# changelog

author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-69.0.0.75
changelog:
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-72.0.0.76
changelog:
  - !14213 v2  bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - !14225  kabi OLK-6.6 reverve space
  - kabi: reserve space for uprobes.h
  - kabi: reserve space for internal.h
  - kabi: reserve space for perf_event.h
  - !14259 【OLK-6.6】 Hygon  family 18h model 6h~fh L3 PMU config incorrect issue fix
  - perf/x86/uncore: Correct the L3 PMU config for Hygon processors
  - !14251  kabi reserver space for i2c
  - kabi reserver space for i2c
  - !14258 v2  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-73.0.0.77
changelog:
  - !14618  drm: zynqmp_kms: Unplug DRM device before removal
  - drm: zynqmp_kms: Unplug DRM device before removal
  - !14621  brd: defer automatic disk creation until module initialization succeeds
  - brd: defer automatic disk creation until module initialization succeeds
  - !14617  block: fix uaf for flush rq while iterating tags
  - block: fix uaf for flush rq while iterating tags
  - !14614  scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - !14519  bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - !14593  CVE-2024-56702
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
  - bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
  - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
  - !14415  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - !14439  sh: intc: Fix use-after-free bug in register_intc_controller()
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14635  Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - !14648  memcg: fix soft lockup in the OOM process
  - memcg: fix soft lockup in the OOM process
  - !14562  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14524  The bugfix for LPM trie
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14459  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14454  drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - !14385  media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - !14546  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14244  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14243  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - !14504  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14418  LoongArch: Add CPU HWMon platform driver
  - LoongArch: Add CPU HWMon platform driver
  - !14387  LoongArch: compile loongson drm driver as module
  - drm/loongson: compile loongson drm driver as module
  - LoongArch: cleanup loongson3 defconfig
  - !14441  crypto: bcm - add error check in the ahash_hmac_init function
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14438  media: imx-jpeg: Set video drvdata before register video device
  - media: imx-jpeg: Set video drvdata before register video device
  - !14389  CVE-2024-53173
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - !14469  io_uring/tctx: work around xa_store() allocation error issue
  - io_uring/tctx: work around xa_store() allocation error issue
  - !14447  Fix CVE-2024-56744
  - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
  - !14394  scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - !14518  hfsplus: don't query the device logical block size multiple times
  - hfsplus: don't query the device logical block size multiple times
  - !14517  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14516  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14475  ext4: correct behaviors under errors=remount-ro mode
  - Revert "ext4: drop EXT4_MF_FS_ABORTED flag"
  - Revert "ext4: warn on read-only filesystem in ext4_journal_check_start()"
  - Revert "ext4: drop read-only check in ext4_init_inode_table()"
  - Revert "ext4: drop read-only check in ext4_write_inode()"
  - Revert "ext4: drop read-only check from ext4_force_commit()"
  - Revert "ext4: replace read-only check for shutdown check in mmp code"
  - Revert "ext4: don't set SB_RDONLY after filesystem errors"
  - sb_writers: fix kabi broken
  - fs: fix a hungtask problem when freeze/unfreeze fs
  - !14506  iommufd: Fix out_fput in iommufd_fault_alloc()
  - iommufd: Fix out_fput in iommufd_fault_alloc()
  - !14369  crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - !14417 v2  drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - !14423 v2  EDAC/igen6: Avoid segmentation fault on module unload
  - EDAC/igen6: Avoid segmentation fault on module unload
  - !14365  EDAC/bluefield: Fix potential integer overflow
  - EDAC/bluefield: Fix potential integer overflow
  - !14364  clk: clk-apple-nco: Add NULL check in applnco_probe
  - clk: clk-apple-nco: Add NULL check in applnco_probe
  - !14408  bpf: fix OOB devmap writes when deleting elements
  - bpf: fix OOB devmap writes when deleting elements
  - !14367  io_uring: check if iowq is killed before queuing
  - io_uring: check if iowq is killed before queuing
  - !14355  btrfs: ref-verify: fix use-after-free after invalid ref action
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14350  jfs: array-index-out-of-bounds fix in dtReadFirst
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - !14348  ksmbd: fix use-after-free in SMB request handling
  - ksmbd: fix use-after-free in SMB request handling
  - !14102  OLK-6.6-fix-CVE-2024-49906
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - !14346  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - !14420  HID: wacom: fix when get product name maybe null pointer
  - HID: wacom: fix when get product name maybe null pointer
  - !14301  Revert "unicode: Don't special case ignorable code points"
  - Revert "unicode: Don't special case ignorable code points"
  - !14332  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14362  CVE-2024-53217
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - !14319  exfat: fix out-of-bounds access of directory entries
  - exfat: fix out-of-bounds access of directory entries
  - !14405  NFSD: Prevent a potential integer overflow
  - NFSD: Prevent a potential integer overflow
  - !14395  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14401  gpio: grgpio: Add NULL check in grgpio_probe
  - gpio: grgpio: Add NULL check in grgpio_probe
  - !14400  bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - !14329  svcrdma: Address an integer overflow
  - svcrdma: Address an integer overflow
  - !14376  fix CVE-2024-53197
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - !14206 v4  erofs/fscache/cachefiles: Add ondemand loading support
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Clean up in cachefiles_commit_tmpfile()
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: add support for buffer I/O in ondemand mode
  - fscache: clean up for fscache_clear_volume_priv
  - fscache: Add the synchronous waiting mechanism for the volume unhash in erofs ondemand mode
  - cachefiles: Introduce "dir_has_put" in cachefiles_volume
  - erofs: remove EXPERIMENTAL feature warning for fscache-based
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - fscache: modify the waiting mechanism with duplicate volumes
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: add a memory barrier for FSCACHE_VOLUME_CREATING
  - !14377  ftrace: Fix regression with module command in stack_trace_filter
  - ftrace: Fix regression with module command in stack_trace_filter
  - !14373 [OLK-6.6]Hygon: Fix objtool warning cause by csv3_active()
  - x86: mm: Fix objtool warning about bool noinstr csv3_active()
  - !14358  firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - !14342  hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - !14271  iomap: fix zero padding data issue in concurrent append writes
  - iomap: fix zero padding data issue in concurrent append writes
  - !14340  ocfs2: free inode when ocfs2_get_init_inode() fails
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14312 OLK-6.6: Some patches of RDMA/hns from Linux to olk-6.6 v2
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - Revert "RDMA/hns: Fix accessing invalid dip_ctx during destroying QP"
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - !14338  CVE-2024-53230
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - !14336  mm: Backport mainline patch
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: fix arithmetic for bdi min_ratio
  - mm/kmemleak: fix partially freeing unknown object warning
  - mm: kmemleak: add __find_and_remove_object()
  - mm: kmemleak: use mem_pool_free() to free object
  - mm: kmemleak: split __create_object into two functions
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - !14337  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - !14322  back some mainline patches for damon
  - mm/damon/core: fix return value from damos_wmark_metric_value
  - mm/damon/core: remove unnecessary si_meminfo invoke.
  - !14323  zram: fix NULL pointer in comp_algorithm_show()
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14201 【OLK-6.6】  drivers: arch_topology: Refactor do-while loops
  - drivers: arch_topology: Refactor do-while loops
  - !14295  pmdomain: imx93-blk-ctrl: correct remove path
  - pmdomain: imx93-blk-ctrl: correct remove path
  - !14190  Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - !14134  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - !14214  mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - !14229 Fix extioi restart issue in vm
  - LoongArch: arch/loongarch/kvm: Fix extioi restart issue
  - !14127 MPTCP Upstream part 24
  - mptcp: refer to 'MPTCP' socket in comments
  - mptcp: add mptcp_space_from_win helper
  - mptcp: use mptcp_win_from_space helper
  - doc: new 'mptcp' page in 'networking'
  - doc: mptcp: alphabetical order
  - doc: mptcp: add missing 'available_schedulers' entry
  - selftests: mptcp: join: mark 'fastclose' tests as flaky
  - selftests: mptcp: lib: support flaky subtests
  - selftests: mptcp: export ip_mptcp to mptcp_lib
  - !13359 [OLK-6.6] [Backport] individual submission
  - MIPS: RB532: Declare prom_setup_cmdline() and rb532_gpio_init() static
  - MIPS: BCM47XX: Declare early_tlb_init() static
  - MIPS: BCM47XX: include header for bcm47xx_prom_highmem_init() prototype
  - ocfs2: spelling fix
  - !14291  vdpa: solidrun: Fix UB bug with devres
  - vdpa: solidrun: Fix UB bug with devres
  - !14256  RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-73.0.0.78
changelog:
  - riscv kernel upgrade to 6.6.0-73.0.0
  - Backport RISC-V AIA driver from mainline linux
  - Fix kernel-mode FPU support on riscv
  - Add cache info for SG2042 dts


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-75.0.0.79
changelog:
  - !14904  net: renesas: rswitch: avoid use-after-put for a device tree node
  - net: renesas: rswitch: avoid use-after-put for a device tree node
  - !14898  Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - !14741  io_uring: check for overflows in io_pin_pages
  - io_uring: check for overflows in io_pin_pages
  - !14863  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14882  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14879  CVE-2024-57872
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
  - scsi: ufs: Convert all platform drivers to return void
  - !14880  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - !14873 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Patches
  - mm/damon/core: copy nr_accesses when splitting region
  - mm/damon/core: handle zero schemes apply interval
  - mm/damon/core: check apply interval in damon_do_apply_schemes()
  - mm: refactor map_deny_write_exec()
  - mm: unconditionally close VMAs on error
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  - mptcp: pm: use _rcu variant under rcu_read_lock
  - mptcp: hold pm lock when deleting entry
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
  - lib/buildid: Fix build ID parsing logic
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
  - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
  - mm/damon/core: implement scheme-specific apply interval
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
  - nouveau: fw: sync dma after setup is called.
  - drm/bridge: tc358768: Fix DSI command tx
  - mmc: sunxi-mmc: Fix A100 compatible description
  - LoongArch: Make KASAN work with 5-level page-tables
  - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
  - nommu: pass NULL argument to vma_iter_prealloc()
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
  - KVM: x86: Unconditionally set irr_pending when updating APICv state
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
  - tools/mm: fix compile error
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
  - bonding: add ns target multicast address to slave device
  - net: ti: icssg-prueth: Fix 1 PPS sync
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt()
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt()
  - net: Make copy_safe_from_sockptr() match documentation
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
  - samples: pktgen: correct dev to DEV
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes.
  - net/sched: cls_u32: replace int refcounts with proper refcounts
  - Bluetooth: btintel: Direct exception event to bluetooth stack
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
  - Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
  - virtio/vsock: Fix accept_queue memory leak
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  - net/mlx5e: clear xdp features on non-uplink representors
  - net/mlx5e: kTLS, Fix incorrect page refcounting
  - net/mlx5: fs, lock FTE when checking if active
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  - mptcp: error out earlier on disconnect
  - net: vertexcom: mse102x: Fix tx_bytes calculation
  - sctp: fix possible UAF in sctp_v6_available()
  - netlink: terminate outstanding dump on socket close
  - !14856  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - !14861  drm/sti: avoid potential dereference of error pointers
  - drm/sti: avoid potential dereference of error pointers
  - !14846  net: stmmac: fix TSO DMA API usage causing oops
  - net: stmmac: fix TSO DMA API usage causing oops
  - !14789  erofs: handle NONHEAD !delta[1
  - erofs: handle NONHEAD !delta[1] lclusters gracefully
  - !14848  LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - !14840 [OLK-6.6][bugfix]Hygon: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - x86/config: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - !14690 Improve the tmpfs large folio read performance
  - mm: shmem: fallback to page size splice if large folio has poisoned pages
  - mm: shmem: improve the tmpfs large folio read performance
  - mm: shmem: update iocb->ki_pos directly to simplify tmpfs read logic
  - !14466  bpf: Call free_htab_elem() after htab_unlock_bucket()
  - bpf: Call free_htab_elem() after htab_unlock_bucket()
  - !14818  olk-6.6
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - !14738  LoongArch: fix some dwmac/pci/SE/i2c/interrupt issues
  - LoongArch: adjust the calc method of number of packages.
  - LoongArch: eiointc: fix ext irq route error
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: fix i2c related issues
  - net: stmmac: dwmac-loongson: fix Mac DMA reset
  - pci/quirks: LS7A2000: fix pm transition of devices under pcie port
  - !14573  RDMA/rxe: Fix the qp flush warnings in req
  - RDMA/rxe: Fix the qp flush warnings in req
  - !14574  ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - !14035  Backport fs optimizing patch from mainline
  - fs/file.c: conditionally clear full_fds
  - !14828  cgroup/cpuset: remove kernfs active break
  - cgroup/cpuset: remove kernfs active break
  - !14589  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14800  Bluetooth: fix use-after-free in device_for_each_child()
  - Bluetooth: fix use-after-free in device_for_each_child()
  - !14792  jfs: fix shift-out-of-bounds in dbSplit
  - jfs: fix shift-out-of-bounds in dbSplit
  - !14791  scsi: ufs: core: sysfs: Prevent div by zero
  - scsi: ufs: core: sysfs: Prevent div by zero
  - !14787  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14786  x86/xen: don't do PV iret hypercall through hypercall page
  - x86/xen: don't do PV iret hypercall through hypercall page
  - !14785  drm/i915: Fix NULL pointer dereference in capture_engine
  - drm/i915: Fix NULL pointer dereference in capture_engine
  - !14817  olk-6.6
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14784  wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - !14807  btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - !14591  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14587  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14747  net: enetc: Do not configure preemptible TCs if SIs do not support
  - net: enetc: Do not configure preemptible TCs if SIs do not support
  - !14796  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14655  vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - !14656  iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - !14659  firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - !14712  CVE-2024-56654
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  - Bluetooth: ISO: Reassociate a socket with an active BIS
  - !14761  Add Huawei Intelligent Network Card Driver:hibifur
  - Add Huawei Intelligent Network Card Driver:hibifur
  - !14772  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - !14769  svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - !14770  bpf, sockmap: Several fixes to bpf_msg_pop_data
  - bpf, sockmap: Several fixes to bpf_msg_pop_data
  - !14730  sched: Fix bpf cpustats refcount leak
  - sched: Fix bpf cpustats refcount leak
  - !14739  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14731  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - !14759  wifi: ath12k: Skip Rx TID cleanup for self peer
  - wifi: ath12k: Skip Rx TID cleanup for self peer
  - !14757  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14605  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14490  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14489  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14488  ovl: Filter invalid inodes with missing lookup function
  - ovl: Filter invalid inodes with missing lookup function
  - !14486  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14754  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14776  tracing: Prevent bad count for tracing_cpumask_write
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14766  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14765  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - !14764  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14729  KVM: arm64: Don't retire aborted MMIO instruction
  - KVM: arm64: Don't retire aborted MMIO instruction
  - !14763  usb: musb: Fix hardware lockup on first Rx endpoint request
  - usb: musb: Fix hardware lockup on first Rx endpoint request
  - !14762  sched/numa: fix memory leak due to the overwritten vma->numab_state
  - sched/numa: fix memory leak due to the overwritten vma->numab_state
  - !14749  net/mlx5: DR, prevent potential error pointer dereference
  - net/mlx5: DR, prevent potential error pointer dereference
  - !14746  nvme-pci: fix freeing of the HMB descriptor table
  - nvme-pci: fix freeing of the HMB descriptor table
  - !14722  Bluetooth: MGMT: Fix possible deadlocks
  - Bluetooth: MGMT: Fix possible deadlocks
  - !14670  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14608  scsi: qla2xxx: Fix use after free on unload
  - scsi: qla2xxx: Fix use after free on unload
  - !14724  etmem: fix use-after-free of mm in the scan release process
  - etmem: fix use-after-free of mm in the scan release process
  - !14384  virtiofs: use pages instead of pointer for kernel direct IO
  - virtiofs: use pages instead of pointer for kernel direct IO
  - !14673  ALSA: 6fire: Release resources at card release
  - ALSA: 6fire: Release resources at card release
  - !14666  Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - !14634  backport mainline bugfix patch
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - !14611  merge mainline patches into OLK-6.6
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  - mm/mglru: reset page lru tier bits when activating
  - tmpfs: don't enable large folios if not supported
  - mm: migrate: annotate data-race in migrate_folio_unmap()
  - mm: Kconfig: fixup zsmalloc configuration
  - mm: ignore data-race in __swap_writepage
  - !14602  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - !14720  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14719  rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - !14718  PCI: Fix reset_method_store() memory leak
  - PCI: Fix reset_method_store() memory leak
  - !14455  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14542  net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - !14531  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14528  drm/amdgpu: set the right AMDGPU sg segment limitation
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14525  CVE-2024-56609
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
  - !14667  sched: fix warning in sched_setaffinity
  - sched: fix warning in sched_setaffinity
  - !14412 [OLK-6.6]Workaround ARM PMUs cpu maps having offline cpus
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - !14698  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - !14694  arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - !14677  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14569  PCI: Fix use-after-free of slot->bus on hot remove
  - PCI: Fix use-after-free of slot->bus on hot remove
  - !14568  wifi: ath12k: fix warning when unbinding
  - wifi: ath12k: fix warning when unbinding
  - !14424  octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - !14714  Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - !14715  media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: Add check for rgby_data memory allocation failure
  - !14699  CVE-2024-53158
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14710  CVE-2024-56546
  - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
  - !14507  sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - !14511  netfilter: nft_inner: incorrect percpu area handling under softirq
  - netfilter: nft_inner: incorrect percpu area handling under softirq
  - !14472  jfs: fix array-index-out-of-bounds in jfs_readdir
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14664 v2  CVE-2024-53224
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - IB/mlx5: Allocate resources just before first QP/SRQ is created


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-76.0.0.80
changelog:
  - !14997  wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - !14941  CVE-2024-57906
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - !14990  mainline patches
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
  - !14993  arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - !14952  drm/mediatek: Set private->all_drm_private[i
  - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
  - !14835 v2  media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - !14994  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14893  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14876  *** jffs2: Prevent rtime decompress memory corruption ***
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption
  - !14833  btrfs: check folio mapping after unlock in relocate_one_folio()
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - !14588  smb: Initialize cfid->tcon before performing network ops
  - smb: Initialize cfid->tcon before performing network ops
  - !14977  PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - !14984  vsock/bpf: return early if transport is not assigned
  - vsock/bpf: return early if transport is not assigned
  - !14976  x86/fpu: Ensure shadow stack is active before "getting" registers
  - x86/fpu: Ensure shadow stack is active before "getting" registers
  - !14682  CVE-2024-56701
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - !14780  CVE-2024-56677
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
  - !14681  CVE-2024-56567
  - ad7780: fix division by zero in ad7780_write_raw()
  - !14981  nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - !14916  CVE-2024-56641
  - net/smc: initialize close_work early to avoid warning
  - net/smc: refactoring initialization of smc sock
  - !14914  bnxt_en: Fix receive ring space parameters when XDP is active
  - bnxt_en: Fix receive ring space parameters when XDP is active
  - !14915  net/smc: protect link down work from execute after lgr freed
  - net/smc: protect link down work from execute after lgr freed
  - !14913  xsk: fix OOB map writes when deleting elements
  - xsk: fix OOB map writes when deleting elements
  - !14911  net/smc: fix LGR and link use-after-free issue
  - net/smc: fix LGR and link use-after-free issue
  - !14912  net: fix data-races around sk->sk_forward_alloc
  - net: fix data-races around sk->sk_forward_alloc
  - !14907  ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - !14908  net: dsa: improve shutdown sequence
  - net: dsa: improve shutdown sequence
  - !14877  sched: qos sched support online task to preempt offline task
  - sched: qos sched support online task to preempt offline task
  - !14974  BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14973 v2  fix CVE-2024-54193
  - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  - accel/ivpu: Move set autosuspend delay to HW specific code
  - !14901  Fix CVE-2024-47794
  - bpf: Fix kabi breakage in struct bpf_prog_aux
  - selftests/bpf: Add test to verify tailcall and freplace restrictions
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map
  - bpf: Prevent tailcall infinite loop caused by freplace
  - !14874  bpf: Check size for BTF-based ctx access of pointer members
  - bpf: Check size for BTF-based ctx access of pointer members
  - !14847  bpf: put bpf_link's program when link is safe to be deallocated
  - bpf: put bpf_link's program when link is safe to be deallocated
  - !14945  btrfs: avoid NULL pointer dereference if no valid extent tree
  - btrfs: avoid NULL pointer dereference if no valid extent tree
  - !14823 mm：some shmem bugfix
  - mm: shmem: fix ShmemHugePages at swapout
  - mm: shmem: extend shmem_unused_huge_shrink() to all sizes
  - mm: shmem: fix minor off-by-one in shrinkable calculation
  - docs: mm: fix the incorrect 'FileHugeMapped' field
  - mm: shmem: fix the update of 'shmem_falloc->nr_unswapped'
  - mm: shmem: fix incorrect index alignment for within_size policy
  - !14970  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - !14969  topology: Keep the cpumask unchanged when printing cpumap
  - topology: Keep the cpumask unchanged when printing cpumap
  - !14935  Two CVE fixes for ksmbd
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !14930  tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - !14931  bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - !14953  mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - !14767 mm: shmem: control THP support through the kernel command line
  - mm: shmem: remove __shmem_huge_global_enabled()
  - mm: shmem: override mTHP shmem default with a kernel parameter
  - mm: move ``get_order_from_str()`` to internal.h
  - mm: shmem: control THP support through the kernel command line
  - !14962  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - !14944  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - !14946  swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single()
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
  - !14897  perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - !14920  iio: light: vcnl4035: fix information leak in triggered buffer
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14964 v2  fix BUG: unable to handle kernel paging request in build_id_parse
  - lib/buildid: Handle memfd_secret() files in build_id_parse()
  - mm: merge folio_is_secretmem() and folio_fast_pin_allowed() into gup_fast_folio_allowed()
  - !14951  Mainline patch to olk-6.6
  - RDMA/hns: Fix UAF for cq async event
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14925  RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - !14884  um: Fix potential integer overflow during physmem setup
  - um: Fix potential integer overflow during physmem setup
  - !14886  Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - !14889  clk: ralink: mtmips: clock fixes for Ralink SoCs
  - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
  - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
  - !14888  usb: dwc3: gadget: Fix looping of queued SG entries
  - usb: dwc3: gadget: Fix looping of queued SG entries
  - !14924  soc: imx8m: Probe the SoC driver as platform driver
  - soc: imx8m: Probe the SoC driver as platform driver
  - !14813  drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
  - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-77.0.0.81
changelog:
  - !15062  gpio: xilinx: Convert gpio_lock to raw spinlock
  - gpio: xilinx: Convert gpio_lock to raw spinlock
  - !15060  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - !15052 [OLK-6.6] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - !15048 net: hns3: add sync command to sync io-pgtable
  - net: hns3: add sync command to sync io-pgtable
  - Revert "net: hns3: add sync command to sync io-pgtable"
  - net: hns3: fix oops when unload drivers paralleling
  - !15031  nbd: don't allow reconnect after disconnect
  - nbd: don't allow reconnect after disconnect
  - !15002  riscv: Fix sleeping in invalid context in die()
  - riscv: Fix sleeping in invalid context in die()
  - !14989  ksmbd: fix a missing return value check bug
  - ksmbd: fix a missing return value check bug
  - !15027  pinmux: Use sequential access to access desc->pinmux data
  - pinmux: Use sequential access to access desc->pinmux data
  - !14321 [OLK-6.6] rcu: Provide a boot time parameter to control lazy RCU
  - rcu: Provide a boot time parameter to control lazy RCU
  - rcu/tree: Remove superfluous return from void call_rcu* functions
  - !14900  LeapIOraid: update leapioraid driver version
  - LeapIOraid: update leapioraid driver version
  - !14325  LeapIOraid: Fix hiding ugood disk problem
  - LeapIOraid: Fix hiding ugood disk problem
  - !15016  spi: mpc52xx: Add cancel_work_sync before module remove
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - !15041  gve: guard XDP xmit NDO on existence of xdp queues
  - gve: guard XDP xmit NDO on existence of xdp queues
  - !15040  gve: guard XSK operations on the existence of queues
  - gve: guard XSK operations on the existence of queues
  - !15039  mptcp: fix TCP options overflow.
  - mptcp: fix TCP options overflow.
  - !15038  net: fix memory leak in tcp_conn_request()
  - net: fix memory leak in tcp_conn_request()
  - !15037  net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - !15036  net/smc: check return value of sock_recvmsg when draining clc data
  - net/smc: check return value of sock_recvmsg when draining clc data
  - !15025  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15019  platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - !15020  drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - !14979  igb: Fix potential invalid memory access in igb_init_module()
  - igb: Fix potential invalid memory access in igb_init_module()
  - !14963  exfat: fix the infinite loop in exfat_readdir()
  - exfat: fix the infinite loop in exfat_readdir()
  - !14988  net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - !14987  workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - !14985  i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - !14892  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15013 v2  nilfs2: prevent use of deleted inode
  - nilfs2: prevent use of deleted inode
  - !14845  merge HULK-6.6 patches into OLK-6.6
  - mm: refactor map_deny_write_exec()
  - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
  - nommu: pass NULL argument to vma_iter_prealloc()
  - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - ionic: Fix netdev notifier unregister on failure
  - !15018  misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - !15009  i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - !15008  nvme-rdma: unquiesce admin_q before destroy it
  - nvme-rdma: unquiesce admin_q before destroy it


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-78.0.0.83
changelog:
  - !15076 [olk 6.6] backport some feature patches for hibmcge driver
  - net: hibmcge: Add nway_reset supported in this module
  - net: hibmcge: Add reset supported in this module
  - net: hibmcge: Add pauseparam supported in this module
  - net: hibmcge: Add register dump supported in this module
  - net: hibmcge: Add unicast frame filter supported in this module
  - net: hibmcge: Add irq_info file to debugfs
  - net: hibmcge: Add debugfs supported in this module
  - lib/string_choices: Add str_true_false()/str_false_true() helper
  - !15109  net: Fix icmp host relookup triggering ip_rt_bug
  - net: Fix icmp host relookup triggering ip_rt_bug
  - !15105  ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - !15106  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15101  net/mlx5e: Don't call cleanup on profile rollback failure
  - net/mlx5e: Don't call cleanup on profile rollback failure
  - !15103  ethtool: fail closed if we can't get max channel used in indirection tables
  - ethtool: fail closed if we can't get max channel used in indirection tables
  - !15102 v2  net: Fix CVE-2024-56658
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - !15107  netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - !15110  net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - !15111  net: wwan: t7xx: Fix FSM command timeout issue
  - net: wwan: t7xx: Fix FSM command timeout issue
  - !15112  net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - !15113  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15119  mm: resolve faulty mmap_region() error path behaviour
  - mm: resolve faulty mmap_region() error path behaviour
  - !15118  iio: adc: at91: call input_free_device() on allocated iio_dev
  - iio: adc: at91: call input_free_device() on allocated iio_dev
  - !15123  mm, madvise: fix potential workingset node list_lru leaks
  - mm, madvise: fix potential workingset node list_lru leaks
  - mm: move mapping_set_update out of <linux/swap.h>
  - !15055  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - !15128  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14972  selinux: ignore unknown extended permissions
  - selinux: ignore unknown extended permissions
  - !15121  KVM: arm64: Get rid of userspace_irqchip_in_use
  - KVM: arm64: Get rid of userspace_irqchip_in_use
  - !13446 [OLK-6.6]crypto: montage - fix variable 'device_handle' is uninitialized warning for Mont-TSSE driver
  - crypto: montage - fix variable 'device_handle' is unintialized warning for Mont-TSSE driver
  - !15133 Upgrade Hygon HCT driver to version 0.6
  - hct: remove the unused variables from hct shared structure.
  - hct: add write support for node use of MDEV devices.
  - hct: fix vm_start issue caused by pre allocated vma changes.
  - hct: compatible with hct.ko modules in versions 0.5 and earlier.
  - hct: update pasid type from int to long.
  - hct: sharing CCP resources between host and virtual machines.
  - hct: adding node to identifies hct mdev device usage status.
  - !15083  mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - !15080 [OLK-6.6] crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - !15078 [OLK-6.6] crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - !15068 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Patches
  - i3c: master: svc: fix possible assignment of the same address to two devices
  - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
  - serial: amba-pl011: fix build regression
  - platform/x86: asus-wmi: Fix thermal profile initialization
  - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
  - usb: dwc3: ep0: Don't reset resource alloc flag
  - drm/amdgpu: rework resume handling for display (v2)
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
  - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
  - btrfs: add cancellation points to trim loops
  - iio: invensense: fix multiple odr switch when FIFO is off
  - xhci: dbc: Fix STALL transfer event handling
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
  - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from kvm_faultin_pfn()
  - vfio/mlx5: Align the page tracking max message size with the device capability
  - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
  - clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation
  - setlocalversion: work around "git describe" performance
  - smb: client: don't try following DFS links in cifs_tree_connect()
  - serial: 8250_dw: Add Sophgo SG2044 quirk
  - rtc: cmos: avoid taking rtc_lock for extended period of time
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
  - powerpc/prom_init: Fixup missing powermac #size-cells
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
  - ASoC: amd: yc: fix internal mic on Redmi G 2022
  - iio: light: ltr501: Add LTER0303 to the supported devices
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
  - fs/ntfs3: Fix case when unmarked clusters intersect with zone
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
  - f2fs: fix to shrink read extent node in batches
  - f2fs: print message if fscorrupted was found in f2fs_new_node_page()
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
  - PCI: Detect and trust built-in Thunderbolt chips
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
  - PCI: qcom: Add support for IPQ9574
  - KMSAN: uninit-value in inode_go_dump (5)
  - verification/dot2: Improve dot parser robustness
  - smb: client: memcpy() with surrounding object base address
  - nvdimm: rectify the illogical code within nd_dax_probe()
  - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
  - pinctrl: qcom: spmi-mpp: Add PM8937 compatible
  - pinctrl: qcom-pmic-gpio: add support for PM8937
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
  - scsi: st: Don't modify unknown block number in MTIOCGET
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  - clk: qcom: tcsrcc-sm8550: add SAR2130P support
  - clk: qcom: rpmh: add support for SAR2130P
  - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
  - scsi: ufs: core: Make DMA mask configuration more flexible
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr
  - tracing: Use atomic64_inc_return() in trace_clock_counter()
  - tracing/ftrace: disable preemption in syscall probe
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
  - netpoll: Use rcu_access_pointer() in __netpoll_setup
  - net/neighbor: clear error in case strict check is not set
  - rocker: fix link status detection in rocker_carrier_init()
  - ASoC: hdmi-codec: reorder channel allocation list
  - Bluetooth: Set quirks for ATS2851
  - Bluetooth: Support new quirks for ATS2851
  - Bluetooth: Add new quirks for ATS2851
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
  - dsa: qca8k: Use nested lock to avoid splat
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
  - ALSA: usb-audio: Make mic volume workarounds globally applicable
  - virtio-net: fix overflow inside virtnet_rq_alloc
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
  - fsl/fman: Validate cell-index value obtained from Device Tree
  - dma-debug: fix a possible deadlock on radix_lock
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
  - netlink: specs: Add missing bitset attrs to ethtool spec
  - drm/amdgpu: Dereference the ATCS ACPI buffer
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
  - drm/sched: memset() 'job' in drm_sched_job_init()
  - net: stmmac: Programming sequence for VLAN packets with split header
  - net: sfp: change quirks for Alcatel Lucent G-010S-P
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
  - fanotify: allow reporting errors on failure to open fd
  - wifi: ath5k: add PCI ID for Arcadyan devices
  - wifi: ath5k: add PCI ID for SX76X
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - net: af_can: do not leave a dangling sk pointer in can_create()
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
  - net: ethernet: fs_enet: Use %pa to format resource_size_t
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
  - samples/bpf: Fix a resource leak
  - r8169: don't apply UDP padding quirk on RTL8126A
  - drm/display: Fix building with GCC 15
  - dlm: fix possible lkb_resource null dereference
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
  - drm/mcde: Enable module autoloading
  - drm/bridge: it6505: Enable module autoloading
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
  - drm/vc4: hvs: Set AXI panic modes for the HVS
  - drm/vc4: hdmi: Avoid log spam for audio start failure
  - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
  - selftests/resctrl: Protect against array overflow when reading strings
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
  - mmc: core: Add SD card quirk for broken poweroff notification
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
  - media: uvcvideo: RealSense D421 Depth module metadata
  - HID: add per device quirk to force bind to hid-generic
  - spi: spi-fsl-lpspi: Adjust type of scldiv
  - perf/x86/amd: Warn only on new bits set
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
  - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
  - btrfs: do not clear read-only when adding sprout device
  - btrfs: avoid unnecessary device path update for the same device
  - btrfs: don't take dev_replace rwsem on task already holding it
  - kselftest/arm64: Log fp-stress child startup errors to stdout
  - epoll: annotate racy check
  - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
  - kasan: make report_lock a raw spinlock
  - lib: stackinit: hide never-taken branch from compiler
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next
  - mmc: core: Further prevent card detect during shutdown
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
  - regmap: detach regmap from dev on regmap_exit
  - dma-fence: Use kernel's sort for merging fences
  - dma-fence: Fix reference leak on fence merge failure path
  - dma-buf: fix dma_fence_array_signaled v4
  - x86/kexec: Restore GDT on return from ::preserve_context kexec
  - modpost: Add .irqentry.text to OTHER_SECTIONS
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
  - drm/dp_mst: Fix resetting msg rx state after topology removal
  - drm/dp_mst: Verify request type in the corresponding down message reply
  - drm/dp_mst: Fix MST sideband message body length check
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  - smb3.1.1: fix posix mounts to older servers
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
  - fs/smb/client: Implement new SMB3 POSIX type
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
  - scsi: ufs: core: Add missing post notify for power mode change
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue
  - scsi: qla2xxx: Fix abort in bsg timeout
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
  - ALSA: usb-audio: add mixer mapping for Corsair HS80
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
  - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
  - can: dev: can_set_termination(): allow sleeping GPIOs
  - watchdog: rti: of: honor timeout-sec property
  - LoongArch: Add architecture specific huge_pte_clear()
  - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
  - bpf: Fix exact match conditions in trie_get_next_key()
  - iio: magnetometer: yas530: use signed integer type for clamp limits
  - scatterlist: fix incorrect func name in kernel-doc
  - drm/v3d: Enable Performance Counters before clearing them
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
  - scsi: scsi_debug: Fix hrtimer support for ndelay
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai()
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
  - tools: Override makefile ARCH variable if defined, but empty
  - ALSA: usb-audio: Notify xrun for low-latency mode
  - ALSA: seq: ump: Fix seq port updates per FB info notify
  - ALSA: ump: Update substream name from assigned FB names
  - ALSA: seq: ump: Use automatic cleanup of kfree()
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
  - bpftool: fix potential NULL pointer dereferencing in prog_dump()
  - xsk: always clear DMA mapping information when unmapping the pool
  - bpf, vsock: Invoke proto::close on close()
  - bpf, vsock: Fix poll() missing a queue
  - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
  - scsi: ufs: core: Always initialize the UIC done completion
  - drm/bridge: it6505: Fix inverted reset polarity
  - drm/bridge: it6505: update usleep_range for RC circuit charge time
  - i3c: master: Fix dynamic address leak when 'assigned-address' is present
  - i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
  - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
  - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
  - i3c: master: svc: use slow speed for first broadcast address
  - i3c: master: support to adjust first broadcast address speed
  - i3c: master: fix kernel-doc check warning
  - i3c: master: svc: add hot join support
  - i3c: master: add enable(disable) hot join in sys entry
  - f2fs: fix to drop all discards after creating snapshot on lvm device
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
  - driver core: fw_devlink: Improve logs for cycle detection
  - ntp: Remove invalid cast in time offset math
  - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
  - powerpc/vdso: Refactor CFLAGS for CVDSO build
  - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
  - mmc: mtk-sd: fix devm_clk_get_optional usage
  - mmc: mtk-sd: Fix error handle of probe function
  - mmc: mtk-sd: use devm_mmc_alloc_host
  - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
  - usb: dwc3: gadget: Rewrite endpoint allocation flow
  - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
  - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
  - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
  - soc: fsl: cpm1: qmc: Re-order probe() operations
  - soc: fsl: cpm1: qmc: Fix blank line and spaces
  - soc/fsl: cpm: qmc: Convert to platform remove callback returning void
  - serial: amba-pl011: Fix RX stall when DMA is used
  - serial: amba-pl011: Use port lock wrappers
  - xhci: Fix control transfer error on Etron xHCI host
  - xhci: Don't issue Reset Device command to Etron xHCI host
  - xhci: Combine two if statements for Etron xHCI host
  - xhci: remove XHCI_TRUST_TX_LENGTH quirk
  - xhci: Allow RPM on the USB controller (1022:43f7) by default
  - net: avoid potential UAF in default_operstate()
  - net/mlx5e: Remove workaround to avoid syndrome for internal port
  - geneve: do not assume mac header is set in geneve_xmit_skb()
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
  - mlxsw: Mark high entropy key blocks
  - mlxsw: Edit IPv6 key blocks to use one less block for multicast forwarding
  - mlxsw: spectrum_acl_flex_keys: Add 'ipv4_5b' flex key
  - mlxsw: Add 'ipv4_5' flex key
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
  - netfilter: nft_set_hash: skip duplicated elements pending gc run
  - netfilter: ipset: Hold module reference while requesting a module
  - net: sched: fix erspan_opt settings in cls_flower
  - ixgbe: downgrade logging of unsupported VF API version to debug
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
  - net/qed: allow old cards not supporting "num_images" to work
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - dccp: Fix memory leak in dccp_feat_change_recv
  - net/ipv6: release expired exception dst cached in socket
  - ipv6: introduce dst_rt6_info() helper
  - net-timestamp: make sk_tskey more predictable in error path
  - platform/x86: asus-wmi: Ignore return value when writing thermal policy
  - platform/x86: asus-wmi: Fix inconsistent use of thermal policies
  - platform/x86: asus-wmi: add support for vivobook fan profiles
  - can: j1939: j1939_session_new(): fix skb reference counting
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - net/sched: tbf: correct backlog statistic for GSO packets
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
  - selftests: hid: fix typo and exit code
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
  - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
  - can: gs_usb: add usb endpoint address detection at driver probe step
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
  - watchdog: apple: Actually flush writes after requesting watchdog restart
  - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
  - openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
  - Revert "x86/pvh: Set phys_base when calling xen_prepare_pvh()"
  - Revert "x86/pvh: Call C code via the kernel virtual mapping"
  - !15069  fs/proc: fix softlockup in __read_vmcore (part 2)
  - fs/proc: fix softlockup in __read_vmcore (part 2)
  - !15067  irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - !15065  fix CVE-2025-21668
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition
  - !15056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Patches
  - posix-timers: Target group sigqueue to current task only if not exiting
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7
  - drm/amdgpu: fix usage slab after free
  - drm/amdkfd: Use the correct wptr size
  - drm: xlnx: zynqmp_dpsub: fix hotplug detection
  - drm/etnaviv: flush shader L1 cache after user commandstream
  - drm/mediatek: Fix child node refcount handling in early exit
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
  - udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
  - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
  - powerpc: Fix stack protector Kconfig test for clang
  - iio: gts: fix infinite loop for gain_to_scaletables()
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
  - iio: accel: kx022a: Fix raw read format
  - nfsd: make sure exp active before svc_export_show
  - PCI: rockchip-ep: Fix address translation unit programming
  - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
  - dm thin: Add missing destroy_work_on_stack()
  - dm: Fix typo in error message
  - ovl: properly handle large files in ovl_security_fileattr
  - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error paths
  - thermal: int3400: Fix reading of current_uuid for active policy
  - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful iov_iter_zero
  - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
  - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
  - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
  - scsi: ufs: exynos: Fix hibern8 notify callbacks
  - util_macros.h: fix/rework find_closest() macros
  - ceph: extract entity name from device id
  - mm/slub: Avoid list corruption when removing a slab from the full list
  - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
  - ARM: 9430/1: entry: Do a dummy read from VMAP shadow
  - s390/entry: Mark IRQ entries to fix stack depot warnings
  - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
  - leds: lp55xx: Remove redundant test for invalid channel number
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
  - zram: clear IDLE flag after recompression
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
  - maple_tree: refine mas_store_root() on storing NULL
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - media: uvcvideo: Stop stream during unregister
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
  - efi/libstub: Free correct pointer on failure
  - media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available
  - media: ts2020: fix null-ptr-deref in ts2020_probe()
  - media: verisilicon: av1: Fix reference video buffer pointer assignment
  - media: i2c: tc358743: Fix crash in the probe error path when using polling
  - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
  - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: mtk-jpeg: Fix null-ptr-deref during unload module
  - media: amphion: Set video drvdata before register video device
  - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
  - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
  - md/md-bitmap: Add missing destroy_work_on_stack()
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  - btrfs: don't loop for nowait writes when checking for cross references
  - quota: flush quota_release_work upon quota writeback
  - xfs: remove unknown compat feature check in superblock write validation
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
  - cifs: unlock on error in smb3_reconfigure()
  - cifs: during remount, make sure passwords are in sync
  - modpost: remove incorrect code in do_eisa_entry()
  - Rename .data.once to .data..once to fix resetting WARN*_ONCE
  - Rename .data.unlikely to .data..unlikely
  - init/modpost: conditionally check section mismatch to __meminit*
  - modpost: squash ALL_{INIT,EXIT}_TEXT_SECTIONS to ALL_TEXT_SECTIONS
  - modpost: use ALL_INIT_SECTIONS for the section check from DATA_SECTIONS
  - modpost: disallow the combination of EXPORT_SYMBOL and __meminit*
  - modpost: remove EXIT_SECTIONS macro
  - modpost: remove MEM_INIT_SECTIONS macro
  - modpost: disallow *driver to reference .meminit* sections
  - modpost: remove ALL_EXIT_DATA_SECTIONS macro
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session
  - cifs: Fix parsing native symlinks relative to the export
  - smb: client: disable directory caching when dir_cache_timeout is zero
  - perf/arm-cmn: Ensure port and device id bits are set properly
  - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
  - 9p/xen: fix release of IRQ
  - 9p/xen: fix init sequence
  - block: return unsigned int from bdev_io_min
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive
  - nvme-multipath: avoid hang on inaccessible namespaces
  - nvme-multipath: implement "queue-depth" iopolicy
  - nvme-multipath: prepare for "queue-depth" iopolicy
  - rtc: rzn1: fix BCD to rtc_time conversion errors
  - jffs2: fix use of uninitialized variable
  - ubi: fastmap: Fix duplicate slab cache names while attaching
  - ubifs: Correct the total block count by deducting journal reservation
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - rtc: abx80x: Fix WDT bit position of the status register
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
  - um: Always dump trace for specified task in show_stack
  - um: Fix the return value of elf_core_copy_task_fpregs
  - SUNRPC: make sure cache entry active before cache_show
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
  - lib: string_helpers: silence snprintf() output truncation warning
  - ublk: fix error code for unsupported command
  - usb: dwc3: gadget: Fix checking for number of TRBs left
  - smb: During unmount, ensure all cached dir instances drop their dentry
  - smb: prevent use-after-free due to open_cached_dir error paths
  - smb: Don't leak cfid when reconnect races with open_cached_dir
  - smb: client: handle max length for SMB symlinks
  - smb3: request handle caching when caching directories
  - ALSA: hda/realtek: Apply quirk for Medion E15433
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274
  - ALSA: hda/realtek: Update ALC225 depop procedure
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
  - block: fix missing dispatching request when queue is started or unquiesced
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
  - ublk: fix ublk_ch_mmap() for 64K page size
  - iio: gts: Fix uninitialized symbol 'ret'
  - um: vector: Do not use drvdata in release
  - serial: 8250: omap: Move pm_runtime_get_sync
  - serial: 8250_fintek: Add support for F81216E
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property
  - um: net: Do not use drvdata in release
  - um: ubd: Do not use drvdata in release
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - parisc/ftrace: Fix function graph tracing disablement
  - cifs: support mounting with alternate password to allow password rotation
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
  - mtd: spi-nor: core: replace dummy buswidth from addr to data
  - spi: Fix acpi deferred irq probe
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - gpio: exar: set value when external pull-up or pull-down is present
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
  - wifi: brcmfmac: release 'root' node in all execution paths
  - wifi: ath12k: fix crash when unbinding
  - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - Compiler Attributes: disable __counted_by for clang < 19.1.3
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
  - exfat: fix uninit-value in __exfat_get_dentry_set
  - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
  - pinctrl: qcom: spmi: fix debugfs drive strength
  - tools/nolibc: s390: include std.h
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
  - comedi: Flush partial mappings in error case
  - fsnotify: fix sending inotify event with unexpected filename
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
  - perf/x86/intel/pt: Fix buffer full but size is 0 case
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00
  - jfs: xattr: check invalid xattr size more strictly
  - ext4: fix FS_IOC_GETFSMAP handling
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
  - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  - Revert "arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled"
  - btrfs: do not BUG_ON() when freeing tree block after error
  - dm-bufio: fix warnings about duplicate slab caches
  - dm-cache: fix warnings about duplicate slab caches
  - closures: Change BUG_ON() to WARN_ON()
  - usb: ehci-spear: fix call balance of sehci clk handling routines
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - nvme: fix metadata handling in nvme-passthrough
  - mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()
  - f2fs: fix fiemap failure issue when page size is 16KB
  - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
  - apparmor: fix 'Do simple duplicate message elimination'
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
  - drm/radeon: Fix spurious unplug event on radeon HDMI
  - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
  - drm/radeon: add helper rdev_to_drm(rdev)
  - ALSA: hda/realtek: Update ALC256 depop procedure
  - counter: ti-ecap-capture: Add check for clk_enable()
  - counter: stm32-timer-cnt: Add check for clk_enable()
  - misc: apds990x: Fix missing pm_runtime_disable()
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
  - USB: chaoskey: fail open after removal
  - usb: yurex: make waiting on yurex_write interruptible
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
  - iio: light: al3010: Fix an error handling path in al3010_probe()
  - ipmr: fix tables suspicious RCU usage
  - ip6mr: fix tables suspicious RCU usage
  - rxrpc: Improve setsockopt() handling of malformed user input
  - llc: Improve setsockopt() handling of malformed user input
  - bnxt_en: Unregister PTP during PCI shutdown and suspend
  - bnxt_en: Refactor bnxt_ptp_init()
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - net: hsr: fix hsr_init_sk() vs network/transport headers.
  - spi: atmel-quadspi: Fix register name in verbose logging function
  - octeontx2-af: Quiesce traffic before NIX block reset
  - octeontx2-af: RPM: fix stale FCFEC counters
  - octeontx2-af: RPM: fix stale RSFEC counters
  - octeontx2-pf: Reset MAC stats during probe
  - octeontx2-af: RPM: Fix low network performance
  - octeontx2-af: RPM: Fix mismatch in lmac type
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines
  - net: mdio-ipq4019: add missing error check
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
  - net: microchip: vcap: Add typegroup table terminators in kunit tests
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
  - power: supply: rt9471: Use IC status regfield to report real charger status
  - power: supply: rt9471: Fix wrong WDT function regfield declaration
  - power: supply: bq27xxx: Fix registers of bq27426
  - power: supply: core: Remove might_sleep() from power_supply_put()
  - LoongArch: BPF: Sign-extend return values
  - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
  - fs_parser: update mount_api doc to match function signature
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - gpio: zevio: Add missed label initialisation
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration
  - hwmon: (tps23861) Fix reporting of negative temperatures
  - NFSD: Fix nfsd4_shutdown_copy()
  - nfsd: release svc_expkey/svc_export with rcu_work
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
  - remoteproc: qcom: pas: add minidump_id to SM8350 resources
  - perf trace: Avoid garbage when not printing a syscall's arguments
  - perf trace: Do not lose last events in a race
  - perf trace: Fix tracing itself, creating feedback loops
  - perf list: Fix topic and pmu_name argument order
  - m68k: coldfire/device.c: only build FEC when HW macros are defined
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
  - perf trace: avoid garbage when not printing a trace event's arguments
  - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
  - PCI: j721e: Add suspend and resume support
  - PCI: j721e: Use T_PERST_CLK_US macro
  - PCI: j721e: Add reset GPIO to struct j721e_pcie
  - PCI: cadence: Set cdns_pcie_host_init() global
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
  - PCI: j721e: Add PCIe 4x lane selection support
  - PCI: j721e: Add per platform maximum lane settings
  - PCI: Add T_PVPERL macro
  - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID
  - f2fs: check curseg->inited before write_sum_page in change_curseg
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
  - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
  - rust: macros: fix documentation of the paste! macro
  - perf probe: Correct demangled symbols in C++ program
  - perf probe: Fix libdw memory leak
  - f2fs: fix to account dirty data in __get_secs_required()
  - f2fs: compress: fix inconsistent update of i_blocks in release_compress_blocks and reserve_compress_blocks
  - perf test attr: Add back missing topdown events
  - perf trace: Keep exited threads for summary
  - perf stat: Fix affinity memory leaks on error path
  - perf stat: Close cork_fd when create_perf_stat_counter() failed
  - gfs2: Allow immediate GLF_VERIFY_DELETE work
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
  - perf cs-etm: Don't flush when packet_queue fills up
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
  - smb: cached directories can be more than root file handle
  - pinctrl: k210: Undef K210_PC_DEFAULT
  - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
  - dt-bindings: clock: axi-clkgen: include AXI clk
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - powerpc/kexec: Fix return of uninitialized variable
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
  - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells
  - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
  - dax: delete a stale directory pmem
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
  - x86/tdx: Introduce wrappers to read and write TD metadata
  - x86/tdx: Pass TDCALL/SEAMCALL input/output registers via a structure
  - x86/tdx: Rename __tdx_module_call() to __tdcall()
  - x86/tdx: Make macros of TDCALLs consistent with the spec
  - x86/tdx: Skip saving output regs when SEAMCALL fails with VMFailInvalid
  - scsi: fusion: Remove unused variable 'rc'
  - fs/proc/kcore.c: fix coccinelle reported ERROR instances
  - mfd: rt5033: Fix missing regmap_del_irq_chip()
  - checkpatch: always parse orig_commit in fixes tag
  - checkpatch: check for missing Fixes tags
  - iommu/vt-d: Fix checks and print in pgtable_walk()
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
  - clk: imx: imx8-acm: Fix return value check in clk_imx_acm_attach_pm_domains()
  - clk: imx: clk-scu: fix clk enable state save and restore
  - clk: imx: fracn-gppll: fix pll power up
  - clk: imx: fracn-gppll: correct PLL initialization flow
  - clk: imx: lpcg-scu: SW workaround for errata (e10858)
  - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
  - RDMA/rxe: Set queue pair cur_qp_state when being queried
  - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
  - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
  - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in RD_ANY_REG_OP
  - powerpc/mm/fault: Fix kfence page fault reporting
  - mtd: rawnand: atmel: Fix possible memory leak
  - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
  - mtd: hyperbus: rpc-if: Convert to platform remove callback returning void
  - cpufreq: loongson2: Unregister platform_driver on failure
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  - mfd: da9052-spi: Change read-mask to write-mask
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
  - powerpc/vdso: Flag VDSO64 entry points as functions
  - pinctrl: zynqmp: drop excess struct member description
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event
  - clk: mediatek: drop two dead config options
  - unicode: Fix utf8_load() error path
  - bpf: fix recursive lock when verdict program return SK_PASS
  - wireguard: selftests: load nf_conntrack if not present
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
  - net: rfkill: gpio: Add check for clk_enable()
  - bpf: Force uprobe bpf program to always return 0
  - drm/amdkfd: Fix wrong usage of INIT_WORK()
  - selftests: net: really check for bg process completion
  - ipv6: release nexthop on device removal
  - net: use unrcu_pointer() helper
  - sock_diag: allow concurrent operation in sock_diag_rcv_msg()
  - sock_diag: allow concurrent operations
  - sock_diag: add module pointer to "struct sock_diag_handler"
  - bpf, sockmap: Fix sk_msg_reset_curr
  - bpf, sockmap: Several fixes to bpf_msg_push_data
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
  - netlink: typographical error in nlmsg_type constants definition
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list
  - netfilter: nf_tables: skip transaction if update object is not implemented
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list
  - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
  - netfilter: nf_tables: Introduce nf_tables_getrule_single()
  - netfilter: nf_tables: Open-code audit log call in nf_tables_getrule()
  - drm: use ATOMIC64_INIT() for atomic64_t
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
  - bpf, bpftool: Fix incorrect disasm pc
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
  - wifi: wfx: Fix error handling in wfx_core_init()
  - drm/etnaviv: hold GPU lock across perfmon sampling
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
  - drm/msm/gpu: Check the status of registration to PM QoS
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
  - bpf, arm64: Remove garbage frame for struct_ops trampoline
  - drm/panfrost: Remove unused id_mask from struct panfrost_model
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
  - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
  - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
  - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
  - drm: fsl-dcu: enable PIXCLK on LS1021A
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
  - selftests/bpf: Fix msg_verify_data in test_sockmap
  - drm/bridge: tc358767: Fix link properties discovery
  - netdevsim: copy addresses for both in and out paths
  - libbpf: never interpret subprogs in .text as entry programs
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
  - libbpf: fix sym_is_subprog() logic for weak global subprogs
  - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
  - ice: Support FCS/CRC strip disable for VF
  - virtchnl: Add CRC stripping capability
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
  - bpf: Fix the xdp_adjust_tail sample prog issue
  - libbpf: Fix expected_attach_type set handling in program load callback
  - drm/bridge: it6505: Drop EDID cache on bridge power off
  - drm/bridge: anx7625: Drop EDID cache on bridge power off
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
  - ASoC: fsl_micfil: fix regmap_write_bits usage
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
  - drm/v3d: Address race-condition in MMU flush
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/omap: Fix locking in omap_gem_new_dmabuf()
  - drm/omap: Fix possible NULL dereference
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - drm/vc4: hvs: Correct logic on stopping an HVS channel
  - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
  - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
  - drm/vc4: hvs: Don't write gamma luts on 2711
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
  - platform/x86: panasonic-laptop: Return errno correctly in show callback
  - HID: hyperv: streamline driver probe to avoid devres issues
  - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
  - selftests/resctrl: Protect against array overrun during iMC config parsing
  - selftests/resctrl: Fix memory overflow due to unhandled wraparound
  - selftests/resctrl: Refactor fill_buf functions
  - selftests/resctrl: Split fill_buf to allow tests finer-grained control
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
  - arm64: dts: mediatek: mt6358: fix dtbs_check error
  - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
  - arm64: dts: renesas: hihope: Drop #sound-dai-cells
  - regmap: irq: Set lockdep class for hierarchical IRQ domains
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
  - spi: tegra210-quad: Avoid shift-out-of-bounds
  - pmdomain: ti-sci: Add missing of_node_put() for args.np
  - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
  - x86/of: Unconditionally call unflatten_and_copy_device_tree()
  - um: Unconditionally call unflatten_device_tree()
  - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
  - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
  - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
  - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
  - tpm: fix signed/unsigned bug when checking event logs
  - efi/libstub: fix efi_parse_options() ignoring the default command line
  - openrisc: Implement fixmap to fix earlycon
  - mmc: mmc_spi: drop buggy snprintf()
  - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
  - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
  - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
  - arm64: dts: mt8195: Fix dtbs_check error for mutex node
  - microblaze: Export xmb_manager functions
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
  - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
  - clocksource/drivers:sp804: Make user selectable
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
  - kcsan, seqlock: Support seqcount_latch_t
  - time: Fix references to _msecs_to_jiffies() handling of values
  - time: Partially revert cleanup on msecs_to_jiffies() documentation
  - x86/unwind/orc: Fix unwind for newly forked tasks
  - thermal/lib: Fix memory leak on error in thermal_genl_auto()
  - tools/lib/thermal: Make more generic the command encoding function
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
  - crypto: caam - add error check to caam_rsa_set_priv_key_form
  - hwmon: (pmbus/core) clear faults after setting smbalert mask
  - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
  - doc: rcu: update printed dynticks counter bits
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
  - crypto: cavium - Fix the if condition to exit loop after timeout
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/fsl_ddr: Fix bad bit shift operations
  - thermal: core: Initialize thermal zones before registering them
  - crypto: qat - remove faulty arbiter config reset
  - firmware: google: Unregister driver_info on failure
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
  - crypto: qat - remove check after debugfs_create_dir()
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - virtio_blk: reverse request order in virtio_queue_rqs
  - nvme-pci: reverse request order in nvme_queue_rqs
  - ext4: remove calls to to set/clear the folio error flag
  - s390/syscalls: Avoid creation of arch/arch/ directory
  - block: fix bio_split_rw_at to take zone_write_granularity into account
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
  - m68k: mvme147: Reinstate early console
  - m68k: mvme16x: Add and use "mvme16x.h"
  - m68k: mvme147: Fix SCSI controller IRQ numbers
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
  - x86/pvh: Call C code via the kernel virtual mapping
  - x86/pvh: Set phys_base when calling xen_prepare_pvh()
  - s390/pageattr: Implement missing kernel_page_present()
  - s390/cio: Do not unregister the subchannel based on DNV
  - kselftest/arm64: mte: fix printf type warnings about longs
  - kselftest/arm64: mte: fix printf type warnings about __u64
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
  - x86/stackprotector: Work around strict Clang TLS symbol requirements
  - ipmr: Fix access to mfc_cache_list without lock held
  - ARM: 9420/1: smp: Fix SMP for xip kernels
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
  - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
  - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
  - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
  - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
  - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed
  - can: j1939: fix error in J1939 documentation.
  - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
  - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
  - platform/x86: dell-smbios-base: Extends support to Alienware products
  - regulator: rk808: Add apply_bit for BUCK3 on RK809
  - firmware: arm_scmi: Reject clear channel request on A2P
  - soc: qcom: Add check devm_kasprintf() returned value
  - net: usb: qmi_wwan: add Quectel RG650V
  - bpf: fix filed access without lock
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
  - usb: typec: use cleanup facility for 'altmodes_node'
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
  - mac80211: fix user-power when emulating chanctx
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
  - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-79.0.0.84
changelog:
  - !15203  usb: cdc-acm: Check control transfer buffer size before access
  - usb: cdc-acm: Check control transfer buffer size before access
  - !15214  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - !15178 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Conflicts Patches
  - perf time-utils: Fix 32-bit nsec parsing
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
  - perf stat: Display iostat headers correctly
  - perf sched timehist: Fix missing free of session in perf_sched__timehist()
  - perf report: Fix --total-cycles --stdio output error
  - perf ui/browser/annotate: Use global annotation_options
  - perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
  - perf annotate: Split branch stack cycles info from 'struct annotation'
  - perf inject: Fix leader sampling inserting additional samples
  - perf mem: Free the allocated sort string, fixing a leak
  - !14179 [OLK-6.6] update ITMT support patch for Zhaoxin CPUs
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - Revert "cpufreq: ACPI: add ITMT support when CPPC enabled"
  - !15200  arm64/mpam: Try reading again if monitor instance returns not ready
  - arm64/mpam: Try reading again if monitor instance returns not ready
  - !15197 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Patches
  - block: avoid to reuse `hctx` not removed from cpuhp callback list
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
  - ALSA: sh: Fix wrong argument order for copy_from_iter()
  - btrfs: sysfs: fix direct super block member reads
  - btrfs: avoid monopolizing a core when activating a swap file
  - power: supply: gpio-charger: Fix set charge current limits
  - drm/amdkfd: pause autosuspend when creating pdd
  - drm/amdkfd: Use device based logging for errors
  - drm/amdkfd: drop struct kfd_cu_info
  - drm/amdkfd: reduce stack size in kfd_topology_add_device()
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
  - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
  - pmdomain: core: Add missing put_device()
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
  - MIPS: mipsregs: Set proper ISA level for virt extensions
  - MIPS: Probe toolchain support of -msym32
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock
  - blk-mq: register cpuhp callback after hctx is added to xarray table
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - spi: intel: Add Panther Lake SPI controller support
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
  - LoongArch: BPF: Adjust the parameter of emit_jirl()
  - LoongArch: Fix reserving screen info memory for above-4G firmware
  - regmap: Use correct format specifier for logging range errors
  - smb: server: Fix building with GCC 15
  - ALSA: sh: Use standard helper for buffer accesses
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue
  - udf: Skip parent dir link count update if corrupted
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
  - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
  - stddef: make __struct_group() UAPI C++-friendly
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - mtd: rawnand: fix double free in atmel_pmecc_create_user()
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  - dmaengine: apple-admac: Avoid accessing registers in probe
  - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
  - dmaengine: tegra: Return correct DMA status when paused
  - dmaengine: dw: Select only supported masters for ACPI devices
  - dmaengine: mv_xor: fix child node refcount handling in early exit
  - phy: rockchip: naneng-combphy: fix phy reset
  - phy: usb: Toggle the PHY power during init
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
  - phy: core: Fix that API devm_phy_put() fails to release the phy
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
  - phy: core: Fix an OF node refcount leakage in _of_phy_get()
  - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
  - mtd: rawnand: arasan: Fix missing de-registration of NAND
  - mtd: rawnand: arasan: Fix double assertion of chip-select
  - mtd: diskonchip: Cast an operand to prevent potential overflow
  - nfsd: restore callback functionality for NFSv4.0
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - bpf: Check negative offsets in __bpf_skb_min_len()
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
  - mm/vmstat: fix a W=1 clang compiler warning
  - ceph: allocate sparse_ext map only for sparse reads
  - ceph: fix memory leak in ceph_direct_read_write()
  - ceph: try to allocate a smaller extent map for sparse read
  - !15190 v2  fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - arm64/mpam: Add write memory barrier to guarantee monitor results
  - arm64/mpam: Improve conversion accuracy between percent and fixed-point fraction
  - arm64/mpam: Fix out-of-bound access of cfg array
  - arm64/mpam: fix bug in percent_to_mbw_max()
  - arm64/mpam: fix MBA granularity conversion formula
  - arm64/mpam: Fix out-of-bound access of mbwu_state array
  - arm64/mpam: Add judgment to distinguish MSMON_MBWU_CAPTURE definition
  - arm64/mpam: Support MATA monitor feature for MPAM
  - fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - !15192  scsi: megaraid_sas: Fix for a potential deadlock
  - scsi: megaraid_sas: Fix for a potential deadlock
  - !15191  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - !15170  The QoS feature adapts to the cfs bandwidth throttling
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - sched/qos: Fix qos throttling in SMT expelled
  - hungtask: fixed offline group hung task issue under high load scenarios
  - !15176  virtio-blk: don't keep queue frozen during system suspend
  - virtio-blk: don't keep queue frozen during system suspend
  - !15175  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - !15167  Backport tracing fix patch
  - trace: Fix kabi breakage for trace_event_fields
  - tracing: Check "%s" dereference via the field and not the TP_printk format
  - !15181  kobject: Fix global-out-of-bounds in kobject_action_type()
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !15184  binfmt_flat: Fix integer overflow bug on 32 bit systems
  - binfmt_flat: Fix integer overflow bug on 32 bit systems
  - !15161 Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - !15166  tracing: Have process_string() also allow arrays
  - tracing: Have process_string() also allow arrays
  - !14939 Fix  the performance monitor  relates to core for Hygon family 18h processor
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - !15159  mm/thp: fix deferred split unqueue naming and locking
  - mm/thp: fix deferred split unqueue naming and locking
  - !15142 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.66-6.6.68 LTS Patches
  - dt-bindings: net: fec: add pps channel property
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
  - net: fec: make PPS channel configurable
  - net: fec: refactor PPS channel configuration
  - io_uring/rw: avoid punting to io-wq directly
  - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  - io_uring/rw: split io_read() into a helper
  - epoll: Add synchronous wakeup support for ep_poll_callback
  - ceph: fix memory leaks in __ceph_sync_read()
  - ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
  - ceph: validate snapdirname option length when mounting
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
  - of: Fix error path in of_parse_phandle_with_args_map()
  - udmabuf: also check for F_SEAL_FUTURE_WRITE
  - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
  - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
  - io_uring: Fix registered ring file refcount leak
  - selftests/bpf: Use asm constraint "m" for LoongArch
  - selftests/memfd: run sysctl tests when PID namespace support is enabled
  - tracing: Add "%s" check in test_event_printk()
  - tracing: Add missing helper functions in event pointer dereference check
  - tracing: Fix test_event_printk() to process entire print argument
  - smb: client: fix TCP timers deadlock after rmmod
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  - btrfs: tree-checker: reject inline extent items with 0 ref count
  - vmalloc: fix accounting with i915
  - zram: fix uninitialized ZRAM not releasing backing device
  - zram: refuse to use zero sized block device as backing device
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
  - hwmon: (tmp513) Fix Current Register value interpretation
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
  - hwmon: (tmp513) Use SI constants from units.h
  - hwmon: (tmp513) Simplify with dev_err_probe()
  - hwmon: (tmp513) Don't use "proxy" headers
  - drm/amdgpu: don't access invalid sched
  - i915/guc: Accumulate active runtime on gt reset
  - i915/guc: Ensure busyness counter increases motonically
  - i915/guc: Reset engine utilization buffer before registration
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
  - thunderbolt: Improve redrive mode handling
  - USB: serial: option: add Telit FE910C04 rmnet compositions
  - USB: serial: option: add MediaTek T7XX compositions
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
  - USB: serial: option: add MeiG Smart SLM770A
  - USB: serial: option: add TCL IK512 MBIM & ECM
  - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
  - efivarfs: Fix error on non-existent file
  - i2c: riic: Always round-up when calculating bus period
  - chelsio/chtls: prevent potential integer overflow on 32bit
  - net: tun: fix tun_napi_alloc_frags()
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  - EDAC/amd64: Simplify ECC check on unified memory controllers
  - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
  - net: mdiobus: fix an OF node reference leak
  - selftests: openvswitch: fix tcpdump execution
  - netfilter: ipset: Fix for recursive locking warning
  - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
  - net: ethernet: bgmac-platform: fix an OF node reference leak
  - ksmbd: fix broken transfers when exceeding max simultaneous operations
  - ksmbd: count all requests in req_running counter
  - net: renesas: rswitch: rework ts tags management
  - ionic: use ee->offset when returning sprom data
  - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - cxl/region: Fix region creation for greater than x2 switches
  - cxl/pci: Fix potential bogus return value upon successful probing
  - tools: hv: change permissions of NetworkManager configuration file
  - xfs: reset rootdir extent size hint after growfsrt
  - xfs: take m_growlock when running growfsrt
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
  - xfs: attr forks require attr, not attr2
  - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
  - xfs: fix file_path handling in tracepoints
  - xfs: convert comma to semicolon
  - xfs: Fix xfs_prepare_shift() range for RT
  - xfs: Fix xfs_flush_unmap_range() range for RT
  - xfs: create a new helper to return a file's allocation unit
  - xfs: declare xfs_file.c symbols in xfs_file.h
  - xfs: use consistent uid/gid when grabbing dquots for inodes
  - xfs: verify buffer, inode, and dquot items every tx commit
  - xfs: fix the contact address for the sysfs ABI documentation
  - i2c: pnx: Fix timeout in wait functions
  - p2sb: Do not scan and remove the P2SB device when it is unhidden
  - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
  - p2sb: Introduce the global flag p2sb_hidden_by_bios
  - p2sb: Factor out p2sb_read_from_cache()
  - platform/x86: p2sb: Make p2sb_get_devfn() return void
  - usb: cdns3: Add quirk flag to enable suspend residency
  - PCI/AER: Disable AER service on suspend
  - PCI: Use preserve_config in place of pci_flags
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
  - MIPS: Loongson64: DTS: Fix msi node for ls7a
  - usb: cdns3-ti: Add workaround for Errata i2409
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC
  - PCI: vmd: Create domain symlink before pci_bus_add_devices()
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
  - net: sched: fix ordering of qlen adjustment
  - x86/static-call: fix 32-bit build
  - x86/xen: remove hypercall page
  - x86/xen: use new hypercall functions instead of hypercall page
  - x86/xen: add central hypercall functions
  - x86/static-call: provide a way to do very early static-call updates
  - objtool/x86: allow syscall instruction
  - x86: make get_cpu_vendor() accessible from Xen code
  - xen/netfront: fix crash when removing device
  - net: rswitch: Avoid use-after-free in rswitch_poll()
  - selftests/bpf: remove use of __xlated()
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
  - kselftest/arm64: abi: fix SVCR detection
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
  - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
  - net: renesas: rswitch: fix initial MPIC register setting
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting
  - Bluetooth: iso: Fix recursive locking warning
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - net/sched: netem: account for backlog updates from child qdisc
  - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
  - netfilter: nf_tables: do not defer rule destruction via call_rcu
  - net: renesas: rswitch: handle stop vs interrupt race
  - net: renesas: rswitch: fix leaked pointer on error path
  - net: renesas: rswitch: fix race window between tx start and complete
  - net: rswitch: Add jumbo frames handling for TX
  - net: rswitch: Add a setting ext descriptor function
  - net: rswitch: Add unmap_addrs instead of dma address in each desc
  - net: rswitch: Use build_skb() for RX
  - net: rswitch: Use unsigned int for desc related array index
  - net: rswitch: Drop unused argument/return value
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
  - ASoC: amd: yc: Fix the wrong return value
  - ALSA: control: Avoid WARN() for symlink errors
  - qca_spi: Make driver probing reliable
  - qca_spi: Fix clock speed for multiple QCA7000
  - cxgb4: use port number to set mac addr
  - ACPI: resource: Fix memory resource type union access
  - net: sparx5: fix the maximum frame length register
  - net: sparx5: fix FDMA performance issue
  - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
  - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
  - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
  - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
  - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
  - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
  - net: lapb: increase LAPB_HEADER_LEN
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
  - wifi: cfg80211: sme: init n_channels before channels[] access
  - tipc: fix NULL deref in cleanup_bearer()
  - batman-adv: Do not let TT changes list grows indefinitely
  - batman-adv: Remove uninitialized data in full table TT response
  - batman-adv: Do not send uninitialized TT changes
  - amdgpu/uvd: get ring reference from rq scheduler
  - wifi: mac80211: fix station NSS capability initialization order
  - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
  - bpf, sockmap: Fix update element with same
  - bpf, sockmap: Fix race between element replace and close()
  - xfs: only run precommits once per transaction object
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved
  - xfs: return from xfs_symlink_verify early on V4 filesystems
  - xfs: don't drop errno values when we fail to ficlone the entire range
  - xfs: update btree keys correctly when _insrec splits an inode root block
  - drm/i915: Fix memory leak by correcting cache object name in error handler
  - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
  - usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
  - usb: typec: anx7411: fix fwnode_handle reference leak
  - usb: ehci-hcd: fix call balance of clocks handling routines
  - usb: gadget: midi2: Fix interpretation of is_midi1 bits
  - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
  - usb: dwc2: Fix HCD port connection race
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
  - usb: dwc2: Fix HCD resume
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
  - usb: host: max3421-hcd: Correctly abort a USB request.
  - riscv: Fix IPIs usage in kfence_protect_page()
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
  - riscv: Fix wrong usage of __pa() on a fixmap address
  - tcp: check space before adding MPTCP SYN options
  - splice: do not checksum AF_UNIX sockets
  - ksmbd: fix racy issue from session lookup and expire
  - !15144  hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - !15143  scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - !15132  CVE-2024-56607 fix
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  - wifi: mac80211: Add non-atomic station iterator
  - !15140  iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-80.0.0.85
changelog:
  - !15278  tracing/osnoise: Fix resetting of tracepoints
  - tracing/osnoise: Fix resetting of tracepoints
  - !15227 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Conflicts Patches
  - mm: z3fold: deprecate CONFIG_Z3FOLD
  - null_blk: Remove usage of the deprecated ida_simple_xx() API
  - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
  - proc: add config & param to block forcing mem writes
  - HID: Ignore battery for all ELAN I2C-HID devices
  - ata: sata_sil: Rename sil_blacklist to sil_quirks
  - ata: pata_serverworks: Do not use the term blacklist
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
  - uprobes: Fix race in uprobe_free_utask
  - perf,x86: Fix kabi breakage in struct uprobe_task
  - perf,x86: avoid missing caller address in stack traces captured in uprobe
  - i2c: synquacer: Deal with optional PCLK correctly
  - i2c: synquacer: Remove a clk reference from struct synquacer_i2c
  - !15248 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - selftests/ftrace: adjust offset for kprobe syntax error test
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
  - iommu/arm-smmu: Defer probe of clients after smmu device bound
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev
  - KVM: arm64: Change kvm_handle_mmio_return() return polarity
  - !15270 v2  mm: Backport two patch
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont()
  - arm64/mm: Re-organize arch_make_huge_pte()
  - mm/hugetlb: use arch_make_huge_pte() in __hugetlb_insert_pfn()
  - !14820 [OLK-6.6]Hygon: Support kernel boot verification and secret injection for Hygon CSV3 VM
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !14819 [OLK-6.6]Hygon: Support CSV3 Attestation
  - x86/configs: openeuler_defconfig: Set CONFIG_VIRT_DRIVERS=y and CONFIG_EFI_SECRET=m
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !15251 Intel: Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - !15185 hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-82.0.0.86
changelog:
  - !15440 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Patches
  - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  - riscv: Fix text patching when IPI are used
  - mm: hugetlb: independent PMD page table shared count
  - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  - pgtable: fix s390 ptdesc field comments
  - workqueue: Add rcu lock check at the end of work item execution
  - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  - arm64: dts: rockchip: add hevc power domain clock to rk3328
  - ARM: dts: imxrt1050: Fix clocks for mmc
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  - riscv: kprobes: Fix incorrect address calculation
  - iio: adc: ad7124: Disable all channels at probe time
  - iio: inkern: call iio_device_put() only on mapped devices
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler
  - iio: imu: kmx61: fix information leak in triggered buffer
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  - usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
  - usb: gadget: midi2: Reverse-select at the right place
  - usb: fix reference leak in usb_new_device()
  - USB: core: Disable LPM only for non-suspended ports
  - USB: usblp: return error when setting unsupported protocol
  - usb: dwc3-am62: Disable autosuspend during remove
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  - tty: serial: 8250: Fix another runtime PM usage counter underflow
  - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  - usb: dwc3: gadget: fix writing NYET threshold
  - USB: serial: cp210x: add Phoenix Contact UPS Device
  - usb-storage: Add max sectors quirk for Nokia 208
  - staging: iio: ad9832: Correct phase range check
  - staging: iio: ad9834: Correct phase range check
  - USB: serial: option: add Neoway N723-EA support
  - USB: serial: option: add MeiG Smart SRM815
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  - io_uring/timeout: fix multishot updates
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw
  - drm/amdkfd: fixed page fault when enable MES shader debugger
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  - smb: client: sync the root session and superblock context passwords before automounting
  - thermal: of: fix OF node leak in of_thermal_zone_find()
  - ksmbd: Implement new SMB3 POSIX type
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  - sctp: sysctl: udp_port: avoid using current->nsproxy
  - sctp: sysctl: auth_enable: avoid using current->nsproxy
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  - mptcp: sysctl: sched: avoid using current->nsproxy
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  - scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
  - dm thin: make get_first_thin use rcu-safe list first function
  - riscv: mm: Fix the out of bound issue of vmemmap address
  - cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  - afs: Fix the maximum cell name length
  - drm/mediatek: Add return value check when reading DPCD
  - drm/mediatek: Fix mode valid issue for dp
  - drm/mediatek: Fix YCbCr422 color format issue for DP
  - drm/mediatek: stop selecting foreign drivers
  - net/mlx5: Fix variable not being completed when function returns
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  - netfilter: nf_tables: imbalance in flowtable binding
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - riscv: Fix early ftrace nop patching
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  - Bluetooth: btnxpuart: Fix driver sending truncated data
  - Bluetooth: MGMT: Fix Add Device to responding before completing
  - Bluetooth: hci_sync: Fix not setting Random Address when required
  - eth: gve: use appropriate helper to set xdp_features
  - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  - tls: Fix tls_sw_sendmsg error handling
  - igc: return early when failing to read EECD register
  - igc: field get conversion
  - ice: fix incorrect PHY settings for 100 GB/s
  - cxgb4: Avoid removal of uninserted tid
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - pds_core: limit loop over fw name list
  - net: libwx: fix firmware mailbox abnormal return
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  - selftests/alsa: Fix circular dependency involving global-timer
  - ASoC: mediatek: disable buffer pre-allocation
  - ASoC: rt722: add delay time to wait for the calibration procedure
  - erofs: fix PSI memstall accounting
  - erofs: handle overlapped pclusters out of crafted images properly
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ovl: do not encode lower fh with upper sb_writers held
  - exfat: fix the infinite loop in __exfat_free_cluster()
  - dm array: fix cursor index when skipping across block boundaries
  - dm array: fix unreleased btree blocks on closing a faulty array cursor
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - jbd2: flush filesystem device before updating tail sequence
  - jbd2: increase IO priority for writing revoke records
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - RDMA/bnxt_re: Fix max SGEs for the Work Request
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - mm/kmemleak: fix sleeping function called from invalid context at print message
  - mm/readahead: fix large folio support in async readahead
  - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - dt-bindings: display: adi,adv7533: Drop single lane support
  - drm: adv7511: Drop dsi single lane support
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075
  - RDMA/uverbs: Prevent integer overflow issue
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  - kcov: mark in_softirq_really() as __always_inline
  - ALSA hda/realtek: Add quirk for Framework F111:000C
  - ALSA: seq: Check UMP support for midi_version change
  - modpost: fix the missed iteration for the max bit in do_input()
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support
  - ARC: build: Try to guess GCC variant of cross compiler
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  - Bluetooth: hci_core: Fix sleeping function called from invalid context
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
  - smb: client: destroy cfid_put_wq on module exit
  - ksmbd: set ATTR_CTIME flags when setting mtime
  - ksmbd: retry iterate_dir in smb2_query_dir
  - bpf: fix potential error return
  - sound: usb: format: don't warn that raw DSD is unsupported
  - sound: usb: enable DSD output for ddHiFi TC44C
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  - drm/amdkfd: Correct the migration DMA map direction
  - wifi: mac80211: wake the queues in case of failure in resume
  - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  - ila: serialize calls to nf_register_net_hooks()
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  - af_packet: fix vlan_get_tci() vs MSG_PEEK
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  - net: restrict SO_REUSEPORT to inet sockets
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  - net: mv643xx_eth: fix an OF node reference leak
  - eth: bcmsysport: fix call balance of priv->clk handling routines
  - ALSA: usb-audio: US16x08: Initialize array before use
  - net: llc: reset skb->transport_header
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  - drm/i915/dg1: Fix power gate sequence.
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation
  - netrom: check buffer length before accessing it
  - net: Fix netns for ip_tunnel_init_flow()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  - ip_tunnel: annotate data-races around t->parms.link
  - net: stmmac: restructure the error path of stmmac_probe_config_dt()
  - net: stmmac: don't create a MDIO bus if unnecessary
  - net: dsa: microchip: Fix LAN937X set_ageing_time function
  - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  - RDMA/bnxt_re: Fix the locking while accessing the QP table
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  - RDMA/bnxt_re: Add send queue size check for variable wqe
  - RDMA/bnxt_re: Disable use of reserved wqes
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  - RDMA/bnxt_re: Fix max_qp_wrs reported
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device
  - RDMA/bnxt_re: Add check for path mtu in modify_qp
  - RDMA/bnxt_re: Fix the check for 9060 condition
  - nvme-pci: 512 byte aligned dma pool segment quirk
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues
  - RDMA/mlx5: Enforce same type port association for multiport RoCE
  - RDMA/bnxt_re: Remove always true dattr validity check
  - RDMA/bnxt_re: Allow MSN table capability check
  - powerpc: Remove initialisation of readpos
  - net: mctp: handle skb cleanup on sock_queue failures
  - ceph: give up on paths longer than PATH_MAX
  - mmc: sdhci-msm: fix crypto key eviction
  - !15418  ocfs2: handle a symlink read error correctly
  - ocfs2: handle a symlink read error correctly
  - !15299  ptp: Ensure info->enable callback is always set
  - !15299  ptp: Ensure info->enable callback is always set
  - ptp: Ensure info->enable callback is always set
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - libbpf: Fix segfault due to libelf functions not setting errno
  - !15417 [Intel-SIG] x86/cpu: Clearwater Forest support including CPU model and new ISAs
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15390  backport mainline bugfix patch
  - !15390  backport mainline bugfix patch
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available
  - !15229  NFS: remove unused variable nfs_rpcstat
  - NFS: remove unused variable nfs_rpcstat
  - !14975 [OLK-6.6] [Backport] scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - !15302 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Conflicts Patches
  - selftests: mptcp: join: test for prohibited MPC to port-based endp
  - !15292 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.56-6.6.57 LTS Conflicts Patches
  - HID: mcp2200: added driver for GPIOs of MCP2200
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4}
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15043  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - !15283  wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - !15308  CVE-2025-21732
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
  - RDMA/mlx5: Change check for cacheable mkeys
  - !15298  usbnet: ipheth: fix possible overflow in DPE length check
  - usbnet: ipheth: fix possible overflow in DPE length check
  - !15334  perf/core: Save raw sample data conditionally based on sample type
  - perf/core: Save raw sample data conditionally based on sample type
  - !15347  Mainline Patch
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - !15331  Fixes CVE-2025-21767
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message
  - !15221  smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - !15364  LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - !15345  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15363  gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - !15385  orangefs: fix a oob in orangefs_debug_write
  - orangefs: fix a oob in orangefs_debug_write
  - !15265  NFSD: fix hang in nfsd4_shutdown_callback
  - NFSD: fix hang in nfsd4_shutdown_callback
  - !15263  NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - !15266  nfsd: clear acl_access/acl_default after releasing them
  - nfsd: clear acl_access/acl_default after releasing them
  - !15346  block: mark GFP_NOIO around sysfs ->store()
  - block: mark GFP_NOIO around sysfs ->store()
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  - ALSA: ump: Shut up truncated string warning
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands
  - cleanup: Remove address space of returned pointer
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
  - Bluetooth: btusb: add callback function in btusb suspend/resume
  - scsi: mpi3mr: Start controller indexing from 0
  - scsi: mpi3mr: Use ida to manage mrioc ID
  - ALSA: ump: Update legacy substream names upon FB info update
  - ALSA: ump: Indicate the inactive group in legacy substream names
  - ALSA: ump: Don't open legacy substream for an inactive group
  - ALSA: ump: Use guard() for locking
  - udf: Verify inode link counts before performing rename
  - udf_rename(): only access the child content on cross-directory rename
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
  - of: address: Store number of bus flag cells rather than bool
  - of: address: Remove duplicated functions
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - x86, crash: wrap crash dumping code into crash related ifdefs
  - thunderbolt: Don't display nvm_version unless upgrade supported
  - thunderbolt: Add support for Intel Panther Lake-M/P
  - thunderbolt: Add support for Intel Lunar Lake
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
  - usb: xhci: Limit Stop Endpoint retries
  - xhci: retry Stop Endpoint on buggy NEC controllers
  - net: renesas: rswitch: fix possible early skb release
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  - net/mlx5: unique names for per device caches
  - Revert "nvme: make keep-alive synchronous operation"
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
  - usb: typec: ucsi: add update_connector callback
  - usb: typec: ucsi: add callback for connector status updates
  - iio: adc: ad7192: properly check spi_get_device_match_data()
  - iio: adc: ad7192: Convert from of specific to fwnode property handling
  - usb: chipidea: udc: limit usb request length to max 16KB
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
  - fs/ntfs3: Fix warning in ni_fiemap
  - fs/ntfs3: Implement fallocate for compressed files
  - remoteproc: qcom: pas: enable SAR2130P audio DSP support
  - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  - remoteproc: qcom: pas: Add sc7180 adsp
  - mailbox: pcc: Check before sending MCTP PCC response ACK
  - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
  - Bluetooth: Add support ITTIM PE50-M75C
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  - i2c: i801: Add support for Intel Panther Lake
  - i2c: i801: Add support for Intel Arrow Lake-H
  - wifi: ath10k: avoid NULL pointer error during sdio remove
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
  - cleanup: Add conditional guard support
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
  - crypto: ecdsa - Rename keylen to bufsize where necessary
  - crypto: ecdsa - Convert byte arrays with key coordinates to digits
  - ext4: partial zero eof block on unaligned inode size extension
  - ext4: convert to new timestamp accessors
  - memblock: allow zero threshold in validate_numa_converage()
  - NUMA: optimize detection of memory with no node id assigned by firmware
  - sched: Initialize idle tasks only once
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
  - smb: client: fix use-after-free of signing key
  - smb: client: stop flooding dmesg in smb2_calc_signature()
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  - smb/client: rename cifs_ace to smb_ace
  - smb/client: rename cifs_acl to smb_acl
  - smb/client: rename cifs_sid to smb_sid
  - smb/client: rename cifs_ntsd to smb_ntsd
  - x86/mm: Carve out INVLPG inline asm for use by others
  - docs: media: update location of the media patches
  - drm/amd/display: Fix incorrect DSC recompute trigger
  - drm/amd/display: Fix DSC-re-computing


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-82.0.0.87
changelog:
  - RISC-V kernel upgrade to 6.6.0-82.0.0
  - riscv: Fixed conflict created by commit c7c8e8a76904
  - riscv: Enable zstd-compressed firmware support
  - riscv: Enable AMDKFD driver for ROCm


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-83.0.0.88
changelog:
  - !15047 mm: Backport some mm patchs
  - mm/memmap: prevent double scanning of memmap by kmemleak
  - mm: kmemleak: fix upper boundary check for physical address objects
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios
  - mm: compaction: use the proper flag to determine watermarks
  - !15271  LoongArch: fix cacheinfo/unaligned/rtc/s3/hda/usb issues
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - ice: fix unaligned access in ice_create_lag_recipe
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !15516 mm: shmem: remove unnecessary warning in shmem_writepage()
  - mm: shmem: remove unnecessary warning in shmem_writepage()
  - !15492  Add dp module in hibmc driver
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - drm/hisilicon/hibmc: convert to struct drm_edid
  - !15395  clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - !15459  perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - !15369  media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - !15421 [OLK-6.6] [Backport] upstream fix for driver nvme
  - nvme: handle connectivity loss in nvme_set_queue_count
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
  - nvme: Add error path for xa_store in nvme_init_effects
  - nvme: Add error check for xa_store in nvme_get_effects_log
  - !15370  wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - !15483  CVE-2024-58069
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - !15470  some readahead improvement
  - readahead: properly shorten readahead when falling back to do_page_cache_ra()
  - readahead: don't shorten readahead window in read_pages()
  - readahead: make sure sync readahead reads needed page
  - !15404  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15376 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Conflicts Patches
  - mptcp: update local address flags when setting it
  - NFSD: Async COPY result needs to return a write verifier
  - !15164 [openEuler-24.03-LTS][linux-6.6.y sync] KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - !15375 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Conflicts Patches
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
  - !15149 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15147  Add device HID for Hygon GPIO controller
  - pinctrl: Add device HID for Hygon GPIO controller
  - !15438 fix HCT build err once VFIO disabled
  - hct: fix build err once VFIO disabled


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-84.0.0.89
changelog:
  - !15625 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.75-6.6.76 LTS Patches
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  - selftests/landlock: Fix error message
  - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
  - btrfs: output the reason for open_ctree() failure
  - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
  - staging: media: max96712: fix kernel oops when removing module
  - usb: gadget: f_tcm: Don't free command immediately
  - media: uvcvideo: Fix double free in error path
  - remoteproc: core: Fix ida_free call while not allocated
  - mptcp: handle fastopen disconnect correctly
  - mptcp: consolidate suboption status
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
  - usb: dwc3: core: Defer the probe until USB power supply ready
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
  - usb: gadget: f_tcm: Fix Get/SetInterface return value
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection
  - net: usb: rtl8150: enable basic endpoint checking
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
  - ktest.pl: Check kernelrelease return in get_version
  - selftests/rseq: Fix handling of glibc without rseq support
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length
  - kbuild: switch from lz4c to lz4 for compression
  - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
  - f2fs: Introduce linear search for dentries
  - hexagon: Fix unbalanced spinlock in die()
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
  - kconfig: fix memory leak in sym_warn_unmet_dep()
  - kconfig: WERROR unmet symbol dependency
  - kconfig: deduplicate code in conf_read_simple()
  - kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
  - kconfig: require a space after '#' for valid input
  - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
  - cifs: Fix getting and setting SACLs over SMB1
  - cifs: Validate EAs for WSL reparse points
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
  - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
  - RISC-V: Mark riscv_v_init() as __init
  - hostfs: fix the host directory parse when mounting.
  - hostfs: Add const qualifier to host_root in hostfs_fill_super()
  - hostfs: fix string handling in __dentry_name()
  - hostfs: convert hostfs to use the new mount API
  - genksyms: fix memory leak when the same symbol is read from *.symref file
  - genksyms: fix memory leak when the same symbol is added from source
  - net: hsr: fix fill_frame_info() regression vs VLAN packets
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path
  - net: xdp: Disallow attaching device-bound programs in generic mode
  - tcp: correct handling of extreme memory squeeze
  - bgmac: reduce max frame size to support just MTU 1500
  - vsock: Allow retrying on connect() failure
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
  - perf trace: Fix runtime error of index out of bounds
  - net: stmmac: Limit FIFO size by hardware capability
  - net: stmmac: Limit the number of MTL queues to hardware capability
  - ptp: Properly handle compat ioctls
  - net: davicom: fix UAF in dm9000_drv_remove
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
  - net: netdevsim: try to close UDP port harness races
  - net: rose: fix timer races against user threads
  - iavf: allow changing VLAN state without calling PF
  - PM: hibernate: Add error handling for syscore_suspend()
  - net: fec: implement TSO descriptor cleanup
  - gpio: mxc: remove dead code after switch to DT-only
  - regulator: core: Add missing newline character
  - ubifs: skip dumping tnc tree when zroot is null
  - xfrm: delete intermediate secpath entry in packet offload mode
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
  - tools/bootconfig: Fix the wrong format specifier
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
  - serial: 8250: Adjust the timeout for FIFO mode
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
  - module: Extend the preempt disabled section in dereference_symbol_descriptor().
  - nilfs2: protect access to buffers with no active references
  - nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
  - buffer: make folio_create_empty_buffers() return a buffer_head
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
  - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
  - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
  - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
  - media: nxp: imx8-isi: fix v4l2-compliance test errors
  - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
  - mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
  - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
  - media: uvcvideo: Propagate buf->error to userspace
  - media: camif-core: Add check for clk_enable()
  - media: mipi-csis: Add check for clk_enable()
  - media: i2c: ov9282: Correct the exposure offset
  - media: i2c: imx412: Add missing newline to prints
  - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
  - media: marvell: Add check for clk_enable()
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
  - media: lmedm04: Handle errors for lme2510_int_read
  - media: rc: iguanair: handle timeouts
  - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
  - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set
  - of: reserved-memory: Do not make kmemleak ignore freed address
  - RDMA/mlx5: Fix indirect mkey ODP page count
  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
  - i3c: dw: Add hot-join support.
  - arm64: tegra: Fix DMA ID for SPI2
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
  - ARM: dts: mediatek: mt7623: fix IR nodename
  - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
  - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
  - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
  - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
  - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
  - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
  - arm64: dts: qcom: sc7180: fix psci power domain node names
  - arm64: dts: qcom: sc7180: change labels to lower-case
  - arm64: dts: qcom: Add SM7125 device tree
  - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
  - arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
  - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
  - ARM: omap1: Fix up the Retu IRQ on Nokia 770
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
  - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
  - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
  - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
  - arm64: dts: qcom: sm8450: correct sleep clock frequency
  - arm64: dts: qcom: sm8350: correct sleep clock frequency
  - arm64: dts: qcom: sm8250: correct sleep clock frequency
  - arm64: dts: qcom: sm6375: correct sleep clock frequency
  - arm64: dts: qcom: sm6125: correct sleep clock frequency
  - arm64: dts: qcom: sm4450: correct sleep clock frequency
  - arm64: dts: qcom: sdx75: correct sleep clock frequency
  - arm64: dts: qcom: sc7280: correct sleep clock frequency
  - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
  - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
  - arm64: dts: qcom: qcs404: correct sleep clock frequency
  - arm64: dts: qcom: msm8994: correct sleep clock frequency
  - arm64: dts: qcom: msm8939: correct sleep clock frequency
  - arm64: dts: qcom: msm8916: correct sleep clock frequency
  - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
  - arm64: dts: qcom: msm8994: Describe USB interrupts
  - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
  - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
  - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
  - ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
  - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
  - RDMA/srp: Fix error handling in srp_add_port
  - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
  - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
  - RDMA/rxe: Fix mismatched max_msg_sz
  - RDMA/rxe: Improve newline in printing messages
  - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
  - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
  - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
  - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
  - rdma/cxgb4: Prevent potential integer overflow on 32bit
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array
  - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
  - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
  - arm64: dts: mediatek: mt8516: add i2c clock-div property
  - arm64: dts: mediatek: mt8516: fix wdt irq type
  - arm64: dts: mediatek: mt8516: fix GICv2 range
  - arm64: dts: mt8183: set DMIC one-wire mode on Damu
  - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
  - ARM: at91: pm: change BU Power Switch to automatic mode
  - soc: atmel: fix device_node release in atmel_soc_device_init()
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
  - smb: client: fix oops due to unset link speed
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - perf lock: Fix parse_lock_type which only retrieve one lock flag
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake
  - pinctrl: stm32: Add check for clk_enable()
  - perf report: Fix misleading help message about --demangle
  - ASoC: Intel: avs: Fix theoretical infinite loop
  - ASoC: Intel: avs: Do not readq() u32 registers
  - ASoC: Intel: avs: Abstract IPC handling
  - ASoC: Intel: avs: Prefix SKL/APL-specific members
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
  - perf namespaces: Introduce nsinfo__set_in_pidns()
  - perf machine: Don't ignore _etext when not a text symbol
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
  - padata: fix sysfs store callback check
  - ALSA: seq: Make dependency on UMP clearer
  - ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
  - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
  - ktest.pl: Remove unused declarations in run_bisect_test function
  - perf expr: Initialize is_test value in expr__ctx_new()
  - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_btf()
  - crypto: caam - use JobR's space to access page 0 regs
  - selftests/bpf: Fix fill_link_info selftest on powerpc
  - ASoC: sun4i-spdif: Add clock multiplier settings
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
  - net/rose: prevent integer overflows in rose_setsockopt()
  - tcp_cubic: fix incorrect HyStart round start detection
  - net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
  - netfilter: nft_flow_offload: update tcp state flags under lock
  - netfilter: nf_tables: fix set size with rbtree backend
  - netfilter: nft_set_rbtree: prefer sync gc to async worker
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function
  - netfilter: nf_tables: de-constify set commit ops function argument
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - net: avoid race between device unregistration and ethnl ops
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64
  - net/mlxfw: Drop hard coded max FW flash image size
  - net: let net.core.dev_weight always be non-zero
  - pwm: stm32: Add check for clk_enable()
  - clk: analogbits: Fix incorrect calculation of vco rate delta
  - inet: ipmr: fix data-races
  - wifi: cfg80211: adjust allocation of colocated AP data
  - wifi: cfg80211: Handle specific BSSID in 6GHz scanning
  - selftests: harness: fix printing of mismatch values in __EXPECT()
  - selftests: timers: clocksource-switch: Adapt progress to kselftest framework
  - wifi: mt76: mt7996: fix ldpc setting
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
  - wifi: mt76: mt7996: fix HE Phy capability
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
  - wifi: mt76: mt7996: add max mpdu len capability
  - wifi: mt76: mt7996: fix register mapping
  - wifi: mt76: mt7915: fix register mapping
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset
  - wifi: mt76: mt7915: improve hardware restart reliability
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
  - landlock: Handle weird files
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
  - wifi: mac80211: don't flush non-uploaded STAs
  - wifi: mac80211: Fix common size calculation for ML element
  - wifi: mac80211: fix tid removal during mesh forwarding
  - wifi: mac80211: prohibit deactivating all links
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
  - wifi: wlcore: fix unbalanced pm_runtime calls
  - samples/landlock: Fix possible NULL dereference in parse_path()
  - mfd: syscon: Fix race in device_node_get_regmap()
  - mfd: syscon: Use scoped variables with memory allocators to simplify error paths
  - mfd: syscon: Add of_syscon_register_regmap() API
  - mfd: syscon: Remove extern from function prototypes
  - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
  - HID: fix generic desktop D-Pad controls
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
  - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
  - wifi: ath12k: fix tx power, max reg power update to firmware
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
  - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
  - ax25: rcu protect dev->ax25_ptr
  - regulator: of: Implement the unwind path of of_regulator_match()
  - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
  - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
  - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
  - team: prevent adding a device which is already a team device lower
  - clk: imx8mp: Fix clkout1/2 support
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
  - gpio: pca953x: log an error when failing to get the reset GPIO
  - gpio: pca953x: Fully convert to device managed resources
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
  - pwm: stm32-lp: Add check for clk_enable()
  - inetpeer: do not get a refcount in inet_getpeer()
  - inetpeer: update inetpeer timestamp in inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer_v[46]()
  - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
  - dt-bindings: mfd: bd71815: Fix rsense and typos
  - cpupower: fix TSC MHz calculation
  - ACPI: fan: cleanup resources in the error path of .probe()
  - wifi: brcmfmac: add missing header include for brcmf_dbg
  - regulator: dt-bindings: mt6315: Drop regulator-compatible property
  - HID: multitouch: fix support for Goodix PID 0x01e9
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
  - wifi: rtlwifi: remove unused check_buddy_priv
  - dt-bindings: leds: class-multicolor: Fix path to color definitions
  - clk: fix an OF node reference leak in of_clk_get_parent_name()
  - of: remove internal arguments from of_property_for_each_u32()
  - clk: si5351: allow PLLs to be adjusted without reset
  - serial: sc16is7xx: use device_property APIs when configuring irda mode
  - dt-bindings: mmc: controller: clarify the address-cells description
  - rxrpc: Fix handling of received connection abort
  - spi: zynq-qspi: Add check for clk_enable()
  - net_sched: sch_sfq: don't allow 1 packet limit
  - net_sched: sch_sfq: handle bigger packets
  - net_sched: sch_sfq: annotate data-races around q->perturb_period
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails
  - wifi: rtlwifi: wait for firmware loading before releasing memory
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
  - wifi: rtlwifi: do not complete firmware loading needlessly
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
  - ipmi: ipmb: Add check devm_kasprintf() returned value
  - drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
  - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
  - drm/msm: Check return value of of_dma_configure()
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
  - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
  - drm/amdgpu/vcn: reset fw_shared under SRIOV
  - drm/rockchip: vop2: include rockchip_drm_drv.h
  - drm/rockchip: move output interface related definition to rockchip_drm_drv.h
  - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
  - drm/rockchip: vop2: Fix the windows switch between different layers
  - drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
  - drm/rockchip: vop2: Set YUV/RGB overlay mode
  - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
  - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
  - drm/etnaviv: Fix page property being used for non writecombine buffers
  - drm/msm/dp: set safe_to_exit_level before printing it
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
  - sched/topology: Rename 'DIE' domain to 'PKG'
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
  - select: Fix unbalanced user_access_end()
  - partitions: ldm: remove the initial kernel-doc notation
  - selftests/powerpc: Fix argument order to timer_sub()
  - pstore/blk: trivial typo fixes
  - block: retry call probe after request_module in blk_request_module
  - fs: fix proc_handler for sysctl_nr_open
  - afs: Fix cleanup of immediately failed async calls
  - afs: Fix directory format encoding struct
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
  - dlm: fix srcu_read_lock() return type to int
  - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
  - !15477  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - !15472  PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - !15473  iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - !15474  OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - !15475  wifi: wcn36xx: fix channel survey memory allocation size
  - wifi: wcn36xx: fix channel survey memory allocation size
  - !15476  LoongArch: Fix warnings during S3 suspend
  - LoongArch: Fix warnings during S3 suspend
  - !15464 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Patches
  - drm/v3d: Assign job pointer to NULL before signaling the fence
  - Input: xpad - add support for wooting two he (arm)
  - Input: xpad - add support for Nacon Evol-X Xbox One Controller
  - Input: xpad - improve name of 8BitDo controller 2dc8:3106
  - Input: xpad - add QH Electronics VID/PID
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone
  - Input: atkbd - map F23 key to support default copilot shortcut
  - Input: xpad - add support for Nacon Pro Compact
  - ALSA: usb-audio: Add delay quirk for USB Audio Device
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
  - vfio/platform: check the bounds of read/write syscalls
  - cachestat: fix page cache statistics permission checking
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
  - net: sched: fix ets qdisc OOB Indexing
  - smb: client: handle lack of EA support in smb2_query_path_info()
  - libfs: Add simple_offset_rename() API
  - ASoC: samsung: Add missing depends on I2C
  - hwmon: (drivetemp) Set scsi command timeout to 10s
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
  - of/unittest: Add test that of_address_to_resource() fails on non-translatable address
  - drm/amd/display: Use HW lock mgr for PSR1
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
  - seccomp: Stub for !CONFIG_SECCOMP
  - ASoC: samsung: Add missing selects for MFD_WM8994
  - ASoC: wm8994: Add depends on MFD core
  - x86/xen: fix SLS mitigation in xen_hypercall_iret()
  - nfsd: add list_head nf_gc to struct nfsd_file
  - Revert "drm/amdgpu: rework resume handling for display (v2)"
  - fs: relax assertions on failure to encode file handles
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ocfs2: fix deadlock in ocfs2_get_system_file_inode
  - iio: imu: inv_icm42600: fix spi burst write not supported
  - Revert "PCI: Use preserve_config in place of pci_flags"
  - drm/amdgpu: always sync the GFX pipe on ctx switch
  - drm/i915/fb: Relax clear color alignment to 64 bytes
  - hrtimers: Handle CPU state correctly on hotplug
  - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
  - filemap: avoid truncating 64-bit offset to 32 bits
  - nouveau/fence: handle cross device fences properly
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
  - vsock: reset socket state when de-assigning the transport
  - vsock/virtio: cancel close work in the destructor
  - vsock/virtio: discard packets if the transport changes
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
  - selftests: mptcp: avoid spurious errors on disconnect
  - mptcp: fix spurious wake-up on under memory pressure
  - mptcp: be sure to send ack when mptcp-level window re-opens
  - i2c: atr: Fix client detach
  - zram: fix potential UAF of zram table
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
  - x86/asm: Make serialize() always_inline
  - nvmet: propagate npwg topology
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
  - smb: client: fix double free of TCP_Server_Info::hostname
  - i2c: rcar: fix NACK handling when being a target
  - i2c: mux: demux-pinctrl: check initial mux selection, too
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
  - hwmon: (tmp513) Fix division of negative numbers
  - soc: ti: pruss: Fix pruss APIs
  - drm/v3d: Ensure job pointer is set to NULL after job completion
  - drm/vmwgfx: Add new keep_resv BO param
  - net/mlx5e: Always start IPsec sequence number from 1
  - net/mlx5e: Rely on reqid in IPsec tunnel mode
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
  - net/mlx5: Clear port select structure when fail to create
  - net/mlx5: Fix RDMA TX steering prio
  - net: fec: handle page_pool_dev_alloc_pages error
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
  - pktgen: Avoid out-of-bounds access in get_imix_entries
  - openvswitch: fix lockup on tx to unregistering netdev with carrier
  - bpf: Fix bpf_sk_select_reuseport() memory leak
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
  - Revert "ovl: do not encode lower fh with upper sb_writers held"
  - Revert "ovl: pass realinode to ovl_encode_real_fh() instead of realdentry"
  - Revert "ovl: support encoding fid from inode with no alias"
  - !15608  perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - !15360  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15597  CVE-2025-21853
  - bpf: avoid holding freeze_mutex during mmap operation
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
  - !15603  Mainline patch merged into OLK-6.6
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix soft lockup during bt pages loop
  - !15430  cpufreq: Fix some boost errors related to CPU online and offline
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - !15568 [olk 6.6] some features for hibmcge driver
  - net: hibmcge: Add support for ioctl
  - net: hibmcge: Add support for BMC diagnose feature
  - net: hibmcge: Add support for mac link exception handling feature
  - net: hibmcge: Add support for abnormal irq handling feature
  - net: hibmcge: Add support for checksum offload
  - net: hibmcge: Add support for dump statistics
  - ethtool: Implement ethtool_puts()
  - !15357  blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - !15333 VirtCCA Feature: cvm support UEFI boot
  - Bug fix: Resolve the issue of host hard lockup
  - VirtCCA: The cvm removes the vcpu binding limit.
  - VirtCCA: Improve nfs workqueue bind method
  - VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port
  - VirtCCA: an interface to retrieve the TMI version is added
  - VirtCCA: cvm support UEFI boot
  - !15414 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - !15580  two bugfixs
  - mm/migrate: fix shmem xarray update during migration
  - mm: fix finish_fault() handling for large folios


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.90
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.91
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.92
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.93
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.94
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.95
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.96
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.97
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.98
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.99
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403sp1.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: yaoxin <yao_xin001@hoperun.com> - 4.2.15-1
changelog:
  - Update to 4.2.15
    * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
    * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
    * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
    * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
    * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters


author: yaoxin <yao_xin001@hoperun.com> - 4.2.14-1
changelog:
  - Update to 4.2.14
    * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
    * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
    * CVE-2024-39330: Potential directory-traversal via Storage.save()
    * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()


