/amd/display: fix audio format not updated after edid updated - btrfs: do not warn for free space inode in cow_file_range - btrfs: fix fallocate to use file_modified to update permissions consistently - drm/amd: Add USBC connector ID - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - dm mpath: only use ktime_get_ns() in historical selector - cifs: potential buffer overflow in handling symlinks - nfc: nci: add flush_workqueue to prevent uaf - perf tools: Fix misleading add event PMU debug message - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set - sctp: Initialize daddr on peeled off socket - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix in-kernel conn failure handling - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() - scsi: iscsi: Use system_unbound_wq for destroy_work - scsi: iscsi: Force immediate failure during shutdown - scsi: iscsi: Stop queueing during ep_disconnect - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - drm/msm: Fix range size vs end confusion - cfg80211: hold bss_lock while updating nontrans_list - net/sched: taprio: Check if socket flags are valid - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net: dsa: felix: suppress -EPROBE_DEFER errors - net/sched: fix initialization order when updating chain 0 head - mlxsw: i2c: Fix initialization error flow - net: mdio: Alphabetically sort header inclusion - gpiolib: acpi: use correct format characters - veth: Ensure eth header is in skb's linear part - SUNRPC: Fix the svc_deferred_event trace class - media: rockchip/rga: do proper error checking in probe - firmware: arm_scmi: Fix sorting of retrieved clock rates - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - drm/msm: Add missing put_task_struct() in debugfs path - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - ACPI: processor idle: Check for architectural support for LPI - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit - Revert "powerpc: Fix virt_addr_valid() check" - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - irqchip/gic, gic-v3: Prevent GSI to SGI translations - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() - arm64: module: remove (NOLOAD) from linker script - selftests: cgroup: Test open-time cgroup namespace usage for migration checks - selftests: cgroup: Test open-time credential usage for migration checks - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 - selftests/cgroup: Fix build on older distros - mm: don't skip swap entry even if zap_details specified - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - tools build: Filter out options and warnings not supported by clang - perf python: Fix probing for some clang command line options - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 - drm/amdkfd: Create file descriptor after client is added to smi_clients list - drm/nouveau/pmu: Add missing callbacks for Tegra devices - drm/amdgpu/smu10: fix SoC/fclk units in auto mode - irqchip/gic-v3: Fix GICR_CTLR.RWP polling - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - ata: sata_dwc_460ex: Fix crash due to OOB write - gpio: Restrict usage of GPIO chip irq members before initialization - RDMA/hfi1: Fix use-after-free bug for mm struct - arm64: patch_text: Fixup last cpu should be master - btrfs: prevent subvol with swapfile from being deleted - btrfs: fix qgroup reserve overflow the qgroup limit - x86/speculation: Restore speculation related MSRs during S3 resume - x86/pm: Save the MSR validity status at context setup - mm/mempolicy: fix mpol_new leak in shared_policy_replace - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - lz4: fix LZ4_decompress_safe_partial read out of bound - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete - mmc: mmci: stm32: correctly check all elements of sg list - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - arm64: Add part number for Arm Cortex-A78AE - perf session: Remap buf if there is no space for event - perf tools: Fix perf's libperf_print callback - perf: arm-spe: Fix perf report --mem-mode - iommu/omap: Fix regression in probe for NULL pointer dereference - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() - SUNRPC: Handle low memory situations in call_status() - SUNRPC: Handle ENOMEM in call_transmit_status() - io_uring: don't touch scm_fp_list after queueing skb - drbd: Fix five use after free bugs in get_initial_state - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() - qede: confirm skb is allocated before using - net: phy: mscc-miim: reject clause 45 register accesses - rxrpc: fix a race in rxrpc_exit_net() - net: openvswitch: fix leak of nested actions - net: openvswitch: don't send internal clone attribute to the userspace. - ice: synchronize_rcu() when terminating rings - ipv6: Fix stats accounting in ip6_pkt_drop - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg - ice: Set txq_teid to ICE_INVAL_TEID on ring creation - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition - RDMA/mlx5: Don't remove cache MRs when a delay is needed - sfc: Do not free an empty page_ring - bnxt_en: reserve space inside receive page for skb_shared_info - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drm/imx: imx-ldb: Check for null pointer after calling kmemdup - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - net: ipv4: fix route with nexthop object delete warning - ice: Clear default forwarding VSI during VSI release - net/tls: fix slab-out-of-bounds bug in decrypt_internal - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - Drivers: hv: vmbus: Fix potential crash on module unload - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - parisc: Fix patch code locking and flushing - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - NFS: Avoid writeback threads getting stuck in mempool_alloc() - NFS: nfsiod should not block forever in mempool_alloc() - SUNRPC: Fix socket waits for write buffer space - jfs: prevent NULL deref in diFree - virtio_console: eliminate anonymous module_init & module_exit - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy - NFS: swap-out must always use STABLE writes. - NFS: swap IO handling is slightly different for O_DIRECT IO - SUNRPC: remove scheduling boost for "SWAPPER" tasks. - SUNRPC/xprt: async tasks mustn't block waiting for memory - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - clk: Enforce that disjoints limits are invalid - clk: ti: Preserve node in ti_dt_clocks_register() - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 - NFSv4: Protect the state recovery thread against direct reclaim - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - staging: wfx: fix an error handling in wfx_init_common() - phy: amlogic: meson8b-usb2: Use dev_err_probe() - staging: vchiq_core: handle NULL result of find_service_by_handle - clk: si5341: fix reported clk_rate when output divider is 2 - minix: fix bug when opening a file with O_DIRECT - init/main.c: return 1 from handled __setup() functions - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error - netlabel: fix out-of-bounds memory accesses - Bluetooth: Fix use after free in hci_send_acl - MIPS: ingenic: correct unit node address - xtensa: fix DTC warning unit_address_format - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - net: sfp: add 2500base-X quirk for Lantech SFP module - net: limit altnames to 64k total - net: account alternate interface name memory - can: isotp: set default value for N_As to 50 micro seconds - scsi: libfc: Fix use after free in fc_exch_abts_resp() - powerpc/secvar: fix refcount leak in format_show() - MIPS: fix fortify panic when copying asm exception handlers - PCI: endpoint: Fix misused goto label - bnxt_en: Eliminate unintended link toggle during FW reset - Bluetooth: use memset avoid memory leaks - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} - tuntap: add sanity checks about msg_controllen in sendmsg - macvtap: advertise link netns via netlink - mips: ralink: fix a refcount leak in ill_acc_of_setup() - net/smc: correct settings of RMB window update limit - scsi: hisi_sas: Free irq vectors in order for v3 HW - scsi: aha152x: Fix aha152x_setup() __setup handler return value - mt76: mt7615: Fix assigning negative values to unsigned variable - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() - scsi: pm8001: Fix tag leaks on error - scsi: pm8001: Fix task leak in pm8001_send_abort_all() - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface - drm/amdkfd: make CRAT table missing message informational only - dm ioctl: prevent potential spectre v1 gadget - ipv4: Invalidate neighbour for broadcast address upon address addition - iwlwifi: mvm: Correctly set fragmented EBS - power: supply: axp288-charger: Set Vhold to 4.4V - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. - PCI: endpoint: Fix alignment fault error in copy tests - usb: ehci: add pci device support for Aspeed platforms - iommu/arm-smmu-v3: fix event handling soft lockup - PCI: aardvark: Fix support for MSI interrupts - drm/amdgpu: Fix recursive locking warning - powerpc: Set crashkernel offset to mid of RMA region - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf - ipv6: make mc_forwarding atomic - libbpf: Fix build issue with llvm-readelf - cfg80211: don't add non transmitted BSS to 6GHz scanned channels - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill - power: supply: axp20x_battery: properly report current when discharging - scsi: bfa: Replace snprintf() with sysfs_emit() - scsi: mvsas: Replace snprintf() with sysfs_emit() - bpf: Make dst_port field in struct bpf_sock 16-bit wide - ath11k: mhi: use mhi_sync_power_up() - ath11k: fix kernel panic during unload/load ath11k modules - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - ptp: replace snprintf with sysfs_emit - usb: gadget: tegra-xudc: Fix control endpoint's definitions - usb: gadget: tegra-xudc: Do not program SPARAM - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj - drm/amd/display: Add signal type check when verify stream backends same - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - drm: Add orientation quirk for GPD Win Max - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - rtc: wm8350: Handle error for wm8350_register_irq - gfs2: gfs2_setattr_size error path fix - gfs2: Fix gfs2_release for non-writers regression - gfs2: Check for active reservation in gfs2_release - xen/blkfront: force data bouncing when backend is untrusted - xen/netfront: force data bouncing when backend is untrusted - xen/netfront: fix leaking data in shared pages - xen/blkfront: fix leaking data in shared pages - netfilter: nf_tables: stricter validation of element data - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() - tmpfs: fix the issue that the mount and remount results are inconsistent. - tmpfs: fix undefined-behaviour in shmem_reconfigure() - mm/filemap: fix UAF in find_lock_entries - shmem: allow reporting fanotify events with file handles on tmpfs - fs: introduce a wrapper uuid_to_fsid() - Revert "iommu: handle page response timeout" - mm/filemap: fix that first page is not mark accessed in filemap_read() - block: don't use cmpxchg64() on 32-bit platform - block: fix that iostat can show huge wait time - block: fix sleeping function called from invalid context in part_get_stat_info() - block: fix kabi broken in struct hd_struct - blk-mq: fix kabi broken in struct request - block: update nsecs[] in part_stat_show() and diskstats_show() - blk-throttle: fix io hung due to configuration updates - kabi: deduplication friendly structs- vt: drop old FONT ioctls - genirq: Take the proposed affinity at face value if force==true - irqchip/gic-v3: Always trust the managed affinity provided by the core code - genirq: Always limit the affinity to online CPUs - genirq/msi: Shutdown managed interrupts with unsatifiable affinities - sign-file: Support SM signature - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones- smp: fix early_param csdlock_debug boot panic - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx() - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Add the detection for CMDQ status in the device initialization process - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr() - RDMA/hns: Init the variable at the suitable place - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource - RDMA/hns: Remove redundant variable "ret" - RDMA/hns: Remove unused function to_hns_roce_state() - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - ipmi:watchdog: Set panic count to proper value on a panic - ipmi/watchdog: replace atomic_add() and atomic_sub() - scsi: hisi_sas: Change the debugfs parameters dump count default value - blk-mq: don't clear flush_rq from tags->rqs[] - ext4: correct the misjudgment in ext4_iget_extra_inode - ext4: correct max_inline_xattr_value_size computing - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - x86/speculation/mmio: Print SMT warning - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - Documentation: Add documentation for Processor MMIO Stale Data - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" - can: m_can: m_can_tx_handler(): fix use after free of skb - openvswitch: Fixed nd target mask field in the flow dump. - docs: sysctl/kernel: add missing bit to panic_print - um: Fix uml_mconsole stop/go - ARM: dts: spear13xx: Update SPI dma properties - ARM: dts: spear1340: Update serial node properties - ASoC: topology: Allow TLV control to be either read or write - dt-bindings: spi: mxic: The interrupt property is not mandatory - dt-bindings: mtd: nand-controller: Fix a comment in the examples - dt-bindings: mtd: nand-controller: Fix the reg property description - bpf: Fix comment for helper bpf_current_task_under_cgroup() - bpf: Adjust BPF stack helper functions to accommodate skip > 0 - mm/usercopy: return 1 from hardened_usercopy __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ARM: 9187/1: JIVE: fix return value of __setup handler - mm/mmap: return 1 from stack_guard_gap __setup() handler - batman-adv: Check ptr for NULL before reducing its refcnt - ASoC: soc-compress: Change the check for codec_dai - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet - proc: bootconfig: Add null pointer check - can: isotp: restore accidentally removed MSG_PEEK feature - platform/chrome: cros_ec_typec: Check for EC device - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - riscv module: remove (NOLOAD) - io_uring: fix memory leak of uid in files registration - ARM: iop32x: offset IRQ numbers by 1 - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function - pinctrl: pinconf-generic: Print arguments for bias-pull-* - watch_queue: Free the page array when watch_queue is dismantled - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes - mailbox: imx: fix wakeup failure from freeze mode - rxrpc: Fix call timer start racing with call destruction - gfs2: Make sure FITRIM minlen is rounded up to fs block size - rtc: check if __rtc_read_time was successful - XArray: Update the LRU list in xas_split() - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value - can: mcba_usb: properly check endpoint type - XArray: Fix xas_create_range() when multi-order entry present - wireguard: socket: ignore v6 endpoints when ipv6 is disabled - wireguard: socket: free skb in send6 when ipv6 is disabled - wireguard: queueing: use CFI-safe ptr_ring cleanup function - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM - KVM: SVM: fix panic on out-of-bounds guest IRQ - KVM: x86: fix sending PV IPI - KVM: Prevent module exit until all VMs are freed - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - platform: chrome: Split trace include file - scsi: qla2xxx: Use correct feature type field during RFF_ID processing - scsi: qla2xxx: Reduce false trigger to login - scsi: qla2xxx: Fix N2N inconsistent PLOGI - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests - scsi: qla2xxx: Fix hang due to session stuck - scsi: qla2xxx: Fix incorrect reporting of task management failure - scsi: qla2xxx: Fix disk failure to rediscover - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - scsi: qla2xxx: Check for firmware dump already collected - scsi: qla2xxx: Add devids and conditionals for 28xx - scsi: qla2xxx: Fix device reconnect in loop topology - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter - scsi: qla2xxx: Fix scheduling while atomic - scsi: qla2xxx: Fix stuck session in gpdb - powerpc: Fix build errors with newer binutils - powerpc/lib/sstep: Fix build errors with newer binutils - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/kasan: Fix early region not updated correctly - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU - ALSA: hda/realtek: Add alc256-samsung-headphone fixup - media: atomisp: fix bad usage at error handling logic - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - media: Revert "media: em28xx: add missing em28xx_close_extension" - video: fbdev: sm712fb: Fix crash in smtcfb_write() - ARM: mmp: Fix failure to remove sram device - ARM: tegra: tamonten: Fix I2C3 pad setting - lib/test_lockup: fix kernel pointer check for separate address spaces - uaccess: fix type mismatch warnings from access_ok() - media: cx88-mpeg: clear interrupt status register before streaming video - ASoC: soc-core: skip zero num_dai component in searching dai name - ARM: dts: bcm2711: Add the missing L1/L2 cache information - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - arm64: defconfig: build imx-sdma as a module - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk - ARM: ftrace: avoid redundant loads or clobbering IP - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards - ASoC: madera: Add dependencies on MFD - ARM: dts: bcm2837: Add the missing L1/L2 cache information - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: w100fb: Reset global state - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - media: ir_toy: free before error exiting - media: staging: media: zoran: fix various V4L2 compliance errors - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com - media: staging: media: zoran: move videodev alloc - ntfs: add sanity check on allocation size - f2fs: compress: fix to print raw data size in error path of lz4 decompression - NFSD: Fix nfsd_breaker_owns_lease() return values - f2fs: fix to do sanity check on curseg->alloc_type - ext4: don't BUG if someone dirty pages without asking ext4 first - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb - locking/lockdep: Iterate lock_classes directly when reading lockdep files - spi: tegra20: Use of_device_get_match_data() - nvme-tcp: lockdep: annotate in-kernel sockets - parisc: Fix handling off probe non-access faults - PM: core: keep irq flags in device_pm_check_callbacks() - ACPI/APEI: Limit printable size of BERT table data - Revert "Revert "block, bfq: honor already-setup queue merges"" - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3 - ACPICA: Avoid walking the ACPI Namespace if it is not there - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files - irqchip/nvic: Release nvic_base upon failure - irqchip/qcom-pdc: Fix broken locking - Fix incorrect type in assignment of ipv6 port for audit - loop: use sysfs_emit() in the sysfs xxx show() - selinux: allow FIOCLEX and FIONCLEX with policy capability - selinux: use correct type for context length - pinctrl: npcm: Fix broken references to chip->parent_device - gcc-plugins/stackleak: Exactly match strings instead of prefixes - regulator: rpi-panel: Handle I2C errors/timing to the Atmel - LSM: general protection fault in legacy_parse_param - fs: fix fd table size alignment properly - lib/test: use after free in register_test_dev_kmod() - fs: fd tables have to be multiples of BITS_PER_LONG - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - qlcnic: dcb: default to returning -EOPNOTSUPP - selftests: test_vxlan_under_vrf: Fix broken test case - net: phy: broadcom: Fix brcm_fet_config_init() - net: enetc: report software timestamping via SO_TIMESTAMPING - xen: fix is_xen_pmu() - clk: Initialize orphan req_rate - clk: qcom: gcc-msm8994: Fix gpll4 width - kdb: Fix the putarea helper function - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - jfs: fix divide error in dbNextAG - driver core: dd: fix return value of __setup handler - firmware: google: Properly state IOMEM dependency - kgdbts: fix return value of __setup handler - serial: 8250: fix XOFF/XON sending when DMA is used - kgdboc: fix return value of __setup handler - tty: hvc: fix return value of __setup handler - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs - pinctrl: mediatek: paris: Fix pingroup pin config state readback - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - staging: mt7621-dts: fix GB-PC2 devicetree - staging: mt7621-dts: fix pinctrl properties for ethernet - staging: mt7621-dts: fix formatting - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree - NFS: remove unneeded check in decode_devicenotify_args() - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - clk: clps711x: Terminate clk_div_table with sentinel element - clk: loongson1: Terminate clk_div_table with sentinel element - clk: actions: Terminate clk_div_table with sentinel element - nvdimm/region: Fix default alignment for small regions - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma - clk: qcom: clk-rcg2: Update the frac table for pixel clock - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG - clk: at91: sama7g5: fix parents of PDMCs' GCLK - clk: imx7d: Remove audio_mclk_root_clk - dma-debug: fix return value of __setup handlers - NFS: Return valid errors from nfs2/3_decode_dirent() - habanalabs: Add check for pci_enable_device - iio: adc: Add check for devm_request_threaded_irq - serial: 8250: Fix race condition in RTS-after-send handling - NFS: Use of mapping_set_error() results in spurious errors - serial: 8250_lpss: Balance reference count for PCI DMA device - serial: 8250_mid: Balance reference count for PCI DMA device - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock - pinctrl: renesas: checker: Fix miscalculation of number of states - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - iio: mma8452: Fix probe failing when an i2c_device_id is used - clk: qcom: ipq8074: fix PCI-E clock oops - soundwire: intel: fix wrong register name in intel_shim_wake - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse - misc: alcor_pci: Fix an error handling path - fsi: Aspeed: Fix a potential double free - fsi: aspeed: convert to devm_platform_ioremap_resource - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - mxser: fix xmit_buf leak in activate when LSR == 0xff - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - tipc: fix the timer expires after interval 100ms - openvswitch: always update flow key after nat - tcp: ensure PMTU updates are processed during fastopen - net: bcmgenet: Use stronger register read/writes to assure ordering - PCI: Avoid broken MSI on SB600 USB devices - selftests/bpf/test_lirc_mode2.sh: Exit with proper code - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - i2c: meson: Fix wrong speed use from probe - af_netlink: Fix shift out of bounds in group mask calculation - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed - selftests/bpf: Fix error reporting from sock_fields programs - bareudp: use ipv6_mod_enabled to check if IPv6 enabled - can: isotp: support MSG_TRUNC flag when reading from socket - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - samples/bpf, xdpsock: Fix race when running for fix duration of time - bpf, sockmap: Fix double uncharge the mem of sk_msg - bpf, sockmap: Fix more uncharged while msg has more_data - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - MIPS: pgalloc: fix memory leak caused by pgd_free() - MIPS: RB532: fix return value of __setup handler - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base - ath10k: Fix error handling in ath10k_setup_msa_resources - vxcan: enable local echo for sent CAN frames - powerpc: 8xx: fix a return value error in mpc8xx_pic_init - platform/x86: huawei-wmi: check the return value of device_create_file() - selftests/bpf: Make test_lwt_ip_encap more stable and faster - libbpf: Unmap rings when umem deleted - mfd: mc13xxx: Add check for mc13xxx_irq_request - powerpc/sysdev: fix incorrect use to determine if list is empty - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n - net: axienet: fix RX ring refill allocation failure handling - IB/hfi1: Allow larger MTU without AIP - power: supply: wm8350-power: Add missing free in free_charger_irq - power: supply: wm8350-power: Handle error for wm8350_register_irq - i2c: xiic: Make bus names unique - hv_balloon: rate-limit "Unhandled message" warning - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - KVM: x86: Fix emulation in writing cr8 - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() - libbpf: Skip forward declaration when counting duplicated type names - gpu: host1x: Fix a memory leak in 'host1x_remove()' - bpf, arm64: Feed byte-offset into bpf line info - bpf, arm64: Call build_prologue() first in first JIT pass - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt - scsi: hisi_sas: Change permission of parameter prot_mask - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - ext2: correct max file size computing - TOMOYO: fix __setup handlers return values - drm/amd/display: Remove vupdate_int_entry definition - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR - scsi: pm8001: Fix abort all task initialization - scsi: pm8001: Fix NCQ NON DATA command completion handling - scsi: pm8001: Fix NCQ NON DATA command task initialization - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - drm/msm/dpu: fix dp audio condition - drm/msm/dpu: add DSPP blocks teardown - drm/msm/dp: populate connector of struct dp_panel - iwlwifi: mvm: Fix an error code in iwl_mvm_up() - iwlwifi: Fix -EIO error code that is never returned - dax: make sure inodes are flushed before destroy cache - IB/cma: Allow XRC INI QPs to set their local ACK timeout - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug - drm/amd/pm: enable pm sysfs write for one VF mode - iommu/ipmmu-vmsa: Check for error num after setting mask - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - drm/bridge: dw-hdmi: use safe format when first in bridge chain - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge - scripts/dtc: Call pkg-config POSIXly correct - net: dsa: mv88e6xxx: Enable port policy support on 6097 - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode - powerpc/perf: Don't use perf_hw_context for trace IMC PMU - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch - ray_cs: Check ioremap return value - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - i40e: respect metadata on XSK Rx to skb - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb - KVM: PPC: Fix vmx/vsx mixup in mmio emulation - RDMA/core: Set MR type in ib_reg_user_mr - ath9k_htc: fix uninit value bugs - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() - ionic: fix type complaint in ionic_dev_cmd_clean() - drm/edid: Don't clear formats if using deep color - mtd: rawnand: gpmi: fix controller timings setting - mtd: onenand: Check for error irq - Bluetooth: hci_serdev: call init_rwsem() before p->open() - udmabuf: validate ubuf->pagecount - libbpf: Fix possible NULL pointer dereference when destroying skeleton - drm/panfrost: Check for error num after setting mask - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern - drm: bridge: adv7511: Fix ADV7535 HPD enablement - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() - mmc: davinci_mmc: Handle error for clk_enable - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: fsl_spdif: Disable TX clock when stop - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: SOF: Add missing of_node_put() in imx8m_probe - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() - ivtv: fix incorrect device_caps for ivtvfb - media: saa7134: fix incorrect use to determine if list is empty - media: saa7134: convert list_for_each to entry variant - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: fsi: Add check for clk_enable - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - media: vidtv: Check for null return of vzalloc - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - memory: emif: check the pointer temp in get_device_details() - memory: emif: Add check for setup_interrupts - ASoC: soc-compress: prevent the potentially use of null pointer - ASoC: dwc-i2s: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - ASoC: mxs-saif: Handle errors for clk_enable - printk: fix return value of printk.devkmsg __setup handler - arm64: dts: broadcom: Fix sata nodename - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - ALSA: spi: Add check for clk_enable() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - uaccess: fix nios2 and microblaze get_user_8() - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put - media: cedrus: h264: Fix neighbour info buffer size - media: cedrus: H265: Fix neighbour info buffer size - media: usb: go7007: s2250-board: fix leak in probe() - media: em28xx: initialize refcount before kref_get - media: video/hdmi: handle short reads of hdmi info frame. - ARM: dts: imx: Add missing LVDS decoder on M53Menlo - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc - arm64: dts: qcom: sdm845: fix microphone bias properties and values - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem - soc: qcom: rpmpd: Check for null return of devm_kcalloc - ARM: dts: qcom: ipq4019: fix sleep clock - firmware: qcom: scm: Remove reassignment to desc following initializer - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: controlfb: Fix COMPILE_TEST build - video: fbdev: controlfb: Fix set but not used warnings - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen - media: aspeed: Correct value for h-total-pixels - media: hantro: Fix overfill bottom register field name - media: meson: vdec: potential dereference of null pointer - media: coda: Fix missing put_device() call in coda_get_vdoa_data - ASoC: generic: simple-card-utils: remove useless assignment - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting - media: bttv: fix WARNING regression on tunerless devices - media: mtk-vcodec: potential dereference of null pointer - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size - kunit: make kunit_test_timeout compatible with comment - selftests, x86: fix how check_cc.sh is being invoked - f2fs: fix compressed file start atomic write may cause data corruption - f2fs: compress: remove unneeded read when rewrite whole cluster - btrfs: fix unexpected error path when reflinking an inline extent - f2fs: fix to avoid potential deadlock - nfsd: more robust allocation failure handling in nfsd_file_cache_init - f2fs: fix missing free nid in f2fs_handle_failed_inode - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - perf/core: Fix address filter parser for multiple filters - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() - sched/core: Export pelt_thermal_tp - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface - watch_queue: Actually free the watch - watch_queue: Fix NULL dereference in error cleanup - io_uring: terminate manual loop iterator loop correctly for non-vecs - clocksource: acpi_pm: fix return value of __setup handler - hwmon: (pmbus) Add Vin unit off handling - hwrng: nomadik - Change clk_disable to clk_disable_unprepare - amba: Make the remove callback return void - vfio: platform: simplify device removal - crypto: ccree - Fix use after free in cc_cipher_exit() - crypto: ccp - ccp_dmaengine_unregister release dma channels - ACPI: APEI: fix return value of __setup handlers - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() - clocksource/drivers/timer-microchip-pit64b: Use notrace - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts - clocksource/drivers/exynos_mct: Refactor resources allocation - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix - crypto: vmx - add missing dependencies - crypto: amlogic - call finalize with bh disabled - crypto: sun8i-ce - call finalize with bh disabled - crypto: sun8i-ss - call finalize with bh disabled - hwrng: atmel - disable trng on failure path - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask - PM: suspend: fix return value of __setup handler - PM: hibernate: fix __setup handler error handling - block: don't delete queue kobject before its children - nvme: cleanup __nvme_check_ids - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - hwmon: (pmbus) Add mutex to regulator ops - spi: pxa2xx-pci: Balance reference count for PCI DMA device - crypto: ccree - don't attempt 0 len DMA mappings - EVM: fix the evm= __setup handler return value - audit: log AUDIT_TIME_* records only from rules - crypto: rockchip - ECB does not need IV - selftests/x86: Add validity check and allow field splitting - arm64/mm: avoid fixmap race condition when create pud mapping - spi: tegra114: Add missing IRQ check in tegra_spi_probe - thermal: int340x: Check for NULL after calling kmemdup() - crypto: mxs-dcp - Fix scatterlist processing - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: sun8i-ss - really disable hash on A80 - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER - hwrng: cavium - Check health status while reading random data - selinux: check return value of sel_make_avc_files - regulator: qcom_smd: fix for_each_child.cocci warnings - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" - PCI: pciehp: Clear cmd_busy bit in polling mode - drm/i915/gem: add missing boundary check in vm_access - brcmfmac: pcie: Fix crashes due to early IRQs - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path - brcmfmac: firmware: Allocate space for default boardrev in nvram - xtensa: fix xtensa_wsr always writing 0 - xtensa: fix stop_machine_cpuslocked call in patch_text - media: davinci: vpif: fix unbalanced runtime PM enable - media: davinci: vpif: fix unbalanced runtime PM get - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC - DEC: Limit PMAX memory probing to R3k systems - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() - crypto: rsa-pkcs1pad - restore signature length check - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist - crypto: rsa-pkcs1pad - only allow with rsa - exec: Force single empty string when argv is empty - lib/raid6/test: fix multiple definition linking error - thermal: int340x: Increase bitmap size - pstore: Don't use semaphores in always-atomic-context code - carl9170: fix missing bit-wise or operator for tx_params - mgag200 fix memmapsl configuration in GCTL6 register - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - video: fbdev: sm712fb: Fix crash in smtcfb_read() - drm/edid: check basic audio support on CEA extension block - block: limit request dispatch loop duration - mailbox: tegra-hsp: Flush whole channel - ext4: fix fs corruption when tring to remove a non-empty directory with IO error - ext4: fix ext4_fc_stats trace point - coredump: Also dump first pages of non-executable ELF libraries - ACPI: properties: Consistently return -ENOENT if there are no more references - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available - udp: call udp_encap_enable for v6 sockets when enabling encap - powerpc/kvm: Fix kvm_use_magic_page - can: isotp: sanitize CAN ID checks in isotp_bind() - drbd: fix potential silent data corruption - dm integrity: set journal entry unused when shrinking device - mm/kmemleak: reset tag when compare object pointer - mm,hwpoison: unmap poisoned page before invalidation - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" - mm: madvise: return correct bytes advised with process_madvise - mm: madvise: skip unmapped vma holes passed to process_madvise - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - ALSA: hda: Avoid unsol event during RPM suspending - ALSA: cs4236: fix an incorrect NULL check on list iterator - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() - cifs: prevent bad output lengths in smb2_ioctl_query_info() - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - riscv: Increase stack size under KASAN - riscv: Fix fill_callchain return value - qed: display VF trust config - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - mempolicy: mbind_range() set_policy() after vma_merge() - mm: invalidate hwpoison page cache page in fault path - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mtd: rawnand: protect access to rawnand devices while in suspend - spi: mxic: Fix the transmit path - pinctrl: samsung: drop pin banks references on error paths - remoteproc: Fix count check in rproc_coredump_write() - f2fs: fix to do sanity check on .cp_pack_total_block_count - f2fs: quota: fix loop condition at f2fs_quota_sync() - f2fs: fix to unlock page correctly in error path of is_alive() - NFSD: prevent integer overflow on 32 bit systems - NFSD: prevent underflow in nfssvc_decode_writeargs() - SUNRPC: avoid race between mod_timer() and del_timer_sync() - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update - firmware: stratix10-svc: add missing callback parameter on RSU - Documentation: update stable tree link - Documentation: add link to stable release candidate tree - KEYS: fix length validation in keyctl_pkey_params_get_2() - clk: uniphier: Fix fixed-rate initialization - greybus: svc: fix an error handling bug in gb_svc_hello() - iio: inkern: make a best effort on offset calculation - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: afe: rescale: use s64 for temporary scale calculations - coresight: Fix TRCCONFIGR.QE sysfs interface - mei: avoid iterator usage outside of list_for_each_entry - mei: me: add Alder Lake N device id. - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() - xhci: make xhci_handshake timeout for xhci_reset() adjustable - xhci: fix runtime PM imbalance in USB2 resume - xhci: fix garbage USBSTS being logged in some cases - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - virtio-blk: Use blk_validate_block_size() to validate block size - tpm: fix reference counting for struct tpm_chip - iommu/iova: Improve 32-bit free space estimate - locking/lockdep: Avoid potential access of invalid memory in lock_class - net: dsa: microchip: add spi_device_id tables - Input: zinitix - do not report shadow fingers - spi: Fix erroneous sgs value with min_t() - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" - net:mcf8390: Use platform_get_irq() to get the interrupt - spi: Fix invalid sgs value - gpio: Revert regression in sysfs-gpio (gpiolib.c) - ethernet: sun: Free the coherent when failing in probing - tools/virtio: fix virtio_test execution - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ - virtio_console: break out of buf poll on remove - ARM: mstar: Select HAVE_ARM_ARCH_TIMER - xfrm: fix tunnel model fragmentation behavior - HID: logitech-dj: add new lightspeed receiver id - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build - USB: serial: simple: add Nokia phone driver - USB: serial: pl2303: add IBM device IDs- NFC: netlink: fix sleep in atomic bug when firmware download timeout - KVM: x86: avoid calling x86 emulator without a decoded instruction - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - net: hns3: fix PF rss size initialization bug - net: hns3: restore tm priority/qset to default settings when tc disabled - net: hns3: modify the ring param print info - net: hns3: don't push link state to VF if unalive - net: hns3: set port base vlan tbl_sta to false before removing old vlan- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address - bpf: Fix KASAN use-after-free Read in compute_effective_progs - fs, mm: fix race in unlinking swapfile - ext4: recover csum seed of tmp_inode after migrating to extents - lockdown: also lock down previous kgdb use - nds32: fix access_ok() checks in get/put_user - wcn36xx: Differentiate wcn3660 from wcn3620 - tpm: use try_get_ops() in tpm-space.c - mac80211: fix potential double free on mesh join - rcu: Don't deboost before reporting expedited quiescent state - Revert "ath: add support for special 0x0 regulatory domain" - crypto: qat - disable registration of algorithms - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - drivers: net: xgene: Fix regression in CRC stripping - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: oss: Fix PCM OSS buffer allocation overflow - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - staging: fbtft: fb_st7789v: reset display before initialization - tpm: Fix error handling in async work - cgroup-v1: Correct privileges check in release_agent writes - exfat: avoid incorrectly releasing for root inode - net: ipv6: fix skb_over_panic in __ip6_append_data- eulerfs: fix potential sbi->persisters free error - fs/ntfs3: Fix invalid free in log_replay - Revert "nfs: nfs_file_write() should check for writeback errors" - xfs: Skip repetitive warnings about mount options - xfs: rename variable mp to parsing_mp - ext4: convert from atomic_t to refcount_t on ext4_io_end->count - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - RDMA/hns: Refactor the alloc_cqc() - RDMA/hns: Refactor the alloc_srqc() - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox() - RDMA/hns: Remove similar code that configures the hardware contexts - RDMA/hns: Refactor mailbox functions - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox - RDMA/hns: Remove fixed parameter "timeout" in the mailbox - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox - tcp: increase source port perturb table to 2^16 - tcp: change source port randomizarion at connect() time - ext4: correct the judgment of BUG in ext4_mb_normalize_request - ext4: fix bug_on ext4_mb_use_inode_pa - net/ns: put workqueue of cleanup_net sleep for a while when notify. - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: improve multithreaded bch_btree_check() - bcache: fixup multiple threads crash - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing - bcache: use default_groups in kobj_type - bcache: fix NULL pointer reference in cached_dev_detach_finish - bcache: replace snprintf in show functions with sysfs_emit - bcache: move uapi header bcache.h to bcache code directory - bcache: move calc_cached_dev_sectors to proper place on backing device detach - bcache: fix error info in register_bcache() - md: bcache: Fix spelling of 'acquire' - bcache: avoid oversized read request in cache missing code path - bcache: remove bcache device self-defined readahead - lib: crc64: fix kernel-doc warning - bcache: fix a regression of code compiling failure in debug.c - bcache: Use 64-bit arithmetic instead of 32-bit - md: bcache: Trivial typo fixes in the file journal.c - md: bcache: avoid -Wempty-body warnings - bcache: use NULL instead of using plain integer as pointer - bcache: remove PTR_CACHE - bcache: reduce redundant code in bch_cached_dev_run() - bcache: Avoid comma separated statements - bcache: Fix register_device_aync typo - bcache: consider the fragmentation when update the writeback rate - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set' - bcache: set pdev_set_uuid before scond loop iteration - md/bcache: convert comma to semicolon - bcache:remove a superfluous check in register_bcache - bcache: fix race between setting bdev state to none and new write request direct to backing - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" - smsc95xx: Ignore -ENODEV errors when device is unplugged - net: usb: Correct reset handling of smsc95xx - net: usb: Correct PHY handling of smsc95xx - perf symbols: Fix symbol size calculation condition - Input: aiptek - properly check endpoint type - scsi: mpt3sas: Page fault in reply q processing - usb: usbtmc: Fix bug in pipe direction for control transfers - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - net: bcmgenet: skip invalid partial checksums - bnx2x: fix built-in kernel driver load failure - net: phy: mscc: Add MODULE_FIRMWARE macros - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - hv_netvsc: Add check for kvmalloc_array - atm: eni: Add check for dma_map_single - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - esp6: fix check on ipv6_skip_exthdr's return value - vsock: each transport cycles only on its own sockets - efi: fix return value of __setup handlers - mm: swap: get rid of livelock in swapin readahead - ocfs2: fix crash when initialize filecheck kobj fails - crypto: qcom-rng - ensure buffer for generate is completely filled- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() - NFSv4: fix open failure with O_ACCMODE flag - Revert "NFSv4: Handle the special Linux file open access mode" - jbd2: fix a potential race while discarding reserved buffers after an abort - x86: Pin task-stack in __get_wchan() - x86: Fix __get_wchan() for !STACKTRACE - x86: Fix get_wchan() to support the ORC unwinder - netfilter: nf_tables: disallow non-stateful expression in sets earlier - io_uring: fix using under-expanded iters - io_uring: don't re-import iovecs from callbacks - nfc: replace improper check device_is_registered() in netlink related functions - io_uring: always use original task when preparing req identity - block: fix NULL pointer dereference in disk_release() - block, bfq: make bfq_has_work() more accurate - blk-mq: fix panic during blk_mq_run_work_fn() - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl - net: hns3: add query vf ring and vector map relation - net: hns3: add byte order conversion for VF to PF mailbox message - net: hns3: add byte order conversion for PF to VF mailbox message - net: hns3: remove the affinity settings of vector0 - net: hns3: fix access null pointer issue when set tx-buf-size as 0 - net: hns3: add return value for mailbox handling in PF - net: hns3: add validity check for message data length - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: fix error log of tx/rx tqps stats - net: hns3: align the debugfs output to the left - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: Fix spelling mistake "actvie" -> "active" - net: hns3: remove unnecessary line wrap for hns3_set_tunable - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET - net: hns3: fix the wrong words in comments - net: hns3: update the comment of function hclgevf_get_mbx_resp - net: hns3: add log for setting tx spare buf size - net: hns3: add failure logs in hclge_set_vport_mtu - net: hns3: refine the definition for struct hclge_pf_to_vf_msg - net: hns3: refactor hns3_set_ringparam() - net: hns3: add ethtool parameter check for CQE/EQE mode - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware - net: hns3: fix the concurrency between functions reading debugfs - skbuff: fix coalescing for page_pool fragment recycling - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() - kselftest/vm: fix tests build with old libc - sfc: extend the locking on mcdi->seqno - tcp: make tcp_read_sock() more robust - nl80211: Update bss channel on channel switch for P2P_CLIENT - drm/vrr: Set VRR capable prop only if it is attached to connector - iwlwifi: don't advertise TWT support - atm: firestream: check the return value of ioremap() in fs_init() - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - MIPS: smp: fill in sibling and core maps earlier - mac80211: refuse aggregations sessions before authorized - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - ARM: dts: rockchip: reorder rk322x hmdi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - xfrm: Fix xfrm migrate issues when address family changes - xfrm: Check if_id in xfrm_migrate - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE - proc: Fix a dentry lock race between release_task and lookup - x86/sgx: Fix race between reclaimer and page fault handler - x86/sgx: Mark PCMD page as dirty when modifying contents - x86/sgx: Free backing memory after faulting the enclave page - KVM: SEV: add cache flush to solve SEV cache incoherency issues - mm/sharepool: Fix sharepool node id invalid when using sp_alloc - share_pool: Fix ABBA deadlock - sharepool: fix hisi oom deadlock - floppy: disable FDRAWCMD by default - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed - sw64: optimize simd version of memcpy and memset - sw64: fix sendfile system call - sw64: fix the number of aux entries in ARCH_DLINFO - sw64: pcie: enable PME and AER support - sw64: unify 32-bit MEMIO address of host and guest - hwmon: add support for sw64 temperature sensor - sw64: pci: align the address of mmio resource to PAGE_SIZE - sw64: signal: save/restore fpregs with copy user - sw64: push and pop kernel stack with ldi instruction - ipmi: add ipmi driver support - sw64: add pvt device to chip3.dts - hwmon: add voltage sensor support for sw64 - sw64: remap PA with |= in early_ioremap - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn - sw64: vdso: fix backtrace of vrt_sigreturn - sw64: kvm: simplify the code - sw64: force signal and fault for traps and debugging - sw64: fix compile error for DISCONTIGMEM=y - sw64: add old sigprocmask back for compatibility - sw64: add dynamic turning on/off cores support - sw64: add dynamic frequency scaling support - sw64: fix ip checksum calculation - sw64: remove unnecessary parameter in REG_OFFSET_NAME - sw64: kvm: fix bad page state setting outside of kvm memory pool - sw64: fix setup_rt_frame for non SA_SIGINFO - sw64: do some cleanups for rt_sigframe - sw64: kvm: handle ldl_u and stl_u when exit mmio - sw64: fix some compile errors - sw64: add missing global __constant_c_memset - sw64: remove unnecessary include headers - sw64: increase position index in c_next for cpuinfo - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI - sw64: Kconfig: remove dependence on !PREEMPT - sw64: clean up out-of-date selected options - sw64: add kbuild defconfig rule - sw64: ptrace: clean up debug codes - sw64: add ARCH_HAS_PTE_SPECIAL support - sw64: kvm: remap pages of guest by vm_insert_page() - sw64: clean up a.out and ECOFF binary related headers - sw64: switch to old-style semctl/shmctl syscalls - sw64: define NR_SYSCALLS as generated __NR_syscalls - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options - sw64: dts: rename spi flash partition to fix warning - sw64: fix ex_table entries from misalignment handlers - sw64: radeon: add a force flush to delay work when radeon uvd suspend - sw64: add set time support for hypervisor based rtc - sw64: add regs and stack access APIs to support kprobe events - sw64: unify access to LONGTIME for guest and emulator - sw64: enable more than 32 CPUs for guest - sw64: fix SPDX license identifier in uapi headers - sw64: add required include headers to ptrace.h - sw64: fix the VDSO symbol generation for nm - sw64: add clone3 syscall support - sw64: add missing pkey syscall numbers - sw64: reformat syscall.tbl - sw64: fix printk method for guest os - sw64: remove unused a.out.h - sw64: switch GUP to the generic get_user_pages_fast() implementation - sw64: kvm: fix bug when open file with the O_DIRECT flag - sw64: fix compile error for CONFIG_PCI=n - sw64: rename kvm_mem variables - sw64: fix coding style problems - sw64: kvm: remove MAX_VPN - sw64: clean up useless #if 0 and #if 1 - sw64: fix coding style problems - sw64: remove MAX_ASN - sw64: add support for emulator running mode - sw64: optimize ip checksum calculation - sw64: use jump label for running modes - sw64: mm: mark pci and memmap region as nomap - sw64: fix the value of QEMU_PRINTF_BUFF_BASE - sw64: clean up some useless codes - sw64: numa: switch to arch node_distance - sw64: fix all compile warnings - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code - sw64: simplify cpumask_of_node - sw64: modify tc_sched_clock debugfs file - sw64: remove redundant Kconfig source - sw64: switch to generic pcibios_set_master and pci_common_swizzle - sw64: print correct initrd address - sw64: mm: use memblock to find the end of memory - sw64: mm: warn overlapped memmap and DMA region - sw64: pci: remove some useless code - sw64: mm: reorder memblock_init process - sw64: vdso: fix time calculation - sw64: vdso: change vdso version - sw64: vdso: add automatic syscall fallback - sw64: iommu: fix 32-bit devices dma ops - sw64: re-implement sw64_dma_direct_ops according upstream - config: add initial openeuler_defconfig for sw64 - watch_queue: Fix filter limit check - ext4: add check to prevent attempting to resize an fs with sparse_super2 - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/boot: Fix memremap of setup_indirect structures - watch_queue: Make comment about setting ->defunct more accurate - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix to release page in ->release() - watch_queue, pipe: Free watchqueue state after clearing pipe ring - virtio: acknowledge all features before access - virtio: unexport virtio_finalize_features - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - riscv: Fix auipc+jalr relocation range checks - mmc: meson: Fix usage of meson_mmc_post_req() - net: macb: Fix lost RX packet wakeup race in NAPI receive - staging: gdm724x: fix use after free in gdm_lte_rx() - staging: rtl8723bs: Fix access-point mode deadlock - selftests/memfd: clean up mapping in mfd_fail_write - selftest/vm: fix map_fixed_noreplace test failure - tracing: Ensure trace buffer is at least 4096 bytes large - ipv6: prevent a possible race condition with lifetimes - Revert "xen-netback: Check for hotplug-status existence before watching" - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - hwmon: (pmbus) Clear pmbus fault/warning bits after read - net-sysfs: add check for netdevice being present to speed_show - spi: rockchip: terminate dma transmission when slave abort - spi: rockchip: Fix error in getting num-cs property - selftests/bpf: Add test for bpf_timer overwriting crash - net: bcmgenet: Don't claim WOL when its not available - sctp: fix kernel-infoleak for SCTP sockets - net: phy: DP83822: clear MISR2 register to disable interrupts - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - gpio: ts4900: Do not set DAT and OE together - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - NFC: port100: fix use-after-free in port100_send_complete - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5: Fix a race on command flush flow - net/mlx5: Fix size field in bufferx_reg struct - net: ethernet: lpc_eth: Handle error for clk_enable - net: ethernet: ti: cpts: Handle error for clk_enable - tipc: fix incorrect order of state message data sanity check - ethernet: Fix error handling in xemaclite_of_probe - ice: Fix curr_link_speed advertised speed - ice: Rename a couple of variables - ice: Remove unnecessary checker loop - ice: Align macro names to the specification - ice: stop disabling VFs due to PF error responses - i40e: stop disabling VFs due to PF error responses - ARM: dts: aspeed: Fix AST2600 quad spi group - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - drm/sun4i: mixer: Fix P010 and P210 format numbers - qed: return status of qed_iov_get_link - esp: Fix BEET mode inter address family tunneling on GSO - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - mISDN: Fix memory leak in dsp_pipeline_build() - mISDN: Remove obsolete PIPELINE_DEBUG debugging information - tipc: fix kernel panic when enabling bearer - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - HID: vivaldi: fix sysfs attributes leak - clk: qcom: gdsc: Add support to update GDSC transition delay - ARM: boot: dts: bcm2711: Fix HVS register range- net, xdp: Update pkt_type if generic XDP changes unicast MAC - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID - sched/psi: report zeroes for CPU full at the system level - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim - psi: Fix psi state corruption when schedule() races with cgroup move - psi: Reduce calls to sched_clock() in psi - psi: Optimize task switch inside shared cgroups - psi: Pressure states are unlikely - psi: Use ONCPU state tracking machinery to detect reclaim - psi: Add PSI_CPU_FULL state - block/psi: remove PSI annotations from direct IO - psi: make kabi compatibility for psi in struct cgroup - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave} - psi: fix wrong iteration in iterate_groups - config: change CONFIG_DMATEST from y to m - perf: Fix sys_perf_event_open() race against self - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap" - blk-mq: fix use-after-free in blk_mq_exit_sched - blk-mq: Use request queue-wide tags for tagset-wide sbitmap - blk-mq: Some tag allocation code refactoring - arm64: Add memmap reserve range check to avoid conflict - ext4: add reserved GDT blocks check - ax25: Fix UAF bugs in ax25 timers - ax25: fix UAF bug in ax25_send_control() - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: fix reference count leaks of ax25_dev - ax25: add refcount in ax25_dev to avoid UAF bugs - driver core: fix deadlock in __driver_attach - driver core: fix deadlock in __device_attach - inet: fully convert sk->sk_rx_dst to RCU rules - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: Add Cortex-A510 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: cputype: Add CPU implementor & types for the Apple M1 cores- sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} - sched: Throttle offline task at tracehook_notify_resume() - kfence: parse param before alloc kfence_pool - arm64: remove page granularity limitation from KFENCE - Revert "arm64: remove page granularity limitation from KFENCE" - slub: add back check for free nonslab objects - audit: improve audit queue handling when "audit=1" on cmdline - Revert "audit: bugfix for infinite loop when flush the hold queue" - hamradio: fix macro redefine warning - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" - btrfs: add missing run of delayed items after unlink during log replay - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup - btrfs: fix lost prealloc extents beyond eof after full fsync - tracing: Fix return value of __setup handlers - tracing/histogram: Fix sorting on old "cpu" value - HID: add mapping for KEY_ALL_APPLICATIONS - HID: add mapping for KEY_DICTATE - Input: samsung-keypad - properly state IOMEM dependency - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() - net: dcb: disable softirqs in dcbnl_flush_dev() - drm/amdgpu: fix suspend/resume hang regression - nl80211: Handle nla_memdup failures in handle_nan_filter - iavf: Refactor iavf state machine tracking - net: chelsio: cxgb3: check the return value of pci_find_capability() - ibmvnic: complete init_done on transport events - ARM: tegra: Move panels to AUX bus - soc: fsl: qe: Check of ioremap return value - soc: fsl: guts: Add a missing memory allocation failure check - soc: fsl: guts: Revert commit 3c0d64e867ed - ARM: dts: Use 32KiHz oscillator on devkit8000 - ARM: dts: switch timer config to common devkit8000 devicetree - s390/extable: fix exception table sorting - memfd: fix F_SEAL_WRITE after shmem huge page allocated - ibmvnic: free reset-work-item when flushing - igc: igc_write_phy_reg_gpy: drop premature return - pinctrl: sunxi: Use unique lockdep classes for IRQs - selftests: mlxsw: tc_police_scale: Make test more robust - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions - ARM: Fix kgdb breakpoint for Thumb2 - igc: igc_read_phy_reg_gpy: drop premature return - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output - can: gs_usb: change active_channels's type from atomic_t to u8 - ASoC: cs4265: Fix the duplicated control name - firmware: arm_scmi: Remove space in MODULE_ALIAS name - efivars: Respect "block" flag in efivar_entry_set_safe() - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() - ibmvnic: register netdev after init of adapter - net: sxgbe: fix return value of __setup handler - iavf: Fix missing check for running netdev - mac80211: treat some SAE auth steps as final - net: stmmac: fix return value of __setup handler - mac80211: fix forwarded mesh frames AC & queue selection - ice: fix concurrent reset and removal of VFs - ice: Fix race conditions between virtchnl handling and VF ndo ops - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client - net/smc: fix connection leak - net: dcb: flush lingering app table entries for unregistered devices - net: ipv6: ensure we call ipv6_mc_down() at most once - batman-adv: Don't expect inter-netns unique iflink indices - batman-adv: Request iflink once in batadv_get_real_netdevice - batman-adv: Request iflink once in batadv-on-batadv check - netfilter: nf_queue: handle socket prefetch - netfilter: nf_queue: fix possible use-after-free - netfilter: nf_queue: don't assume sk is full socket - net: fix up skbs delta_truesize in UDP GRO frag_list - e1000e: Correct NVM checksum verification flow - xfrm: enforce validity of offload input flags - xfrm: fix the if_id check in changelink - bpf, sockmap: Do not ignore orig_len parameter - netfilter: fix use-after-free in __nf_register_net_hook() - xfrm: fix MTU regression - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls - ntb: intel: fix port config status offset for SPR - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference - xen/netfront: destroy queues before real_num_tx_queues is zeroed - drm/i915: s/JSP2/ICP2/ PCH - iommu/amd: Recover from event log overflow - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - riscv: Fix config KASAN && DEBUG_VIRTUAL - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value - ALSA: intel_hdmi: Fix reference to PCM buffer address - tracing: Add ustring operation to filtering string pointers - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag - ata: pata_hpt37x: fix PCI clock detection - serial: stm32: prevent TDR register overwrite when sending x_char - tracing: Add test for user space strings when filtering on string pointers - exfat: fix i_blocks for files truncated over 4 GiB - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 - i2c: qup: allow COMPILE_TEST - i2c: cadence: allow COMPILE_TEST - dmaengine: shdma: Fix runtime PM imbalance on error - selftests/seccomp: Fix seccomp failure by adding missing headers - cifs: fix double free race when mount fails in cifs_get_root() - tipc: fix a bit overflow in tipc_crypto_key_rcv() - KVM: arm64: vgic: Read HW interrupt pending state from the HW - Input: clear BTN_RIGHT/MIDDLE on buttonpads - regulator: core: fix false positive in regulator_late_cleanup() - ASoC: rt5682: do not block workqueue if card is unbound - ASoC: rt5668: do not block workqueue if card is unbound - i2c: bcm2835: Avoid clock stretching timeouts - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work - mac80211_hwsim: report NOACK frames in tx_status- arm64: Fix wrong logic in gic_arch_restore_irqs() - secure_seq: use the 64 bits of the siphash for port offset calculation - vfio/iommu: Fix uncorrect type parameters which used in bitmap operations - ipv6: per-netns exclusive flowlabel checks - memblock: use kfree() to release kmalloced memblock regions - gpio: tegra186: Fix chip_data type confusion - tty: n_gsm: fix deadlock in gsmtty_open() - tty: n_gsm: fix wrong tty control line for flow control - tty: n_gsm: fix NULL pointer access due to DLCI release - tty: n_gsm: fix proper link termination after failed open - tty: n_gsm: fix encoding of control signal octet bit DV - riscv: fix oops caused by irqsoff latency tracer - thermal: int340x: fix memory leak in int3400_notify() - RDMA/cma: Do not change route.addr.src_addr outside state checks - driver core: Free DMA range map when device is released - xhci: Prevent futile URB re-submissions due to incorrect return value. - xhci: re-initialize the HC during resume if HCE was set - usb: dwc3: gadget: Let the interrupt handler disable bottom halves. - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings - usb: dwc2: drd: fix soft connect when gadget is unconfigured - USB: serial: option: add Telit LE910R1 compositions - USB: serial: option: add support for DW5829e - tracefs: Set the group ownership in apply_options() not parse_options() - usb: gadget: rndis: add spinlock for rndis response list - Revert "USB: serial: ch341: add new Product ID for CH341A" - ata: pata_hpt37x: disable primary channel on HPT371 - sc16is7xx: Fix for incorrect data being transmitted - iio: Fix error handling for PM - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits - iio: adc: men_z188_adc: Fix a resource leak in an error handling path - tracing: Have traceon and traceoff trigger honor the instance - RDMA/ib_srp: Fix a deadlock - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close - RDMA/rtrs-clt: Kill wait_for_inflight_permits - regmap-irq: Update interrupt clear register for proper reset - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets - net/mlx5: Fix wrong limitation of metadata match on ecpf - net/mlx5: Fix possible deadlock on rule deletion - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() - surface: surface3_power: Fix battery readings on batteries without a serial number - net/smc: Use a mutex for locking "struct smc_pnettable" - netfilter: nf_tables: fix memory leak during stateful obj update - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() - net: Force inlining of checksum functions in net/checksum.h - net: ll_temac: check the return value of devm_kmalloc() - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure - drm/edid: Always set RGB444 - openvswitch: Fix setting ipv6 fields causing hw csum failure - gso: do not skip outer ip header in case of ipip and net_failover - tipc: Fix end of loop tests for list_for_each_entry() - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - io_uring: add a schedule point in io_add_buffers() - bpf: Add schedule points in batch ops - selftests: bpf: Check bpf_msg_push_data return value - bpf: Do not try bpf_msg_push_data with len 0 - hwmon: Handle failure to register sensor with thermal zone correctly - bnxt_en: Fix active FEC reporting to ethtool - bnx2x: fix driver load from initrd - perf data: Fix double free in perf_session__delete() - ping: remove pr_err from ping_lookup - optee: use driver internal tee_context for some rpc - tee: export teedev_open() and teedev_close_context() - x86/fpu: Correct pkru/xstate inconsistency - CDC-NCM: avoid overflow in sanity checking - USB: zaurus: support another broken Zaurus - drm/i915: Correctly populate use_sagv_wm for all pipes - drm/amdgpu: disable MMHUB PG for Picasso - KVM: x86/mmu: make apf token non-zero to fix bug - parisc/unaligned: Fix ldw() and stw() unalignment handlers - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing - clk: jz4725b: fix mmc0 clock gating - btrfs: tree-checker: check item_size for dev_item - btrfs: tree-checker: check item_size for inode_item- huge tmpfs: remove shrinklist addition from shmem_setattr() - huge tmpfs: fix split_huge_page() after FALLOC_FL_KEEP_SIZE - huge tmpfs: fix fallocate(vanilla) advance over huge pages - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs - dynamic_hugetlb: fix undefined struct cftype - file: fix kabi change since add f_ctl_mode - selftests/bpf: add demo for file read pattern detection - libbpf: Support detecting writable tracepoint program - ext4: add trace for the read and release of regular file - xfs: add trace for read and release of regular file - fs: add helper fs_file_read_do_trace() - vfs: add bare tracepoints for vfs read and release - bpf: Support writable context for bare tracepoint - trace: bpf: Allow bpf to attach to bare tracepoints - readahead: introduce FMODE_CTL_WILLNEED to read first 2MB of file - lockdep: Correct lock_classes index mapping - i2c: brcmstb: fix support for DSL and CM variants - copy_process(): Move fd_install() out of sighand->siglock critical section - i2c: qcom-cci: don't put a device tree node before i2c_add_adapter() - i2c: qcom-cci: don't delete an unregistered adapter - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size - dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe - dmaengine: sh: rcar-dmac: Check for error num after setting mask - net: sched: limit TC_ACT_REPEAT loops - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop - kconfig: fix failing to generate auto.conf - net: macb: Align the dma and coherent dma masks - net: usb: qmi_wwan: Add support for Dell DW5829e - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create - soc: aspeed: lpc-ctrl: Block error printing on probe defer cases - ata: libata-core: Disable TRIM on M88V29 - kconfig: let 'shell' return enough output for deep path names - selftests: fixup build warnings in pidfd / clone3 tests - pidfd: fix test failure due to stack overflow on some arches - arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 - arm64: dts: meson-g12: add ATF BL32 reserved-memory region - arm64: dts: meson-gx: add ATF BL32 reserved-memory region - netfilter: conntrack: don't refresh sctp entries in closed state - irqchip/sifive-plic: Add missing thead,c900-plic match string - phy: usb: Leave some clocks running during suspend - ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of - ARM: OMAP2+: hwmod: Add of_node_put() before break - NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW - KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event - KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() - tty: n_tty: do not look ahead for EOL character past the end of the buffer - NFS: Do not report writeback errors in nfs_getattr() - block/wbt: fix negative inflight counter when remove scsi device - ASoC: tas2770: Insert post reset delay - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests - mtd: rawnand: gpmi: don't leak PM reference in error path - powerpc/lib/sstep: fix 'ptesync' build error - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() - ALSA: hda: Fix missing codec probe on Shenker Dock 15 - ALSA: hda: Fix regression on forced probe mask option - ALSA: hda/realtek: Fix deadlock by COEF mutex - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 - selftests/exec: Add non-regular to TEST_GEN_PROGS - perf bpf: Defer freeing string after possible strlen() on it - dpaa2-eth: Initialize mutex used in one step timestamping path - libsubcmd: Fix use-after-free for realloc(..., 0) - bonding: fix data-races around agg_select_timer - net_sched: add __rcu annotation to netdev->qdisc - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - ping: fix the dif and sdif check in ping_lookup - net: ieee802154: ca8210: Fix lifs/sifs periods - net: dsa: lantiq_gswip: fix use after free in gswip_remove() - net: dsa: lan9303: fix reset on probe - netfilter: nft_synproxy: unregister hooks on init error path - selftests: netfilter: fix exit value for nft_concat_range - iwlwifi: pcie: gen2: fix locking when "HW not ready" - iwlwifi: pcie: fix locking when "HW not ready" - drm/i915/gvt: Make DRM_I915_GVT depend on X86 - vsock: remove vsock from connected table when connect is interrupted by a signal - drm/i915/opregion: check port number bounds for SWSCI display power state - drm/radeon: Fix backlight control on iMac 12,1 - iwlwifi: fix use-after-free - kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled - kbuild: lto: merge module sections - random: wake up /dev/random writers after zap - gcc-plugins/stackleak: Use noinstr in favor of notrace - Revert "module, async: async_synchronize_full() on module init iff async is used" - x86/Xen: streamline (and fix) PV CPU enumeration - drm/amdgpu: fix logic inversion in check - nvme-rdma: fix possible use-after-free in transport error_recovery work - nvme-tcp: fix possible use-after-free in transport error_recovery work - nvme: fix a possible use-after-free in controller reset during load - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task - scsi: pm8001: Fix use-after-free for aborted TMF sas_task - quota: make dquot_quota_sync return errors from ->sync_fs - vfs: make freeze_super abort when sync_filesystem returns error - selftests: skip mincore.check_file_mmap when fs lacks needed support - selftests: openat2: Skip testcases that fail with EOPNOTSUPP - selftests: openat2: Add missing dependency in Makefile - selftests: openat2: Print also errno in failure messages - selftests/zram: Adapt the situation that /dev/zram0 is being used - selftests/zram01.sh: Fix compression ratio calculation - selftests/zram: Skip max_comp_streams interface on newer kernel - net: ieee802154: at86rf230: Stop leaking skb's - kselftest: signal all child processes - selftests: rtc: Increase test timeout so that all tests run - platform/x86: ISST: Fix possible circular locking dependency detected - platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1 - btrfs: send: in case of IO error log it - parisc: Add ioread64_lo_hi() and iowrite64_lo_hi() - PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology - mm: don't try to NUMA-migrate COW pages that have other uses - mmc: block: fix read single on recovery logic - parisc: Fix sglist access in ccio-dma.c - parisc: Fix data TLB miss in sba_unmap_sg - parisc: Drop __init from map_pages declaration - serial: parisc: GSC: fix build when IOSAPIC is not set - Revert "svm: Add warning message for AVIC IPI invalid target" - HID:Add support for UGTABLET WP5540 - scsi: lpfc: Fix mailbox command failure during driver initialization - can: isotp: add SF_BROADCAST support for functional addressing - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() - fs/proc: task_mmu.c: don't read mapcount for migration entry - mm: memcg: synchronize objcg lists with a dedicated spinlock - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence- ext4: fix bug_on in ext4_writepages - ext4: fix warning in ext4_handle_inode_extension - ext4: fix use-after-free in ext4_rename_dir_prepare - ext4: fix warning when submitting superblock in ext4_commit_super() - ipv6: annotate some data-races around sk->sk_prot - net/sched: cls_u32: fix netns refcount changes in u32_change() - ext4: fix bug_on in __es_tree_search - exec: Remove redundant check in do_open_execat/uselib - floppy: use a statically allocated error counter - ext4: fix race condition between ext4_write and ext4_convert_inline_data - arm64: Fix some build errors related to KEXEC - ubi: ubi_create_volume: Fix use-after-free when volume creation failed - ubi: fastmap: Don't reserve beb_rsvd_pebs while filling fm pool - net: ipv6: fix use after free of struct seg6_pernet_data - net: ipv6: check return value of rhashtable_init - KVM: arm64: vgic: Drop WARN from vgic_get_irq - Documentation: arm64: Add limitation for exactmap - arm64: Fix reserved memory via memmap - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()/bin/sh/bin/sh/bin/shcpufreq-utilscpufrequtilscpuspeedkernel-tools-libsobs-worker-backend-test-0001 1716336000  !"#$%&'csdefritpt5.10.0-60.138.0.165.oe22031:009-0.6.p11:009-0.6.p15.10.0-60.138.0.165.oe22035.10.0-60.138.0.165.oe22031:009-0.6.p11:009-0.6.p11:1.5-16 0-metadata_list-compact_tlv-kernel-tools-5.10.0-60.138.0.165.oe2203.x86_640-metadata_list-compact-kernel-tools-5.10.0-60.138.0.165.oe2203.x86_64cpupowercentrino-decodecpupowergpio-event-mongpio-hammergpio-watchiio_event_monitoriio_generic_bufferkvm_statlsgpiolsiiopowernow-k8-decodetmonturbostatx86_energy_perf_policycpupower.servicelibcpupower.so.0libcpupower.so.0.0.1cpupowerkernel-toolsCOPYINGcpupower.mocpupower.mocpupower.mocpupower.mocpupower.mocpupower-frequency-info.1.gzcpupower-frequency-set.1.gzcpupower-idle-info.1.gzcpupower-idle-set.1.gzcpupower-info.1.gzcpupower-monitor.1.gzcpupower-set.1.gzcpupower.1.gzkvm_stat.1.gzturbostat.8.gzx86_energy_perf_policy.8.gz/etc/ima/digest_lists.tlv//etc/ima/digest_lists//etc/sysconfig//usr/bin//usr/lib/systemd/system//usr/lib64//usr/share/bash-completion/completions//usr/share/licenses//usr/share/licenses/kernel-tools//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/man/man1//usr/share/man/man8/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/generic-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection obs://private/openEuler:22.03:LTS/standard_x86_64/980f0339b741b99a5c58f7f4d478cf44-kernelcpioxz2x86_64-openEuler-linux-gnu ASCII textELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=13ea7bbde844b567ac317145596583ef02b1f6fe, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2e060542121c9fd98aca718e765df4f71b8678c9, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f2a9f3f94e8fff5c2b64fd2b60010a31d62d08d0, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f02c105f09ce4678adab334e6d8a45c36db8c363, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bf796969041b86b8a315b338a4eda938a44094b5, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=343ed7b9e56951d4292a9d8f3708af44bb1fe678, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=672d49f88677810074ac96d41a45d490ecb4e8a5, for GNU/Linux 3.2.0, strippedPython script, ASCII text executableELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=5866521c31b23f826d6bad305615fcdc5885c676, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0851ce90d8a553561505adde20e8619bef9c1dd4, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f3be5c24fcd080e10d3d24d8cc4b4e6e592dde40, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bf845a8d7fbc8816f38e4f5c228a1ef4ca049394, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=28e6c9e8cc815604c8e667ee5ec31375415461c4, for GNU/Linux 3.2.0, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a6535eb79ae450171ec3855031936ce3aab1bb0d, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ee68851211dc2751d23d69ddfea7ddfd443a72e, strippeddirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, Unicode text, UTF-8 text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (322) (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (892) (gzip compressed data, max compression, from Unix)&,5>?GPVcnw   R R RR RRRRRR RRR R RR RR RRRRR RRR R RRRR RRR R RRRR R RR RRR R RR RR RRRR RR RR RR RRRR RRR R RRRR R RR RR RRRR R RR RRRR R RR RR RRRRRRR R R R RRRR RRRR R R RRR RRRPRRR R RR RR}Y+(D)&utf-8fbe0f79c398ae7a1089cd3c769a92c4438b8043c0ee08ddeb8330f23cbc5c837a2eeaba18ed04b88677bf5fdf1766f5dca56c6c39c410556f0d6861476c2547f?p7zXZ !#,w] b2u Q{LY0FB $Xۉ٧D{{ƃsʒ? m֎9h@klwNhrY3p!(8]:r J^ Wk30 ngb+}|znMh GLԝbe*Pr۬)#\k'Q후z2uHU T)0y] u{ApgWwm7ϏDsvvSBoZۑ,uITi<}L{S5o[?A(-jשH4O6ט)=ڙM?nO*K yl 2 v*i'WyT'\ᮍ0i+X'“H uDCXgI ,R.(/t5v4mY"W]'FWB(en*Ϥԋ#$z&5.6Ǫd7:՜}!8JaIlameI鄚uD tb,q~B[GrPUzѝ3mNGK&.DLD.E;Īm %E"#-AZV}1E&Uyyqg8={BY-87~$Nyı+HA煇LX/,>C٨XocfHJ Bm먯g}?r68譹[ ~bbg`z"<;#n/Mzүƻ_% ise߲i'Ca16o<߹c#=d|/5|QSi"47 R"3]C1#pHEE a!ϴA{7O I/g21'6 11iV3Ypx駂vqe&1܎9PHHIn B5$A+CC!IXXxJ&'Տ\s/eGd =m饆J˜%fp5pm,K_⅒ب<e-'1VwLy?)c3l+1' σj>dL Yh+)>  Ok(iRvF Qȯ-5H%FQss7LPݧy6;,: )'ė1pbuDIU.E9r8uف]du/,^rWM9/5Nod!k hC̉ *aQz/El2k lws%:dʰC4ykQ ^{nٝ}P&i5[W\ۚq}T_ _|NׂI:F=/_=ؖ:72MpGfm\""oLwe H;:xaߞ?-"?1kOW6(30or*;bYj2ҥ_s<~';bAR H{H*Y _*5""=ht7h*(mn5?S5\FZmS\H,#f8f zpe *gd]Jim>Fb G?[҈HpWA.G(&9&aj.hd*ēeRUA_C6%w,GXX&gjx `\ -z|hB.^ba.P =.iͣE¨W?|Qav;㳃ܝ6>S^7 ``]+a lzjOp֋٧CLX'ҏڹoA_ _eߝ3w@8ajThC  Rnʄ(ݛssQ܌g%]\3 ?O;:gNPw gޞY~sEuUt1HHQrڑ[Nn'Q-4#sw'vbp#}p%7YukiN:8'E-Sr$l8C(N:9hjS4`eCn'<|4qg M-^Kޔ0Mbj{G?6N~Av38`0WcRwol,l]ꚮbӾ]ß) Q[3)Tt".vz]pes&ռ+-C~?E0(:˽f2Uhol"2ИmV2"bsbbQhR-A?ȥֳu@v gN\Zn3AݗѽGq7OEqiaGm}.إoҼeƦ<8` BĈI#x <<I9b1߼.$-Lq>ʚ/sI3˲$@1d}gXs`e̽@$j3㹸e@9#p#,\oGs4a~UnjBD3K(ë" J +|C^6eqޕƖj.3hm[B8%! ,ywիj7g7/;Ͷ v_ 4kyX;*^r.ԞrhyB2O,U?;԰-TƢpALuFL՜Gtaw!p-o@jp;9̪nH[aHٹN[{ml|K ɞgK>E K2Y݊6J e{md0dZ80h}T{vZ5+KX~D1a[A׬f2#\.~;=h,>7Tbh!73OOG)^Yj2!3y-OFB GN) J=bĻN /F&ʹwd . =vM囼ʬ.v+>ެwbY-c]a?ӎr͚ڞ X}Z9I@~9:Ƿ|:VA`|X\NѼ׸Ba1mNOED|Oٻ#11ÝYJS9ڣ֬.ESvO3WO&î.PeWjzk [s`0XJ% {R'Ct0F|;F:̖pXag_n.D=6̿pU$Ln5Ä;1wޫ=Yh#ְGt/Mb`.TOF,=ă;b^PO(Tesgmwo"Ȳy<0Fy * R'YT'DxX 0Q3JOq`ہs/2@ s,d(hPUGݹ/]'/PREJar!0Cޯv[]Z7]-ۍ~w`3(SP#{Ŕ6+4M I'%"OQXk*;xJ&!:*<BHhMSds5 ܕBB0[9CaCT1az8+MCIEWz\բ)kOx:aem9Qs^Gj(Ys{Q.C ~#s>TŎRI/Gk}|:ܞY&#S+@qr_,tg:++tJ9ؙ3D5yo&' QC'77߰#߿amY8)@uNiyqqxʼOuMII#儇ӧYedpc*Җ1`|)=##RkHWz!UrPWDxu`ǎ JaA:k,)< _3:figBb#C]nR 6aI=nmF|!34-xi]knD$xPD͛on,<.zAM(a06K!q?Ruuh f0}\3 0|_RUk2SO DD~{Rvl/뱹eZq)+ 'gEYP1Əz ;eVrc]Zoul 9@E ">*oG^ys H$qUû]C0jm 4n˞.٨|&;@Kh\{k%鮟t9/bL$#Afy$v:hyِ!Mrx3R# b z19m&KJ8Ӆa)Rsi *EڳUmȵXaUWتcRG1ev ˱ȑv36NLsi]/r%s,5YyY'N@E N0}@r\yNӹ%4=gC;JsX56ht|Um_PF.J']LP-p24;6vJZUf0Uљ;@κ&s_1yqgEQ=*h?qSy_/'ė7NT1ߙ39S&Hl(|0YC2PR9g>c@ 켨>haGٴ2RJ'c0o2h+:~Nл]xeD`>tXi, JN|~66?݀l =~$ 9@Pԯ 3 #|56{c%]'L7tϩ=GpLfD NWޘvҿ~5 |۴v7{^R)YHЎ,дP.ӫ7U9;a;`+xKIi5f)s749mukO*@L= #r9g&"?dяb\C~|zǕ\1ܘ.ώ3E˪4DS{~ |$DIw籃 ^YYp g).tۈmiBg_|-!UeKX:HkC.+?@ϙZ clF4hXGP2?-^{g΀vkqupp݋Td~W\rP:ȉ.a3湉'R-ƸJq"|VYG=EHt XgI"lW"9~Ƨ Sx7sl6 &|Xz8}e[~e if=:j||^,Tu™i  -o#c$xWJ=6uԙh|Ix"0<8vrT5D0A!J5<]mGK/JEUTd NS I>ۭ-1*4%Kq>]GO?m&H0 ϯ^!b2`Q+o:2JT.sd;SEɟoR51X, =[gz'^pJ$,Sp[a48m,ϼ5hi^AB|T Eest|L'4{.Y'jgaQdC-UpF:V]ԼIqH'`sWb}̈!s9'/`ڒ41L3;p.KW8l&<'_oYԛuvl ~©"' =N;Nx:KL~b69丵/2~p Ju6:U\{s`qdlOTˀ;~ZPyX'#ZBd=")AE) 48i=ٷ9|pO؏aN SS`綕SRvK6sBN#FKp}+@y@|N[mD n޵ﲲ2ՊE=CgpMq0'>ϰycIMpwZIUp"-t\a} ;͠`2K p< : r ۸?qZTSa\1W=qmOyc?IQ8)Fp#)Y%/9,-՞{,Sf\Gl&҆zױ9 b0 \]x{΄S Kj[Ss:ȮɲIg."6^MQAP"׶܈1en5,F_CR?nݖnC@tO1qq cyFiSz"vqsC7FY9C\\MEpt#rlQ=d~b쳡l{KtcڙF:{\)DT<G6}l5L,pwoG@\jjb/ 9BY%izv.Gܳ%d,J3Y~=17 suQTÏ`6M ˄ _HD< yMvAǻ^׆PH}UtNxt5`)?\\wf.ldz+ س|wUU iTf[Oth:^ ߉TN)>lCA57 ts!PSsNazKo} tɔ|OAzߖ c\vHryF<$A0p6c" g_s>O%Cr85e xW60~ݩ覗6¨P";jĺS iqͰ&3P#E !b[XC9lC$w8ec5 #KDLN$h_tc!&XzXY]jv g%jV$Q6tKS|8ZȚ<աZXsP nJza=<eTݲjDsV֝}' LG!Wzb?NBV=p.|FkaMF[lL)D"ߖ.Rg;z'_h%een\mO"P Qjc w=pE~.x:'ïՠ`rG%klk; ;!*2 "ʣAVGە1\Em*EI,EE60)c#[B~Ub驼>TWW憞Aq&[s~YxB\KΟKj)_4{1\1K}ګPQ:|2`TƐPmZ6ja' k^+,mwεFsI}5z*v-cVp4$05lC [=`G}T'~ qĆJ7jx9LC??[@m0'LxxW ^pevʅZ5bu@N ec# gZ$sը77˦N^){1-vXrs24w40?yR]}4lsp})ժ@6 y.7!(Dy:^ƭyx)`ÛPh8 ='')i_@|0W*JH>>:,3^'GlN\Gp?Rpt8Ռ_$sV5ڮ$ّhuAX'7gDIR5G_9zhf?M}+)OK+O49G9d͒Z׃o}f4tXP |LpXYBҀFuͧUlMnhӒ8V8/bNJR׃="Ocܥ"oZ 0m}|Y¥woRW_ m@*e981znW /zw\2Է1Ffr ". s'NP\7fLH8̳`9T}Z|wEO|o{= JO)ys_م W( gSxmM^KhK; V7fEg:p@ ʐ*=U 6X'L%ƾB谽-h?T?(1ܜ nݿh}nKBjn,H"!͛D!tY$P)IR/cSJRaBOd$ew\(Ћ vDrOfjcx \%Fz+g|0`Fcl>Y}@!9u؏9qrըgG괹#g/|;O(sΒ.b,VG}laWMN#+ yBvAh'], )hYM`: ҁgΦ,^g!a'ַ[= ؎1yj{b)3(O^&BIbO)x.$nځ>DIYZ0i#&hfZ@L;0#`!#O{Kk!G!ۢ 83sAw) P?XiJДn(Ȅ9`~\Ֆ<#wߟ {МB*![, k+T,gE tIJ@5ScOla X6D T>V0"Q괒9D.]v0٥?/A3:֒Լ7wK1{mc9$gbwz8wtFF?dyukH t>rYG?Z;>QڱD.27"b@կ`ç#]Np*PeۥfWͭs()^JȇY$m(Yҟ”9tnݺv_.u"b^ p41xɁ)?VƷX\Q4X5IjfuiNW+5P48ln>Fr^x~+\Jw, ^ks8zbgCtq5'3qŽp 0eb`_>${,)>oQlUNna g9jxP0Ԩ~J^HJkTo*@LIzt+8dݟUɽ{E)B+ΑbF^] Nq]+i&K6*eA}8"% n˘/<}q,tL!o??p|aϨ >$U;hj"O)BNZ8Ms/;ژF^4, ZW܏cepvP$Qc ٚ A_UK|k[ s~7̉(Ty_ pa16sL;Z6򥞺yiw?\u4 M4C=XrFjq=Vƥ[.'WiӸN a wɌPMCʵˑMd۲O #P Kz@rA@:uBC$k\l&|;Ͽa4EFh.=̣ieW׸N Z` ,6VfÈž6gXA%Wc)$k@Ӱx({kMj"(* Ozi>iXzy.-#4V:&c-#|,Iܙ (U?M Aʗwa>*ĎoNgQ/(ݽB!H}!ln꽃9v^t PkL鉿me֙f+yz|KެxGjD&-=/No\萛o~g[@BM,M'0x!ɬaκsYiGP5kS[҅Un֟}k_)8x]@^#ψ@l@&Y,ҧFlSjfmkX|==v?e` dS3DcihXki’h4sx۝-k Wy5rT#dD2?rewcl..M$J){8x ]T vpn pݮ|Ҟꠞ~yWSu׃t, \!@ŠvOs/1r( BU 5z [67\Z+ o 2I6g oz4J*K^˯ar.I<%f$:!?_xY]4/ u8,Է:(i%Jo%I4'폒!γe4Md zaԀ8OC"UğrdYhV1R'#%㇞*5]+Ēy^#;{n')BJSZư/zYs BY g3_ϏR..'RyimHZlS]0eCM{Iݖ8vdU&hnag=*p~8vG155y >״GtL{g%YM7$,GXq˂r 'L%IoY!&c9/Y0& 4!(|p\nPn;/"wҵ.8%̒(lM۩2TrD-ñ9%i-c5\Q363^ ^шMu07_jfYdՉm[zf%ՙ'{ z[x-d(ϖsmM,:A!4D?]%%xz)[&<|yl~.޽X΃LP {ma.i~cIشHDx&<y)[(%vJ. !cPz0M\qOt>\\O46:ŴUF [Ͽ;`HR.B"x&ԩ30Vq\Ĕ);Axm!Qّ}7d0%iQ$wڏgQӦGP4ª:9Bq !R=9"q@vU|YۃM̓q:dQDΞi+k΀6|+:6J8A2Ǹ|6_ g''/Vn: 7^_~g~pa.Μf'l (ѳ LveēY*M5HeqKEVj΄M{RlwdI nABLj(@n"UB}u8 |{}8f(ʚwPwF"t/( `H+xgv%f1Z0[7Z ɬWq:6滃N¶@tߢ!;!}/ uz#3c FwyorHoTݲlG$9dF%-ژA S]P(e}½P\/z2r:6RWLlkɛn~BNw%K?UUڐh0Frxsi2ewu'sU[n+I~Lꐹ) (.]2WjrN);3(sGZ?bg{fQ~%aT1U֮rpwiN;X*.VY0@,@dkZvP5vYx[."Dr?. tUU$*Zm/a0z61wH=Pߖ^%C{0n[S*a1?&ݜ+c]!SVӓ磓J&tH:c)N8!;?Ό,F4eT`%upl^z 2X:[>}­CÀx7$wd&JtH%sNC=>#RhgyA] 'V/qOa7E9 50ϏXϔEE֜o 3qg#2m7$EY4oxߠ!$rշOS9=vu f˓DW(vA,E3NF'gET Xw۴y? 챔.*e@qտ6g>BS+q|4Tg()eTT'8ZKL[h8B&xUަJvIq0n=1O0OP'kY伋IM/U̷ݾ#T1olSJMitIMWcg Ѐn i*Ck~ ZV_֭*nにp\W`v,gNuZ eKK@pfK^w>to"m2D3x"QKwm|'i=ۃ#w@ 1=_OS>-:.tOjE(W7B8/P29_P`051}g LQD{Z 3)r` N6&nKn4(. ʍHVY y©B߀\a׶P8| uJJ" ,s˶lLN) JM\ᙱF%K{.#Vp/ќu {d칞{xz8mȂ_;K r1QnP,8:ڌ}sH\o132>X|Py6xyቤYmR67:xsHV >PXU D.t>/P, &GDdUG n,j vtOLs'̑%|A yXq݌HDG0݇6Cb&%WpjY}ZxGfO>(MCtBK2{q0{be#z%K[vg v2wF>\_g6X^QP֢I .fʧz>͹A< )H\ 'f^h`>@G0MwX)J򣰈*VM ڣGp^zb|܌!f!l|\T U1.σW$AiT.h$$1\d#4 0:9ms1@iH Pո ia;Tl z3}݆V5pݏVDV~ϸ8Q>6}j> M9>_ݡ=1XqP -BBPE`f[}szˬ2>hG,5Ye L1"!}Š [?ؽ!<`rgUIsh4cűܸ> [BjU8k:{q$f)Cb0/@l0a\)S$Aݷhﶅ[x `'3X0U6PkM@%[M?)RD~8@|oM|OQf2ǧGUYx4@a Vl w> j-VZ:Rp#=U1 ,1w"J63H`:cLCDkkl.yNNa&ٻ@1@49x~SXZ^ӇքAzRɢN^wk@$\YgL:V9 [ CC1 m ݕC34 io-!sn%IĥHX'OvR%˅U"J1?w=t LYT"DS$ٕzBY **-WT6j\#jf-5Rf):\$ZaaRڨtRژŠv #vyJ_t@d/m/mWX+p;27}Z*n-оۋ'/+܈9WNbYJS馓'jOo QG`>ܨ{h}Δ]x觎sQ>Mv^fG C 9k-2P nB5߭s痼b*|\܊ PCĢK-'΄U-/]4j89Q#VД+r—::EsruF!n+ךMe ŻQ oy_6]X4'2qCz{02%A* X]Ky2ۢvς/QhX´* /?C냂woᒟBhW3K};*4i]Mk ]Gv>^|~7Od8D\4'TG/PNh߉..Cl EjH. iɀF8F9'N=9>o!#f0%Kmjh{Q2EsA[eQ3VH gΆ<=@$~74KW%U`9WztMZh%6k$qO am 1Cw0#R62ÐH$~ivFFi=6j*WK(HүKg_qGWa9c{I]nF b}wH>V/8v8ZO'w;8y .c!QKdhݬ jWZuG`M!ZG7ì!ӮO;װ1o+-px^:tR2!`YܒRs}Ӎfg^׀M[T(#,^8 aIמ}NC'̹ T ;s+Fʳ 4p!Pez$M|?QNS8QK ^",\.Wik'{cRj 2^Ǻ+ zߓRk6KRwEјnM7fi{eLEztdvrǬ7&Oǽ W)Ә7tK${__75?AB' @}Պ(ߌa5}L[J=82dzӣ!YFlsP}5}Š|%4DzK w Eqd+U;$>-dsܫvAYb6bWW^k (/r}'~J{yQvwj=1}ebr ml5Eaȫ]#v/!Tmf,#&!Ls=d?\{cKba/E[Wî7܋++̟[ޯ5 CK#D XM*ސZ$=_PYB@EpQN=gDD.{-9c+e Fu^ P'CӸ8R軮+P1%C+~ BϦCQzĵ^&yEKZ{k Z(('}MVmq5 ''Wµ.:^&BU.|4HwMҤpwK z. a9]\$)-ρl9ÑOvzCf1, $7>V`wE]SNٳ;}%9zdSOB9zצP2'~ &) ?3{YUTNy \qKopoMZO$k:rD/GQ.`Ds +x5]3 oO3v Hiܭ~=WtV'/%ɬ`;old.Pd?z;b.-Y;lW ģ*%S̆ET)n Eۊ3:7Q٩R5}ug ^7ǭhexj*cn3;kܤf/ ETٹ{߆FHL#d̳X{"uEkd,q|$b&gqZD2\:WB&8duNEvl^[=R=oz+De@LGCz<:˃imPApҗ.j0xZʷ.RJW*}Hᶎ|0nB4ܩ|_SmH he9bz +5ϼ݃('4<n2 ɵP+as}ۀ, O.8ߚ$ͪx SenwaQ" [Z2 1?&X!:cИ;TL]7k؉v|FohI{S^gkYU{Q0+o }fCsk!Iy;]B?4"SWc՝fʻKƈK{_Dwl3뎚 +HjQFvVe&ŷ}XnRPX9kkUGuf3y1Ȭ vY~2++bon6RG!'zʎ"őh@V?gcn')K~>.!,śI}%D0 V)&vpn>4 /p pd EvRh;˜Y%,C6AINVB,,Usb5ǶCpWnB,YNt%|~qx[؎7NdD\} 0~EF42YRqaNk9b:>QQPmҠMu~?҉2S13bw$lʖ{a>z9txD-iMH䟳'D6d?bHL%[7:| RY--_>F+y!Ŵr3iX5LȘ~ki#+5Eʄ<~G7&|za=@FImrU[<4p(`7ީ Llna>Zd?ÿ8@6J%loi+V gPW/u5ϡƀ"_;DF%PK7M)y$薽*+ѭt^oj|!qF%JFK 'ܜV?x0n(O~ vr@6$"?Py , D;yK;@Va2e{ 2KUǑ Q5{]7ս!ni'<6lK`?hD.&; ybg'w_\ QBQ9&T T'j8 bNAqa{UpÍ<+g'.>R v<.O!i!/Cϙ+wUrV+Dm7=[x1xV*-l:g~DnW(a;y'RG@޷;L ghU5S}80cZ 1JecX 9S::X ܫ87(rTQNz cw:9ۙRGϮ 6+d&r6QFK]˜;τ\5q@ws62sCyCZTTn]ʍv٪V{J) ˟:PC,pRqqDeBeݽh(9~y(!tǬEd*v;-[O](Oj61S "au؝a{ۨZ3tGٽWru rEϣX 8rrh b'0jg &a9mMvOv5,*خ-!0rJ_-,&ba)PI5~:R%Ӓ^K.xuӰTe|w'u(5鰹)L2IJ̖eΓ{D}U;`T SfdM^QN!ΗL*VA Ksr` Zordq<{VP[~_DJqLhxP$ Y:ٸ@ƫGCk4h/ظ⃽ǾJpj#7pzǠ4>ұ (vf55nY<~Ԋqiap^XH}F29m+ɋI"p]>Kئb! `z=쨭1z89x-f\胏Litcte| x4'Rw?iS>Z3'C%U-/L.LiK nk~M0uigh ?!jı}9?)l{ԣEex>%{>Uoˢe0ʤkoBprd+con45FVoM{9xHA; [Wqp&O6o}xvCA2g+Ah򰰦E`wLӐᆕBYqPX)16ȭ]7]iGKk.[-6M[*(ʛrEдSnF4tr{S>8sڴG>aQEN?s/|K@UlpˌvuޫbUW]ŖSu;Sr}YPJ68q/&2g58mڪɂP8uoY`_{7 SٯġOI-G/{%ZEpS+pRը $??xJ vG3f-Xe8L"]lavs_\ƞ1IlUvqbEmgFf>SKY[?`{a8 73g~@E_+*EMc }'<& @k@>6(JxYNhfarۖW"̷FZ0G-M;>\Ju)l/:j_OyTgnJ 5v3<#l<9D5I>|K/3HB!A0A5sjS ƿ&&8" y7}O*PJ-ǜ69֦b~N*Bhҫ^J%jz?4\$k/𵁆LȈ>eJ^"P5JO$`| =ę^3Yn׸ф'2eET`4!r6! VY%>Nmdzm#FI딺`z6^tdf>22λYW bo][h&¡qmSv ABJ/{  PY)c_MGBE+nWORJ>3?6뎈:_oRF ܆j ؀'VݢQXk2O-Ԩth)E/L-1v0n-!+f^WQ!i sx*}j0"rtv(?bp"'7&\@7+7Nίc .t //K$TW<7ϔfq9X*c_0.TR la%0?D`*6|` Cßə^/~CAԒV3H,dKOѯ2QzڨTlh`NOnNJR]N c}j5ݚdY3߶F Ԃ/hu[;6?RY6f?[P(l8L} 76@)Sq_-mp@*iD $8ʒ$cw`-L@YLP\'8.فjz۞;S/?3׮Օ_J.C;59Ncl3"2׫Vɦ\BٶAp%x_(ZuAq{S ځFRx0tȔTu~( c̻+ ײA*p 0:PD2|זWК*(ȫp'9wjzn>k}HsMDlPB+Z0nu|#Jb-"޹MH )AؗԔr!Wo(5=2k2b{W+1hY"lMw:k]- ҰV| mRhƠFҜ)AAHӫ7#Å־5~{EgiFpֿvRJ!ӭC10+~-,&lc{},V{ I()Gh_}nXja鎛7Vg5P3 R.?gwÔS#>5Jt8ڷFAg!c59KqEb(5Z@^ilVq*ä?DXN~RJfG#.!MCbj]gnN5Tȴ]&sV-:`}VR[%ۧ[/29Ed6t>zPxe8:%B Gdz3\K@fm*^([h1YN)f@ W( Wn@!pɀ{}҃$c|P]9GKRiR;:0Eod8:PCՋK=##f6GT 7ҍ,vgǀݘ?_3f*g f3u&6,]@L 頳ȗbN@=@zAy!4G*:Se_أ$4 Qzܿ=ԺcNaFXbf gfA[Ӯ@(ˉLYi+ nj0HC"Ic9(_MSPxtMp'go=熫-p>ٍCM!@Ke)xl~3N5Sְkk Z(iRǜVNa,Y #0?Ц<7AQY$_0OPfw*P Ty9#q#@}oTV %1v4T="BL#9>= 0~h]E]_i j 9ȠyaM+Ŷ֕ @3 }#g6 pC.iG]2R`mdƜ4?ԗ"@-BfkѱwYgxJGf$X /*5#hQ˖gʸ-!ۓⶣR8wؘt9`s;#z&>.c ϼεhIv p.ɳ {ॼ7"N=:/FbM -.1ajnouZُXfm6KZ=!' <֐= Ey8׭Hs6Y1w䎙q)8>qc(ڧmYqVXviQ =E$LπdU+DPjiv=G> J^.r\4*]^R쑻Sw$|>0+h'k4ft'g`tl]liq6^O+a7 &17ټFhUꍢB=yfEójcjDhO)΢uFxjeg F@-g:ua8q!5kP\4J,"ۮKQ63^ ;[`: %!B #Nnʗ"XإA)gS1/E+V /Ynz9-9SoYL"t[&Z}> ` hg%0܂ 8 I>!tSh=H cgA?_ 6%3bmvZU|!)?VCi%X><Tv~Qd&582R5"~ 1nb LeuؤBhV6C*_Rоh$C.46T*oc9B2l15#@z|I/ D9fRTU$)#nuRK|/ۀ(n$#5Afr1_KKCժr= b@ad+; =H%- $TNQv:(mn:mY^(GyϋE Ф]egΪ(je(7Wwae]\9Dk0L|u_´T1Qaa)Sfpo3QF+p'olsH[zj7Mt4 v_e;Al{`KxCU;>崥#2]S)YFfPwZg}(D%5B<<̱|B+{:.M8m|FM)p6ܵe\Ri)>1!x 0y̚>_S|MY73+X>8!$?=UA%*>Jz"'8u>G:^rv.>R+|uR ~_ndvk.OŠvޮn"2QQXY-t?*9hVys`XY뢤ڒӗh$e\ 71^Wejv-~(a{I ̃IJMI'1<ƈfUW׳ ُAJEFeE~]f"^*ṑxQ ژȠdR8)>w!.L#7tig4='+<"Xg*xR\u_dZ- 2LTW?(hctUT q檜f %ĻcZHTEPM'kUiHw]%:w!f 6@J&kȃȿ1OuWS[G#@Iվ`ͤ\֏B/W^m=5mɤ PdS;ahH'A*SԜ'ST *Qe=htNL_1NLG/L.khBT qpCsڏ}F2>i=TdOkImE*?89)J;G<Y&XbK,XH/ %Є>va-V؈ ,'H6]f⽤̄0XU e"$/ُƒ==>}-(mX4NeP{Jۢ-DhSwRACX>Y~N}⦛;}6jZ[m8aXFm΋m8̺&뽻4YBrְ-Mt9$z ɟ&iLplsy5^1MH~'DJUY :h}iSFt7Rb@/b eo]״%mўyYx"r,T%I?|C(r[i> vIBt'._ѽ`Ԕ4g휛w7 Qj`}V{o5f2 |:*4ڧ8nXt7 %ƽwOL>{ZBÒ2/bN],qKmcfeӌQ?lhWKVHHYdzà0IڋB͋3DK<5"O3uJe\J*}^~>D8 _3`0(X;|ĕD o75E!'t7^q=&?7We[֧0ѩ;y`Mn;A%3fE󻶔BٟD2Q[Q; x]|,Dol@8!gOuKwj/bѭ:gHf6^;!@!In%ו/|9hXH @#?s>. ͌l%S:6Ap7\jjAOfwgS'OB;:>_qdYVپxj-A!ƺu{m*gHmXI" WX:9JoY#"\p4mRw\gi0YJs}XR:%/5&п?{i2^Ji`2j!;(h޾kT]>)~jGRFeamN6xnB+H b0w,^mqOėF9Y: pV2%HfOM XNNW"vfN؆G逐t5(e4څ1(x}T rY\%솎Nbɍ5S{v~tX{# sQ챳`XO%4zj!WU[8AÎl+HN*^Jo&-ՀC]H SaϥP)V;R>+Mqeȝ |CVAD'RXz)t8d[[\Jh+lpMd佹VG.\ϒu/6< 32=W- }Y>}>P NW>蔡5jp_h4=dtǐЅ-߆wpSYO |-ctՃox\bBE@4H/H4U`Vd#N&{󙵷Qn,_uZ<t|OG fal!H2wb5R Tߗ" [tAA]/%bwA;OmjO9^tm^#|X0rV1~a* am?_Lt6XXfx2_YMLzE"a ˑՎKـf)g 뺥El0TuNq+xVEqrV :R%GT@9g$dQ_xy=ѡ|ޝɟBP8bs0eǚهo7AgvTyIU#p2G9m!y$Ӯ1i@RկwqXH_HAAl-Y[2Hfk!a |KڍRe{*\xl$*Hۀ$KZɜg)xsc8kx>tTՑ u ƽ˞ݴ 2?(>vC^)[j,``T,'63O^U(Na;^TpM,duZ߼ׯ";y |E*ñt2S;^oJ`C >t v{b\/߭>gNFHHhdH:UCg12wt- /٢ҷ!7DYH'*WvIэ?7sG쾃燤Yfjԙ%ʯ4 7+ǔvO.-RvO;63M==HR'̱Yb^5}^kB_iȣU u)(e\84T9=;ܩ.F.~"Svd5AZ7!|d'Eg9z: yx8aC'5%~{<`3H"kIȎ@^-u^=\UZ: ezg=9#sBu+G%sI &-&^~B3Ԝ*G{;| KW]V&LYԸGd:5Ȋ¾R֣: ?XG@1yRyTN.ۣ6}77﬍UhE~ܡB* ? /+`z[Z|&Qg; K?;?>: d% Ɋh^!lM7rQb[8((ZGѨ2%UM 9[htGu͹9q[Ko %!Ku7 h!qȺaP?ₜ<\Ƶ¹[ s 0cс@~ !|6`&Q,0-ly&8S(`Ez?:E#w2DQ3s nwfg'Wt^!K³[- qE!#n7NNONױ寲گkhFa ]d5 [c.Sac =' lA$7^h.ɴDdsx&{.l7HC17W@_J-'ah EB!|rU5bΕ}=-~Xhn2kqlQ{6@Df$Aى(|zZy\ Oq[IZMji)2c@]wcBFwLba[\V}YU+'֍)玪5Q=;{K`3Qd~za>mRm-tT%_'[xy iעy71As 4NGSTKTI% uL#jaVDh9`?\̔Ryul$A{Tpp+X!B7EvJ|詑1VgVĈaM #)V޵ů*RaaD('ԧ*RGS l|!lCwBʼn5'׷Ҋj|֜DYi7f~;)(k`=Kkz[-Oj ?Ah!v` 4>Y-/0f/zL;\5?gMV9v_[4|~ >"fϹ[6lpއDjQ~6kxJbs%:%?xɿwиw31̪Q<"v 0y5FR}`"emPL.xcԾ4:cpeo틫R(${GOHߋ4ǙHp[`/[sBqXuXYUU V8-\ 80{ХH#Lc,:(qq60*cta!2oDń!a`5! "a-~ l)Z/ΐ&mSj}ߍaXjŢQc j}.ԋuY6y@ 8vLFhX_-Udi;I c>tUDԧ/7fzx5|p(̼BeUS QN+JMXJPrO`ߖ$Ze8WoK4 F).tS%jy4dHrP"78JF1/+$hɀ~ӊC4~#ZwګG009g|IqA S2 ׬7 `j7+2OPKh6ĭZJ-Vx }hE\tc؅֟qjPv9xW]0YLot^}¡>ew؋XZ@!:F^ oKi%c\g_-FW2EJQ'XD;D!94Q;20Jy .;el0ּ 6mQ!}8`5Q7>8e+Wr"9O24q$ݶ{ УqD5_S\SЪaw`"'  ': IpNf֤d5 e7k?V%1qƒ #_`_Sk9yLu l{W)uU79'PK3oڿhet֨CK.LINTQ˔}Qhg .UȀęieQHb&;{8$UiSq)||h͠46y[gI w9> 6@]x8yIV!!jJ[J= ڵ}D]Lk ĝiS6r~kXe͊ C`gDٓj f|h9$ހBtZM*Z +}H`tb E+x?bls0sck.xDU[;JP ikҸ680HI`j1c/K59x @';$x[Kb .>퉍mb)qk4!@omrtbX?czs~\ZS2ޅ4ycZy,q\چ QIIUӺ?P~竮3Puvsѕ.W{HEHb#y}cͬu-H»ZxluL!{Fs<"s@^e" _4N'dڀUUZX<qC fi|H\,`1=;ݪiZޒc(E2Z߀`>Ej^`ؽ=¯X:?aaRk!L+p]MH(ٍI[.@>J$T tFv}~7Estͨ w\B xDEB;DXy:`: tC\JZ^e0 Лk;44syy> 9v:yjU=D1 f9Xum(]&IRaF\!R:.QTr (J^Gfqd!{YuQ*2Xbؕ« `>4kaǪ{̲Xd=;2§J Ɯf@6dT͞l,PG<XCѢl hY#ӗK+dO3"p_nZiNP%dd0 x{I`%m7XxhIQdS"'m"Ș2R!ǩU//'pOu >j}exjC., `98ʘ-hMrRfyT;^aӼn*DNv=T!حqq&=K0'%D}9i!_}_~BɐI>JXH^M:M^CSj̎߶~M>@IABٷo<BZzG^ Bop -B6IЕ>mG?+]_>Ӛtb  HV,ꑝQt#:i0WL֣yAzRqTB͑ <ø}X|Q+^p8וXi)N&gj#Ve0e ({K.08ɲgLJL2-Dv!'Vq ,y?t5YY:,npATqz6?=]1u/Kt+Z2MR5֒n2u]-)ݠDZ"$ =i%g_컷2ADhlRkpgz.}5YKzMޗlHmXw4#ޥ0feXғ.<\LNJWҰU}{Gb wf"X&*&a{/!.{U/6:!ܿe *,i_:'k_ywpYa߄"=䧢5 d* u"Km.AF^0.*g4.!!cxj5+F6osk*XOAij2yȜ2_w`Qh]zj NqCBrfP3=8ivaհY _#A?Wr [F{[41D "BdoŅ,k $yKce~"U{D;5)0#ܫ $)>i @U5LoɤQQrЈ{6b+z6?y쨄L𸴡"t#Q^:%y'xsD#1sȋ}*Mđx"*:njb_IrЉ .͍Ði`_KMW+FPf%ʼnDVG[ȫMaiY'Ps9<-Ge%d2YMӲȴ4xS 6t>$5H IZyk@M`pI}ĻF&*n,J8IՒp jN\վN 4=^yU2pܳ ReC>ծc_~߸җ iq?zݺi XƕHKEIolC #ͬ흦c]RLW6M?nJ%}&t'{aj֢rc#cɡZ^ۼ'RbrU}]݁9KiwcCbo"93|H#sHXfULQʺU<6K*ĭ*"YwP2E{j?tHEWzArԩy#'D@| 8} !AGYuז`'J$7 #`m:wɄJr%—PJ&*E-6Pf/ F98b&6=CgS@X8doCrDƙB9PN{d䖂,`z watܒw}k󀃣 *~Ym,8|A:O⩙Bl{(jf.v s(4ZVQ?\l8J6G c{'.m;Y>|TJeF Ҏ&8>WaF)a6ڢUom%mCQwv3np'oS#jGNR,?8clW6|M @1F)aU3Sקew_swW! {@5ȾBėXu@(&G̲twŅTu'nqܚ??c&$][iyY'ܜr.`Uw 'D\oeiDכS=JN),fxV;Ճ]Ha &fKUކh.cVodAAlD}g $r K b4ںb)a?JO=q[:ߖ5JTl7EK%ʰƆCcrrKGlU8eqX?V3%"Z^uj3lc _@$"U*@&ut u`Ee9KYMO.k/OM` uoOYl*[.Pzdoe)Ά_PZ'4B|s^t #fXycåv["P\]":.j(r( J:օF@VO eP5IX EH̒Oºu=y3Xqۄ|$jRGoQ?JLk)| "v0,q[ȼٰf5Rֱ!ȡA|UƷ~ I<mQ8H73@u]hoX[>Y[j'bKQ֪:sE]t/Sեv~ZRBFOrY#fNeE}{'p'38^4)`#yԞ%/ G,rk ewZ|jNY x7~h3 F\/a aBfGL)jEQ8=c( ~U|m,%Ig.2Ep{XwOdTPJfoD]T/s,oXF àML!>Tʕٟ)"{.h~ ,g|&xISB ]hbaUsHsyEu7 rN~BoO+׼-//h#6e$ 9[6L%ֹ$7c45{'/ȑwVs*:mNA~钂fI9rMꉥԠtz;z@x} n?F4c*S@pyW#'y5믤Iten,X-kY[ As'\:8w$ys-;8*ب何VUVeoڼW~T]7l]@PG^9,2+NmqX `5C/u8(Ѹm&V15XM)] H[Ww B`qpm夲CJ'>'y.ںUCpz'6ķ0S*u ĭ HULGɷT2 DԼ}Ow HB-sEF{r_b3yֵzΙRȺ𖴙|} Xw´$)n[lh^<ѫ~Sb+xl&0>OC;_a?ukn5J.tghQ#sf*1/(=&H@ ;&>>VkXSX-c5[R@UifzArV/ᎅ^1 *ShKǨ'u:7xa)7 &i01VTߤ-7Q2HG"'ֲgA7'Lɜ&Q_>Q4إ ɦq*EkfJ6NضnƑ0Ѷ!s&p!҅b,]7٬rDza;&L(EЀgo[GuzstIȖ&W%;MH܍+rW  7ÜxH%M_FEOc oC"qbI g=G?_^B إv/ fE%^-)I(B" #uh|7PYnt^rP>G<,lSxL 'I4_~^ l3w, djW]όv"uMmNZn?(n0xJ7fl1B𗽌_}> i#8d[3VslxGl"p թ +A[Ƿڧ6 MQ'[?s:/$j9 x D6`r_O'eIaC'!UvO}YEg Z'ۭYY)a| v4>k'GAEy"ZZw˜.wx:e%@%"d3Q,o5yʏGoJZ*,_LB/>k 0&橩Uox/;,U8fC$QsQ'<3Z2щ?0w̖=XOQ枳i6a Dv#W_MxZoI^3A6¦> ·6 qai+Oے3ڔ]XAk݁HdZ4=ɶWad+Riqԑ~Vq?GFiCAg|2bbFHn쯠2}*}|Jq$䦂FXB$r] |2O 3%e G9/]PoQnTڃ˘C".1k{WO\CCu2+NfbLl/?T4LG}G 5zy*Kڢ]::w[G'M@eFPf \'H~zVUR| A|KFk( vy׏P™i])lf$Xh"kq ;Zj"6r֥bՖTdqtb3 eĮ6Fu$icD`^N(AØ[A AA .ysg&^ɘP܈JE Nܷ di Ux0YqBԐF:-B5[jRln^odW7ښ(\،}ϴ'ֵ"N/!E\Lt\U@(6󆹪"L+D[C{"=p%F@{R\2 N"-dHu0N:OnP7:Cn\z c v>Ǜ&\yn=Kr4um wcVKؾݦew:6 iGMu_ =1B,yb8 SJqlWLVMepNl^ywUS?id e3R+X"4dk'E z;8Xpm^KG1ڮf0: 6`n9;V8dJ2Y0xgKz{!7zF1z:yБdѨm?P9?J2/7!# I0VŸ3~K{GGEsړyCT[Peob |]YSEI}&G EO G K4ne={ mޮV.qAtwVvR fi{!L"BiS+|kA/gBc e ̙9\[e*є%O.k]n\ߨRYI;٢tdw4 F7 ,W&=[Tߝf~n) ׾$a1ĿlĤP%dbo4L2DXn"i(VՓ ≷֢5J1Z;K(heialA XbYG7:w@J]n|RG&l`{\m@͇ Y.x`Y;jۑҳȒ]o4> go.EdW=!8uNܦ0|"W+($;P!g.m2*i|\8z=}42'K+KHk ֬On7.ݝ dž:3pT [Xƀ+:7bۋNT3Qa>KSir22HZ!/#D`})t&1뤄cg ou#hSهN"#Xx'}V0eຮُa1p+D ~0y@Uӡ2<ٗqXwlI%LH'jF ,v b\.:d<=W};jcpgf8ifMx-4L7|[3 Qy7HWn?'Gq^p8Xp Z'CF9rB #dcF SKl+q/"(,oRfcy>t3OdZf1`є6oj"fPH3@1Rc[2,Y oF5ceƾY'\iRL Zm߻QuqudxkEm1 :\SIZBTIpU*;\~c AFqVsDwL~ⴑCmHy)羪K/Ps6>׌nQ[mHu<^i%; AiWEۤ4n$os A.$w~~Q H|1JMgrR(ā2~6Q󒸹=8*܏QLt yu~3vXr9zɬ̧mQ\x0rNoݵqf\aR]ٌNfxrʷt  2t81t\4.aI1͙u^}7o$9~:3XNCK襏}oxVh qN&I[L?cϞ98#D`EGYhT"#no-/p$iʒgk62hU=mq$}8; 9D)eDE (! g9ˆֿHyASY{8e"&"dk="<8.0/,ψeqLܖ;5Q1S$nQ(L\W%MrdЪtsꊞ(ٶI[8Y.V/gsPvYsd(wP:h0ȴ GM/|.cF㙭Gow:RTƶ"2kjH!Vp(015pA.?Iqmdv,.j_ύvlQɩq4UHbr=ݦ=pKC:T= mZFC\j+M)LK"-1c <O#y# ح09uMTNnK2z-[QuwACTVY\QJZu|2}Zq!\Zޘt!z} ry)s sa-*DzoB̡.̋@l`of^she|z(km?c>jdSH}P#KBrch&C*so_WWi(b0m(uitF|mӈDĪ 8hR@2> -LkZ/FOƚ)d>H5tx)LJ1L(L#5,@WOrua W^{ 64)gX'Lw$ WtƤIE%.poRKhTs{6SCH#VYOԐć53뿴EK yNJNSiri+wbwOMr5b1#T٘Z JX5ơ*5NUCe3`!f'Y-Qh/+z͵XlG К_CD/] ЧxǤ Krj?4l,g':s&&aKYR[-fԿN xP75r` ‰GA=HDQskM? jT~NA?*X$y2'4I5ù0Iv | ՅX''ܽJڜC7>@tC gJG6 (׉u֚{P7 @%~X]WN[} QyϴX|nYU[ j;!| -Fe2Tf\@>/Kș/SVè_\T5ѴO/Ev1ŵc3c;rL'WƟ՟(oӁYRfH?&v)QaK$Ťu: Eа*O[иDZW+ vͬG9{0eCì0 KE\>Y65@P6[3TU YP?y_Ycz6նE޳ F*„q?lU??Ge׆I `*ȅ',DdpӾݔ@凹H@!fM8]W5iѲyC~S@l}^ $F^*;TG%J'!@l>Mzj:sͯ[`TͅOA-b/$!,IG%H.j__i1D#(Glx1l' @5D|Q9QvB=CoNV]1NzYofᵒJ-|Ɏs/3<_}BeN2t߱7{7|aB/N:s-Tx(h*%|LSZkǂ*OiEƻ˂>wF*_&^X7vF0vCFl٭C wj fiv{C{y t)]26ľܨ<tہ8(u^'AZ0;:5i3T=IUI\ͽtv|ܽm0W]X D;oTݸ6v1,(2ʦ-&4saq+ b5DXd)@ vjXBDQ F‚uW~ʦДr?:i75q^KRjB]:/xiQwW|/<zt?{f n4*(Zta5 "&5^CR}BaŤk[f /Y9PL'*4y.ޑs0Sb%t4*ە=>IP`7Ϋɴ7_sRG$t3, H3n3ȲZ+9)C*U.UeH~ G[^\Q6 &]i Ȁ5cQq(FwLoPGi"#L\<*NC QZ砯2ќmѐuQ"pfi89;?4c +(M Lzz04~_Ae8RK.*)qelTۖ9=۸ȓ&X{ۛYqtrŷAAYE#όdK&iKεlk_br[{o;tK0t(;8df$XIp!Ap,6$$mY}Y#_@"yŨOyW]!^ψ )| Ԙf]Kr@/Mmf#x3g}"͑8]udo`rYդi# }ymig<:w@Pk  "Y#Cg:ևf2Y\~KBuß.HF#:[AQeټ;nڥ u? #mXw@RJKy`F"pၬQra@e/y`&rORH \:Cf`G80$ET$|#b_ҥ,RhU$e7< gO܌¨ G}Rzo2 iַNr֬\x o|@֝=g葹EKUvӬ{˺G-JZhn,'p!S[ ~7G@zI\~ҦY[DT?UF?J H͕`=r_(_Wiܶ$,^6bOAHEwQ1aMڷ0 {c k?7.6+.er.LW}6l)/?u_43ҭ篛߅! \Qて R.-߿UGpbRddxFNV8kfDy69_vp뛏4Od -~&c݊܎ˤyD$p`~Ag:ݫkMHت֟x} udT9 5)|f\Ηcêыc,gD#n#Z랒)5vؑRZL?~e]2H=ȣ qڈ-Ta@la2t:SIq@X]'b-9IB[UAE1鞺P$qBA4H#'3ΪePx"Vd|C}.s{?},h751+aVxLf7 ~=wI_`ʦM_>"Mo] !o1zr VVQ{>'&.wPg7:OmQ?#TXٯgO/(J"zzY5w t330]ce-|lKKYYU\V޴ߥF hK%N"& qYt &O;c6|`^"umvtE 2t!vj2]_Eu-`/}Wl2]ݫa&,L{=~-vVoG\RWJ::{>&!Ħ&_52n]ih%nYXDuЋ^u5^@6J'\(QmmUU\(r3aG{(v&'jKEO/.3@:C6D)ٳvZ6 e0eva6=-9 W O_pVB㨻9Yͦ.w(GyZQ xyz1prgeg Gq({bv\!;l [uN'JZΦ06LJRP>VV/ !Ijd. U1oq/Ao ٳ?vGxd7Y{D鰗A, ]v *FY%L?^3(!nӲ5r~O<@TVᕰe&nh*yQ-ˮڦѳA'%N$ΈC7 ζtVqF&3wӯ0Gx8UhL6ؕDk\anY'2Rq7]TjڸQ^_7o=-tXNʁ أBXC m԰H AjAo\]]gV1Iɐ[T\ļۂ-99{ qQm܊c?7/H;`*brz |5pbN5p^gδh)5-B 8KsH @MFK6Y!ųi@gЫH.aJXw%^05ߊUyΰQm-*W/u~36CjW3/s(#a|%+y0Go`dﺓ?IăaԠa,O(,O&vÀGy?Tf5TڬhaDۈ@j'YrbKw e<9H l{!m[iaA%"2?]eOqsٶc-`.3Y2ewZF[A$K>ҫ[Oo{1yG-M"?h$`zqv-X{n^\T0JL I)?3Q' kKW:8|*kCjF!WpJ3xE"4=ˀ@O𙦸Y:#qo+N|"Lq=ANnmR[ O4)D{]IEOmr"^E ,uĭq~„(9-,odzn\?c~anlhf[.;diBw4nZunv:pyu.(Y$侔bsԹ|. c*fg#aAMœ`fj&gZ4dLϋB3D9#q:*F>}aE 4ظt"ecBW5w:ӺK߱a I)dVlWwW<Б=%ϸ&!^Cwf_v 2lVANHnTFjPgؗ_U أTZ1Mۤ5 .]& ̼yPu{4gmƂ-hR< (NkVbeңQȰ=.՗]nt0(Н - VeC\nOW>R_IQJgs{}?7cZPDyuکR( , uw;B o%P [DH11mʖpx \P4 ѲPe\8Tmdn#-g^8yl&len:p_|F6 U5Vܬ P3g̩>mdڡ0%ybjפI,GB#`GST2iы ӓ*Q-IN&Uߕ'ԧ1rQ+Tܡ 9&3`9ȂM`K:P|_qMi\z.CNJCiJ7SLqIC#Z#W7UTY|[4NN߹ ey*Yn~Voa0̬^uajb:@b+r%Dك;lq=.l][۬,o#05G7Lr9)qD\10$R^&E@wk LIn,YLn5l¦ 7͉;T.kAIShߞqoV LTTq(\+KC8S `8Q~+Io k2 T4nV ?0xQ0wnp%$bwRb FGa&v$vKxd,ͽ8QqwAE~j3}C0nb1N;fC`#X8:Jp@\ jvh4vHSTtl_o޳#}_8qCP:ӭ;mt8bWhOʿ9f)1b~YfOD&rVxs 0/ǡ`Tx8+J+a }mRN+}N)GI0s)j LjfYƎi'`aq(Uc|ye#U>kغɫRЬ hVvH^26exu Nf+< $;ԙ\[MNSFV1=]64? {%ToS_ZLCZ[Z7li%YݷN[\35b_n:*xaFw097㖸afG0ĵ=9? }$4WhWE8Ȍ㬹h^C3L@;KR,Dޟ]#@ª7!>L1md;X?igcۓOY3s3Vv[iL2zF5?4m"m[bpX pVړ$$"#.4*>d1I=mIabɈ.@<|Ѫݗ`%dC5MU!@U'Mѵz_p--%Os;&!1Xސk'& {֛@ {+@iR=A8MނRRQu.;10'Ѯif{9:=kŏ^@E^HI*Ū919g. hI۟uL]]:SZc4l Mu5Y$bh磗DZ?D] b"7h|px/fF61cu&dYK#a8ku)yW2R>@?X,KK'$%եe}^ U!79f6͂%=ܙ2V62SutfݲڱR&ı5v&5zPR83o$ַfZ|40bؔÇ9Ζ1dg`u@lQ- I")>HD.!f`hu$$P2DPэh"kU(//A'e_n]S"C|̽%"{P/ 4^HPРS,^<%VpkA~Nߺ-~qHCdga|<: Ʀ)}P'$G$֔ K716+/=l 5`H-jʘkǥFaFJEa؍C 0u1$ y[PQ2#ƌ `%a9oڣ6HLzKs ?{!Z»>zPJ7tuRxړƚM;[V㢢r{z[/`R[Ѻ84KQe4.6@ *W:)`)mIYm8"^үyi@ b Bjp$;Rd`1+Nr,1Ϩu.x6 ?@rNao:*EB!b)?+@fp XƴmPL n A{3*zKR^u~j)(d1$vI{ mo30@Nm\#_7eV5oFB2?p !Ŷ`+#I@vԸ;0&S#ܾp'ӍQf?4A -tUX6IgwZț])!+J^XK+J]C3s2|LdŭKwgVE@oz)JfZRC@dş\7{Z h JwR(85OcePvh/ί^o/Mr]j+|߇TTqY A(XjyfAs_謧@jS!?x$1WnRx}C5<@!$.>'.qWL7 U7<2_!6xBT:ف) 0qw"ZD~P}ֳt^@ضOEs:}$fjɴx 9upVLL_8Ģ./gc\,uFL{!~r$^/ jznȣ~J-?oiԫ?\9OPh䅪Te|$PWKO7yR "1YMBձ4=߻c|vqpīeȓT2lmІƊo Q+aJp>MsCvw% _Ub4C|+g_[ ؔUeHx r dzں Fқb?ĕ$ͅ4oYǺa[VNYRD|']Lg'u;}1*P Rr? q2`V&'IŸ)$G*}׶0611HBTAtʕ#ч(T ;~ZQ1zWa0} 'ӥ,S[#zc.*(\.&{O&P;eJo)6K6(#n<f`PCVQ6yO]e v{6sl(;sO;.Bq=?tswfX+L(6E>Jлvvdc633nl~6 g>1 9 T~EQ-uԬ*|Mw|ɬ.A*L~PXç뮴޳(FfIE80ҁNE(& ?`ٺM80FFзYǛÚ~@MY-&~-VD .)P5w-&3c-"L?0IpA'qIJSUwqwSgH4)Yuzl?aAV_EN%yq0d?MEٌ`@\a9ˁ8L,*[mVus9XЩ@Ν.]~]9pp-<sV. P9ƣަω+k$m˔) 6-qEZEE"K_ȅ@|,Uxv!V*rR/)ļ.\/Z*W\;ckΘJVm;_* .ńgۢ"֤A {'a@*/6nW ^7/:~|] X=GXvCGP0&='>Vft Ǭ.+r rC5G`v+aZ@g3JDl,cQ'%~г %}(-prb u{@_>G Vd#\mz*PPl S(,~cQ/^Ug}T},m‡GBV(T ?,A3G)V! C'eΣDt]Au  %e@-!#!278H%*ӺeGKF-H_b&Ѫ:Τ77ez.'q{y9eh|HIB[ i@u(&rs[ch`;yh ,aCqb-ѡS9[%X J)uNQQ=?A[i5u1 If kM /vB/f)n6m4,Wрܥe!rJ=ԇYbVh9o~wr_7 4Z0fWxo'^Ejf%`K,W]3Ό3@y/=;("6h,MZМꖚEL]=t'^dJGf-2690c >Re>i HWo,x:6ġ-{-opU4TR)o]R eI@B^-し "e# 07[Xg @qT詪B &܌'!LȎS 9do~̯oUF R~~t|76|` ϡm kcWI:-!f c^0\7ry("RO_|[5|vh]dMO4&@7ڳ -B?dGɹz|S. !ש['۝@EKc]{qlwE#_)gi;d?+$l?됲/;'V!ÏnsXE.1%\/8iG\3O! B8'o=~|Z=΁/E -<-rc0%N!=aV?_Ū5gNLUwFn%bTixAb92;gڎ%[Α(,As88/]Tn;а#gjZ "zn. ½V lL@I:(7 rfZQSGz;#ca np[x P\=: Ԯی).l?ćNߵ"@pHqlcHog"j9"@hЀ$e4݊$4?u\zd?;T,%v%ϛê|<{=͚V(;9n(c-?%mc.40iH 0a0lHսe>:7Ŵ06N2@*o3K?zy F}~mv1=uk9#fXA缜58O {`ƣye`VyB*jN}\05HJw֞x`DG@H r[ħ{D؟+[ŎE"mҏ]³$ʕuj~~Br* պ/~wa誣HvRK9|-8&ۓƀAE ȼ ̘GǬucW-NG.w3VYA~WSn̗"[52sWp:r/U X-! Ȕ$t)%=|? Ԑe6Rkи' Å̖yT!g̽A3}evnA(}NP/Hʎ]\Ba.|5RJ~OL^KIhc{?p$`d۪FpbK.Hʎ0|3O@H:svX>,w٥/-/]x4-uGXȵtĦ#2VvWJk蓽{fz#W@Z #.?yĔqYwbwiN 'e ƉB@nAj[VJ} J2]vwEt"PPb ӓX)$2Bv~JCU٧Ӟ؍!a4'O0m$eP@\os3," fRzB6ZC:MA fps֧.o^GuTPnA]UTdVH=你wzM+% ΢TĤ!DP'fbJb;) UW瞹Rh 䉰\hQWFy4(Y T%.Ӗ~"2۩Z:(cJj%歁ZhQG:peL8_lB鰻u2Wc^OjYICJFg ]sz;줽YN?,1DGw>"jn11RS9*+r=O0Z!?zE|> gY鍕YtkMyPqI97rP0Xch8:k l r`&C}Fdi6-zk)ҞT_# H/G}*?} ˣVR{̈jJ\`:ŗM p0gB'f+ k>>_|Tdڷi}~"-\i]SHHO:F4,RIՒkV+@J|te%#nQh]PN_cx24,tOPm"#\eP#6_{2Pe1ЇpYb/!p-R:L' *i _%><# J>9K[ӴIܜ5G"FkfB~gl2gRBM?Ġ[g;K)մD]m, p \DҘӋHM\9^{*NO 㚷z`Z?Sj8qFwt;tӾ X2}{_IA6۰{"d#WtlgQӑM^r׳ =/}]e36_Z!|6diV 8@UvDfS6s"b!=8mٴhT/ywƇ$*rcg#ypRfb_YfU >jTj-+V$sp:K{lkW7:3R >7qa>Y$u#tP<wдKDKI/оocG0Ȩڤ= GhYVUv` i{G-lS"s#%'R JP=4P 'Ô RK } ˯qfG;6FP%lTUkS7;ex:VaE6Zc9;+=;b =\6>6kxW R80?WU9we M) Nc' (Xz.jSZ,ۚXcS Z8&2)9$IU*f7a"'A}OWZҨJ|{_v|ogʀi-' 4:BIf1p?ݎOUٵtuo:3{@Pa#r({ [ IzU:NM*s<,̣bֈ9!Nk1:8MeBRZTڟ6w՘> M2[IAgLzå$ Q7ejHT0 ɋ =e 5iYI*4F/HjFaRXvV7=m]+US)*O9i&Mk5ku{ԫRJ˚C|bQq&rM2FR^~\g"{Q7ckJ?]j;Gwɚg}@eG XRfV"sV~5Ib k=<8\ 5]Xw`ӮDAGXx'K6rnErTXPi€UMâ=pKύB2T\+zuƽة~.Ʉ?</} :1@\V<4[J&*(0*EbWF->we`sI&FEPt F~Z_)?;y}]( ؤz펽&²>uT\rK \7xFjQ *cv+‚\S jpbڂ\'CS2T L[\yJ=џ-R0B)$ qͪ36ϛrl?>Lcb;b]uDU0?}wJuA>oUŠo6gws=vԖ DٴO)89:3LHdֲ#N+q 4;֑znUeZ1I: ݟҏm5\3[Q;;,4,|$msj/Bdt}ΞL]D7q>k4;&![ vLS#N$Ce/LVVsJC#ތg=v /adҭ&HGǽ̷ ON3MQoXvFm~y,%j]L?_ukV<{ 3 0`K:Lk<p1[<.5 })ШINa C|kk6栗 Ƅ,X1z,-L}Dm7GK}M$*nE^EeaAB(YnjgqyL>HsR#[[wjSX(F| $H9@kv l2sɮp !ۮ /8@"휣Eϸ/430iTIۖix %<gJK fc/90e 2Mdj H`.Af{r|"J$KaW :VWIɴsqKI(ЁE3;1!e I r ÏQ~c0 gpsr[p*W?֔-B#?{!S't$.U!eYkagw"151<=ʨhNk[ 55|ЛaIϠ cb@SȧZ-S+ `[{nCᶉrp-Xbٔlvdy5Dv1avGH'91L+Me,jH`⫕VXo#nWė}P= XQl-ox 0 hK)l /J] * l_LgRW\̩p@#2J"w :7)GE`W+M+W0q#Y\ŽC0DؤNLn>`1c]ZELw3V^oޢr_Л4q{^q]H`7a,׭.EE9j}!k'jo3]\Y73 %= #,ҌF*B RdX$?5'\(B #34L7{AVD-Ƨu g̘qZych\ ޕIgbЭ6BZOq㊬QZ,CJlڄ%}mɝe|yEl… Tp2+w!/;=}(2;̝@kw*z. 0 o .w5ITaEg<}Z\ ɓ=N mR2tX>u~~b $s{//Oת%3dV2'kj^m_ _#$DJ1v>uֹzi/LK3aU0 βvv؈+uZt:HM贶Ũ8Mrp:_v },+-l^]78bJzJbZ qݐr:V:q 52 R]dst1޷s<þeu5}9 BW xL4);Qku1B84h*AIOA0‰-apYf2r`P3!F̢ɚɋ[ Y8N1xFR'{v){!30f'B,k:^] F v7[ydL3셃_IႧLr/|"VU"b*闲.?^X,aBQ-;{5SѠ92oiۆ'buVY,|nn-hsE-n]D}D HjIhђXpƋ~^@$Ygyv?m*+(ԪD#]t(ٕ_)Gpz8ݬ39=t >D7 A|8 Xz<,$NJ2Xd> k64Pj@BtؚCBnɌJ( %%:N7[H~»~ǧm'p;y14=3򓟣d]4D–7x$y[Y NfÝL@}@>m έ;<缧-,T&/S_e~5D&ޝukM,'VKn2 ?ϰ UǂQ{]ږkrVo[9x$ni{nF&~Fz.zc*ط<أ䈗̠lIm"lZm"L1|%-󸸸t)f)SpY=KbV2 3jOt^ܺ~aĉOф-pNXp:Ɛ~ # }j4: $pަ0h˨<7#Q~4~":=-o,zǩ!ѯS~y ;guEپ,nK4cCe)+;а9Mlql~[߸e4鐳>AIz;xހ<ۆ_LN,M=$gƓ9vD9M>6NbCqj6ZL vRŘJK;+_:Wkd9(-'3aR.iHx,==,fL N2T',VƮΕ#4Q̢ÿP{}(T}( 䯪tPܽz)cvk;5J=yj"'G^a$'aAGFFɕ5_@c ~ +KMzu&Mk e!O:Wlib5^:#q#uW>y>"'e*oDG6;Q"fЁ YvC ~ƏDwG0pݝ•;! RՓ6zjCJj']2Aَ_kC؞ ¡<c1n6r]jbevEܪo! %qy(ZePe9SHY \ssFwRuxqwP#ünp)x6soȋַB$9T@ٛg^OQYn% w CYx%:7pa3;`H%s$#ŏբ4cg$cpVy oڇ{6mMwՇ)z SZhNHYH~G=j8B-~µæSm<6[Ԑݱ#v- /?rulc15+Hz/u;/!H%qmD-@J@6"w,2O29AXdNqm1oxLx`V[-dsGJ2(ZVOY3/ϰ l\E_yQY\RY@=aCZX7\%HБD1fݒ6kxU-^zvt[@G)a+t'uߋZT[^b;zMwE΁NXF:iKT*kg3+GA\ "=-f%xqxTf”K 8۫"f#w>X& 6xA}lOcPч,fP,^$3Y;u>t їLPQ(lYex>;&}@Bj3{pK7=_ߔY uZ_Ծmv\H@Z+S_&z>r\X͘cH--ĈVhzޢ+Ďb^\STVs(y_R5O869S#taE.tg5{v^&n,5f48a,pdQ).K n^Ҿ;1&g/*bHMe:ӄr-3$v o]|^1Fg*EWٺr)ٗm&1,aa^־H2..c,N]!5:*N!5 9T^+%"h9W6+ iV(1҆U>7s{@<]SzqxȪ\a7gQӾA5(yX/ITyBsnQm%)m9,8e!,!:uj2΍BNc2zRFΞ6H[d^cF;v*#澩4[N8,<wÚ~Epv bwf$S7tGoir%ӦV8_H:| ^Š[Օp%|6EYqYoO=BǥPעNK%_Sycwa C Lu`aVQr͹J+U1F#-ֳ7kqxgx+ .W7Eȓ߇AꆰG`Z'D;_SkMSgd&1z(j6a]|nZSEW:?ޒKnp16CH]To.T# Ź԰X`%Q{Ze;uL(C(anfIOHI*s *̅lV}A5Ԏf{D0I-,][gmZV~IJ5lV3sY,XGkQTne#^:гNLN"ya,)18'XP8I{)Ue|o|=_6Ke̓y!d-fC|x}`Y<=_saaa(a@Eิ%iߙP;iK6 +'tujFQ9/'_G-BR%l{ڮӮy3/F=Lp2i^ʺ”|^/jWu~*'$~ڛrl:O7Z;7$r/Ỳޡ Si9 c7iU->B߫ujZ3]RE$8"ȾȲ_Y;X#4omXi2o8XRNѓ|r ߌNAE&Oϖ*?s1A=Hq%ǖcKXU疂0<Ջڧ:kWlGy ڂL̼+Se}1![Ο^;G4uL0DMDBfXhSŅ^1%c2Kڍ0Gm~]9c]!EVBd6W^$Ll:ὢ})sb7<P D ]/4("P08=ZՓKwvܛ~zpm,{nJ7ZT]A>/SlA1X/1i=0hnt*ZS~]/+!R77~ҟv5z_v;CQ r~Y}4)"e"DdP]a;ͼvWw|OF+Dx\s?a-mq-4icW]X0Z@/ 'וwlMDb{Rŋuγ,> TmÜg4p*vcP^U$U+a߼H4ijLF!z!z,p*0S"eCyjY˰m6QIj\)'<}wxpg7jMХJMā.{ܖfCp5vg4S>Bno!e{pO3JnSǣ]֕W|בԟ?:EJ WM[ Hav $@^N~3#1[UX~lcn=تۅFߑEP7ԺwD HI;inAM _Ƹ/ivD`UcE8LTP!&`O2X'O+g}9C_S# TvdќW>ҊJZ]@B!W~eЗm jGm{l+ߌ﬘'*V0bM <)5DR =YTyxkTwRZiGPqM-xC.1E>7C V͹l+Boeq5 ̆pOc[Yd+Up:eMhyq O%!ȧb;w=g8yjU Dhy yE3s6V}p˺ DQaxIdֳ,XQ%NKߠJNU& H1%dh!re-/S>9U[U<¢Ր-ԉr}"*J.ԫjY`,M{K rzѣS-rk ໌TzʴP#6H>)~YNpžtð>UfXL,WbI-Q &d6: s>:,s+{oq(ݽN/K})+f#bfs![WYY pՙ_VbH˿8!7N<"TlrXF^Ef{^ Z>aAi>ɰ$ ]f+ sj<2<tk<-%#(l8IR+3*@E) Y7nv4B4nk|E# >^;1GET$KP(^cߢ=مMvw2n5lgqi`exI7IT u?׏(_]փ0 f9x7Ȏ P^f1)긂zCKdti'9ȮN_SŮj%I.5Pi{!)ĿuŇSV$Uِ ; 'nY䟿D,X9QR9GekI 1k@e7!^zE;k i#TΎy&S'LAp8.Cg{kvYv%Ӿnq>lI#Ero̦F,ٕyf:Ӌ';{>bNXxU㵼] T?3 ;fY^츥w4T\F> D4Np\?et$0)QWK]ᕹK;7Ytӊ62̆՜]Ŋߌ9wBcUλ]$9EA6^^Z5TZ-sLlU9ҺG¬&hvQ ƕH%imR;rR\@^8PxKp'H\IdI 8t5R-_&W1s;^YP*CQx-cLdX k{;@$TR\j~q{EQ}E2$mCHp%g7spn+o>qjS .5GU $5G˜O̓pRn>h[?q}X[|'d \| +7ݺ>? Q& IBNLtk,Cwz(R<E,4Ys;3:)Q5<8lh=)\/Q%Frϥ3]z ςS݂sISd#NePx8uH*\Ӳ֘ʄd֝k ` e+{s ޚk-[0Mzv)7e0@x+$xJ*-Lw楝"bw6kB:Sƙ϶fǪéa@n [ѳ4E16 U ν-dBRW*Du ѳ DhA1v@4;e~!g5>Hxu@atJiYkR- ADJ  =twXrp7(U~ɬW nD "nSo&w0֝WG/$y\}bGLP6Â18:Tʍ[>4;0̧n=&QXd7KḶ^٦E7,ԺEAo w?v`şrx7EEhD@cV>qH0.Fh_BsXDI~+ƳS)QBhٲ)۱H 9|ĥE*V W/5qt';.q9 ^#Ju!iږ0 [ d; / "N_=?U߹S-:K[V"߁?ÍFpR}o r[WFZEWV nq.L߇kUsȇm9| B!-}c:koz6G,KзݙLo2Y_kE[Bne? ة)2Ὁs#쐆\״VFF¬)Ns[j]=mv4n(BHZL,NGy5PO ɗZdysWgX 9͠ܝ|.:QD2& 6 = v 3BA9$ǗMT@Ch Go$)nRwq, m" u#Zڴ&Az}oCEø@&A ?3 _l"~OGJr)Hve<ԍ=/m㠙$A)Jt7Ҹs˼IJg`/ӣ!@7!u)WfՋA ݘNu?Ж\Wo45q:MU֤mVTo|U)6׽&WDr~L#RUGK!B 1 H;{hn*Y +[ Ay#w>J;mZ7}abw M{U7CeCV=z *F΢tz*:ɍI@a`< i1ްʂڤ^S Pr=ƅΞ0c[ $ Jk|y$NfEq;vPHd7ś{JuZyA]71KG.9= 4O^ܔyR-PVP,^3:8y._ em [LDk|ohz 93V(͒1 &ݠMXfr8lw1;rRvB u}Vi >)K,d*av|,]OVu(]=!ִ0uRÒ%䰼m.M}q?낳7.Vq<"ہ@B'nuЪlytrB^I@$GhDdIb^,Zޚ2Z ktK+cJ`"(cd/ }+ >+R X`ږٝm/߬id ߜ6g.-Ix.x+kdWk`FPkJbç5L rY>/E,7,I ݪǼ1#/z;ߡ4~EЫ Iҫ6qM%" yRʚTx' e,R-;ɚiFGN!2*Nj_Nhe}?i$ ⍴s^\'jh荣+WƫOj>-{<0W5k*v }(_:6D#5=n.5f_51A]so;`2R5 +3&bD.SVq-տ % hz8G}g-q~жL|_mw`_ c(d OitŢ7ꞛuč \0/֩y9N(`}`& yp7U4|∴w| L{m_y,|5*ɣ;X0.%̟ȉ3UaiJBXHZkEo) Z&237Pǿ*uU6W(Гt.bc(dC^R]%+ΤaLvؖH8>B;}|IϞNInl43X]$95uPy'1 WZr.`7ٟ.D(Yu^7d'W PYVL%vIUEltC`Si[i uuϙ[j{/xyoWȒh{ӯ'`2P =bm@)CVk)͸/͐MOuC4sBͯKWQI*ZOlW~V;.?8/b ۲@ oAƏ[>i`1qe>٠87D%!BvpFŋh+5(?\V 0N50.] Uu0byssaR$L(”GIwHK'6c >U"0-f|-IH84BO> Ss, bo?>E[M>*wIIk̨D'l"MI `ŨS}I_.PT6: %L&ư^Fb)rX)5Kǽ[=voXc/ImI8\MB4〤z%F>G؇-y h1NV C"ϻvT#a*/o VdǓ]L4 |t.V]=sڶ*@(Nc[Gwc%&{U_GۧF"b*&S]v2:eٞ}hn ;0 azYUYhE@l~rh.>7P3"mz'D?@IO,:&V EuWl/Xԣy-J5T}Ygtd۽SFv q?؎Oqj& W)\=S%6<Ѝ꿹W< 'GlQgN n׀P_ӪG 3YxHi$>W ndwuQPf\֨%. PP@xn^!60`[5JYڻTx)Xb!,P A_&P$Ske>D2ƅ Y@;n'h+K; ᠨ6T>6L~<;̸yG9Gҧ>7&vFϳjEp \m_c DZ_ݥu_-˻.?ul^I ibT6?QC$* 7npi̍r dS= LٛG[v7RH~VXNn*+0:h|CpZ0zQYS?@Q-0%|Y2f}z tM-ЦWKH{tǡh2tj0jW N=NKYF& "FJ i, Dy[3nR+y3&^d̲+i'f:-w]U&qh٘GPG}Ф* `l̹,#RR_'q"+Nw fTvk:ztԵOQk["R2"ӶX>6Ie `^+$Iw/dk$pӎCAI=hպ׬KYmXw~^.8>OzxDeR崫 nQP'o\8gzRm5eH%sĎ(2Gېw6z חFIn(m} ^K氾v%kIU]g#55nx7 L-E4(Zpv9^kpQb9}nHCWADO^A=Q Y4k}ZaT#d{oѷHugIvmYڠ YݚhpW8Ry 'Oט<9Csmi[ pv,µiQzws媆߹Ja-Ĉ\(C-bEDK%=MYny&4p) ggAw9R;uJ$#~m='KgwbW{ R-R WNv{rF/ȋRj4z,呞}>lCBuʄtLROX`= .O]8;u}TKVcbM Wx&D 3p14/fJ)reo[9ο"R8d:#aEp ۬-{/-,BѸpu\ tuH`Ig CIM`aiq*Q0L$FwVjwWR"Mݸ`5M²t'Q\_f"A`szvgڈt,˵!'Knuf%racS3ݤ>8vöm & ަ<0s*rhzټá/ʚb*B| UB&.Ʈfb)ޣ)nmy:]Ns~; 1R`67\\NqkݜI/=sm&}S%𛛐CJq^0fF$̔Z:.FZ+v/1̅8hJF"nMǕ:tN.t1g{CUdj- T FBOWN$]sm.B*NiG-gs6yD*pA¤Ԝ[%n.^TQCZK=T#X_AaɩV9$@Kx*;)J3a>ŞBVԒcylD!Kz)fǬ5 EѥJ,dR6ͳz  AGL/ŕ8P Η}[ unANŒ6JH\E- 8kMlMb&6{&s;RG~H9gqRL8}MsZPsz5M"JSq6C̄fr /CU(#ٯk uߘ(rVT bBjҳi^+DF'jGEE;zjw(Gf"c ~] ?A.<4{D PpGs˧E7\AZՃ+ߑ",:V 3V[i0nKS;$&*>\  uuzU]߾x.fb4ƈkyT.5/O2'c[Evkjݩ/ NHw ^W305.!#]#@7ڦY7ҍHLוWSށ@Y3) /f!t٦iwHFsk.z_] \I^:MNoFVa:Umb.^~^ebzˤkI-? 6$v$L{i#f18 }urءr<b}"`!C=8c%1~k$oicφiQi3_F:#jokdݗgMY *t#7(3caAdEG%xJM+~@/tB.O_eha`5\NQˏWVA,,uK(M?.i8J!5J9,߂ f /PUΨ۬-Z;[4H {YtrhhJa;țI#Q@ _P(,=妮mF@ِʗYW5]\/<n 1ݨ>ʈ$d<Ŭ!.x+v0 2}Mnǟ/ .cv֎n\6tAʯj6ZdɿMwAߨNmK' }3gC9iAjzs@#}Nzp /e a\KlӎTX$2 Exc^}joDbS+˧D^) .).K[وP=eᘑvjYLil(_yb4@aDV{:F =E dՅ^MXqNtyc\o27g,I{s;Mt[}T6u-d O"C~Tl|b5l=_wo`.f+w ȅĊlpp3":, s" /'e$ÖΗz3KLvsKh6ܤDSǮ[>V:|m^s},\~h >k'f*>O,FÈRg!&,Ds_[[)<*EjuT 9êQep>̠4ՀxbB4<_`Uyw]ڒ6 o58M"cWU*sGNbV9 ~* Бf⯈OĴ?\cGP Mశn<&т; TeP "C8Y*Ϝ]FVl^QDPR0/g[#i! MO|n"X˝D5}/eP͍> tz^-a`qsJuƏ$dڠ(-tV/ f󳲇c'U>(.nb[D5@IV(g@!Y5 v2tr]8ɅMRmTX۹-'\jn:[% LdFbIҹs嶣e;:Y / _LG`Fy9pVCWDl9A=|s$!h"lLl'8aUt eͧ;40 7.w**`D :"&FO$" hGp'> ٛ"@!i]vF4z=y#vmg~M}ʸP|s"ϙi3ǧ>$%lK,`y,dzb nlrXm煛Dx 5ES w*>Yaa|㡤{9GGVdXκ`v1AY}"WJ08.zP0vbG"T"6?Crt׎% 6iԕИLO^2RP- <'q*׃Gm:Ң{}SڰW7V&"zع[Y:خl%N MIKsOz`#77D+^MLGG|'mM?jG{V%8U]Osi߁np3|*7nƴ:×&jF~.GzÌXaUZ' (d_d$+u8wB;Z֦0eu)"tx>3 cx2Q0M)PMS2B|029$1o/ΑI>Wp$~b_!ָ_Ӗaw1}%Cg=v0I5;St7'=$&Aq7+[ XLJu\jfPX#pac3P&=4!O[W ݯȣe )fKbzTO$%#4hW;8&a*SgS4j*_HmBĬ7SImD7Bs scK%̞q<6bwQ4|$jE1-P(:erjن|fᴔ@Lqy- }Usyb/z-Z`7brCX'c;51(k&m&R.X!AjW<<[U~ pz,(r˚C$vcJ*!Vg͡ ƚ7#w_!MLl]!le4i{{5RǾ¶U}->(Y֭E;_2iֿE74ո beVdD` 0d6Θ㛟v3&T#-3s=yʽOiS58M4~YAvSB_5 {SY\GC@`\XnЩA.^\I#`hx/)8^gs =>y?hژ)jْ}'OʤϕoAIw:~(YX~rA,p=hs4oncUo)9xڢF C3/p'$t+4%\>KTkvb~X __ވZH LyԚ@ Ӥt}w$`n/ttXE'4|q,CiQ BoЈ󦡜g+wH+ŲKA.*AXB1r RqxiP}8[{rC+-nCZ2KE s{GhVZ΃v_kKrg})%\@մ'˙͠{Ga6`>ә[{: U\53V{&~$]h-H}3#vsKEd8BXԞ: y6ŽH,Un,u@M xFӣnC$J/AiLl^VTL g9["hriұM3E 7aS0<#6LqQx, G\Q?=OM&Va|4unC@-h\~o/ n0# QgbߎeR@yn $ba!yo"JvؿRc.B R^9GΊ8yǪ!É* oCX:nPn~yM5G ,fiz՗.CFݠ^q(Ta; #բIre­^*P?*j!~ݷ7ݴxlh4A'scsտ|=Gq^gojyidMZ0AeM6ґm eUX៸M( YeE>PfmC^[vr@K;MFcbb3'Xn@5qD 26dA FU˳x% uɘo3 $ҝQN`Zj`ȁՏhVh](}S\w'wWb $3o01i,R?z$;RD%`2pG ?Eb}mj釯[[^I[{ȅ{[r܇͟ITa"um;W3ݯX)Ζf'}Վfl,;&Mߠvzsx`e3Pn_Jac]:Vׅ`;%ThCܦ̇nH < By`Ӈ邎 8& .)m_ЅGz[VGl,d10L+ bv:/\TQc!psp(>Nfp􄹓Z&Hڇ  ML+eMN}V"XpZXKx NCgBwנߔd.|,hc~kd~a{`xԒ(`lY :*ckF쏷{˸Džж* yÏɏbL46 hRY!ȕ@6b@tN~A`U9B!CS9}B՟ W$y2>= h/υKʆ)(%#ebʤxN)Ez5_#Y *h$Y+B?RgVϋJ4L]WzI?0$]tZ00 pUf8;5Bqz¾##.rg= s_@*ϳ{R;n}ﱠϩ| 0x+74j| fOT^B|!Xf9ZD3,Y'S}7WZx%ڵ 3$rnG;y9ĮAЭȨ_*=Y{tSs5TkW$MS֋25oŠb2׽ՌfXw8`H?[)+HC{ nkT xmJPbIfYfv.cRoӖʇpb;H֍?ը+'glDcw]_/^uC! =.3Jїa_ڃ0Q=J 1⾂t@w>eR0\ -Kb;OlĹOڄìF]yiuA4<>C?⼖mkߝAM<>ٹh߯%>p%ō^$S`|Ko[Ke zfKeuFCQ8q z)q`||@|pa#K}NE0fauٳfOGY)V׶%a&"z?=2~+prmV` 2k{B#2%h>5E;&3 DRI!kxhEZִ0a=Tu̷ػ>iYy.:-K$AVBFs6aZKͯA|^o:>}rx =1כMZWwo9B2CwTl[:Q$OB '8ޢA{vH1cv .xL| Gcq00ovHz,hΒ#_6OPDRMcAB1> YP~GjnCm&Δhk ?PԼYߡpDbp0RG^e<"@J/7s}kdkwn5h4-ђL]>tMR%/==e8>}lgTȁmBgdz[(6RwZO?~A[27D@P[24MH=?4h/%uqdž㱉J7ӾKLƑƒ[ZhD/op5{( V8$b-mPXḗU@ '%Il:@v'*z'!cLPϨ@fw ޵Ŵ25N(0 4ƻ%Kš1og![m1C'zU^Q}S%$%YKJ W"j`,;yᱲ\!_b09l`xwjbW'xD2;=/ĺTp.\@ud+˭dd 3L؟Wĭ?teӨ"N?6cOCLao4Y!jSO|X<5C$j \z$SN+Ce8G-Tu9@_6NsTU:@\U@1M2$Y@hrLr݄2ҊU6&b??`<.- = r};)&FgԎ˖r';qy~\3Tyb۬wU" 7.K_g?AM(g"#N+G BF}{JP- Etwv"72TTKrR,478;ۓk 8$3reSBJDhWqmK;S bn]:DKUJ>tQy_Kt\7gƌnT_EmoX+.@O4]Ao{\(xr_Hqe#G3 R[+$h0[p(Vo\{!{R0_8&qPM'B \ hQ R# XflRW$tǀC78!dvww䵜IafnW|ڞ\-WJTkSo;%FR?tFW?v5a2̆ߓxˢu{K^jﾡW8Y@˜\@GzNbb6yLXD]^w?<$o &V$B 2躶$g u~91s^jThnʤlc2/_LdɴuȈ?K̳T&Cb< S8^:[;8w%,kjpospþ]y R?ͷ!Y`Wn"R?r5iRdիknuBݖDYs/2-GS?C3zI<_ J:zEIJVYRcu%* 10Y`ׄCDԇ+p sVHb5FRq`NFdu_E і' ܿ3 eJ0B0B2I9Y#)Ҙ$m rP[EI1_E^AP4xn?mơB-m(H/gpxyk\v[%ћZ{*[d R"o}:bbO h \X-g9c%W'>\ hG䠙#օqzTב0ŕ&n+ʉ,Lr7Ç˟\;HmFߜXJ]p ¢sWV2 5#%ԏ(H!X>3 yOgWtAP F#Q}!'VrC.0 RzQw@FNо2W kRqa  m#ݹz/|p=B*9iR=s^ZgRtÆ/str<ʿ\((]4.<%Tts/VTl)!"hRtDN{K)wBm 6bhʎXSG37Xi+/]h7pRmw/xvdRw PwkI+҄R#iF/dL;@g>3 +`\#j"A-F6SaU@W{M8ۄ9>dq ~Ě'imN<=R3u1g>aNn!C0 C$]yj%^#ARDÔWc$w ;ljN]= { ٙ(QkOg׆9kDοe>,ʲP)i;*߾;xްrcjB.¡pwt(B?Y9\ʔ(^nB̹t!pKqBDzOHW M%* VdA,&yw^_40XKgyx+; )K⳿\h-6P*+otsz@^62 wmOUoV5JYq+#B59~FK;?)jOԉɦF$p5U²a k1ȈQyE`kKMZVYh+gNYڸ}'9%#յ),dۈC(U?6TcQ9r.sd !Dtbv#`QmHw+j6ggl|BCy@Pj} Ϥ%q~ S;T6+ke/hr.*7ZT n1e3\lyύG nf.K9\B(KbXmO+ŗ0Prch(C8X$̄qnw}f_>\Yhip=ײbUiֺjt~}*иJOVKqT0[r(Macɕe-58i/#)@3s}Ě FgڰV*N8"2(+g"&(|ү oFW1N)P94];eq +3򴬅%`YiKѝ>1&8yXf#񙴄x)X;̞2ؗi6%:71@,W+Sn:!zYNxy!F?]>s,RZKJS<1E@ZTgy R}s2^]5M#xS)Nf]XeݞDžRKotvE޸?%5m)顧'<vda~Ø NlM /\z_F{"p<lqxSgoRe*A0Ɣn`7 :j߳PD@Np؉sӠ2@* 417g$pWe }d^/V\#W{N@!T$a=%a^K8 H6HÊy@\Uj/;4\[|]GIWҲJkl_t,C8iKGƂNb6ӁexaO,4P30VW:mv -7BMvѓĬg>k|N%=~DԘZ MBmaIr -nU!G–'s=o&m8$,A+̮  C!6y]mCrnS`%4i)pX{Hy^ 'MO'ݰYl[>(;WǴ6u5mt\Mu̇$_5k]wcKb5,MoAwF۫]NDs SBC\ Is"`bOSBlc3JG4rRqf 0/TFU81~NdV"*آ57ٷLN&>$K 8^I%4K>\l[ rʴx͝) +uVfJa@/TR[ oQ({Eۥhi4S>A~F_hq?1Fk]h5"^F>R |۔^|w@0Ө\.:>t\ hnABs=&+b nջGT%TI<*WpM}TKv3+]d7!oV""`jtM> tndq&V(-9H)uW ׁNhX;]Y& ώ;69}RjY@hl%eeuw Ap=?u\Tmy}.g21@]k-?,is*U뮔)^~o˱x߇6cŧ(`(Snq&%I;""csJ/lh)[0^p^WT8WgJeO'!aS5-\?ϖl(]XIZ 9[ `' <ٍ{ỳO[M4ȴ6*.FjxCu4|Q 6}ZB'q(K΄#ˬ*toDFHtgMu|ꬳ*u(,(KPgh\18墺vmurMYˌvMW{X^4;y(y()ia6KqCۿ8A:ꮱ٦i!z@Yi̶1+!T(:snL7]3GRI4 wƙI,V`Q:ril2e&ב቉gl]7;KZ/6rGxU;CjsDlE1fS5R>ְh444AMƀrK2CmDM^,Y_j4n#(ce,O eCٳBDIei/KawAɈ7;. +ziGD.UnOn]L?A4s -5U寍(Y*X#C>0$忉{q]¥YQ$'n[\|(?3ҫ т1"[{/Mc49$H j 폂l]h9aY5!)EPǐ(}bJ)QufFuX~^\h+B4y\sѻP$Z|_/1*7y'c+S Ot98pcbݾ LA9HUslsFє؟'NTxfܗj= vDx /effefA U Uu8;xZ>"I,gA TIy2r󏯜":um>H6 gyXyOL! A536- OZ@-p̉WTo 9¿`)[bړDT=g2-Ȟ]2Nŗ~fASJ\"烈;Zݤ^vBw ֍ay}6NϮ^B&JI Juk Aьm(|J7K6{jr6Q듏ueS;Γ9|k$c%0i=k&j:p.r{4|NQ/QDs7az8Cبm/M)}sԾV G_N"m:EpoG~00 SWQޞiX <7ͦ;e 4q"C3&#Fb'`ᶿD~-Wr _=, {WM mѽ&O;oH o_쒫^5[X@j 1I7&8$0/:m :)b&aP]0p=!znDI`iP =[΄lrᤢM1w+VŸ$MC7s"h>_!7c5PعO>41O2e7ܖOlNhr/*v|Wr m>qeƨ"O KƔ_硍$5=,E/ɂO j{n:2H"W_{'e~G:?w6DgV7sfRP_rZ1érKd @_BnYS[8y-$ofA@] 'rk+Buwk1Uћ4p]:Wa̞pIJ.OJl?]quxdsmmZ׋2~4*^r*~ABA9,C #_7V&T6æ{Ad'@6q>DpZ#Z@\dN<[>)Ϊb%,SMS4]O e5?56rJ# A^ {L M]B^tSJܛPȼ{EGsŜU1ׅ±IQ B~4ɹpI>l“$~-y`Ow MJ6~ny7\q݀w3,# ŪWѡJE)4KBD j_cCIi ) DH` 5{߭\dfE:Cpj*DQl!3Jj%ѻ5]mju/%@߁=wV =TpP#ߜޣ]V:T_ Qp/Xj-`z-(i g|)\hoݧCN9ld;Ypد?DnrȶYqqn|aX%DuVk][erPL4oS*+wmoN0pߒ >|;IaujL^ȣiΤ*!%}e)1t;]Q$ԼYN@d2\A`2א(,fr bDUY6C ݐ/CD3=n~~Bv̼tR0@nsIܚ2Fg[5 nI r?3Ya!Z$u%,GW1kZlJz'߻ ԔZpI'I&ͺ81TzpI'rDR[+}"oxrls󭜱lHh?<oYH6F*Ek{ xEZF]8|m|;=VԨfWp5mP$VNAs5F)^{&(Td&o5gX"uO߃4Yi:gz,?_UC4?PY2&*W\+%roX!+ǵ8:1!?r-)>G6gL$VdF=eec@L,Uc -9BA+ ߾';*ao{E3 bUQbLIo=tGꜳ$[|Ա j^\wVrE 5s(%o92q*F0}h ̆& 6xhC҄,sӢ7IW+W1UBk=x_Ug;Xyc7-G[8b 2%$J%,q ր#RC—w+J7ʹ=c8`O`w-x4*=W4skTPЙ0h0vY^XpdMڻR94Apb[&DZtI6a=vݕ ]H,OqyXPk׶,ްK0`şF5 1-ɉt/30Gdb `6?&^TerϨO蔨慿O-Z [=v2(i3h -U/ɟdZ=-k;jBq`i֦{;Ĕ_dk,Ƴ[IԳmi0'`wy(Xc iӌBdz+|(@n.9zr[jfۤvA\֫X7:c!b#* pMU_2Q)K`i>&=\ByL4Iw'&z vp"dVjkHJEG/^ P2Xl3U7壆:z}RY g&.(Fwؾy5܀8W4kRG1a\=uU/۹"YM zšme6/57R[4E 8}J9SX4z#( Q'^H)3CkV# 良;#P2d0IэG % KX*@U㘬+b]!Jg.a7Ih_…}gYhCV`i.}! x˥pcXvEa3~J?d 0'!- TL{O=0 Nywۆ5)oTmmJk ]-Hyv<;ӊa~ &YB Azx?"IAdI~1,}w~d=; Jh'ozew%z+.q Q V.CR^>H*AJv4BAMc8+mv|']uzp|\nS4z'yӮT{bT=+k?&ӍXElCnn}2q-_bŽ4_^my}mnMBB$c\\i:~ ~Ȗ'wVUqA5v"r(GRK+f7-QR]f m ZiHUD.yMVhkUЁՙhEt~ 'GnMΚIXW_{!1%mV+ ?2oNbjԃ B(vs(F aC$m}i|;P s5TcUt|o,ee%r?m+ +#o80 YHM`@/в’HAѥ dLi8ҢGIK5uRKuO4s\TɈwDm;O30U_N#oP0E;coq|Ad { 4Nbq3˼e(R&,Jm=HB)ŝk]qe>I)Cn`уl`qBs QBxw 8"`I`Bc $|p_ wۉ ^yh]4? l|co{vguUɷ\}#Uu' r+k nFJ*T/զ)Zm+W^)fUx4#9=c5uٳLJK(;'Ce4X., aE9/Gӝ3nA֓uTfS o:--aUg`Wۉ~">\*C5{']s,baCp~UOĜ!xry%YG7i,#nj0mweH(<˩`\Z07A>u@v(\mEG+nG'宴Ⱦ4^n_VٟC,(R׵t]1盹8 MM Ζ!,Kq~L?#W⦧QȨRPT-]V8֘2,0|sPnէN0!z뇁U_ )vOY'GkS.8aUcujXFKfJG`3S"ߞB^솤?G4R*"MPN=1+Ġ+d޿]o;G̢$$+=Sjv2'"Zf3n4tﷵRk~P wG>ӽ8ᙰyhg"3~ݘ'eQ[鷊Ǭ6,|21Dׂ܎ .7$e"?>d^DC#qa5q4H:FwaEtq5QjOhK[2l"ft \+NKW<3~A0 }B@k]]^5$$= o/r=b P4ʘPkI+b)S$ee()B9'p0[C~Ilu)zv˘[%;4萋Lctr4kٲbqgD )g9][ >R( nuGotϻi>t]=O^ -7܁Y˄'Vrו]65(H($^<^̶wO?RP@q(zqSq^sFvLS63>,Bi{u {VPch}wJ 4/0W7:4sdzqGy K {oi:pr/uuf \SWX+a')jhAÄϮt+lU3XMWU~PPUEpXsz'I+iUNb9$EFO8\pi:LZ!.J^*kv0:Bd9j*{IIP,z'K^hD>ڴfB4t}IL@}BR-c=c&}Ў GORo_;+CXE@iHs, IJMއLϒ^314g\\-E*_Q% A\he< _}lΛuK? VWO> Ps: AՑKe|ƴ#1ɸ ߵ[>]\^ Ԏcv1ٮwz^2-f4Aqx,xT_=mڦ(Y#:ìqR&H#826;k5n`;;帟)+!L̙a֟G_ 9&/uoE]K?ډNks}@26mhF'[Ճ_/U'ZV׊w}%ԯJj[3׉c\Ox+r.ie֮u!s G]Qz7|ޣ=Un{d5y>Uh,BuKtȰ'ۛ|s VltN#ݮX)ͮk~)|SQ`vx߇^fqCE0t.oNx"NQ E"5$-~,l2>lGmEb8.˲jǭMk`P;*WFPUy_6vs3?5UQ+뎴I]xD2^BXa͢hHQD 6<,Fj?GS!]LpښfhiBƚSiDdUg\l9 ҥFD,+1g'[i.ߜ d | 0Qrf|: uLB2q2MHl*JV}>NْpsjT %8~Ip"1ВˎVΖ/x!/ 'zu9اgZUa{ĺu%5G(hu ub̃BzrUpwo%vhݻ-Iφ{q!Q ˦zBJqXL/ -DE1[Nf_<{s%KHdӅӧיY'N( i#Tq0i%=8 ,͛a1&>,m:u,ɭR?ѰA\h7o{%W\H&M~1Z Y>ݳFxd&Fg.JY^ahoKw>)3WWB,@{32cƤհ^pǂ#X +rJhC6말*tf⌍tlW,o_퇺4{`kXa%UAFHl>$rK9UenSTT'ck? 6/0}LVa# 0 +9ߍ\{wY_%[iIZ̹(`g+cQo屉a:oTA@ưMP u DrlAcma4]L1Ԫu \2 ،9uM,V,}iuFzx3]E(rq=(fr$GMa6E ^p`y䃨 ˧4Pئ\FpL 6bOF]R\ubQt˲0J(O/+V .:hQYhpf}޽RBF\h=rL[sNr %sՔinX$_oASdE –_oG$2Vr#W}b E< h4W$a`",/̢\,<ȁD 4!6oW$FVH ƌ.S/c)P_" Z =[b:!L+5fqI+Ϊ3o @bS2s:FN=#a"8ck L^`z)~nm@y3)ybTyS~ň,Cծ4Ǐl:RR)0v^}93KUNobq7 YJg9 Ӣ,Dyh123QV>ܯsR7%8"q@#Ty9}>QưfKM?Tqp]n ")Xs!F;TnJs,(msMGDXbTYa_ .$5ECB?'l0kMɰ<Ԡ><^d*X*=hgM)֪+F0~7]gƍz#BAP~ ۹\׬Tfl\YY}faىU(V&݀ Vn =;`'dA^z4SfD2ۊeL-qӭvڇW[7Vd+0>XGf '29=E0^~ rM ;'q)[KmSL gZ~GՍHr;FϷusR9?u;*qsl+[wFRk/2W7X)1~&EDṼXZg\j4ﱸ-QQʔH_uB*@h+r? a 0#qos`"^Jj)QUn~HOT+M2fl.L %TB^Wdx3QzF[OTAF{ƴJ Q$_bKyJⴈ'NP'0c\7L߈1+S\%zR!֞UJ^]uٵt}B%]e 7">Ҵ~6[)W)쮴- nt+_.eb^dTy PY:-T$QVCw%ӊ(e5aQj֚<;16||Qs~ s`.ϥTeڟP@});|ɚ7C"R;ԟ]}jSc|E(AA& 2*#'8Ri-".o=ñ ֗ jWR~@08܃:b.P^{Q&.Az l@VM7[u<}K6V2=,=[~fG&&ǢL;ޕo~XCWy͹ xSb.Z5\zK։@'0B1y8c[ ?8Cok(0 Ŷ?r?gR!PdB@J\B]3W˩KL~1_N8$a0ƺZ{|ʘ`4ⓕ 帝/^Ȭzڲ ^acA5%xHEı7|/j=rZ6sQ qv@GbI}Ar_%w5kAgfsm5t1\&t@K/ lR#*R#WĪo(+Q5qτ'QZ{(̟!ID }~ $|AˍvG;n3ܷK1ado$-#-UW0M 5r,K >ſn ;oÄb'OƊC+ $)붕n2CWc-oEJ @xa_^Aư%ͼiXJ!Rw)o3-룑o~_GY]Zi%%ubcX>}ڇ<{ #AB f}?AtJȮrl/P>6n"蝪6i{3>%ݡmD܌jU{\0NjYCx)dhV,W9Pds y>0lV]Xi7bF{u gv׌A{/KlfeFڴV9[ BMK;aؙoLw~W p PdP(籏ś k9p&y1"b:ȼfXfobsw^]nvմ]܅򚙍42 pr bT[Z7U5yjR[E :nCTRW$ ',LQ?D`< KM8<M>[lsb3DF-p`xMqoI$fM}AoYnto5\İa9L|,`٣y}D%W2%ݢqe eB DEc>@P$A79i%ɴ;%젛+O6h\J5 O\*>ޜ9%2u)+S{]h>h'ײYi˩{t: Uz@-EQ0q`'L1CR" +)lw;[4>IƜJӣ"M\nJ5ӇlRO,B JW}GT`sIt;6G 8-UW:J%vK~){:K@}6:j*Rg rã40/uPԉ"ncgJp/S2;ik8x:V7Oy𳇗*A9*X=kYETַ`,̨γ.]/t[X 㫶-Z2§hGJ},ơD;0Ÿk:jz6d5)Ayȕy1+7A }Ҋi3uK{ߑVk\$)0w8m?9Em*?'t8ăե$Ur ԂO*'1.l{"jjYy _<-fƤY{.Ъ_sZoVD\ƁKѮw{16wVU摻q8,ڞ\U2x6VB|]l Dϊ11sf;*lǟ;;Æue>W;x!r+2%țer`N-+I=C+ھJO7߀9JR%yAgX~zAzX1}XsqxwSn=#/ "9nLǓob؝#W;he yD9:'{&AJ[$EQtk3u.η pE'oi$:lQ$GG%FLZDJ}QLЃ XMwn8/faVA3]ڵ (KGAJEm&΁O$5Tq@ƁgMn)u_IDPl~Fšaz`Oi5ۤXl!B5AN_G< KGl&fե,6Ot{>dbx^rDZGȼb ':ވ/S&D~m尷v=V<%XaFૼB 蛳A/OE[X3nLRzo6 x~nnd>ݟR'1ݲ׏#ADM3SFM:~bF% >'qYhN(p T6_Y0j ϣxFCf; 7ZaeD6JQj5O"Z?Oպ(TxCn0+bȮPO哐|lϘ|-/GR%#d> ;_CFu%D$XѦhr%:JMoCQ}e~x?\}{W.EbSQtuMA]ևg\Jaj!I=a[z=4qi! RiË6qޝiL80=['ak aј f| $FC{=&`H!bό#V`PUˡz6ə|gcZ{c'NxzJ#1p=(mŸ߈mD1u E$xCOG7 *0UP|dc#Cwvi'J z~`Uy`{<[#D#xi#Ysٝv 8I_SE˅cXg.Ad{2[ UC;n%aTCDOVϙo,şSl*l2ϳsv[XOU2Ֆ۶>Bykc Cҧ8i|(WDSё]V?o.殞ʖxLhR<$Z)n- X^J1'Q" +b~`stoBնIh |ȰnR-p@ڧ$ Z%ѬaCgGl-)Var7C:g\, '|1^%C]萐\uljnh-؜KEdN:Kټ>mYl.~d-DK.];yښ=+D5}ă0.=?O5K<!=XnLlO`asupgn}!r:A=7NIȂ@s3 ;O;;QL]&v 8ɬׅ-@Uk1+*[g 1 >FB=렸B up,^Oդs֢>M;~3P">jϿW^vϟXQe3<߼m o5sg_+)K56f<]r;o7u>X z3?$v~`x1OXXG:بszT/-jcauA>8Mz>B%)'@Y}'Η[,iQ.gy7ؠVJδW]7FAG69 [-5f÷߆ 2~۶hȬ.0fOk.fFg<hl"@؋خIZS dgaeg5_ =x 3~S@xg.y225 Zo&Y@gN,hΜ<tG/e)fPhe} bfHbi5Aԗ ;jVɅ%u)[&_ t\JG4IrٮLr,,0=rRT0DAknc8bg mAYF:a9StaX7vIu'nufrc]񠮊(H !@IRWC򥹿XB>*W|F;*OY̼m{/7gq -o:bupsY7c̶* ӴG&o 0jrK8)&k sEܰpAE{dGǁ_K^a` ӝ}>,:mT'GMA|ndk["!;kPr5n-FQRvEQ"p7.q%6+}M݁olB?u?yWI/gG mCk񋠑h\GYba!Q)be /niF3=I` b$b8i?U g~Wx11> - AfpyvKod61< Ip[ sBfji",;*w[g;͋"9͛[vb!NBya1ȷ~B*eF`RP}݁c[V!ڵ;` 0=E12K)BO?6 :okXxӶ΂8BgVxlpU(4QΑ kmOMc2$>KJnG!gH;4ɡRxdi{^s $Q~0hw2aC2#ϳ,#'rVc]$5A!(ܐKR~dܒu5 Jd|ʚۨLeh]{_mA VV[9\:2̖XIIv@ؒ,%㌇&A'/EAwn+\uWJ1v|!!F˾@1Oqs#Eh'hÿQxNEy^U}?#psn;3~$h*e.fbr~%ĝ|Ҏ[Er%#( 6G0=[v&"˨ L48 ebC4C߮S5U.6`KV0IH 9Q:1#gU;9 !>:+޶Vg4,in }%~S =&=ɐ'eUCۻuUV W"A/sLB57. |뱵.#N)*,>K7V6ϭ d)`Q <̨5jKmBo\@K:KNhgOi5SL{X|/bަٗ$Pir3w9wApLs'ǥs"xA%W'H_ZO.`Q;fBtS`kEtdaj2feL IN Hlnzh~]bP7\~]U{W2p&!rB2U=%ZcfCw;tJPz@MN #VH5M#{U$Cp ^Ö2rKXab۩U쒆y(4I1˥N+DjR5t~7w+5d ^I_O|2D'- O Y8y3s( ;d_50>ur8HXApKdڒ}Ueth?>6g_\R[njq,RtIw帛ˊ~mAoj=`| "MCM))NgSsEkRَZvx%/X0g)*(\"pGh$\7B!zغ: NU;B*5pBĪ,5G}v+y5a Bd8_"I/)= .A'k8Y=/UB.H0ҧ\tP+W$Z6df0҈9| frLCTG0b5Fb$_JRXpm"0=\g%w8k$&JT_] k᪞L $tC̭ .%g],?0iJMmnWƱH'6/q}1"y𰍅hvEs?K\n$Xt1Yt^/})aO#%0CW^ Rɾ\Uǒ)(4(yp0D[mJj_ ˬ C!Mb̪#ef1S-8ژdNPS$pw@܎0Yr"NKc_'ѐRU&TzĜÖ`N){EaC@m7B6*EB_r;;ŠϠ겯өMKH TRMuEo.g(w[,tAI|?T 'T*+0]=*MŝI~!G%OUzy=;9OM̉!"eGts -t *>F`(Akk^Tb՗!Geah<{Y=^c׭Fq:xZ:m~v]7 'K =Yڶ?Dn~XdI Hܳ!r֬8W_X[!@ITqt!~ӆB1O +}oDB4 J rplvڜYR(*倁7x0 P:J"7TF4C@M8aa 5֓Czڑ|uU^uy"Jvęz\Ec[G@5c^QBTD,]-(#*i CAa݇mID?(z< H|gON.NtҟCo_8 bP 8NyXP8؆2?J`@`U8" ]z"#|$l@w\WA"1#VIOy =j="r$@.Ԝ9 r(3 5v\Sa$"[6wEsWr߬nTw;=kfĕ351OGw?òFWWj:$GVxcff²鲏vctФ:zxi``ʛVԽj >Ʀ.WKZA'1 Se]{>kA178`&lwY!yp0Ǫ*1%XFF48 u!Gh߆O \}&ko9́GD˿V:AC1bL7+l8!͍_G!="*y Z򩲬OYϻ!}cS'# tT+o-zlػB3rny"/fOb' = գ9^$~pYʶi&1DbaXf~WnZM3$f( z)o2@AwKFȐ* iqQ|>aTѥz~_l-m WNS=aڜ^T zfԖ1GANoX9nֶͭ @53m8+IcPn3rO)uB"+  jX^HD#4I4'|JJhs!~dG-&1B 8 mEŨ~5S,l%XQvGiܷॐ%?a~,'$j?8q W##< B. ՠ)x7?/ ri:wK"ZQGʼn X9#iԷzf3#GiدfWeTPR}Qqh笎 d[V*a>Lt諌ܤogi.%y6wHM)B@Gtn 4 3Ucqd)@1Aw%@vaf"r>Uﭹ{é}uxʎL,t3 דڳNR,J7wNM0.;P95:,;k +#.k[ؕf#Ye!?;|rQ7;JXd[{Q_zv?z\j~X[KCTt#k3|^CQ~YL*u9s_E'j 0PEڮn? ?ng FbhۥڟPT::z,3,r7/4sw -) b.Jn{[D=hBsf)3$[Nn̥xya,::b{,5g3to?U`ޏBF\Ʀ7Ѕpa,' hI *Bt.Z;Ko2񸣼UnOKOWP5ɘ[GXn[g0J?Q7SNH,oX/ato75,|=7jeR\[{+NCwVQ{ec8.}ޓyzР֊(Z٬!$_.86,B;bA jjc\+H]n_!GߙLPs44OLvQ`".Mާ\' fE ֻ9XZ.ϟ[ء6kc~{OJ/ 잕#eofw3!NsȌ#x*7ٱ)MO֔jn?IYZzҪ`fNt\Im'%^EVIWk4b\0{'c9Hf]Q^H;P{ǾY}9Afek+Fa&|D0'PTs:cJ2L %Z(m^H/Us"; ~VC|^q]1779\(a<{܂L^an4ѥzwrLϗl.@ MQ<^-V3  eUnb;3wXZ;dgY-[[ЛiCM90Eݸ=$!ksoiz3+z\B9oҏ I:(zr 6rX :e6s^oMśs-߰\?kթl}e[Pabƺ!`t}PB]>J(p߶AC1'%׊^~Ei{Km/QZWʆ.3++B-B)lE@ʄ; Zf֝Lhb٤|PQ <8 Snq(8K]8Tf}c<=Wt[GΚiK*ppVu]c xv)5`SWal3koazWC;zb= ,I$Ȍ6|d {#fF 5*03XX_RZ6@1?ޡJ5YtW⨷0ı R}AwK2ovxekM~5}"U=[z@Q z/U,i~F_R|7c9b븶"m+5Ba֢SΊCuf=mC.WτICPu˳X8כoҾWn'd ,hGa]w2t]!aLB襡c3^V^s>O'4PT8q\n9z" XACpShk˘Vzr4xJR޵ZWg*bk F^[Վh jSw]>Ɲ4wpWTDAqiDJO\(gڃrwe-ؒW@f7:@(&QLv z.A7K[X7|dcUj蜍yqE6"kNθ35[s9v2&T9P=Wl~ͥ7pB z<ɵV+H=}Jz=2w MEu.ā +H0KM{-Ĕ>gR@Rbs:f~"`Bܒn)vb aL_׼'d+#NȪ,`gf\o}I KYܨ PF~^n?H6aDQոwDU~VNnY?shyL 6zH kWeB(=wӛQۂAU@s _V-d@SU |vyr(!$07|E9f>,V>p)xL, Δmz%_\^X.-AB<26y6'-#j#oo4kRGjZȘ!FQ Ohԯ}S?<1tHZ0јk,Fn\Cu<ݢ# L##-^bCn:Yuץu]㋨CAG"u 5Z/SSp.n+9Z{/EUL_W@6{p=SL=Vo({ O89FqꎵqoL-78 GkҹB>x~}ֺN Q#YЍo(/McqBy.zp2:l#~yooPCf$r@ F*a긹JQX5_ (B'I&TCsxp&i 1Ɗ{ ǧ@У-L{Cv-ƧD۹/NUL@$@GԛOswtV]3_rȪkAs~;$S ^+#nC0ȸѮJ(x8>P(%<)V=?I[6^ok= ӸIo1bN7TZXR,\> G߸_LY}& ~܍%2Όڕ\6GzL0̄=~f/Kc"DH-eg[ (h+ݶ"PmAe-D5thfhu{"fG!4:inJL|'Eo ͎Rƭv5kx*r(9ǠAZufy3؎Y T\F_qJ 9 TQЏ E]]4 H1X%3r2~.3~Mr&2;4̺o8O|B\ ,]lrm 9,ik4= zYj ;1!\aI_/e,9 .A1;f]M8 -LB_ҡݹsa|-TefN-yf??J[V ~vP({8>Y;T@+]27bRoS(~ aoljhp&**pb2 ]_;LNpg]a3T cݓ|cɥ$djAm\1Jpp92-z*ue{p vk$/jqǝ'p| jWԝVr.d*rkL~[> tm!;a 9}rKX͠HwOj^&ɖ4b |ӀM]s9nm Y;H߬7 Jz:RV)af_!o^Gt^P [&Tlj:_DT$#`E"{ G38uwa G/]Rqg O4Q/ޑ>ە,SIRw=_p}A+㮉j=/ `uG̡(yQFYh*f[@D*?J^"L_?!0PCUX\C7{ml4֎ nP`-<"*d{'62@srU!V5MYE!߯˥fd,_~+/ liĨ>2` d8(+t0i¢QqǛfێ`&ZAOuB;(Y5B}Y\Cvu)c4w7| 3sD B .Phةpw҈{,3{XOhZJa'qm*$ĝuo3#gB0s)bHUԞ^\\VHy"%4}*ͻηv2Fg]8D7UYGfɬX4oëq(WD(eYiRI=s ! ȰvCBK \>q݁׼F<1)8(`1%T~ڱ!?FZh75}<4d(D .7l s_J!YFq()f8k-4;R)}ǩK 'gvl C{B/ w9Lߒ%xUKRZEcXysyԏR6J@K =E=Ӗbפza U8; Dk öi_00X$]]S3jI%x0M/w>Y?ZG^[tpAI5"9хRM4q|}Ny!yGS#jdTrpa1~Z d"{[!C: YARŊD<JC;Hw(2L?E呬ݱڎf:hR. rEf{T(2>2obNe n5-p FJR:tM0𢒹j,$pI5q 97AgI8ـ돲3 M4چ`fFΖJtu~H氍Sg6P20D!zV!tpo`JDfRe'Տb τfPY#+?k ̋ksyd,cb'%2s̞,ε'ygMGtkz,*,;d]Cr3[Ⴇ|ò~qBB@L4\ SG%}Q%& lg("OI+AѾlBMqG/@ _`k[ g쪹՝ڬ);v -1q0gyŬ|'vPJflYpyFhmT+2(kWT,0`Ɩ3pv6"4t2?E#RڐoXC>[`5- gYl#hEf}b6ed:Xl Ot*p-!1~>Xwf 5j +nnE =>>'D,DHQ_&Ln?`sLxsDSkAf5rݜHv[V /E7b%at M_4,[z=B/A2#hN1U_L>j"L2㭂yͨf+G@$Znmp`i!@BcY}еwg>b!`yTm#+bYo 3g2F"P:C|!XJic=t8={~`萢(bWRe3]tc ^ntFiS<=9r!$=֦X]l:>\뤸VgKŏ-b-,&2B9q(GacւqԄU';b6-tPm];t|6v_`;@(b˕3U0|\҆eum) eӟc%]s4[\e] ._B״D fl!ݐ{#4@xmzoW߉A0G$CϦd13Tp[yh_0lrQ8ɾ n|cqO-v Vԫ|z|=XIw~%}7v|R3߃1>;dQwoB[$[R z3VӨOQI(ܓ?-lnp)ENq@ @cB9BCӳUa, ܈ J9;J-CQAQ5'`pL)CĽzEԴBHW+QPn O2ςdv+ _cW}cśXј0:viz`+50a~oEs[Pc2 G(x^1n4xȥMrFa[u8i\SU6>ǁ{'r{סN%awuKb+$+o={!~t.v3ejKgB w9mowh)rh/JMxq7Bz~-Zc_kl_y_&5Y70F`]GE2ܹ<gBt 9Ɵ@nJKkmPG9ܬ:Ro)(Zi,5^S,1+v\Qϫcele:kQQE&X,A Bt!cZtױ*x~5Uhv'C>98Y|{kOyeзxw/~ϴ1&-5p5B?Q#JzƖ3gӂ6%b'l`&\ hA6#*fז*ܫ*^u{I [ ' FiZeb(M&S'GLj>,ּ+NBV,g$(OrWn}" {.Ҵb3*Zd02XX `!t=alr<jo^UL]i^4(z1e:iwf8P/8ur77#Aw)' Kw^^qj"l'V;J# ;8LRpC$dzI5vDi# 1`a0o69^(JR<´ZH+$Au5' L6ȌWv>B#$lxŷnFjLݺn!}d 9-m8t-.{׽S9G<{ົt慷$;x7 xE(46'ewCb+k"6$y,B\|%t ٗ+鐳 WYbr6]."  aUU_Cէ7޼f1 j&t,0?׌Ʃ(kW׿搹.PJ0Y]W^Ӕ}ҊSDR V)Լl1t33@h[Khx_ĝ˚:bH}?'ZHаowe7W&蹜ptۍ ,# 3T~e&Wv ?btgb.a޹[҂@G _(ϴl1&C^jO'WtIs2~S 6;i˰wtTPz(>ћQmm>1$b 4SD{XHUvC~M}|K=t9Mn^ OUn+J鉿=~-aC7+iI}s#G|ٷHPi-Aضx@ڢNz!5%qL ;8u Pѿ+ hOZn/-X,a6CQ G5#ZU杨p/P yчk"E0Jl\izP'(dESw6dkzרeFax{맃A{raQSFc-m!J$( E1`%tfhqI$rY]V-fWW~+ԣRz>ɛr3p{ o+#++3i[qM AiW3,UmS5C)X%:~ͺ;'wt~ T cFF-%K,WT}KB9 tYYSKy ׄ(X֌_Lޔ+cp*$ _)86&J_ïaN!}q+"|3tĴ(ȮoL}gc|Z_[JP񿶿vi𻒓_iHWMPN6 CǢ/p@ c~{\n 52TVzpxadu>g>DA!XAǖ%u6]5: @={<&= ^$QVo觞m fc@|ܮIi;ɯfߐpk$NZnzcջ:9:2y'pHf5#uhp'v#bP^nRX _QU ql::2tZI>(t`O#J7 ;ڈG\[ajD?Rn)VB ܃D_ۖ%iZ=SL SJ@-Z(nRXƢ\T:%FTLN|qA(tT5agjnWp,9Z4`tIʎ'14? v_~5+АC~@BYzzJ7Y7@N!p3a<׼J&95f6_SQL' Q;\KWÝ`GP^_B@$!oPBYe P*l#!$*0!}Lf><;}IteF_zQ1[IRx6B^C}KJ;$q`'WW++xwmȁbaКlBR3zEU]~Sxt鎐6؃Y*ƛ{m֞g$e /[[Ȕt<["YlO|kʹ1I/yÛS?)S.G;%d- <}t#S[kڒipn4pJ5@ا.rU7_?hM++/d; K~E^G(0c:`9;Wq9?'e<>Mջ-!FB)u":ޙ3yk dFE9Mƒ5 SG qi"UcuKQ8F|E|hT\Y{T db<}~<@3uDqC#=~ 40{߹i&jp\@L[ףG@>sO(nȏ Z_oξY Pw ~GccBĬa*p}grRfK'V$xpS%Rۜ ,eriīKsw2HA `~L{Ts@u[^w. ,=2(K 9^b'IYAyIΚQ& F$#w!^V zvua6ON'S{LG)2Xs!DvlVpLIm2N0"8_-9- TCtrH@!@9_3/*0(Лpp⊔=B7~Z%k=SXo)t+l_-׮$4ʍ;9<\O G$uTĕúcn_bml\x']"e 2IIWcZ̯i6w phe2r9 e4止;Z(ٕ`b0~lj݂HДFDp(=sBL/@*!ܬ:s{ @Mޯ#s$IyP1T; <6I}͠?"SO&\r] <Ҿ6XSUgN]vQ8WE%U-MmwwZs[;r.,櫪*%},k}{x)[4Ǻ4Ї|29|krokuIW񄑌l0!=83:H/ўƇĦԯװCPt<5uG»@ͽ܈cá,ϲ sQn;$zNҭ˒ph#ZuY!?0(vϓ8oV2H۳Pl3 b =C:_Tc_}?gkqQkL>#8H踫mi9nj Yj *]zqP&8o¿($֠=/QH>c)/Vl =`xе 5orK4:jLsS'omJvB!><3gϜ9A.,J0x: "SLUZZT7awwQ#^"N?, 7/5 $Pf"нyWY+`/p=tsVWs1 VkbO/0M' ֨ T /qC㾾R'W OIm G>>#"65hS֥59gDdt^t%M>D\ֺzx-R@Ygp}P+~5Td˷dHV~&yX+"S Yk87U%IfojŨ8Qlz5RJYسXJ'XkvAYl-QU3[H;*R*ʐl ^5́Ļ)HOAN4.csk(n6 ?bi<3c2F[0~~ykg@HK~cwqdP{/^6`"A,`lތb+Hr߿W*IcVUľzeuy2}F| xn~/ĉWb,ҌzS|*|o6򄋣4(E5W{)$W=~8*6Z+u7~+8L Pn(jߋgt EdGg!;jw툏cs5pn4-[pI~UREKBɚPד/Vw͚S6ʤP''qgŵ f6)M%[dsk #vVGcMo`<7m $y-EkڮmBC< t#ӣA~LTQz+܁dF[6繩1x\7|U[ve$ 7H:>~S5pk>H(ȸ\AQM}4b`="-w2>q'];zׇ\t]\M8yI1ICD^pnjO}2M^yykaZ6Ԥ֧ǼOƋ@A?ftK?->xggh%k^[=P'6*ki.YB|_f"̶K+IM5Dj~ u/TϋXc7&З.mrysUbFQ?7̩IhHd@:C]ayPv@N^ѓG?hP`\-xCRgk{WّӝV:|zFہ4eX4ѷ84l`)3B*f94{ܙZl[چD6V~0b*&)(n'eSYǬ#;LN!es6JyOFkn/NJϼ}8@ &聊Uc`ӭflS&Ҋ{XW|X~k˶ĞL`lX;fIESiE+1hb֞:́?yɯ>gew{4p52,E~b$N$LL:^`~ P&bYӀήF 9=@oMFbc[iLIֹ4>K@`ȄMii XL'5%!E*d~LVX =8U[?14{MX.;G"ƉJ^98 D$|lR_[; ?RB /3vRL H"9yo,4G~:JY[/Js!I6*z^~ɰ K^[򹱒<8CCx[i~jdg)dn5!n1roUXq*p&J]&JU&vW°"(iˢgbk3М!L1:Q5mM ,~q=3 ;Lž23B {qU-P&))o~B5uH@rs (`OpeOT(2u%kBslf{Ox{5jYTP"4cD4tTrE6|7!~u`+ -LfbY Z8`2Ady.90Hy O8rEL|.Nv/%*RX%JnhIY|~"ĥyT>Jvytt X$clC茶D 9JVX|=D^UKfwJ< 0Eu|k& \pwEF*JMUޝaHNzUԪ BhBgZj 0p3>RIt3d'yLX1[6cZB!Y+p2%ʃAe"ZΕ~C 5QiO6.}W@~Xޓ< X^w?__ +j0bTwuG Hu*S-_)60 A}N|z2)`㱲{sK6dj}ʨ 0(FnV-@x 8<4u8L%ꉹ!QXth ( vn2 =pӠj8VnLbjZ_B/ tCkeEywj=veߖk)k~=,Kd-RAuS&XE3<(ZFVBl~ oG?^% %@?tu,i@vWQ*jMO7r[8E; $kF`)k]HFMΣ< JhKˈ+IQ'b x%\~)y3HǍj.q iFVvnka^耰zGп)a Mv`CEFѭ^r Fg%Ћ1Z׉i>SHX yM]>yd몃734B%LܽVAٺl6CD)~6J#_1o%znQd@ǁ{e'nkn!P@ShnD:S`f|@K" k薥ZEy7}M[hIW@llPNc!-&i9H6 :Md\JՎWuCj1%KÌzI (&@S("0}6l, vQ4lk8p^P1"2ԐTM: G$ & )̥y搿Sڲev55ZLGc(. >-ݎCyp\-s҂.jy#Hy 85)|(8'񀙑c@[Ip\SH8/-e:(6b1$vQtn|t]xU$g_2 yM9jpR0,fd].GЩU b(K  ʂYX]x61vK^NWx5c2LުQsQh(|N@b,\<}ʩ[,8|4Ak`'^?ܕ|Ad*WB(S^Z:`@(r_*IȂdaW9oktr@γkXSt &!l LG& kzÏb ris|ʾ>'B8űiu:Ӆ@qH|ʄ#Q_V6]Th* YpM\#ИSjn*W桨TBr>`}2C$5ky9d&^+c O\`S>ǗțkeZ/%Ȓ!d(0cDGj?>dj>Ec {mϞ%]z[h0 ][c%q'V9-zґ&w 7O3DFwxmhH\ J{\syqf$>CDbkl Hز^nLB MD4g4:~ !™\U:ӉrX~A@HWxJVTnƳ4 dAI܂ I{$@=.,N%ǮU~[:G\I[L s' T)~R#nÂ.K_dfXv+Ur uGg&s9N.dDSG곿%R•;ETF29,Y F``AJ8;NòY %ϡ'SoRy9A@V$Q Wf3ȍͥtto ?=f?=1`ٍ I݀ͩOsy#B,͛JO)e,3zG;tċgt"} w;^lS}ԷnIkYQ{ª OE'ZlV  ކf-Ծ+R ZEPLFs0\}7RuעDyt{@:Y9N J(ύblOD/VG~B(;aF忴];|(OṡOV쑘DI3y.8#GI5NӞYdLI]~m="b@ZVkv;%!1|_}fBR7胍SFlfEf:ŻjV') ܎1/U,q iV],+˖g"GùAĭq[ 5HRGH65K%YwdTwJ>iϭ12oe\#ʡ5̶_x|uDwam pPߡ̹e%(Ȼ,ϸP|t/GߜCw$=У[h#pOZ߂^K.+k}z.KOg*/%o''z|;>H6O9 AI">#@'y0_Ybxj%Sp!tqܙKb,[[]vi¿1/yCkCſ,[4< 3+{i8#>Ap& nZl]]lc2K Ϋk.'G,cUAMD,/f\DV ,mez`&Ku!{A4\U9s\~Lq0\ǘM3hC 1=p\l&G]%z=od5; Pp\5gsP S[OrӚeQ}EdκvcY8%]2x~o Fq 0g\NV6m8;וm~N^), ʌꞈ1x|Nz{EˣGz+^Έ PP;G pmQX@C&~ftX:9s8O}۸v$9SK垐 A~"qV VD.+=@zUw7B{.d–/ZFCg~%,{2 Z*m9Do OMl|>!U^A-ǩz(%ڒiQijvlژ dh=tlv =^njCb~VemAG^"tӕYT MPSé1Rey6$o (͡DaWkRF /cqN"8c .Mp~[d,Q0̅âAQ뒝%J3Qqo(c{0&]`ckg/c109ǣrS}@nr&9 ebduY|l̸FLH@#a;)! }DE`dt 4p~~wmعsf0}~LtKU= #ɢNg583{a- >x\L`޾^XmA􀫺??[/zj@lP?ܩߵ,l(t@7<_36ߣ5;="Eo\.YO!O a! pHOArg£ *2s|::%rBE`2~:7~ nhyG"u aejZ|в-gwH B\roiVhH7'T q@ 6x5al/r + P VΰSF|56Y?J&R2e{# ;ѪD};i]!x }32/f썧|j 7 &Ҙ9A[0JUä*`|2kv_D! SUヽ'rQ{նݴLQCVW{4>54sd@$ &|SU6Ks!'GH4I?+^M:sr43²D39Zy흓2LQI^ ;/ML:Q&iكP|0W:h95hDS$d  tblD(ёL!K7(vth0ɿ(]m!"ۈVӈ!z$x۝`6ߡeޝ˶h8aeQpEǯ{@G=ȯdɾgXoQеg5Yz͚jB;C]Rw wWMPAeȊEaŀdPY4+Yd#ὅ${Tc{!wNl'"#C"_,l2`^tVfHHwt^oͣ3B<.a:cܩ6!eelupӇP\3GAײ tS]puY,6 Z|Nǡ@ UU,$IFO<)CQK-8/\yd W#v VSg {qgS{r,R4=VV XVfA\= HW,k0WJ~Qs=E˽:F B 힋62V'=Rs Z֩jG 7RȠQ: [43U J2b2O\נ I{|`d6FÒfvi]]'E^۰IdT8||#UĻu, OJ}R4r^+[md]jF3;X#YnE0J*Na]f쬠ʎ4L"mE Zl P:Ρ\ahrk+x#aJ΀ 68L2iE"ՕɜS T7bi[GAԼ{E߲d'WV[\V8)>`/5^$fuL]VNx񴽫3t KZۿB!Z+\`ܗpv&9!_WyR4e +d/NyZ0%/jIah5!Џ!3o'D|^?gW{qE[X ihؗl\ǗuK:i3PMU(d44sǺU9AoPk:kasWH6X)y^J[m:[z%16,IprhU,b4$m(z{R*`7:E k9)|i!Kdy8yi* R#HOܴ*"ZXY+k,Qd 3nԂ}{-0 _6"0pgQDL./܃V_q&[RxC-|󔼃>Tjkq I2&OMh&M.xnxW75k rv&$*RM+1~V} g-׉/RPJ2O|2srrO>&e`xҰƦg\I amWq&HF)-T_w,/o6T2 vYB6Mɂ9VL؉Kl9 CͩUN*˂.0UEϕq+FUL"Yby^|PpRa1,)Ÿ)ҥwѵ8B*g%˱hk C6VydiÂD8f!*_5Vfk O?ؒE; zAxCG tTX s婆Κh.XH/WzH;zogQ@p [i˼2S#j<ԋtNk 7 oҐ!>-֗810$Useq#\Šڇ 3-WP|g@i?G:FN j Pg̨ #(vAv,l2r!.aj?nU, 5~O H E1-2/f+1:yK41<\YuϘsW-U"hލ{[˘ `1X"4ElRJŚN`{ KQ%BΚ85i8E@]n@eU *Q|f{46<`jr(\z]:]b.1g4MM%!7S^x54KPTKO& ]&$E7O]59AQU\kY!m6pZٌoBC f'66k]g: :b״] 9jM`K֊-3V-y/Ā#sƺg*u'ދ2ŷ/rw3ԤEue^8<9[|Y-'UHcUfTړ=^Sr3}GlJjh[J ș6EPX<l(7,VUpܽ")cQ+A\VGRza^WY 9^K~_PإdBkރ Iud'׊iĨylbǛzCv?QиZynT }36E 0EET/H]0YLe$Y` 5˺E5^4dZ-ñ<,} l})J!BDOǴW7z7ɺq\T/{/nuj;UѴ8)WᐙeD&k 14x7`QV7dnlҐPFaKp{MRD׍zxd6.pp$xwW]`*Oس\d'WR.`1،L=^ ghBU]05Mjj6#k1p{尐&Vdئh/Eď!B;N| J#*RRdjW8М5;>=e,/(5UxR\9㑜3dfJG5l_YgTΉZ W, o-;ty%fbO萟~\uδ4ya-notjF 8ܙB 6:PzBj.@0ŪJ`"Ͱvg$#!u(yp{ bis"}N)]uq *B4={n3Umk]s:t&f-Z (q Rp9/ UwL?Cf|Gw[l:qd"ǐ/zHpd5TFKB;Ø1 9O p_ʺK^gfD9|/afܿg)WXD9-xe>VHB;% pq@2߳$7ZC,#`0~T /vp٠PԷlJ_̯Y [25z[lpC6/dϐ;ι  `ZQEJY\c 2+|cHd`yFuvcXm* UlDv,":ۮo[xi֥a0eoh|ݗ"Z v=m%%D,ʋB”rB־Pt_qoBlbi$_@7;-`vK*ۜ`!HLgMNX_\[=}ҩ؅Ɛ/>dBIXn"TɈ4t3N<$NO 圴JQ}0i&1ѣUӑ73:0ũ4[ߨl  T U6.g,J?@SfXIα_GqEE}s[2W!Lhr&0\5PZOP:Ps6#YC@!gv:WN2zo>e6z$9\m(QŲ8`i:d?./Gn†V;5{#ޫa!CX#wJ=SJ+Lp0F]eYvӑ&睰2EQ3NM5Y[XT=`ܳE"^sJq:}N./;ྜ8X=[pa6c)zQ$)Q;qYG$LKxG̮3r_VfP~FHemQmFTӟ^8HřK3qZ m L_PqۜWUsn6eŤDnMu,/}qp o#ߘ>|(P-Aڬ B[ѭsi f; gtUA+$ r ZXCi@_}f蒔~b~1BLL۔0͸+޿ )dr"*֗M6FFS]渚EGDjb(=,)9S"R09ƻ +L ,hUK֝>2iA &4ۈ]†ωyt0,i s*j PYbf5/Ô!x`㳹j:tz#i&+}CsKcmv1w:h8772Zl/sngM[lUK~-pU:4f>Pٟ,rzn<ԄW 7ڠ.O8jvI@Sx Il.r"qE?p^K]=V`0m TTޙBR2:;(8 ƪ;|"9 ^=01#صD2{hQ/ű*E\EWp7å1%q  1"*`PnFXOW֍?El[)=Ch^0Wobk-G1*~uL̟cY^nR3E؍?i+K(v9O ΤYV rm>=V±xc-`si#F]t h'x>o>Д'hlsE6I㺑xH4{KC|ixC<9χ)_pݹߡgJAF/}Af$a7E~ "~y1GS_;`#8gjMPL[7Kj)eЏc[:]>;.*ބ^vQzCJ$tc' oKML>dNCz[ܿ>5yΛ9a´Y8o?= 9yY\XZBTlur=(_^R,x3P|k|J] =>qm>ϮBl,_ݠr\z#w{K10iDÂXTqϖՆYF[n!hTdJ6X]߾RowpdAr~qOfp z Ur6oChA#laj4N9%.wZ2}}VCKY„z,Xԯ!`͕Zz(s&iA[$5[x/~YN:ՠl=2[rrcYC݂}J67 ?+-#alD`{*j9 ¥6hEP˹JU*̜SB'&8j-5^G^I22[#8|;ܐ)2O!^OO_hʹ;5U0Th]1@/O\0xPW{ }2:JUE t8~GQIyz-zKKZl\F\h=$ǁj)3[X}%~[#@pq£,$HUvUטfA |Mc%HB9 ؿsC:R?.o\Ӣ%V͉En!.Xl"[~tl 1B[r)p=S}p3\Y6\X2D7ID\M ͋ eن̺+M)~!n\HY$ܒܿY+bKH9%`IVO({}(j9,\KN—4b6)#&J" QI-qN ,sD6MjF#)E P熮pGyeئ߸'VL/WS)wwF3~oKeAS%gsY^oݡ}b>YvhMjHhKǰVe!!a)a|?f]<{B,5ЯYyŕPdR'$/M\* }Q%rgX[6v[`79wR )EvX"+cL€ZEKe[eU-F/禽E|DF wDڇ 5 6sx(XA/sDBL%ȩmjI׃wݮ7#%INck+^/ Ik {++@1_ƌ(W]"k~>6| 7AF= ҦŊ(HNT&R˯F|ҭٸnk?S=h}3e15XfeB%TQ\F3Wƌl`!hV3 ŲSQDfȁтqS@Jy0sU=ǐ&B<:0d[3@\GFƷFoE WnVp$#szPXwZ Vё0J^,l0<P!opź"[dRXLWFk֌t##yZXoh EIQE^^uvXCy}#+֚ # DJ;ȅ/qʡe"SdKc{-Rc‚tVQj ojҁwq?oN6S2Pu] ,\# vvwh\rEkCy;-jH9gw|ACҁ{9oX@ I?Dlp `Nٿf8zàj O]m%'7 r}nǿ3R&T2&j=$.lg/+y|i`WXQӀ*'HZWc@.LKb I>wY:yi_rT. A0ڥLYƶhD +UNrx:}wh\{/qX@js{1ЬIcVXNe\''ȴ(҅~#C6!V&]U_ONbxGZ@ 6p[{9' ҘAb.k;O8d<|`iܞ.)ģCwBL>Os_MqAC ^ ȥU ȷcg1Im:rÇ1*y!(<7kޑ?&/5xH&Cd(Wy4KK_JVЗFm .go;)ߠCݹ'u ]{ P8(R+]LSGA6tU11l]yr,[r~w3_J=)~"1)[쫩#b1RD&ɦ7-ЕloKi;00[DGDѬMt+DM+8KC2y^9T.J[WF#mO[HɘY!u c}PEgXI#^h:&5CiP @uJ^g3]G#h^ҟ of^D>`*8_xPNH7Rǹ8.O+iYV[M󧢇J~ N.5Ϳ蚅^)l+A" li.>^ĊzB&v' veOt0].BO1r$x%Pd]˳4gв{V$A n njâ پu%?|n!~tx 3vRܯw,و|7a{1ç WEuDM+q_ t] 2مzdB,$ͤ<"ddq4QVNiZ-*D]@jZ&ic^ \kw۴"!Uդ/uߥOAAS8U4s^o/y2XSщ.4ǧtF#FԀl -bʍ+LHzɢExx56ښ3b߫ MF*-—F&~k[H+h?di~[KwЬ&MDi~J8MAjfvifܹLOb=9~Żx.F[K^;k ;8' /4Xrh59}`Թ_$ ekLo yAR@]3>|2 D EIa/>f j3 @;S;-4e;j"Ψs~>V]iDhş {Uh61'=6Bd`@RgWWsoHx~W-BA)5ŪDTu`2Ǝ$8}84N2JRu_uf`xj~I7L9&-{lA+_uE(Y1 +І`g`(IyT" c.R3ҮܐZ+Q;?OW:R EhnG5a#@E0"bh Hw}Yظ 3AW]>IheKkwY *MXzh4 U(dCB·uz&d$'qNE.mfKnD[۷KzSutzkRy~Y_/=ٻ@u`Mi+>aC-) to<2u.'z*:򬛷0D5N*wAM(i HYuЇdKp)db7%/s>;v m ^Rm(,_8h<P?@.CX4'‡tuZs[ʂ2ycA=,>2t/-PBJ=Ѭʴ/]VK5C>&"3a_&2;hAԱCT_GR,j:ʎi.,,tS_zkbpų&:˴jHYIԋܓhk8<ݺN}y;&2Ԙ@7Z.E]9^KͲJKKWa+%HzCOj9 #(, IO)7=L0|0}%yֿΈ z]Xe5<q@[)́雨߱H%(C ֣+oŘ>aК]Kx#>DQ!4Ɇ}N8a?(>,bO%v-d:B]sgKZt$ֿH_{ϣt ,BӜ RtpkEY"ۂK}æwU*9X!Z߶F3"Vۏvv5Un458KN46+}ց|m9)HɅ}xc]97ϼ2߸dU8uszvRW쐛0zЇP@Z,VG-a(cFrL6XҢI>z0]fE}4:ӇdCvzV>`bftM s ,!y*#ݛMVT+)ip …س`K2u:-6AO)iXxX^BH,_xѵ5r>1OU׷l dD>1:'W䧘N.yE̴"oO)?x!,`.xL6=ܯqËs Xdq=%(jj0=B,_ R6-Ќ-~ʷ݆Զ:Yy?C7il j5}YLґx 9G4AHؙ͐WG$?LΔMh9$:+!`pebe>I^(:CY0"~ܴQ!8'<^it7A;;?!IrĂ Y_atĴ/ȹN-&ִTl/{όr1P*;yO&O (rul/؄ ZG*UxFՓ{$.~b_ͯOaUU {d%>k nTyxc_N؋"h˞[ ŤpYxRmN h4vJU#Jo7%EZP6'}3yuNjYǖo'80Bn9o̔e6\58w{|e+acPa >6=C>EƐ8N"aJqu@$t՚n&/3=I?}|웟5pwog6("bUtKOR # {>U;NX~Hd4/WhEYjh$Z:r4BQ^ C{A2r@QEb_k_wF9xl-IhTƄr&PДܝs10\8j(D.t@H*}FL?tfC)6_2˵[ۓH˷w.yJ9 ❧uUhP PK e#klhUQʘ 2MJw~?Z534uE<Ki(,bƕg⾢B+8>yhOmV3F"r0ϛ;m'&X 7r(W(|H"7UqLf 2% B EX!ɟC WlP䰒kDb&q7QsE~{Zq{}gClc=(6*2$ R?4b@t9 w\!~m4u >X`zO7n۶#˰޺ۊ1 <=L5(J~qς=XR;| qG7bӍ# u4DۗS!0|*K|mW̑}=?qQEM=\x+J8-W3gy [;$[ZM:0[YΫҏ͗o/#SտsYeKs3|k<-pnMLtC9'P>|8k]f9⒝R{s>NoMR; {S>ٓKz6?r^ ֶ<=G/w_.,,0,iϷ 2&V ^Ό Y2>MnFnB-o9=hy0gqqKKǼJ Ӷ}LR^]>0 M|ߟ'p;|C^M`8Ⱦrh}wwM[ nMADS%#[EMg1=4q<c*q% 'GhvDݥ-t5"Jg8_DټѨiJ?FgLb Vc/Qt>7 Ck΂lsPC؟y\hRÅT>`ǂSb*,/?]֚A;P R5&9|.lY[l+x5y?-;7_; KC.n." c}y^DXsdY?"G"ȳb@ƶiMp/qXb:"Jw`ӵ,㑜W^0z9낺Z@jVy:zT_M߈[4lC¥D*|bm,$\9ׅw|Yw/-~wDb/PhDG =(R_R1ⷻiEyLiu~'gjdEŚD5 6"tXES-\Be_lg`Bϸ{39;/N lC1T~[L&o>4f;rN S{ fpj(,UrPv\B5rmGN.n&[C<+oNME37ɼ?+ajyiɨH-t feʍ@ts"̴r4-$!Ap^+?hCW3xI^Eޮ"*~IsrlQFiS6ٳD:d\9T:Ho|r>QB\}C{FB._@ӡ0;f^7 .ZqN=q\i'6U]l=& \kYGiH&l= ر5;֯'sbH@UuʓR "ًjt: bTe˫6 ͵ܯ YU+q{?o`^۰P,/{x# @aNڄY G= '7n6/}½)-}YL^Vcxԭy yBct ǃ٥Dwh[*T: qxa0|r6v X Qr ,jc 6=~܂sUAe +Be~AP;mێFjůjW37:l q WeV U­$X&6p7| L!ɭCp0Lcwp47iRԣvuBd QY7 =6j RDVs&R#Z>o.W޴aZuT򪱍Kl颽 1Kvai8@H^>2O8σɪ%*4 ^K~XZ=N+/sf=]>{f,a>EpV]kw@3ylg贴r-l\ IⱤd0y6S᧦`ȻZY~muzf9jۦu:nPKE9l~inܼϙMz)O _yb!_{sEaŋZ =<#:x-?4 ,u3)U Ou66|K( z4ʃS"Ml-lxdl;XHP:]Xu2Ux;F:cz5%إa?AQ {tChv^u;{!2^oųVGC/56}$޳\hlwNnĠI2F[p"rx=aI[)L_謣T-~U/;Hؒ*4И0Z]ɐN#Sa\Ÿ4K$U:k;_+_ukTn'}ۜ;\QFtT9u&{!`bq`KMSd*_vW~Č: O j4 UtB5oݚw/\j4Š7q/(3l' >S+;hzC5뭻1ǾsNIU?JOztr`|e.:7NXe60G>6] *DP/s^ chs[zi:'Or<۾@3.k1P˿-;~,P !#4m.@bژ4 =fi;9+O#sR#1׹𧨄e~Z\ԼTxfEdӎ4eB -;<#TEW[$sI ]d!BsZ(pX!7 9Tl-pG1jEɄ;\#pYnX8DVmOcGa]L C ц'v*b63ﵶCtOiGy*;O\lu.Q.V î@V),9`M[ W|FdY[PtTI!EUS-<@gyLXW>EԽkN +87ҾM=|#NZ9e j_AkPȵ+q$6B ]SAY;V##e ?cm2{+NLڴ [V,ڝO<'CI0$zoΎ/F8? ܂)v 0΀7A:J=W!%Ţ mcto>DK̞gDAh*^Jev>1^wXg(A#sL5BQi};u^<@ɜqMg{kvTI%v>u\ڮ[:Hɦa60Rjm:%\iLc XCC*SɋeUevs/aѥ#{oPb "9P@GBMVLI8r-{THIxFP&zqMpԿ*|۟oO.VDͦB*;FGsKdo)-!kH{+`~ a x%dwmT@' ]缆[F}ft2,-G(n.x56 nfp.ЭJevrM"¬_NMߣ' a4Q;n G)<$y܍jN u4~6wɚG7 ъ1Uxx.]h}D ')PYE~9 c7@FsቒYVB`M8I}n8#7ޢ}łe%AI獨`TQL{d=uO o˕n(y td4䄰l:޿Ͻ ,!Xfs\*?~BZJۣEE:ްLx׀$M N [0e!u+3;<tjrSL#2U\%@c)]*On|MW wYġb]A+BaPp>ڊWÚU=&lvG2Z2a2%SV❳2{.b 6 ƺ~4NA,JڻFASHRY@bէ%md%fx[m QͅKuO/Cȶ*HU Ŋ=os6Y![(@xvnxXQ{J| ^(x%n,YWr|p j E(R)gVקSWݵr. 0?Ɲ&Ԡm9u<P6׼iW,$cZPQ.UȊi[Gɢ!%e_*]&b|-qD4O{x}J.MYhJ|:Qqw]H8gi O,m"=ԭEM ja XEd(ϊYǃI@^|su{Wz_*qV8d"OSaL coa#Fd@R~e0 %•]Jdy^aߧS?HפeJvV1-iŗN[ H*spa>;*oFZV9v7x MH|5<0d Rd~5Z4Ú*C6 =Ir89HxiEOpiu.f#ñDq):{.giOCx={$nхyzkQ&,HGFP.+ayF2JJmS9+]fLd;-/;egHQ)^JvI GI^wC |$Tu֘pU {qxQu3 Q:XWMirz/'g矓i W'ޣmνxߌd(zָYLzH VȼOy72glJM3ݯ cE2-ؿɴE:E%u!4EdC^>@X+)MpbG ~+\׃/@ Aƍrt4I (D=fZ#3K0bs%}@Y)o=2_3l深hF؏XOW}Q-P rSxӍ-h#E'f_ejD?!VV&wG~G@p{GZU\O% AEc_["HqE*#.Mj,# 40#$8;A@[w V)A\uo:.C#cM/GI(lQ! SSdp M) ֋%Q=_LI<d}K^/R]xCB@P L cAu$K+;$V~ܥ+ȕǬ/ CUƴ3DLhb>p3G!ňJpU\}LGf`mrಅ;`/~MkVP$%H \bHO5]l [tpBN U *| s[kv՝ϩ0nz*q)7E8ea*h;0Sv1 #(p+(k(L"~ |.CUL9U.X %?_v'k4G6?heY"~$s8_B;>A[@MiB)*4weT}'0nvK‰Ə+fWЮ:[¢Bjl73Sg3L[{PH?wF@?y:}!aC /{TO^ o>Mdw+E=Clm^ A+qW S8ܓu8Ô~rLRą&?b|1b p-8}t !PYc—(iLHDQ "ӒwDsPI!~e*5JY`S2JSfq]5y=R0e YQsZ23>H{LdK]=Sȧk&cЮo֤>BL>~mtESTEwEݐ0Q$U3TĒSQtLSsGBwz;ɔ! zU5?g6NW_5^.9,aZI 辶 ]\TУjm vSYph4\iݿaT(]1dfIU5VcD]!mOz *-<5r*)&)c?`6G"ibB&LaRZl]s3x0fD{ٖHnߡ[YfHiBNMR՚{0Kws|ߩ L}k=薍rUnqU;Kٔ|[Aɒi.:9Xc(nNx9~GOK*W̌\)vLʗI](b\\/V`T&6 a`z5UX>u yޗXKg{vo]VÜAVֆvT 'QO YZ