# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: sunhai <sunhai10@huawei.com> - 36.16.5-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix lost ntfsprogs
          fix lost nvme-cli
          fix BuildRequires


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix(anaconda-pre-log-gen): don't unnecessarily use cat and use grep -E


author: songmingliang <songmingliang@uniontech.com> - 36.16.5-38
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the root user creation GTK GUI not checking if a password
     contains the user name.
          Fix the non-root user creation Text UI not checking if a password
     contains the user name.


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: eastb233 <xiezhiheng@huawei.com> - 2.41-1
changelog:
  - Update binutils 2.41
  - Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils/-/tree/c10s
  - Retire: binutils-CVE-2023-1972.patch
  - Retire: binutils-objcopy-note-merge-speedup.patch
  - Retire: binutils-reloc-symtab.patch


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.41-3
changelog:
  - LoongArch: sync patch from binutils upstream
  - LoongArch: Modify inconsistent behavior of ld with --unresolved-symbols=ignore-all


author: Funda Wang <fundawang@yeah.net> - 2.41-11
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add python3-passlib to BuildRequires
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'
         fix: unpin jsonschema and update tests
         test: fix tmpdir in test_cc_apk_configure
         bug(tests): mock reads of host's /sys/class/net via  get_sys_class_path
         test: fix disable_sysfs_net mock
         tests: drop CiTestCase and convert to pytest


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix growpart race
         handle error when log file is empty
         ec2: Do not enable dhcp6 on EC2


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: zhangzikang <zhangzikang@kylinos.cn> - 1.6.22-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add loong64 to THP patch, fix build error for loongarch64
         fix incorrect dates


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: yanglu <yanglu72@h-partners.com> - 8.1.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:vtls:avoid memory leak if sha256 call fails
         urlapi:make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 8.1.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhangbowei<zhangbowei@kylinos.cn> - 25.0.3-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix bug by using docker-proxy in the source file to get better compatibility


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: huangdengdui <huangdengui@huawei.com> - 23.11-10
changelog:
  Sync some patches for hns3 about PFC and RSS
   - net/hns3: support new device
   - app/testpmd: fix RSS algorithm choice
   - net/hns3: enable PFC for all user priorities


author: huangdengdui <huangdengui@huawei.com> - 23.11-14
changelog:
  Package the following example to dpdk-tools:
   dpdk-l3fwd, dpdk-l3fwd-power, dpdk-ethtool, dpdk-dma, dpdk-ptpclient


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: - Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202308-5
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangkai <13474090681@163.com> - 115.9.0-1
changelog:
  - Update to 115.9.0
  - Fix CVE-2024-2616 CVE-2024-2608 CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-2607 CVE-2024-2611
  - CVE-2024-1546 CVE-2024-1549 CVE-2024-1547 CVE-2024-1553 CVE-2024-1551 CVE-2024-1548 CVE-2024-1552 CVE-2024-1550
  - CVE-2024-0750 CVE-2024-0746 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0751 CVE-2024-0749 CVE-2024-0753 CVE-2024-0755
  - CVE-2023-6856 CVE-2023-6859 CVE-2023-6857 CVE-2023-6860 CVE-2023-6867 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861 CVE-2023-6864


author: wangkai <13474090681@163.com> - 115.12.0-1
changelog:
  - Update to 115.12.0
  - Fix CVE-2024-29944 CVE-2024-3302 CVE-2024-3852 CVE-2024-3854
    CVE-2024-3857 CVE-2024-3859 CVE-2024-3861 CVE-2024-3864 CVE-2024-4367
    CVE-2024-4767 CVE-2024-4768 CVE-2024-4769 CVE-2024-4770 CVE-2024-4777
    CVE-2024-5688 CVE-2024-5690 CVE-2024-5691 CVE-2024-5692 CVE-2024-5693
    CVE-2024-5696 CVE-2024-5700 CVE-2024-5702


author: wangkai <13474090681@163.com> - 115.14.0-1
changelog:
  - Update to 115.14.0
  - Fix CVE-2024-7519 CVE-2024-7521 CVE-2024-7522 CVE-2024-7524
    CVE-2024-7525 CVE-2024-7526 CVE-2024-7527 CVE-2024-7529 CVE-2024-7531


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 128.13.0-1
changelog:
  - Update to 128.13.0
  - Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
    CVE-2025-8033 CVE-2025-8034 CVE-2025-8035


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 12.3.1-38
changelog:
  - Type: Sync
  - DESC: Sync patches for fixing building issues with clang
  - Source: https://gitee.com/openeuler/gcc/pulls/239


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-38
changelog:
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-40
changelog:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - libio: Attempt wide backup free only for non-legacy code


author: shixuantong <shixuantong@huawei.com> - 2.38-43
changelog:
  - elf: avoid jumping over a needed declaration
  - elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong@huawei.com> - 2.38-44
changelog:
  - elf: Handle static PIE with non-zero load address
  - elf: Introduce _dl_relocate_object_no_relro
  - elf: Switch to main malloc after final ld.so self-relocation


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-45
changelog:
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-52
changelog:
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
  - sysdeps/x86/Makefile: Split and sort tests
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix slow tls access after dlopen [BZ #19924]
  - x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
  - x86_64: Add log1p with FMA
  - x86_64: Add expm1 with FMA
  - x86_64: Add log2 with FMA
  - x86_64: Sort fpu/multiarch/Makefile


author: xiajimei <xiejiamei@hygon.cn> - 2.38-56
changelog:
  - x86: Enable non-temporal memset for Hygon processors
  - x86: Add `Avoid_STOSB` tunable to allow NT memset without ERMS
  - x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
  - x86: Disable non-temporal memset on Skylake Server
  - x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
  - x86: Enable non-temporal memset tunable for AMD
  - x86: Add seperate non-temporal tunable for memset
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86: Add cache information support for Hygon processors
  - x86: Add new architecture type for Hygon processors


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-57
changelog:
  - math: Improve layout of exp/exp10 data
  - AArch64: Use prefer_sve_ifuncs for SVE memset
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - assert: Add test for CVE-2025-0395


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-58
changelog:
  - x86_64: Fix typo in ifunc-impl-list.c.
  - elf: Test case for bug 32976 (CVE-2025-4802)
  - support: Add support_record_failure_barrier
  - support: Use const char * argument in support_capture_subprogram_self_sgid
  - elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ignore signing failure
         Revert "templates: Disable the os-prober by default"
         Revert "templates: Properly disable the os-prober by default"
         Add grub-get-kernel-settings and use it in 10_linux
         Replace a lot of man pages with slightly nicer ones


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-15
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Export all variables from the initial context when creating a submenu


author: peng.zou <peng.zou@shingroup.cn> - 1:2.12-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove BuildRequires:pesign >= 0.99-8 and fix bug about petitboot doesn't ignore EFI entries for ppc64le


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: hanliyang <hanliyang@hygon.cn> - 1:2.12-26
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:use confidential computing provisioned secrets for disk decryption


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/efi/tpm: Re-enable measurements on confidential computing platforms


author: Funda Wang <fundawang@yeah.net> - 1:2.12-32
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:disable fortify level based on new settings of openEuler-rpm-config


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-33
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-3
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.83
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.84
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.85
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.86
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.87
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.88
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: Li Nan <linan122@huawei.com> - 6.6.0-96.0.0.89
changelog:
  - !16670  mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - !16668  Remove useless file
  - mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - Remove useless file
  - !15819 [OLK-6.6]drm/phytium: Fix some Bugs in Phytium Display Engine
  - !16627  fix move_pages return value
  - !16620  close_files(): don't bother with xchg()
  - !16604  pds_core: remove write-after-free of client_id
  - !16434  ksmbd: fix use-after-free in ksmbd_session_rpc_open
  - !16585  tracing: Fix oob write in trace_seq_to_buffer()
  - mm/migrate: convert add_page_for_migration() from follow_page() to folio_walk
  - mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
  - mm/pagewalk: introduce folio_walk_start() + folio_walk_end()
  - mm: introduce vma_pgtable_walk_{begin|end}()
  - mm/migrate: use folio_likely_mapped_shared() in add_page_for_migration()
  - !16537  md: fix mddev uaf while iterating all_mddevs list
  - !16538  md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - !16494  scsi: st: Fix array overflow in st_setup()
  - !16582  module: ensure that kobject_put() is safe for module type kobjects
  - !16605  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - !16606  CVE-2024-58100
  - close_files(): don't bother with xchg()
  - !16609 migration: update status after RAS error
  - !16586  dlm: prevent NPD when writing a positive value to event_done
  - !16580  dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - bpf: Fix kabi breakage for changes_pkt_data in struct bpf_prog_aux
  - bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
  - bpf: check changes_pkt_data property for extension programs
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - pds_core: remove write-after-free of client_id
  - !16571  Fix erofs fid overflow
  - !16574  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - !16550  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16549  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16600  ftrace: Fix preemption accounting for stacktrace trigger command
  - !16596  powerpc/crash: Fix non-smp kexec preparation
  - !16562 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 6.6
  - !16593  vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - finally take no_llseek out
  - migration: update status after RAS error
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - powerpc/crash: Fix non-smp kexec preparation
  - !16588  ipc: fix to protect IPCS lookups using RCU
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - ipc: fix to protect IPCS lookups using RCU
  - dlm: prevent NPD when writing a positive value to event_done
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - !16492  arm64/watchdog: fix watchdog failure in low power scenarios
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - erofs: fix file handle encoding for 64-bit NIDs
  - exportfs: define FILEID_INO64_GEN* file handle types
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - md: fix mddev uaf while iterating all_mddevs list
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - scsi: st: Fix array overflow in st_setup()
  - arm64/watchdog: fix watchdog failure in low power scenarios
  - drm/phytium: Fix some Bugs in Phytium Display Engine
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open


author: Li Nan <linan122@huawei.com> - 6.6.0-98.0.0.90
changelog:
  - !16740  KVM: arm64: check if IPIV is enabled in BIOS
  - !16737  drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - KVM: arm64: check if IPIV is enabled in BIOS
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - !16694  RDMA/hns: Fix double destruction of rsv_qp
  - !16730  uacce: removal of the Shared Memory Feature for Queues
  - !16727  perf: Remove unstable events for uncore L3C PMU
  - !16732  drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - !16728  drivers/perf: hisi: Add cacheable option for L3C PMU
  - !16724  drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - !16723  perf iostat: hisi: Fix port range retrival
  - !16729  arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - crypto: hisilicon/qm - check whether the input parameters and device PF match
  - uacce: removal of the Shared Memory Feature for Queues
  - arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - !16721 cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - !16701  Add HiSilicon uncore frequency scaling driver
  - !16712 crypto: hisilicon - support algorithm fallback v2
  - arm64: topology: Setup amu fie when cpu hotplugging
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - !16717  Fix issues of nfs mounting
  - !16714 v2  Fix file content inconsistency issue and incorporate subsequent fix patches
  - sched/topology: Add a new arch_scale_freq_ref() method
  - !16696  KVM: arm64: Check whether GICv4.0 is enabled
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - vfs: generate FS_CREATE before FS_OPEN when ->atomic_open used.
  - NFS: abort nfs_atomic_open_v23 if name is too long.
  - NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly.
  - !16680  Fix the problem of NFS client mount read/write permission failure
  - crypto: hisilicon/qm - check the value obtained from the hardware
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon - implement full backlog support for sec
  - uacce: add queue lock for uacce_get_ss_dma
  - uacce: use WARN_ON_ONCE instead of WARN_ON
  - !16705  fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16691 v3  Rewrite smt interference account logic
  - !16662  Fix watchdog false positive problem
  - !16711  af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16287 Update the watchdog period according to real CPU frequency
  - !16679  fs/resctrl: L2_MON does not support the limbo mechanism
  - openeuler_defconfig: Enable devfreq and hisi_uncore_freq by default
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - PM / devfreq: Allow devfreq driver to add custom sysfs ABIs
  - PM / devfreq: Check governor before using governor->name
  - PM / devfreq: Remove redundant devfreq_get_freq_range() calling in devfreq_add_device()
  - PM / devfreq: Limit max_freq with scaling_min_freq
  - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
  - mailbox: pcc: Refactor and simplify check_and_ack()
  - mailbox: pcc: Always map the shared memory communication address
  - mailbox: pcc: Refactor error handling in irq handler into separate function
  - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
  - mailbox: pcc: Return early if no GAS register from pcc_mbox_cmd_complete_check
  - mailbox: pcc: Drop unnecessary endianness conversion of pcc_hdr.flags
  - !16653 [OLK-6.6] Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - !16699  mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - KVM: arm64: Check whether GICv4.0 is enabled
  - RDMA/hns: Fix double destruction of rsv_qp
  - interference: Rewrite smt interference account logic
  - interference: Fix the compilation warning of sched_task_is_throttled()
  - !16686 v2  Soft domain improves and bugfixes
  - sched: Fix might sleep in atomic section issue
  - sched: Consider task affinity in wake_soft_domain()
  - sched: Fix soft domain group memleak
  - sched: Rework cpu.soft_domain_nr_cpu
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - !16639  arm64/mpam: Add MPAM manual
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"
  - !16651  iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: L2_MON does not support the limbo mechanism
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: Prevent idle RMIDs from not being released in time from limbo
  - arm64/mpam: Update the chip condition judgment in resctrl_arch_would_mbm_overflow()
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - arm64/mpam: Add MPAM manual


author: Li Nan <linan122@huawei.com> - 6.6.0-99.0.0.91
changelog:
  - !16556 [OLK-6.6] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16559 mm: mincore: use pte_batch_hint() to batch process large folios
  - !16689 mm/madvise: batch tlb flushes for MADV_DONTNEED and MADV_FREE
  - !16426 FIX CVE-2025-40014
  - !16601 add virtcca capability and kae vf interface
  - !16866 v2  mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16865  pci:vga fix race condition in vga_arb_write
  - !16770 [OLK-6.6] Intel: Backport to fix QuickAssist Technology(QAT) in-tree driver from v6.10 to v6.16
  - !16773  mm:userswap: change VM_USWAP_BIT to bit 61
  - !16820 v2  Fix some smmu bugs
  - !16803  CVE-2025-38060
  - !16828  orangefs: Do not truncate file size
  - !16812 perf hisi-ptt: Fix memory leak in lseek failure handling
  - !16827  btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - !16775 [OLK-6.6]fix enfs bug
  - !16861  arm64: kaslr: fix nokaslr cmdline parsing
  - mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16804  HID: uclogic: Add NULL check in uclogic_input_configured()
  - !16806  vhost-scsi: protect vq->log_used with vq->mutex
  - !14552 [OLK-6.6]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16573  Backport 6.6.64-6.6.72 LTS
  - !16757  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16756  mm: pcp: increase pcp->free_count threshold to trigger free_high
  - pci:vga fix race condition in vga_arb_write
  - !16656  merge CVE patches into OLK-6.6
  - !16512  perf/x86/intel: Only check the group flag for X86 leader
  - !16617  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16748  arm64: xcall: Fix GPR touch as the original step
  - !16778  drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - !16848  tracing: probes: Fix a possible race in trace_probe_log APIs
  - !16842  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16837  ftrace: Fix preemption accounting for stacktrace filter command
  - !16845  bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - !16652 v2  CVE-2025-37948
  - !16791  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16851  drm/amd/display: Increase block_sequence array size
  - drm/amd/display: Increase block_sequence array size
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace filter command
  - orangefs: Do not truncate file size
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - iommu/arm-smmu-v3: Fix the problematic platform detection logic
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - fix review issue
  - vhost-scsi: protect vq->log_used with vq->mutex
  - perf hisi-ptt: Fix memory leak in lseek failure handling
  - HID: uclogic: Add NULL check in uclogic_input_configured()
  - bpf: abort verification if env->cur_state->loop_entry != NULL
  - bpf: copy_verifier_state() should copy 'loop_entry' field
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - fix enfs bug
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - mm:userswap: change VM_USWAP_BIT to bit 61
  - crypto: qat - switch to standard pattern for PCI IDs
  - crypto: qat - remove BITS_IN_DWORD()
  - crypto: qat - remove initialization in device class
  - crypto: qat - add shutdown handler to qat_c3xxx
  - crypto: qat - remove redundant prototypes in qat_c3xxx
  - crypto: qat - add shutdown handler to qat_c62x
  - crypto: qat - remove redundant prototypes in qat_c62x
  - crypto: qat - add shutdown handler to qat_dh895xcc
  - crypto: qat - remove redundant prototypes in qat_dh895xcc
  - crypto: qat - add shutdown handler to qat_420xx
  - crypto: qat - add shutdown handler to qat_4xxx
  - crypto: qat - Remove dst_null support
  - crypto: qat - remove access to parity register for QAT GEN4
  - crypto: qat - set parity error mask for qat_420xx
  - crypto: qat - optimize allocations for fw authentication
  - crypto: qat - remove redundant FW image size check
  - crypto: qat - remove unused members in suof structure
  - crypto: qat - introduce fuse array
  - crypto: qat - add macro to write 64-bit values to registers
  - crypto: qat - refactor service parsing logic
  - crypto: qat - do not export adf_cfg_services
  - crypto: qat - reorder objects in qat_common Makefile
  - crypto: qat - fix object goals in Makefiles
  - crypto: qat - set command ids as reserved
  - crypto: drivers - Use str_enable_disable-like helpers
  - vfio/qat: fix overflow check in qat_vf_resume_write()
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
  - crypto: qat - Fix typo "accelaration"
  - crypto: qat - Constify struct pm_status_row
  - crypto: qat - remove unused adf_devmgr_get_first
  - lib/string_choices: Add str_up_down() helper
  - crypto: qat - Remove trailing space after 
  - crypto: qat - fix "Full Going True" macro definition
  - crypto: qat - Use static_assert() to check struct sizes
  - crypto: qat - allow disabling SR-IOV VFs
  - crypto: qat - ensure correct order in VF restarting handler
  - crypto: qat - fix recovery flow for VFs
  - crypto: qat - disable IOV in adf_dev_stop()
  - crypto: qat - preserve ADF_GENERAL_SEC
  - crypto: qat - initialize user_input.lock for rate_limiting
  - crypto: qat - make adf_ctl_class constant
  - crypto: qat - Fix typo
  - crypto: qat - fix linking errors when PCI_IOV is disabled
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - mm: pcp: increase pcp->free_count threshold to trigger free_high
  - mm: page_alloc: remove redundant READ_ONCE
  - arm64: xcall: Fix GPR touch as the original step
  - mm/madvise: handle madvise_lock() failure during race unwinding
  - mm/madvise: batch tlb flushes for MADV_DONTNEED[_LOCKED]
  - mm/memory: split non-tlb flushing part from zap_page_range_single()
  - mm/madvise: batch tlb flushes for MADV_FREE
  - mm/madvise: define and use madvise_behavior struct for madvise_do_behavior()
  - mm/madvise: remove len parameter of madvise_do_behavior()
  - mm/madvise: remove redundant mmap_lock operations from process_madvise()
  - mm/madvise: split out madvise() behavior execution
  - mm/madvise: split out madvise input validity check
  - mm/madvise: split out mmap locking operations for madvise()
  - mm/madvise: unrestrict process_madvise() for current process
  - mm/madvise: don't perform madvise VMA walk for MADV_POPULATE_(READ|WRITE)
  - crypto: iaa - Fix potential use after free bug
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
  - mm: migrate_device: use more folio in migrate_device_finalize()
  - Revert "remoteproc: core: Clear table_sz when rproc_shutdown"
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - jfs: fix slab-out-of-bounds read in ea_get()
  - tpm: do not start chip while suspended
  - KVM: arm64: Tear down vGIC on failed vCPU creation
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  - arm64: proton-pack: Expose whether the branchy loop k value
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware
  - arm64: insn: Add support for encoding DSB
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
  - arm64: cputype: Add MIDR_CORTEX_A76AE
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
  - add virtcca capability and kae vf interface
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - seq_buf: Make DECLARE_SEQ_BUF() usable
  - seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
  - mm: mincore: use pte_batch_hint() to batch process large folios
  - perf/x86/intel: Only check the group flag for X86 leader
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap

   newline


author: Li Nan <linan122@huawei.com> - 6.6.0-100.0.0.92
changelog:
  - !17003  net_sched: red: fix a race in __red_change()
  - !16747  LoongArch: Fix bugs in huge_pte_offset/__alloc_pages_slowpath/iommu
  - !17026  CVE-2025-37842
  - !17022  spi-rockchip: Fix register out of bounds access
  - !17039  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17036  parisc: Fix double SIGFPE crash
  - !17001  Fix CVE-2025-38182
  - !17034  fix CVE-2025-38118
  - !17033  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - !17035  drm/amdkfd: Fix mode1 reset crash issue
  - !16792 v3  Support CCA Guest
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17023  bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - parisc: Fix double SIGFPE crash
  - drm/amdkfd: Fix mode1 reset crash issue
  - Bluetooth: MGMT: Fix sparse errors
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - spi: fsl-qspi: Fix double cleanup in probe error path
  - spi: fsl-qspi: use devm function instead of driver remove
  - !16991  hwmon: (asus-ec-sensors) check sensor index in read_string()
  - !17014 v2  CVE-2025-38099
  - !17013  crypto: null - Use spin lock instead of mutex
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - spi-rockchip: Fix register out of bounds access
  - !16983  crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - !16982  KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16957  f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16999  octeon_ep: Fix host hang issue during device reboot
  - !16995  f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - !17000 v2  mm: respect mmap hint address when aligning for THP
  - !17006  drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken
  - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING
  - crypto: null - Use spin lock instead of mutex
  - !16467 drm/virtio: implement virtio_gpu_shutdown
  - !16565 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16743 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !16902  cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16994  net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16996  wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - net_sched: red: fix a race in __red_change()
  - ublk: santizize the arguments from userspace when adding a device
  - mm: respect mmap hint address when aligning for THP
  - octeon_ep: Fix host hang issue during device reboot
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16988  Fix compile problem for psi_grained
  - hwmon: (asus-ec-sensors) check sensor index in read_string()
  - Fix compile problem for psi_grained
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16969  Fix CVE-2025-38170
  - !16967  net: openvswitch: Fix the dead loop of MPLS parse
  - !16964  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - !16891 fix some build errors of enfs
  - net: openvswitch: Fix the dead loop of MPLS parse
  - dma-buf: insert memory barrier before updating num_fences
  - !16557 [OLK-6.6] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16919  Backport mainline patches
  - f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16567 [OLK-6.6]:update patches for sw64 architecture
  - !16897  CVE-2025-37784
  - !16922 v2  irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16926  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16912 Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16908  OLK-6.6 Bperf
  - !16603 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.83-6.6.84 LTS Patches
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16906  rseq: Fix segfault on registration when rseq_cs is non-zero
  - xfrm: Clear low order bits of ->flowi4_tos in decode_session4().
  - xfrm: policy: fix layer 4 flowi decoding
  - xfrm: policy: replace session decode with flow dissector
  - xfrm: move mark and oif flowi decode into common code
  - xfrm: pass struct net to xfrm_decode_session wrappers
  - !16898  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16903  some optimization patches for inet_diag dump
  - Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16895 virtCCA supports SR-IOV in CoDA scenarios.
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf stat: Support inherit events during fork() for bperf
  - !16896  drm/v3d: Add job to pending list if the reset was skipped
  - rseq: Fix segfault on registration when rseq_cs is non-zero
  - inet_diag: skip over empty buckets
  - sock_diag: remove sock_diag_mutex
  - inet_diag: allow concurrent operations
  - inet_diag: add module pointer to "struct inet_diag_handler"
  - cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16780 v2  mm/mem_sampling: add trace event for spe based damon record
  - !16781 v4  mm/mem_sampling: fix some mem sampling issues
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
  - net: ti: icss-iep: Add phase offset configuration for perout signal
  - net: ti: icss-iep: Add pwidth configuration for perout signal
  - drm/v3d: Add job to pending list if the reset was skipped
  - !16753  nfs: handle failure of nfs_get_lock_context in unlock path
  - !16237  pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  - virtCCA supports SR-IOV in CoDA scenarios.
  - sunrpc, nfs: CONFIG_ENFS should select CONFIG_SUNRPC_ENFS
  - sunrpc, nfs: fix build errors when CONFIG_SUNRPC_ENFS=m && CONFIG_ENFS=m && CONFIG_NFS=y
  - nfs: fix build errors when CONFIG_ENFS=m && CONFIG_NFS_FS=y
  - nfs: fix enfs mount failure when CONFIG_ENFS=y
  - sw64: adapt to the upstream changes in huge_ptep_get_and_clear
  - sw64: sort arch/sw64/Kconfig
  - sw64: iommu: implement map_pages/unmap_pages API
  - gicv3: add lpi support for virtcca cvm guest
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry
  - configfs-tsm-report: Fix NULL dereference of tsm_ops
  - arm64: Document Arm Confidential Compute
  - virt: arm-cca-guest: TSM_REPORT support for realms
  - mm/slab: Add __free() support for kvfree
  - configfs-tsm: Introduce a shared ABI for attestation reports
  - virt: coco: Add a coco/Makefile and coco/Kconfig
  - arm64: realm: Use aliased addresses for device DMA to shared buffers
  - dma: Introduce generic dma_addr_*crypted helpers
  - dma: Fix encryption bit clearing for dma_to_phys
  - rme: make sure realm guest map memory in page granularity
  - arm64: realm: ioremap: Allow mapping memory as encrypted
  - parisc: Delay write-protection until mark_rodata_ro() call
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys
  - irqchip/gic-v3-its: Rely on genpool alignment
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool()
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor
  - arm64: Enable memory encrypt for Realms
  - arm64: mm: Avoid TLBI when marking pages as valid
  - arm64: Enforce bounce buffers for realm DMA
  - efi: arm64: Map Device with Prot Shared
  - arm64: rsi: Map unprotected MMIO as decrypted
  - arm64: rsi: Add support for checking whether an MMIO is protected
  - arm64: realm: Query IPA size from the RMM
  - arm64: Detect if in a realm and set RIPAS RAM
  - arm64: rsi: Add RSI definitions
  - arm64: mm: Add confidential computing hook to ioremap_prot()
  - arm64: mm: Add top-level dispatcher for internal mem_encrypt API
  - Revert "gicv3: add lpi support for cvm guest"
  - Revert "virtcca feature : disable swiotlb for passthrough device"
  - mm/mem_sampling: Fix inaccurate sampling for NUMA balancing and DAMON
  - mm/mem_sampling: Prevent mem_sampling from being enabled if SPE init failed
  - mm/mem_sampling: add trace event for spe based damon record
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - iommu/loongarch: fix potential hung task when error occurred
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
  - ksmbd: fix r_count dec/increment mismatch
  - Input: xpad - fix two controller table values
  - cifs: Ensure that all non-client-specific reparse points are processed by the server
  - nvme: unblock ctrl state transition for firmware update
  - vboxsf: Add __nonstring annotations for unterminated strings
  - netfilter: nf_tables: allow clone callbacks to sleep
  - netfilter: nf_tables: bail out if stateful expression provides no .clone
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - rust: lockdep: Remove support for dynamically allocated LockClassKeys
  - HID: apple: disable Fn key handling on the Omoton KB066
  - nvme-fc: rely on state transitions to handle connectivity loss
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
  - smb: client: Fix match_session bug preventing session reuse
  - smb3: add support for IAKerb
  - i2c: sis630: Fix an error handling path in sis630_probe()
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
  - i2c: ali1535: Fix an error handling path in ali1535_probe()
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
  - cifs: Validate content of WSL reparse point buffers
  - cifs: Fix integer overflow while processing closetimeo mount option
  - cifs: Fix integer overflow while processing actimeo mount option
  - scripts: generate_rust_analyzer: add missing macros deps
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
  - ASoC: rt722-sdca: add missing readable registers
  - rust: init: add missing newline to pr_info! calls
  - ASoC: cs42l43: Fix maximum ADC Volume
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
  - rust: error: add missing newline to pr_warn! calls
  - ASoC: ops: Consistently treat platform_max as control value
  - smb: client: fix regression with guest option
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
  - arm64: mm: Populate vmemmap at the page level if not section aligned
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
  - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
  - ksmbd: prevent connection release during oplock break notification
  - ksmbd: fix use-after-free in ksmbd_free_work_struct
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14
  - drm/amd/display: Restore correct backlight brightness after a GPU reset
  - drm/amd/display: Disable unneeded hpd interrupts during dm_init
  - drm/dp_mst: Fix locking when skipping CSN before topology probing
  - drm/atomic: Filter out redundant DPMS calls
  - drm/i915/cdclk: Do cdclk post plane programming later
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - USB: serial: option: match on interface class for Telit FN990B
  - USB: serial: option: fix Telit Cinterion FE990A name
  - USB: serial: option: add Telit Cinterion FE990B compositions
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
  - Input: i8042 - swap old quirk combination with new quirk for more devices
  - Input: i8042 - swap old quirk combination with new quirk for several devices
  - Input: i8042 - add required quirks for missing old boardnames
  - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
  - Input: xpad - rename QH controller to Legion Go S
  - Input: xpad - add support for TECNO Pocket Go
  - Input: xpad - add support for ZOTAC Gaming Zone
  - Input: xpad - add multiple supported devices
  - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
  - Input: iqs7222 - preserve system status register
  - Input: ads7846 - fix gpiod allocation
  - io_uring: use unpin_user_pages() where appropriate
  - io_uring/kbuf: vmap pinned buffer ring
  - io_uring: use vmap() for ring mapping
  - io_uring: fix corner case forgetting to vunmap
  - io_uring: don't attempt to mmap larger than what the user asks for
  - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
  - mm: add nommu variant of vm_insert_pages()
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - net: Handle napi_schedule() calls from non-interrupt
  - drm/nouveau: Do not override forced connector status
  - mptcp: safety check before fallback
  - x86/irq: Define trace events conditionally
  - perf/x86/intel: Use better start period for frequency mode
  - drm/vkms: Round fixp2int conversion in lerp_u16
  - fuse: don't truncate cached, mutated symlink
  - ASoC: tas2764: Set the SDOUT polarity correctly
  - ASoC: tas2764: Fix power control mask
  - ASoC: tas2770: Fix volume scale
  - nvme: only allow entering LIVE from CONNECTING state
  - sctp: Fix undefined behavior in left shift operation
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
  - apple-nvme: Release power domains when probe fails
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
  - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
  - io-wq: backoff when retrying worker creation
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
  - ASoC: rsnd: adjust convert rate limitation
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
  - ASoC: rsnd: indicate unsupported clock rate
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
  - ASoC: simple-card-utils.c: add missing dlc->of_node
  - selftests/bpf: Fix invalid flag of recv()
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
  - Xen/swiotlb: mark xen_swiotlb_fixup() __init
  - thermal/cpufreq_cooling: Remove structure member documentation
  - s390/cio: Fix CHPID "configure" attribute caching
  - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
  - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
  - sched: Clarify wake_up_q()'s write to task->wake_q.next
  - objtool: Ignore dangling jump table entries
  - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
  - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
  - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
  - usb: phy: generic: Use proper helper for property detection
  - HID: ignore non-functional sensor in HP 5MP Camera
  - HID: intel-ish-hid: Send clock sync message immediately after reset
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
  - vboxsf: fix building with GCC 15
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
  - smb: client: fix noisy when tree connecting to DFS interlink targets
  - ACPI: resource: IRQ override for Eluktronics MECH-17
  - scsi: ufs: core: Fix error return with query response
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
  - sched/debug: Provide slice length for fair tasks
  - powercap: call put_device() on an error path in powercap_register_control_type()
  - hrtimers: Mark is_migration_base() with __always_inline
  - nvme-fc: do not ignore connectivity loss during connecting
  - nvme-fc: go straight to connecting state when initializing
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
  - net/mlx5: Bridge, fix the crash caused by LAG state check
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
  - net: openvswitch: remove misbehaving actions length check
  - netfilter: nft_exthdr: fix offset with ipv4_find_option()
  - net_sched: Prevent creation of classes with TC_H_ROOT
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
  - bonding: fix incorrect MAC address setting to receive NS messages
  - net: switchdev: Convert blocking notification chain to a raw one
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
  - net/mlx5: handle errors in mlx5_chains_create_table()
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
  - netpoll: hold rcu read lock in __netpoll_send_skb()
  - net: mctp i2c: Copy headers if cloned
  - net: dsa: mv88e6xxx: Verify after ATU Load ops
  - net/mlx5: Fill out devlink dev info only for PFs
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
  - Bluetooth: hci_event: Fix enabling passive scanning
  - sched: address a potential NULL pointer dereference in the GRED scheduler.
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
  - ice: fix memory leak in aRFS after reset
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
  - tcp: fix forever orphan socket caused by tcp_abort
  - tcp: fix races in tcp_abort()
  - hrtimer: Use and report correct timerslack values for realtime tasks
  - zram: fix NULL pointer in comp_algorithm_show()
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
  - clockevents/drivers/i8253: Fix stop sequence for timer 0
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: ftrace: Add direct call trampoline samples support
  - sw64: ftrace: Add direct call support
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: perf: fix perf test 'import perf' in python failed
  - sw64: add support for function error injection
  - sw64: add sw64 rethook implementation
  - sw64: emit fixed-length instructions for BPF_PSEUDO_FUNC
  - sw64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  - drm/virtio: implement virtio_gpu_shutdown
  - virtgpu: don't reset on shutdown
  - virtio: break and reset virtio devices on device_shutdown()
  - LoongArch: sync kvm head file from upstream
  - LoongArch: fix migrate issue
  - LoongArch: Save and restore CSR.CNTC for hibernation
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result


author: Li Nan <linan122@huawei.com> - 6.6.0-101.0.0.93
changelog:
  - !17041 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Conflicts Patches
  - !17126  EDAC/skx_common: Fix general protection fault
  - !17136  xcall xint 644
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - !17070  arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - !17106  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17120 v3  mm: batched unmap lazyfree large folios
  - EDAC/skx_common: Fix general protection fault
  - mm/rmap: fix potential out-of-bounds page table access during batched unmap
  - mm: avoid splitting pmd for lazyfree pmd-mapped THP in try_to_unmap
  - mm: support batched unmap for lazyfree large folios during reclamation
  - mm: support tlbbatch flush for a range of PTEs
  - mm: set folio swapbacked iff folios are dirty in try_to_unmap_one
  - !16998  arm64/mpam: Fix L2 monitor issue under CDP mode
  - !17107  CVE-2025-38322
  - !16947 [OLK-6.6] Fix patches for X2avic to backport for OLK-6.6
  - !17092  drm/amd/display: Fix && vs || typos
  - perf/x86/intel: Fix crash in icl_update_topdown_event()
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
  - perf/x86/intel: Apply static call for drain_pebs
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !16884  fs: Backport four namespace fix patches
  - !17094  config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - drm/amd/display: Fix && vs || typos
  - !17071  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !17068  mcb: fix a double free bug in chameleon_parse_gdd()
  - !17062  bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !16956 v3  config: Enable CONFIG_VIRT_DRIVERS
  - !16950 perf: Add support for SPE Data Source packet on HiSilicon HIP12
  - usb: dwc3: gadget: check that event count does not exceed event buffer length
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - mcb: fix a double free bug in chameleon_parse_gdd()
  - bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !17055  bpf lts backport
  - !17054  bpf verifier fixes
  - !17049  platform/x86: dell_rbu: Fix list usage
  - !17059  media: cxusb: no longer judge rbuf when the write fails
  - !16462 fix  CVE-2025-22101
  - media: cxusb: no longer judge rbuf when the write fails
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - selftests/bpf: Add tests with stack ptr register in conditional jmp
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping
  - selftests/bpf: precision tracking test for BPF_NEG and BPF_END
  - platform/x86: dell_rbu: Fix list usage
  - fs/Kconfig: make hugetlbfs a menuconfig
  - workqueue: Update lock debugging code
  - memblock: use numa_valid_node() helper to check for invalid node ID
  - perf mem: Count L2 HITM for c2c statistic
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64: cputype: Add cputype definition for HIP12
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - arm64/mpam: Fix L2 monitor issue under CDP mode
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit()
  - config: Enable CONFIG_VIRT_DRIVERS
  - KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
  - path_overmount(): avoid false negatives
  - net: libwx: fix Tx L4 checksum


author: Li Nan <linan122@huawei.com> - 6.6.0-102.0.0.94
changelog:
  - !17076  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17102  smb: client: fix use-after-free in cifs_oplock_break
  - !17240  some fix for spe hotcold
  - !17159 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Conflicts Patches
  - !17206  driver core: Use kasprintf() instead of fixed buffer formatting
  - mm_monitor/mm_spe: Embed boost events within SPE packets
  - mm_monitor/mm_spe: Fix SPE boost enablement and continuation handling
  - !17161  olk-6.6-backport-bugfix-for-dynamic-affinity
  - !17150  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !17153  f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17154  media: vivid: Change the siize of the composing
  - !17238 v2  net: Fix kabi breakage for defer_free_list in struct net
  - !17237 RDMA/hns: Fix HW configurations not cleared in error flow
  - net: Fix kabi breakage for defer_free_list in struct net
  - RDMA/hns: Fix HW configurations not cleared in error flow
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Remove redundant hnae3.h in bond and sysfs
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - RDMA/hns: Get messgae length of ack_req from FW
  - !17229 net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
  - !17032  fbcon: Make sure modelist not set on unregistered console
  - !16958  scsi: target: iscsi: Fix timeout on deleted connection
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: add complete parentheses for some macros
  - net: hns3: use hns3_get_ops() helper to reduce the unnecessary middle layer conversion
  - net: hns3: use hns3_get_ae_dev() helper to reduce the unnecessary middle layer conversion
  - net: hns3: delete redundant address before the array
  - net: hns3: clear hns alarm: comparison of integer expressions of different signedness
  - net: hns3: add 
  - Revert "net: hns3: add 
  - !17201 net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - !17215  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17214  netfilter: nf_set_pipapo_avx2: fix initial map fill
  - !17213  net: fix udp gso skb_segment after pull from frag_list
  - !17212  ice: fix Tx scheduler error handling in XDP callback
  - !17207  net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17200  xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - !17199  tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - !17198  bpf: consider that tail calls invalidate packet pointers
  - !17197  net: stmmac: Fix accessing freed irq affinity_hint
  - !17196  mptcp: fix NULL pointer in can_accept_new_subflow
  - !17194  tipc: fix memory leak in tipc_link_xmit
  - !17193  net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - !17192  cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - !17184  sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - !17181  net: fix NULL pointer dereference in l3mdev_l3_rcv
  - !17101  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17191  net: mctp: Set SOCK_RCU_FREE
  - !17190  usbnet:fix NPE during rx_complete
  - !17189  net: ibmveth: make veth_pool_store stop hanging
  - !17188  arcnet: Add NULL check in com20020pci_probe()
  - !17187  net: fix geneve_opt length integer overflow
  - !17186  udp: Fix memory accounting leak.
  - !17185  net: mvpp2: Prevent parser TCAM memory corruption
  - !17182  net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - !17179  net: dsa: free routing table on probe failure
  - !17178  sctp: detect and prevent references to a freed transport in sendmsg
  - !17177  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17176  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17175  net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - !17174  net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17172  xsk: fix an integer overflow in xp_create_and_assign_umem()
  - !17171  net: atm: fix use after free in lec_send()
  - !17170  eth: bnxt: fix truesize for mb-xdp-pass case
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - netfilter: nf_set_pipapo_avx2: fix initial map fill
  - net: fix udp gso skb_segment after pull from frag_list
  - ice: fix Tx scheduler error handling in XDP callback
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17016 [OLK-6.6]:update patches for sw64 architecture
  - driver core: Use kasprintf() instead of fixed buffer formatting
  - !17074  ext4: only dirty folios when data journaling regular files
  - !16951  wifi: ath9k_htc: Abort software beacon handling if disabled
  - net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - Revert "net: hns3: Resolved the issue that the debugfs query result is inconsistent."
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - Revert "net: hns3: initialize reset_timer before hclgevf_misc_irq_init()"
  - net: hns3: Use ARRAY_SIZE() to improve readability
  - Revert "net: hns3: fix spelling mistake "reg_um" -> "reg_num""
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - bpf: consider that tail calls invalidate packet pointers
  - net: stmmac: Fix accessing freed irq affinity_hint
  - mptcp: fix NULL pointer in can_accept_new_subflow
  - tipc: fix memory leak in tipc_link_xmit
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - net: mctp: Set SOCK_RCU_FREE
  - usbnet:fix NPE during rx_complete
  - net: ibmveth: make veth_pool_store stop hanging
  - arcnet: Add NULL check in com20020pci_probe()
  - net: fix geneve_opt length integer overflow
  - !16850 [OLK-6.6] Backport TDX HLT/SAFE-HLT fix
  - udp: Fix memory accounting leak.
  - net: mvpp2: Prevent parser TCAM memory corruption
  - sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - net: fix NULL pointer dereference in l3mdev_l3_rcv
  - net: dsa: free routing table on probe failure
  - sctp: detect and prevent references to a freed transport in sendmsg
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17137 [olk 6.6] net: hibmcge: backport some feature patches
  - xsk: fix an integer overflow in xp_create_and_assign_umem()
  - net: atm: fix use after free in lec_send()
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - !17156  v3:add perpcu stock for kmem
  - scsi: ufs: core: Set default runtime/system PM levels before ufshcd_hba_init()
  - libfs: Fix simple_offset_rename_exchange()
  - shmem: Fix shmem_rename2()
  - mac802154: check local interfaces before deleting sdata list
  - hfs: Sanity check the root record
  - !17109 efi: efi_get_memory_map -- increase map headroom
  - !17148  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - sched/dynamic_affinity: fix CI test alway select prefer_cpu problem
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - sched/fair: reset idlest_cpu if not meet the conditions for preferred CPU
  - memcg: add stock for kmem [un]charging
  - memcg: add CONFIG_MEMCG_KMEM_STOCK
  - scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
  - selftests: tc-testing: reduce rshift value
  - media: vivid: Change the siize of the composing
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17124  crypto: algif_hash - fix double free in hash_accept
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - net: hibmcge: configure FIFO thresholds according to the MAC controller documentation
  - net: hibmcge: adjust the burst len configuration of the MAC controller to improve TX performance.
  - net: hibmcge: support scenario without PHY
  - net: phy: fixed_phy: constify status argument where possible
  - net: phy: fixed_phy: remove irq argument from fixed_phy_register
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
  - net: phy: fixed_phy: remove irq argument from fixed_phy_add
  - net: phy: fixed_phy: remove fixed_phy_register_with_gpiod
  - !17140 v2  Cgroup-Based Interference Statistics followup
  - interference: Add distribution histogram support
  - interference: Use hardware timer counter
  - interference: Add mutex interference track support
  - interference: Add spinlock interference track support
  - interference: Add cgroup_ifs_enter/leave_lock helper
  - interference: Disable irq track when irqtime disabled
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support
  - sw64: Kconfig: enable HAS_IOPORT by default
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - ext4: only dirty folios when data journaling regular files
  - Fix kabi for TDX halt/safe-halt
  - fbcon: Make sure modelist not set on unregistered console
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: restore the register storing direct call address
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - scsi: target: iscsi: Fix timeout on deleted connection
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT


author: Li Nan <linan122@huawei.com> - 6.6.0-103.0.0.95
changelog:
  - !17341 v7  arm64: Add hardware xcall framework support
  - !17336  fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17308  arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - arm64: Add hardware xcall framework support
  - arm64: Reserve a kabi in task_struct exclusively for xcall
  - arm64: Refactor the xcall proc code
  - !17259  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - !17335 ROH: fix security issues and eliminate redundancies
  - ROH: fix security issues and eliminate redundancies
  - arm64/mpam: Ensure the err variable is initialized
  - fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17261 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - !17296  nvmet-tcp: don't restore null sk_state_change
  - !17299  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17310  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17305  CVE-2025-38264
  - !17303  sched/fair: Only increment deadline once on yield
  - !17266 unify log function usage of enfs
  - arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - nvme-tcp: sanitize request list handling
  - llist: add interface to check if a node is on a list.
  - !17255  inspector: hold module refcnt when cpu inspector is running
  - !17291  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - sched/fair: Only increment deadline once on yield
  - nfs/enfs: use enfs_log_error() instead of pr_err() in enfs
  - nfs/enfs: use enfs_log_info() instead of pr_info() in enfs
  - nfs/enfs: cleanups in enfs/shard_route.c
  - nfs/enfs: use enfs_log_debug() instead of pr_debug() to debug enfs
  - nfs/enfs: remove unused code in enfs/dns_internal.h
  - nfs/enfs: use enfs_log_debug() instead of dfprintk() to debug enfs
  - nfs: use dfprintk() to debug enfs
  - !17262 v2  ifs: Defer cgroup ifs enable
  - !17287  i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - nvmet-tcp: don't restore null sk_state_change
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !17275  fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - !17273  atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - !17246 MPTCP UPTREAM PART25
  - ifs: Defer cgroup ifs enable
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - inspector: hold module refcnt when cpu inspector is running
  - selftests: mptcp: join: validate event numbers(part 2)
  - selftests: mptcp: pm_nl_ctl: remove re-definition
  - selftests: mptcp: join: simplify checksum_tests
  - selftests: mptcp: join: mute errors when ran in the background
  - selftests: mptcp: join: specify host being checked
  - selftests: mptcp: join: more explicit check name
  - selftests: mptcp: join: validate MPJ SYN TX MIB counters
  - selftests: mptcp: join: one line for join check
  - selftests: mptcp: join: reduce join_nr params
  - mptcp: MIB counters for sent MP_JOIN
  - mptcp: pm: reduce entries iterations on connect
  - mptcp: pm: fix backup support in signal endpoints
  - mptcp: pm: rename helpers linked to 'flush'
  - mptcp: Remove unused declaration mptcp_sockopt_sync()
  - !17250  arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - !17253  mm: fix uprobe pte be overwritten when expanding vma
  - !16602 【OLK-6.6】修复虚拟机下使用海光TKM功能可能返回TKM_UNSUPPORTED_CMD错误
  - !16797 【OLK-6.6】修复psp_mutex_lock_timeout超时触发soft lockup警告的问题
  - mm: fix uprobe pte be overwritten when expanding vma
  - arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - arm64/mpam: Fix typo in resctrl_arch_set_cdp_enabled()
  - drivers/crypto/ccp: fix soft lockup warning in psp_mutex_lock_timeout()
  - crypto: ccp: fix The high priority queue changes cmd_id of the queued elements


author: Li Nan <linan122@huawei.com> - 6.6.0-104.0.0.96
changelog:
  - !17385 mptcp: pm: only set fullmesh for subflow endp
  - !17445  xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - !17444  Backport mainline patch
  - !17395  Squashfs: check return result of sb_min_blocksize
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - bonding: check xdp prog when set bond mode
  - bonding: return detailed error when loading native XDP fails
  - !17436  i2c/designware: Fix an initialization issue
  - !17432  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17421  ACPICA: fix acpi operand cache leak in dswstate.c
  - !17422  soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - !17423  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17301  fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - !17304  nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - !17331  dm-bufio: fix sched in atomic context
  - !17413  CVE-2025-37957
  - !17412 v3  livepatch: support for super-long symbol repositioning
  - !16933  virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - !16932  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17430  drm/v3d: Disable interrupts before resetting the GPU
  - i2c/designware: Fix an initialization issue
  - !17254 irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17406  usb: net: sierra: check for no status endpoint
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17393  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - ACPICA: fix acpi operand cache leak in dswstate.c
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
  - livepatch: support for super-long symbol repositioning
  - usb: net: sierra: check for no status endpoint
  - !17380  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - mptcp: pm: only set fullmesh for subflow endp
  - !17115  xfs: fix attr inactive issue
  - Squashfs: check return result of sb_min_blocksize
  - selftests/tracing: Fix false failure of subsystem event test
  - !17390  ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17387  ipvlan: ensure network headers are in skb linear part
  - ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17205 fix some panic bugs and memory leak bugs of enfs
  - ipvlan: ensure network headers are in skb linear part
  - !17271 LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - !17251 migration: update status after RAS error
  - !17278 nvme: update firmware version after commit
  - !17330  livepatch: fix insn length check
  - irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17372  drm/amd/display: Add null pointer check for get_first_active_display()
  - !17349  bnxt: properly flush XDP redirect lists
  - !17375  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - !17367  fd/proc: modify xcall proc file permissions to 640
  - !17346  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17222  fs: Add additional checks for block devices during mount
  - !17168  xfrm: state: fix out-of-bounds read during lookup
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17141 CVE-2025-37992：net_sched: Flush gso_skb list too during -&gt;change()
  - !17364  net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - !17167  eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - !17371  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - !17362  ucounts: fix mq_perf test error.
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - fd/proc: modify xcall proc file permissions to 640
  - !17361  scsi: lpfc: Use memcpy() for BIOS version
  - !17360  net: Fix CVE-2025-21884
  - !17356  serial: jsm: fix NPE during jsm_uart_port_init
  - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - ucounts: fix mq_perf test error.
  - scsi: lpfc: Use memcpy() for BIOS version
  - net: better track kernel sockets lifetime
  - net: Add net_passive_inc() and net_passive_dec().
  - !17269 MPTCP UPTREAM PART26
  - !17358  serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17322  Fix CVE-2025-38424
  - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17342  tls: always refresh the queue when reading sock
  - !17343  Fix WARN in perf_cgroup_switch()
  - !17080  serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - !17351  mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17319  mm/dpool: do not use uninitialized variable
  - serial: jsm: fix NPE during jsm_uart_port_init
  - nfs/enfs: remove unnecessary shard_should_stop in shard_route.c
  - mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17345 net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - bnxt: properly flush XDP redirect lists
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - net: hns3: use seq_file for files in common/ of hclge layer
  - net: hns3: use seq_file for files in fd/ in debugfs
  - !17328  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf/core: Fix the WARN_ON_ONCE is out of lock protected region
  - perf/core: Fix WARN in perf_cgroup_switch()
  - !17324  video: screen_info: Relocate framebuffers behind PCI bridges
  - tls: always refresh the queue when reading sock
  - nvme-host: fix the updating of the firmware version
  - nvme: update firmware version after commit
  - net: hns3: use seq_file for files in reg/ in debugfs
  - net: hns3: use seq_file for files in mac_list/ in debugfs
  - net: hns3: use seq_file for files in tm/ in debugfs
  - net: hns3: use seq_file for files in common/ of hns3 layer
  - net: hns3: use seq_file for files in queue/ in debugfs
  - net: hns3: clean up the build warning in debugfs by use seq file
  - net: hns3: remove tx spare info from debugfs.
  - net: hns3: use string choices helper
  - dm-bufio: fix sched in atomic context
  - livepatch: fix insn length check
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - video: screen_info: Relocate framebuffers behind PCI bridges
  - LoongArch: KVM: Enhance the robustness of extioi
  - perf/core: Fix WARN in perf_sigtrap()
  - perf: Fix sample vs do_exit()
  - mm/dpool: do not use uninitialized variable
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted
  - doc: mptcp: sysctl: blackhole_timeout is per-netns
  - mptcp: sysctl: avail sched: remove write access
  - mptcp: remove unneeded lock when listing scheds
  - nfs/enfs: remove enfs_uuid_debug in shard_route.c
  - nfs/enfs: remove usage of list_entry_is_head() in shard_route.c
  - sunrpc: remove redundant rpc_task_release_xprt() of enfs
  - nfs/enfs: remove judgement about enfs_option in nfs_multipath_client_info_init()
  - nfs/enfs: remove nfs_multipath_client_info_free_work()
  - nfs/enfs: fix typos in shard_route.c
  - nfs/enfs: remove unused functions in shard_route.c
  - nfs/enfs: make some functions static in shard_route.c
  - nfs/enfs: introduce DEFINE_PARSE_FH_FUNC to define parse_fh()
  - nfs/enfs: fix memory leak when free view_table
  - nfs/enfs: use DEFINE_CLEAR_LIST_FUNC to define enfs_clear_shard_view()
  - nfs/enfs: introduce DEFINE_CLEAR_LIST_FUNC to define enfs_clear_fs_info()
  - nfs/enfs: fix memory leak in enfs_delete_fs_info()
  - nfs/enfs: fix double free of multipath_client_info
  - nfs/enfs: fix null-ptr-deref in shard_update_work()
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - drivers/iommu: Fix the initialization failure issue of the iommu module
  - LoongArch: KVM: Fix the extioi simulation error
  - netlink: specs: mptcp: fix port endianness
  - mptcp: disable active MPTCP in case of blackhole
  - mptcp: include inet_common in mib.h
  - mptcp: move mptcp_pm_gen.h's include
  - mptcp: remove unnecessary else statements
  - mptcp: prefer strscpy over strcpy
  - mptcp: add net.mptcp.available_schedulers
  - mptcp: sockopt: info: stop early if no buffer
  - mptcp: fallback to TCP after SYN+MPC drops
  - mptcp: export mptcp_subflow_early_fallback()
  - selftests: mptcp: connect: remove duplicated spaces in TAP output
  - selftests: mptcp: diag: remove trailing whitespace
  - selftests: mptcp: test last time mptcp_info
  - mptcp: add last time fields in mptcp_info
  - selftests: mptcp: reset the last TS before the first test
  - selftests: mptcp: netlink: drop disable=SC2086
  - selftests: mptcp: ip_mptcp option for more scripts
  - selftests: mptcp: use pm_nl endpoint ops
  - selftests: mptcp: export pm_nl endpoint ops
  - selftests: mptcp: join: update endpoint ops
  - selftests: mptcp: netlink: add change_address helper
  - selftests: mptcp: add {get,format}_endpoint(s) helpers
  - selftests: mptcp: netlink: add 'limits' helpers
  - selftests: mptcp: add tc check for check_tools
  - selftests: mptcp: connect: remote time in TAP output
  - selftests: mptcp: lib: add time per subtests in TAP output
  - migration: update status after RAS error
  - Revert "migration: update status after RAS error"
  - fs: Add additional checks for block devices during mount
  - xfrm: state: fix out-of-bounds read during lookup
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - net_sched: Flush gso_skb list too during ->change()
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Li Nan <linan122@huawei.com> - 6.6.0-105.0.0.97
changelog:
  - !17513  sched-ebpf-add-for-exec-init
  - !17487  arm64/mpam: Support partial-core boot for MPAM
  - !16844  LeapIOraid: add device and support fw log
  - sched/bpf: Fix kabi breakage for including sched bpf header file
  - sched/ebpf: Add kfunc to set the preferred NUMA node for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - !17512  CVE-2025-21868
  - !17498  sched: Support NUMA parallel scheduling for multiple processes
  - !17508  Huawei iBMA: Added support for Hi1712 Chip
  - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
  - net: use __GENKSYMS__ to revert the kabi change
  - net: allow small head cache usage with large MAX_SKB_FRAGS values
  - Huawei iBMA: Added support for Hi1712 Chip
  - !17501 net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix the division by zero issue
  - net: hibmcge: fix the np_link_fail error reporting issue
  - !17459 ROH: fix variable type inconsistency issue
  - sched: Support NUMA parallel scheduling for multiple processes
  - !17183  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17180  atm: Fix NULL pointer dereference
  - !16807 Support RME feature for CCA host
  - !17488  arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Support partial-core boot for MPAM
  - !17440  sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - VirtCCA: Compatible with virtcca macro definitions
  - CCA: Fix cca kabi conflict
  - VirtCCA: Modify openeuler_defconfig
  - Reapply "VirtCCA: cvm support UEFI boot"
  - VirtCCA: Adapt virtcca operations by cca_base.
  - VirtCCA: Adapt realm operations by cca_base.
  - VirtCCA: Add CCA base operations.
  - [v8-43-43]KVM: arm64: Allow activating realms
  - [v8-42-43]KVM: arm64: Expose KVM_ARM_VCPU_REC to user space
  - [v8-40-43]arm64: RME: Provide accurate register list
  - [v8-39-43]arm64: RME: Provide register list for unfinalized RME RECs
  - [v8-38-43]rm64: RME: Configure max SVE vector length for a Realm
  - [v8-37-43]arm64: RME: Propagate max SVE vector length from RMM
  - [v8-36-43]arm64: RME: Initialize PMCR.N with number counter supported by RMM
  - [v8-35-43]arm64: RME: Set breakpoint parameters through  SET_ONE_REG
  - [v8-34-43]arm64: RME: Propagate number of breakpoints and watchpoints to userspace
  - [v8-33-43]arm64: RME: Hide KVM_CAP_READONLY_MEM for realm guests
  - [v8-32-43]arm64: rme: Enable PMU support with a realm guest
  - [backport]KVM: arm64: PMU: Introduce helpers to set the guest's PMU
  - [backport]KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest
  - !17463  crypto: hisilicon/qm - clear the memory before enabling the device
  - [backport]KVM: arm64: PMU: Set PMCR_EL0.N for vCPU  based  on the  associated PMU
  - [v8-31-43]arm_pmu: Provide a mechanism for disabling the physical  IRQ
  - [v8-30-43]arm64: RME: Prevent Device mappings for Realms
  - [v8-29-43]arm64: RME: Always use 4k pages for realms
  - [v8-28-43]arm64: RME: Allow checking SVE on VM instance
  - [v8-27-43]arm64: RME: support RSI_HOST_CALL
  - [v8-26-43]arm64: RME: allow userspace to inject aborts
  - [v8-25-43]arm64: Don't expose stolen time for realm guests
  - [v8-24-43]KVM: arm64: WARN on injected undef exceptions
  - [v8-23-43]KVM: arm64: Handle Realm PSCI requests
  - [v8-22-43]KVM: arm64: Validate register access for a Realm VM
  - [v8-21-43]KVM: arm64: Handle realm VCPU load
  - [v8-20-43]arm64: RME: Runtime faulting of memory
  - [backport]KVM: arm64: Move pagetable definitions to common header
  - [backport]rme: populate guest memory region without guest_memfd
  - [v8-19-43]arm64: RME: Allow populating initial contents
  - [v8-18-43]KVM: arm64: Handle realm MMIO emulation
  - [v8-17-43]arm64: RME: Handle RMI_EXIT_RIPAS_CHANGE
  - [v8-16-43]arm64: RME: Handle realm enter/exit
  - [v8-15-43]arm64: RME: Allow VMM to set RIPAS
  - [backport]KVM: Add member to struct kvm_gfn_range to indicate private/shared
  - [v8-14-43]KVM: arm64: Support timers in realm RECs
  - [v8-13-43]arm64: RME: Support for the VGIC in realms
  - [backport]KVM: arm64: Force GICv3 trap activation when no irqchip  is configured on VHE
  - [v8-12-43]KVM: arm64: vgic: Provide helper for number of list registers
  - [v8-11-43]arm64: RME: Allocate/free RECs to match vCPUs
  - [backport]KVM: arm64: Add generic check for system-supported vCPU features
  - !17467  arm-smmu-v3: adjust ecmdq log level
  - arm-smmu-v3: adjust ecmdq log level
  - crypto: hisilicon/qm - clear the memory before enabling the device
  - [v8-10-43]arm64: RME: RTT tear down
  - [v8-09-43]KVM: arm64: Allow passing machine type in KVM creation
  - [v8-08-43]kvm: arm64: Don't expose debug capabilities for realm  guests
  - [v8-07-43]arm64: RME: ioctls to create and configure  realms
  - [v8-06-43]arm64: RME: Define the user ABI
  - [v8-05-43]arm64: RME: Check for RME support at KVM init
  - [v8-04-43]arm64: RME: Add wrappers for RMI calls
  - [v8-03-43]arm64: RME: Add SMC definitions for calling the RMM
  - [v8-02-43]arm64: RME: Handle Granule Protection Faults (GPFs)
  - [v8-01-43]kvm: arm64: Include kvm_emulate.h in kvm/arm_psci.h
  - Revert "kvm: add virtcca cvm host feature"
  - Revert "VirtCCA: cvm support UEFI boot"
  - Revert "pmu: enable pmu phys irq inject for cvm"
  - !16720 [OLK-6.6] Not print information of SMMU 0x10 event and add phytium PS24080 SoC platform judgement
  - !17458 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - ROH: fix variable type inconsistency issue
  - !17441 net: hibmcge: support for statistics of reset failures
  - !17435 arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - net: hibmcge: support for statistics of reset failures
  - sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - atm: Fix NULL pointer dereference
  - LeapIOraid: add device and support fw log
  - iommu: smmuv3: Not print information of SMMU 0x10 event


author: Li Nan <linan122@huawei.com> - 6.6.0-106.0.0.98
changelog:
  - !17565  Enhance soft hwpoison handling and injection
  - !17569  drm/vkms: Fix use after free and double free on init error
  - drm/vkms: Fix use after free and double free on init error
  - !17564  bpf: Reject %p% format string in bprintf-like helpers
  - !17510 PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17547  net_sched: drr: Fix double list add in class with netem as child qdisc
  - !17556  filemap: move prefaulting out of hot write path
  - mm/memory-failure: send SIGBUS in the event of thp split fail
  - mm/memory-failure: move hwpoison_filter() higher up
  - mm/memory-failure: improve memory failure action_result messages
  - mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON)
  - mm/memory-failure: try to send SIGBUS even if unmap failed
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17529 mm: optimize mremap() by PTE batching
  - !17481  HID: core: fix __hid_request when no report ID is used
  - bpf: Reject %p% format string in bprintf-like helpers
  - !17495 v2  mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - !17546  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17542  net: sch: Fix CVE-2025-37798
  - !17538  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17537  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17553 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - filemap: move prefaulting out of hot write path
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - RDMA/hns: Fix querying wrong SCC context for DIP algorithm
  - !17479 fix some bugs of enfs
  - !17530  sched/psi: change permissions of /proc/pressure/stat
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - mm/mremap: avoid expensive folio lookup on mremap folio pte batch
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_ets: make est_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - sched/psi: change permissions of /proc/pressure/stat
  - mm: optimize mremap() by PTE batching
  - !17526 v7  High Performance Container Resource View Isolation -- Stage 2
  - !17515 gpiolib: Get rid of never false gpio_is_valid() calls
  - mm: call pointers to ptes as ptep
  - !17519  CVE-2025-38473
  - !17524  CVE-2025-38375
  - !17517  CVE-2025-38251
  - !17523  CVE-2025-38211
  - samples/bpf: Add iterator program for meminfo
  - bpf-rvi: Add bpf_x86_direct_pages kfunc
  - bpf-rvi: Add bpf_mem_vmalloc_{used,total} kfunc
  - bpf-rvi: Add bpf_mem_commit_limit & bpf_mem_committed kfunc
  - bpf-rvi: Add bpf_mem_percpu kfunc
  - bpf-rvi: Add bpf_mem_failure kfunc
  - bpf-rvi: Add bpf_hugetlb_report_meminfo kfunc
  - bpf-rvi: Add bpf_mem_{total,free}cma kfunc
  - bpf-rvi: Add bpf_mem_{file_{hugepage,pmdmapped},kreclaimable} kfunc
  - samples/bpf: Add iterator program for stat
  - bpf-rvi: stat: Add stat iterator target
  - bpf-rvi: Add kstat_ & kcpustat_ kfuncs
  - bpf-rvi: Add cpu runqueue related kfuncs
  - bpf-rvi: Add stat-related misc kfuncs
  - bpf-rvi: Add bpf_seq_file_append() kfunc
  - samples/bpf: Add iterator program for swaps
  - bpf-rvi: Add bpf_page_counter_read() kfunc
  - bpf-rvi: Add bpf_si_memswinfo() kfunc
  - samples/bpf: Add iterator program for uptime
  - bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc
  - samples/bpf: Add iterator program for loadavg
  - bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs
  - bpf-rvi: pidns: Calculate loadavg for each pid namespace
  - samples/bpf: Add iterator program for partitions
  - bpf-rvi: block: Look up /dev in reaper's fs->root and filter partitions
  - bpf-rvi: block: Add partitions iterator target
  - samples/bpf: Add iterator program for diskstats
  - bpf-rvi: blk-cgroup: Add bpf_blkcg_get_dev_iostat() kfunc
  - bpf-rvi: block: Add diskstats iterator target
  - samples/bpf: Add iterator program for cpuinfo_arm64
  - bpf-rvi: arm64: Add bpf_arch_flags kunc for arm64
  - bpf-rvi: arm64: Add cpuinfo_arm64 iterator target
  - bpf-rvi: arm64: Add bpf_arm64_cpu_have_feature() kfunc
  - bpf-rvi: cpuacct: Add task_cpuacct()
  - bpf-rvi: cpuacct: Add bpf_cpuacct_kcpustat_cpu_fetch kfunc
  - bpf-rvi: proc: add bpf_get_{idle,iowait}_time kfunc
  - bpf-rvi: cgroup: Add cgroup_rstat_flush_atomic() kfunc
  - bpf-rvi: Add bpf_mem_cgroup_from_task() kfunc
  - bpf-rvi: cpuset: Fix missing of return for !tsk in task_effective_cpumask()
  - virtio-net: ensure the received length does not exceed allocated size
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
  - nfs/enfs: make some functions static in enfs_multipath_client.c
  - nfs/enfs: remove enfs_init() and enfs_fini()
  - nfs/enfs: format get_ip_to_str() in shard_route.c
  - nfs/enfs: unlock uniformly at the end of function in shard_route.c
  - nfs/enfs: support debugging ip and dns list
  - nfs/enfs: fix error when showing dns list
  - nfs/enfs: fix alignment between struct rpc_clnt and rpc_clnt_reserve
  - nfs/enfs: set CONFIG_SUNRPC_ENFS=y by default
  - nfs/enfs: fix memory leak of shard_view_ctrl when removing nfs module
  - atm: clip: prevent NULL deref in clip_push()
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - Revert "PM / devfreq: Add HiSilicon uncore frequency scaling driver"
  - mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID


author: Li Nan <linan122@huawei.com> - 6.6.0-107.0.0.99
changelog:
  - !17744  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17737 soc cache: Fix incorrect error path of ioctl
  - !17660  cgroup/cpuset: Support dynamic affinity feature
  - !17293 [OLK-6.6] backport important bugfix for Broadcom BCM57414 nic driver from upstream linux-6.6.y
  - !17747  fix some CVE
  - !17751  iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17730  arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - !16545  KVM: arm64: fix memory leak in TLBI
  - iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17716  hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17669  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17674  ftrace: Also allocate and copy hash for reading of filter files
  - !17725  perf/core: Don't leak AUX buffer refcount on allocation failure
  - usb: xhci: Fix invalid pointer dereference in Etron workaround
  - thunderbolt: Do not double dequeue a configuration request
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio
  - Bluetooth: btnxpuart: Fix kernel panic during FW release
  - !17592  ice: add NULL check in eswitch lag check
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17720  crypto: lzo - Fix compression buffer overrun
  - !17719  spi: spi-imx: Add check for spi_imx_setupxfer()
  - !17687  ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - soc cache: Fix incorrect error path of ioctl
  - soc cache: Fix incorrect size validation
  - soc cache: Enforce maintain type check
  - !17683 v2  Fix for bpf samples and selftests
  - !17724  mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17438 [OLK-6.6]:update patches for sw64 architecture
  - !17652  wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - !17728  CVE-2025-38006
  - !17677 v2  Fix static check warning reported by coccinelle
  - !17633  dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17455  raid10: cleanup memleak at raid10_make_request
  - !17453  md/raid1: Fix stack memory use after return in raid1_reshape
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - net: mctp: Don't access ifa_index when missing
  - mctp: no longer rely on net->dev_index_head[]
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17606  drm/sched: Increment job count before swapping tail spsc queue
  - !17671  bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - crypto: lzo - Fix compression buffer overrun
  - spi: spi-imx: Add check for spi_imx_setupxfer()
  - hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17632  perf/core: Exit early on perf_mmap() fail
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - samples/bpf: Move bpf_rvi_* progs to bpf_rvi directory
  - selftests/bpf: fix perf_event link info name_len assertion
  - Revert "selftests/bpf: Use bpf_link__destroy in fill_link_info tests"
  - Revert "selftests/bpf: Add cookies check for perf_event fill_link_info test"
  - Revert "selftests/bpf: fix perf_event link info name_len assertion"
  - !17650 net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17634  HID: pidff: Fix null pointer dereference in pidff_find_fields
  - ACPI / MPAM: Fix wrong IS_ERR() check in _parse_table()
  - hiroce3: Use IS_ERR() to check the return value of kthread_run()
  - ftrace: Also allocate and copy hash for reading of filter files
  - bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - !17642  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17641  net: clear the dst when changing skb protocol
  - !17653  wifi: iwlwifi: fix debug actions order
  - !17651  wifi: mt76: disable napi on driver removal
  - !17647  CVE-2025-38052
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - cgroup/cpuset: Support dynamic affinity feature
  - !17646  sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - !17648  CVE-2025-37920
  - !17643  net: Fix TOCTOU issue in sk_is_readable()
  - !17644  bridge: mcast: Fix use-after-free during router port configuration
  - !17645  CVE-2025-38465
  - !17600  two bugfix for arm64 support HVO
  - !17649  Fix CVE-2025-21839
  - !17628  Fix CVE-2025-37780
  - !17629  Fix CVE-2025-37767
  - !17637  netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - !17638  tcp: Correct signedness in skb remaining space calculation
  - !17639  tipc: Fix use-after-free in tipc_conn_close().
  - !17640  seg6: Fix validation of nexthop addresses
  - wifi: iwlwifi: fix debug actions order
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - wifi: mt76: disable napi on driver removal
  - net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17608  mm/util: make memdup_user_nul() similar to memdup_user()
  - net: hns3: change the function return type from int to bool
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
  - xsk: Fix kabi broken
  - xsk: Fix race condition in AF_XDP generic RX path
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - bridge: mcast: Fix use-after-free during router port configuration
  - net: Fix TOCTOU issue in sk_is_readable()
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: clear the dst when changing skb protocol
  - seg6: Fix validation of nexthop addresses
  - tipc: Fix use-after-free in tipc_conn_close().
  - tcp: Correct signedness in skb remaining space calculation
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - HID: pidff: Fix null pointer dereference in pidff_find_fields
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17597 Delete PHYTIUM_CPU_PART_FTC862 macro
  - perf/core: Exit early on perf_mmap() fail
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
  - isofs: Prevent the use of too small fid
  - !17307  scsi: megaraid_sas: Fix invalid node index
  - !17309  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - mm/util: make memdup_user_nul() similar to memdup_user()
  - drm/sched: Increment job count before swapping tail spsc queue
  - !17575  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - cputype: phytium: Delete PHYTIUM_CPU_PART_FTC862 macro
  - ice: add NULL check in eswitch lag check
  - !16528 [OLK-6.6] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - !17570  tracing: Add down_write(trace_event_sem) when adding trace event
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix missing kvm_unregister_perf_callbacks
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: fix missing characters for sw64_rrk
  - sw64: selftests/net: add sw64 support for io_uring_zerocopy_tx
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: fix incorrect macro definitions for sw64 in bpf_tracing.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: kvm: fix undefined error with ftrace disabled
  - raid10: cleanup memleak at raid10_make_request
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - scsi: megaraid_sas: Fix invalid node index
  - bnxt: properly flush XDP redirect lists
  - dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
  - dma: Fix kabi breakage due to "dma: pswiotlb: Move platform-identification to cpu errata"
  - dma: pswiotlb: Move platform-identification to cpu errata
  - dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
  - dma: phyitum: enable CONFIG_PSWIOTLB
  - dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
  - dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - KVM: arm64: fix memory leak in TLBI


author: Li Nan <linan122@huawei.com> - 6.6.0-108.0.0.100
changelog:
  - !17835 v2  perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - !17856  sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17635 mm: madvise: use per_vma lock for MADV_FREE
  - sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17841  fs/resctrl: Fix max_threshold_occupancy write operation
  - !17844  CVE-2025-37752
  - !17845  xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - !17733  proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - !17834  cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - net_sched: sch_sfq: move the limit validation
  - net_sched: sch_sfq: use a temporary work area for validating configuration
  - !17840  arm64/mpam: Fix num_rmids when enable CDP mode
  - fs/resctrl: Fix max_threshold_occupancy write operation
  - arm64/mpam: Fix num_rmids when enable CDP mode
  - !17838  mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - !17587 CVE-2025-38406: wifi: ath6kl: remove WARN on bad firmware input
  - !17585 CVE-2025-38408： genirq/irq_sim: Initialize work context pointers properly
  - !17586 CVE-2025-38409: drm/msm: Fix another leak in the submit error path
  - !17584 CVE-2025-38410: drm/msm: Fix a fence leak in submit error path
  - !17582 NFC: nci: uart: Set tty-&gt;disc_data only in success path
  - !17590 wifi: carl9170: do not ping device which has failed to load firmware
  - !17593 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - !17594 CVE-2025-38425: i2c: tegra: check msg length in SMBUS block read
  - !17595 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - !17596 usb: gadget: u_serial: Fix race condition in TTY wakeup
  - !17583 CVE-2025-38467：drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - !17789  bpf, sockmap: Fix CVE-2025-38154
  - !17712  wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - !17790  page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - !17788  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - !17786  net: xfrm: Fix CVE-2025-38097
  - !17784  bpf, sockmap: Fix panic when calling skb_linearize
  - !17785  bpf: fix ktls panic with sockmap
  - !17783  net/sched: fix use-after-free in taprio_dev_notifier
  - !17781  mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - !17782  net/mlx5e: Disable MACsec offload for uplink representor profile
  - !17780  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - !17779  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - !17778  phy: tegra: xusb: remove a stray unlock
  - !17777  net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - !17776  dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - !17775  espintcp: fix skb leaks
  - !17774  can: bcm: add locking for bcm_op runtime updates
  - !17711  net: lan743x: Fix memleak issue when GSO enabled
  - !17708  net: phy: Fix CVE-2025-37945
  - !17707  bpf: Scrub packet on bpf_redirect_peer
  - !17703  9p/net: fix improper handling of bogus negative read/write replies
  - !17699  netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - !17685  gtp: Fix CVE-2025-21678
  - !17816  vmci: Prevent the dispatching of uninitialized payloads
  - !17824  tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17609 cpufreq: Exit governor when failed to start old governor
  - !17823  arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17821  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !17818  fix some CVEs
  - !17798  benet: fix BUG when creating VFs
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
  - mm/vmscan: don't try to reclaim hwpoison folio
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - memblock: Accept allocated memory before use in memblock_double_array()
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails
  - Input: synaptics - use guard notation when pausing serio port
  - vmci: Prevent the dispatching of uninitialized payloads
  - !17804  pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17800  gic: increase the arch_timer
  - !17794  perf/core: Prevent VMA split of buffer mappings
  - !17574 ROH: Add crc_err_cnt and retry_cnt mib statistics
  - pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17337 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - !17797 v3  HiSock Redirect Framework
  - gic: increase the arch_timer priority to avoid hardlockup
  - benet: fix BUG when creating VFs
  - !17768  net/oenetcls: introduce oenetcls for network optimization
  - ROH: Add crc_err_cnt and retry_cnt mib statistics
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_*_change_dev kfunc
  - bpf: Add bpf_xdp_set_ingress_dst kfunc
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_skops_get_ingress_dst kfunc
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - !17470  fix CVE-2025-38351
  - !17766 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - !17772  two CVE fix
  - perf/core: Prevent VMA split of buffer mappings
  - !17659 v2  sched: More flexible use of CPU quota when CPU is idle
  - !17748  fix bug in hdbss
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - bpf, sockmap: Avoid using sk_socket after free when sending
  - bpf, sockmap: fix duplicated data transmission
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - net: xfrm: Fix kabi breakage of struct xfrm_state
  - espintcp: remove encap socket caching to avoid reference leak
  - !17294 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !17714  can: bcm: add missing rcu read protection for procfs content
  - !17713  net: phy: leds: fix memory leak
  - !17717  ipvs: fix uninit-value for saddr in do_output_route4
  - !17706  RDMA/cma: Fix CVE-2025-37772
  - !17709  bnxt_en: Fix CVE-2025-37911
  - !17705  igc: fix PTM cycle trigger logic
  - !17718  ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - !17701  net: openvswitch: fix nested key length validation in the set() action
  - !17702  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - !17704  page_pool: avoid infinite loop to schedule delayed worker
  - !17700  wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - !17697  netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - !17715  netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - !17696  net: decrease cached dst counters in dst_release
  - !17695  netfilter: nf_tables: don't unregister hook when table is dormant
  - !17694  RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - !17693  drm/connector: Fix CVE-2025-22089
  - !17692  vmxnet3: unregister xdp rxq info in the reset path
  - !17690  Bluetooth: Fix error code in chan_alloc_skb_cb()
  - !17689  tcp: Fix CVE-2025-21864
  - !17741  Fix trace may OOB when trace_get_user failed
  - !17742  i2c: qup: jump out of the loop in case of timeout
  - !17678  dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - !17679  media: cx231xx: set device_caps for 417
  - bpf: fix ktls panic with sockmap
  - bpf, sockmap: Fix panic when calling skb_linearize
  - net/sched: fix use-after-free in taprio_dev_notifier
  - net/mlx5e: Disable MACsec offload for uplink representor profile
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - phy: tegra: xusb: remove a stray unlock
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - espintcp: fix skb leaks
  - can: bcm: add locking for bcm_op runtime updates
  - net: libwx: fix the using of Rx buffer DMA
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
  - !9218 [OLK-6.6] i2c/zhaoxin: I2C controller driver enhancement and optimization
  - !17755  arm64: perf: Add support for HIP12 hw metric
  - !17763  mm/smaps: fix race between smaps_hugetlb_range and migration
  - net/oenetcls: introduce oenetcls for network optimization
  - RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - fs/proc/task_mmu: convert smaps_hugetlb_range() to work on folios
  - i2c: zhaoxin: Add support for Zhaoxin I2C controller
  - arm64: perf: Add support for HIP12 hw metric
  - KVM: arm64: fix memory leak in HDBSS
  - KVM: arm64: do not support hdbss in nvhe
  - i2c: qup: jump out of the loop in case of timeout
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - ipvs: fix uninit-value for saddr in do_output_route4
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - can: bcm: add missing rcu read protection for procfs content
  - net: phy: leds: fix memory leak
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - net: lan743x: Fix memleak issue when GSO enabled
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - bnxt_en: Fix coredump logic to free allocated buffer
  - genirq/irq_sim: Initialize work context pointers properly
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
  - bpf: Scrub packet on bpf_redirect_peer
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
  - igc: fix PTM cycle trigger logic
  - page_pool: avoid infinite loop to schedule delayed worker
  - 9p/net: fix improper handling of bogus negative read/write replies
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - net: openvswitch: fix nested key length validation in the set() action
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - net: decrease cached dst counters in dst_release
  - netfilter: nf_tables: don't unregister hook when table is dormant
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - drm/connector: fix kabi broken in struct ib_device
  - RDMA/core: Don't expose hw_counters outside of init net namespace
  - vmxnet3: unregister xdp rxq info in the reset path
  - Bluetooth: Fix error code in chan_alloc_skb_cb()
  - net: use __GENKSYMS__ to revert the kabi change
  - tcp: drop secpath at the same time as we currently drop dst
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
  - gtp: Destroy device along with udp socket's netns dismantle.
  - media: cx231xx: set device_caps for 417
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - sched: More flexible use of CPU quota when CPU is idle
  - mm: fix the race between collapse and PT_RECLAIM under per-vma lock
  - mm: madvise: use per_vma lock for MADV_FREE
  - mm: use per_vma lock for MADV_DONTNEED
  - mm: madvise: use walk_page_range_vma() instead of walk_page_range()
  - cpufreq: Exit governor when failed to start old governor
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq()
  - cpufreq: Init policy->rwsem before it may be possibly used
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost
  - cpufreq: Remove duplicate check in __cpufreq_offline()
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class()
  - cpufreq: CPPC: Remove cpu_data_list
  - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in .get() callback
  - i2c: tegra: check msg length in SMBUS block read
  - drm/msm: Fix another leak in the submit error path
  - wifi: ath6kl: remove WARN on bad firmware input
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - KVM: x86: Bury guest_cpuid_is_amd_or_hygon() in cpuid.c
  - KVM: SVM: Emulate SYSENTER RIP/RSP behavior for all Intel compat vCPUs
  - KVM: x86: Inhibit code #DBs in MOV-SS shadow for all Intel compat vCPUs
  - KVM: x86: Apply Intel's TSC_AUX reserved-bit behavior to Intel compat vCPUs
  - KVM: x86/pmu: Squash period for checkpointed events based on host HLE/RTM
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG
  - ALSA: hda/conexant: Use the new codec SSID matching
  - ALSA: hda: Use own quirk lookup helper
  - scsi: lpfc: Use memcpy() for BIOS version
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - usb: gadget: u_serial: Fix race condition in TTY wakeup
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - wifi: carl9170: do not ping device which has failed to load firmware
  - drm/msm: Fix a fence leak in submit error path
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - NFC: nci: uart: Set tty->disc_data only in success path


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-26.0.0.30
changelog:
  - !7198 v2  mm: prepare more high-order pages on pcplist
  - mm: prepare more high-order pages to be stored on the per-cpu lists
  - mm: page_alloc: use the correct THP order for THP PCP
  - !7196 v3  Backport folio feature and bugfix
  - mm: madvise: avoid split during MADV_PAGEOUT and MADV_COLD
  - mm: vmscan: avoid split during shrink_folio_list()
  - mm: swap: allow storage of all mTHP orders
  - mm: swap: update get_swap_pages() to take folio order
  - mm: swap: simplify struct percpu_cluster
  - mm: swap: free_swap_and_cache_nr() as batched free_swap_and_cache()
  - mm: swap: remove CLUSTER_FLAG_HUGE from swap_cluster_info:flags
  - mm/madvise: don't forget to leave lazy MMU mode in madvise_cold_or_pageout_pte_range()
  - mm/madvise: add cond_resched() in madvise_cold_or_pageout_pte_range()
  - mm: support multi-size THP numa balancing
  - mm: factor out the numa mapping rebuilding into a new helper
  - mm: alloc_anon_folio: avoid doing vma_thp_gfp_mask in fallback cases
  - huge_memory.c: document huge page splitting rules more thoroughly
  - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
  - mm/migrate: split source folio if it is on deferred split list
  - mm: hold PTL from the first PTE while reclaiming a large folio
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0
  - mm/filemap: don't decrease mmap_miss when folio has workingset flag
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - arm64: mm: swap: support THP_SWAP on hardware with MTE
  - mm: remove PageAnonExclusive assertions in unuse_pte()
  - mm: remove struct page from get_shadow_from_swap_cache
  - selftests: mm: fix unused and uninitialized variable warning
  - XArray: set the marks correctly when splitting an entry
  - mm/huge_memory: check new folio order when split a folio
  - mm: huge_memory: enable debugfs to split huge pages to any order
  - mm: thp: split huge page to any lower order pages
  - mm: page_owner: add support for splitting to any order in split page_owner
  - mm: memcg: make memcg huge page split support any order split
  - mm/page_owner: use order instead of nr in split_page_owner()
  - mm/memcg: use order instead of nr in split_page_memcg()
  - mm: support order-1 folios in the page cache
  - mm/huge_memory: only split PMD mapping when necessary in unmap_folio()
  - selftests/mm: split_huge_page_test: conform test to TAP format output
  - mm: huge_memory: use more folio api in __split_huge_page_tail()
  - mm/vmalloc: fix return value of vb_alloc if size is 0
  - mm: use memalloc_nofs_save() in page_cache_ra_order()
  - mm: madvise: pageout: ignore references rather than clearing young
  - mm: ratelimit stat flush from workingset shrinker
  - mm, oom:dump_tasks add rss detailed information printing
  - arm64/mm: improve comment in contpte_ptep_get_lockless()
  - arm64/mm: export contpte symbols only to GPL users
  - mm: page_alloc: enforce minimum zone size to do high atomic reserves
  - mm: page_alloc: correct high atomic reserve calculations
  - mm: fix draining remote pageset
  - !7190  entry: inline syscall enter/exit functions
  - entry: Move syscall_enter_from_user_mode() to header file
  - entry: Move enter_from_user_mode() to header file
  - entry: Move exit to usermode functions to header file
  - !7130 v2  openeuler_defconfig: update oedefconfig for the minimum set
  - openeuler_defconfig: update oedefconfig for the minimum set
  - !7141 spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: Add verification for the max_frequency provided by the firmware
  - !7136 Fix failed in acpi_gpiochip_find() by adding parent node match
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - !6778 v2 Fix two soc bugs of hip09
  - irqchip: gicv3: Add workaround for hip09 erratum 162200806
  - irqchip: gicv3: Add workaround for hip09 erratum 162200803
  - !7165 v2  tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - !7184 v3  md: do not delete safemode_timer in mddev_suspend
  - md: do not delete safemode_timer in mddev_suspend
  - !7131 net: hns3: Fix ROH mac address initialization.
  - net: hns3: Fix ROH mac address initialization.
  - !7126 net: hns3: some bugfixes for hns3 driver
  - net: hns3: fix kernel crash when devlink reload during initialization
  - net: hns3: direct return when receive a unknown mailbox message
  - net: hns3: release PTP resources if pf initialization failed
  - net: hns3: change type of numa_node_mask as nodemask_t
  - net: hns3: using cpumask_copy when set value to cpumask_t
  - net: hns3: set irq affinity directly
  - net: hns3: use appropriate barrier function after setting a bit value
  - net: hns3: don't need to check an unsigned number is less than 0
  - net: hns3: add 
  - net: hns3: using user configure after hardware reset
  - net: hns3: add cond_resched() to hns3 ring buffer init process
  - net: hns3: fix kernel crash problem in concurrent scenario
  - net: hns3: fix port vlan filter not disabled issue
  - net: hns3: revert "net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode"
  - !7159 【OLK 6.6】 backport some mailist patches for perf
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !7068  kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - !7153  Backports for OLK-6.6
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets
  - netfilter: bridge: confirm multicast packets before passing them up the stack
  - !7069  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - !7075 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix Use-After-Free of rsv_qp
  - RDMA/hns: Fix a missing check of atomic wr length
  - !3184 [OLK-6.6] add support for Zhaoxin ZXPAUSE instruction
  - x86/delay: add support for Zhaoxin ZXPAUSE instruction
  - !7078 v2  Backport four conflict stable patch
  - mm: turn folio_test_hugetlb into a PageType
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - fork: defer linking file vma until vma is fully initialized
  - mm, treewide: introduce NR_PAGE_ORDERS
  - !7067 crypto: hisilicon fix some issues
  - uacce: fix for cdev memory leak
  - crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable
  - crypto: hisilicon/zip - optimize the address offset of the reg query function
  - !4084 riscv64: initial LIVEPATCH_WO_FTRACE support
  - riscv64: add initial livepatch support
  - livepatch: add arch hook before doing klp_resolve_symbols
  - !6868  irqchip/loongson-pch-pic: Update interrupt registration policy
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - !6004 [OLK-6.6] fix bug：ethtool -S and ethtool -x/X for mucse rnpm drvier
  - mucse: ethtool -S and ethtool -x/X for mucse rnpm drvier

   at the end when print msg


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-27.0.0.31
changelog:
  - !7527  ext4 iomap performance optimize
  - ext4: fallback to generic_perform_write once iov_iter_count <= PAGE_SIZE
  - iomap: export __iomap_write_{begin|end}
  - !7530  mm: more thp control for large folio
  - mm: correct the docs for thp_fault_alloc and thp_fault_fallback
  - mm: add docs for per-order mTHP counters and transhuge_page ABI
  - mm: add per-order mTHP anon_swpout and anon_swpout_fallback counters
  - mm: add per-order mTHP anon_fault_alloc and anon_fault_fallback counters
  - mm: add control to allow specified high-order pages stored on PCP list
  - mm: huge_memory: add thp mapping align control
  - mm: huge_memory: add folio_get_unmapped_area()
  - mm: filemap: make mTHP configurable for exec mapping
  - mm/filemap: Allow arch to request folio size for exec memory
  - mm/memcontrol: remove __mod_lruvec_page_state()
  - mm/khugepaged: use a folio more in collapse_file()
  - mm: remove inc/dec lruvec page state functions
  - !7521 v2  Avoiding false sharing in field access of tk_core
  - openeuler_defconfig: Enable CONFIG_ARCH_LLC_128_LINE_SIZE for Hisilicon platforms
  - timekeeping: Avoiding false sharing in field access of tk_core
  - !7182 v3  mm: mglru: reuse some legacy trace
  - mm: multi-gen LRU: reuse some legacy trace events
  - mm, vmscan: remove ISOLATE_UNMAPPED
  - trace-vmscan-postprocess: sync with tracepoints updates
  - !7219 Hygon model 6h L3 PMU event duplicate creating issue fix
  - perf/x86/uncore: Create L3 event strictly to the CPU vendor
  - !7474  sched/fair: set burst to zero when cfs bandwidth is cancelled
  - sched/fair: set burst to zero when set max to cpu.max
  - sched/fair: limit burst to zero when cfs bandwidth is toggled off
  - !7475  Makefile.oever: add OPENEULER_RELEASE for version.h
  - Makefile.oever: add OPENEULER_RELEASE for version.h
  - !6241 add pmu support for loongarch kvm
  - LoongArch: KVM: Add PMU support
  - !5654 [OLK-6.6] USB: UAS: return ENODEV when submit urbs fail with device not attached
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - !5218 [OLK-6.6] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - crypto: ccp: Move the fixup code for Hygon psp to Hygon specific files
  - crypto: ccp: Bind specific sp_dev_vdata for Hygon secure processor
  - crypto: ccp: Introduce hygon specific interface to support driver
  - !6311 v2  ima: Avoid blocking in RCU read-side critical section
  - ima: Avoid blocking in RCU read-side critical section
  - !6837  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !5644 [OLK-6.6] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !7454  add new kvm_type for Confidential VMs
  - kvm: add macro CONFIG_CVM_HOST to defconfig
  - kvm: add new kvm_type for cvm
  - !7405 v2  mm: prepare to support weighted interleaving mempolicy
  - mm: prepare to support weighted interleaving mempolicy
  - !7370 v2  sched: smart_grid: silence complier error
  - sched: smart_grid: silence complier error
  - !7227  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !5291 [OLK-6.6] iommu/dma: Fix not fully traversing iova reservations issue
  - iommu/dma: Fix not fully traversing iova reservations issue
  - !6774 [OLK-6.6] merge upstream  4 wangxun related patches to fix i2c bug
  - Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
  - Revert "net: txgbe: fix i2c dev name cannot match clkdev"
  - net: wangxun: add ethtool_ops for channel number
  - clkdev: Update clkdev id usage to allow for longer names
  - !7206 v2  sched: programmable: Allow set tag for pid 1.
  - sched: programmable: Allow set tag for pid 1.


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-27.0.0.32
changelog:
  - Update the riscv-kernel patch for sg2042, rebase 6.6.0-27.0.0 and add features:
    - SPI Flash driver
    - kexec file raw image
    - HIGHMEM
  - This patch only applies to the RISC-V architecture, the related commit list:
  -
  - sg2042: Update sg2042 openeuler_defconfig
  - th1520: riscv: config: Enable th1520 support
  - riscv: thead: Use the wback_inv instead of wback_only
  - riscv: errata: thead: use pa based instructions for CMO
  - riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - Revert "riscv: use VA+PA variant of CMO macros for DMA page preparation"
  - Revert "riscv: use VA+PA variant of CMO macros for DMA synchorization"
  - Revert "riscv: errata: cmo: add CMO macro variant with both VA and PA"
  - Revert "riscv: errata: Replace thead cache clean with flush"
  - Revert "riscv: errata: thead: use riscv_nonstd_cache_ops for CMO"
  - Revert "riscv: errata: thead: use pa based instructions for CMO"
  - riscv: mm: fix NOCACHE_THEAD does not set bit[61] correctly
  - riscv: mm: update T-Head memory type definitions
  - Revert "sg2042: riscv: changing T-Head PBMT attributes"
  - riscv: remove compression for riscv Image
  - th1520: cpufreq: correct typo in config name
  - th1520: riscv: dts: thead: Add Milk-V Meles board
  - th1520: cpufreq: light-mpw-cpufreq: fix -Wunused-variable in panic_cpufreq_notifier_call
  - th1520: cpufreq: light-mpw-cpufreq: fix cpu_pll1 already disabled warning
  - riscv: Add th1520-lichee-cluster-4a dts support (8G/16G)
  - riscv: dts: th1520-beaglev-ahead: add alias for emmc & sd
  - riscv: dts: th1520-lichee-pi-4a: add alias for emmc & sd
  - riscv: dts: lpi4a 16g support
  - th1520: perf vendor events riscv: add T-HEAD C9xx JSON file
  - th1520: riscv: dts: thead: Add PMU event node
  - riscv: pinctrl: th1520: fix build
  - riscv: dts: th1520: lpi4a: add rpmsg node
  - riscv: dts: th1520: add mbox client node
  - riscv: rpmsg: mailbox-client: sync thead sdk 1.4.2
  - riscv: panic: add thead sdk quirks
  - riscv: dts: add watchdog node
  - th1520: riscv: dts: Add th1520 reset device tree
  - th1520: reset: Add th1520 reset driver support
  - th1520: dt-bindings: reset: Document th1520 reset control
  - riscv: light_wdt: update sdk 1.4.2
  - th1520_light_event: update sdk 1.4.2
  - th1520_aon: update sdk 1.4.2
  - th1520: fix compile th1520-beaglev-ahead error
  - th1520: add TH1520 cpu frequency driver
  - th1520: riscv: errata: thead: use pa based instructions for CMO
  - th1520: riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - riscv: dts: thead: Add TH1520 CPU reset node
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A USB
  - th1520: riscv: dts: thead: Add Lichee Pi 4A IO expansions
  - th1520: riscv: dts: thead: Add TH1520 USB nodes
  - th1520: riscv: dts: thead: Add TH1520 I2C nodes
  - th1520: usb: dwc3: add T-HEAD TH1520 usb driver
  - th1520: dt-bindings: usb: Add T-HEAD TH1520 USB controller
  - th1520: riscv: dts: thead: Add BeagleV Ahead SDIO0 pins
  - th1520: riscv: dts: thead: Add Lichee Pi 4A SDIO0 pins
  - th1520: riscv: dts: thead: Add TH1520 ethernet nodes
  - th1520: net: stmmac: add glue layer for T-HEAD TH1520 SoC
  - th1520: dt-bindings: net: add T-HEAD dwmac support
  - th1520: dt-bindings: net: snps,dwmac: allow dwmac-3.70a to set pbl properties
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A PWM fan
  - th1520: riscv: dts: thead: Add TH1520 PVT node
  - th1520: riscv: dts: thead: Add TH1520 PWM node
  - th1520: pwm: add T-HEAD PWM driver
  - th1520: dt-bindings: pwm: Add T-HEAD PWM controller
  - th1520: gpio: dwapb: Use generic request, free and set_config
  - riscv: dts: thead: Enable LicheePi 4A eMMC and microSD
  - riscv: dts: thead: Enable BeagleV Ahead eMMC and microSD
  - riscv: dts: thead: Add TH1520 mmc controllers and sdhci clock
  - riscv: defconfig: Enable mmc and dma drivers for T-Head TH1520
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520
  - mmc: sdhci: add __sdhci_execute_tuning() to header
  - dt-bindings: mmc: sdhci-of-dwcmhsc: Add T-Head TH1520 support
  - th1520: riscv: dtb: thead: Add BeagleV Ahead LEDs
  - th1520: riscv: dts: thead: Add TH1520 pinctrl settings for UART0
  - th1520: riscv: dts: thead: Adjust TH1520 GPIO labels
  - th1520: riscv: dts: thead: Add TH1520 GPIO ranges
  - th1520: riscv: dts: thead: Add TH1520 pin control nodes
  - th1520: pinctrl: Add driver for the T-Head TH1520 SoC
  - th1520: dt-bindings: pinctrl: Add thead,th1520-pinctrl bindings
  - th1520: dt-bindings: gpio: dwapb: allow gpio-ranges
  - sg2042: riscv: config: Enable sg2042 support
  - sg2042: drivers: rtc: disable BMC RTC device
  - sg2042: dts: add i2c-rtc ds1307 device node for single chip
  - sg2042: riscv:dts:modify dw gpio clock name
  - sg2042: drivers:pci:remove the err log of parsing pci
  - sg2042: driver: ipmi: support KVM and IPMI SI for BMC
  - sg2042: perf cpumap: Make counter as unsigned ints
  - sg2042: driver: radeon: deinit device during kexec
  - sg2042: kernel: schedule: Fix set_task_cpu() bug
  - sg2042: mm: Modify __find_max_addr for memory hole
  - sg2042: riscv: kernel: Optimize apply_relocate_add()
  - sg2042: riscv: mm: Clear compilation warning about last_cpupid
  - sg2042: kernel: tick: filter unnecessary printing
  - sg2042: kernel: Adjust the log level of the tick_switch_to_oneshot function
  - sg2042: driver: clk: Modify the timer clock is turned off defaultly
  - sg2042: drivers: clock: Add sophgo sg2042 multi-chip clock synchronous support
  - Revert "riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings"
  - Revert "riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC"
  - Revert "riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping"
  - sg2042: riscv: mm: Add high memory on riscv64 using sv39
  - sg2042: riscv/kexec: handle R_RISCV_ADD16 and R_RISCV_SUB16 relocation types
  - sg2042: riscv: kexec: Add image loader for kexec file
  - sg2042: drm/amd/display: Support DRM_AMD_DC_FP on RISC-V
  - sg2042: riscv: Factor out riscv-march-y to a separate Makefile
  - sg2042: riscv: Add support for kernel-mode FPU
  - sg2042: mango pci hack:broadcast when no MSI source known
  - sg2042: nvidia hda: force msi
  - sg2042: radeon hack: force 64-bit msi to fit top intc
  - sg2042: amdgpu: disable rebar
  - sg2042: ttm: disallow cached mapping
  - sg2042: driver: soc: Add sophgo sg2042 soc support
  - sg2042: drivers: pcie: Create msi-x whitelist,turn on msi-x for top intr
  - sg2042: driver: pcie: Add sophgo sg2042 soc support
  - sg2042: driver: net: Add sophgo sg2042 soc support
  - sg2042: driver: mtd: Add sophgo sg2042 soc support
  - sg2042: driver: mmc: Add sophgo sg2042 soc support
  - sg2042: driver: reset: Add sophgo sg2042 soc support
  - sg2042: driver: pinctrl: Add sophgo sg2042 soc support
  - sg2042: driver: clk: Add sophgo sg2042 soc support
  - sg2042: riscv: spinlock: Fix deadlock issue
  - sg2042: riscv: add smp_cond_load_acquire()
  - sg2042: riscv: add ioremap_wc for gpu
  - sg2042: riscv: changing T-Head PBMT attributes
  - sg2042: riscv: errata: thead: Make cache clean to flush
  - sg2042: riscv: use VA+PA variant of CMO macros for DMA page preparation
  - sg2042: riscv: use VA+PA variant of CMO macros for DMA synchorization
  - sg2042: riscv: errata: cmo: add CMO macro variant with both VA and PA
  - sg2042: riscv: errata: Replace thead cache clean with flush
  - sg2042: riscv: Kconfig: Set vector as default no
  - sg2042: riscv: Add sophgo sg2042 soc support


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-28.0.0.33
changelog:
  - !8010  mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str
  - mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str
  - !7997  mm: some misc bugfix
  - mm: vmalloc: bail out early in find_vmap_area() if vmap is not init
  - Revert "mm: support multi-size THP numa balancing"
  - mm: simplify thp_vma_allowable_order
  - mm: huge_memory: add the missing folio_test_pmd_mappable() for THP split statistics
  - mm/huge_memory: skip invalid debugfs new_order input for folio split
  - mm: prohibit the last subpage from reusing the entire large folio
  - mm/memory.c: do_numa_page(): remove a redundant page table read
  - mm: memory: fix shift-out-of-bounds in fault_around_bytes_set
  - !7966 [OLK-6.6] openeuler_defconfig: Modify openeuler-defconfig
  - openeuler_defconfig: Modify openeuler-defconfig
  - !7909  Scheduler load balance fixes
  - config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - sched/numa: Fix numa imbalance in load_balance()
  - !7917  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - Revert "sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED"
  - !7902 v3  Revert "ACPI: Rename ACPI_HOTPLUG_CPU to include 'present'"
  - Revert "ACPI: Rename ACPI_HOTPLUG_CPU to include 'present'"
  - !7888 v3  mm: add thp anon pmd size mapping align control
  - mm: add thp anon pmd size mapping align control
  - !7730 v2  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - !7808  Bluetooth: L2CAP: Fix not validating setsockopt user input
  - Bluetooth: L2CAP: Fix not validating setsockopt user input
  - !7822  LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors
  - LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors
  - !7823  LoongArch: fix kdump not work when legacy mode disabled
  - LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - !7764 v2  mm: Some bugfix and optimization
  - mm/dynamic_pool: clear PG_hugetlb when demote hugepages
  - mm: optimise vmf_anon_prepare() for VMAs without an anon_vma
  - mm: delay the check for a NULL anon_vma
  - mm: assert the mmap_lock is held in __anon_vma_prepare()
  - mm/memory: change vmf_anon_prepare() to be non-static
  - mm: always initialise folio->_deferred_list
  - mm: page_alloc: control latency caused by zone PCP draining
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
  - hugetlb: check for hugetlb folio before vmemmap_restore
  - hugetlb: set hugetlb page flag before optimizing vmemmap
  - mm: add alloc_contig_migrate_range allocation statistics
  - mm: convert free_zone_device_page to free_zone_device_folio
  - mm: combine __folio_put_small, __folio_put_large and __folio_put
  - mm: inline destroy_large_folio() into __folio_put_large()
  - mm: combine free_the_page() and free_unref_page()
  - mm: free non-hugetlb large folios in a batch
  - mm: increase folio batch size
  - mm: fix list corruption in put_pages_list
  - mm: remove folio from deferred split list before uncharging it
  - mm: convert free_swap_cache() to take a folio
  - mm: use a folio in __collapse_huge_page_copy_succeeded()
  - mm: convert free_pages_and_swap_cache() to use folios_put()
  - mm: remove lru_to_page()
  - mm: remove free_unref_page_list()
  - memcg: remove mem_cgroup_uncharge_list()
  - mm: free folios directly in move_folios_to_lru()
  - mm: free folios in a batch in shrink_folio_list()
  - mm: allow non-hugetlb large folios to be batch processed
  - mm: handle large folios in free_unref_folios()
  - mm: use __page_cache_release() in folios_put()
  - mm: use free_unref_folios() in put_pages_list()
  - mm: remove use of folio list from folios_put()
  - memcg: add mem_cgroup_uncharge_folios()
  - mm: use folios_put() in __folio_batch_release()
  - mm: add free_unref_folios()
  - mm: convert free_unref_page_list() to use folios
  - mm: make folios_put() the basis of release_pages()
  - !7812 [OLK-6.6] drm/phytium: Replace default efi fb0 with dc fb
  - drm/phytium: Replace default efi fb0 with dc fb
  - !7767  irqchip/loongson-eiointc: fix gsi register error
  - irqchip/loongson-eiointc: fix gsi register error
  - !7771  ext4: default enable iomap for buffered IO and large folio
  - ext4: default enable iomap for buffered IO and large folio
  - !7721 【OLK-6.6】bugfix from upstream v6.9 for AMD EPYC
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - x86/CPU/AMD: Do the common init on future Zens too
  - !7572 Fix pseudo nmi identifier undeclaration complilation error
  - arm64/cpufeature: Fix pseudo nmi identifier undeclaration complilation error
  - !7537 [OLK-6.6] irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - !7164 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
  - media: usbtv: Remove useless locks in usbtv_video_free()
  - !6386 [OLK-6.6] Fix warnings for RNPVF driver with loongarch-allmodconfig
  - RNPVF: NET: Fix "'%d' directive output may be truncated" warnings
  - !5243 [OLK-6.6] Support PSP identification for Hygon 4th CPU and print secure features when running on Hygon CPUs
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/cpu/hygon: Clear SME feature flag when not in use
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
  - !7180 【3snic】 use same string “sssnic" for "Kernel driver in use" and "Kernel modules"
  - 3snic: use sssnic as kernel driver name
  - !7607  Fix allmodconfig build error
  - net/ethernet/huawei/hiroce3: Fix allmodconfig build error
  - !7583 [OLK-6.6] Fixed display error for ps23xx when using ast and pe2201 bmc card
  - drm/ast: Fixed display error for ps23xx when using ast bmc card
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card
  - !7593  memcg_swap_qos: Backport two bugfix
  - mm/swapfile: fix infinite loop in get_swap_pages after set memory.swapfile
  - memcg: fix incorrect value of sysctl_memcg_swap_qos_stat
  - !7595  jbd2: speed up jbd2_transaction_committed()
  - jbd2: speed up jbd2_transaction_committed()
  - !5480 [OLK-6.6] Fix DMA RW sequence disorder issue
  - Add kh40000_iommu_dma_ops for KH-40000 platform
  - Add kh40000_direct_dma_ops for KH-40000 platform
  - !3133 [OLK-6.6] iommu/vt-d:Add support for detecting ACPI device in RMRR
  - iommu/vt-d: Add support for detecting ACPI namespace device in RMRR


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-28.0.0.36
changelog:
  - riscv-kernel patch update to 6.6.0-29.0.0
  - Fix QEMU UEFI boot panic
  - Deal with riscv SoC dtb search path


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-30.0.0.38
changelog:
  - !8809 MPTCP Upstream part 1
  - net: bpf: Use sockopt_lock_sock() in ip_sock_set_tos()
  - inet: lock the socket in ip_sock_set_tos()
  - inet: implement lockless IP_TOS
  - inet: implement lockless IP_MTU_DISCOVER
  - inet: implement lockless IP_MULTICAST_TTL
  - !9141  Fix allmodconfig build frame size error
  - net/ethernet/huawei/hiroce3: Fix allmodconfig build frame size error
  - !9101  ext4: Skip moving extents if page writeback failed
  - ext4: Skip moving extents if page writeback failed
  - !9126  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !9010 Backport 6.6.31&6.6.32 LTS patches from upstream
  - block: add a partscan sysfs attribute for disks
  - block: add a disk_has_partscan helper
  - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching sysfs file
  - docs: kernel_include.py: Cope with docutils 0.21
  - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  - KEYS: trusted: Do not use WARN when encode fails
  - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: tipd: fix event checking for tps6598x
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - net: usb: ax88179_178a: fix link status when link is set to down/up
  - usb: dwc3: Wait unconditionally after issuing EndXfer command
  - binder: fix max_thread type inconsistency
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - erofs: reliably distinguish block based and fscache mode
  - erofs: get rid of erofs_fs_context
  - kselftest: Add a ksft_perror() helper
  - mmc: core: Add HS400 tuning in HS400es initialization
  - KEYS: trusted: Fix memory leak in tpm2_key_encode()
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  - ice: remove unnecessary duplicate checks for VF VSI ID
  - ice: pass VSI pointer into ice_vc_isvalid_q_id
  - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings
  - ksmbd: add continuous availability share parameter
  - cifs: Add tracing for the cifs_tcon struct refcounting
  - smb: client: instantiate when creating SFU files
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
  - smb3: add trace event for mknod
  - smb311: additional compression flag defined in updated protocol spec
  - smb311: correct incorrect offset field in compression header
  - cifs: Move some extern decls from .c files to .h
  - ksmbd: Fix spelling mistake "connction" -> "connection"
  - ksmbd: fix possible null-deref in smb_lazy_parent_lease_break_close
  - cifs: remove redundant variable assignment
  - cifs: fixes for get_inode_info
  - cifs: defer close file handles having RH lease
  - ksmbd: add support for durable handles v1/v2
  - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
  - smb: common: simplify compression headers
  - smb: common: fix fields sizes in compression_pattern_payload_v1
  - smb: client: negotiate compression algorithms
  - smb3: add dynamic trace point for ioctls
  - smb: client: return reparse type in /proc/mounts
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point
  - smb: client: parse uid, gid, mode and dev from WSL reparse points
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs()
  - smb: client: add support for WSL reparse points
  - smb: client: reduce number of parameters in smb2_compound_op()
  - smb: client: fix potential broken compound request
  - smb: client: move most of reparse point handling code to common file
  - smb: client: introduce reparse mount option
  - smb: client: retry compound request without reusing lease
  - smb: client: do not defer close open handles to deleted files
  - smb: client: reuse file lease key in compound operations
  - smb: client: get rid of smb311_posix_query_path_info()
  - smb: client: parse owner/group when creating reparse points
  - smb3: update allocation size more accurately on write completion
  - smb: client: handle path separator of created SMB symlinks
  - cifs: update the same create_guid on replay
  - ksmbd: Add kernel-doc for ksmbd_extract_sharename() function
  - cifs: set replay flag for retries of write command
  - cifs: commands that are retried should have replay flag set
  - smb: client: delete "true", "false" defines
  - smb: Fix some kernel-doc comments
  - cifs: new mount option called retrans
  - smb: client: don't clobber ->i_rdev from cached reparse points
  - cifs: new nt status codes from MS-SMB2
  - cifs: pick channel for tcon and tdis
  - cifs: minor comment cleanup
  - cifs: remove redundant variable tcon_exist
  - ksmbd: vfs: fix all kernel-doc warnings
  - ksmbd: auth: fix most kernel-doc warnings
  - cifs: remove unneeded return statement
  - cifs: get rid of dup length check in parse_reparse_point()
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof()
  - smb3: Improve exception handling in allocate_mr_list()
  - cifs: fix in logging in cifs_chan_update_iface
  - smb: client: handle special files and symlinks in SMB3 POSIX
  - smb: client: cleanup smb2_query_reparse_point()
  - smb: client: allow creating symlinks via reparse points
  - smb: client: optimise reparse point querying
  - smb: client: allow creating special files via reparse points
  - smb: client: extend smb2_compound_op() to accept more commands
  - smb: client: Fix minor whitespace errors and warnings
  - smb: client: introduce cifs_sfu_make_node()
  - cifs: fix use after free for iface while disabling secondary channels
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO
  - smb3: minor cleanup of session handling code
  - smb3: more minor cleanups for session handling routines
  - smb3: minor RDMA cleanup
  - cifs: print server capabilities in DebugData
  - smb: use crypto_shash_digest() in symlink_hash()
  - Add definition for new smb3.1.1 command type
  - SMB3: clarify some of the unused CreateOption flags
  - cifs: Add client version details to NTLM authenticate message
  - md: fix kmemleak of rdev->serial
  - Revert "selftests/bpf: Add netkit to tc_redirect selftest"
  - btrfs: do not wait for short bulk allocation
  - keys: Fix overwrite of key expiration on instantiation
  - dmaengine: idxd: add a write() method for applications to submit work
  - dmaengine: idxd: add a new security check to deal with a hardware erratum
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
  - Bluetooth: qca: fix firmware check error path
  - Bluetooth: qca: fix info leak when fetching fw build id
  - Bluetooth: qca: fix info leak when fetching board id
  - Bluetooth: qca: generalise device address check
  - Bluetooth: qca: fix NVM configuration parsing
  - Bluetooth: qca: add missing firmware sanity checks
  - Bluetooth: qca: fix wcn3991 device address check
  - Bluetooth: qca: fix invalid device address check
  - eventfs: Do not treat events directory different than other directories
  - tracefs: Still use mount point as default permissions for instances
  - tracefs: Reset permissions on remount if permissions are options
  - ksmbd: do not grant v2 lease if parent lease key and epoch are not set
  - ksmbd: avoid to send duplicate lease break notifications
  - ksmbd: off ipv6only for both ipv4/ipv6 binding
  - spi: microchip-core-qspi: fix setting spi bus clock rate
  - regulator: core: fix debugfs creation regression
  - nvme-pci: Add quirk for broken MSIs
  - selftests/mm: fix powerpc ARCH check
  - x86/apic: Don't access the APIC when disabling x2APIC
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - net: fix out-of-bounds access in ops_init
  - arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
  - drm/amd/display: Fix incorrect DSC instance for MST
  - drm/amd/display: Handle Y carry-over in VCP X.Y calculation
  - drm/i915/bios: Fix parsing backlight BDB data
  - drm/i915/gt: Automate CCS Mode setting during engine resets
  - drm/i915/audio: Fix audio time stamp programming for DP
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/vmwgfx: Fix Legacy Display Unit
  - drm/ttm: Print the memory decryption status just once
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - Revert "drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()"
  - drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()
  - mei: me: add lunar lake point M DID
  - clk: sunxi-ng: a64: Set minimum and maximum rate for PLL-MIPI
  - clk: sunxi-ng: common: Support minimum and maximum rate
  - slimbus: qcom-ngd-ctrl: Add timeout for wait operation
  - dyndbg: fix old BUG_ON in >control parser
  - ASoC: ti: davinci-mcasp: Fix race condition during probe
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - xtensa: fix MAKE_PC_FROM_RA second argument
  - tipc: fix UAF in error path
  - e1000e: change usleep_range to udelay in PHY mdic access
  - kmsan: compiler_types: declare __no_sanitize_or_inline
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio: pressure: Fixes BME280 SPI driver data
  - iio:imu: adis16475: Fix sync mode setting
  - dt-bindings: iio: health: maxim,max30102: fix compatible check
  - workqueue: Fix selection of wake_cpu in kick_pool()
  - mptcp: only allow set existing scheduler for net.mptcp.scheduler
  - mptcp: ensure snd_nxt is properly initialized on connect
  - mm/slab: make __free(kfree) accept error pointers
  - maple_tree: fix mas_empty_area_rev() null pointer dereference
  - btrfs: set correct ram_bytes when splitting ordered extent
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  - firewire: ohci: fulfill timestamp for some local asynchronous transaction
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: typec: tcpm: Check for port partner validity before consuming it
  - usb: typec: tcpm: unregister existing source caps before re-registration
  - usb: typec: tcpm: clear pd_event queue in PORT_RESET
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - usb: gadget: uvc: use correct buffer size when parsing configfs lists
  - usb: gadget: composite: fix OS descriptors w_value logic
  - USB: core: Fix access violation during port device removal
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - Reapply "drm/qxl: simplify qxl_fence_wait"
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
  - drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible
  - drm/amd/display: Atom Integrated System Info v2_2 for DCN35
  - gpiolib: cdev: fix uninitialised kfifo
  - gpiolib: cdev: relocate debounce_period_us from struct gpio_desc
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users
  - drm/connector: Add 
  - drm/meson: dw-hdmi: add bandgap setting for g12
  - drm/meson: dw-hdmi: power up phy on device init
  - net: dsa: mv88e6xxx: add phylink_get_caps for the mv88e6320/21 family
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route()
  - ipv6: prevent NULL dereference in ip6_output()
  - ipv6: annotate data-races around cnf.disable_ipv6
  - hsr: Simplify code for announcing HSR nodes timer setup
  - net-sysfs: convert dev->operstate reads to lockless ones
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - dt-bindings: net: mediatek: remove wrongly added clocks and SerDes
  - rxrpc: Only transmit one ACK per jumbo packet received
  - rxrpc: Fix congestion control algorithm
  - rxrpc: Fix the names of the fields in the ACK trailer struct
  - selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC
  - selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - nfc: nci: Fix kcov check in nci_rx_work()
  - phonet: fix rtm_phonet_notify() skb allocation
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - Bluetooth: HCI: Fix potential null-ptr-deref
  - Bluetooth: msft: fix slab-use-after-free in msft_do_close()
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - ARM: 9381/1: kasan: clear stale stack poison
  - qibfs: fix dentry leak
  - SUNRPC: add a missing rpc_stat for TCP TLS
  - blk-iocost: do not WARN if iocg was already offlined
  - net:usb:qmi_wwan: support Rolling modules
  - drm/radeon: silence UBSAN warning (v3)
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - gpio: lpc32xx: fix module autoloading
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - powerpc/crypto/chacha-p10: Fix failure on non Power10
  - 9p: explicitly deny setlease attempts
  - fs/9p: fix the cache always being enabled on files with qid flags
  - fs/9p: translate O_TRUNC into OTRUNC
  - fs/9p: only translate RWX permissions for plain 9P2000
  - iommu: mtk: fix module autoloading
  - smb3: fix broken reconnect when password changing on the server by allowing password rotation
  - Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
  - uio_hv_generic: Don't free decrypted memory
  - hv_netvsc: Don't free decrypted memory
  - Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
  - Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdgpu: Fix VCN allocation in CPX partition
  - drm/amd/display: Skip on writeback when it's not applicable
  - drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2
  - drm/amdgpu: Refine IB schedule error logging
  - tools/power/turbostat: Fix uncore frequency file string
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - blk-iocost: avoid out of bounds shift
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - memblock tests: fix undefined reference to `BIT'
  - memblock tests: fix undefined reference to `panic'
  - memblock tests: fix undefined reference to `early_pfn_to_nid'
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix warning upon failed /dev/cpu_dma_latency read
  - tools/power turbostat: Print ucode revision only if valid
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Increase the limit for fd opened
  - tools/power turbostat: Fix added raw MSR output
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - ata: sata_gemini: Check clk_enable() result
  - vboxsf: explicitly deny setlease attempts
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - scsi: ufs: core: Fix MCQ mode dev command timeout
  - scsi: ufs: core: WLUN suspend dev/link state error recovery
  - regulator: tps65132: Add of_match table
  - ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3 suspend
  - kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
  - selftests/ftrace: Fix event filter target_func selection
  - bpf: Check bloom filter map value size
  - drm/amdkfd: range check cp bad op exception interrupts
  - drm/amdkfd: Check cgroup when returning DMABuf info
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal
  - wifi: iwlwifi: read txq->read_ptr under lock
  - wifi: mac80211: fix prep_connection error path
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Use a dedicated lock for ras_fwlog state
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - scsi: ufs: core: Fix MCQ MAC configuration
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
  - swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y
  - powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
  - powerpc/pseries: make max polling consistent for longer H_CALLs
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - clk: qcom: smd-rpm: Restore msm8976 num_clk
  - net: gro: add flush check in udp_gro_receive_segment
  - net: gro: fix udp bad offset in socket lookup by adding {inner_}network_offset to napi_gro_cb
  - net: gro: parse ipv6 ext headers without frag0 invalidation
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - drm/panel: ili9341: Use predefined error codes
  - drm/panel: ili9341: Respect deferred probe
  - drm/panel: ili9341: Correct use of device property APIs
  - s390/qeth: Fix kernel panic after setting hsuid
  - vxlan: Pull inner IP header in vxlan_rcv().
  - tipc: fix a possible memleak in tipc_buf_append
  - rxrpc: Clients must accept conn from any address
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - spi: fix null pointer dereference within spi_sync
  - drm/amdgpu: fix doorbell regression
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - s390/cio: Ensure the copied buf is NUL terminated
  - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: meson: axg-tdm-interface: manage formatters in trigger
  - ASoC: meson: axg-card: make links nonatomic
  - ASoC: meson: axg-fifo: use threaded irq to check periods
  - ASoC: meson: axg-fifo: use FIELD helpers
  - vxlan: Add missing VNI filter counter update in arp_reduce().
  - vxlan: Fix racy device stats updates.
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - ALSA: emu10k1: fix E-MU dock initialization
  - ALSA: emu10k1: move the whole GPIO event handling to the workqueue
  - ALSA: emu10k1: factor out snd_emu1010_load_dock_firmware()
  - ALSA: emu10k1: fix E-MU card dock presence monitoring
  - Fix a potential infinite loop in extract_user_to_sg()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - octeontx2-af: avoid off-by-one read from userspace
  - bna: ensure the copied buf is NUL terminated
  - xdp: use flags field to disambiguate broadcast redirect
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - ASoC: codecs: wsa881x: set clk_stop_mode1 flag
  - ASoC: Intel: avs: Set name of control as in topology
  - riscv, bpf: Fix incorrect runtime stats
  - bpf, arm64: Fix incorrect runtime stats
  - spi: axi-spi-engine: fix version format string
  - spi: axi-spi-engine: use common AXI macros
  - spi: axi-spi-engine: move msg state to new struct
  - spi: axi-spi-engine: use devm_spi_alloc_host()
  - spi: axi-spi-engine: simplify driver data allocation
  - spi: spi-axi-spi-engine: Use helper function devm_clk_get_enabled()
  - bpf: Fix a verifier verbose message
  - nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH
  - ASoC: SOF: Intel: add default firmware library path for LNL
  - ASoC: SOF: Introduce generic names for IPC types
  - regmap: Add regmap_read_bypassed()
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
  - regulator: change devm_regulator_get_enable_optional() stub to return Ok
  - regulator: change stubbed devm_regulator_get_enable to return Ok
  - regulator: mt6360: De-capitalize devicetree regulator subnodes
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
  - power: rt9455: hide unused rt9455_boost_voltage_values
  - pinctrl: baytrail: Fix selecting gpio pinctrl state
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
  - pinctrl: core: delete incorrect free in pinctrl_enable()
  - pinctrl/meson: fix typo in PDM's pin name
  - pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
  - Bluetooth: qca: add support for QCA2066
  - eeprom: at24: fix memory corruption race condition
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
  - rust: kernel: require `Send` for `Module` implementations
  - wifi: nl80211: don't free NULL coalescing rule
  - rust: macros: fix soundness issue in `module!` macro
  - rust: module: place generated init_module() function in .init.text
  - mtd: limit OTP NVMEM cell parse to non-NAND devices
  - nvmem: add explicit config option to read old syntax fixed OF cells
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
  - dmaengine: pl330: issue_pending waits until WFP state
  - !9104 [OLK-6.6] drm/phytium: Fix make allmodconfig build fail
  - DRM: Fix Phytium DRM build fail
  - !9085 [OLK-6.6] openeuler_defconfig: fix checkdefconfig fail
  - openeuler_defconfig: fix checkdefconfig fail
  - !8750  ubifs: Check @c->dirty_[n|p
  - ubifs: Check @c->dirty_[n|p]n_cnt and @c->nroot state under @c->lp_mutex
  - !8703 v2  IMA: Introduce a config to bypass i_version detection for Overlayfs issue
  - IMA: Introduce a config to bypass i_version detection for Overlayfs issue
  - !8621  LoongArch: fix HT RX INT TRANS register not initialized
  - LoongArch: fix HT RX INT TRANS register not initialized
  - !8440  arm64: cpufeature: Both the major and the minor version numbers need to be checked
  - arm64/mpam: skip mpam initialize under kdump kernel
  - arm64: cpufeature: Both the major and the minor version numbers need to be checked
  - !8107 [OLK 6.6]net: hns3: fix kernel crash when devlink reload  during pf/vf initialization
  - {topost} net: hns3: fix kernel crash when devlink reload during vf initialization
  - {topost} net: hns3: fix kernel crash when devlink reload during pf initialization
  - !8481  Fix vf init and common user permissions issue
  - net/ethernet/huawei/hiroce3: Fix vf init and common user permissions issue
  - !8576 【OLK-6.6】backport PCC patches to support shared interrupt for multiple subspaces and platform notification handling
  - soc: hisilicon: kunpeng_hccs: replace MAILBOX dependency with PCC
  - soc: hisilicon: kunpeng_hccs: Add the check for obtaining complete port attribute
  - mailbox: pcc: Support shared interrupt for multiple subspaces
  - mailbox: pcc: Add support for platform notification handling
  - !8471  ext4: Fixes len calculation in mpage_journal_page_buffers
  - ext4: Fixes len calculation in mpage_journal_page_buffers
  - !8496  mm/mlock: return EINVAL for illegal user memory range in mlock
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - !8435  LoongArch: add GMAC&GNET support
  - net: stmmac: dwmac-loongson: Add loongson module author
  - net: stmmac: dwmac-loongson: Move disable_force flag to _gnet_date
  - net: stmmac: dwmac-loongson: Add Loongson GNET support
  - net: stmmac: dwmac-loongson: Fixed failure to set network speed to 1000.
  - net: stmmac: dwmac-loongson: Add loongson_dwmac_config_legacy
  - net: stmmac: dwmac-loongson: Add full PCI support
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add phy mask for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add ref and ptp clocks for Loongson
  - net: stmmac: dwmac-loongson: Split up the platform data initialization
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification
  - net: stmmac: dwmac-loongson: Drop useless platform data
  - net: stmmac: Export dwmac1000_dma_ops
  - net: stmmac: Add multi-channel support
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure
  - !7896  backport upstream stmmac related patches.
  - net: stmmac: Move MAC caps init to phylink MAC caps getter
  - net: stmmac: Rename phylink_get_caps() callback to update_caps()
  - net: phylink: provide mac_get_caps() method
  - !8450  sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()
  - sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()
  - !7482 v2  perf parse-events: Make legacy events lower priority than sysfs/JSON
  - perf x86 test: Update hybrid expectations
  - perf parse-events: Make legacy events lower priority than sysfs/JSON
  - !8309  xfs: Fix file creation failure
  - xfs: Fix file creation failure
  - !8183  perf pmu: Count sys and cpuid JSON events separately
  - perf pmu: Count sys and cpuid JSON events separately
  - !7077 v4  block: dicard bugfix
  - block: check io size before submit discard
  - block: fix overflow in blk_ioctl_discard()
  - !8353  mm/dynamic_pool: clear PG_hugetlb when promote hugepages
  - mm/dynamic_pool: clear PG_hugetlb when promote hugepages
  - !8151  LoongArch: Fix secondary bridge routing errors
  - LoongArch: Fix secondary bridge routing errors
  - !7948 【OLK-6.6】Fix BUILD REGRESSION warnings in bzwx N5/N6 series NIC drivers
  - drivers: Fix BUILD REGRESSION warnings in bzwx N5/N6 series NIC drivers
  - !8228  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - !6283  fix deadlock in cgroup1_writeback V2
  - cgroup_writeback: fix deadlock in cgroup1_writeback
  - cgroup_writeback: Revert "fix deadlock in cgroup1_writeback"
  - !8036  fix CVE-2024-27010
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion

   to message about demoting connector force-probes


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-31.0.0.39
changelog:
  - !9438 【OLK-6.6】RDMA/hns: Fix some mutex UAF
  - RDMA/hns: Fix some mutex UAF
  - !9394  CVE-2024-38587
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - !9405  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9415  mm: drop the 'anon_' prefix for swap-out mTHP counters
  - mm: drop the 'anon_' prefix for swap-out mTHP counters
  - !9376  ALSA: core: Fix NULL module pointer assignment at card init
  - ALSA: core: Fix NULL module pointer assignment at card init
  - !9295  Port patches from OLK-5.10
  - livepatch: Enable CONFIG_LIVEPATCH_ISOLATE_KPROBE in openeuler_defconfig
  - livepatch: Avoid patching conflicts with kprobes
  - !9356  tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
  - !9332  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - !9355  f2fs: multidev: fix to recognize valid zero block address
  - f2fs: multidev: fix to recognize valid zero block address
  - !9329  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9352 MPTCP Upstream part 10
  - MAINTAINERS: add Geliang as reviewer for MPTCP
  - mailmap: add entries for Geliang Tang
  - mptcp: fill in missing MODULE_DESCRIPTION()
  - netlink: fill in missing MODULE_DESCRIPTION()
  - netlink: specs: mptcp: rename the MPTCP path management spec
  - !9304 MPTCP Upstream part 9
  - selftests: mptcp: add mptcp_lib_wait_local_port_listen
  - selftests: mptcp: add mptcp_lib_check_transfer
  - selftests: mptcp: add mptcp_lib_make_file
  - selftests: mptcp: add missing oflag=append
  - !9307  of: module: add buffer overflow check in of_modalias()
  - of: module: add buffer overflow check in of_modalias()
  - !9331  Some folio bugfix
  - mm/memory: don't require head page for do_set_pmd()
  - mm/migrate: fix kernel BUG at mm/compaction.c:2761!
  - mm: huge_memory: fix misused mapping_large_folio_support() for anon folios
  - mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
  - mm: fix possible OOB in numa_rebuild_large_mapping()
  - mm: support multi-size THP numa balancing
  - mm/rmap: do not add fully unmapped large folio to deferred split list
  - !9302  ring-buffer: Fix a race between readers and resize checks
  - ring-buffer: Fix a race between readers and resize checks
  - !9345  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9346  net: bridge: xmit: make sure we have at least eth header len bytes
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - !9301 MPTCP Upstream part 8
  - selftests: mptcp: userspace pm send RM_ADDR for ID 0
  - selftests: mptcp: userspace pm remove initial subflow
  - mptcp: userspace pm rename remove_err to out
  - selftests: mptcp: userspace pm create id 0 subflow
  - mptcp: add mptcpi_subflows_total counter
  - !9266 MPTCP Upstream part 7
  - net: fill in MODULE_DESCRIPTION()s for SOCK_DIAG modules
  - selftests: mptcp: sockopt: drop mptcp_connect var
  - mptcp: define more local variables sk
  - mptcp: move sk assignment statement ahead
  - !9262 MPTCP Upstream part 6
  - mptcp: use mptcp_get_ext helper
  - mptcp: use mptcp_check_fallback helper
  - mptcp: drop useless ssk in pm_subflow_check_next
  - mptcp: ignore notsent_lowat setting at the subflow level
  - mptcp: consolidate sockopt synchronization
  - !5257 [OLK-6.6] Support DOWNLOAD_FIRMWARE feature for hygon CSV
  - crypto: ccp: Implement CSV_DOWNLOAD_FIRMWARE ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_SHUTDOWN ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_INIT ioctl command
  - crypto: ccp: Support DOWNLOAD_FIRMWARE when detect CSV
  - !8058 Intel: Backport QuickAssist Technology(QAT) live migration support for in-tree driver
  - Enable QAT_VFIO_PCI as kernel module to support Intel QAT live migration
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - crypto: qat - specify firmware files for 402xx
  - crypto: qat - validate slices count returned by FW
  - crypto: qat - improve error logging to be consistent across features
  - crypto: qat - improve error message in adf_get_arbiter_mapping()
  - crypto: qat - implement dh fallback for primes > 4K
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid"
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices
  - crypto: qat - implement interface for live migration
  - crypto: qat - add interface for live migration
  - crypto: qat - add bank save and restore flows
  - crypto: qat - expand CSR operations for QAT GEN4 devices
  - crypto: qat - rename get_sla_arr_of_type()
  - crypto: qat - relocate CSR access code
  - crypto: qat - move PFVF compat checker to a function
  - crypto: qat - relocate and rename 4xxx PF2VM definitions
  - crypto: qat - adf_get_etr_base() helper
  - !8304 [OLK-6.6] Backport TPMI based RAPL PMU support for next Intel Xeon Granite Rapids (GNR)
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - !9245 MPTCP Upstream part 5
  - mptcp: prevent BPF accessing lowat from a subflow socket.
  - mptcp: use copy_from_iter helpers on transmit
  - mptcp: give rcvlowat some love
  - tcp: define initial scaling factor value as a macro
  - mptcp: use plain bool instead of custom binary enum
  - mptcp: add a new sysctl for make after break timeout
  - !8422 [OLK-6.6] Intel IAA Compression Accelerator Crypto Driver (iaa_crypto)
  - openeuler_defconfig: Add kernel config for Intel IAA crypto driver
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida
  - dmaengine: idxd: Check for driver name match before sva user feature
  - crypto: iaa - Use cpumask_weight() when rebalancing
  - crypto: iaa - Fix some errors in IAA documentation
  - crypto: iaa - Change iaa statistics to atomic64_t
  - crypto: iaa - Add global_stats file and remove individual stat files
  - crypto: iaa - Remove comp/decomp delay statistics
  - crypto: iaa - fix decomp_bytes_in stats
  - crypto: iaa - Fix nr_cpus < nr_iaa case
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - crypto: iaa - Fix comp/decomp delay statistics
  - crypto: iaa - Fix async_disable descriptor leak
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init()
  - crypto: iaa - Remove header table code
  - dmaengine: idxd: constify the struct device_type usage
  - dmaengine: idxd: make dsa_bus_type const
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
  - crypto: iaa - Account for cpu-less numa nodes
  - crypto: iaa - remove unneeded semicolon
  - crypto: iaa - Remove unneeded newline in update_max_adecomp_delay_ns()
  - crypto: iaa - Change desc->priv to 0
  - dmaengine: idxd: Add support for device/wq defaults
  - crypto: iaa - Add IAA Compression Accelerator stats
  - crypto: iaa - Add irq support for the crypto async interface
  - crypto: iaa - Add support for deflate-iaa compression algorithm
  - crypto: iaa - Add compression mode management along with fixed mode
  - crypto: iaa - Add per-cpu workqueue table with rebalancing
  - crypto: iaa - Add Intel IAA Compression Accelerator crypto driver core
  - crypto: iaa - Add IAA Compression Accelerator Documentation
  - dmaengine: idxd: add callback support for iaa crypto
  - dmaengine: idxd: Add wq private data accessors
  - dmaengine: idxd: Export wq resource management functions
  - dmaengine: idxd: Export descriptor management functions
  - dmaengine: idxd: Rename drv_enable/disable_wq to idxd_drv_enable/disable_wq, and export
  - dmaengine: idxd: add external module driver support for dsa_bus_type
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register
  - dmaengine: idxd: add wq driver name support for accel-config user tool
  - dmaengine: idxd: rate limit printk in misc interrupt thread
  - !9230 MPTCP Upstream part 4
  - net: mptcp: use policy generated by YAML spec
  - net: mptcp: rename netlink handlers to mptcp_pm_nl_<blah>_{doit,dumpit}
  - uapi: mptcp: use header file generated from YAML spec
  - Documentation: netlink: add a YAML spec for mptcp
  - net: mptcp: convert netlink from small_ops to ops
  - !9229 v2  sched: smart_grid: fix potential NULL pointer dereference
  - sched: smart_grid: fix potential NULL pointer dereference
  - !9226 MPTCP Upstream part 3
  - tools: ynl-gen: add support for exact-len validation
  - tools: ynl: add uns-admin-perm to genetlink legacy
  - tools: ynl-gen: support limit names
  - tools: ynl-gen: support full range of min/max checks for integer values
  - tools: ynl-gen: track attribute use
  - !9217  memcg: attach memcg async reclaim worker to curcpu
  - memcg: attach memcg async reclaim worker to curcpu
  - !9173 MPTCP Upstream part 2
  - inet: implement lockless getsockopt(IP_MULTICAST_IF)
  - inet: lockless IP_PKTOPTIONS implementation
  - inet: implement lockless getsockopt(IP_UNICAST_IF)
  - inet: lockless getsockopt(IP_MTU)
  - inet: lockless getsockopt(IP_OPTIONS)


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-33.0.0.40
changelog:
  - !9779  CVE-2024-39461
  - clk: bcm: rpi: Assign ->num before accessing ->hws
  - !9801 loongarch平台config配置对kdump的支持
  - loongarch: configs: Configure degbuginfo
  - Fix the kdump second kernel boot failure
  - loongarch: Cleanup loongson3_defconfig with make savedefconfig
  - !9811  fix CVE-2024-39481
  - media: mc: Fix graph walk in media_pipeline_start
  - !9810  KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
  - !9821  kdb: Fix buffer overflow during tab-complete
  - kdb: Fix buffer overflow during tab-complete
  - !9788  net: fix wrong return value in bpf_sock_ops_get_uid_gid
  - net: fix wrong return value in bpf_sock_ops_get_uid_gid
  - !9816  mm: mem_reliable: Make counting reliable task usage compatible with folio
  - mm: mem_reliable: Make counting reliable task usage compatible with folio
  - !9807  drm: zynqmp_dpsub: Always register bridge
  - drm: zynqmp_dpsub: Always register bridge
  - !9804  CVE-2024-36478
  - null_blk: Fix return value of nullb_device_power_store()
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9805  md: fix resync softlockup when bitmap size is less than array size
  - md: fix resync softlockup when bitmap size is less than array size
  - !9802  ax25: Fix reference count leak issue of net_device
  - ax25: Fix reference count leak issue of net_device
  - !9770  Add a switch to enable hungtask check for io
  - block: disable BLK_IO_HUNG_TASK_CHECK by default
  - block: add a switch to enable hungtask check for io
  - !9793  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - !9649  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - !9732  CVE-2024-39469
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - !9775  mm/slub: Reduce memory consumption in extreme scenarios
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !9614 v2  wifi: carl9170: add a proper sanity check for endpoints
  - wifi: carl9170: add a proper sanity check for endpoints
  - !9709  cgroup: fix uaf when proc_cpuset_show
  - cgroup: fix uaf when proc_cpuset_show
  - !9748  cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
  - cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
  - !8877  drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - !9730  efi: libstub: only free priv.runtime_map when allocated
  - efi: libstub: only free priv.runtime_map when allocated
  - !9679  cgroup/cpuset: Make cpuset hotplug processing synchronous
  - cgroup/cpuset: Make cpuset hotplug processing synchronous
  - !9757  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9665  CVE-2024-38622
  - drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more sensible
  - drm/msm/dpu: Add callback function pointer check before its call
  - drm/msm/dpu: stop using raw IRQ indices in the kernel output
  - drm/msm/dpu: make the irq table size static
  - drm/msm/dpu: add helper to get IRQ-related data
  - drm/msm/dpu: extract dpu_core_irq_is_valid() helper
  - drm/msm/dpu: remove irq_idx argument from IRQ callbacks
  - !9668  wifi: nl80211: Avoid address calculations via out of bounds array indexing
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing
  - !9715  CVE-2024-38602
  - ax25: Fix reference count leak issues of ax25_dev
  - ax25: Use kernel universal linked list to implement ax25_dev_list
  - !9746 v2  Revert "ACPI: processor: Add support for processors described as container packages"
  - Revert "ACPI: processor: Add support for processors described as container packages"
  - !9736  net/9p: fix uninit-value in p9_client_rpc()
  - net/9p: fix uninit-value in p9_client_rpc()
  - !9596  iomap: fix warning in iomap_write_delalloc_release()
  - iomap: fix warning in iomap_write_delalloc_release()
  - !9703  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9642  CVE-2024-38582
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - !9687  greybus: lights: check return of get_channel_from_mode
  - greybus: lights: check return of get_channel_from_mode
  - !9678  crypto: bcm - Fix pointer arithmetic
  - crypto: bcm - Fix pointer arithmetic
  - !7918 [OLK-6.6]drivers: support Yunsilicon's metaScale/metaVisor series NICs
  - drivers: support Yunsilicon's MS and MV series NICs
  - !9619  r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - !9664  tls: fix missing memory barrier in tls_init
  - tls: fix missing memory barrier in tls_init
  - !9161  xfs: don't use current->journal_info
  - xfs: don't use current->journal_info
  - !9624  CVE-2024-38597
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - !9631  ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture
  - ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture
  - !9632  drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
  - drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
  - !9399 fix CVE-2024-38544 and CVE-2024-37356
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9341  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9562  CVE-2024-38385
  - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
  - !9582 v2  eventfs: Fix a possible null pointer dereference in eventfs_find_events()
  - eventfs: Fix a possible null pointer dereference in eventfs_find_events()
  - !9588  s390/ap: Fix crash in AP internal function modify_bitmap()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9513  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9561 v2  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9578  net/mlx5: Discard command completions in internal error
  - net/mlx5: Discard command completions in internal error
  - !9549  btrfs: fix crash on racing fsync and size-extending write into prealloc
  - btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !9479  xfs: fix unlink vs cluster buffer instantiation race
  - xfs: fix unlink vs cluster buffer instantiation race
  - !9519 MPTCP Upstream part 12
  - mptcp: annotate lockless accesses around read-mostly fields
  - mptcp: annotate lockless access for token
  - mptcp: annotate lockless access for RX path fields
  - mptcp: annotate lockless access for the tx path
  - mptcp: annotate access for msk keys
  - !9557  i2c: acpi: Unbind mux adapters before delete
  - i2c: acpi: Unbind mux adapters before delete
  - !9555  smb: client: fix deadlock in smb2_find_smb_tcon()
  - smb: client: fix deadlock in smb2_find_smb_tcon()
  - !9489  fs/ntfs3: Check 'folio' pointer for NULL
  - fs/ntfs3: Check 'folio' pointer for NULL
  - !9482  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - !9506  usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
  - usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
  - !9528  media: lgdt3306a: Add a check against null-pointer-def
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9551  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - !9478  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9536  clk: bcm: dvp: Assign ->num before accessing ->hws
  - clk: bcm: dvp: Assign ->num before accessing ->hws
  - !9463  fix CVE-2024-38621
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - !9457  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - !9459  bpf: Fix verifier assumptions about socket->sk
  - bpf: Fix verifier assumptions about socket->sk
  - !9522  bonding: fix oops during rmmod
  - bonding: fix oops during rmmod
  - !9502  netrom: fix possible dead-lock in nr_rt_ioctl()
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - !9402  fs/ntfs3: Use variable length array instead of fixed size
  - fs/ntfs3: Use variable length array instead of fixed size
  - !9320  drm/amd/display: Fix potential index out of bounds in color transformation function
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9493  thermal/drivers/qcom/lmh: Check for SCM availability at probe
  - thermal/drivers/qcom/lmh: Check for SCM availability at probe
  - !9398  tracing/probes: fix error check in parse_btf_field()
  - tracing/probes: fix error check in parse_btf_field()
  - !9510  ftrace: Fix possible use-after-free issue in ftrace_location()
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - !9509  cifs: fix pagecache leak when do writepages
  - cifs: fix pagecache leak when do writepages
  - !9436 v2  ASoC: mediatek: Assign dummy when codec not specified for a DAI link
  - ASoC: mediatek: Assign dummy when codec not specified for a DAI link
  - !9486 [OLK-6.6] Fix os crash while enable sriov for rnp
  - RNPVF: NET: Fix os crash while enable sriov for rnp
  - !9371 MPTCP Upstream part 11
  - selftests: net: ip_local_port_range: define IPPROTO_MPTCP
  - selftests: mptcp: join: check CURRESTAB counters
  - selftests/net: add MPTCP coverage for IP_LOCAL_PORT_RANGE
  - mptcp: sockopt: support IP_LOCAL_PORT_RANGE and IP_BIND_ADDRESS_NO_PORT
  - mptcp: rename mptcp_setsockopt_sol_ip_set_transparent()
  - !5258 [OLK-6.6] Support request attestation report from CSV guest
  - driver/virt/coco: Add HYGON CSV Guest dirver.
  - KVM: x86: Support VM_ATTESTATION hypercall
  - !9485 v2  CVE-2024-38610
  - drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
  - virt: acrn: stop using follow_pfn
  - !9380  psi: using cpuacct_cgrp_id under CONFIG_CGROUP_CPUACCT
  - psi: using cpuacct_cgrp_id under CONFIG_CGROUP_CPUACCT
  - !8899  block: fix module reference leakage from bdev_open_by_dev error path
  - block: fix module reference leakage from bdev_open_by_dev error path
  - !9445  blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
  - !9466  io_uring: check for non-NULL file pointer in io_file_can_poll()
  - io_uring: check for non-NULL file pointer in io_file_can_poll()
  - !9389  block: refine the EOF check in blkdev_iomap_begin
  - block: refine the EOF check in blkdev_iomap_begin
  - !9414  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9455  jffs2: prevent xattr node from overflowing the eraseblock
  - jffs2: prevent xattr node from overflowing the eraseblock
  - !9465  CVE-2024-38662
  - Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
  - bpf: Allow delete from sockmap/sockhash only if update is allowed
  - !9410  Fix CVE-2024-31076
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - !9449  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-34.0.0.41
changelog:
  - !10059  nilfs2: fix use-after-free of timer for log writer thread
  - nilfs2: fix use-after-free of timer for log writer thread
  - !10025  9p: add missing locking around taking dentry fid list
  - 9p: add missing locking around taking dentry fid list
  - !9835 fix CVE-2024-39479
  - drm/i915/hwmon: Get rid of devm
  - !9998  ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
  - ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
  - !9997  openrisc: traps: Don't send signals to kernel mode threads
  - openrisc: traps: Don't send signals to kernel mode threads
  - !9956  drm/komeda: check for error-valued pointer
  - drm/komeda: check for error-valued pointer
  - !9914  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9944  f2fs: remove clear SB_INLINECRYPT flag in default_options
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - !9909  sock_map: avoid race between sock_map_close and sk_psock_put
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - !10045  misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
  - misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
  - !10055  media: v4l: async: Fix notifier list entry init
  - media: v4l: async: Fix notifier list entry init
  - !9900  ipv6: fix possible race in __fib6_drop_pcpu_from()
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - !9979  CVE-2024-40972
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - !9988  netpoll: Fix race condition in netpoll_owner_active
  - netpoll: Fix race condition in netpoll_owner_active
  - !9945  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9935  ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
  - ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
  - !9962  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - !9896  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - !9928  ocfs2: fix races between hole punching and AIO+DIO
  - ocfs2: fix races between hole punching and AIO+DIO
  - !9938  fix CVE-2024-40934
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  - !9899  ionic: fix use after netif_napi_del()
  - ionic: fix use after netif_napi_del()
  - !9898  cpufreq: amd-pstate: fix memory leak on CPU EPP exit
  - cpufreq: amd-pstate: fix memory leak on CPU EPP exit
  - !9903  mptcp: ensure snd_una is properly initialized on connect
  - mptcp: ensure snd_una is properly initialized on connect
  - !9878  CVE-2024-39478
  - crypto: starfive - Do not free stack buffer
  - !9888  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !5261 [OLK-6.6]Hygon: Some enhancement and bugfixes for HYGON CSV/CSV2
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy guest
  - KVM: x86: Fix KVM_GET_MSRS stack info leak
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests
  - x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt
  - KVM: x86: Calls is_64_bit_hypercall() instead of is_64_bit_mode() in complete_hypercall_exit()
  - x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from userspace
  - KVM: SVM: Fix the available ASID range for CSV2 guest
  - !9861 MPTCP Upstream part 13
  - selftests: mptcp: lib: catch duplicated subtest entries
  - selftests: mptcp: explicitly trigger the listener diag code-path
  - bpf, btf: Add check_btf_kconfigs helper
  - bpf, btf: Fix return value of register_btf_id_dtor_kfuncs
  - !9876 v3  Fix xfs file creation issue
  - xfs: Avoid races with cnt_btree lastrec updates
  - Revert "xfs: Fix file creation failure"
  - !9877  gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Fix potential glock use-after-free on unmount
  - !9862  ipvlan: Modify the value of ipvlan modes
  - ipvlan: Modify the value of ipvlan modes
  - !5260 [OLK-6.6] Support live migration for CSV/CSV2 guest, and support rebooting CSV/CSV2 guest
  - KVM: SVM: Force flush caches before reboot CSV guest
  - KVM: SVM: Add support for rebooting CSV2 guest
  - KVM: x86: Introduce control_{pre,post}_system_reset ioctl interfaces
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: x86: Restore control registers in __set_sregs() to support CSV2 guest live migration
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
  - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
  - crypto: ccp: Add support to switch to CSV RING_BUFFER mode
  - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
  - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
  - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
  - !9294 Compiler: Add clang's PGO support for kernel.
  - Compiler: Add clang's PGO support for kernel.
  - !9610  rcu: Fix buffer overflow in print_cpu_stall_info()
  - rcu: Fix buffer overflow in print_cpu_stall_info()
  - !9845  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - !9859  block: enable BLK_IO_HUNG_TASK_CHECK by default
  - block: enable BLK_IO_HUNG_TASK_CHECK by default
  - !9857  drm/amdgpu/mes: fix use-after-free issue
  - drm/amdgpu/mes: fix use-after-free issue
  - !9829  fix CVE-2024-38620
  - Bluetooth: fix connection setup in l2cap_connect
  - Bluetooth: HCI: Remove HCI_AMP support
  - Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS
  - Bluetooth: Remove usage of the deprecated ida_simple_xx() API
  - Bluetooth: ISO: Fix BIS cleanup
  - !9838  cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - !9841  ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
  - ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
  - !9834  mmc: davinci: Don't strip remove function when driver is builtin
  - mmc: davinci: Don't strip remove function when driver is builtin


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-35.0.0.43
changelog:
  - !9782  usb-storage: alauda: Check whether the media is initialized
  - usb-storage: alauda: Check whether the media is initialized
  - !10294 [OLK-6.6] drivers: Fix compile warning "argument used uninitialized"
  - drivers: Fix compile warning "argument used uninitialized"
  - !10257  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - !10287  CVE-2024-36979
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
  - net: bridge: mst: fix vlan use-after-free
  - !10018  ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
  - ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
  - !9985  btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
  - btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
  - !10260 [RoCE]从社区回合patch到openEuler（OLK-6.6）
  - RDMA/hns: Fix mbx timing out before CMD execution is completed
  - RDMA/hns: Fix insufficient extend DB for VFs.
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge
  - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR
  - RDMA/hns: Fix unmatch exception handling when init eq table fails
  - RDMA/hns: Check atomic wr length
  - !10248  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !9243  Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - !10160  fix CVE-2024-40915
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - !10264  mm: filemap: optimize semantic when thp_exec_enabled is set to 3
  - mm: filemap: optimize semantic when thp_exec_enabled is set to 3
  - !5264 [OLK-6.6]HYGON: Support CSV Reuse ASID feature on Hygon CPUs
  - KVM: SVM: Add support for different CSV guests to reuse the same ASID
  - !10231  fix CVE-2024-41007
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - !10233  fpga: bridge: add owner module and take its refcount
  - fpga: bridge: add owner module and take its refcount
  - !10237  ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
  - ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
  - !9915  powerpc/pseries: Enforce hcall result buffer validity and size
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - !10148  fs/9p: fix uninitialized values during inode evict
  - fs/9p: fix uninitialized values during inode evict
  - !10056  io_uring/rsrc: don't lock while !TASK_RUNNING
  - io_uring/rsrc: don't lock while !TASK_RUNNING
  - !10226  cxl/region: Fix memregion leaks in devm_cxl_add_region()
  - cxl/region: Fix memregion leaks in devm_cxl_add_region()
  - !10177  ima: Fix use-after-free on a dentry's dname.name
  - ima: Fix use-after-free on a dentry's dname.name
  - !5262 [OLK-6.6]HYGON: Support Hygon DCU passthrough to VMs
  - x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default
  - drm/hygon: Add support to passthrough Hygon DCU to virtual machine
  - !10220  bpf: Fix overrunning reservations in ringbuf
  - bpf: Fix overrunning reservations in ringbuf
  - !10219  CVE-2024-35931
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - !10167  CVE-2024-36022
  - drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
  - drm/amdgpu: move the drm client creation behind drm device registration
  - drm/amdkfd: init drm_client with funcs hook
  - drm/amdkfd: Export DMABufs from KFD using GEM handles
  - !9598  fpga: manager: add owner module and take its refcount
  - fpga: manager: add owner module and take its refcount
  - !10139 [sync] PR-10095:  CVE-2024-40968
  - MIPS: Octeon: Add PCIe link status check
  - !10044  btrfs: fix CVE-2024-39496
  - btrfs: zoned: fix use-after-free due to race with dev replace
  - btrfs: zoned: factor out DUP bg handling from btrfs_load_block_group_zone_info
  - btrfs: zoned: factor out single bg handling from btrfs_load_block_group_zone_info
  - btrfs: zoned: factor out per-zone logic from btrfs_load_block_group_zone_info
  - btrfs: zoned: introduce a zone_info struct in btrfs_load_block_group_zone_info
  - !10114 v2  ecryptfs: Fix buffer size for tag 66 packet
  - ecryptfs: Fix buffer size for tag 66 packet
  - !10133  ALSA: timer: Set lower bound of start tick time
  - ALSA: timer: Set lower bound of start tick time
  - !10115  efi/unaccepted: touch soft lockup during memory accept
  - efi/unaccepted: touch soft lockup during memory accept
  - !10131  kunit/fortify: Fix mismatched kvalloc()/vfree() usage
  - kunit/fortify: Fix mismatched kvalloc()/vfree() usage
  - !10132  wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
  - wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
  - !10188  Part of "mm: mapcount for large folios + page_mapcount() cleanups"
  - mm/rmap: add fast-path for small folios when adding/removing/duplicating
  - mm/rmap: always inline anon/file rmap duplication of a single PTE
  - mm: allow for detecting underflows with page_mapcount() again
  - !10001  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !10176  f2fs: compress: don't allow unaligned truncation on released compress inode
  - f2fs: compress: don't allow unaligned truncation on released compress inode
  - !10106  platform/x86: x86-android-tablets: Unregister devices in reverse order
  - platform/x86: x86-android-tablets: Unregister devices in reverse order
  - !10109  tracing: Build event generation tests only as modules
  - tracing: Build event generation tests only as modules
  - !10166  drop_monitor: replace spin_lock by raw_spin_lock
  - drop_monitor: replace spin_lock by raw_spin_lock
  - !10161  RDMA/mlx5: Add check for srq max_sge attribute
  - RDMA/mlx5: Add check for srq max_sge attribute
  - !10111  drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  - !10155  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !10149  mips: bmips: BCM6358: make sure CBR is correctly set
  - mips: bmips: BCM6358: make sure CBR is correctly set
  - !10103 v2  fpga: region: add owner module and take its refcount
  - fpga: region: add owner module and take its refcount
  - !10097 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - !10021  drm/exynos/vidi: fix memory leak in .get_modes()
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - !10127  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - !10117  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10116  wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
  - !10017  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10051  tipc: force a dst refcount before doing decryption
  - tipc: force a dst refcount before doing decryption
  - !10102  vmxnet3: disable rx data ring on dma allocation failure
  - vmxnet3: disable rx data ring on dma allocation failure
  - !10093  drm/arm/malidp: fix a possible null pointer dereference
  - drm/arm/malidp: fix a possible null pointer dereference
  - !9989  io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - !10083  CVE-2024-40955
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
  - ext4: add positive int attr pointer to avoid sysfs variables overflow
  - ext4: add new attr pointer attr_mb_order
  - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - ext4: refactor out ext4_generic_attr_show()
  - ext4: refactor out ext4_generic_attr_store()
  - ext4: avoid overflow when setting values via sysfs
  - !10069  ALSA: Fix deadlocks with kctl removals at disconnection
  - ALSA: Fix deadlocks with kctl removals at disconnection
  - !10074  PCI: of_property: Return error for int_map allocation failure
  - PCI: of_property: Return error for int_map allocation failure
  - !10087  fix CVE-2024-40995
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - !10064  net/mlx5: Always stop health timer during driver removal
  - net/mlx5: Always stop health timer during driver removal
  - !9240 v2  cachefiles: introduce failover mechanism
  - cachefiles: make on-demand read killable
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - cachefiles: never get a new anonymous fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: add consistency check for copen/cread
  - cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove requests from xarray during flushing requests
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - cachefiles: add restore command to recover inflight ondemand read requests
  - cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - cachefiles: resend an open request if the read request's object is closed
  - cachefiles: extract ondemand info field from cachefiles_object
  - cachefiles: introduce object ondemand state
  - !9933  nvdimm: Backport some bugfixs
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: fix leak on dax_add_host() failure
  - !10038  media: v4l: async: Properly re-initialise notifier entry in unregister
  - media: v4l: async: Properly re-initialise notifier entry in unregister
  - !9970  CVE-2024-39503
  - netfilter: ipset: Fix suspicious rcu_dereference_protected()
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
  - netfilter: ipset: Add list flush to cancel_gc
  - !10011  xfs: fix mount hung while sb recover fail
  - xfs: fix mount hung while sb recover fail
  - !10050  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - !10006  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !9959  parisc: Try to fix random segmentation faults in package builds
  - parisc: Try to fix random segmentation faults in package builds
  - !10028  ipv6: prevent possible NULL dereference in rt6_probe()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - !10005  seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-37.0.0.44
changelog:
  - !10793  perf util: Add a function for replacing characters in a string
  - perf util: Add a function for replacing characters in a string
  - !10635  nvme: avoid double free special payload
  - nvme: avoid double free special payload
  - !10757  CVE-2024-41045
  - bpf: Defer work in bpf_timer_cancel_and_free
  - bpf: replace bpf_timer_cancel_and_free with a generic helper
  - bpf: replace bpf_timer_set_callback with a generic helper
  - !10729  Backport vmalloc 2 bugfix
  - mm: vmalloc: fix lockdep warning
  - mm/vmalloc: eliminated the lock contention from twice to once
  - !10746  irqchip/mbigen: Fix mbigen node address layout
  - irqchip/mbigen: Fix mbigen node address layout
  - !10533  backport mainline patchs
  - cpufreq: Allow drivers to advertise boost enabled
  - irqdomain: Fixed unbalanced fwnode get and put
  - !10518  xfs: add bounds checking to xlog_recover_process_data
  - xfs: add bounds checking to xlog_recover_process_data
  - !10622  leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - !10677  gve: Account for stopped queues when reading NIC stats
  - gve: Account for stopped queues when reading NIC stats
  - !10639  s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - !10653  virtcca cvm feature patches
  - gicv3: add lpi support for cvm guest
  - config: modify arm64 defconfig for virtcca cvm feature
  - mm: enable swiotlb alloc for cvm share mem
  - pmu: enable pmu phys irq inject for cvm
  - kvm: add virtcca cvm host feature
  - !10658  CVE-2024-35860
  - bpf: Fix a potential use-after-free in bpf_link_free()
  - Fix kabi breakage in struct bpf_link and bpf_link_ops
  - bpf: support deferring bpf_link dealloc to after RCU grace period
  - !10649  xfs: don't walk off the end of a directory data block
  - xfs: don't walk off the end of a directory data block
  - !10556  smart_grid: introducing rebuild_affinity_domain
  - smart_grid: introducing rebuild_affinity_domain
  - !10631  sched/deadline: Fix task_struct reference leak
  - sched/deadline: Fix task_struct reference leak
  - !10319  block: propagate partition scanning errors to the BLKRRPART ioctl
  - block: propagate partition scanning errors to the BLKRRPART ioctl
  - !10500  fix CVE-2024-42155
  - s390/pkey: Wipe copies of protected- and secure-keys
  - !10657 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.40-6.6.44 LTS Patches
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
  - nvme-pci: add missing condition check for existence of mapped data
  - io_uring: fix io_match_task must_hold
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
  - s390/cpum_cf: Fix endless loop in CF_DIAG event stop
  - s390/pci: Allow allocation of more than 1 MSI interrupt
  - s390/pci: Refactor arch_setup_msi_irqs()
  - ceph: fix incorrect kmalloc size of pagevec mempool
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
  - spi: spidev: add correct compatible for Rohm BH2228FV
  - ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
  - nvme-pci: Fix the instructions for disabling power management
  - spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
  - spi: microchip-core: fix init function not setting the master and motorola modes
  - spi: microchip-core: switch to use modern name
  - spi: microchip-core: only disable SPI controller when register value change requires it
  - spi: microchip-core: defer asserting chip select until just before write to TX FIFO
  - spi: microchip-core: fix the issues in the isr
  - ASoC: SOF: imx8m: Fix DSP control regmap retrieval
  - auxdisplay: ht16k33: Drop reference after LED registration
  - lirc: rc_dev_get_from_fd(): fix file leak
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  - apparmor: Fix null pointer deref when receiving skb during sock creation
  - mISDN: Fix a use after free in hfcmulti_tx()
  - bpf: Fix a segment issue when downgrading gso_size
  - net: nexthop: Initialize all fields in dumped nexthops
  - net: stmmac: Correct byte order of perfect_match
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts
  - ice: Fix recipe read procedure
  - net: bonding: correctly annotate RCU in bond_should_notify_peers()
  - ipv4: Fix incorrect source address in Record Route option
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
  - tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
  - bpf, events: Use prog to emit ksymbol event for main program
  - dma: fix call order in dmam_free_coherent
  - af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
  - libbpf: Fix no-args func prototype BTF dumping syntax
  - selftests/bpf: fexit_sleep: Fix stack allocation for arm64
  - kbuild: avoid build error when single DTB is turned into composite DTB
  - f2fs: fix to update user block counts in block_operations()
  - watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
  - watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
  - f2fs: fix start segno of large section
  - um: time-travel: fix signal blocking race/hang
  - um: time-travel: fix time-travel-start option
  - phy: zynqmp: Enable reference clock correctly
  - phy: cadence-torrent: Check return value on register read
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
  - jfs: Fix array-index-out-of-bounds in diFree
  - kdb: Use the passed prompt in kdb_position_cursor()
  - kdb: address -Wformat-security warnings
  - f2fs: fix to truncate preallocated blocks in f2fs_file_open()
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - PCI: Introduce cleanup helpers for device reference counts and locks
  - wifi: mac80211: track capability/opmode NSS separately
  - mm/mglru: fix ineffective protection calculation
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - minmax: scsi: fix mis-use of 'clamp()' in sr.c
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
  - video: logo: Drop full path of the input filename in generated file
  - lib/build_OID_registry: don't mention the full path of the script in output
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
  - drm/panfrost: Mark simple_ondemand governor as softdep
  - drm/etnaviv: don't block scheduler when GPU is still active
  - MIPS: Loongson64: Test register availability before use
  - MIPS: Loongson64: reset: Prioritise firmware service
  - MIPS: Loongson64: Remove memory node for builtin-dtb
  - MIPS: Loongson64: env: Hook up Loongsson-2K
  - MIPS: dts: loongson: Fix GMAC phy node
  - MIPS: ip30: ip30-console: Add missing include
  - MIPS: dts: loongson: Add ISA node
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings
  - dm-verity: fix dm_is_verity_target() when dm-verity is builtin
  - selftests/sigaltstack: Fix ppc64 GCC build
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - rtc: abx80x: Fix return value of nvmem callback on read
  - rtc: isl1208: Fix return value of nvmem callbacks
  - drm/i915/dp: Don't switch the LTTPR mode on an active link
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link
  - drm/amd/amdgpu: Fix uninitialized variable warnings
  - drm/amdgpu: reset vm state machine after gpu reset(vram lost)
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
  - drm/udl: Remove DRM_CONNECTOR_POLL_HPD
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
  - perf/x86/intel/pt: Fix a topa_entry base address calculation
  - perf/x86/intel/pt: Fix topa_entry base length
  - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
  - perf stat: Fix the hard-coded metrics calculation on the hybrid
  - perf: Fix event leak upon exit
  - scsi: qla2xxx: validate nvme_local_port correctly
  - scsi: qla2xxx: Complete command early within lock
  - scsi: qla2xxx: Fix flash read failure
  - scsi: qla2xxx: Reduce fabric scan duplicate code
  - scsi: qla2xxx: Use QP lock to search for bsg
  - scsi: qla2xxx: Fix for possible memory corruption
  - scsi: qla2xxx: Unable to act on RSCN for port online
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state
  - rtc: cmos: Fix return value of nvmem callbacks
  - mm/numa_balancing: teach mpol_to_str about the balancing mode
  - irqchip/imx-irqsteer: Handle runtime power management correctly
  - irqdomain: Fixed unbalanced fwnode get and put
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - devres: Fix devm_krealloc() wasting memory
  - ice: Add a per-VF limit on number of FDIR filters
  - gve: Fix an edge case for TSO skb validity check
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
  - kbuild: Fix '-S -c' in x86 stack protector scripts
  - decompress_bunzip2: fix rare decompression failure
  - mm: fix old/young bit handling in the faulting path
  - block: fix deadlock between sd_remove & sd_release
  - ubi: eba: properly rollback inside self_check_eba
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
  - f2fs: use meta inode for GC of COW file
  - f2fs: use meta inode for GC of atomic file
  - f2fs: fix return value of f2fs_convert_inline_inode()
  - f2fs: fix to don't dirty inode for readonly filesystem
  - f2fs: fix to force buffered IO on inline_data inode
  - ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
  - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - efi/libstub: Zero initialize heap allocated struct screen_info
  - hostfs: fix dev_t handling
  - dev/parport: fix the array out-of-bounds risk
  - binder: fix hang of unregistered readers
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
  - PCI: dw-rockchip: Fix initial PERST# GPIO value
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
  - parisc: Fix warning at drivers/pci/msi/msi.h:121
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos
  - tools/memory-model: Fix bug in lock.cat
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  - ALSA: usb-audio: Move HD Webcam quirk to the right place
  - ALSA: usb-audio: Fix microphone sound on HD webcam.
  - ALSA: ump: Force 1 Group for MIDI1 FBs
  - ALSA: ump: Don't update FB name for static blocks
  - KVM: nVMX: Request immediate exit iff pending nested event needs injection
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
  - media: ivsc: csi: don't count privacy on as error
  - media: uvcvideo: Fix integer overflow calculating timestamp
  - jbd2: avoid infinite transaction commit loop
  - jbd2: precompute number of transaction descriptor blocks
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal
  - media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
  - media: ivsc: csi: add separate lock for v4l2 control handler
  - leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
  - md/md-bitmap: fix writing non bitmap pages
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos
  - drivers: soc: xilinx: check return status of get_api_version()
  - wifi: rtw88: usb: Fix disconnection after beacon loss
  - wifi: mwifiex: Fix interface type change
  - selftests/landlock: Add cred_transfer test
  - trace/pid_list: Change gfp flags in pid_list_fill_irq()
  - io_uring: tighten task exit cancellations
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - m68k: amiga: Turn off Warp1260 interrupts during boot
  - udf: Avoid using corrupted block bitmap buffer
  - task_work: Introduce task_work_cancel() again
  - task_work: s/task_work_cancel()/task_work_cancel_func()/
  - cifs: mount with "unix" mount option for SMB1 incorrectly handled
  - cifs: fix reconnect with SMB1 UNIX Extensions
  - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path
  - apparmor: use kvfree_sensitive to free data->data
  - drm/amd/display: Check for NULL pointer
  - scsi: qla2xxx: Fix optrom version displayed in FDMI
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - io_uring/io-wq: limit retrying worker initialisation
  - ext2: Verify bitmap and itable block numbers before using them
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error
  - ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
  - media: venus: fix use after free in vdec_close
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
  - ata: libata-scsi: Fix offsets for the fixed format sense data
  - fuse: verify {g,u}id mount options correctly
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
  - NFSD: Support write delegations in LAYOUTGET
  - ipv6: take care of scope when choosing the src addr
  - ipv4: fix source address selection with route leak
  - kernel: rerun task_work while freezing in get_signal()
  - btrfs: fix extent map use-after-free when adding pages to compressed bio
  - af_packet: Handle outgoing VLAN packets without hardware offloading
  - net: netconsole: Disable target before netpoll cleanup
  - tick/broadcast: Make takeover of broadcast hrtimer reliable
  - dt-bindings: thermal: correct thermal zone node name limit
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - x86/efistub: Revert to heap allocated boot_params for PE entrypoint
  - x86/efistub: Avoid returning EFI_SUCCESS on error
  - mm/mglru: fix overshooting shrinker memory
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
  - mm/mglru: fix div-by-zero in vmpressure_calc_level()
  - mm/hugetlb: fix possible recursive locking detected warning
  - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
  - landlock: Don't lose track of restrictions on cred_transfer
  - LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
  - sbitmap: use READ_ONCE to access map->word
  - s390/dasd: fix error checks in dasd_copy_pair_store()
  - powerpc/8xx: fix size given to set_huge_pte_at()
  - fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
  - fs/ntfs3: Missed error return
  - fs/ntfs3: Fix the format of the "nocase" mount option
  - rtc: interface: Add RTC offset to alarm after fix-up
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
  - fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped THPs
  - fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
  - fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - pinctrl: renesas: r8a779g0: Fix TPU suffixes
  - pinctrl: renesas: r8a779g0: Fix TCLK suffixes
  - pinctrl: renesas: r8a779g0: FIX PWM suffixes
  - pinctrl: renesas: r8a779g0: Fix IRQ suffixes
  - pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
  - pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
  - pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
  - pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR
  - fs/ntfs3: Drop stray '' (backslash) in formatting string
  - fs/ntfs3: Correct undo if ntfs_create_inode failed
  - fs/ntfs3: Replace inode_trylock with inode_lock
  - pinctrl: freescale: mxs: Fix refcount of child
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: rockchip: update rk3308 iomux routes
  - fs/ntfs3: Add missing .dirty_folio in address_space_operations
  - fs/ntfs3: Fix getting file type
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
  - fs/ntfs3: Deny getting attr data block in compressed frame
  - fs/ntfs3: Fix transform resident to nonresident for compressed files
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
  - ipv4: Fix incorrect TOS in fibmatch route get reply
  - ipv4: Fix incorrect TOS in route get reply
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - gve: Fix XDP TX completion handling when counters overflow
  - ipvs: properly dereference pe in ip_vs_add_service
  - netfilter: nf_set_pipapo: fix initial map fill
  - netfilter: nft_set_pipapo: constify lookup fn args where possible
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - bnxt_re: Fix imm_data endianness
  - RDMA: Fix netdev tracker in ib_device_set_netdev
  - RDMA/core: Remove NULL check before dev_{put, hold}
  - iommu/vt-d: Fix identity map bounds in si_domain_init()
  - macintosh/therm_windtunnel: fix module unload.
  - powerpc/xmon: Fix disassembly CPU feature checks
  - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
  - PCI: qcom-ep: Disable resources unconditionally during PERST# assert
  - MIPS: Octeron: remove source file executable bit
  - clk: en7523: fix rate divider for slic and spi clocks
  - clk: qcom: Park shared RCGs upon registration
  - clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
  - crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
  - nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
  - net: missing check virtio
  - vhost/vsock: always initialize seqpacket_allow
  - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
  - PCI: endpoint: Clean up error handling in vpci_scan_bus()
  - ASoC: amd: Adjust error handling in case of absent codec device
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure
  - RDMA/device: Return error earlier if port in not valid
  - mtd: make mtd_test.c a separate module
  - ASoC: max98088: Check for clk_prepare_enable() error
  - powerpc/prom: Add CPU info to hardware description string later
  - hwrng: core - Fix wrong quality calculation at hw rng registration
  - scsi: lpfc: Fix a possible null pointer dereference
  - ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe()
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
  - RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c
  - RDMA/mlx4: Fix truncated output warning in mad.c
  - Input: qt1050 - handle CHIP_ID reading error
  - interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
  - clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
  - clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
  - clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
  - clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
  - clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
  - RDMA/cache: Release GID table even if leak is detected
  - usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and remove
  - ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
  - ASoc: tas2781: Enable RCA-based playback without DSP firmware download
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails
  - KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
  - KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  - iio: frequency: adrf6780: rm clk provider include
  - clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
  - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
  - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - PCI: keystone: Don't enable BAR 0 for AM654x
  - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
  - PCI: Fix resource double counting on remove & rescan
  - iio: Fix the sorting functionality in iio_gts_build_avail_time_table
  - SUNRPC: Fixup gss_status tracepoint error output
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init
  - leds: flash: leds-qcom-flash: Test the correct variable in init
  - ext4: avoid writing unitialized memory to disk in EA inodes
  - ext4: don't track ranges in fast_commit if inode has inlined data
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
  - xprtrdma: Fix rpcrdma_reqs_reset()
  - mfd: omap-usb-tll: Use struct_size to allocate tll
  - mfd: rsmu: Split core code into separate module
  - perf intel-pt: Fix exclude_guest setting
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size
  - media: venus: flush all buffers in output plane streamoff
  - drm/mediatek/dp: Fix spurious kfree()
  - drm/mediatek/dp: switch to ->edid_read callback
  - ext4: fix infinite loop when replaying fast_commit
  - drm/mediatek: Remove less-than-zero comparison of an unsigned value
  - Revert "leds: led-core: Fix refcount leak in of_led_get()"
  - drm/qxl: Add check for drm_cvt_mode
  - drm/etnaviv: fix DMA direction handling for cached RW buffers
  - perf report: Fix condition in sort__sym_cmp()
  - perf pmus: Fixes always false when compare duplicates aliases
  - perf test: Make test_arm_callgraph_fp.sh more robust
  - drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
  - drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - media: imx-jpeg: Drop initial source change event if capture has been setup
  - drm/mediatek: Add OVL compatible name for MT8195
  - drm/mediatek: Turn off the layers with zero width or height
  - drm/mediatek: Fix destination alpha error in OVL
  - drm/mediatek: Fix XRGB setting error in Mixer
  - drm/mediatek: Fix XRGB setting error in OVL
  - drm/mediatek: Use 8-bit alpha in ETHDR
  - drm/mediatek: Add missing plane settings when async update
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance
  - media: renesas: vsp1: Fix _irqsave and _irq mix
  - media: rcar-csi2: Cleanup subdevice in remove()
  - media: rcar-csi2: Disable runtime_pm in probe error
  - media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
  - drm: zynqmp_kms: Fix AUX bus not getting unregistered
  - drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
  - media: uvcvideo: Override default flags
  - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
  - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
  - media: uvcvideo: Disable autosuspend for Insta360 Link
  - media: i2c: imx219: fix msr access command sequence
  - saa7134: Unchecked i2c_transfer function result fixed
  - ipmi: ssif_bmc: prevent integer overflow on 32bit systems
  - x86/shstk: Make return uprobe work with shadow stack
  - media: mediatek: vcodec: Handle invalid decoder vsi
  - s390/uv: Don't call folio_wait_writeback() without a folio reference
  - s390/mm: Convert gmap_make_secure to use a folio
  - s390/mm: Convert make_page_secure to use a folio
  - media: v4l: async: Fix NULL pointer dereference in adding ancillary links
  - media: i2c: Fix imx412 exposure control
  - media: imon: Fix race getting ictx->lock
  - media: pci: ivtv: Add check for DMA map result
  - drm/bridge: it6505: fix hibernate to resume no display issue
  - drm/bridge: Fixed a DP link training bug
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
  - drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better
  - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
  - drm/amdgpu: Fix memory range calculation
  - drm/amd/pm: Fix aldebaran pcie speed reporting
  - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
  - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
  - drm/amdkfd: Fix CU Masking for GFX 9.4.3
  - drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline
  - drm/rockchip: vop2: Fix the port mux of VP2
  - net: bridge: mst: Check vlan state for egress decision
  - xdp: fix invalid wait context of page_pool_destroy()
  - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
  - Bluetooth: btintel: Refactor btintel_set_ppag()
  - Bluetooth: hci_bcm4377: Use correct unit for timeouts
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - bpf: annotate BTF show functions with __printf
  - selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of loops
  - selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
  - selftests/resctrl: Move run_benchmark() to a more fitting file
  - selftests/bpf: Close obj in error path in xdp_adjust_tail
  - selftests/bpf: Null checks for links in bpf_tcp_ca
  - selftests/bpf: Close fd in error path in drop_on_reuseport
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers
  - wifi: virt_wifi: don't use strlen() in const context
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - xfrm: call xfrm_dev_policy_delete when kill policy
  - xfrm: fix netdev reference count imbalance
  - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
  - perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
  - perf: Fix default aux_watermark calculation
  - perf: Prevent passing zero nr_pages to rb_alloc_aux()
  - perf: Fix perf_aux_size() for greater-than 32-bit size
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
  - bpftool: Mount bpffs when pinmaps path not under the bpffs
  - wifi: rtl8xxxu: 8188f: Limit TX power index
  - wifi: rtw89: 8852b: fix definition of KIP register number
  - netfilter: nf_tables: rise cap on SELinux secmark context
  - ipvs: Avoid unnecessary calls to skb_is_gso_sctp
  - libbpf: Checking the btf_type kind when fixing variable offsets
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
  - net: fec: Refactor: #define magic constants
  - udf: Fix bogus checksum computation in udf_rename()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
  - jump_label: Fix concurrency issues in static_key_slow_dec()
  - perf/x86: Serialize set_attr_rdpmc()
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - lib: objagg: Fix general protection fault
  - udf: Fix lock ordering in udf_evict_inode()
  - selftests/bpf: Check length of recv in test_sockmap
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
  - tcp: fix races in tcp_v[46]_err()
  - tcp: fix race in tcp_write_err()
  - tcp: add tcp_done_with_error() helper
  - wifi: ath12k: fix wrong definition of CE ring's base address
  - wifi: ath11k: fix wrong definition of CE ring's base address
  - wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights
  - wifi: ath12k: fix firmware crash during reo reinject
  - wifi: ath12k: fix invalid memory access while processing fragmented packets
  - wifi: ath12k: change DMA direction while mapping reinjected packets
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
  - selftests/bpf: Fix prog numbers in test_sockmap
  - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
  - wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
  - wifi: ath12k: Correct 6 GHz frequency value in rx status
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
  - firmware: turris-mox-rwtm: Initialize completion before mailbox
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters
  - vmlinux.lds.h: catch .bss..L* sections into BSS")
  - ARM: spitz: fix GPIO assignment for backlight
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg()
  - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems
  - arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
  - arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
  - arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
  - x86/xen: Convert comma to semicolon
  - arm64: dts: imx8mp: Fix pgc vpu locations
  - arm64: dts: imx8mp: add HDMI power-domains
  - arm64: dts: imx8mp: Fix pgc_mlmix location
  - arm64: dts: imx8mp: Add NPU Node
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
  - arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
  - arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
  - arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
  - arm64: dts: amlogic: setup hdmi system clock
  - arm64: dts: amlogic: add power domain to hdmitx
  - arm64: dts: amlogic: gx: correct hdmi clocks
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
  - arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate` mismatch
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
  - arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for pp3300_mipibrdg
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
  - arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
  - arm64: dts: amlogic: sm1: fix spdif compatibles
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328
  - soc: qcom: pdr: fix parsing of domains lists
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
  - arm64: dts: qcom: qdu1000: Add secure qfprom node
  - arm64: dts: qcom: qdu1000-idp: drop unused LLCC multi-ch-bit-off
  - arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
  - arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
  - arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable
  - OPP: ti: Fix ti_opp_supply_probe wrong return values
  - cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
  - arm64: dts: qcom: qrb4210-rb2: make L9A always-on
  - ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
  - ARM: dts: sunxi: remove duplicated entries in makefile
  - soc: xilinx: rename cpu_number1 to dummy_cpu_number
  - arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
  - arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
  - arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
  - arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
  - arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
  - soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
  - arm64: dts: qcom: msm8998: enable adreno_smmu by default
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
  - arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
  - arm64: dts: qcom: sm8450: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8350: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings
  - arm64: dts: qcom: sm6350: add power-domain to UFS PHY
  - arm64: dts: qcom: sm6115: add power-domain to UFS PHY
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY
  - arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
  - arm64: dts: qcom: sc8180x: switch UFS QMP PHY to new style of bindings
  - arm64: dts: qcom: sc8180x: Correct PCIe slave ports
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms
  - hwmon: (max6697) Fix underflow when writing limit attributes
  - pwm: atmel-tcb: Fix race condition and convert to guards
  - drm/meson: fix canvas release in bind function
  - nvmet-auth: fix nvmet_auth hash error handling
  - pwm: stm32: Always do lazy disabling
  - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
  - block/mq-deadline: Fix the tag reservation code
  - block: Call .limit_depth() after .hctx has been set
  - hwmon: (adt7475) Fix default duty on fan is disabled
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
  - x86/pci/xen: Fix PCIBIOS_* return code handling
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
  - x86/of: Return consistent error type from x86_of_pci_irq_enable()
  - hfsplus: fix to avoid false alarm of circular locking
  - x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
  - block: initialize integrity buffer to zero before writing it to media
  - ubd: untagle discard vs write zeroes not support handling
  - ubd: refactor the interrupt handler
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version
  - md: fix deadlock between mddev_suspend and flush bio
  - rcu/tasks: Fix stale task snaphot for Tasks Trace
  - EDAC, i10nm: make skx_common.o a separate module
  - spi: atmel-quadspi: Add missing check for clk_prepare
  - spi: spi-microchip-core: Fix the number of chip selects supported
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
  - ALSA: seq: ump: Skip useless ports for static blocks
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
  - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
  - jfs: don't walk off the end of ealist
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume()
  - wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL
  - wifi: mac80211: disable softirqs for queued frame handling
  - wifi: cfg80211: wext: set ssids=NULL for passive scans
  - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo
  - mm: page_ref: remove folio_try_get_rcu()
  - ARM: 9324/1: fix get_user() broken with veneer
  - cifs: fix noisy message on copy_file_range
  - ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE
  - spi: mux: set ctlr->bits_per_word_mask
  - selftests/bpf: Extend tcx tests to cover late tcx_entry release
  - hfsplus: fix uninit-value in copy_name
  - selftests/vDSO: fix clang build errors and warnings
  - selftest/timerns: fix clang build failures for abs() calls
  - ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES
  - ksmbd: return FILE_DEVICE_DISK instead of super magic
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
  - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus
  - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK
  - fs: better handle deep ancestor chains in is_subdir()
  - drm/radeon: check bo_va->bo is non-NULL before using it
  - drm/amd/display: Fix refresh rate range for some panel
  - drm/amd/display: Account for cursor prefetch BW in DML1 mode support
  - drm/amd/display: Add refresh rate range check
  - erofs: ensure m_llen is reset to 0 if metadata is invalid
  - Bluetooth: btnxpuart: Enable Power Save feature on startup
  - tee: optee: ffa: Fix missing-field-initializers warning
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
  - net: usb: qmi_wwan: add Telit FN912 compositions
  - ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
  - ALSA: PCM: Allow resume only for suspended streams
  - ibmvnic: Add tx check to prevent skb leak
  - btrfs: qgroup: fix quota root leak after quota disable failure
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
  - platform/x86: lg-laptop: Change ACPI device id
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button
  - platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources
  - s390/sclp: Fix sclp_init() cleanup on failure
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
  - can: kvaser_usb: fix return value for hif_usb_send_regout
  - Input: ads7846 - use spi_device_id table
  - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA.
  - ASoC: rt722-sdca-sdw: add debounce time for type detection
  - ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback
  - ASoC: ti: omap-hdmi: Fix too long driver name
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config
  - ALSA: dmaengine: Synchronize dma channel after drop()
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium
  - Input: xpad - add support for ASUS ROG RAIKIRI PRO
  - ASoC: rt722-sdca-sdw: add silence detection register as volatile
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table
  - Input: elantech - fix touchpad state on resume for Lenovo N24
  - mips: fix compat_sys_lseek syscall
  - ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE
  - drm/amdgpu: Indicate CU havest info to CP
  - selftests: openvswitch: Set value to nla flags.
  - cpumask: limit FORCE_NR_CPUS to just the UP case
  - spi: Fix OCTAL mode support
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5
  - ALSA: hda: cs35l56: Fix lifecycle of codec pointer
  - nvmet: always initialize cqe.result
  - nvme: avoid double free special payload
  - drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time
  - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN
  - drm/exynos: dp: drop driver owner initialization
  - iomap: Fix iomap_adjust_read_range for plen calculation
  - mei: demote client disconnect warning on suspend to debug
  - fs/file: fix the check in find_next_fd()
  - nfs: don't invalidate dentries on transient errors
  - nfs: Avoid flushing many pages with NFS_FILE_SYNC
  - nfs: propagate readlink errors in nfs_symlink_filler
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116
  - input: Add support for "Do Not Disturb"
  - input: Add event code for accessibility key
  - kconfig: remove wrong expr_trans_bool()
  - kconfig: gconf: give a proper initial state to the Save button
  - ila: block BH in ila_output()
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  - Input: silead - Always support 10 fingers
  - of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw()
  - selftests/futex: pass _GNU_SOURCE without a value to the compiler
  - selftests/openat2: Fix build warnings on ppc64
  - selftests: cachestat: Fix build warnings on ppc64
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
  - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
  - wifi: iwlwifi: mvm: handle BA session teardown in RF-kill
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
  - wifi: iwlwifi: mvm: remove stale STA link data during restart
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
  - wifi: cfg80211: fix 6 GHz scan request building
  - wifi: mac80211: handle tasklet frames before stopping
  - wifi: mac80211: apply mcast rate only if interface is up
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler
  - ACPI: EC: Abort address space access upon error
  - efi/libstub: zboot.lds: Discard .discard sections
  - scsi: qedf: Set qed_slowpath_params to zero before use
  - scsi: qedf: Wait for stag work during unload
  - scsi: qedf: Don't process stag work during unload and recovery
  - scsi: sr: Fix unintentional arithmetic wraparound
  - scsi: core: alua: I/O errors for ALUA state transitions
  - filelock: Remove locks reliably when fcntl/close race is detected
  - i2c: rcar: fix error code in probe()
  - kbuild: Make ld-version.sh more robust against version string changes
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation
  - x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
  - x86/entry: Rename ignore_sysret()
  - i2c: rcar: clear NO_RXDMA flag after resetting
  - i2c: testunit: avoid re-issued work after read message
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets
  - i2c: rcar: introduce Gen4 devices
  - i2c: rcar: reset controller is mandatory for Gen3+
  - i2c: mark HostNotify target address as used
  - i2c: rcar: bring hardware to known state when probing
  - btrfs: tree-checker: add type and sequence check for inline backrefs
  - ext4: avoid ptr null pointer dereference
  - nilfs2: fix kernel bug on rename operation of broken directory
  - selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet
  - mm/shmem: disable PMD-sized page cache if needed
  - misc: fastrpc: Restrict untrusted app to attach to privileged PD
  - misc: fastrpc: Fix ownership reassignment of remote heap
  - misc: fastrpc: Fix memory leak in audio daemon attach operation
  - misc: fastrpc: Copy the complete capability structure to user
  - misc: fastrpc: Avoid updating PD type for capability request
  - misc: fastrpc: Fix DSP capabilities request
  - wireguard: send: annotate intentional data race in checking empty queue
  - wireguard: queueing: annotate intentional data race in cpu round robin
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
  - cpufreq: Allow drivers to advertise boost enabled
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
  - Fix userfaultfd_api to return EINVAL as expected
  - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
  - ALSA: hda/realtek: Enable Mute LED on HP 250 G7
  - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
  - tty: serial: ma35d1: Add a NULL check for of_node
  - platform/x86: toshiba_acpi: Fix array out-of-bounds access
  - nvmem: core: only change name to fram for current attribute
  - nvmem: meson-efuse: Fix return value of nvmem callbacks
  - nvmem: rmem: Fix return value of rmem_read()
  - arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
  - arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer
  - iio: trigger: Fix condition for own trigger
  - ksmbd: discard write access to the directory open
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
  - mm/filemap: skip to create PMD-sized page cache if needed
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask
  - s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
  - xhci: always resume roothubs if xHC was reset during resume
  - hpet: Support 32-bit userspace
  - misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - usb: dwc3: pci: add support for the Intel Panther Lake
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
  - USB: serial: mos7840: fix crash on resume
  - USB: serial: option: add Rolling RW350-GL variants
  - USB: serial: option: add Netprisma LCUK54 series modules
  - USB: serial: option: add support for Foxconn T99W651
  - USB: serial: option: add Fibocom FM350-GL
  - USB: serial: option: add Telit FN912 rmnet compositions
  - USB: serial: option: add Telit generic core-dump composition
  - net: ks8851: Fix potential TX stall after interface reopen
  - net: ks8851: Fix deadlock with the SPI chip variant
  - Revert "sched/fair: Make sure to try to detach at least one movable task"
  - cifs: fix setting SecurityFlags to true
  - octeontx2-af: fix issue with IPv4 match for RSS
  - octeontx2-af: fix issue with IPv6 ext match for RSS
  - octeontx2-af: fix detection of IP layer
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox
  - octeontx2-af: replace cpt slot with lf id on reg write
  - i40e: fix: remove needless retries of NVM update
  - ARM: davinci: Convert comma to semicolon
  - ASoC: SOF: Intel: hda: fix null deref on system suspend entry
  - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
  - firmware: cs_dsp: Validate payload length before processing block
  - firmware: cs_dsp: Return error if block header overflows file
  - arm64: dts: qcom: sc8180x: Fix LLCC reg property again
  - s390: Mark psw in __load_psw_mask() as __unitialized
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - ethtool: netlink: do not return SQI value if link is down
  - net: ethernet: mtk-star-emac: set mac_managed_pm when probing
  - bpf: Fail bpf_timer_cancel when callback is being cancelled
  - bpf: replace bpf_timer_init with a generic helper
  - bpf: make timer data struct more generic
  - bpf: fix order of args in call to bpf_map_kvcalloc
  - i40e: Fix XDP program unloading while removing the driver
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
  - net: phy: microchip: lan87xx: reinit PHY after cable test
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit
  - net: bcmasp: Fix error code in probe()
  - vfs: don't mod negative dentry count when on shrinker list
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
  - dsa: lan9303: Fix mapping between DSA port number and PHY address
  - cachefiles: add missing lock protection when polling
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - cachefiles: wait for ondemand_object_worker to finish when dropping object
  - cachefiles: cancel all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
  - mm: prevent derefencing NULL ptr in pfn_section_valid()
  - Compiler Attributes: Add __uninitialized macro
  - !10610  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10599  ppp: reject claimed-as-LCP but actually malformed packets
  - ppp: reject claimed-as-LCP but actually malformed packets
  - !10539  tun: add missing verification for short frame
  - tun: add missing verification for short frame
  - !10538  tap: add missing verification for short frame
  - tap: add missing verification for short frame
  - !10555  skmsg: Skip zero length skb in sk_msg_recvmsg
  - skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10596  net: ethernet: lantiq_etop: fix double free in detach
  - net: ethernet: lantiq_etop: fix double free in detach
  - !10517  mm/dynamic_pool: two bugfix about THP and migration
  - mm/dynamic_pool: check page_from_dynamic_pool() on migration
  - mm/dynamic_pool: replace task_in_dynamic_pool() with mm_in_dynamic_pool()
  - !10579  Fix CVE-2024-41062
  - Bluetooth: Fix usage of __hci_cmd_sync_status
  - Bluetooth: L2CAP: Fix deadlock
  - bluetooth/l2cap: sync sock recv cb and release
  - !10545  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - !10547  powerpc/eeh: avoid possible crash when edev->pdev changes
  - powerpc/eeh: avoid possible crash when edev->pdev changes
  - !10470  Make cpuset.cpus.exclusive independent of cpuset.cpus
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition
  - cgroup/cpuset: Documentation update for partition
  - !10443 v2  cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
  - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
  - !10351  bpf: Fix null-pointer-deref in resolve_prog_type()
  - selftests/bpf: Test for null-pointer-deref bugfix in resolve_prog_type()
  - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
  - !10401  firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
  - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
  - !10512  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - !10524  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10486  fix CVE-2024-42086
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - !10466  null_blk: fix validation of block size
  - null_blk: fix validation of block size
  - !10480  ALSA: emux: improve patch ioctl data validation
  - ALSA: emux: improve patch ioctl data validation
  - !10385  firmware: cs_dsp: Fix overflow checking of wmfw header
  - firmware: cs_dsp: Fix overflow checking of wmfw header
  - !10403  Fix CVE-2024-41069
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Do not assign fields that are already set
  - ASoC: topology: Fix references to freed memory
  - !10474  jffs2: Fix potential illegal address access in jffs2_free_inode
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - !10463  io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - !10456  NFSv4: Fix memory leak in nfs4_set_security_label
  - NFSv4: Fix memory leak in nfs4_set_security_label
  - !10450  fs/ntfs3: Validate ff offset
  - fs/ntfs3: Validate ff offset
  - !10394  filelock: Fix fcntl/close race recovery compat path
  - filelock: Fix fcntl/close race recovery compat path
  - !10496  PCI/MSI: Fix UAF in msi_capability_init
  - PCI/MSI: Fix UAF in msi_capability_init
  - !10380  filelock: fix potential use-after-free in posix_lock_inode
  - filelock: fix potential use-after-free in posix_lock_inode
  - !10378  fs/ntfs3: Add a check for attr_names and oatbl
  - fs/ntfs3: Add a check for attr_names and oatbl
  - !10491  Bluetooth: ISO: Check socket flag instead of hcon
  - Bluetooth: ISO: Check socket flag instead of hcon
  - !10495  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10442  net/sched: Fix UAF when resolving a clash
  - net/sched: Fix UAF when resolving a clash
  - !10457  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - !10371  iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - !10228  PCI/ROM: Fix PCI ROM header check bug
  - PCI/ROM: Fix PCI ROM header check bug
  - !10416 [sync] PR-10408:  iommu/arm-smmu-v3: Fix the compile warning
  - iommu/arm-smmu-v3: Fix the compile warning
  - !9824 fix CVE-2024-39486
  - drm/drm_file: Fix pid refcounting race
  - !10388  ovl: simplify ovl_parse_param_lowerdir()
  - ovl: ovl_parse_param_lowerdir: Add missed '
  - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir
  - ovl: pass string to ovl_parse_layer()
  - !10507 Backport 6.6.35-40 LTS patches from upstream
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB"
  - nilfs2: fix incorrect inode allocation from reserved inodes
  - null_blk: Do not allow runt zone with zone capacity smaller then zone size
  - drm/amdgpu: silence UBSAN warning
  - ALSA: ump: Set default protocol when not given explicitly
  - spi: cadence: Ensure data lines set to low during dummy-cycle period
  - nfc/nci: Add the inconsistency check between the input data length and count
  - kbuild: fix short log for AS in link-vmlinux.sh
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
  - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
  - regmap-i2c: Subtract reg size from max_write
  - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  - connector: Fix invalid conversion in cn_proc.h
  - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
  - nvme-multipath: find NUMA path only for online numa-node
  - vhost-scsi: Handle vhost_vq_work_queue failures for events
  - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
  - fs/ntfs3: Mark volume as dirty if xattr is broken
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
  - clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
  - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
  - media: dw2102: fix a potential buffer overflow
  - arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - net: stmmac: dwmac-qcom-ethqos: fix error array size
  - mtd: rawnand: rockchip: ensure NVDDR timings are rejected
  - mtd: rawnand: Bypass a couple of sanity checks during NAND identification
  - mtd: rawnand: Fix the nand_read_data_op() early check
  - mtd: rawnand: Ensure ECC configuration is propagated to upper layers
  - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
  - powerpc/pseries: Fix scv instruction crash with kexec
  - clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
  - clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
  - drm: panel-orientation-quirks: Add quirk for Valve Galileo
  - drm/amdgpu/atomfirmware: silence UBSAN warning
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - fsnotify: Do not generate events for O_PATH file descriptors
  - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - Bluetooth: hci_bcm4377: Fix msgid release
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - btrfs: fix adding block group to a reclaim list and the unused list during reclaim
  - mm: avoid overflows in dirty throttling logic
  - mm: optimize the redundant loop of mm_update_owner_next()
  - nilfs2: add missing check for inode numbers on directory entries
  - nilfs2: fix inode number range checks
  - Revert "igc: fix a log entry using uninitialized netdev"
  - platform/x86: toshiba_acpi: Fix quickstart quirk handling
  - cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
  - gpiolib: of: add polarity quirk for TSC2005
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - selftests: make order checking verbose in msg_zerocopy selftest
  - selftests: fix OOM in msg_zerocopy selftest
  - netfilter: nf_tables: unconditionally flush pending work before notifier
  - riscv: kexec: Avoid deadlock in kexec crash path
  - wifi: wilc1000: fix ies_len type in connect path
  - gpio: mmio: do not calculate bgpio_bits via "ngpios"
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
  - net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
  - gpiolib: of: fix lookup quirk for MIPS Lantiq
  - e1000e: Fix S0ix residency on corporate systems
  - KVM: s390: fix LPSWEY handling
  - tcp_metrics: validate source addr length
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
  - Bluetooth: ISO: Check socket flag instead of hcon
  - Bluetooth: Ignore too large handle values in BIG
  - Bluetooth: hci_event: Fix setting of unicast qos interval
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
  - net/mlx5: E-switch, Create ingress ACL when needed
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
  - net: phy: phy_device: Fix PHY LED blinking code comment
  - mac802154: fix time calculation in ieee802154_configure_durations()
  - vhost_task: Handle SIGKILL by flushing work and exiting
  - vhost: Release worker mutex during flushes
  - vhost: Use virtqueue mutex for swapping worker
  - tools/power turbostat: Remember global max_die_id
  - cdrom: rearrange last_media_change check to avoid unintentional overflow
  - btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning
  - s390/pkey: Wipe sensitive data on failure
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - serial: imx: Raise TX trigger level to 8
  - scsi: mpi3mr: Sanitise num_phys
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - igc: fix a log entry using uninitialized netdev
  - selftests/net: fix uninitialized variables
  - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
  - kunit: Fix timeout message
  - orangefs: fix out-of-bounds fsid access
  - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
  - i2c: i801: Annotate apanel_addr as __ro_after_init
  - media: dvb-frontends: tda10048: Fix integer overflow
  - media: s2255: Use refcount_t instead of atomic_t for num_channels
  - media: dvb-frontends: tda18271c2dd: Remove casting during div
  - net: dsa: mv88e6xxx: Correct check for empty list
  - thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
  - wifi: mt76: mt7996: add sanity checks for background radar trigger
  - wifi: mt76: replace skb_put with skb_put_zero
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
  - Input: ff-core - prefer struct_size over open coded arithmetic
  - firmware: dmi: Stop decoding on broken entry
  - sctp: prefer struct_size over open coded arithmetic
  - riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
  - media: dw2102: Don't translate i2c read into write
  - drm/amdgpu: fix the warning about the expression (int)size - len
  - drm/amdgpu: fix uninitialized scalar variable warning
  - drm/amd/display: Fix uninitialized variables in DM
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - drm/amd/display: Check pipe offset before setting vblank
  - drm/amd/display: Check index msg_id before read or write
  - drm/amdgpu: Initialize timestamp for some legacy SOCs
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - drm/amdgpu: Fix uninitialized variable warnings
  - media: mediatek: vcodec: Only free buffer VA that is not NULL
  - crypto: aead,cipher - zeroize key buffer after use
  - RISC-V: KVM: Fix the initial sample period value
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - IB/core: Implement a limit on UMAD receive List
  - media: dvb-usb: dib0700_devices: Add missing release_firmware()
  - media: dvb: as102-fe: Fix as10x_register_addr packing
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - drm/lima: fix shared irq handling on driver remove
  - leds: an30259a: Use devm_mutex_init() for mutex initialization
  - locking/mutex: Introduce devm_mutex_init()
  - Revert "powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data"
  - Revert "powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]"
  - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  - serial: imx: only set receiver level if it is zero
  - cxl/region: Avoid null pointer dereference in region lookup
  - cxl/region: Move cxl_dpa_to_region() work to the region driver
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368
  - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
  - arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
  - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
  - arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on rk3399-gru
  - arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
  - arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
  - pwm: stm32: Refuse too small period requests
  - syscalls: fix sys_fanotify_mark prototype
  - syscalls: fix compat_sys_io_pgetevents_time64 usage
  - ftruncate: pass a signed offset
  - ata: libata-core: Fix double free on error
  - ata: ahci: Clean up sysfs file on error
  - can: mcp251xfd: fix infinite loop when xmit fails
  - batman-adv: Don't accept TT entries for out-of-spec VIDs
  - drm/amdgpu/atomfirmware: fix parsing of vram_info
  - drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - drm/i915/gt: Fix potential UAF by revoke of fence registers
  - drm/amdgpu: avoid using null object of framebuffer
  - drm/fbdev-dma: Only set smem_start is enable per module option
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - drm/drm_file: Fix pid refcounting race
  - hexagon: fix fadvise64_64 calling conventions
  - csky, hexagon: fix broken sys_sync_file_range
  - btrfs: zoned: fix initial free space detection
  - sh: rework sync_file_range ABI
  - kbuild: Install dtb files as 0644 in Makefile.dtbinst
  - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
  - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
  - PCI/MSI: Fix UAF in msi_capability_init
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - net: can: j1939: recover socket queue on CAN bus error during BAM transmission
  - net: can: j1939: Initialize unused data in j1939_send_one()
  - tty: mcf: MCF54418 has 10 UARTS
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665 G11.
  - serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
  - serial: core: introduce uart_port_tx_limited_flags()
  - serial: imx: set receiver level before starting uart
  - serial: 8250_omap: Implementation of Errata i2310
  - Revert "serial: core: only stop transmit when HW fifo is empty"
  - usb: dwc3: core: Workaround for CSR read timeout
  - usb: dwc3: core: Add DWC31 version 2.00a controller
  - usb: ucsi: stm32: fix command completion handling
  - usb: typec: ucsi: glink: fix child node release in probe function
  - usb: gadget: aspeed_udc: fix device address configuration
  - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - usb: musb: da8xx: fix a resource leak in probe()
  - usb: gadget: printer: fix races against disable
  - usb: gadget: printer: SS+ support
  - net: usb: ax88179_178a: improve link status logs
  - iio: chemical: bme680: Fix sensor data read operation
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - iio: chemical: bme680: Fix calibration data variable
  - iio: chemical: bme680: Fix pressure value output
  - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
  - iio: adc: ad7266: Fix variable checking bug
  - ata,scsi: libata-core: Do not leak memory for ata_port struct members
  - ata: libata-core: Fix null pointer dereference on error
  - i2c: testunit: discard write requests while old command is running
  - i2c: testunit: don't erase registers after STOP
  - kbuild: Fix build target deb-pkg: ln: failed to create hard link
  - kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
  - counter: ti-eqep: enable clock at probe
  - iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
  - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  - mmc: sdhci: Do not invert write-protect twice
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
  - mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
  - mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
  - mm: fix incorrect vbq reference in purge_fragmented_block
  - nfs: drop the incorrect assertion in nfs_swap_rw()
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - pinctrl: qcom: spmi-gpio: drop broken pm8008 support
  - Revert "MIPS: pci: lantiq: restore reset gpio polarity"
  - parisc: use generic sys_fanotify_mark implementation
  - x86: stop playing stack games in profile_pc()
  - randomize_kstack: Remove non-functional per-arch entropy filtering
  - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
  - riscv: stacktrace: convert arch_stack_walk() to noinstr
  - drm/amdgpu: Fix pci state save during mode-1 reset
  - RISC-V: fix vector insn load/store width mask
  - gpio: davinci: Validate the obtained number of IRQs
  - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
  - nvme: fixup comment for nvme RDMA Provider Type
  - drm/radeon/radeon_display: Decrease the size of allocated memory
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush
  - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
  - irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for IRQ_LOONGARCH_CPU
  - media: dvbdev: Initialize sbuf
  - ALSA: emux: improve patch ioctl data validation
  - crypto: ecdh - explicitly zeroize private_key
  - net/dpaa2: Avoid explicit cpumask var allocation on stack
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - RDMA/restrack: Fix potential invalid address access
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
  - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
  - mtd: partitions: redboot: Added conversion of operands to a larger type
  - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
  - vduse: Temporarily fail if control queue feature requested
  - vduse: validate block features only with block devices
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]
  - powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data
  - net: mana: Fix possible double free in error handling path
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
  - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
  - powerpc: restore some missing spu syscalls
  - parisc: use correct compat recv/recvfrom syscalls
  - sparc: fix compat recv/recvfrom syscalls
  - sparc: fix old compat_sys_select()
  - net: dsa: microchip: fix wrong register write when masking interrupt
  - ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
  - Fix race for duplicate reqsk on identical SYN
  - btrfs: use NOFS context when getting inodes during logging and log replay
  - xdp: Remove WARN() from __xdp_reg_mem_model()
  - ice: Rebuild TC queues on VSI queue reconfiguration
  - net: dsa: microchip: use collision based back pressure mode
  - net: phy: micrel: add Microchip KSZ 9477 to the device table
  - ibmvnic: Free any outstanding tx skbs during scrq reset
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
  - openvswitch: get related ct labels from its master if it is not confirmed
  - net: dsa: microchip: fix initial port flush problem
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
  - ASoC: amd: acp: add a null check for chip_pdev structure
  - s390/pci: Add missing virt_to_phys() for directed DIBV
  - bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
  - bpf: Add missed var_off setting in set_sext32_default_val()
  - ASoC: q6apm-lpass-dai: close graph on prepare errors
  - workqueue: Increase worker desc's length to 32
  - ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
  - ASoC: atmel: convert not to use asoc_xxx()
  - ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
  - ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
  - wifi: mac80211: Use flexible array in struct ieee80211_tim_ie
  - selftests: mptcp: userspace_pm: fixed subtest names
  - selftests: mptcp: print_test out of verify_listener_events
  - MIPS: pci: lantiq: restore reset gpio polarity
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
  - pinctrl: rockchip: use dedicated pinctrl type for RK3328
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - Input: ili210x - fix ili251x_read_touch_data() return value
  - usb: typec: ucsi: Ack also failed Get Error commands
  - usb: typec: ucsi: Never send a lone connector change ack
  - iio: pressure: bmp280: Fix BMP580 temperature reading
  - iio: pressure: fix some word spelling errors
  - Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"
  - hid: asus: asus_report_fixup: fix potential read out of bounds
  - kprobe/ftrace: fix build error due to bad function definition
  - ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk
  - drm/amd/display: revert Exit idle optimizations before HDCP execution
  - LoongArch: Fix entry point in kernel image header
  - efi/loongarch: Directly position the loaded image file
  - vgacon: rework screen_info #ifdef checks
  - riscv: force PAGE_SIZE linear mapping if debug_pagealloc is enabled
  - riscv: Don't use PGD entries for the linear mapping
  - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
  - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
  - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - ocfs2: update inode fsync transaction id in ocfs2_unlink and ocfs2_link
  - ocfs2: convert to new timestamp accessors
  - wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor
  - perf script: Show also errors for --insn-trace option
  - perf: script: add raw|disasm arguments to --insn-trace option
  - spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
  - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
  - spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
  - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema
  - dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
  - i2c: ocores: set IACK bit after core is enabled
  - mm/page_table_check: fix crash on ZONE_DEVICE
  - tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
  - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default
  - efi/x86: Free EFI memory map only when installing a new one.
  - kcov: don't lose track of remote references during softirqs
  - gcov: add support for GCC 14
  - dt-bindings: dma: fsl-edma: fix dma-channels constraints
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - drm/i915/mso: using joiner is not possible with eDP MSO
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9
  - ALSA: hda/realtek: Limit mic boost on N14AP7
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
  - ovl: fix encoding fid for lower only root
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys
  - RDMA/mlx5: Remove extra unlock on error path
  - RDMA/rxe: Fix data copy for IB_SEND_INLINE
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
  - KVM: arm64: Disassociate vcpus from redistributor region on teardown
  - LoongArch: Fix multiple hardware watchpoint issues
  - LoongArch: Trigger user-space watchpoints correctly
  - LoongArch: Fix watchpoint setting error
  - cifs: fix typo in module parameter enable_gcm_256
  - scsi: ufs: core: Free memory allocated for model before reinit
  - btrfs: retry block group reclaim without infinite loop
  - net: do not leave a dangling sk pointer, when socket creation fails
  - net: usb: ax88179_178a: improve reset check
  - net: stmmac: Assign configured channel value to EXTTS event
  - locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc
  - arm64: defconfig: enable the vf610 gpio driver
  - ACPI: EC: Evaluate orphan _REG under EC device
  - RDMA/mana_ib: Ignore optional access flags for MRs
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init
  - firmware: psci: Fix return value from psci_system_suspend()
  - io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed
  - spi: spi-imx: imx51: revert burst length calculation back to bits_per_word
  - arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
  - arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
  - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix BT shutdown GPIO
  - arm64: dts: imx8mp: Fix TC9595 input clock on DH i.MX8M Plus DHCOM SoM
  - arm64: dts: imx8mp: Fix TC9595 reset GPIO on DH i.MX8M Plus DHCOM SoM
  - thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data
  - regulator: bd71815: fix ramp values
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy()
  - dmaengine: fsl-edma: avoid linking both modules
  - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
  - dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
  - dmaengine: ioatdma: Fix leaking on version mismatch
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined
  - RDMA/rxe: Fix responder length checking for UD request packets
  - spi: cs42l43: Correct SPI root clock speed
  - RDMA/bnxt_re: Fix the max msix vectors macro
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
  - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
  - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
  - octeontx2-pf: Fix linking objects into multiple modules
  - octeontx2-pf: Add error handling to VLAN unoffload handling
  - virtio_net: fixing XDP for fully checksummed packets handling
  - virtio_net: checksum offloading handling fix
  - net: stmmac: No need to calculate speed divider when offload is disabled
  - selftests: openvswitch: Use bash as interpreter
  - ptp: fix integer overflow in max_vclocks_store
  - sched: act_ct: add netns into the key of tcf_ct_flow_table
  - net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
  - net: lan743x: Support WOL at both the PHY and MAC appropriately
  - net: lan743x: disable WOL upon resume to restore full data path operation
  - qca_spi: Make interrupt remembering atomic
  - netns: Make get_net_ns() handle zero refcount net
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - ipv6: prevent possible NULL deref in fib6_nh_init()
  - bpf: Avoid splat in pskb_pull_reason
  - ALSA: hda: tas2781: Component should be unbound before deconstruction
  - ALSA: hda: cs35l56: Component should be unbound before deconstruction
  - cipso: fix total option length computation
  - net: mvpp2: use slab_build_skb for oversized frames
  - ice: avoid IRQ collision to fix init failure on ACPI S3 resume
  - ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
  - ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
  - MIPS: Routerboard 532: Fix vendor retry check code
  - ALSA: seq: ump: Fix missing System Reset message handling
  - PCI: Do not wait for disconnected devices when resuming
  - ACPI: EC: Install address space handler at the namespace root
  - usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
  - serial: exar: adding missing CTI and Exar PCI ids
  - f2fs: don't set RO when shutting down f2fs
  - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
  - udf: udftime: prevent overflow in udf_disk_stamp_to_time()
  - usb: typec: ucsi_glink: drop special handling for CCI_BUSY
  - usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380
  - Avoid hw_desc array overrun in dw-axi-dmac
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002
  - usb: gadget: uvc: configfs: ensure guid to be valid before set
  - kprobe/ftrace: bail out if ftrace was killed
  - power: supply: cros_usbpd: provide ID table for avoiding fallback match
  - platform/x86: p2sb: Don't init until unassigned resources have been assigned
  - powerpc/io: Avoid clang null pointer arithmetic warnings
  - media: mtk-vcodec: potential null pointer deference in SCP
  - media: intel/ipu6: Fix build with !ACPI
  - ALSA: hda/realtek: Add quirks for Lenovo 13X
  - drm/lima: mask irqs in timeout path before hard reset
  - drm/lima: add mask irq callback to gp and pp
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F
  - ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
  - platform/x86: toshiba_acpi: Add quirk for buttons on Z830
  - drm/amd/display: Exit idle optimizations before HDCP execution
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
  - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
  - HID: asus: fix more n-key report descriptors if n-key quirked
  - HID: Add quirk for Logitech Casa touchpad
  - net: dsa: realtek: keep default LED state in rtl8366rb
  - kselftest: arm64: Add a null pointer check
  - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module
  - scsi: qedi: Fix crash while reading debugfs attribute
  - ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets
  - af_packet: avoid a false positive warning in packet_setsockopt()
  - wifi: ath9k: work around memset overflow warning
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh
  - block/ioctl: prefer different overflow check
  - rcutorture: Fix invalid context warning when enable srcu barrier testing
  - rcutorture: Make stall-tasks directly exit when rcutorture tests end
  - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
  - io_uring/sqpoll: work around a potential audit memory leak
  - padata: Disable BH when taking works lock on MT path
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - i2c: designware: Fix the functionality flags of the slave-only interface
  - i2c: at91: Fix the functionality flags of the slave-only interface
  - misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()
  - serial: core: Add UPIO_UNKNOWN constant for unknown port type
  - device property: Implement device_is_big_endian()
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - remoteproc: k3-r5: Jump to error handling labels in start/stop errors
  - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
  - mm/huge_memory: don't unpoison huge_zero_folio
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - xfs: allow cross-linking special files without project quota
  - xfs: allow sunit mount option to repair bad primary sb stripe values
  - xfs: shrink failure needs to hold AGI buffer
  - xfs: fix SEEK_HOLE/DATA for regions with active COW extents
  - xfs: fix scrub stats file permissions
  - xfs: fix imprecise logic in xchk_btree_check_block_owner
  - pmdomain: ti-sci: Fix duplicate PD referrals
  - intel_th: pci: Add Lunar Lake support
  - intel_th: pci: Add Meteor Lake-S support
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support
  - drm/i915: Fix audio component initialization
  - drm/i915/dpt: Make DPT object unshrinkable
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - drm/i915/gt: Disarm breadcrumbs if engines are already idle
  - rtla/auto-analysis: Replace 	 with spaces
  - rtla/timerlat: Simplify "no value" printing on top
  - iio: invensense: fix interrupt timestamp alignment
  - iio: adc: axi-adc: make sure AXI clock is enabled
  - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
  - remoteproc: k3-r5: Wait for core0 power-up before powering up core1
  - dmaengine: axi-dmac: fix possible race in remove()
  - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
  - ocfs2: use coarse time for new created files
  - fs/proc: fix softlockup in __read_vmcore
  - knfsd: LOOKUP can return an illegal error value
  - spmi: hisi-spmi-controller: Do not override device identifier
  - dma-buf: handle testing kthreads creation failure
  - null_blk: Print correct max open zones limit in null_init_zoned_dev()
  - kheaders: explicitly define file modes for archived headers
  - tracing/selftests: Fix kprobe event name test for .isra. functions
  - riscv: fix overlap of allocated page and PTR_ERR
  - perf auxtrace: Fix multiple use of --itrace option
  - perf/core: Fix missing wakeup when waiting for context reference
  - x86/amd_nb: Check for invalid SMN reads
  - x86/kexec: Fix bug with call depth tracking
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
  - mptcp: pm: update add_addr counters after connect
  - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
  - ACPI: x86: Force StorageD3Enable on more products
  - drivers: core: synchronize really_probe() and dev_uevent()
  - iio: imu: inv_icm42600: delete unneeded update watermark call
  - iio: invensense: fix odr switching to same value
  - iio: dac: ad5592r: fix temperature channel scaling value
  - iio: adc: ad9467: fix scan type sign
  - x86/boot: Don't add the EFI stub to targets, again
  - ksmbd: fix missing use of get_write in in smb2_set_ea()
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
  - af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay
  - nvmet-passthru: propagate status from id override functions
  - block: fix request.queuelist usage in flush
  - block: sed-opal: avoid possible wrong address reference in read_sed_opal_key()
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters
  - gve: ignore nonrelevant GSO type bits when processing TSO headers
  - net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
  - scsi: ufs: core: Quiesce request queues before checking pending cmds
  - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking
  - x86/asm: Use %c/%n instead of %PATCHoperand
  - netfilter: nft_inner: validate mandatory meta and payload
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set
  - net dsa: qca8k: fix usages of device_get_named_child_node()
  - tcp: fix race in tcp_v6_syn_recv_sock()
  - drm/bridge/panel: Fix runtime warning on panel bridge release
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width
  - net: sfp: Always call `sfp_sm_mod_remove()` on remove
  - modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o
  - af_unix: Annotate data-race of sk->sk_state in unix_accept().
  - drm/vmwgfx: Don't memcmp equivalent pointers
  - drm/vmwgfx: Remove STDU logic from generic mode_valid function
  - drm/vmwgfx: 3D disabled should not effect STDU memory limits
  - drm/vmwgfx: Filter modes which exceed graphics memory
  - drm/vmwgfx: Refactor drm connector probing for display modes
  - io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()
  - iommu: Return right value in iommu_sva_bind_device()
  - iommu/amd: Fix sysfs leak in iommu init
  - HID: core: remove unnecessary WARN_ON() in implement()
  - gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
  - gpio: tqmx86: store IRQ trigger type and unmask status separately
  - gpio: tqmx86: introduce shadow register for GPIO output value
  - gpio: tqmx86: fix typo in Kconfig label
  - platform/x86: dell-smbios: Fix wrong token data in sysfs
  - drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation
  - nvme: fix nvme_pr_* status code parsing
  - selftests/tracing: Fix event filter test to retry up to 10 times
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED
  - SUNRPC: return proper error from gss_wrap_req_priv
  - NFSv4.1 enforce rootpath check in fs_location query
  - clk: sifive: Do not register clkdevs for PRCI clocks
  - selftests/ftrace: Fix to check required event file
  - cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
  - HID: nvidia-shield: Add missing check for input_ff_create_memless
  - powerpc/uaccess: Fix build errors seen with GCC 13/14
  - gve: Clear napi->skb before dev_kfree_skb_any()
  - scsi: sd: Use READ(16) when reading block zero on large capacity disks
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - scsi: mpi3mr: Fix ATA NCQ priority support
  - scsi: core: Disable CDL by default
  - thunderbolt: debugfs: Fix margin debugfs node creation condition
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host
  - xhci: Handle TD clearing for multiple streams case
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host
  - xhci: Set correct transferred length for cancelled bulk transfers
  - jfs: xattr: fix buffer overflow for invalid xattr
  - landlock: Fix d_parent walk
  - serial: port: Don't block system suspend even if bytes are left to xmit
  - tty: n_tty: Fix buffer offsets when lookahead is used
  - mei: me: release irq in mei_me_pci_resume error path
  - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
  - usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
  - USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - bpf: fix multi-uprobe PID filtering logic
  - eventfs: Update all the eventfs_inodes from the events descriptor
  - irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails
  - irqchip/riscv-intc: Introduce Andes hart-level interrupt controller
  - irqchip/riscv-intc: Allow large non-standard interrupt number
  - selftests/mm: compaction_test: fix bogus test success on Aarch64
  - selftests/mm: log a consistent test name for check_compaction
  - selftests/mm: conform test to TAP format output
  - memory-failure: use a folio in me_huge_page()
  - firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
  - ksmbd: use rwsem instead of rwlock for lease break
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
  - af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
  - af_unix: Annotate data-races around sk->sk_sndbuf.
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
  - af_unix: Annodate data-races around sk->sk_state for writers.
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
  - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config
  - ice: remove af_xdp_zc_qps bitmap
  - ice: fix iteration of TLVs in Preserved Fields Area
  - ptp: Fix error message on failed pin verification
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
  - net/mlx5: Stop waiting for PCI if pci channel is offline
  - mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - net: phy: Micrel KSZ8061: fix errata solution not taking effect problem
  - net/smc: avoid overwriting when adjusting sock bufsizes
  - octeontx2-af: Always allocate PF entries from low prioriy zone
  - net: tls: fix marking packets as decrypted
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  - ipv6: ioam: block BH from ioam6_output()
  - bpf: Store ref_ctr_offsets values in bpf_uprobe array
  - net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume
  - net/ncsi: Fix the multi thread manner of NCSI driver
  - net/ncsi: Simplify Kconfig/dts control flow
  - ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
  - ax25: Fix refcount imbalance on inbound connections
  - RISC-V: KVM: Fix incorrect reg_subtype labels in kvm_riscv_vcpu_set_reg_isa_ext function
  - RISC-V: KVM: No need to use mask when hart-index-bit is 0
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()
  - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
  - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
  - wifi: iwlwifi: mvm: set properly mac header
  - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
  - wifi: iwlwifi: mvm: don't initialize csa_work twice
  - wifi: cfg80211: pmsr: use correct nla_get_uX functions
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station
  - wifi: cfg80211: fully move wiphy work to unbound workqueue
  - !10369 Backport 6.6.33-34 LTS patches from upstream
  - openeuler_defconfig: add new config
  - selftests: net: more strict check in net_helper
  - powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
  - ALSA: seq: Fix incorrect UMP type for system messages
  - btrfs: fix leak of qgroup extent records after transaction abort
  - tracefs: Clear EVENT_INODE flag in tracefs_drop_inode()
  - eventfs: Keep the directories from having the same inode number as files
  - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
  - nfs: fix undefined behavior in nfs_block_bits()
  - EDAC/igen6: Convert PCIBIOS_* return codes to errnos
  - ALSA: ump: Don't accept an invalid UMP protocol number
  - ALSA: ump: Don't clear bank selection after sending a program change
  - i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
  - s390/cpacf: Make use of invalid opcode produce a link error
  - s390/cpacf: Split and rework cpacf query functions
  - parisc: Define sigset_t in parisc uapi header
  - parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
  - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
  - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
  - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
  - riscv: dts: starfive: Remove PMIC interrupt info for Visionfive 2 board
  - drm/amdkfd: handle duplicate BOs in reserve_bo_and_cond_vms
  - sparc: move struct termio to asm/termios.h
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read()
  - kdb: Merge identical case statements in kdb_read()
  - kdb: Fix console handling when editing and tab-completing commands
  - kdb: Use format-strings rather than '0' injection in kdb_read()
  - wifi: ath10k: fix QCOM_RPROC_COMMON dependency
  - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
  - selftests/mm: fix build warnings on ppc64
  - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
  - mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
  - mm: /proc/pid/smaps_rollup: avoid skipping vma after getting mmap_lock again
  - mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
  - mm/cma: drop incorrect alignment check in cma_init_reserved_mem
  - sparc64: Fix number of online CPUs
  - rtla/timerlat: Fix histogram report when a cpu count is 0
  - intel_th: pci: Add Meteor Lake-S CPU support
  - tpm_tis: Do *not* flush uninitialized work
  - kmsan: do not wipe out origin when doing partial unpoisoning
  - mm/ksm: fix ksm_pages_scanned accounting
  - net/ipv6: Fix route deleting failure when metric equals 0
  - scsi: core: Handle devices which return an unusually large VPD page count
  - HID: i2c-hid: elan: fix reset suspend current leakage
  - filemap: add helper mapping_max_folio_size()
  - kbuild: Remove support for Clang's ThinLTO caching
  - crypto: ecrdsa - Fix module auto-load on add_key
  - crypto: ecdsa - Fix module auto-load on add-key
  - clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs
  - LoongArch: Override higher address bits in JUMP_VIRT_ADDR
  - LoongArch: Add all CPUs enabled by fdt to NUMA node 0
  - KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
  - KVM: arm64: Fix AArch32 register narrowing on userspace write
  - Revert "drm/amdkfd: fix gfx_target_version for certain 11.0.3 devices"
  - drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
  - drm/amdgpu/atomfirmware: add intergrated info v2.3 table
  - drm/fbdev-generic: Do not set physical framebuffer address
  - mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA
  - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
  - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
  - mmc: sdhci-acpi: Sort DMI quirks alphabetically
  - mmc: sdhci: Add support for "Tuning Error" interrupts
  - mmc: core: Add mmc_gpiod_set_cd_config() function
  - media: v4l: async: Don't set notifier's V4L2 device if registering fails
  - media: v4l2-core: hold videodev_lock until dev reg, finishes
  - media: mxl5xx: Move xpt structures off stack
  - media: mc: mark the media devnode as registered from the, start
  - arm64: dts: ti: verdin-am62: Set memory size to 2gb
  - arm64: dts: hi3798cv200: fix the size of GICR
  - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
  - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
  - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
  - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
  - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - arm64: dts: qcom: qcs404: fix bluetooth device address
  - arm64: tegra: Correct Tegra132 I2C alias
  - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
  - soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
  - proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
  - fsverity: use register_sysctl_init() to avoid kmemleak warning
  - ata: pata_legacy: make legacy_exit() work again
  - wifi: rtw89: correct aSIFSTime for 6GHz band
  - bcache: fix variable length array abuse in btree_iter
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - drm/sun4i: hdmi: Move mode_set into enable
  - drm/sun4i: hdmi: Convert encoder to atomic
  - selftests: net: List helper scripts in TEST_FILES Makefile variable
  - selftests: net: included needed helper in the install targets
  - selftests/net: synchronize udpgro tests' tx and rx connection
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - erofs: avoid allocating DEFLATE streams before mounting
  - mptcp: fix full TCP keep-alive support
  - mptcp: cleanup SOL_TCP handling
  - mptcp: avoid some duplicate code in socket option handling
  - net: sfp-bus: fix SFP mode detect from bitrate
  - afs: Don't cross .backup mountpoint from backup volume
  - mmc: core: Do not force a retune before RPMB switch
  - riscv: stacktrace: fixed walk_stackframe()
  - riscv: prevent pt_regs corruption for secondary idle threads
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
  - f2fs: use f2fs_{err,info}_ratelimited() for cleanup
  - f2fs: write missing last sum blk of file pinning section
  - perf sched timehist: Fix -g/--call-graph option failure
  - media: vsp1: Remove unbalanced .s_stream(0) calls
  - nouveau: report byte usage in VRAM usage.
  - RDMA/bnxt_re: Fix the sparse warnings
  - perf evlist: Add perf_evlist__go_system_wide() helper
  - platform/x86/intel-uncore-freq: Don't present root domain on error
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
  - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
  - x86/pci: Skip early E820 check for ECAM region
  - x86/efistub: Omit physical KASLR when memory reservations exist
  - ALSA: seq: ump: Fix swapped song position pointer data
  - hwmon: (shtc1) Fix property misspelling
  - hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor
  - drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel
  - drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel
  - drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel
  - powerpc/pseries/lparcfg: drop error message from guest name lookup
  - ALSA: seq: Fix yet another spot for system message conversion
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - net: ena: Fix redundant device NUMA node override
  - net: ena: Reduce lines with longer column width boundary
  - net: dsa: microchip: fix RGMII error in KSZ DSA driver
  - spi: stm32: Don't warn about spurious interrupts
  - kheaders: use `command -v` to test for existence of `cpio`
  - drm/i915/gt: Fix CCS id's calculation for CCS mode setting
  - drm/i915/guc: avoid FIELD_PREP warning
  - kconfig: fix comparison to constant symbols, 'm', 'n'
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
  - netfilter: nft_fib: allow from forward/input without iif selector
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - netfilter: nft_payload: skbuff vlan metadata mangle support
  - net: ti: icssg-prueth: Fix start counter for ft1 filter
  - ALSA: seq: Don't clear bank selection at event -> UMP MIDI2 conversion
  - ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion
  - selftests: mptcp: join: mark 'fail' tests as flaky
  - selftests: mptcp: add ms units for tc-netem delay
  - selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky
  - ice: fix accounting if a VLAN already exists
  - net: micrel: Fix lan8841_config_intr after getting out of sleep mode
  - net:fec: Add fec_enet_deinit()
  - ASoC: cs42l43: Only restrict 44.1kHz for the ASP
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner
  - af_unix: Read sk->sk_hash under bindlock during bind().
  - af_unix: Annotate data-race around unix_sk(sk)->addr.
  - enic: Validate length of nl attributes in enic_set_vf_port
  - ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp
  - ALSA: core: Remove debugfs at disconnection
  - ALSA: jack: Use guard() for locking
  - bpf: Fix potential integer overflow in resolve_btfids
  - net/mlx5e: Fix UDP GSO for encapsulated packets
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion
  - net/mlx5e: Fix IPsec tunnel mode offload feature check
  - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
  - net/mlx5: Fix MTMP register capability offset in MCAM register
  - net/mlx5: Lag, do bond only if slaves agree on roce state
  - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
  - drm/amd/display: Enable colorspace property for MST connectors
  - nvmet: fix ns enable/disable possible hang
  - nvme-multipath: fix io accounting on failover
  - nvme-tcp: add definitions for TLS cipher suites
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - dma-mapping: benchmark: fix node id validation
  - dma-mapping: benchmark: fix up kthread-related error handling
  - kthread: add kthread_stop_put
  - netfilter: nft_payload: restore vlan q-in-q match support
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - kasan, fortify: properly rename memintrinsics
  - ice: Interpret .set_channels() input differently
  - drivers/xen: Improve the late XenStore init protocol
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - net: relax socket state check at accept time.
  - net: fec: avoid lock evasion when reading pps_enable
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI"
  - i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame
  - i3c: master: svc: return actual transfer data len
  - i3c: master: svc: rename read_len as actual_len
  - i3c: add actual_len in i3c_priv_xfer
  - net: lan966x: Remove ptp traps in case the ptp is not enabled.
  - rv: Update rv_en(dis)able_monitor doc to match kernel-doc
  - openvswitch: Set the skbuff pkt_type for proper pmtud support.
  - pNFS/filelayout: fixup pNfs allocation modes
  - regulator: tps6594-regulator: Correct multi-phase configuration
  - af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
  - regulator: tps6287x: Force writing VSEL bit
  - regulator: pickable ranges: don't always cache vsel
  - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
  - sunrpc: fix NFSACL RPC retry on soft mount
  - nfs: keep server info for remounts
  - NFSv4: Fixup smatch warning for ambiguous return
  - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
  - nfc: nci: Fix uninit-value in nci_rx_work
  - selftests: net: kill smcrouted in the cleanup logic in amt.sh
  - ipv6: sr: fix missing sk_buff release in seg6_input_core
  - net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y
  - perf/arm-dmc620: Fix lockdep assert in ->event_init()
  - xen/x86: add extra pages to unpopulated-alloc if available
  - regulator: bd71828: Don't overwrite runtime voltages
  - blk-cgroup: Properly propagate the iostat update up the hierarchy
  - blk-cgroup: fix list corruption from resetting io stat
  - drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations
  - nouveau: add an ioctl to report vram usage
  - nouveau: add an ioctl to return vram bar size.
  - ASoC: mediatek: mt8192: fix register configuration for tdm
  - ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
  - ALSA: hda: cs35l56: Initialize all ASP1 registers
  - ASoC: cs35l56: Fix to ensure ASP1 registers match cache
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
  - ASoC: tas2781: Fix a warning reported by robot kernel test
  - selftests/powerpc/dexcr: Add -no-pie to hashchk tests
  - Revert "drm/bridge: ti-sn65dsi83: Fix enable error path"
  - media: cec: core: avoid confusing "transmit timed out" message
  - media: cec: core: avoid recursive cec_claim_log_addrs
  - media: cec: cec-api: add locking in cec_release()
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  - media: sunxi: a83-mips-csi2: also select GENERIC_PHY
  - cxl/region: Fix cxlr_pmem leaks
  - cxl/trace: Correct DPA field masks for general_media & dram events
  - um: Fix the declaration of kasan_map_memory
  - um: Fix the -Wmissing-prototypes warning for get_thread_reg
  - um: Fix the -Wmissing-prototypes warning for __switch_mm
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
  - media: flexcop-usb: fix sanity check of bNumEndpoints
  - platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit()
  - tools/arch/x86/intel_sdsi: Fix meter_certificate decoding
  - tools/arch/x86/intel_sdsi: Fix meter_show display
  - tools/arch/x86/intel_sdsi: Fix maximum meter bundle length
  - media: mediatek: vcodec: fix possible unbalanced PM counter
  - media: mediatek: vcodec: add encoder power management helper functions
  - drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()
  - drm/amdgpu: init microcode chip name from ip versions
  - Input: cyapa - add missing input core locking to suspend/resume functions
  - drm/bridge: tc358775: fix support for jeida-18 and jeida-24
  - um: vector: fix bpfflash parameter evaluation
  - um: Add winch to winch_handlers before registering winch IRQ
  - um: Fix return value in ubd_init()
  - drm/meson: gate px_clk when setting rate
  - drm/mediatek: dp: Fix mtk_dp_aux_transfer return value
  - drm/msm/dpu: Always flush the slave INTF on the CTL
  - drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
  - media: ov2680: Do not fail if data-lanes property is absent
  - media: ov2680: Allow probing if link-frequencies is absent
  - media: ov2680: Clear the 'ret' variable on success
  - media: v4l: Don't turn on privacy LED if streamon fails
  - media: v4l2-subdev: Document and enforce .s_stream() requirements
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
  - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
  - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
  - mmc: sdhci_am654: Add OTAP/ITAP delay enable
  - mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel
  - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
  - mmc: sdhci_am654: Add tuning algorithm for delay chain
  - Input: ims-pcu - fix printf string overflow
  - dt-bindings: adc: axi-adc: add clocks property
  - dt-bindings: adc: axi-adc: update bindings for backend framework
  - eventfs: Have "events" directory get permissions from its parent
  - eventfs: Free all of the eventfs_inode after RCU
  - eventfs/tracing: Add callback for release of an eventfs_inode
  - eventfs: Create eventfs_root_inode to store dentry
  - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
  - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
  - misc/pvpanic-pci: register attributes via pci_driver
  - misc/pvpanic: deduplicate common code
  - iio: accel: mxc4005: Reset chip on probe() and resume()
  - iio: accel: mxc4005: allow module autoloading via OF compatible
  - eventfs: Do not differentiate the toplevel events directory
  - drm/amd/display: Revert Remove pixle rate limit for subvp
  - drm/amd/display: Remove pixle rate limit for subvp
  - dt-bindings: PCI: rockchip,rk3399-pcie: Add missing maxItems to ep-gpios
  - s390/boot: Remove alt_stfle_fac_list from decompressor
  - s390/ipl: Fix incorrect initialization of nvme dump block
  - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
  - s390/vdso: Use standard stack frame layout
  - s390/vdso: Generate unwind information for C modules
  - s390/vdso64: filter out munaligned-symbols flag for vdso
  - LoongArch: Fix callchain parse error with kernel tracepoint events again
  - perf tools: Add/use PMU reverse lookup from config to name
  - perf tools: Use pmus to describe type from attribute
  - perf pmu: "Compat" supports regular expression matching identifiers
  - perf pmu: Move pmu__find_core_pmu() to pmus.c
  - perf test: Add a test for strcmp_cpuid_str() expression
  - perf stat: Don't display metric header for non-leader uncore events
  - usb: fotg210: Add missing kernel doc description
  - f2fs: fix to add missing iput() in gc_data_segment()
  - perf daemon: Fix file leak in daemon_session__control
  - libsubcmd: Fix parse-options memory leak
  - serial: sh-sci: protect invalidating RXDMA on shutdown
  - f2fs: fix to release node block count in error path of f2fs_new_node_page()
  - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - f2fs: compress: fix error path of inc_valid_block_count()
  - f2fs: introduce get_available_block_count() for cleanup
  - f2fs: deprecate io_bits
  - f2fs: compress: fix to update i_compr_blocks correctly
  - perf symbols: Fix ownership of string in dso__load_vmlinux()
  - perf maps: Move symbol maps functions to maps.c
  - perf thread: Fixes to thread__new() related to initializing comm
  - perf report: Avoid SEGV in report__setup_sample_type()
  - perf ui browser: Avoid SEGV on title
  - f2fs: fix block migration when section is not aligned to pow2
  - f2fs: support file pinning for zoned devices
  - f2fs: kill heap-based allocation
  - f2fs: separate f2fs_gc_range() to use GC for a range
  - f2fs: use BLKS_PER_SEG, BLKS_PER_SEC, and SEGS_PER_SEC
  - f2fs: support printk_ratelimited() in f2fs_printk()
  - f2fs: Clean up errors in segment.h
  - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
  - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
  - dt-bindings: spmi: hisilicon,hisi-spmi-controller: fix binding references
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it
  - perf ui browser: Don't save pointer to stack memory
  - perf bench internals inject-build-id: Fix trap divide when collecting just one DSO
  - i2c: synquacer: Fix an error handling path in synquacer_i2c_probe()
  - i2c: cadence: Avoid fifo clear after start
  - ppdev: Add an error check in register_device
  - ppdev: Remove usage of the deprecated ida_simple_xx() API
  - stm class: Fix a double free in stm_register_device()
  - usb: gadget: u_audio: Clear uac pointer when freed.
  - dt-bindings: phy: qcom,usb-snps-femto-v2: use correct fallback for sc8180x
  - dt-bindings: phy: qcom,sc8280xp-qmp-ufs-phy: fix msm899[68] power-domains
  - watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe()
  - watchdog: bd9576: Drop "always-running" property
  - pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs
  - dt-bindings: pinctrl: mediatek: mt7622: fix array properties
  - VMCI: Fix an error handling path in vmci_guest_probe_device()
  - ovl: remove upper umask handling from ovl_create_upper()
  - leds: pwm: Disable PWM when going to suspend
  - pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()
  - perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer)
  - PCI: Wait for Link Training==0 before starting Link retrain
  - microblaze: Remove early printk call from cpuinfo-static.c
  - microblaze: Remove gcc flag for non existing early_printk.c file
  - udf: Convert udf_expand_file_adinicb() to use a folio
  - udf: Remove GFP_NOFS allocation in udf_expand_file_adinicb()
  - i915: make inject_virtual_interrupt() void
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - iio: adc: adi-axi-adc: only error out in major version mismatch
  - iio: adc: adi-axi-adc: move to backend framework
  - iio: adc: ad9467: convert to backend framework
  - iio: add the IIO backend framework
  - iio: buffer-dmaengine: export buffer alloc and free functions
  - iio: adc: adi-axi-adc: convert to regmap
  - iio: adc: ad9467: use chip_info variables instead of array
  - iio: adc: ad9467: use spi_get_device_match_data()
  - iio: pressure: dps310: support negative temperature values
  - perf test shell arm_coresight: Increase buffer size for Coresight basic tests
  - perf docs: Document bpf event modifier
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - riscv: dts: starfive: visionfive 2: Remove non-existing TDM hardware
  - iio: adc: stm32: Fixing err code to not indicate success
  - f2fs: fix to check pinfile flag in f2fs_move_file_range()
  - f2fs: fix to relocate check condition in f2fs_fallocate()
  - f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file()
  - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks()
  - perf bench uprobe: Remove lib64 from libc.so.6 binary path
  - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
  - dt-bindings: PCI: rcar-pci-host: Add optional regulators
  - perf record: Fix debug message placement for test consumption
  - perf record: Move setting tracking events before record__init_thread_masks()
  - perf evlist: Add evlist__findnew_tracking_event() helper
  - perf tests: Apply attributes to all events in object code reading test
  - perf tests: Make "test data symbol" more robust on Neoverse N1
  - arm64: dts: meson: fix S4 power-controller node
  - interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment
  - module: don't ignore sysfs_create_link() failures
  - serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
  - PCI: tegra194: Fix probe path for Endpoint mode
  - greybus: arche-ctrl: move device table to its right location
  - serial: max3100: Fix bitwise types
  - serial: max3100: Update uart_driver_registered on driver removal
  - perf annotate: Fix annotation_calc_lines() to pass correct address to get_srcline()
  - perf annotate: Use global annotation_options
  - perf top: Convert to the global annotation_options
  - perf report: Convert to the global annotation_options
  - perf annotate: Introduce global annotation_options
  - perf annotate: Split branch stack cycles information out of 'struct annotation_line'
  - perf machine thread: Remove exited threads by default
  - perf record: Lazy load kernel symbols
  - firmware: dmi-id: add a release callback function
  - dmaengine: idma64: Add check for dma_set_max_seg_size
  - soundwire: cadence: fix invalid PDI offset
  - perf stat: Do not fail on metrics on s390 z/VM systems
  - usb: typec: ucsi: simplify partner's PD caps registration
  - usb: typec: ucsi: always register a link to USB PD device
  - perf annotate: Get rid of duplicate --group option item
  - counter: linux/counter.h: fix Excess kernel-doc description warning
  - f2fs: fix to wait on page writeback in __clone_blkaddrs()
  - phy: qcom: qmp-combo: fix duplicate return in qmp_v4_configure_dp_phy
  - iio: core: Leave private pointer NULL when no private data supplied
  - perf probe: Add missing libgen.h header needed for using basename()
  - perf record: Delete session after stopping sideband thread
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
  - net: qrtr: ns: Fix module refcnt
  - selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval
  - tracing/user_events: Fix non-spaced field matching
  - tracing/user_events: Prepare find/delete for same name events
  - tracing/user_events: Allow events to persist for perfmon_capable users
  - RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw
  - RDMA/IPoIB: Fix format truncation compilation errors
  - selftests/kcmp: remove unused open mode
  - SUNRPC: Fix gss_free_in_token_pages()
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  - RDMA/bnxt_re: Adds MSN table capability for Gen P7 adapters
  - RDMA/bnxt_re: Update the HW interface definitions
  - RDMA/bnxt_re: Remove roundup_pow_of_two depth for all hardware queue resources
  - RDMA/bnxt_re: Refactor the queue index update
  - ext4: remove the redundant folio_wait_stable()
  - ext4: fix potential unnitialized variable
  - sunrpc: removed redundant procp check
  - ext4: avoid excessive credit estimate in ext4_tmpfile()
  - x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
  - clk: qcom: mmcc-msm8998: fix venus clock issue
  - clk: qcom: dispcc-sm8550: fix DisplayPort clocks
  - clk: qcom: dispcc-sm6350: fix DisplayPort clocks
  - clk: qcom: dispcc-sm8450: fix DisplayPort clocks
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
  - clk: renesas: r9a07g043: Add clock and reset entry for PLIC
  - clk: renesas: r8a779a0: Fix CANFD parent clock
  - IB/mlx5: Use __iowrite64_copy() for write combining stores
  - RDMA/rxe: Fix incorrect rxe_put in error path
  - RDMA/rxe: Allow good work requests to be executed
  - clk: qcom: clk-alpha-pll: remove invalid Stromer register offset
  - clk: rs9: fix wrong default value for clock amplitude
  - clk: mediatek: mt8365-mm: fix DPI0 parent
  - clk: mediatek: pllfh: Don't log error for missing fhctl node
  - RDMA/mlx5: Adding remote atomic access flag to updatable flags
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent
  - clk: samsung: exynosautov9: fix wrong pll clock id value
  - media: cadence: csi2rx: configure DPHY before starting source stream
  - drm/edid: Parse topology block for all DispID structure v1.x
  - drm/rockchip: vop2: Do not divide height twice for YUV
  - media: uvcvideo: Add quirk for Logitech Rally Bar
  - drm/mipi-dsi: use correct return type for the DSC functions
  - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
  - drm/bridge: anx7625: Update audio status while detecting
  - drm/panel: novatek-nt35950: Don't log an error when DSI host can't be found
  - drm/bridge: dpc3433: Don't log an error when DSI host can't be found
  - drm/bridge: tc358775: Don't log an error when DSI host can't be found
  - drm/bridge: lt9611uxc: Don't log an error when DSI host can't be found
  - drm/bridge: lt9611: Don't log an error when DSI host can't be found
  - drm/bridge: lt8912b: Don't log an error when DSI host can't be found
  - drm/bridge: icn6211: Don't log an error when DSI host can't be found
  - drm/bridge: anx7625: Don't log an error when DSI host can't be found
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
  - drm: vc4: Fix possible null pointer dereference
  - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - fbdev: sh7760fb: allow modular build
  - media: v4l2-subdev: Fix stream handling for crop API
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - media: dt-bindings: ovti,ov2680: Fix the power supply names
  - media: ipu3-cio2: Request IRQ earlier
  - drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected
  - drm/msm/dp: allow voltage swing / pre emphasis of 3
  - media: radio-shark2: Avoid led_names truncations
  - media: rcar-vin: work around -Wenum-compare-conditional warning
  - media: ngene: Add dvb_ca_en50221_init return value check
  - ASoC: Intel: avs: Test result of avs_get_module_entry()
  - ASoC: Intel: avs: Fix potential integer overflow
  - ASoC: Intel: avs: Fix ASRC module initialization
  - selftests: cgroup: skip test_cgcore_lesser_ns_open when cgroup2 mounted without nsdelegate
  - fbdev: sisfb: hide unused variables
  - ASoC: SOF: Intel: mtl: Implement firmware boot state check
  - ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed
  - ASoC: SOF: Intel: mtl: call dsp dump when boot retry fails
  - ASoC: SOF: Intel: lnl: Correct rom_status_reg
  - ASoC: SOF: Intel: mtl: Correct rom_status_reg
  - ASoC: SOF: Intel: pci-mtl: fix ARL-S definitions
  - ASoC: SOF: Intel: pci-mtl: use ARL specific firmware definitions
  - ASoC: Intel: common: add ACPI matching tables for Arrow Lake
  - powerpc/fsl-soc: hide unused const variable
  - drm/meson: vclk: fix calculation of 59.94 fractional rates
  - ASoC: kirkwood: Fix potential NULL dereference
  - fbdev: shmobile: fix snprintf truncation
  - mtd: rawnand: hynix: fixed typo
  - mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add()
  - ASoC: Intel: avs: ssm4567: Do not ignore route checks
  - ASoC: Intel: Disable route checks for Skylake boards
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD doesn't assert
  - drm/dp: Don't attempt AUX transfers when eDP panels are not powered
  - drm/lcdif: Do not disable clocks on already suspended hardware
  - dev_printk: Add and use dev_no_printk()
  - printk: Let no_printk() use _printk()
  - drm/omapdrm: Fix console with deferred ops
  - fbdev: Provide I/O-memory helpers as module
  - drm/omapdrm: Fix console by implementing fb_dirty
  - drm/ci: update device type for volteer devices
  - drm/ci: add subset-1-gfx to LAVA_TAGS and adjust shards
  - drm/ci: uprev mesa version: fix container build & crosvm
  - drm/bridge: Fix improper bridge init order with pre_enable_prev_first
  - Bluetooth: qca: Fix error code in qca_read_fw_build_info()
  - Bluetooth: compute LE flow credits based on recvbuf space
  - net: micrel: Fix receiving the timestamp in the frame for lan8841
  - mptcp: SO_KEEPALIVE: fix getsockopt support
  - riscv, bpf: make some atomic operations fully ordered
  - s390/bpf: Emit a barrier for BPF_FETCH instructions
  - net/mlx5: Reload only IB representors upon lag disable/enable
  - net/mlx5: Enable 4 ports multiport E-switch
  - ipv6: sr: fix invalid unregister error path
  - ipv6: sr: fix incorrect unregister order
  - ipv6: sr: add missing seg6_local_exit
  - net: usb: smsc95xx: stop lying about skb->truesize
  - net: ethernet: cortina: Locking fixes
  - selftests: net: move amt to socat for better compatibility
  - selftests: net: add missing config for amt.sh
  - selftests: net: add more missing kernel config
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment
  - m68k: mac: Fix reboot hang on Mac IIci
  - m68k: Fix spinlock race in kernel thread creation
  - net: usb: sr9700: stop lying about skb->truesize
  - usb: aqc111: stop lying about skb->truesize
  - HID: amd_sfh: Handle "no sensors" in PM operations
  - wifi: mwl8k: initialize cmd->addr[] properly
  - scsi: qla2xxx: Fix debugfs output for fw_resource_count
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
  - selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect
  - kunit: Fix kthread reference
  - selftests: default to host arch for LLVM builds
  - selftests/resctrl: fix clang build failure: use LOCAL_HDRS
  - selftests/binderfs: use the Makefile's rules, not Make's implicit rules
  - libbpf: Fix error message in attach_kprobe_multi
  - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset
  - wifi: mt76: mt7603: fix tx queue of loopback packets
  - Revert "sh: Handle calling csum_partial with misaligned data"
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
  - wifi: ar5523: enable proper endpoint verification
  - net: give more chances to rcu in netdev_wait_allrefs_any()
  - pwm: sti: Simplify probe function using devm functions
  - pwm: sti: Prepare removing pwm_chip from driver data
  - tcp: avoid premature drops in tcp_add_backlog()
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches
  - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers
  - wifi: ath10k: populate board data for WCN3990
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search()
  - selftests/bpf: Fix a fd leak in error paths in open_netns
  - gfs2: do_xmote fixes
  - gfs2: finish_xmote cleanup
  - gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn
  - gfs2: Mark withdraws as unlikely
  - gfs2: Rename gfs2_lookup_{ simple => meta }
  - gfs2: Convert gfs2_internal_read to folios
  - gfs2: Get rid of gfs2_alloc_blocks generation parameter
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger()
  - dt-bindings: thermal: loongson,ls2k-thermal: Fix incorrect compatible definition
  - dt-bindings: thermal: loongson,ls2k-thermal: Add Loongson-2K0500 compatible
  - dt-bindings: thermal: loongson,ls2k-thermal: Fix binding check issues
  - thermal/drivers/tsens: Fix null pointer dereference
  - x86/purgatory: Switch to the position-independent small code model
  - scsi: hpsa: Fix allocation size for Scsi_Host private data
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - udp: Avoid call to compute_score on multiple sites
  - x86/pat: Fix W^X violation false-positives when running as Xen PV guest
  - x86/pat: Restructure _lookup_address_cpa()
  - x86/pat: Introduce lookup_address_in_pgd_attr()
  - cpufreq: exit() callback is optional
  - tcp: increase the default TCP scaling ratio
  - selftests/bpf: Fix umount cgroup2 error in test_sockmap
  - x86/boot/64: Clear most of CR4 in startup_64(), except PAE, MCE and LA57
  - gfs2: Fix "ignore unlock failures after withdraw"
  - gfs2: Don't forget to complete delayed withdraw
  - ACPI: disable -Wstringop-truncation
  - irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
  - irqchip/alpine-msi: Fix off-by-one in allocation error path
  - locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128()
  - ACPI: LPSS: Advertise number of chip selects via property
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
  - scsi: ufs: core: Perform read back after disabling interrupts
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
  - scsi: ufs: qcom: Perform read back after writing CGC enable
  - scsi: ufs: qcom: Perform read back after writing unipro mode
  - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
  - scsi: ufs: qcom: Perform read back after writing reset bit
  - bpf: prevent r10 register from being marked as precise
  - bpf: Pack struct bpf_fib_lookup
  - bpftool: Mount bpffs on provided dir instead of parent dir
  - wifi: carl9170: re-fix fortified-memset warning
  - dlm: fix user space lock decision to copy lvb
  - bitops: add missing prototype check
  - mlx5: stop warning for 64KB pages
  - mlx5: avoid truncating error message
  - qed: avoid truncating work queue length
  - enetc: avoid truncating error message
  - ACPI: Fix Generic Initiator Affinity _OSC bit
  - sched/fair: Add EAS checks before updating root_domain::overutilized
  - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask
  - wifi: iwlwifi: reconfigure TLC during HW restart
  - wifi: iwlwifi: mvm: select STA mask only for active links
  - wifi: iwlwifi: mvm: allocate STA links only for active links
  - wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok()
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - wifi: mt76: mt7915: workaround too long expansion sparse warnings
  - wifi: ath12k: use correct flag field for 320 MHz channels
  - bpftool: Fix missing pids during link show
  - wifi: ath11k: don't force enable power save on non-running vdevs
  - wifi: brcmfmac: pcie: handle randbuf allocation failure
  - wifi: ath10k: poll service ready message before failing
  - block: fix and simplify blkdevparts= cmdline parsing
  - lkdtm: Disable CFI checking for perms functions
  - soc: qcom: pmic_glink: Make client-lock non-sleeping
  - null_blk: Fix missing mutex_destroy() at module removal
  - soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
  - firmware: qcom: scm: Fix __scm and waitq completion variable initialization
  - soc: qcom: pmic_glink: notify clients about the current state
  - soc: qcom: pmic_glink: don't traverse clients list without a lock
  - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests
  - mm/userfaultfd: Do not place zeropages when zeropages are disallowed
  - io-wq: write next_work before dropping acct_lock
  - ARM: configs: sunxi: Enable DRM_DW_HDMI
  - io_uring: use the right type for work_llist empty check
  - s390/cio: fix tracepoint subchannel type field
  - crypto: x86/sha512-avx2 - add missing vzeroupper
  - crypto: x86/sha256-avx2 - add missing vzeroupper
  - crypto: x86/nh-avx2 - add missing vzeroupper
  - crypto: ccp - drop platform ifdef checks
  - parisc: add missing export of __cmpxchg_u8()
  - nilfs2: fix out-of-range warning
  - firmware: raspberrypi: Use correct device for DMA mappings
  - mm/slub, kunit: Use inverted data to corrupt kmem cache
  - openpromfs: finish conversion to the new mount API
  - nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists()
  - ksmbd: fix uninitialized symbol 'share' in smb2_tree_connect()
  - epoll: be better about file lifetimes
  - nvmet: fix nvme status code when namespace is disabled
  - nvmet-tcp: fix possible memory leak when tearing down a controller
  - nvme: cancel pending I/O if nvme controller is in terminal state
  - nvmet-auth: replace pr_debug() with pr_err() to report an error.
  - nvmet-auth: return the error code to the nvmet_auth_host_hash() callers
  - nvme: find numa distance only if controller has valid numa id
  - drm/amdkfd: Flush the process wq before creating a kfd_process
  - drm/amd/display: Disable seamless boot on 128b/132b encoding
  - drm/amd/display: Fix DC mode screen flickering on DCN321
  - drm/amd/display: Add VCO speed parameter for DCN31 FPU
  - drm/amd/display: Allocate zero bw after bw alloc enable
  - drm/amd/display: Add dtbclk access to dcn315
  - drm/amdgpu: Fix VRAM memory accounting
  - ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection
  - ASoC: da7219-aad: fix usage of device_get_named_child_node()
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list
  - softirq: Fix suspicious RCU usage in __do_softirq()
  - ALSA: emu10k1: make E-MU FPGA writes potentially more reliable
  - bpf, x86: Fix PROBE_MEM runtime load check
  - fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card
  - Input: xpad - add support for ASUS ROG RAIKIRI
  - KVM: selftests: Add test for uaccesses to non-existent vgic-v2 CPUIF
  - ASoC: rt715-sdca: volume step modification
  - ASoC: rt715: add vendor clear control register
  - ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config
  - regulator: vqmmc-ipq4019: fix module autoloading
  - regulator: qcom-refgen: fix module autoloading
  - ASoC: rt722-sdca: add headset microphone vrefo setting
  - ASoC: rt722-sdca: modify channel number to support 4 channels
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
  - ASoC: acp: Support microphone from device Acer 315-24p
  - ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3
  - ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot()
  - regulator: irq_helpers: duplicate IRQ name
  - ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too
  - sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU
  - selftests: sud_test: return correct emulated syscall value on RISC-V
  - drm/etnaviv: fix tx clock gating on some GC7000 variants
  - LoongArch: Lately init pmu after smp is online
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n
  - drm/amdgpu: Fix the ring buffer size for queue VM flush
  - drm/amdkfd: Add VRAM accounting for SVM migration
  - drm/amd/pm: Restore config space after reset
  - drm/amdgpu: Update BO eviction priorities
  - drm/amd/display: Set color_mgmt_changed to true on unsuspend
  - net: usb: qmi_wwan: add Telit FN920C04 compositions
  - HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled
  - dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class
  - wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon timestamp field
  - wifi: mac80211: don't use rate mask for scanning
  - KEYS: asymmetric: Add missing dependency on CRYPTO_SIG
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 440/460 G11.
  - ksmbd: ignore trailing slashes in share paths
  - ksmbd: avoid to send duplicate oplock break notifications
  - fs/ntfs3: Break dir enumeration if directory contents error
  - fs/ntfs3: Fix case when index is reused during tree transformation
  - fs/ntfs3: Taking DOS names into account during link counting
  - fs/ntfs3: Remove max link count info display during driver init
  - net: smc91x: Fix m68k kernel compilation for ColdFire CPU
  - net: lan966x: remove debugfs directory in probe() error path
  - net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
  - tools/nolibc/stdlib: fix memory error in realloc()
  - tools/latency-collector: Fix -Wformat-security compile warns
  - net: mana: Fix the extra HZ in mana_hwc_send_request
  - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already"
  - io_uring: fail NOP if non-zero op flags is passed in
  - Input: try trimming too long modalias strings
  - serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup
  - serial: 8250_bcm7271: use default_mux_rate if possible
  - tty: n_gsm: fix missing receive state reset after mode switch
  - selftests/ftrace: Fix BTFARG testcase to check fprobe is enabled correctly
  - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
  - !10398  BMA: Fix DMA reset problem and change the version
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !10358  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10344  CVE-2024-39471
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  - drm/amdgpu: add error handle to avoid out-of-bounds
  - !9904  ext4: improve buffered write with more than one blocks_per_folio
  - ext4: improve sub-polio check in ext4_iomap_write_begin()
  - iomap: add iomap_is_fully_dirty()
  - iomap: correct the dirty length in page mkwrite
  - iomap: advance the ifs allocation if we have more than one blocks per folio
  - iomap: support invalidating partial folios
  - iomap: correct the range of a partial dirty clear
  - !9533  net/mlx5: Add a timeout to acquire the command queue semaphore
  - net/mlx5: Add a timeout to acquire the command queue semaphore
  - !10317  improve dump_page() robustness
  - mm: improve dumping of mapcount and page_type
  - mm: add __dump_folio()
  - fs: improve dump_mapping() robustness
  - !9361  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9892  support for SMC-D loopback_lo feature
  - net/smc: enable the smc-lo on the x86 and arm64 platforms
  - net/smc: implement DMB-merged operations of loopback-ism
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged
  - net/smc: {at|de}tach sndbuf to peer DMB if supported
  - net/smc: add operations to merge sndbuf with peer DMB
  - net/smc: register loopback-ism into SMC-D device list
  - net/smc: ignore loopback-ism when dumping SMC-D devices
  - net/smc: mark optional smcd_ops and check for support when called
  - net/smc: implement DMB-related operations of loopback-ism
  - net/smc: implement ID-related operations of loopback-ism
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut
  - net/smc: decouple ism_client from SMC-D DMB registration
  - net/smc: change the term virtual ISM to Emulated-ISM
  - net/smc: fix incorrect SMC-D link group matching logic
  - net/smc: manage system EID in SMC stack instead of ISM driver
  - net/smc: support extended GID in SMC-D lgr netlink attribute
  - net/smc: compatible with 128-bits extended GID of virtual ISM device
  - net/smc: define a reserved CHID range for virtual ISM devices
  - net/smc: introduce virtual ISM device support feature
  - net/smc: support SMCv2.x supplemental features negotiation
  - net/smc: unify the structs of accept or confirm message for v1 and v2
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity
  - !10171  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - netrom: Fix a memory leak in nr_heartbeat_expiry()
  - !10312  bpf: Fix too early release of tcx_entry
  - bpf: Fix too early release of tcx_entry
  - !10170  x86: resctrl: Fix illegal access by the chips not having RDT
  - x86: resctrl: Fix illegal access by the chips not having RDT
  - !10311  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10254  fbdev: savage: Handle err return when savagefb_check_var failed
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - !10078  bpf: Set run context for rawtp test_run callback
  - bpf: Set run context for rawtp test_run callback
  - !10261  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10066  serial: imx: Introduce timeout when waiting on transmitter empty
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - !9971  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()

  ' for pr_err


