# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: sunhai <sunhai10@huawei.com> - 36.16.5-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix lost ntfsprogs
          fix lost nvme-cli
          fix BuildRequires


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix(anaconda-pre-log-gen): don't unnecessarily use cat and use grep -E


author: songmingliang <songmingliang@uniontech.com> - 36.16.5-38
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the root user creation GTK GUI not checking if a password
     contains the user name.
          Fix the non-root user creation Text UI not checking if a password
     contains the user name.


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: eastb233 <xiezhiheng@huawei.com> - 2.41-1
changelog:
  - Update binutils 2.41
  - Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils/-/tree/c10s
  - Retire: binutils-CVE-2023-1972.patch
  - Retire: binutils-objcopy-note-merge-speedup.patch
  - Retire: binutils-reloc-symtab.patch


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.41-3
changelog:
  - LoongArch: sync patch from binutils upstream
  - LoongArch: Modify inconsistent behavior of ld with --unresolved-symbols=ignore-all


author: Funda Wang <fundawang@yeah.net> - 2.41-11
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.83
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.84
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.85
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.86
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.87
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.88
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: Li Nan <linan122@huawei.com> - 6.6.0-96.0.0.89
changelog:
  - !16670  mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - !16668  Remove useless file
  - mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - Remove useless file
  - !15819 [OLK-6.6]drm/phytium: Fix some Bugs in Phytium Display Engine
  - !16627  fix move_pages return value
  - !16620  close_files(): don't bother with xchg()
  - !16604  pds_core: remove write-after-free of client_id
  - !16434  ksmbd: fix use-after-free in ksmbd_session_rpc_open
  - !16585  tracing: Fix oob write in trace_seq_to_buffer()
  - mm/migrate: convert add_page_for_migration() from follow_page() to folio_walk
  - mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
  - mm/pagewalk: introduce folio_walk_start() + folio_walk_end()
  - mm: introduce vma_pgtable_walk_{begin|end}()
  - mm/migrate: use folio_likely_mapped_shared() in add_page_for_migration()
  - !16537  md: fix mddev uaf while iterating all_mddevs list
  - !16538  md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - !16494  scsi: st: Fix array overflow in st_setup()
  - !16582  module: ensure that kobject_put() is safe for module type kobjects
  - !16605  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - !16606  CVE-2024-58100
  - close_files(): don't bother with xchg()
  - !16609 migration: update status after RAS error
  - !16586  dlm: prevent NPD when writing a positive value to event_done
  - !16580  dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - bpf: Fix kabi breakage for changes_pkt_data in struct bpf_prog_aux
  - bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
  - bpf: check changes_pkt_data property for extension programs
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - pds_core: remove write-after-free of client_id
  - !16571  Fix erofs fid overflow
  - !16574  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - !16550  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16549  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16600  ftrace: Fix preemption accounting for stacktrace trigger command
  - !16596  powerpc/crash: Fix non-smp kexec preparation
  - !16562 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 6.6
  - !16593  vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - finally take no_llseek out
  - migration: update status after RAS error
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - powerpc/crash: Fix non-smp kexec preparation
  - !16588  ipc: fix to protect IPCS lookups using RCU
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - ipc: fix to protect IPCS lookups using RCU
  - dlm: prevent NPD when writing a positive value to event_done
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - !16492  arm64/watchdog: fix watchdog failure in low power scenarios
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - erofs: fix file handle encoding for 64-bit NIDs
  - exportfs: define FILEID_INO64_GEN* file handle types
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - md: fix mddev uaf while iterating all_mddevs list
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - scsi: st: Fix array overflow in st_setup()
  - arm64/watchdog: fix watchdog failure in low power scenarios
  - drm/phytium: Fix some Bugs in Phytium Display Engine
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open


author: Li Nan <linan122@huawei.com> - 6.6.0-98.0.0.90
changelog:
  - !16740  KVM: arm64: check if IPIV is enabled in BIOS
  - !16737  drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - KVM: arm64: check if IPIV is enabled in BIOS
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - !16694  RDMA/hns: Fix double destruction of rsv_qp
  - !16730  uacce: removal of the Shared Memory Feature for Queues
  - !16727  perf: Remove unstable events for uncore L3C PMU
  - !16732  drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - !16728  drivers/perf: hisi: Add cacheable option for L3C PMU
  - !16724  drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - !16723  perf iostat: hisi: Fix port range retrival
  - !16729  arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - crypto: hisilicon/qm - check whether the input parameters and device PF match
  - uacce: removal of the Shared Memory Feature for Queues
  - arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - !16721 cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - !16701  Add HiSilicon uncore frequency scaling driver
  - !16712 crypto: hisilicon - support algorithm fallback v2
  - arm64: topology: Setup amu fie when cpu hotplugging
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - !16717  Fix issues of nfs mounting
  - !16714 v2  Fix file content inconsistency issue and incorporate subsequent fix patches
  - sched/topology: Add a new arch_scale_freq_ref() method
  - !16696  KVM: arm64: Check whether GICv4.0 is enabled
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - vfs: generate FS_CREATE before FS_OPEN when ->atomic_open used.
  - NFS: abort nfs_atomic_open_v23 if name is too long.
  - NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly.
  - !16680  Fix the problem of NFS client mount read/write permission failure
  - crypto: hisilicon/qm - check the value obtained from the hardware
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon - implement full backlog support for sec
  - uacce: add queue lock for uacce_get_ss_dma
  - uacce: use WARN_ON_ONCE instead of WARN_ON
  - !16705  fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16691 v3  Rewrite smt interference account logic
  - !16662  Fix watchdog false positive problem
  - !16711  af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16287 Update the watchdog period according to real CPU frequency
  - !16679  fs/resctrl: L2_MON does not support the limbo mechanism
  - openeuler_defconfig: Enable devfreq and hisi_uncore_freq by default
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - PM / devfreq: Allow devfreq driver to add custom sysfs ABIs
  - PM / devfreq: Check governor before using governor->name
  - PM / devfreq: Remove redundant devfreq_get_freq_range() calling in devfreq_add_device()
  - PM / devfreq: Limit max_freq with scaling_min_freq
  - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
  - mailbox: pcc: Refactor and simplify check_and_ack()
  - mailbox: pcc: Always map the shared memory communication address
  - mailbox: pcc: Refactor error handling in irq handler into separate function
  - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
  - mailbox: pcc: Return early if no GAS register from pcc_mbox_cmd_complete_check
  - mailbox: pcc: Drop unnecessary endianness conversion of pcc_hdr.flags
  - !16653 [OLK-6.6] Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - !16699  mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - KVM: arm64: Check whether GICv4.0 is enabled
  - RDMA/hns: Fix double destruction of rsv_qp
  - interference: Rewrite smt interference account logic
  - interference: Fix the compilation warning of sched_task_is_throttled()
  - !16686 v2  Soft domain improves and bugfixes
  - sched: Fix might sleep in atomic section issue
  - sched: Consider task affinity in wake_soft_domain()
  - sched: Fix soft domain group memleak
  - sched: Rework cpu.soft_domain_nr_cpu
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - !16639  arm64/mpam: Add MPAM manual
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"
  - !16651  iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: L2_MON does not support the limbo mechanism
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: Prevent idle RMIDs from not being released in time from limbo
  - arm64/mpam: Update the chip condition judgment in resctrl_arch_would_mbm_overflow()
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - arm64/mpam: Add MPAM manual


author: Li Nan <linan122@huawei.com> - 6.6.0-99.0.0.91
changelog:
  - !16556 [OLK-6.6] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16559 mm: mincore: use pte_batch_hint() to batch process large folios
  - !16689 mm/madvise: batch tlb flushes for MADV_DONTNEED and MADV_FREE
  - !16426 FIX CVE-2025-40014
  - !16601 add virtcca capability and kae vf interface
  - !16866 v2  mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16865  pci:vga fix race condition in vga_arb_write
  - !16770 [OLK-6.6] Intel: Backport to fix QuickAssist Technology(QAT) in-tree driver from v6.10 to v6.16
  - !16773  mm:userswap: change VM_USWAP_BIT to bit 61
  - !16820 v2  Fix some smmu bugs
  - !16803  CVE-2025-38060
  - !16828  orangefs: Do not truncate file size
  - !16812 perf hisi-ptt: Fix memory leak in lseek failure handling
  - !16827  btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - !16775 [OLK-6.6]fix enfs bug
  - !16861  arm64: kaslr: fix nokaslr cmdline parsing
  - mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16804  HID: uclogic: Add NULL check in uclogic_input_configured()
  - !16806  vhost-scsi: protect vq->log_used with vq->mutex
  - !14552 [OLK-6.6]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16573  Backport 6.6.64-6.6.72 LTS
  - !16757  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16756  mm: pcp: increase pcp->free_count threshold to trigger free_high
  - pci:vga fix race condition in vga_arb_write
  - !16656  merge CVE patches into OLK-6.6
  - !16512  perf/x86/intel: Only check the group flag for X86 leader
  - !16617  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16748  arm64: xcall: Fix GPR touch as the original step
  - !16778  drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - !16848  tracing: probes: Fix a possible race in trace_probe_log APIs
  - !16842  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16837  ftrace: Fix preemption accounting for stacktrace filter command
  - !16845  bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - !16652 v2  CVE-2025-37948
  - !16791  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16851  drm/amd/display: Increase block_sequence array size
  - drm/amd/display: Increase block_sequence array size
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace filter command
  - orangefs: Do not truncate file size
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - iommu/arm-smmu-v3: Fix the problematic platform detection logic
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - fix review issue
  - vhost-scsi: protect vq->log_used with vq->mutex
  - perf hisi-ptt: Fix memory leak in lseek failure handling
  - HID: uclogic: Add NULL check in uclogic_input_configured()
  - bpf: abort verification if env->cur_state->loop_entry != NULL
  - bpf: copy_verifier_state() should copy 'loop_entry' field
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - fix enfs bug
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - mm:userswap: change VM_USWAP_BIT to bit 61
  - crypto: qat - switch to standard pattern for PCI IDs
  - crypto: qat - remove BITS_IN_DWORD()
  - crypto: qat - remove initialization in device class
  - crypto: qat - add shutdown handler to qat_c3xxx
  - crypto: qat - remove redundant prototypes in qat_c3xxx
  - crypto: qat - add shutdown handler to qat_c62x
  - crypto: qat - remove redundant prototypes in qat_c62x
  - crypto: qat - add shutdown handler to qat_dh895xcc
  - crypto: qat - remove redundant prototypes in qat_dh895xcc
  - crypto: qat - add shutdown handler to qat_420xx
  - crypto: qat - add shutdown handler to qat_4xxx
  - crypto: qat - Remove dst_null support
  - crypto: qat - remove access to parity register for QAT GEN4
  - crypto: qat - set parity error mask for qat_420xx
  - crypto: qat - optimize allocations for fw authentication
  - crypto: qat - remove redundant FW image size check
  - crypto: qat - remove unused members in suof structure
  - crypto: qat - introduce fuse array
  - crypto: qat - add macro to write 64-bit values to registers
  - crypto: qat - refactor service parsing logic
  - crypto: qat - do not export adf_cfg_services
  - crypto: qat - reorder objects in qat_common Makefile
  - crypto: qat - fix object goals in Makefiles
  - crypto: qat - set command ids as reserved
  - crypto: drivers - Use str_enable_disable-like helpers
  - vfio/qat: fix overflow check in qat_vf_resume_write()
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
  - crypto: qat - Fix typo "accelaration"
  - crypto: qat - Constify struct pm_status_row
  - crypto: qat - remove unused adf_devmgr_get_first
  - lib/string_choices: Add str_up_down() helper
  - crypto: qat - Remove trailing space after 
  - crypto: qat - fix "Full Going True" macro definition
  - crypto: qat - Use static_assert() to check struct sizes
  - crypto: qat - allow disabling SR-IOV VFs
  - crypto: qat - ensure correct order in VF restarting handler
  - crypto: qat - fix recovery flow for VFs
  - crypto: qat - disable IOV in adf_dev_stop()
  - crypto: qat - preserve ADF_GENERAL_SEC
  - crypto: qat - initialize user_input.lock for rate_limiting
  - crypto: qat - make adf_ctl_class constant
  - crypto: qat - Fix typo
  - crypto: qat - fix linking errors when PCI_IOV is disabled
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - mm: pcp: increase pcp->free_count threshold to trigger free_high
  - mm: page_alloc: remove redundant READ_ONCE
  - arm64: xcall: Fix GPR touch as the original step
  - mm/madvise: handle madvise_lock() failure during race unwinding
  - mm/madvise: batch tlb flushes for MADV_DONTNEED[_LOCKED]
  - mm/memory: split non-tlb flushing part from zap_page_range_single()
  - mm/madvise: batch tlb flushes for MADV_FREE
  - mm/madvise: define and use madvise_behavior struct for madvise_do_behavior()
  - mm/madvise: remove len parameter of madvise_do_behavior()
  - mm/madvise: remove redundant mmap_lock operations from process_madvise()
  - mm/madvise: split out madvise() behavior execution
  - mm/madvise: split out madvise input validity check
  - mm/madvise: split out mmap locking operations for madvise()
  - mm/madvise: unrestrict process_madvise() for current process
  - mm/madvise: don't perform madvise VMA walk for MADV_POPULATE_(READ|WRITE)
  - crypto: iaa - Fix potential use after free bug
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
  - mm: migrate_device: use more folio in migrate_device_finalize()
  - Revert "remoteproc: core: Clear table_sz when rproc_shutdown"
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - jfs: fix slab-out-of-bounds read in ea_get()
  - tpm: do not start chip while suspended
  - KVM: arm64: Tear down vGIC on failed vCPU creation
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  - arm64: proton-pack: Expose whether the branchy loop k value
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware
  - arm64: insn: Add support for encoding DSB
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
  - arm64: cputype: Add MIDR_CORTEX_A76AE
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
  - add virtcca capability and kae vf interface
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - seq_buf: Make DECLARE_SEQ_BUF() usable
  - seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
  - mm: mincore: use pte_batch_hint() to batch process large folios
  - perf/x86/intel: Only check the group flag for X86 leader
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap

   newline


author: Li Nan <linan122@huawei.com> - 6.6.0-100.0.0.92
changelog:
  - !17003  net_sched: red: fix a race in __red_change()
  - !16747  LoongArch: Fix bugs in huge_pte_offset/__alloc_pages_slowpath/iommu
  - !17026  CVE-2025-37842
  - !17022  spi-rockchip: Fix register out of bounds access
  - !17039  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17036  parisc: Fix double SIGFPE crash
  - !17001  Fix CVE-2025-38182
  - !17034  fix CVE-2025-38118
  - !17033  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - !17035  drm/amdkfd: Fix mode1 reset crash issue
  - !16792 v3  Support CCA Guest
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17023  bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - parisc: Fix double SIGFPE crash
  - drm/amdkfd: Fix mode1 reset crash issue
  - Bluetooth: MGMT: Fix sparse errors
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - spi: fsl-qspi: Fix double cleanup in probe error path
  - spi: fsl-qspi: use devm function instead of driver remove
  - !16991  hwmon: (asus-ec-sensors) check sensor index in read_string()
  - !17014 v2  CVE-2025-38099
  - !17013  crypto: null - Use spin lock instead of mutex
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - spi-rockchip: Fix register out of bounds access
  - !16983  crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - !16982  KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16957  f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16999  octeon_ep: Fix host hang issue during device reboot
  - !16995  f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - !17000 v2  mm: respect mmap hint address when aligning for THP
  - !17006  drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken
  - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING
  - crypto: null - Use spin lock instead of mutex
  - !16467 drm/virtio: implement virtio_gpu_shutdown
  - !16565 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16743 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !16902  cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16994  net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16996  wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - net_sched: red: fix a race in __red_change()
  - ublk: santizize the arguments from userspace when adding a device
  - mm: respect mmap hint address when aligning for THP
  - octeon_ep: Fix host hang issue during device reboot
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16988  Fix compile problem for psi_grained
  - hwmon: (asus-ec-sensors) check sensor index in read_string()
  - Fix compile problem for psi_grained
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16969  Fix CVE-2025-38170
  - !16967  net: openvswitch: Fix the dead loop of MPLS parse
  - !16964  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - !16891 fix some build errors of enfs
  - net: openvswitch: Fix the dead loop of MPLS parse
  - dma-buf: insert memory barrier before updating num_fences
  - !16557 [OLK-6.6] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16919  Backport mainline patches
  - f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16567 [OLK-6.6]:update patches for sw64 architecture
  - !16897  CVE-2025-37784
  - !16922 v2  irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16926  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16912 Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16908  OLK-6.6 Bperf
  - !16603 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.83-6.6.84 LTS Patches
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16906  rseq: Fix segfault on registration when rseq_cs is non-zero
  - xfrm: Clear low order bits of ->flowi4_tos in decode_session4().
  - xfrm: policy: fix layer 4 flowi decoding
  - xfrm: policy: replace session decode with flow dissector
  - xfrm: move mark and oif flowi decode into common code
  - xfrm: pass struct net to xfrm_decode_session wrappers
  - !16898  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16903  some optimization patches for inet_diag dump
  - Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16895 virtCCA supports SR-IOV in CoDA scenarios.
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf stat: Support inherit events during fork() for bperf
  - !16896  drm/v3d: Add job to pending list if the reset was skipped
  - rseq: Fix segfault on registration when rseq_cs is non-zero
  - inet_diag: skip over empty buckets
  - sock_diag: remove sock_diag_mutex
  - inet_diag: allow concurrent operations
  - inet_diag: add module pointer to "struct inet_diag_handler"
  - cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16780 v2  mm/mem_sampling: add trace event for spe based damon record
  - !16781 v4  mm/mem_sampling: fix some mem sampling issues
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
  - net: ti: icss-iep: Add phase offset configuration for perout signal
  - net: ti: icss-iep: Add pwidth configuration for perout signal
  - drm/v3d: Add job to pending list if the reset was skipped
  - !16753  nfs: handle failure of nfs_get_lock_context in unlock path
  - !16237  pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  - virtCCA supports SR-IOV in CoDA scenarios.
  - sunrpc, nfs: CONFIG_ENFS should select CONFIG_SUNRPC_ENFS
  - sunrpc, nfs: fix build errors when CONFIG_SUNRPC_ENFS=m && CONFIG_ENFS=m && CONFIG_NFS=y
  - nfs: fix build errors when CONFIG_ENFS=m && CONFIG_NFS_FS=y
  - nfs: fix enfs mount failure when CONFIG_ENFS=y
  - sw64: adapt to the upstream changes in huge_ptep_get_and_clear
  - sw64: sort arch/sw64/Kconfig
  - sw64: iommu: implement map_pages/unmap_pages API
  - gicv3: add lpi support for virtcca cvm guest
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry
  - configfs-tsm-report: Fix NULL dereference of tsm_ops
  - arm64: Document Arm Confidential Compute
  - virt: arm-cca-guest: TSM_REPORT support for realms
  - mm/slab: Add __free() support for kvfree
  - configfs-tsm: Introduce a shared ABI for attestation reports
  - virt: coco: Add a coco/Makefile and coco/Kconfig
  - arm64: realm: Use aliased addresses for device DMA to shared buffers
  - dma: Introduce generic dma_addr_*crypted helpers
  - dma: Fix encryption bit clearing for dma_to_phys
  - rme: make sure realm guest map memory in page granularity
  - arm64: realm: ioremap: Allow mapping memory as encrypted
  - parisc: Delay write-protection until mark_rodata_ro() call
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys
  - irqchip/gic-v3-its: Rely on genpool alignment
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool()
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor
  - arm64: Enable memory encrypt for Realms
  - arm64: mm: Avoid TLBI when marking pages as valid
  - arm64: Enforce bounce buffers for realm DMA
  - efi: arm64: Map Device with Prot Shared
  - arm64: rsi: Map unprotected MMIO as decrypted
  - arm64: rsi: Add support for checking whether an MMIO is protected
  - arm64: realm: Query IPA size from the RMM
  - arm64: Detect if in a realm and set RIPAS RAM
  - arm64: rsi: Add RSI definitions
  - arm64: mm: Add confidential computing hook to ioremap_prot()
  - arm64: mm: Add top-level dispatcher for internal mem_encrypt API
  - Revert "gicv3: add lpi support for cvm guest"
  - Revert "virtcca feature : disable swiotlb for passthrough device"
  - mm/mem_sampling: Fix inaccurate sampling for NUMA balancing and DAMON
  - mm/mem_sampling: Prevent mem_sampling from being enabled if SPE init failed
  - mm/mem_sampling: add trace event for spe based damon record
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - iommu/loongarch: fix potential hung task when error occurred
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
  - ksmbd: fix r_count dec/increment mismatch
  - Input: xpad - fix two controller table values
  - cifs: Ensure that all non-client-specific reparse points are processed by the server
  - nvme: unblock ctrl state transition for firmware update
  - vboxsf: Add __nonstring annotations for unterminated strings
  - netfilter: nf_tables: allow clone callbacks to sleep
  - netfilter: nf_tables: bail out if stateful expression provides no .clone
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - rust: lockdep: Remove support for dynamically allocated LockClassKeys
  - HID: apple: disable Fn key handling on the Omoton KB066
  - nvme-fc: rely on state transitions to handle connectivity loss
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
  - smb: client: Fix match_session bug preventing session reuse
  - smb3: add support for IAKerb
  - i2c: sis630: Fix an error handling path in sis630_probe()
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
  - i2c: ali1535: Fix an error handling path in ali1535_probe()
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
  - cifs: Validate content of WSL reparse point buffers
  - cifs: Fix integer overflow while processing closetimeo mount option
  - cifs: Fix integer overflow while processing actimeo mount option
  - scripts: generate_rust_analyzer: add missing macros deps
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
  - ASoC: rt722-sdca: add missing readable registers
  - rust: init: add missing newline to pr_info! calls
  - ASoC: cs42l43: Fix maximum ADC Volume
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
  - rust: error: add missing newline to pr_warn! calls
  - ASoC: ops: Consistently treat platform_max as control value
  - smb: client: fix regression with guest option
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
  - arm64: mm: Populate vmemmap at the page level if not section aligned
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
  - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
  - ksmbd: prevent connection release during oplock break notification
  - ksmbd: fix use-after-free in ksmbd_free_work_struct
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14
  - drm/amd/display: Restore correct backlight brightness after a GPU reset
  - drm/amd/display: Disable unneeded hpd interrupts during dm_init
  - drm/dp_mst: Fix locking when skipping CSN before topology probing
  - drm/atomic: Filter out redundant DPMS calls
  - drm/i915/cdclk: Do cdclk post plane programming later
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - USB: serial: option: match on interface class for Telit FN990B
  - USB: serial: option: fix Telit Cinterion FE990A name
  - USB: serial: option: add Telit Cinterion FE990B compositions
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
  - Input: i8042 - swap old quirk combination with new quirk for more devices
  - Input: i8042 - swap old quirk combination with new quirk for several devices
  - Input: i8042 - add required quirks for missing old boardnames
  - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
  - Input: xpad - rename QH controller to Legion Go S
  - Input: xpad - add support for TECNO Pocket Go
  - Input: xpad - add support for ZOTAC Gaming Zone
  - Input: xpad - add multiple supported devices
  - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
  - Input: iqs7222 - preserve system status register
  - Input: ads7846 - fix gpiod allocation
  - io_uring: use unpin_user_pages() where appropriate
  - io_uring/kbuf: vmap pinned buffer ring
  - io_uring: use vmap() for ring mapping
  - io_uring: fix corner case forgetting to vunmap
  - io_uring: don't attempt to mmap larger than what the user asks for
  - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
  - mm: add nommu variant of vm_insert_pages()
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - net: Handle napi_schedule() calls from non-interrupt
  - drm/nouveau: Do not override forced connector status
  - mptcp: safety check before fallback
  - x86/irq: Define trace events conditionally
  - perf/x86/intel: Use better start period for frequency mode
  - drm/vkms: Round fixp2int conversion in lerp_u16
  - fuse: don't truncate cached, mutated symlink
  - ASoC: tas2764: Set the SDOUT polarity correctly
  - ASoC: tas2764: Fix power control mask
  - ASoC: tas2770: Fix volume scale
  - nvme: only allow entering LIVE from CONNECTING state
  - sctp: Fix undefined behavior in left shift operation
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
  - apple-nvme: Release power domains when probe fails
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
  - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
  - io-wq: backoff when retrying worker creation
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
  - ASoC: rsnd: adjust convert rate limitation
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
  - ASoC: rsnd: indicate unsupported clock rate
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
  - ASoC: simple-card-utils.c: add missing dlc->of_node
  - selftests/bpf: Fix invalid flag of recv()
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
  - Xen/swiotlb: mark xen_swiotlb_fixup() __init
  - thermal/cpufreq_cooling: Remove structure member documentation
  - s390/cio: Fix CHPID "configure" attribute caching
  - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
  - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
  - sched: Clarify wake_up_q()'s write to task->wake_q.next
  - objtool: Ignore dangling jump table entries
  - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
  - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
  - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
  - usb: phy: generic: Use proper helper for property detection
  - HID: ignore non-functional sensor in HP 5MP Camera
  - HID: intel-ish-hid: Send clock sync message immediately after reset
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
  - vboxsf: fix building with GCC 15
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
  - smb: client: fix noisy when tree connecting to DFS interlink targets
  - ACPI: resource: IRQ override for Eluktronics MECH-17
  - scsi: ufs: core: Fix error return with query response
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
  - sched/debug: Provide slice length for fair tasks
  - powercap: call put_device() on an error path in powercap_register_control_type()
  - hrtimers: Mark is_migration_base() with __always_inline
  - nvme-fc: do not ignore connectivity loss during connecting
  - nvme-fc: go straight to connecting state when initializing
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
  - net/mlx5: Bridge, fix the crash caused by LAG state check
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
  - net: openvswitch: remove misbehaving actions length check
  - netfilter: nft_exthdr: fix offset with ipv4_find_option()
  - net_sched: Prevent creation of classes with TC_H_ROOT
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
  - bonding: fix incorrect MAC address setting to receive NS messages
  - net: switchdev: Convert blocking notification chain to a raw one
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
  - net/mlx5: handle errors in mlx5_chains_create_table()
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
  - netpoll: hold rcu read lock in __netpoll_send_skb()
  - net: mctp i2c: Copy headers if cloned
  - net: dsa: mv88e6xxx: Verify after ATU Load ops
  - net/mlx5: Fill out devlink dev info only for PFs
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
  - Bluetooth: hci_event: Fix enabling passive scanning
  - sched: address a potential NULL pointer dereference in the GRED scheduler.
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
  - ice: fix memory leak in aRFS after reset
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
  - tcp: fix forever orphan socket caused by tcp_abort
  - tcp: fix races in tcp_abort()
  - hrtimer: Use and report correct timerslack values for realtime tasks
  - zram: fix NULL pointer in comp_algorithm_show()
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
  - clockevents/drivers/i8253: Fix stop sequence for timer 0
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: ftrace: Add direct call trampoline samples support
  - sw64: ftrace: Add direct call support
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: perf: fix perf test 'import perf' in python failed
  - sw64: add support for function error injection
  - sw64: add sw64 rethook implementation
  - sw64: emit fixed-length instructions for BPF_PSEUDO_FUNC
  - sw64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  - drm/virtio: implement virtio_gpu_shutdown
  - virtgpu: don't reset on shutdown
  - virtio: break and reset virtio devices on device_shutdown()
  - LoongArch: sync kvm head file from upstream
  - LoongArch: fix migrate issue
  - LoongArch: Save and restore CSR.CNTC for hibernation
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result


author: Li Nan <linan122@huawei.com> - 6.6.0-101.0.0.93
changelog:
  - !17041 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Conflicts Patches
  - !17126  EDAC/skx_common: Fix general protection fault
  - !17136  xcall xint 644
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - !17070  arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - !17106  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17120 v3  mm: batched unmap lazyfree large folios
  - EDAC/skx_common: Fix general protection fault
  - mm/rmap: fix potential out-of-bounds page table access during batched unmap
  - mm: avoid splitting pmd for lazyfree pmd-mapped THP in try_to_unmap
  - mm: support batched unmap for lazyfree large folios during reclamation
  - mm: support tlbbatch flush for a range of PTEs
  - mm: set folio swapbacked iff folios are dirty in try_to_unmap_one
  - !16998  arm64/mpam: Fix L2 monitor issue under CDP mode
  - !17107  CVE-2025-38322
  - !16947 [OLK-6.6] Fix patches for X2avic to backport for OLK-6.6
  - !17092  drm/amd/display: Fix && vs || typos
  - perf/x86/intel: Fix crash in icl_update_topdown_event()
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
  - perf/x86/intel: Apply static call for drain_pebs
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !16884  fs: Backport four namespace fix patches
  - !17094  config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - drm/amd/display: Fix && vs || typos
  - !17071  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !17068  mcb: fix a double free bug in chameleon_parse_gdd()
  - !17062  bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !16956 v3  config: Enable CONFIG_VIRT_DRIVERS
  - !16950 perf: Add support for SPE Data Source packet on HiSilicon HIP12
  - usb: dwc3: gadget: check that event count does not exceed event buffer length
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - mcb: fix a double free bug in chameleon_parse_gdd()
  - bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !17055  bpf lts backport
  - !17054  bpf verifier fixes
  - !17049  platform/x86: dell_rbu: Fix list usage
  - !17059  media: cxusb: no longer judge rbuf when the write fails
  - !16462 fix  CVE-2025-22101
  - media: cxusb: no longer judge rbuf when the write fails
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - selftests/bpf: Add tests with stack ptr register in conditional jmp
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping
  - selftests/bpf: precision tracking test for BPF_NEG and BPF_END
  - platform/x86: dell_rbu: Fix list usage
  - fs/Kconfig: make hugetlbfs a menuconfig
  - workqueue: Update lock debugging code
  - memblock: use numa_valid_node() helper to check for invalid node ID
  - perf mem: Count L2 HITM for c2c statistic
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64: cputype: Add cputype definition for HIP12
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - arm64/mpam: Fix L2 monitor issue under CDP mode
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit()
  - config: Enable CONFIG_VIRT_DRIVERS
  - KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
  - path_overmount(): avoid false negatives
  - net: libwx: fix Tx L4 checksum


author: Li Nan <linan122@huawei.com> - 6.6.0-102.0.0.94
changelog:
  - !17076  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17102  smb: client: fix use-after-free in cifs_oplock_break
  - !17240  some fix for spe hotcold
  - !17159 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Conflicts Patches
  - !17206  driver core: Use kasprintf() instead of fixed buffer formatting
  - mm_monitor/mm_spe: Embed boost events within SPE packets
  - mm_monitor/mm_spe: Fix SPE boost enablement and continuation handling
  - !17161  olk-6.6-backport-bugfix-for-dynamic-affinity
  - !17150  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !17153  f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17154  media: vivid: Change the siize of the composing
  - !17238 v2  net: Fix kabi breakage for defer_free_list in struct net
  - !17237 RDMA/hns: Fix HW configurations not cleared in error flow
  - net: Fix kabi breakage for defer_free_list in struct net
  - RDMA/hns: Fix HW configurations not cleared in error flow
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Remove redundant hnae3.h in bond and sysfs
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - RDMA/hns: Get messgae length of ack_req from FW
  - !17229 net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
  - !17032  fbcon: Make sure modelist not set on unregistered console
  - !16958  scsi: target: iscsi: Fix timeout on deleted connection
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: add complete parentheses for some macros
  - net: hns3: use hns3_get_ops() helper to reduce the unnecessary middle layer conversion
  - net: hns3: use hns3_get_ae_dev() helper to reduce the unnecessary middle layer conversion
  - net: hns3: delete redundant address before the array
  - net: hns3: clear hns alarm: comparison of integer expressions of different signedness
  - net: hns3: add 
  - Revert "net: hns3: add 
  - !17201 net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - !17215  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17214  netfilter: nf_set_pipapo_avx2: fix initial map fill
  - !17213  net: fix udp gso skb_segment after pull from frag_list
  - !17212  ice: fix Tx scheduler error handling in XDP callback
  - !17207  net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17200  xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - !17199  tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - !17198  bpf: consider that tail calls invalidate packet pointers
  - !17197  net: stmmac: Fix accessing freed irq affinity_hint
  - !17196  mptcp: fix NULL pointer in can_accept_new_subflow
  - !17194  tipc: fix memory leak in tipc_link_xmit
  - !17193  net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - !17192  cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - !17184  sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - !17181  net: fix NULL pointer dereference in l3mdev_l3_rcv
  - !17101  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17191  net: mctp: Set SOCK_RCU_FREE
  - !17190  usbnet:fix NPE during rx_complete
  - !17189  net: ibmveth: make veth_pool_store stop hanging
  - !17188  arcnet: Add NULL check in com20020pci_probe()
  - !17187  net: fix geneve_opt length integer overflow
  - !17186  udp: Fix memory accounting leak.
  - !17185  net: mvpp2: Prevent parser TCAM memory corruption
  - !17182  net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - !17179  net: dsa: free routing table on probe failure
  - !17178  sctp: detect and prevent references to a freed transport in sendmsg
  - !17177  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17176  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17175  net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - !17174  net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17172  xsk: fix an integer overflow in xp_create_and_assign_umem()
  - !17171  net: atm: fix use after free in lec_send()
  - !17170  eth: bnxt: fix truesize for mb-xdp-pass case
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - netfilter: nf_set_pipapo_avx2: fix initial map fill
  - net: fix udp gso skb_segment after pull from frag_list
  - ice: fix Tx scheduler error handling in XDP callback
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17016 [OLK-6.6]:update patches for sw64 architecture
  - driver core: Use kasprintf() instead of fixed buffer formatting
  - !17074  ext4: only dirty folios when data journaling regular files
  - !16951  wifi: ath9k_htc: Abort software beacon handling if disabled
  - net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - Revert "net: hns3: Resolved the issue that the debugfs query result is inconsistent."
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - Revert "net: hns3: initialize reset_timer before hclgevf_misc_irq_init()"
  - net: hns3: Use ARRAY_SIZE() to improve readability
  - Revert "net: hns3: fix spelling mistake "reg_um" -> "reg_num""
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - bpf: consider that tail calls invalidate packet pointers
  - net: stmmac: Fix accessing freed irq affinity_hint
  - mptcp: fix NULL pointer in can_accept_new_subflow
  - tipc: fix memory leak in tipc_link_xmit
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - net: mctp: Set SOCK_RCU_FREE
  - usbnet:fix NPE during rx_complete
  - net: ibmveth: make veth_pool_store stop hanging
  - arcnet: Add NULL check in com20020pci_probe()
  - net: fix geneve_opt length integer overflow
  - !16850 [OLK-6.6] Backport TDX HLT/SAFE-HLT fix
  - udp: Fix memory accounting leak.
  - net: mvpp2: Prevent parser TCAM memory corruption
  - sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - net: fix NULL pointer dereference in l3mdev_l3_rcv
  - net: dsa: free routing table on probe failure
  - sctp: detect and prevent references to a freed transport in sendmsg
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17137 [olk 6.6] net: hibmcge: backport some feature patches
  - xsk: fix an integer overflow in xp_create_and_assign_umem()
  - net: atm: fix use after free in lec_send()
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - !17156  v3:add perpcu stock for kmem
  - scsi: ufs: core: Set default runtime/system PM levels before ufshcd_hba_init()
  - libfs: Fix simple_offset_rename_exchange()
  - shmem: Fix shmem_rename2()
  - mac802154: check local interfaces before deleting sdata list
  - hfs: Sanity check the root record
  - !17109 efi: efi_get_memory_map -- increase map headroom
  - !17148  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - sched/dynamic_affinity: fix CI test alway select prefer_cpu problem
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - sched/fair: reset idlest_cpu if not meet the conditions for preferred CPU
  - memcg: add stock for kmem [un]charging
  - memcg: add CONFIG_MEMCG_KMEM_STOCK
  - scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
  - selftests: tc-testing: reduce rshift value
  - media: vivid: Change the siize of the composing
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17124  crypto: algif_hash - fix double free in hash_accept
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - net: hibmcge: configure FIFO thresholds according to the MAC controller documentation
  - net: hibmcge: adjust the burst len configuration of the MAC controller to improve TX performance.
  - net: hibmcge: support scenario without PHY
  - net: phy: fixed_phy: constify status argument where possible
  - net: phy: fixed_phy: remove irq argument from fixed_phy_register
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
  - net: phy: fixed_phy: remove irq argument from fixed_phy_add
  - net: phy: fixed_phy: remove fixed_phy_register_with_gpiod
  - !17140 v2  Cgroup-Based Interference Statistics followup
  - interference: Add distribution histogram support
  - interference: Use hardware timer counter
  - interference: Add mutex interference track support
  - interference: Add spinlock interference track support
  - interference: Add cgroup_ifs_enter/leave_lock helper
  - interference: Disable irq track when irqtime disabled
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support
  - sw64: Kconfig: enable HAS_IOPORT by default
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - ext4: only dirty folios when data journaling regular files
  - Fix kabi for TDX halt/safe-halt
  - fbcon: Make sure modelist not set on unregistered console
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: restore the register storing direct call address
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - scsi: target: iscsi: Fix timeout on deleted connection
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT


author: Li Nan <linan122@huawei.com> - 6.6.0-103.0.0.95
changelog:
  - !17341 v7  arm64: Add hardware xcall framework support
  - !17336  fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17308  arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - arm64: Add hardware xcall framework support
  - arm64: Reserve a kabi in task_struct exclusively for xcall
  - arm64: Refactor the xcall proc code
  - !17259  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - !17335 ROH: fix security issues and eliminate redundancies
  - ROH: fix security issues and eliminate redundancies
  - arm64/mpam: Ensure the err variable is initialized
  - fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17261 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - !17296  nvmet-tcp: don't restore null sk_state_change
  - !17299  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17310  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17305  CVE-2025-38264
  - !17303  sched/fair: Only increment deadline once on yield
  - !17266 unify log function usage of enfs
  - arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - nvme-tcp: sanitize request list handling
  - llist: add interface to check if a node is on a list.
  - !17255  inspector: hold module refcnt when cpu inspector is running
  - !17291  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - sched/fair: Only increment deadline once on yield
  - nfs/enfs: use enfs_log_error() instead of pr_err() in enfs
  - nfs/enfs: use enfs_log_info() instead of pr_info() in enfs
  - nfs/enfs: cleanups in enfs/shard_route.c
  - nfs/enfs: use enfs_log_debug() instead of pr_debug() to debug enfs
  - nfs/enfs: remove unused code in enfs/dns_internal.h
  - nfs/enfs: use enfs_log_debug() instead of dfprintk() to debug enfs
  - nfs: use dfprintk() to debug enfs
  - !17262 v2  ifs: Defer cgroup ifs enable
  - !17287  i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - nvmet-tcp: don't restore null sk_state_change
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !17275  fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - !17273  atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - !17246 MPTCP UPTREAM PART25
  - ifs: Defer cgroup ifs enable
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - inspector: hold module refcnt when cpu inspector is running
  - selftests: mptcp: join: validate event numbers(part 2)
  - selftests: mptcp: pm_nl_ctl: remove re-definition
  - selftests: mptcp: join: simplify checksum_tests
  - selftests: mptcp: join: mute errors when ran in the background
  - selftests: mptcp: join: specify host being checked
  - selftests: mptcp: join: more explicit check name
  - selftests: mptcp: join: validate MPJ SYN TX MIB counters
  - selftests: mptcp: join: one line for join check
  - selftests: mptcp: join: reduce join_nr params
  - mptcp: MIB counters for sent MP_JOIN
  - mptcp: pm: reduce entries iterations on connect
  - mptcp: pm: fix backup support in signal endpoints
  - mptcp: pm: rename helpers linked to 'flush'
  - mptcp: Remove unused declaration mptcp_sockopt_sync()
  - !17250  arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - !17253  mm: fix uprobe pte be overwritten when expanding vma
  - !16602 【OLK-6.6】修复虚拟机下使用海光TKM功能可能返回TKM_UNSUPPORTED_CMD错误
  - !16797 【OLK-6.6】修复psp_mutex_lock_timeout超时触发soft lockup警告的问题
  - mm: fix uprobe pte be overwritten when expanding vma
  - arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - arm64/mpam: Fix typo in resctrl_arch_set_cdp_enabled()
  - drivers/crypto/ccp: fix soft lockup warning in psp_mutex_lock_timeout()
  - crypto: ccp: fix The high priority queue changes cmd_id of the queued elements


author: Li Nan <linan122@huawei.com> - 6.6.0-104.0.0.96
changelog:
  - !17385 mptcp: pm: only set fullmesh for subflow endp
  - !17445  xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - !17444  Backport mainline patch
  - !17395  Squashfs: check return result of sb_min_blocksize
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - bonding: check xdp prog when set bond mode
  - bonding: return detailed error when loading native XDP fails
  - !17436  i2c/designware: Fix an initialization issue
  - !17432  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17421  ACPICA: fix acpi operand cache leak in dswstate.c
  - !17422  soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - !17423  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17301  fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - !17304  nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - !17331  dm-bufio: fix sched in atomic context
  - !17413  CVE-2025-37957
  - !17412 v3  livepatch: support for super-long symbol repositioning
  - !16933  virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - !16932  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17430  drm/v3d: Disable interrupts before resetting the GPU
  - i2c/designware: Fix an initialization issue
  - !17254 irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17406  usb: net: sierra: check for no status endpoint
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17393  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - ACPICA: fix acpi operand cache leak in dswstate.c
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
  - livepatch: support for super-long symbol repositioning
  - usb: net: sierra: check for no status endpoint
  - !17380  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - mptcp: pm: only set fullmesh for subflow endp
  - !17115  xfs: fix attr inactive issue
  - Squashfs: check return result of sb_min_blocksize
  - selftests/tracing: Fix false failure of subsystem event test
  - !17390  ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17387  ipvlan: ensure network headers are in skb linear part
  - ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17205 fix some panic bugs and memory leak bugs of enfs
  - ipvlan: ensure network headers are in skb linear part
  - !17271 LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - !17251 migration: update status after RAS error
  - !17278 nvme: update firmware version after commit
  - !17330  livepatch: fix insn length check
  - irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17372  drm/amd/display: Add null pointer check for get_first_active_display()
  - !17349  bnxt: properly flush XDP redirect lists
  - !17375  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - !17367  fd/proc: modify xcall proc file permissions to 640
  - !17346  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17222  fs: Add additional checks for block devices during mount
  - !17168  xfrm: state: fix out-of-bounds read during lookup
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17141 CVE-2025-37992：net_sched: Flush gso_skb list too during -&gt;change()
  - !17364  net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - !17167  eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - !17371  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - !17362  ucounts: fix mq_perf test error.
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - fd/proc: modify xcall proc file permissions to 640
  - !17361  scsi: lpfc: Use memcpy() for BIOS version
  - !17360  net: Fix CVE-2025-21884
  - !17356  serial: jsm: fix NPE during jsm_uart_port_init
  - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - ucounts: fix mq_perf test error.
  - scsi: lpfc: Use memcpy() for BIOS version
  - net: better track kernel sockets lifetime
  - net: Add net_passive_inc() and net_passive_dec().
  - !17269 MPTCP UPTREAM PART26
  - !17358  serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17322  Fix CVE-2025-38424
  - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17342  tls: always refresh the queue when reading sock
  - !17343  Fix WARN in perf_cgroup_switch()
  - !17080  serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - !17351  mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17319  mm/dpool: do not use uninitialized variable
  - serial: jsm: fix NPE during jsm_uart_port_init
  - nfs/enfs: remove unnecessary shard_should_stop in shard_route.c
  - mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17345 net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - bnxt: properly flush XDP redirect lists
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - net: hns3: use seq_file for files in common/ of hclge layer
  - net: hns3: use seq_file for files in fd/ in debugfs
  - !17328  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf/core: Fix the WARN_ON_ONCE is out of lock protected region
  - perf/core: Fix WARN in perf_cgroup_switch()
  - !17324  video: screen_info: Relocate framebuffers behind PCI bridges
  - tls: always refresh the queue when reading sock
  - nvme-host: fix the updating of the firmware version
  - nvme: update firmware version after commit
  - net: hns3: use seq_file for files in reg/ in debugfs
  - net: hns3: use seq_file for files in mac_list/ in debugfs
  - net: hns3: use seq_file for files in tm/ in debugfs
  - net: hns3: use seq_file for files in common/ of hns3 layer
  - net: hns3: use seq_file for files in queue/ in debugfs
  - net: hns3: clean up the build warning in debugfs by use seq file
  - net: hns3: remove tx spare info from debugfs.
  - net: hns3: use string choices helper
  - dm-bufio: fix sched in atomic context
  - livepatch: fix insn length check
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - video: screen_info: Relocate framebuffers behind PCI bridges
  - LoongArch: KVM: Enhance the robustness of extioi
  - perf/core: Fix WARN in perf_sigtrap()
  - perf: Fix sample vs do_exit()
  - mm/dpool: do not use uninitialized variable
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted
  - doc: mptcp: sysctl: blackhole_timeout is per-netns
  - mptcp: sysctl: avail sched: remove write access
  - mptcp: remove unneeded lock when listing scheds
  - nfs/enfs: remove enfs_uuid_debug in shard_route.c
  - nfs/enfs: remove usage of list_entry_is_head() in shard_route.c
  - sunrpc: remove redundant rpc_task_release_xprt() of enfs
  - nfs/enfs: remove judgement about enfs_option in nfs_multipath_client_info_init()
  - nfs/enfs: remove nfs_multipath_client_info_free_work()
  - nfs/enfs: fix typos in shard_route.c
  - nfs/enfs: remove unused functions in shard_route.c
  - nfs/enfs: make some functions static in shard_route.c
  - nfs/enfs: introduce DEFINE_PARSE_FH_FUNC to define parse_fh()
  - nfs/enfs: fix memory leak when free view_table
  - nfs/enfs: use DEFINE_CLEAR_LIST_FUNC to define enfs_clear_shard_view()
  - nfs/enfs: introduce DEFINE_CLEAR_LIST_FUNC to define enfs_clear_fs_info()
  - nfs/enfs: fix memory leak in enfs_delete_fs_info()
  - nfs/enfs: fix double free of multipath_client_info
  - nfs/enfs: fix null-ptr-deref in shard_update_work()
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - drivers/iommu: Fix the initialization failure issue of the iommu module
  - LoongArch: KVM: Fix the extioi simulation error
  - netlink: specs: mptcp: fix port endianness
  - mptcp: disable active MPTCP in case of blackhole
  - mptcp: include inet_common in mib.h
  - mptcp: move mptcp_pm_gen.h's include
  - mptcp: remove unnecessary else statements
  - mptcp: prefer strscpy over strcpy
  - mptcp: add net.mptcp.available_schedulers
  - mptcp: sockopt: info: stop early if no buffer
  - mptcp: fallback to TCP after SYN+MPC drops
  - mptcp: export mptcp_subflow_early_fallback()
  - selftests: mptcp: connect: remove duplicated spaces in TAP output
  - selftests: mptcp: diag: remove trailing whitespace
  - selftests: mptcp: test last time mptcp_info
  - mptcp: add last time fields in mptcp_info
  - selftests: mptcp: reset the last TS before the first test
  - selftests: mptcp: netlink: drop disable=SC2086
  - selftests: mptcp: ip_mptcp option for more scripts
  - selftests: mptcp: use pm_nl endpoint ops
  - selftests: mptcp: export pm_nl endpoint ops
  - selftests: mptcp: join: update endpoint ops
  - selftests: mptcp: netlink: add change_address helper
  - selftests: mptcp: add {get,format}_endpoint(s) helpers
  - selftests: mptcp: netlink: add 'limits' helpers
  - selftests: mptcp: add tc check for check_tools
  - selftests: mptcp: connect: remote time in TAP output
  - selftests: mptcp: lib: add time per subtests in TAP output
  - migration: update status after RAS error
  - Revert "migration: update status after RAS error"
  - fs: Add additional checks for block devices during mount
  - xfrm: state: fix out-of-bounds read during lookup
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - net_sched: Flush gso_skb list too during ->change()
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Li Nan <linan122@huawei.com> - 6.6.0-105.0.0.97
changelog:
  - !17513  sched-ebpf-add-for-exec-init
  - !17487  arm64/mpam: Support partial-core boot for MPAM
  - !16844  LeapIOraid: add device and support fw log
  - sched/bpf: Fix kabi breakage for including sched bpf header file
  - sched/ebpf: Add kfunc to set the preferred NUMA node for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - !17512  CVE-2025-21868
  - !17498  sched: Support NUMA parallel scheduling for multiple processes
  - !17508  Huawei iBMA: Added support for Hi1712 Chip
  - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
  - net: use __GENKSYMS__ to revert the kabi change
  - net: allow small head cache usage with large MAX_SKB_FRAGS values
  - Huawei iBMA: Added support for Hi1712 Chip
  - !17501 net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix the division by zero issue
  - net: hibmcge: fix the np_link_fail error reporting issue
  - !17459 ROH: fix variable type inconsistency issue
  - sched: Support NUMA parallel scheduling for multiple processes
  - !17183  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17180  atm: Fix NULL pointer dereference
  - !16807 Support RME feature for CCA host
  - !17488  arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Support partial-core boot for MPAM
  - !17440  sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - VirtCCA: Compatible with virtcca macro definitions
  - CCA: Fix cca kabi conflict
  - VirtCCA: Modify openeuler_defconfig
  - Reapply "VirtCCA: cvm support UEFI boot"
  - VirtCCA: Adapt virtcca operations by cca_base.
  - VirtCCA: Adapt realm operations by cca_base.
  - VirtCCA: Add CCA base operations.
  - [v8-43-43]KVM: arm64: Allow activating realms
  - [v8-42-43]KVM: arm64: Expose KVM_ARM_VCPU_REC to user space
  - [v8-40-43]arm64: RME: Provide accurate register list
  - [v8-39-43]arm64: RME: Provide register list for unfinalized RME RECs
  - [v8-38-43]rm64: RME: Configure max SVE vector length for a Realm
  - [v8-37-43]arm64: RME: Propagate max SVE vector length from RMM
  - [v8-36-43]arm64: RME: Initialize PMCR.N with number counter supported by RMM
  - [v8-35-43]arm64: RME: Set breakpoint parameters through  SET_ONE_REG
  - [v8-34-43]arm64: RME: Propagate number of breakpoints and watchpoints to userspace
  - [v8-33-43]arm64: RME: Hide KVM_CAP_READONLY_MEM for realm guests
  - [v8-32-43]arm64: rme: Enable PMU support with a realm guest
  - [backport]KVM: arm64: PMU: Introduce helpers to set the guest's PMU
  - [backport]KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest
  - !17463  crypto: hisilicon/qm - clear the memory before enabling the device
  - [backport]KVM: arm64: PMU: Set PMCR_EL0.N for vCPU  based  on the  associated PMU
  - [v8-31-43]arm_pmu: Provide a mechanism for disabling the physical  IRQ
  - [v8-30-43]arm64: RME: Prevent Device mappings for Realms
  - [v8-29-43]arm64: RME: Always use 4k pages for realms
  - [v8-28-43]arm64: RME: Allow checking SVE on VM instance
  - [v8-27-43]arm64: RME: support RSI_HOST_CALL
  - [v8-26-43]arm64: RME: allow userspace to inject aborts
  - [v8-25-43]arm64: Don't expose stolen time for realm guests
  - [v8-24-43]KVM: arm64: WARN on injected undef exceptions
  - [v8-23-43]KVM: arm64: Handle Realm PSCI requests
  - [v8-22-43]KVM: arm64: Validate register access for a Realm VM
  - [v8-21-43]KVM: arm64: Handle realm VCPU load
  - [v8-20-43]arm64: RME: Runtime faulting of memory
  - [backport]KVM: arm64: Move pagetable definitions to common header
  - [backport]rme: populate guest memory region without guest_memfd
  - [v8-19-43]arm64: RME: Allow populating initial contents
  - [v8-18-43]KVM: arm64: Handle realm MMIO emulation
  - [v8-17-43]arm64: RME: Handle RMI_EXIT_RIPAS_CHANGE
  - [v8-16-43]arm64: RME: Handle realm enter/exit
  - [v8-15-43]arm64: RME: Allow VMM to set RIPAS
  - [backport]KVM: Add member to struct kvm_gfn_range to indicate private/shared
  - [v8-14-43]KVM: arm64: Support timers in realm RECs
  - [v8-13-43]arm64: RME: Support for the VGIC in realms
  - [backport]KVM: arm64: Force GICv3 trap activation when no irqchip  is configured on VHE
  - [v8-12-43]KVM: arm64: vgic: Provide helper for number of list registers
  - [v8-11-43]arm64: RME: Allocate/free RECs to match vCPUs
  - [backport]KVM: arm64: Add generic check for system-supported vCPU features
  - !17467  arm-smmu-v3: adjust ecmdq log level
  - arm-smmu-v3: adjust ecmdq log level
  - crypto: hisilicon/qm - clear the memory before enabling the device
  - [v8-10-43]arm64: RME: RTT tear down
  - [v8-09-43]KVM: arm64: Allow passing machine type in KVM creation
  - [v8-08-43]kvm: arm64: Don't expose debug capabilities for realm  guests
  - [v8-07-43]arm64: RME: ioctls to create and configure  realms
  - [v8-06-43]arm64: RME: Define the user ABI
  - [v8-05-43]arm64: RME: Check for RME support at KVM init
  - [v8-04-43]arm64: RME: Add wrappers for RMI calls
  - [v8-03-43]arm64: RME: Add SMC definitions for calling the RMM
  - [v8-02-43]arm64: RME: Handle Granule Protection Faults (GPFs)
  - [v8-01-43]kvm: arm64: Include kvm_emulate.h in kvm/arm_psci.h
  - Revert "kvm: add virtcca cvm host feature"
  - Revert "VirtCCA: cvm support UEFI boot"
  - Revert "pmu: enable pmu phys irq inject for cvm"
  - !16720 [OLK-6.6] Not print information of SMMU 0x10 event and add phytium PS24080 SoC platform judgement
  - !17458 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - ROH: fix variable type inconsistency issue
  - !17441 net: hibmcge: support for statistics of reset failures
  - !17435 arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - net: hibmcge: support for statistics of reset failures
  - sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - atm: Fix NULL pointer dereference
  - LeapIOraid: add device and support fw log
  - iommu: smmuv3: Not print information of SMMU 0x10 event


author: Li Nan <linan122@huawei.com> - 6.6.0-106.0.0.98
changelog:
  - !17565  Enhance soft hwpoison handling and injection
  - !17569  drm/vkms: Fix use after free and double free on init error
  - drm/vkms: Fix use after free and double free on init error
  - !17564  bpf: Reject %p% format string in bprintf-like helpers
  - !17510 PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17547  net_sched: drr: Fix double list add in class with netem as child qdisc
  - !17556  filemap: move prefaulting out of hot write path
  - mm/memory-failure: send SIGBUS in the event of thp split fail
  - mm/memory-failure: move hwpoison_filter() higher up
  - mm/memory-failure: improve memory failure action_result messages
  - mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON)
  - mm/memory-failure: try to send SIGBUS even if unmap failed
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17529 mm: optimize mremap() by PTE batching
  - !17481  HID: core: fix __hid_request when no report ID is used
  - bpf: Reject %p% format string in bprintf-like helpers
  - !17495 v2  mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - !17546  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17542  net: sch: Fix CVE-2025-37798
  - !17538  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17537  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17553 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - filemap: move prefaulting out of hot write path
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - RDMA/hns: Fix querying wrong SCC context for DIP algorithm
  - !17479 fix some bugs of enfs
  - !17530  sched/psi: change permissions of /proc/pressure/stat
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - mm/mremap: avoid expensive folio lookup on mremap folio pte batch
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_ets: make est_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - sched/psi: change permissions of /proc/pressure/stat
  - mm: optimize mremap() by PTE batching
  - !17526 v7  High Performance Container Resource View Isolation -- Stage 2
  - !17515 gpiolib: Get rid of never false gpio_is_valid() calls
  - mm: call pointers to ptes as ptep
  - !17519  CVE-2025-38473
  - !17524  CVE-2025-38375
  - !17517  CVE-2025-38251
  - !17523  CVE-2025-38211
  - samples/bpf: Add iterator program for meminfo
  - bpf-rvi: Add bpf_x86_direct_pages kfunc
  - bpf-rvi: Add bpf_mem_vmalloc_{used,total} kfunc
  - bpf-rvi: Add bpf_mem_commit_limit & bpf_mem_committed kfunc
  - bpf-rvi: Add bpf_mem_percpu kfunc
  - bpf-rvi: Add bpf_mem_failure kfunc
  - bpf-rvi: Add bpf_hugetlb_report_meminfo kfunc
  - bpf-rvi: Add bpf_mem_{total,free}cma kfunc
  - bpf-rvi: Add bpf_mem_{file_{hugepage,pmdmapped},kreclaimable} kfunc
  - samples/bpf: Add iterator program for stat
  - bpf-rvi: stat: Add stat iterator target
  - bpf-rvi: Add kstat_ & kcpustat_ kfuncs
  - bpf-rvi: Add cpu runqueue related kfuncs
  - bpf-rvi: Add stat-related misc kfuncs
  - bpf-rvi: Add bpf_seq_file_append() kfunc
  - samples/bpf: Add iterator program for swaps
  - bpf-rvi: Add bpf_page_counter_read() kfunc
  - bpf-rvi: Add bpf_si_memswinfo() kfunc
  - samples/bpf: Add iterator program for uptime
  - bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc
  - samples/bpf: Add iterator program for loadavg
  - bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs
  - bpf-rvi: pidns: Calculate loadavg for each pid namespace
  - samples/bpf: Add iterator program for partitions
  - bpf-rvi: block: Look up /dev in reaper's fs->root and filter partitions
  - bpf-rvi: block: Add partitions iterator target
  - samples/bpf: Add iterator program for diskstats
  - bpf-rvi: blk-cgroup: Add bpf_blkcg_get_dev_iostat() kfunc
  - bpf-rvi: block: Add diskstats iterator target
  - samples/bpf: Add iterator program for cpuinfo_arm64
  - bpf-rvi: arm64: Add bpf_arch_flags kunc for arm64
  - bpf-rvi: arm64: Add cpuinfo_arm64 iterator target
  - bpf-rvi: arm64: Add bpf_arm64_cpu_have_feature() kfunc
  - bpf-rvi: cpuacct: Add task_cpuacct()
  - bpf-rvi: cpuacct: Add bpf_cpuacct_kcpustat_cpu_fetch kfunc
  - bpf-rvi: proc: add bpf_get_{idle,iowait}_time kfunc
  - bpf-rvi: cgroup: Add cgroup_rstat_flush_atomic() kfunc
  - bpf-rvi: Add bpf_mem_cgroup_from_task() kfunc
  - bpf-rvi: cpuset: Fix missing of return for !tsk in task_effective_cpumask()
  - virtio-net: ensure the received length does not exceed allocated size
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
  - nfs/enfs: make some functions static in enfs_multipath_client.c
  - nfs/enfs: remove enfs_init() and enfs_fini()
  - nfs/enfs: format get_ip_to_str() in shard_route.c
  - nfs/enfs: unlock uniformly at the end of function in shard_route.c
  - nfs/enfs: support debugging ip and dns list
  - nfs/enfs: fix error when showing dns list
  - nfs/enfs: fix alignment between struct rpc_clnt and rpc_clnt_reserve
  - nfs/enfs: set CONFIG_SUNRPC_ENFS=y by default
  - nfs/enfs: fix memory leak of shard_view_ctrl when removing nfs module
  - atm: clip: prevent NULL deref in clip_push()
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - Revert "PM / devfreq: Add HiSilicon uncore frequency scaling driver"
  - mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID


author: Li Nan <linan122@huawei.com> - 6.6.0-107.0.0.99
changelog:
  - !17744  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17737 soc cache: Fix incorrect error path of ioctl
  - !17660  cgroup/cpuset: Support dynamic affinity feature
  - !17293 [OLK-6.6] backport important bugfix for Broadcom BCM57414 nic driver from upstream linux-6.6.y
  - !17747  fix some CVE
  - !17751  iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17730  arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - !16545  KVM: arm64: fix memory leak in TLBI
  - iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17716  hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17669  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17674  ftrace: Also allocate and copy hash for reading of filter files
  - !17725  perf/core: Don't leak AUX buffer refcount on allocation failure
  - usb: xhci: Fix invalid pointer dereference in Etron workaround
  - thunderbolt: Do not double dequeue a configuration request
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio
  - Bluetooth: btnxpuart: Fix kernel panic during FW release
  - !17592  ice: add NULL check in eswitch lag check
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17720  crypto: lzo - Fix compression buffer overrun
  - !17719  spi: spi-imx: Add check for spi_imx_setupxfer()
  - !17687  ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - soc cache: Fix incorrect error path of ioctl
  - soc cache: Fix incorrect size validation
  - soc cache: Enforce maintain type check
  - !17683 v2  Fix for bpf samples and selftests
  - !17724  mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17438 [OLK-6.6]:update patches for sw64 architecture
  - !17652  wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - !17728  CVE-2025-38006
  - !17677 v2  Fix static check warning reported by coccinelle
  - !17633  dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17455  raid10: cleanup memleak at raid10_make_request
  - !17453  md/raid1: Fix stack memory use after return in raid1_reshape
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - net: mctp: Don't access ifa_index when missing
  - mctp: no longer rely on net->dev_index_head[]
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17606  drm/sched: Increment job count before swapping tail spsc queue
  - !17671  bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - crypto: lzo - Fix compression buffer overrun
  - spi: spi-imx: Add check for spi_imx_setupxfer()
  - hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17632  perf/core: Exit early on perf_mmap() fail
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - samples/bpf: Move bpf_rvi_* progs to bpf_rvi directory
  - selftests/bpf: fix perf_event link info name_len assertion
  - Revert "selftests/bpf: Use bpf_link__destroy in fill_link_info tests"
  - Revert "selftests/bpf: Add cookies check for perf_event fill_link_info test"
  - Revert "selftests/bpf: fix perf_event link info name_len assertion"
  - !17650 net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17634  HID: pidff: Fix null pointer dereference in pidff_find_fields
  - ACPI / MPAM: Fix wrong IS_ERR() check in _parse_table()
  - hiroce3: Use IS_ERR() to check the return value of kthread_run()
  - ftrace: Also allocate and copy hash for reading of filter files
  - bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - !17642  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17641  net: clear the dst when changing skb protocol
  - !17653  wifi: iwlwifi: fix debug actions order
  - !17651  wifi: mt76: disable napi on driver removal
  - !17647  CVE-2025-38052
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - cgroup/cpuset: Support dynamic affinity feature
  - !17646  sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - !17648  CVE-2025-37920
  - !17643  net: Fix TOCTOU issue in sk_is_readable()
  - !17644  bridge: mcast: Fix use-after-free during router port configuration
  - !17645  CVE-2025-38465
  - !17600  two bugfix for arm64 support HVO
  - !17649  Fix CVE-2025-21839
  - !17628  Fix CVE-2025-37780
  - !17629  Fix CVE-2025-37767
  - !17637  netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - !17638  tcp: Correct signedness in skb remaining space calculation
  - !17639  tipc: Fix use-after-free in tipc_conn_close().
  - !17640  seg6: Fix validation of nexthop addresses
  - wifi: iwlwifi: fix debug actions order
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - wifi: mt76: disable napi on driver removal
  - net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17608  mm/util: make memdup_user_nul() similar to memdup_user()
  - net: hns3: change the function return type from int to bool
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
  - xsk: Fix kabi broken
  - xsk: Fix race condition in AF_XDP generic RX path
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - bridge: mcast: Fix use-after-free during router port configuration
  - net: Fix TOCTOU issue in sk_is_readable()
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: clear the dst when changing skb protocol
  - seg6: Fix validation of nexthop addresses
  - tipc: Fix use-after-free in tipc_conn_close().
  - tcp: Correct signedness in skb remaining space calculation
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - HID: pidff: Fix null pointer dereference in pidff_find_fields
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17597 Delete PHYTIUM_CPU_PART_FTC862 macro
  - perf/core: Exit early on perf_mmap() fail
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
  - isofs: Prevent the use of too small fid
  - !17307  scsi: megaraid_sas: Fix invalid node index
  - !17309  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - mm/util: make memdup_user_nul() similar to memdup_user()
  - drm/sched: Increment job count before swapping tail spsc queue
  - !17575  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - cputype: phytium: Delete PHYTIUM_CPU_PART_FTC862 macro
  - ice: add NULL check in eswitch lag check
  - !16528 [OLK-6.6] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - !17570  tracing: Add down_write(trace_event_sem) when adding trace event
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix missing kvm_unregister_perf_callbacks
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: fix missing characters for sw64_rrk
  - sw64: selftests/net: add sw64 support for io_uring_zerocopy_tx
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: fix incorrect macro definitions for sw64 in bpf_tracing.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: kvm: fix undefined error with ftrace disabled
  - raid10: cleanup memleak at raid10_make_request
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - scsi: megaraid_sas: Fix invalid node index
  - bnxt: properly flush XDP redirect lists
  - dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
  - dma: Fix kabi breakage due to "dma: pswiotlb: Move platform-identification to cpu errata"
  - dma: pswiotlb: Move platform-identification to cpu errata
  - dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
  - dma: phyitum: enable CONFIG_PSWIOTLB
  - dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
  - dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - KVM: arm64: fix memory leak in TLBI


author: Li Nan <linan122@huawei.com> - 6.6.0-108.0.0.100
changelog:
  - !17835 v2  perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - !17856  sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17635 mm: madvise: use per_vma lock for MADV_FREE
  - sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17841  fs/resctrl: Fix max_threshold_occupancy write operation
  - !17844  CVE-2025-37752
  - !17845  xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - !17733  proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - !17834  cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - net_sched: sch_sfq: move the limit validation
  - net_sched: sch_sfq: use a temporary work area for validating configuration
  - !17840  arm64/mpam: Fix num_rmids when enable CDP mode
  - fs/resctrl: Fix max_threshold_occupancy write operation
  - arm64/mpam: Fix num_rmids when enable CDP mode
  - !17838  mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - !17587 CVE-2025-38406: wifi: ath6kl: remove WARN on bad firmware input
  - !17585 CVE-2025-38408： genirq/irq_sim: Initialize work context pointers properly
  - !17586 CVE-2025-38409: drm/msm: Fix another leak in the submit error path
  - !17584 CVE-2025-38410: drm/msm: Fix a fence leak in submit error path
  - !17582 NFC: nci: uart: Set tty-&gt;disc_data only in success path
  - !17590 wifi: carl9170: do not ping device which has failed to load firmware
  - !17593 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - !17594 CVE-2025-38425: i2c: tegra: check msg length in SMBUS block read
  - !17595 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - !17596 usb: gadget: u_serial: Fix race condition in TTY wakeup
  - !17583 CVE-2025-38467：drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - !17789  bpf, sockmap: Fix CVE-2025-38154
  - !17712  wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - !17790  page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - !17788  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - !17786  net: xfrm: Fix CVE-2025-38097
  - !17784  bpf, sockmap: Fix panic when calling skb_linearize
  - !17785  bpf: fix ktls panic with sockmap
  - !17783  net/sched: fix use-after-free in taprio_dev_notifier
  - !17781  mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - !17782  net/mlx5e: Disable MACsec offload for uplink representor profile
  - !17780  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - !17779  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - !17778  phy: tegra: xusb: remove a stray unlock
  - !17777  net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - !17776  dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - !17775  espintcp: fix skb leaks
  - !17774  can: bcm: add locking for bcm_op runtime updates
  - !17711  net: lan743x: Fix memleak issue when GSO enabled
  - !17708  net: phy: Fix CVE-2025-37945
  - !17707  bpf: Scrub packet on bpf_redirect_peer
  - !17703  9p/net: fix improper handling of bogus negative read/write replies
  - !17699  netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - !17685  gtp: Fix CVE-2025-21678
  - !17816  vmci: Prevent the dispatching of uninitialized payloads
  - !17824  tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17609 cpufreq: Exit governor when failed to start old governor
  - !17823  arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17821  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !17818  fix some CVEs
  - !17798  benet: fix BUG when creating VFs
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
  - mm/vmscan: don't try to reclaim hwpoison folio
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - memblock: Accept allocated memory before use in memblock_double_array()
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails
  - Input: synaptics - use guard notation when pausing serio port
  - vmci: Prevent the dispatching of uninitialized payloads
  - !17804  pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17800  gic: increase the arch_timer
  - !17794  perf/core: Prevent VMA split of buffer mappings
  - !17574 ROH: Add crc_err_cnt and retry_cnt mib statistics
  - pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17337 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - !17797 v3  HiSock Redirect Framework
  - gic: increase the arch_timer priority to avoid hardlockup
  - benet: fix BUG when creating VFs
  - !17768  net/oenetcls: introduce oenetcls for network optimization
  - ROH: Add crc_err_cnt and retry_cnt mib statistics
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_*_change_dev kfunc
  - bpf: Add bpf_xdp_set_ingress_dst kfunc
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_skops_get_ingress_dst kfunc
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - !17470  fix CVE-2025-38351
  - !17766 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - !17772  two CVE fix
  - perf/core: Prevent VMA split of buffer mappings
  - !17659 v2  sched: More flexible use of CPU quota when CPU is idle
  - !17748  fix bug in hdbss
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - bpf, sockmap: Avoid using sk_socket after free when sending
  - bpf, sockmap: fix duplicated data transmission
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - net: xfrm: Fix kabi breakage of struct xfrm_state
  - espintcp: remove encap socket caching to avoid reference leak
  - !17294 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !17714  can: bcm: add missing rcu read protection for procfs content
  - !17713  net: phy: leds: fix memory leak
  - !17717  ipvs: fix uninit-value for saddr in do_output_route4
  - !17706  RDMA/cma: Fix CVE-2025-37772
  - !17709  bnxt_en: Fix CVE-2025-37911
  - !17705  igc: fix PTM cycle trigger logic
  - !17718  ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - !17701  net: openvswitch: fix nested key length validation in the set() action
  - !17702  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - !17704  page_pool: avoid infinite loop to schedule delayed worker
  - !17700  wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - !17697  netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - !17715  netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - !17696  net: decrease cached dst counters in dst_release
  - !17695  netfilter: nf_tables: don't unregister hook when table is dormant
  - !17694  RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - !17693  drm/connector: Fix CVE-2025-22089
  - !17692  vmxnet3: unregister xdp rxq info in the reset path
  - !17690  Bluetooth: Fix error code in chan_alloc_skb_cb()
  - !17689  tcp: Fix CVE-2025-21864
  - !17741  Fix trace may OOB when trace_get_user failed
  - !17742  i2c: qup: jump out of the loop in case of timeout
  - !17678  dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - !17679  media: cx231xx: set device_caps for 417
  - bpf: fix ktls panic with sockmap
  - bpf, sockmap: Fix panic when calling skb_linearize
  - net/sched: fix use-after-free in taprio_dev_notifier
  - net/mlx5e: Disable MACsec offload for uplink representor profile
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - phy: tegra: xusb: remove a stray unlock
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - espintcp: fix skb leaks
  - can: bcm: add locking for bcm_op runtime updates
  - net: libwx: fix the using of Rx buffer DMA
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
  - !9218 [OLK-6.6] i2c/zhaoxin: I2C controller driver enhancement and optimization
  - !17755  arm64: perf: Add support for HIP12 hw metric
  - !17763  mm/smaps: fix race between smaps_hugetlb_range and migration
  - net/oenetcls: introduce oenetcls for network optimization
  - RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - fs/proc/task_mmu: convert smaps_hugetlb_range() to work on folios
  - i2c: zhaoxin: Add support for Zhaoxin I2C controller
  - arm64: perf: Add support for HIP12 hw metric
  - KVM: arm64: fix memory leak in HDBSS
  - KVM: arm64: do not support hdbss in nvhe
  - i2c: qup: jump out of the loop in case of timeout
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - ipvs: fix uninit-value for saddr in do_output_route4
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - can: bcm: add missing rcu read protection for procfs content
  - net: phy: leds: fix memory leak
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - net: lan743x: Fix memleak issue when GSO enabled
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - bnxt_en: Fix coredump logic to free allocated buffer
  - genirq/irq_sim: Initialize work context pointers properly
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
  - bpf: Scrub packet on bpf_redirect_peer
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
  - igc: fix PTM cycle trigger logic
  - page_pool: avoid infinite loop to schedule delayed worker
  - 9p/net: fix improper handling of bogus negative read/write replies
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - net: openvswitch: fix nested key length validation in the set() action
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - net: decrease cached dst counters in dst_release
  - netfilter: nf_tables: don't unregister hook when table is dormant
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - drm/connector: fix kabi broken in struct ib_device
  - RDMA/core: Don't expose hw_counters outside of init net namespace
  - vmxnet3: unregister xdp rxq info in the reset path
  - Bluetooth: Fix error code in chan_alloc_skb_cb()
  - net: use __GENKSYMS__ to revert the kabi change
  - tcp: drop secpath at the same time as we currently drop dst
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
  - gtp: Destroy device along with udp socket's netns dismantle.
  - media: cx231xx: set device_caps for 417
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - sched: More flexible use of CPU quota when CPU is idle
  - mm: fix the race between collapse and PT_RECLAIM under per-vma lock
  - mm: madvise: use per_vma lock for MADV_FREE
  - mm: use per_vma lock for MADV_DONTNEED
  - mm: madvise: use walk_page_range_vma() instead of walk_page_range()
  - cpufreq: Exit governor when failed to start old governor
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq()
  - cpufreq: Init policy->rwsem before it may be possibly used
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost
  - cpufreq: Remove duplicate check in __cpufreq_offline()
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class()
  - cpufreq: CPPC: Remove cpu_data_list
  - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in .get() callback
  - i2c: tegra: check msg length in SMBUS block read
  - drm/msm: Fix another leak in the submit error path
  - wifi: ath6kl: remove WARN on bad firmware input
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - KVM: x86: Bury guest_cpuid_is_amd_or_hygon() in cpuid.c
  - KVM: SVM: Emulate SYSENTER RIP/RSP behavior for all Intel compat vCPUs
  - KVM: x86: Inhibit code #DBs in MOV-SS shadow for all Intel compat vCPUs
  - KVM: x86: Apply Intel's TSC_AUX reserved-bit behavior to Intel compat vCPUs
  - KVM: x86/pmu: Squash period for checkpointed events based on host HLE/RTM
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG
  - ALSA: hda/conexant: Use the new codec SSID matching
  - ALSA: hda: Use own quirk lookup helper
  - scsi: lpfc: Use memcpy() for BIOS version
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - usb: gadget: u_serial: Fix race condition in TTY wakeup
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - wifi: carl9170: do not ping device which has failed to load firmware
  - drm/msm: Fix a fence leak in submit error path
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - NFC: nci: uart: Set tty->disc_data only in success path


author: Li Nan <linan122@huawei.com> - 6.6.0-109.0.0.101
changelog:
  - !17945  Fix CVE-2025-38687
  - !17936  padata: Fix pd UAF once and for all
  - !17879 sched: apply custom cpu range for idle cpu
  - comedi: fix race between polling and detaching
  - !17937  clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - padata: Fix pd UAF once and for all
  - !17853 v3  arm64: Fix actlr_el1 can not set problem in guest
  - !17882  CVE-2025-38502
  - !17922  x86/sgx: Prevent attempts to reclaim poisoned pages
  - !17923  media: vidtv: Terminating the subsequent process of initialization failure
  - !17924 [backport]KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler
  - !17913  Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
  - !17915  arm64/mpam: Half the number of RMIDs for all resources under CDP mode
  - [backport]KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler
  - media: vidtv: Terminating the subsequent process of initialization failure
  - x86/sgx: Prevent attempts to reclaim poisoned pages
  - !17848 [OLK-6.6]:update patches for sw64 architecture
  - !17731  arm64/mpam: Add mb_only boot option
  - !17911  CVE-2025-38305
  - !17244  Fix netns reference count issue
  - !17914 virtCCA CoDA: Expose I/O hook interfaces.
  - virtCCA CoDA: Expose I/O hook interfaces.
  - arm64/mpam: Half the number of RMIDs for all resources under CDP mode
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
  - ptp: fix breakage after ptp_vclock_in_use() rework
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
  - !17868  scsi: Remove scsi device no_start_on_resume flag
  - !17866  md: make rdev_addable usable for rcu mode
  - !17865  scsi: core: ufs: Fix a hang in the error handler
  - !17842 [OLK-6.6] Fix CVE-2025-37924
  - !17836 [OLK-6.6] Fix CVE-2025-38312
  - !17902 [OLK-6.6] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !17880 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !17890  LeapIOraid: fix strscpy size argument
  - !17892  pptp: Fix skb length handling and error path in pptp_xmit()
  - !17815 v2  ext4: better scalability for ext4 block allocation
  - pptp: fix pptp_xmit() error path
  - pptp: ensure minimal skb length in pptp_xmit()
  - LeapIOraid: fix strscpy size argument
  - !17883  net/mlx5e: Remove skb secpath if xfrm state is not found
  - net/mlx5e: Remove skb secpath if xfrm state is not found
  - Fix kabi breakage for bpf_map by using KABI_BROKEN_REPLACE and KABI_FILL_HOLE.
  - bpf: Fix oob access in cgroup local storage
  - bpf: Move cgroup iterator helpers to bpf.h
  - bpf: Move bpf map owner out of common struct
  - bpf: Add cookie object to bpf maps
  - sched: apply custom cpu range for idle cpu
  - !17756 [OLK-6.6] Provide host-side administrators/users with real-time access to the usage status of CSV3 CMA memory.
  - !17846  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - !17442  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
  - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
  - !17813  net/mlx5: Check device memory pointer before usage
  - scsi: fix kabi broken for no_start_on_resume flag in struct scsi_device
  - scsi: Remove scsi device no_start_on_resume flag
  - md: make rdev_addable usable for rcu mode
  - scsi: core: ufs: Fix a hang in the error handler
  - sw64: fix for userspace asking for syscall(-1)
  - sw64: update junzhang default config file
  - sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
  - sw64: add cross-page check in software unaligned write handling
  - sw64: ptrace: fail system calls on invalid address access in PEEKUSR
  - sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
  - sw64: perf: Add support for get_cpuid_str function
  - sw64: kvm: use read/write spin lock for KVM MMU
  - sw64: rethook: fix a bug in rethook_trampoline
  - sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - arm64: Fix actlr_el1 can not set problem in guest
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - ksmbd: fix use-after-free in kerberos authentication
  - ksmbd: Fix dangling pointer in krb_authenticate
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
  - ext4: fix potential null deref in ext4_mb_init()
  - ext4: implement linear-like traversal across order xarrays
  - ext4: refactor choose group to scan group
  - ext4: open coding repeated check in next_linear_group
  - ext4: use correct criteria name instead stale integer number in comment
  - ext4: remove unused parameter ngroup in ext4_mb_choose_next_group_*()
  - ext4: convert free groups order lists to xarrays
  - ext4: factor out ext4_mb_scan_group()
  - ext4: factor out ext4_mb_might_prefetch()
  - ext4: keep "prefetch_grp" and "nr" consistent
  - ext4: remove unused ext4_allocation_context::ac_groups_considered
  - ext4: factor out __ext4_mb_scan_group()
  - ext4: convert EXT4_B2C(sbi->s_stripe) users to EXT4_NUM_B2C
  - ext4: fallback to complex scan if aligned scan doesn't work
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch
  - ext4: fix zombie groups in average fragment size lists
  - ext4: merge freed extent with existing extents before insertion
  - ext4: convert sbi->s_mb_free_pending to atomic_t
  - ext4: make running and commit transaction have their own freed_data_list
  - ext4: fix typo in CR_GOAL_LEN_SLOW comment
  - ext4: get rid of some obsolete EXT4_MB_HINT flags
  - ext4: utilize multiple global goals to reduce contention
  - ext4: remove unnecessary s_md_lock on update s_mb_last_group
  - ext4: remove unnecessary s_mb_last_start
  - ext4: separate stream goal hits from s_bal_goals for better tracking
  - Revert "ext4: move mb_last_[group|start] to ext4_inode_info"
  - ext4: add ext4_try_lock_group() to skip busy groups
  - net/mlx5: Check device memory pointer before usage
  - x86/csv: Add function to get free size of CSV3 CMA
  - arm64/mpam: Add mb_only boot option
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
  - smb: client: fix netns refcount leak after net_passive changes
  - Revert "smb: client: fix TCP timers deadlock after rmmod"
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"


author: Li Nan <linan122@huawei.com> - 6.6.0-110.0.0.102
changelog:
  - !18015 arm64: cca_base: On the Adaptation of CCA and virtCCA.
  - arm64: cca_base: On the Adaptation of CCA and virtCCA.
  - !18017  pNFS: Fix uninited ptr deref in block/scsi layout
  - pNFS: Fix uninited ptr deref in block/scsi layout
  - !18000  gfs2: Validate i_depth for exhash directories
  - !17997  hv_netvsc: Fix panic during namespace deletion with VF
  - !17947  migration/hisilicon: some bugfix
  - !17919  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  - gfs2: Validate i_depth for exhash directories
  - hv_netvsc: Fix panic during namespace deletion with VF
  - !17985  Updates of HiSilicon Uncore L3C PMU
  - !17977  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - !17987 virtCCA CoDA: Prevent secure PFs/VFs load or probe native drivers.
  - virtCCA CoDA: Prevent secure PFs/VFs load or probe native drivers.
  - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
  - Documentation: hisi-pmu: Fix of minor format error
  - drivers/perf: hisi: Add support for L3C PMU v3
  - !17974 iommu: Fix the incorrect exception process of the failed memory allocation
  - !17983  fix oenetcls bugs
  - net/oenetcls: clean resource when init ntuple/flow fail
  - net/oenetcls: use workqueue for ntuple cfg
  - net/oenetcls: remove oenetcls trace hook
  - net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
  - !17898 enfs: fix some bugs and optimize performance
  - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - !17976  LoongArch: BPF: Fix jump offset calculation in tailcall
  - iommu: Fix the incorrect exception process of the failed memory allocation
  - LoongArch: BPF: Fix jump offset calculation in tailcall
  - !17602 [OLK-6.6] drm/phytium: Fix make allmodconfig build fail
  - !17792 virtCCA: Improve cvm performance.
  - !17869 [OLK-6.6]Backport upstream CC Measurement support in the efi libstub
  - !17862 [OLK-6.6]Hygon: Support RTMR and Attestation that includes RTMR for Hygon CSV3 VM
  - !17946 mm/shmem, swap: bugfix and improvement of mTHP swap in
  - !17969  arm64/mpam: Add quirk for cmax and cmin
  - !17967  sched: Fix sched_numa_find_nth_cpu() if mask offline
  - !17955 arm64: RME: handle RIPAS changes before kvm_rec_enter
  - arm64: RME: handle RIPAS changes before kvm_rec_enter
  - arm64: RME: Introduce kvm_rec_pre_enter() called before entering an atomic section
  - !17962  tools/mpam: Add MPAM dynamic adjustment and sampling scripts
  - arm64/mpam: Add quirk for cmax and cmin
  - !17940  net/tls: fix kernel panic when alloc_page failed
  - !17941  OLK-6.6-fix-CVE-2025-38147
  - sched: Fix sched_numa_find_nth_cpu() if mask offline
  - tools/mpam: Add MPAM dynamic adjustment and sampling scripts
  - !17939  pinctrl: qcom: msm: mark certain pins as invalid for interrupts
  - hisi_acc_vfio_pci: update device driver status
  - migration: resolve duplicate migration states
  - migration: fix VF reset timeout issue
  - migration: bugfix live migration function without VF device driver
  - mm/shmem, swap: fix major fault counting
  - mm/shmem, swap: rework swap entry and index calculation for large swapin
  - mm/shmem, swap: simplify swapin path and result handling
  - mm/shmem, swap: never use swap cache and readahead for SWP_SYNCHRONOUS_IO
  - mm/shmem, swap: tidy up swap entry splitting
  - mm/shmem, swap: tidy up THP swapin checks
  - mm/shmem, swap: avoid redundant Xarray lookup during swapin
  - mm/shmem, swap: improve cached mTHP handling and fix potential hang
  - mm/shmem, swap: fix softlockup with mTHP swapin
  - Add IPI direct inject method for virtCCA CVM.
  - Improve virtCCA CVM vtimer irq inject method.
  - Add poll method for nfs for virtCCA CVM.
  - calipso: unlock rcu before returning -EAFNOSUPPORT
  - calipso: Don't call calipso functions for AF_INET sk.
  - net/tls: fix kernel panic when alloc_page failed
  - pinctrl: qcom: msm: mark certain pins as invalid for interrupts
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  - nfs/enfs: remove duplicate definitions
  - nfs/enfs: fix some cleanup issues
  - nfs/enfs: fix finding root uuid issue
  - nfs/enfs: introduce is_enfs_debug()
  - nfs/enfs: get rpc procedure number from rpc_procinfo in get_uuid_from_task()
  - sunrpc: do not set enfs transport in rpc_task_set_client()
  - efi/libstub: Add get_event_log() support for CC platforms
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs
  - efi/tpm: Use symbolic GUID name from spec for final events table
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec
  - virt: csv-guest: Add support for extended attestation aware request in the CSV3 guest
  - virt: csv-guest: Implement CSV RTMR ioctl interfaces
  - virt: csv-guest: Introduce CSV RTMR uapi interface
  - x86/csv: Introduce RTMR interfaces
  - Add dynamic wfx trap method for virtCCA CVM.
  - drm/phytium: Fix Phytium DRM build fail


author: Li Nan <linan122@huawei.com> - 6.6.0-111.0.0.103
changelog:
  - !17932 [OLK-6.6] add support for WangXun 10G/25G/40G
  - !17665 cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - !17663 platform/x86: ISST: Add Clearwater Forest to support list
  - !17668 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - !17681 cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - !17468 [Intel-SIG] backporting KVM: x86: Advertise AVX10.1 CPUID to userspace
  - !17571 [OLK-6.6] Intel-SIG: Add new Intel CPU# definition
  - !18024  trace/fgraph: Fix error handling
  - !18061  net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18026  vsock/virtio: Validate length in packet header before skb_put()
  - !18088  net/oenetcls: Fix crash when removing module
  - net/oenetcls: Fix crash when removing module
  - !18071  media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
  - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
  - net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18054 arm64 kvm: On the Adaptation of CCA and virtCCA.
  - arm64 kvm: On the Adaptation of CCA and virtCCA.
  - !17972  arm64/mpam: Add quirk for L3 CSU counters
  - !18016  media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - !16579 Do not shatter hugezeropage on wp-fault
  - !17839 [OLK-6.6] Fix CVE-2025-37838
  - !17887 [OLK-6.6] Fix CVE-2025-38637
  - !17889 [OLK-6.6] Fix CVE-2025-37840
  - !17850 [OLK-6.6] Fix CVE-2025-38173
  - !17854 [OLK-6.6] Fix CVE-2025-38143
  - !17861 [OLK-6.6] Fix CVE-2025-38194
  - vsock/virtio: Validate length in packet header before skb_put()
  - trace/fgraph: Fix error handling
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - jffs2: check that raw node were preallocated before writing summary
  - net_sched: skbprio: Remove overly strict queue assertions
  - crypto: marvell/cesa - Handle zero-length skcipher requests
  - mtd: rawnand: brcmnand: fix PM resume warning
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
  - backlight: pm8941: Add NULL check in wled_configure()
  - arm64/mpam: Add quirk for L3 CSU counters
  - x86/cpu/vfm: Fix x86_vfm kabi
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
  - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor
  - net: wangxun: txgbe: add support for wangxun 10G/25G/40G
  - net: wangxun: remove wangxun txgbe inbox drivers
  - platform/x86: ISST: Add Clearwater Forest to support list
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - KVM: x86: Advertise AVX10.1 CPUID to userspace
  - mm: allocate THP on hugezeropage wp-fault
  - mm: abstract THP allocation


author: Li Nan <linan122@huawei.com> - 6.6.0-112.0.0.104
changelog:
  - !18320  workqueue: Fix kabi broken of enum WORK_OFFQ_POOL_SHIFT
  - !18336  soc cache: support L3 cache lock in framework
  - !18352  net/oenetcls: Fix memleak when clean flow table
  - !18306  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18342  tracing: Silence warning when chunk allocation fails in trace_pid_write
  - net/oenetcls: Fix memleak when clean flow table
  - tracing: Silence warning when chunk allocation fails in trace_pid_write
  - !18331  ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
  - !18330  cpufreq: Initialize cpufreq-based invariance before subsys
  - soc cache: L3 cache lockdown support for HiSilicon SoC
  - soc cache: support L3 cache lock in framework
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
  - cpufreq: Initialize cpufreq-based invariance before subsys
  - !18275 [OLK-6.6] Optimized the kernel driver of HYGON trusted functions
  - !18322  Fix CVE-2025-39715
  - !18293  CVE-2025-39886
  - !18290  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - parisc: Revise gateway LWS calls to probe user read access
  - workqueue: Fix kabi broken of enum WORK_OFFQ_POOL_SHIFT
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18286 mm: shmem: fix the strategy for the tmpfs 'huge=' options
  - !18282 v2: shmem cleanup
  - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
  - memcg: skip cgroup_file_notify if spinning is not allowed
  - !18291  CVE-2025-39844
  - !18031 Introduce fwctl subystem framework
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
  - mm: introduce and use {pgd,p4d}_populate_kernel()
  - mm: move page table sync declarations to linux/pgtable.h
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !18280  samples/bpf: fix cpuinfo_arm64 prog load issue
  - crypto: ccp: optimize PSP driver code logic to reduce modifications to native code
  - crypto: ccp: add "tdm_guard" as kernel and module parameter
  - crypto: ccp: optimize TDM kernel driver
  - mm: shmem: fix the strategy for the tmpfs 'huge=' options
  - docs: update THP documentation to clarify sysfs "never" setting
  - mm: shmem: drop the unnecessary folio_nr_pages()
  - mm: shmem: use 'folio' for shmem_partial_swap_usage()
  - samples/bpf: fix cpuinfo_arm64 prog load issue
  - !18264  memory tiers: use default_dram_perf_ref_source in log message
  - !18259  cgroup: split cgroup_destroy_wq into 3 workqueues
  - !18231  ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
  - !18230  net: ch9200: fix uninitialised access during mii_nway_restart
  - !18227  i40e: Fix potential invalid access when MAC list is empty
  - memory tiers: use default_dram_perf_ref_source in log message
  - !18250  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18253  samples/bpf: Fix print issue in bpf_rvi_diskstats
  - !18234  samples/bpf: Fix print issue in dump_partitions()
  - cgroup: split cgroup_destroy_wq into 3 workqueues
  - fwctl: Fix repeated device word in log message
  - fwctl: Add documentation
  - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware
  - taint: Add TAINT_FWCTL
  - fwctl: FWCTL_INFO to return basic information about the device
  - fwctl: Basic ioctl dispatch for the character device
  - fwctl: Add basic structure for a class subsystem with a cdev
  - samples/bpf: Fix print issue in bpf_rvi_diskstats
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18173  usb: core: config: Prevent OOB read in SS endpoint companion parsing
  - samples/bpf: Fix print issue in dump_partitions()
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
  - net: ch9200: fix uninitialised access during mii_nway_restart
  - i40e: Fix potential invalid access when MAC list is empty
  - !18179  Implement disable/enable for (delayed) work
  - !18038 v3  arm64: Do not enable hardware xcall/xint in guest temporarily
  - !18195  arm64/mpam: Update MB hardlimit and priority default value forcely
  - !17636 [OLK-6.6] [Intel-SIG] crypto: iaa - Remove potential infinite loop in check_completion()
  - !17858 [OLK-6.6] [Intel-SIG] Enable FLR for IDXD halt
  - !17994 perf: backport community patches
  - !18183  CVE-2025-38725
  - arm64/mpam: Update MB hardlimit and priority default value forcely
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt
  - dmaengine: idxd: Refactor halt handler
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers
  - dmaengine: idxd: Binding and unbinding IDXD device and driver
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper
  - bitmap: Define a cleanup function for bitmaps
  - !15977 use refcount+RCU method to implement lockless slab shrink
  - !18166  Updates of HiSilicon Uncore L3C PMU
  - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
  - net: usb: asix_devices: add phy_mask for ax88772 mdio bus
  - !18156  ARM: rockchip: fix kernel hang during smp initialization
  - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask()
  - workqueue: Implement disable/enable for (delayed) work items
  - workqueue: Preserve OFFQ bits in cancel[_sync] paths
  - workqueue: Make @flags handling consistent across set_work_data() and friends
  - workqueue: Remove clear_work_data()
  - workqueue: Factor out work_grab_pending() from __cancel_work_sync()
  - workqueue: Clean up enum work_bits and related constants
  - workqueue: Introduce work_cancel_flags
  - workqueue: Rename __cancel_work_timer() to __cancel_timer_sync()
  - mm: add KABI_* macros to preserve KABI
  - mm: shrinker add a copyright notice
  - mm: shrinker: convert shrinker_rwsem to mutex
  - mm: shrinker: hold write lock to reparent shrinker nr_deferred
  - mm: shrinker: make memcg slab shrink lockless
  - mm: shrinker: make global slab shrink lockless
  - mm: shrinker: rename {prealloc|unregister}_memcg_shrinker() to shrinker_memcg_{alloc|remove}()
  - mm: shrinker: add a secondary array for shrinker_info::{map, nr_deferred}
  - mm: shrinker: remove old APIs
  - mm: shrinker: vmalloc.c: use the new shrinker kAPI
  - fs: super: dynamically allocate the s_shrink
  - zsmalloc: dynamically allocate the mm-zspool shrinker
  - xfs: dynamically allocate the xfs-qm shrinker
  - xfs: dynamically allocate the xfs-inodegc shrinker
  - xfs: dynamically allocate the xfs-buf shrinker
  - nfsd: dynamically allocate the nfsd-reply shrinker
  - nfsd: dynamically allocate the nfsd-client shrinker
  - jbd2,ext4: dynamically allocate the jbd2-journal shrinker
  - ext4: dynamically allocate the ext4-es shrinker
  - mbcache: dynamically allocate the mbcache shrinker
  - virtio_balloon: dynamically allocate the virtio-balloon shrinker
  - vmw_balloon: dynamically allocate the vmw-balloon shrinker
  - bcache: dynamically allocate the md-bcache shrinker
  - md/raid5: dynamically allocate the md-raid5 shrinker
  - dm zoned: dynamically allocate the dm-zoned-meta shrinker
  - dm: dynamically allocate the dm-bufio shrinker
  - drm/panfrost: dynamically allocate the drm-panfrost shrinker
  - drm/msm: dynamically allocate the drm-msm_gem shrinker
  - drm/i915: dynamically allocate the i915_gem_mm shrinker
  - mm: workingset: dynamically allocate the mm-shadow shrinker
  - sunrpc: dynamically allocate the sunrpc_cred shrinker
  - mm: thp: dynamically allocate the thp-related shrinkers
  - rcu: dynamically allocate the rcu-kfree shrinker
  - rcu: dynamically allocate the rcu-lazy shrinker
  - ubifs: dynamically allocate the ubifs-slab shrinker
  - quota: dynamically allocate the dquota-cache shrinker
  - nfsd: dynamically allocate the nfsd-filecache shrinker
  - nfs: dynamically allocate the nfs-acl shrinker
  - NFSv4.2: dynamically allocate the nfs-xattr shrinkers
  - gfs2: dynamically allocate the gfs2-qd shrinker
  - gfs2: dynamically allocate the gfs2-glock shrinker
  - f2fs: dynamically allocate the f2fs-shrinker
  - erofs: dynamically allocate the erofs-shrinker
  - xenbus/backend: dynamically allocate the xen-backend shrinker
  - drm/ttm: dynamically allocate the drm-ttm_pool shrinker
  - binder: dynamically allocate the android-binder shrinker
  - kvm: mmu: dynamically allocate the x86-mmu shrinker
  - mm: shrinker: add infrastructure for dynamically allocating shrinker
  - drm/ttm: introduce pool_shrink_rwsem
  - mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
  - mm: vmscan: move shrinker-related code into a separate file
  - mm: move some shrinker-related function declarations to mm/internal.h
  - x86/boot: Compile boot code with -std=gnu11 too
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing
  - !17949 crypto: hisilicon - some bugfix
  - !18144  Backport fs/pipe performance optimization patches
  - !17961 usb: gadget: configfs: Fix OOB read on empty string write
  - !17960 drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initial…
  - !17958 jfs: Prevent copying of nlink with value 0 from disk inode
  - !17957 fs/ntfs3: Fix a couple integer overflows on 32bit systems
  - !17956 drm/tegra: Fix a possible null pointer dereference
  - !17954 mtd: spinand: fix memory leak of ECC engine conf
  - !17953 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
  - !17952 rose: fix dangling neighbour pointers in rose_rt_device_down()
  - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
  - Documentation: hisi-pmu: Fix of minor format error
  - drivers/perf: hisi: Add support for L3C PMU v3
  - Revert "drivers/perf: hisi: Add support for L3C PMU v3"
  - Revert "Documentation: hisi-pmu: Fix of minor format error"
  - Revert "Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU"
  - !17973 enfs: recreate shard info when re-adding enfs module
  - !18114  tee: fix NULL pointer dereference in tee_shm_put
  - ARM: rockchip: fix kernel hang during smp initialization
  - !18133  iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
  - fs/pipe: use spinlock in pipe_read() only if there is a watch_queue
  - fs/pipe: remove unnecessary spinlock from pipe_write()
  - !18129 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
  - !18073  HID: asus: fix UAF via HID_CLAIMED_INPUT validation
  - !18118  samples/bpf: Fix print issue in dump_swaps()
  - soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - !18123  arm64/mpam: Add quirk for hisi cpbm_wd field
  - !18041  fs/smb: Fix inconsistent refcnt update
  - arm64/mpam: Add quirk for hisi cpbm_wd field
  - samples/bpf: Fix print issue in dump_swaps()
  - tee: fix NULL pointer dereference in tee_shm_put
  - nfs/enfs: remove duplicate EOPNOTSUPP definition
  - nfs/enfs: remove enfs_tp_common.h
  - nfs/enfs: remove ping_execute_workq_lock
  - nfs/enfs: remove lookupcache_workq_lock
  - nfs/enfs: remove redundant flush_workqueue() before destroy_workqueue()
  - nfs/enfs: return more nuanced error in NfsExtendProcInfoExtendEncode() and NfsExtendProcInfoExtendDecode()
  - nfs/enfs: handle error returned by NfsExtendProcInfoExtendEncode()
  - nfs/enfs: fix possible null-ptr-deref in exten_call.c
  - nfs/enfs: free memory uniformly at the end of function in exten_call.c
  - nfs/enfs: fix possible memory leak in exten_call.c
  - nfs/enfs: reload config when re-adding enfs module
  - nfs/enfs: recreate shard info when re-adding enfs module
  - HID: asus: fix UAF via HID_CLAIMED_INPUT validation
  - usb: gadget: configfs: Fix OOB read on empty string write
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
  - jfs: Prevent copying of nlink with value 0 from disk inode
  - fs/ntfs3: Fix a couple integer overflows on 32bit systems
  - drm/tegra: Fix a possible null pointer dereference
  - mtd: spinand: fix memory leak of ECC engine conf
  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
  - rose: fix dangling neighbour pointers in rose_rt_device_down()
  - fs/smb: Fix inconsistent refcnt update
  - arm64: Do not enable hardware xcall/xint in guest temporarily
  - perf: Always feature test reallocarray
  - perf comm str: Avoid sort during insert
  - crypto: hisilicon - use kcalloc() instead of kzalloc()
  - crypto: hisilicon/zip - enable literal length in stream mode compression
  - crypto: hisilicon - check the sva module status while enabling or disabling address prefetch
  - crypto: hisilicon - re-enable address prefetch after device resuming
  - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations
  - crypto: hisilicon/sec2 - implement full backlog mode for sec
  - Revert "crypto: hisilicon/sec2 - fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for gcm spec check"
  - crypto: hisilicon - Use fine grained DMA mapping direction
  - Revert "crypto: hisilicon - implement full backlog support for sec"
  - crypto: hisilicon/qm - replace devm_kzalloc with devm_kcalloc
  - crypto: hisilicon/qm - remove sizeof(char)
  - perf comm: Fix comm_str__put() for reference count checking
  - perf comm: Add reference count checking to 'struct comm_str'
  - crypto: iaa - Remove potential infinite loop in check_completion()


author: Li Nan <linan122@huawei.com> - 6.6.0-113.0.0.105
changelog:
  - !18464  i40e: add max boundary check for VF filters
  - !18433  dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18256     Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D
  - !18254 Add IFS support for ClearWater Forest
  - !18455  KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18289 Expand scope of khugepaged anonymous collapse
  - !18324 arm64: Enable vmalloc-huge with ptdump
  - !18419  sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - i40e: add max boundary check for VF filters
  - !18151  ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - !18152  fs/buffer: fix use-after-free when call bh_read() helper
  - !18312  ext4: preserve SB_I_VERSION on remount
  - !18313  fs: quota: create dedicated workqueue for quota_release_work
  - !18311  ext4: fix an off-by-one issue during moving extents
  - !17401  fscrypt: Don't use problematic non-inline crypto engines
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18237  fuse: support sysfs api for flush and
  - !18422  net/hinic3: Modify driver version
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18425  Fix CVE-2025-39989
  - !18427  i40e: fix idx validation in config queues msg
  - i40e: fix idx validation in config queues msg
  - x86/mce: use is_copy_from_user() to determine copy-from-user context
  - x86/extable: Remove unused fixup type EX_TYPE_COPY
  - net/hinic3: Modify driver version
  - !18414 Fix add define COMPAT_ELF_HWCAP3
  - !18406  pcmcia: Add error handling for add_interval() in do_validate_mem()
  - sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - !18401  Bluetooth: btrtl: Prevent potential NULL dereference
  - !18241 ras: ACPI: HED: Always initialize before evged
  - Fix add define COMPAT_ELF_HWCAP3
  - !17928 bus: fsl-mc: fix double-free on mc_dev
  - !17908 fix CVE-2025-38630
  - !18224 fix CVE-2025-38624
  - !17871 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - !17877 fs/ntfs3: cancle set bad inode after removing name fails
  - !17909 fix CVE-2025-38555
  - !17872 f2fs: fix to avoid panic in f2fs_evict_inode
  - !17760 Fix CVE-2025-38414
  - !17611 net: ravb: Fix missing rtnl lock in suspend/resume path
  - !17859 f2fs: fix to bail out in get_new_segment()
  - !17354 net/atm/resources: Release atm_dev_mutex after removing procfs in atm_…
  - !18032 [OLK-6.6] Fix CVE-2025-37897
  - !18030 [OLK-6.6] Fix CVE-2025-37914
  - !18037 [OLK-6.6] Fix CVE-2025-37917
  - !18036 [OLK-6.6] Fix CVE-2025-37922
  - !18035 [OLK-6.6] Fix CVE-2025-37935
  - !18034 [OLK-6.6] Fix CVE-2025-37931
  - !18033 [OLK-6.6] Fix CVE-2025-37901
  - !18028 [OLK-6.6] Fix CVE-2025-37987
  - !18027 [OLK-6.6] Fix CVE-2025-37983
  - !17807 Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - pcmcia: Add error handling for add_interval() in do_validate_mem()
  - !18326 [OLK-6.6] Support Hygon TKM (Trusted Key Management) Guest live migration
  - !18199  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - !18131  loop: Avoid updating block size under exclusive owner
  - !18006  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - !18402  kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - !18249 enfs: add new path state PM_STATE_UNSTABLE
  - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - Bluetooth: btrtl: Prevent potential NULL dereference
  - nfs/enfs: cleanups in pm_set_path_state()
  - nfs/enfs: prefer normal rpc transport over unstable one
  - nfs/enfs: introduce reconnect time KUnit tests
  - nfs/enfs: set PM_STATE_UNSTABLE if path is unstable
  - nfs/enfs: introduce enum PM_STATE_UNSTABLE
  - !18357  *** OLK-6.6-fix-CVE-2025-39787 ***
  - !18374  locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - !18362  umount performance fix
  - locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - do_make_slave(): choose new master sanely
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
  - change_mnt_propagation() cleanups, step 1
  - soc: qcom: mdt_loader: Deal with zero e_shentsize
  - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
  - soc: qcom: mdt_loader: Ensure we don't read past the ELF header
  - crypto: ccp: ensure kvm_bind_vtkm is only executed once for csv guest
  - crypto: ccp: support vtkm live migration
  - arm64: Enable vmalloc-huge with ptdump
  - arm64: Restrict pagetable teardown to avoid false warning
  - fs: quota: create dedicated workqueue for quota_release_work
  - ext4: preserve SB_I_VERSION on remount
  - ext4: fix an off-by-one issue during moving extents
  - mm: drop all references of writable and SCAN_PAGE_RO
  - mm: enable khugepaged anonymous collapse on non-writable regions
  - khugepaged: pass folio instead of head page to trace events
  - ras: ACPI: HED: Always initialize before evged
  - fuse: fix issues in fuse_resend_pqueue() implementation
  - fuse: Introduce sysfs API for resend pending requests
  - fuse: Introduce sysfs API for flushing pending requests
  - PCI: pnv_php: Clean up allocated IRQs on unplug
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list
  - fs/buffer: fix use-after-free when call bh_read() helper
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - loop: Avoid updating block size under exclusive owner
  - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
  - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - net/atm/resources: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE
  - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
  - btrfs: adjust subpage bit start based on sectorsize
  - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
  - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
  - net_sched: ets: Fix double list add in class with netem as child qdisc
  - pds_core: Prevent possible adminq overflow/stuck condition
  - qibfs: fix _another_ leak
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - bus: fsl-mc: fix double-free on mc_dev
  - usb: gadget : fix use-after-free in composite_dev_cleanup()
  - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - fs/ntfs3: cancle set bad inode after removing name fails
  - f2fs: fix to bail out in get_new_segment()
  - net: ravb: Fix missing rtnl lock in suspend/resume path
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
  - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - f2fs: fix to avoid panic in f2fs_evict_inode
  - fscrypt: Don't use problematic non-inline crypto engines


author: Li Nan <linan122@huawei.com> - 6.6.0-114.0.0.106
changelog:
  - !18640 v3  Errata management for VM Live migration
  - !18638  CVE-2025-39982
  - !18564  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - !18639 net: hns3: fix null pointer in debugfs issue
  - KVM: arm64: fix kvm kabi conflict
  - smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI
  - smccc: kvm_guest: Fix kernel builds for 32 bit arm
  - smccc/kvm_guest: Enable errata based on implementation CPUs
  - arm64: Make  _midr_in_range_list() an exported function
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2
  - KVM: arm64: Specify hypercall ABI for retrieving target implementations
  - arm64: Modify _midr_range() functions to read MIDR/REVIDR internally
  - KVM: arm64: Allow userspace to change the implementation ID registers
  - KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value
  - KVM: arm64: Maintain per-VM copy of implementation ID regs
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
  - !18624 tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - !18622 support mempool feature
  - net: hns3: fix null pointer in debugfs issue
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - net: hns3: fixed vf get max channels bug
  - net: hns3: `req_autoneg` for fiber is initialized to `support_autoneg` instead of OFF.
  - net: hns3: use user configure after hardware reset when using kernel PHY.
  - net: hns3: Return error code when function fails.
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
  - net: hns3: using the num_tqps in the vf driver to apply for resources
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !18550  cpu/SMT: recover global num_threads after disable smt switch fail
  - !18589 net: hibmcge: support pci_driver.shutdown()
  - !18579  regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18415  sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - !18593  crypto: essiv - Check ssize for decryption and in-place encryption
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools/include: Sync arm64 headers with the kernel sources
  - tools/include: Sync arm64 asm/cputype.h with the kernel sources
  - openeuler_defconfig: enable CONFIG_PFN_RANGE_ALLOC by default
  - mm/pfn_range_alloc: check if folio is hwpoisoned in pfn_range_free
  - mm/pfn_range_alloc: add a interface to show borrowable physical range
  - mm/pfn_range_alloc: support update cachable attribue of linear mapping
  - mm/pfn_range_alloc: introduce set_linear_mapping_invalid
  - mm/pfn_range_alloc: introduce hugetlb_pool_alloc_size
  - mm/pfn_range_alloc: add tracepoint for hugetlb_pool_alloc and hugetlb_pool_free
  - mm/pfn_range_alloc: add tracepoint for pfn_range_alloc and pfn_range_free
  - mm/pfn_range_alloc: support allocate and free from hugetlb pool
  - mm/pfn_range_alloc: add interfaces to alloc/free for drivers
  - mm/pfn_range_alloc: reserve memory for each node
  - mm/contig_alloc: fix alloc_contig_range when __GFP_COMP and order < MAX_ORDER
  - mm: page_alloc: speed up fallbacks in rmqueue_bulk()
  - mm/page_alloc: clarify should_claim_block() commentary
  - mm/page_alloc: clarify terminology in migratetype fallback code
  - mm/page_alloc: add some detailed comments in can_steal_fallback
  - mm: page_alloc: remove remnants of unlocked migratetype updates
  - mm: page_alloc: don't steal single pages from biggest buddy
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()
  - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook()
  - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess
  - mm/page_alloc: make __alloc_contig_migrate_range() static
  - mm/page_isolation: don't pass gfp flags to isolate_single_pageblock()
  - mm/contig_alloc: support __GFP_COMP
  - mm: remove unused has_isolate_pageblock
  - mm: page_alloc: simpify page del and expand
  - mm: remove migration for HugePage in isolate_single_pageblock()
  - mm/page_alloc: keep track of free highatomic
  - mm: page_alloc: fix highatomic typing in multi-block buddies
  - mm: page_alloc: batch vmstat updates in expand()
  - mm: page_alloc: change move_freepages() to __move_freepages_block()
  - mm: page_alloc: consolidate free page accounting
  - mm: page_isolation: prepare for hygienic freelists
  - mm: page_alloc: set migratetype inside move_freepages()
  - mm: page_alloc: close migratetype race between freeing and stealing
  - mm: page_alloc: fix freelist movement during block conversion
  - mm: page_alloc: fix move_freepages_block() range error
  - mm: page_alloc: move free pages when converting block during isolation
  - mm: page_alloc: fix up block types when merging compatible blocks
  - mm: page_alloc: optimize free_unref_folios()
  - mm: page_alloc: remove pcppage migratetype caching
  - mm: page_alloc: simplify __free_pages_ok()
  - mm/page_alloc: remove unnecessary next_page in break_down_buddy_pages
  - mm/page_alloc: remove unnecessary check in break_down_buddy_pages
  - !18608  mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - !18588 add memory ras feature support
  - mm: add memory reclaim notifier
  - mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - panic: add notifier call before other cpu shutdown
  - !18592  Make ID reg writable
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - KVM: arm64: use KABI_EXTEND to revert struct kvm kabi change
  - KVM: arm64: Make AA64PFR1_EL1.NMI writeable
  - KVM: arm64: Expose S1PIE to guests
  - KVM: arm64: Sanitise ID_AA64MMFR3_EL1
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
  - KVM: arm64: Make ID_AA64MMFR1_EL1.{HCX, TWED} writable from userspace
  - KVM: arm64: Remove duplicated AA64MMFR1_EL1 XNX
  - KVM: arm64: Make the L1Ip feature bits in CTR_EL0 writable from userspace
  - KVM: arm64: rename functions for invariant sys regs
  - KVM: arm64: show writable masks for feature registers
  - KVM: arm64: Treat CTR_EL0 as a VM feature ID register
  - KVM: arm64: Add helper for writing ID regs
  - KVM: arm64: Use read-only helper for reading VM ID registers
  - KVM: arm64: Only reset vCPU-scoped feature ID regs once
  - KVM: arm64: Reset VM feature ID regs from kvm_reset_sys_regs()
  - KVM: arm64: Rename is_id_reg() to imply VM scope
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace
  - KVM: arm64: Document vCPU feature selection UAPIs
  - KVM: arm64: Allow userspace to change ID_AA64ZFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64PFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64MMFR{0-2}_EL1
  - KVM: arm64: Allow userspace to change ID_AA64ISAR{0-2}_EL1
  - KVM: arm64: Bump up the default KVM sanitised debug version to v8p8
  - KVM: arm64: Reject attempts to set invalid debug arch version
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version
  - KVM: arm64: Use guest ID register values for the sake of emulation
  - KVM: arm64: Document KVM_ARM_GET_REG_WRITABLE_MASKS
  - KVM: arm64: Allow userspace to get the writable masks for feature ID registers
  - net: hibmcge: support pci_driver.shutdown()
  - net: hibmcge: select FIXED_PHY
  - !18568 support NUMA.remote feature
  - !18498  serial: 8250: fix panic due to PSLVERR
  - regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18409 crypto: hisilicon - support for new ZIP features
  - !18545  HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - !18563  arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - mm/numa_remote: add kernel doc for numa remote feature
  - mm/numa_remote: extend cmdline numa_remote to limit the max number of remote node
  - mm: memory-failure: use kill_accessing_process() in ghes
  - mm: memory-failure: remove task_struct from kill_accessing_process()
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
  - arm64: configs: enable NUMA_REMOTE by default
  - mm/numa_remote: enable oom_kill_cpuless_numa_allocating_task when numa_remote is enabled
  - mm/oom_kill: kill current in OOM when binding to cpu-less nodes
  - mm/numa_rmeote: add preonline interface for each memory device
  - mm/numa_remote: add pre-online count in meminfo
  - mm/numa_remote: add sysfs to distinguish whether a remote node
  - mm/numa_remote: introduce hugetlb_nowatermark mode for remote node
  - mm/numa_remote: undo isolation of remote memory asynchronously
  - mm/numa_remote: introduce pre-online mode to support hotplug unready memory
  - mm/numa_remote: introduce nofallback mode for remote node
  - mm/numa_remote: support to set node distance
  - mm/numa_remote: support to hotplug/hotremove remote memory
  - mm/numa_remote: prepare numa node for remote memory
  - mm/memory_hotplug: support to hotplug memory on ZONE_EXTMEM
  - mm/hugetlb: fix folio is still mapped when deleted
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - !18559  arm64/mpam: Fix MBWU monitor overflow handling
  - !18544  fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !18536  arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18130 Net: nebula_matrix: set nebula_matrix driver to a newer state
  - !16777 RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - arm64/mpam: Print MPAM register operation for debug
  - arm64/mpam: Fix MBWU monitor overflow handling
  - cpu/SMT: recover global num_threads after disable smt switch fail
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !17676 [OLK-6.6] Backported patches of Transient Scheduler Attacks (TSA)
  - arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18533 [OLK-6.6]:update patches for sw64 architecture
  - !18516  arm64: Add support for HIP09 Spectre-BHB mitigation
  - !18457  arm64: add cnp verification on Hisilicon erratum 162100125
  - !18513  Fix CVE-2025-39679
  - !18531  arm/syscalls: mark syscall invocation as likely in
  - !11635  arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
  - !18507 Fix wrong CPU aff3 conversion between  MPIDR and SYS_LSUDVMBM_EL2
  - sw64: add CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y to defconfig
  - sw64: fix the condition for enabling hw_una_enabled
  - sw64: efi: fix compile error when CONFIG_EFI=n
  - sw64: powercap: fix misuse of an uninitialized temporary variable
  - sw64: powercap: increase the interval of polling mode
  - sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
  - sw64: powercap: avoid checking meaningless target freq
  - sw64: smp: fix unaligned access before trap_init()
  - sw64: irqchip: update effective affinity for INTx
  - sw64: msi: fix affinity change of managed irq
  - sw64: use orig_r0 as syscall nr
  - sw64: revert ioremap() to __va() in ioport_map()
  - sw64: fix unresolved reference error when close pci
  - sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
  - arm/syscalls: mark syscall invocation as likely in invoke_syscall
  - !18517  media: rc: fix races with imon_disconnect()
  - !18327 net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - !18488 RDMA/hns: Fix wrong WQE data when QP wraps around
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
  - media: rc: fix races with imon_disconnect()
  - arm64: Add support for HIP09 Spectre-BHB mitigation
  - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
  - !18495  CVE-2025-39967
  - !18258  perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions and Don't use PMCCNTR_EL0 on SMT cores
  - serial: 8250: fix panic due to PSLVERR
  - fbcon: Fix OOB access in font allocation
  - fbcon: fix integer overflow in fbcon_do_set_font
  - !16738 perf vendor events arm64: Add N2, V2, N3, V3 events/metrics
  - !18385  e1000e: fix heap overflow in e1000_set_eeprom
  - !18395  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - config: enable CONFIG_MITIGATION_TSA and CONFIG_KVM_HYPERV by default on x86
  - x86/cpu: Shorten CPU matching macro
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines
  - x86/microcode/AMD: Handle the case of no BIOS microcode
  - KVM: SVM: Advertise TSA CPUID bits to guests
  - tools headers: Sync x86 headers with the kernel source
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  - x86/microcode/AMD: Add some forgotten models to the SHA check
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array
  - x86/microcode/AMD: Split load_microcode_amd()
  - x86/microcode/AMD: Pay attention to the stepping dynamically
  - KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page()
  - x86/microcode/intel: Set new revision only after a successful update
  - x86/platform/atom: Switch to new Intel CPU model defines
  - x86/process: Move the buffer clearing before MONITOR
  - x86/microcode/AMD: Add TSA microcode SHAs
  - x86/microcode/AMD: Load only SHA256-checksummed patches
  - x86/microcode/AMD: Add get_patch_level()
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode()
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
  - x86/microcode/AMD: Avoid -Wformat warning with clang-15
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool
  - x86/microcode/AMD: Flush patch buffer mapping after application
  - x86/microcode: Rework early revisions reporting
  - x86/bugs: Add a Transient Scheduler Attacks mitigation
  - x86/bugs: Rename MDS machinery to something more generic
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h>
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init()
  - x86/cpu: Expose only stepping min/max interface
  - x86/cpu: Introduce new microcode matching helper
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines
  - cpufreq: Switch to new Intel CPU model defines
  - EDAC/skx: Switch to new Intel CPU model defines
  - EDAC/i10nm: Switch to new Intel CPU model defines
  - x86/aperfmperf: Switch to new Intel CPU model defines
  - x86/apic: Switch to new Intel CPU model defines
  - x86/bugs: Switch to new Intel CPU model defines
  - x86/CPU/AMD: Improve the erratum 1386 workaround
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake
  - KVM: x86: Make Hyper-V emulation optional
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS
  - KVM: VMX: Split off hyperv_evmcs.{ch}
  - net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - RDMA/hns: Fix wrong WQE data when QP wraps around
  - arm64: add cnp verification on Hisilicon erratum 162100125
  - net:nebula-matrix:Add S1000 SNIC driver support
  - sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - crypto: hisilicon/qm - clear all VF configurations in the hardware
  - Revert "crypto: hisilicon/qm - fix vfs_num error"
  - crypto: hisilicon/qm - invalidate queues in use
  - Revert "crypto: hisilicon/qm - invalidate queues in use"
  - Revert "crypto: hisilicon/qm - clear the memory before enabling the device"
  - crypto: hisilicon/zip - add hashjoin, gather, and UDMA data move features
  - crypto: hisilicon/zip - add lz4 and lz77_only to algorithm sysfs
  - crypto: hisilicon/sec2 - Fix false-positive warning of uninitialised qp_ctx
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - e1000e: fix heap overflow in e1000_set_eeprom
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions
  - RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - perf vendor events arm64: Add V3 events/metrics
  - perf vendor events arm64: Add N3 events/metrics
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event
  - perf vendor events arm64: Update N2/V2 events from source
  - arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register


author: Li Nan <linan122@huawei.com> - 6.6.0-115.0.0.107
changelog:
  - !18713 iommu: Enabling Broadcast TLB Maintenance (BTM) for UMMU on ARM64
  - iommu: Fix kabi breakage due to opening KVM_PINNED_VMID
  - vfio: Fix kabi breakage due to closing VFIO_CONTAINER
  - iommu: Pass in kvm pointer to domain_alloc_user
  - iommufd: Associate kvm pointer to iommufd ctx
  - KVM: arm64: Introduce support to pin VMIDs
  - KVM: Add generic infrastructure to support pinned VMIDs
  - !18695 PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - !18761 net: hns3: the multi-tcs VF can be configured only when the interface is down
  - !18735  KVM: arm64: Prevent access to vCPU events before init
  - !18598 arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - net: hns3: the multi-tcs VF can be configured only when the interface is down
  - net: hns3: remap vf's queue and qset when vport start
  - net: hns3: support dpdk using vf multiple tcs
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !18597 iommu/ummu-core: Add ummu-core framework.
  - !18316  jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - KVM: arm64: Prevent access to vCPU events before init
  - !18421 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.84-6.6.85 LTS Patches
  - !18702  i40e: fix idx validation in i40e_validate_queue_map
  - !18699  *** CVE-2025-39973 ***
  - !18649  tty: n_gsm: Don't block input queue by waiting MSC
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - iommu/ummu-core: core interfaces for ummu drivers
  - iommu/ummu-core: impl ioctl interface for /dev/ummu device
  - iommu/ummu-core: add pseudo Token Dev for Token ID abstraction
  - iommu/ummu-core: add UMMU Token ID operation interfaces
  - iommu/ummu-core: add UMMU EID operation interfaces
  - iommu/ummu-core: support IOVA on demand mapping
  - iommu/ummu-core: get iova_domain from iommu_domain
  - !18659  ptp: Add a upper bound on max_vclocks
  - !18680  futex: Prevent use-after-free during requeue-PI
  - !18683  qed: Don't collect too many protection override GRC elements
  - !18682  i40e: fix validation of VF state in get resources
  - !18681  i40e: fix input validation logic for action_meta
  - !18679  cnic: Fix use-after-free bugs in cnic_delete_task
  - !18668  openvswitch: Fix unsafe attribute parsing in output_userspace()
  - !18267  CVE-2025-39832
  - !18705  mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - Revert "watchdog/perf: Provide function for adjusting the event period"
  - Revert "arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh"
  - !18690 [OLK-6.6] Fix CVE-2025-38290
  - !18672 [OLK-6.6] Fix CVE-2025-38286
  - !17950 net: atm: add lec_mutex
  - iommu/ummu-core: introduce UMMU-CORE, basic configs
  - iommu/ummu-core: support iommu ksva mode
  - iommu/ummu-core: introduce iommu sva permission operation
  - iommu/ummu-core: introduce iommu_sva_bind_isolated interface
  - iommu/ummu-core: add the user invalidation type in iommufd file
  - iommu/ummu-core: iommu_dev new min_pasids attribute
  - mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - i40e: fix idx validation in i40e_validate_queue_map
  - i40e: add validation for ring_len param
  - i40e: increase max descriptors for XL710
  - !18372 sched/fair: remove qos_reweight logic under non-SMP scenario
  - !18423 ext4: disambiguate the return value of ext4_dio_write_end_io()
  - !18328 [OLK-6.6] fix txgbe link fec issues and  enhance hot reset mechanism
  - wifi: ath12k: fix node corruption in ar->arvifs list
  - !18662 net: hibmcge: fix the inappropriate netif_device_detach()
  - !18605 net: ubl: add depend to ARM64 and remove config in x86
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - futex: Prevent use-after-free during requeue-PI
  - cnic: Fix use-after-free bugs in cnic_delete_task
  - !18666  bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - !18270  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !18271  libceph: fix invalid accesses to ceph_connection_v1_info
  - !18272  CVE-2025-39889
  - !18273  ppp: fix memory leak in pad_compress_skb
  - !18268  RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - openvswitch: Fix unsafe attribute parsing in output_userspace()
  - pinctrl: at91: Fix possible out-of-boundary access
  - !18646  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18630  tracing: dynevent: Add a missing lockdown check on dynevent
  - bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - iommu/ummu-core: New ub bus added to the iommu framework
  - !18525 ub: add UBUS and UBFI driver framework
  - !18486  ACPI: pfr_update: Fix the driver update version check
  - !18363  comedi: pcl726: Prevent invalid irq number
  - net: hibmcge: fix the inappropriate netif_device_detach()
  - net: hibmcge: remove unnecessary check for np_link_fail in scenarios without phy.
  - net: hibmcge: fix rx buf avl irq is not re-enabled in irq_handle issue
  - ptp: Add a upper bound on max_vclocks
  - tty: n_gsm: Don't block input queue by waiting MSC
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - tracing: dynevent: Add a missing lockdown check on dynevent
  - ub:ubus: Supports decoder event processing
  - ub:ubus: Support for sending decoder commands
  - ub:ubus: Support for range table mapping and unmapping functions
  - ub:ubus: Support for page-range table address mapping and unmapping
  - ub:ubus: Support for Bus EID-UPI Table Configuration
  - ub:ubus: Support for UB Character Device Driver
  - ub:ubus: Support UBUS RAS capability
  - ub:ubus: Creating and deleting ub decoder page table mappings
  - ub:ubus: Adding a ue Creation Destruction Mechanism
  - ub:ubus: Enable the ub decoder device support
  - ub:ubus: Add UBUS RAS framework
  - ub:ubus: Support configuration of device information interface
  - ub:ubus: Support for enabling and disabling ue
  - ub:ubus: Add MSI capability for UBUS driver
  - ub:ubus: Add UBUS MSI basic functions
  - ub:ubus: Support UBUS Interrupt framework
  - ub:ubus: Add UBUS capability interfaces
  - ub:ubus: Support device level and port level reset
  - ub:ubus: Support for multiple mue enablement
  - ub:ubus: Support UB device enabling basic interface
  - ub:ubus: Supports device enumeration.
  - ub:ubus: Support for UB Bus Controller Enumeration
  - ub:ubus: Support for shortest path routing configuration
  - ub:ubus: Supports network address configuration and querying
  - ub:ubus: Support enumeration topology query commands
  - ub:ubus: Add UBUS resource space basic functions
  - ub:ubus: Add UBUS resource space framework
  - ub:ubus: Support for UB bus enumeration message initialization
  - ub:ubus: Support for UB routing table configuration function
  - ub:ubus: Add CNA allocate and free interfaces by kernel
  - ub:ubus: Add EID allocate and free interfaces by kernel
  - ub:ubus: Support cc configuration and query
  - ub:ubus: Supporting the UB Shared Port Function
  - ub:ubus: Support for UB port sysfs attribute files
  - ub:ubus: Support Ubus read/write configuration functions
  - ub:ubus: Support for UB Bus Port Management Framework
  - ub:ubus: Add Ubus setting configuration space function
  - ub:ubus: Support for UB Bus DMA Configuration Function
  - ub:ubfi: ubfi driver create ubc device
  - ub:ubus: Support for ubus messaging communication framework
  - ub:ubus: add ubus controller framework
  - ub:ubfi: ubfi driver parse ubc information from ubrt
  - ub:ubus: Support UB Bus Attribute Group
  - ub:ubfi: Support ub firmware interface basic functions
  - ub:ubus: Support for ub bus driver framework
  - net: ubl: add depend to ARM64 and remove config in x86
  - net: ubl: modify the description in Kconfig of UB
  - ACPI: pfr_update: Fix the driver update version check
  - net: txgbe: fix invoke hot reset multi times unexpectedly
  - net: txgbe: fix race condition when recover or close/suspend
  - net: txgbe: fix fec mode issues
  - net: txgbe: set pf promisc and vlan cannot receive packets
  - net: txgbe: fix 25G link issues
  - net: txgbe: change default tx queue depth
  - net: txgbe: fix i2c issues
  - net: txgbe: fix can't read rx_pb_n_pxoff
  - ext4: disambiguate the return value of ext4_dio_write_end_io()
  - net: lwtunnel: disable BHs when required
  - netfilter: nft_counter: Use u64_stats_t for statistic.
  - wifi: iwlwifi: mvm: ensure offloading TID queue exists
  - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
  - mptcp: Fix data stream corruption in the address announcement
  - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
  - drm/amd/display: should support dmub hw lock on Replay
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
  - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
  - drm/sched: Fix fence reference count leak
  - batman-adv: Ignore own maximum aggregation size during RX
  - efi/libstub: Avoid physical address 0x0 when doing random allocation
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment
  - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
  - mmc: atmel-mci: Add missing clk_disable_unprepare()
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
  - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
  - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
  - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
  - accel/qaic: Fix integer overflow in qaic_validate_req()
  - regulator: dummy: force synchronous probing
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
  - drm/v3d: Don't run jobs that have errors flagged in its fence
  - can: flexcan: disable transceiver during system PM
  - can: flexcan: only change CAN state when link up in system PM
  - can: ucan: fix out of bound read in strscpy() source
  - can: rcar_canfd: Fix page entries in the AFL list
  - i2c: omap: fix IRQ storms
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
  - net: lwtunnel: fix recursion loops
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
  - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
  - accel/qaic: Fix possible data corruption in BOs > 2G
  - Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured
  - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
  - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
  - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
  - soc: imx8m: Use devm_* to simplify probe failure handling
  - soc: imx8m: Remove global soc_uid
  - xfrm_output: Force software GSO only in tunnel mode
  - xfrm: fix tunnel mode TX datapath in packet offload mode
  - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
  - firmware: imx-scu: fix OF node leak in .probe()
  - net: txgbe: fix bond port rate is unknown when linkup
  - net: txgbe: fix VF multicast address removal not taking effect
  - net: txgbe: fix missing PFC mask configuration on AML
  - net: txgbe: fix pktgen cannot stop
  - sched/fair: remove qos_reweight logic under non-SMP scenario
  - comedi: pcl726: Prevent invalid irq number
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - ppp: fix memory leak in pad_compress_skb
  - Bluetooth: hci_event: Fix not using key encryption size when its known
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level
  - Bluetooth: l2cap: Check encryption key size on incoming connection
  - libceph: fix invalid accesses to ceph_connection_v1_info
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - net/mlx5: Fix lockdep assertion on sync reset unload event
  - net/mlx5: Add support for sync reset using hot reset
  - net/mlx5: Add device cap for supporting hot reset in sync reset flow
  - net/mlx5: Reload auxiliary drivers on fw_activate
  - net: txgbe: fix DAC cable link down
  - net: txgbe: fix display of supports Wake-on in the ethtool
  - net: atm: add lec_mutex


author: Li Nan <linan122@huawei.com> - 6.6.0-117.0.0.109
changelog:
  - !17926 spufs: fix a leak on spufs_new_file() failure
  - !18393 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - !18389 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - !18381 f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - !18370 dmaengine: ti: Add NULL check in udma_probe()
  - !18674 jfs: fix array-index-out-of-bounds read in add_missing_indices
  - !18438 jfs: Fix null-ptr-deref in jfs_ioc_trim
  - !18435 ksmbd: fix null pointer dereference in destroy_previous_session
  - !18434 tty: serial: uartlite: register uart driver in init
  - !18404 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-&gt;memcg_path on write
  - !18799 [OLK-6.6] Fix CVE-2025-38336
  - !18798 [OLK-6.6] Fix CVE-2025-38335
  - !18793 [OLK-6.6] Fix CVE-2025-38275
  - !18789 [OLK-6.6] Fix CVE-2025-38274
  - !18786 [OLK-6.6] Fix CVE-2025-38300
  - !18781 [OLK-6.6] Fix CVE-2025-38295
  - !18778 [OLK-6.6] Fix CVE-2025-38293
  - !18777 [OLK-6.6] Fix CVE-2025-38292
  - !18849 urma: introduce ubcore main module.
  - !18842 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.85-6.6.86 LTS Patches
  - !18484 btf: Avoid weak external references
  - !18921  blk-ioinf: introduce inflight-based IO QoS controller
  - blk-rq-qos: fix kabi broken in struct rq_qos
  - blk-mq: fix kabi broken in struct request
  - openeuler_defconfig: Enable CONFIG_BLK_CGROUP_IOINFLIGHT
  - blk-io-hierarchy: support new bio based stage ioinf
  - blk-ioinf: support percentile latency QoS for oneline workloads
  - blk-ioinf: dynamically adjust inflight limit to balance workloads
  - blk-ioinf: add rqos/inflight/stat debufs interface
  - blk-ioinf: introduce inflight-based IO QoS controller
  - !18863 drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - !18885 ub: ubase: Fix some compile warnings&fix pages free problem
  - !18910  um: virtio_uml: Fix use-after-free after put_device in probe
  - !18902  i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - urma: introduce ubcore main module.
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - ub: ubase: Fix some compile warnings
  - !18894  some bugfixes for NUMA.remote
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - !18723 GMEM: General Memory Management
  - !18852 vfio:ubus: Support Virtual Function I/O  of UBUS
  - !18788 ub: Support new features for UBUS
  - !18701 ubios_uvb: support uvb driver
  - mm/numa_remote: check if memory block is preonlined when undoing fake-online
  - mm/numa_remote: fix restoring to preonline when failing to offline from preonline
  - mm/numa_remote: fix memory leak of struct memory_block
  - !18840 v2  Backport some memory policy feature and bugfix from mainline
  - ub: ubase: Fix the problem that free pages when ubase driver destroy TA context
  - ubios_uvb: support CIS framework receive function
  - ubios_uvb: support CIS framework send function
  - ubios_uvb: support parse ubios information by dtb
  - ubios_uvb: support UBIOS object description specification parse
  - vfio:ubus: support obtaining and configuring function entity information in user mode
  - vfio:ubus: Support configuration for function entity interrupt
  - vfio:ubus: Support access to function entity resource space
  - vfio:ubus: Init vfio ub config space 1 perm and port perm bits during module init
  - vfio:ubus: Init vfio ub config space 0 perm bits during module init
  - vfio:ubus: Init vfio ub configuration space
  - vfio:ubus: Support ub vfio config read and write
  - vfio:ubus: Support for vfio ubus driver framework
  - ub:ubus: Support UBUS driver host probe and remove
  - ub:ubus: Add configuration and resource sysfs interfaces
  - ub:ubus: Add basic System Filesystem attributes
  - ub:ubus: Support processing protocol link messages
  - ub:ubus: Support hotplug processing main workflow
  - ub:ubus: Support for device enumeration during the hotplug phase
  - ub:ubus: Support for slot register configuration
  - ub:ubus: Support hotplug service driver
  - ub:ubus: Add generic ub component driver
  - ub:ubus: Add ub service driver framework
  - ub:ubus: Add new UBUS pool device interfaces
  - ub:ubus: Support UBUS pool devices register
  - ub:ubfi: register ubc usi domain
  - ub:ubus: Support for ub device resource space registration
  - ub:ubus: Add UBUS receive message framework
  - ub:ubus: Support device binding and unbinding bus instance
  - ub:ubus: Support for static cluster bus instance
  - ub:ubus: Support for dynamic bus instance
  - ub:ubus: Support for bus instance framework
  - ub:ubus: Support handle device link up and link down
  - ub:ubus: Support enumerate port and route set/clear for port
  - ub:ubus: Support route modify/delete function
  - !18750 iommu/ummu: Add ummu driver basic capabilities.
  - iommu/ummu: Add UMMU cache flush interfaces
  - iommu/ummu: Support UMMU event handling
  - iommu/ummu: Support UMMU global error handling
  - iommu/ummu: Support UMMU command queue
  - iommu/ummu: Support UMMU device
  - !18748 ub: ubfi: Support ummu node in ubfi
  - !18804 drivers/perf: hisi: Support UMMU pmu
  - !18855  mm: do not install PMD mappings when handling a COW fault
  - !18848 net:nebula-matrix:fix compile err
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - Revert "drivers/perf: hisi: Add support for HiSilicon NoC PMU"
  - Revert "drivers/perf: hisi: Add support for HiSilicon MN PMU driver"
  - ub: ubfi: Parsing ummu node in the ubrt table
  - net:nebula-matrix:fix compile err
  - mm: do not install PMD mappings when handling a COW fault
  - urma: implement workqueue management for ubcore module.
  - urma: implement topology information management for ubcore module.
  - urma: implement hash table utilities for ubcore module.
  - !18810 ub: ubase: support for advanced functions
  - urma: implement log module for ubcore subsystem.
  - gmem: open CONFIG_GMEM for arm64 and x86
  - mm: implement hmemcpy API
  - mm: implement hmadvise API
  - mm: support mmap/unmap peer-shared memory area
  - gmem: add gmem stat
  - gmem: support pin/unpin device memory
  - gmem: support swapping heterogeneous memory
  - gmem: implement page faulting for peer-shared vma
  - gmem: implement allocating/deallocating peer-shared vma.
  - gmem: introduce hnode for free peer-shared free page management
  - gmem: introduce vm_object for managing hetergoneous memory mapping
  - gmem: prepare config, boot parameter, vma flag and basic GMEM related structs
  - !18758  nbd: restrict sockets to TCP and UDP
  - !18407 net:Add a new protocol family definition AF_UB to support UB Memory based Socket(UMS)
  - !18839  rseq: Protect event mask against membarrier IPI
  - wifi: ath12k: fix invalid access to memory
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - net: usb: usbnet: restore usb%d name exception for local mac addresses
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
  - tty: serial: 8250: Add Brainboxes XC devices
  - tty: serial: 8250: Add some more device IDs
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe
  - counter: stm32-lptimer-cnt: fix error handling when enabling
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
  - mm/page_alloc: fix memory accept before watermarks gets initialized
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT
  - drm/dp_mst: Add a helper to queue a topology probe
  - drm/dp_mst: Factor out function to queue a topology probe work
  - ARM: Remove address checking for MMUless devices
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
  - mm/mempolicy: count MPOL_WEIGHTED_INTERLEAVE to "interleave_hit"
  - mm/mempolicy: fix memory leaks in weighted interleave sysfs
  - mempolicy: clean up minor dead code in queue_pages_test_walk()
  - mm/mempolicy: protect task interleave functions with tsk->mems_allowed_seq
  - mm/mempolicy: introduce MPOL_WEIGHTED_INTERLEAVE for weighted interleaving
  - mm/mempolicy: refactor a read-once mechanism into a function for re-use
  - mm/mempolicy: implement the sysfs-based weighted_interleave interface
  - mempolicy: migration attempt to match interleave nodes
  - mempolicy: mmap_lock is not needed while migrating folios
  - mempolicy: alloc_pages_mpol() for NUMA policy without vma
  - kernfs: drop shared NUMA mempolicy hooks
  - mempolicy: remove confusing MPOL_MF_LAZY dead code
  - mempolicy: mpol_shared_policy_init() without pseudo-vma
  - mempolicy trivia: use pgoff_t in shared mempolicy tree
  - mempolicy trivia: slightly more consistent naming
  - mempolicy trivia: delete those ancient pr_debug()s
  - mempolicy: fix migrate_pages(2) syscall return nr_failed
  - Revert "mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str"
  - ub: ubase: support for activate/deactivate dev interface
  - ub: ubase: pf supports debugfs query port/vl current.
  - ub: ubase: adds the function to get ub port stats for unic and other aux driver
  - ub: ubase: support pre-alloc 2M pages.
  - ub: ubase: support ras function
  - ub: ubase: Support to port reset
  - ub: ubase: Added QoS and traffic management debugging features
  - ub: ubase: Support reset count information statistics.
  - ub: ubase: Support for ELR and entity reset.
  - ub: ubase: Provide an entity_list query interface.
  - ub: ubase: support create and delete UM TP/TPG
  - ub: ubase: Support to config and query the sl scheduling mode and weight in ETS and TM modes.
  - ub: ubase: support querying sl information in initialization phase
  - ub: ubase: Supports for ctrl queue management.
  - rseq: Protect event mask against membarrier IPI
  - !18820 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !18817 [OLK-6.6] backport important bugfix for mpt3sas driver from upstream linux-6.6.y
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  - !18800 net: hibmcge: support pagepool for rx
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
  - !18745  *** Mainline PATCH backport ***
  - !18807  smb: client: fix wrong index reference in smb2_compound_op()
  - !18711  Bluetooth: hci_conn: Use disable_delayed_work_sync
  - !17268  LoongArch: fix nvme/megaraid/stmmac/uprobe/rtc/kdump problems
  - !18500 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Conflicts Patches
  - ub: ubase: adds the function that query oor caps
  - ub: ubase: Support for virtual register and unregister.
  - ub: ubase: Add trace events to aeqe and ceqe.
  - ub: ubase: Add the cmdq trace event print at the ubase layer.
  - ub: ubase: Support for timer/ext_dtb buffer management.
  - !18784  padata: Reset next CPU when reorder sequence wraps around
  - !18806 perf: fix ddrc redundant value set
  - !18802  KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - !18739  fs: udf: fix OOB read in lengthAllocDescs handling
  - !18710 ub: ubase: Add support of base driver for ub network
  - smb: client: fix wrong index reference in smb2_compound_op()
  - ub: ubase: Support for public Context memory allocation and release.
  - ub: ubase: support for cdma auxiliary device
  - ub: ubase: support for complete event process
  - ub: ubase: support for async event process
  - ub: ubase: add interrupt management framework and misc handler
  - ub: ubase: add function to query device resource
  - ub: ubase: add the function that query ueid
  - ub: ubase: support debugfs public interface.
  - ub: ubase: support for command process
  - ub: ubase: add support of ubase driver for ub network
  - perf: fix ddrc redundant value set
  - drivers/perf: hisi: Add the sysfs interface to configure pmu mpam
  - drivers/perf: hisi: Implement ummu-pmu driver.
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - net: hibmcge: support pagepool for rx
  - net: hibmcge: reduce packet drop under stress testing
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
  - padata: Reset next CPU when reorder sequence wraps around
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
  - wifi: ath11k: fix node corruption in ar->arvifs list
  - nbd: restrict sockets to TCP and UDP
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
  - x86/umip: Check that the instruction opcode is at least two bytes
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed
  - fs: udf: fix OOB read in lengthAllocDescs handling
  - net: Add a new protocol family AF_UB
  - Bluetooth: hci_conn: Use disable_delayed_work_sync
  - jfs: fix array-index-out-of-bounds read in add_missing_indices
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - regulator: max20086: fix invalid memory access
  - dmaengine: ti: Add NULL check in udma_probe()
  - selftests: net: test for lwtunnel dst ref loops
  - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou
  - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
  - net: ipv6: fix dst ref loop in ila lwtunnel
  - net: ipv6: fix missing dst ref drop in ila lwtunnel
  - arm64: dts: rockchip: add rs485 support on uart5 of px30-ringneck-haikou
  - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
  - btf: Avoid weak external references
  - vmlinux: Avoid weak reference to notes section
  - kallsyms: Avoid weak references for kallsyms symbols
  - jfs: Fix null-ptr-deref in jfs_ioc_trim
  - ksmbd: fix null pointer dereference in destroy_previous_session
  - tty: serial: uartlite: register uart driver in init
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - spufs: fix a leak on spufs_new_file() failure
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
  - LoongArch: Support mem=<size> kernel parameter
  - LoongArch: Reserve the EFI memory map region
  - LoongArch: Add debugfs entries to switch SFB/TSO state
  - LoongArch: uprobes: Remove redundant code about resume_era
  - LoongArch: uprobes: Remove user_{en,dis}able_single_step()
  - LoongArch: fix access mode of 7A2000 acpi gpio.
  - LoongArch: configs: enable zstd compressed firmware support
  - Loongarch: configs: Make EFI RTC built-in for correct vmcore timestamps
  - megaraid: Add udelay to avoid data error caused by dma sequence
  - nvme: Add udelay to avoid data error caused by dma sequence


author: Li Nan <linan122@huawei.com> - 6.6.0-119.0.0.110
changelog:
  - !19043  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18348 Intel: Backport PMU support for Intel Clearwater Forest platform
  - !18703 ub: udma: Support loading and unloading driver.
  - !19031 v6  fuse:io_uring: support fuse over io_uring
  - !19033 ub:ubus: Add ummu_map attribute in sysfs
  - !18980  misc: uacce - fix a null pointer access issue when poweroff
  - !18519 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - !18518 iio: imu: bno055: fix OOB access of hw_xlate array
  - !18515 s390/ism: fix concurrency management in ism_cmd()
  - !18493 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - !18506 Fix CVE-2025-39781
  - !18505 Fix CVE-2025-38696
  - !18504 Fix CVE-2025-38640
  - !18503 Fix CVE-2025-39716
  - !18502 Fix CVE-2025-39767
  - !18501 Fix CVE-2025-39693
  - !18494 Fix CVE-2025-39909
  - !18497 Fix CVE-2025-39952
  - !18492 Fix CVE-2025-39916
  - !18957 [OLK-6.6] Fix CVE-2025-39846
  - !18956 [OLK-6.6] Fix CVE-2025-39842
  - !18955 [OLK-6.6] Fix CVE-2025-39861
  - !18954 [OLK-6.6] Fix CVE-2025-39794
  - !18953 [OLK-6.6] Fix CVE-2025-39863
  - !18633 [OLK-6.6] Fix CVE-2025-38715
  - !18631 [OLK-6.6]Fix CVE-2025-38698
  - !18215 [OLK-6.6] Fix CVE-2025-38576
  - !18398 btrfs: avoid NULL pointer dereference if no valid csum tree
  - !18876 Fix CVE-2025-38011
  - !18388 fs/ntfs3: handle hdr_first_de() return value
  - !18369 usb: renesas_usbhs: Reorder clock handling and power management in probe
  - !18367 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - !18321 wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - !18310 net: usb: aqc111: debug info before sanitation
  - !18309 coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - !18949 [OLK-6.6] Fix CVE-2025-38107
  - !18947 [OLK-6.6] Fix CVE-2025-38126
  - !18946 [OLK-6.6] Fix CVE-2025-38218
  - !18945 [OLK-6.6] Fix CVE-2025-38217
  - !18944 [OLK-6.6] Fix CVE-2025-38230
  - !18814 [OLK-6.6] Fix CVE-2025-38225
  - !18813 [OLK-6.6] Fix CVE-2025-38185
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18812 [OLK-6.6] Fix CVE-2025-38206
  - !18675 wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - !18432 [OLK-6.6] Fix CVE-2025-38259
  - !18244 eventpoll: don't decrement ep refcount while still holding the ep mutex
  - !18245 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - !18243 f2fs: fix to do sanity check on ino and xnid
  - !18242 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - !18246 aoe: clean device rq_list in aoedev_downdev()
  - ub: udma: Support init and uninit dfx function.
  - ub: udma: Support register and unregister segment function.
  - ub: udma: Support set eid function.
  - ub: udma: Support register and unregister ctrlq event.
  - ub: udma: Support register and unregister ce and crq event.
  - ub: udma: Support register and unregister ae event.
  - ub: udma: Register and unregister debugfs.
  - ub: udma: Create and destroy u-context.
  - ub:ubus: Add ummu_map attribute in sysfs
  - openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default
  - fuse: remove unneeded atomic set in uring creation
  - fuse: removed unused function fuse_uring_create() from header
  - fuse: {io-uring} Fix a possible req cancellation race
  - fuse: fix possible deadlock if rings are never initialized
  - fuse: fix uring race condition for null dereference of fc
  - fuse: prevent disabling io-uring on active connections
  - fuse: enable fuse-over-io-uring
  - fuse: block request allocation until io-uring init is complete
  - fuse: {io-uring} Prevent mount point hang on fuse-server termination
  - fuse: Allow to queue bg requests through io-uring
  - fuse: Allow to queue fg requests through io-uring
  - fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static
  - fuse: {io-uring} Handle teardown of ring entries
  - fuse: Add io-uring sqe commit and fetch support
  - fuse: {io-uring} Make hash-list req unique finding functions non-static
  - fuse: Add fuse-io-uring handling into fuse_copy
  - fuse: Make fuse_copy non static
  - fuse: {io-uring} Handle SQEs - register commands
  - fuse: make args->in_args[0] to be always the header
  - fuse: Add fuse-io-uring design documentation
  - fuse: Move request bits
  - fuse: Move fuse_get_dev to header file
  - fuse: rename to fuse_dev_end_requests and make non-static
  - io_uring: fix kabi broken for header file changed
  - io_uring: fix kabi broken in struct io_submit_state
  - io_uring: fix kabi broken in struct io_ring_ctx
  - io_uring: fix kabi broken in struct io_tw_state
  - io_uring: kill dead code in io_req_complete_post
  - io_uring: remove dead struct io_submit_state member
  - io_uring/cmd: let cmds to know about dying task
  - io_uring: clean up io_lockdep_assert_cq_locked
  - io_uring: refactor io_req_complete_post()
  - io_uring: remove current check from complete_post
  - io_uring: get rid of intermediate aux cqe caches
  - io_uring: refactor io_fill_cqe_req_aux
  - io_uring: remove struct io_tw_state::locked
  - io_uring: force tw ctx locking
  - io_uring/cmd: document some uring_cmd related helpers
  - io_uring/cmd: fix tw <-> issue_flags conversion
  - io_uring/cmd: kill one issue_flags to tw conversion
  - io_uring/cmd: move io_uring_try_cancel_uring_cmd()
  - io_uring/cmd: give inline space in request to cmds
  - io_uring/cmd: expose iowq to cmds
  - io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
  - io_uring: split out cmd api into a separate header
  - io_uring: cancelable uring_cmd
  - io_uring: retain top 8bits of uring_cmd flags for kernel internal use
  - !19006 ub:ubus: Bugfix of ubus and ubfi
  - !18969  arm64/mpam: Add quirk to shrink MATA PMG range
  - ub:ubus: Bugfix of ubus and ubfi
  - ub: udma: Support loading and unloading driver.
  - !18859 KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19009 v2  mm: Fix shmem build and numa fault counting errors
  - !19019  media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19026  accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - !19024  sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !19027 v11  Add xcall 2.0 support
  - xcall2.0: Introduce xcall epollwait prefetch feature
  - openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default
  - xcall2.0: Add a basic testcase
  - xcall: Add debug mode to force fast syscall for all threads
  - xcall: Rework the early exception vector of XCALL and SYNC
  - xcall2.0: Support xcall1.0 for hardware xcall
  - xcall2.0: Hajack syscall with dynamic instruciton replace
  - xcall2.0: Add xcall_area
  - xcall2.0: Add xcall module register interface
  - xcall2.0: Add userspace proc interface
  - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !18988  zcopy: A zero-copy data transfer mechanism
  - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - mm: fix nr_pages counting for folio in task_numa_fault
  - mm: fix shmem build errors with CONFIG_SWAP disable
  - !18970 net: unic: Support advanced functions of unic driver
  - !18964 ub: add cdma driver code
  - !18874  mm: introduce memalloc_flags_{save,restore}
  - !18428 Add ccp-mdev feature into hygon ccp driver
  - !18440 [OLK-6.6] pinctrl: Zhaoxin: Add KH-50000 support
  - !18992  blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18482 [OLK-6.6] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !18478 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KH-50000
  - !18477 [OLK-6.6] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18467 [OLK-6.6] Enhance SM3 SM4 drivers with optimizations and compatibility fixes
  - !18450 [OLK-6.6] i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - !18449 [OLK-6.6] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18447 RDMA/bnxt_re: Fix error recovery sequence
  - !18448 bnxt_en: Fix ethtool -d byte order for 32-bit values
  - !18452 bnxt_en: Fix DCB ETS validation
  - !18961  mm: add huge pfnmap support for remap_pfn_range()
  - blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18950 urma: implement netlink and memory management features.
  - !18930 ubcore: implement device registration and jetty management
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - !18960  KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - misc: uacce - fix a null pointer access issue when poweroff
  - !18966  wakeup kswapd during node_reclaim
  - !18857 Backport PLR (Power Limit Reasons) TPMI driver for 6.6
  - !17988 [OLK-6.6] Fix CVE-2025-38734
  - !18005 [OLK-6.6] Fix CVE-2025-38718
  - !18977 mm: migrate: Fix the compilation error caused by redundant semicolons
  - mm: migrate: Fix the compilation error caused by redundant semicolons
  - !18943 smb: client: validate change notify buffer before copy
  - !18942 rtc: rx8025: fix incorrect register reference
  - !18051 [OLK-6.6] [Bugfix] Bug fix for min_free_kbytes warning storms
  - !18040 [OLK-6.6] Fix CVE-2025-39808
  - ub: cdma: support for cdma kernelspace north-south compatibility requirements
  - ub: cdma: support reset function
  - ub: cdma: support RX stop flow function
  - ub: cdma: support debugfs interface
  - ub: cdma: support dma faa semantic
  - ub: cdma: support dma cas semantic
  - ub: cdma: support dma read semantic
  - ub: cdma: support dma write with notify semantic
  - ub: cdma: support dma write semantic delivery
  - ub: cdma: support dma write semantic configuration
  - ub: cdma: support kernel resource reclamation
  - !18892 CCA: Fix soft lockup bug while destroy realm
  - ubcore: implement support for UVS commands
  - ubcore: implement device registration and jetty management
  - !18968 kvm: supports hugepages POD when migrate vm
  - ubcore: add device management for character device and class operations
  - kvm: supports hugepages POD when migrate vm
  - net: unic: Debugfs supports querying IP specifications and IP entries.
  - net: unic: support subscribes to the RX stream stop and recovery interface.
  - net: unic: support config/query traffic class parameters
  - net: unic: support config/query ets parameters
  - net: unic: Add debugfs support for QoS configuration and query.
  - net: unic: support config/query the mapping between dscp and tc
  - net: unic: Support RAS
  - net: unic: Drive supports ub entity reset.
  - net: unic: Support to query and clear historical NIC link status information
  - net: unic: support querying and configuring coalesce parameters.
  - net: unic: Add debugfs for JFS/JFR/JFC context.
  - net: unic: Support driver dump register.
  - arm64/mpam: Merge redundant local static variables 'cpus'
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !18963 kvm: supports hugepages reclaime notify
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arch_numa: Make node reclaim distance adjustment always available
  - kvm: supports hugepages reclaime notify
  - !18940 [OLK-6.6][linux-6.6.y sync] Backport 6.6.86-6.6.87 LTS Patches
  - arm64/x86: configs: Enable huge pfnmap support in openeuler defconfig
  - mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping
  - pgtable: add pte_clrhuge() implementation for arm64
  - arm64: mm: Drop dead code for pud special bit handling
  - mm/huge_memory: check pmd_special() only after pmd_present()
  - mm/arm64: support large pfn mappings
  - mm/x86: support large pfn mappings
  - mm: always define pxx_pgprot()
  - mm/fork: accept huge pfnmap entries
  - mm/pagewalk: check pfnmap for folio_walk_start()
  - mm/gup: detect huge pfnmap entries in gup-fast
  - mm: allow THP orders for PFNMAPs
  - mm: mark special bits for huge pfn mappings when inject
  - mm: drop is_huge_zero_pud()
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud
  - !18841 mm: add auxillary functions for folios and hugetlb
  - !18896 kvm: add struct kvm if only CONFIG_KVM enabled
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - mm: hugetlb: add putback_hugetlb_folio()
  - mm: hugetlb: add get_hugetlb_folio_nodemask() mm: hugetlb: add filter function to dequeue hugetlb functions
  - mm: migrate: add isolate_and_migrate_folios()
  - kvm: add struct kvm if only CONFIG_KVM enabled
  - !18908 [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - !18376 net: wangxun: ngbe: add support for wangxun 1G
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
  - ocfs2: prevent release journal inode after journal shutdown
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
  - !18887 urma: implement ubcore sysfs interface and device management
  - !18685 ub: add cdma driver code
  - !18684 ub: ub_fwctl:Add the ub_fwctl driver
  - net_sched: ets: fix a race in ets_qdisc_change()
  - [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
  - !18928 gmem: fix some warnings
  - !18938 dma-mapping: benchmark: add support for UB devices
  - f2fs: fix to do sanity check on sit_bitmap_size
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
  - jfs: validate AG parameters in dbMount() to prevent crashes
  - fs/jfs: consolidate sanity checking in dbMount
  - jfs: add sanity check for agwidth in dbMount
  - perf: Fix dangling cgroup pointer in cpuctx
  - nfsd: decrease sc_count directly if fail to queue dl_recall
  - tracing: Do not add length to print format in synthetic events
  - ksmbd: fix memory leak in parse_lease_state()
  - ipv6: Align behavior across nexthops during path selection
  - gre: Fix IPv6 multicast route creation.
  - gre: Fix again IPv6 link-local address generation.
  - Revert "drm/amd: Keep display off while going into S4"
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices"
  - Revert "PCI: Avoid reset when disabled via sysfs"
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
  - tracing: Do not use PERF enums when perf is not defined
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
  - nfsd: put dl_stid if fail to queue dl_recall
  - exec: fix the racy usage of fs_struct->in_exec
  - jfs: add index corruption check to DT_GETPAGE()
  - ext4: fix OOB read when checking dotdot dir
  - ext4: don't over-report free space or inodes in statvfs
  - arm64: Don't call NULL in do_compat_alignment_fixup()
  - tracing: Fix synth event printk format for str fields
  - tracing: Ensure module defining synth event cannot be unloaded while tracing
  - ksmbd: add bounds check for create lease context
  - ksmbd: add bounds check for durable handle context
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
  - mmc: omap: Fix memory leak in mmc_omap_new_slot
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
  - kunit/overflow: Fix UB in overflow_allocation_test
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
  - platform/x86: ISST: Correct command storage data length
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
  - x86/hyperv: Fix check of return value from snp_set_vmsa()
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
  - media: imx-jpeg: Cleanup after an allocation error
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
  - smb: client: validate change notify buffer before copy
  - ub: cdma: support register segment
  - ub: cdma: support unregister segment
  - ub: cdma: support reporting completed events
  - ub: cdma: support reporting asynchronous events
  - ub: cdma: support the creation of jfs
  - ub: cdma: support the deletion of jfs
  - ub: cdma: support the creation of ctp
  - ub: cdma: support the deletion of ctp
  - ub: cdma: support the creation of jfc
  - ub: cdma: support the deletion of jfc
  - ub: cdma: support for releasing queue
  - ub: cdma: support for allocating queue
  - ub: cdma: support for getting device by eid
  - ub: cdma: support for getting device list
  - ub: cdma: support querying sl information and updating eu
  - ub: cdma: support the probe and remove processes
  - !18906 v2  Add MFS Support
  - rtc: rx8025: fix incorrect register reference
  - !18920 perf: Fix tt_core mismatch over PG CPU
  - !18934  mm/thp: Add a new sysfs knob for zero COW
  - !18845  fs/resctrl: Fix the L3 CMAX conversion mechanism
  - !18858 ub: ubase: Support debugs functions
  - !18853 net: unic: add support of unic driver for ub network
  - !18901 ub:hisi-ubus: Support HISI-UBUS driver framework
  - !18927  mm: add nr_free_highatomic in show_free_areas
  - !18929 v2:mm/swap: get the swap device offset directly
  - perf/core: Fix child_total_time_enabled accounting bug at task exit
  - drm/amdgpu/gfx11: fix num_mec
  - ipv6: Do not consider link down nexthops in path selection
  - ipv6: Start path selection from the first nexthop
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
  - vsock: avoid timeout during connect() if the socket is closing
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
  - e1000e: change k1 configuration on MTP and later platforms
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
  - RISC-V: errata: Use medany for relocatable builds
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
  - ntb: intel: Fix using link status DB's
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
  - spufs: fix a leak in spufs_create_context()
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
  - memory: omap-gpmc: drop no compatible check
  - can: statistics: use atomic access in hot path
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
  - drm/amd: Keep display off while going into S4
  - nvme-pci: fix stuck reset on concurrent DPC and HP
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
  - x86/hyperv: Fix output argument to hypercall that changes page visibility
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
  - sched/deadline: Use online cpus for validating runtime
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
  - HID: i2c-hid: improve i2c_hid_get_report error message
  - platform/x86/intel/vsec: Add Diamond Rapids support
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
  - cifs: fix incorrect validation for num_aces field of smb_acl
  - perf/core: Fix perf_pmu_register() vs. perf_init_event()
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio
  - affs: don't write overlarge OFS data block size fields
  - affs: generate OFS sequence numbers starting at 1
  - wifi: brcmfmac: keep power during suspend if board requires it
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
  - nvme-pci: clean up CMBMSC when registering CMB fails
  - wifi: iwlwifi: mvm: use the right version of the rate API
  - wifi: iwlwifi: fw: allocate chained SG tables for dump
  - rcu-tasks: Always inline rcu_irq_work_resched()
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
  - sched/smt: Always inline sched_smt_active()
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
  - objtool: Fix segfault in ignore_unreachable_insn()
  - ring-buffer: Fix bytes_dropped calculation issue
  - net/mlx5e: SHAMPO, Make reserved size independent of page size
  - ksmbd: fix multichannel connection failure
  - ksmbd: use aead_request_free to match aead_request_alloc
  - rndis_host: Flag RNDIS modems as WWAN devices
  - exfat: fix the infinite loop in exfat_find_last_cluster()
  - NFS: Shut down the nfs_client only after all the superblocks
  - perf tools: annotate asm_pure_loop.S
  - fs/procfs: fix the comment above proc_pid_wchan()
  - tty: n_tty: use uint for space returned by tty_write_room()
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
  - perf python: Check if there is space to copy all the event
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space
  - perf python: Decrement the refcount of just created event on failure
  - perf python: Fixup description of sample.id event member
  - i3c: master: svc: Fix missing the IBI rules
  - um: hostfs: avoid issues on inode number reuse by host
  - um: remove copy_from_kernel_nofault_allowed
  - selftests/mm/cow: fix the incorrect error handling
  - fuse: fix dax truncate/punch_hole fault path
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
  - kexec: initialize ELF lowest address to ULONG_MAX
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
  - perf units: Fix insufficient array space
  - perf evlist: Add success path to evlist__create_syswide_maps
  - iio: adc: ad7124: Fix comparison of channel configs
  - iio: adc: ad4130: Fix comparison of channel setups
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
  - fs/ntfs3: Prevent integer overflow in hdr_first_de()
  - usb: xhci: correct debug message page size calculation
  - perf bench: Fix perf bench syscall loop count
  - perf arm-spe: Fix load-store operation checking
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
  - ucsi_ccg: Don't show failed to get FW build information error
  - perf pmu: Don't double count common sysfs and json events
  - coresight-etm4x: add isb() before reading the TRCSTATR
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - coresight: catu: Fix number of pages while using 64k pages
  - soundwire: slave: fix an OF node reference leak in soundwire slave device
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
  - perf stat: Fix find_stat for mixed legacy/non-legacy events
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
  - leds: Fix LED_OFF brightness race
  - mfd: sm501: Switch to BIT() to mitigate integer overflows
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
  - crypto: nx - Fix uninitialised hv_nxc on error
  - power: supply: max77693: Fix wrong conversion of charge input threshold value
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
  - clk: amlogic: g12a: fix mmc A peripheral clock
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
  - selftests/bpf: Select NUMA_NO_NODE to create map
  - clk: amlogic: gxbb: drop non existing 32k clock parent
  - clk: amlogic: g12b: fix cluster A parent data
  - pinctrl: tegra: Set SFIO mode to Mux Register
  - IB/mad: Check available slots before posting receive WRs
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  - RDMA/mlx5: Fix calculation of total invalidated pages
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
  - pinctrl: renesas: rza2: Fix missing of_node_put() call
  - lib: 842: Improve error handling in sw842_compress()
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
  - RDMA/mana_ib: Ensure variable err is initialized
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
  - clk: samsung: Fix UBSAN panic in samsung_clk_init()
  - selftests/bpf: Fix string read in strncmp benchmark
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock
  - fbdev: sm501fb: Add some geometry checks.
  - mdacon: rework dependency list
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode
  - PCI: histb: Fix an error handling path in histb_pcie_probe()
  - drm/amd/display: avoid NPD when ASIC does not support DMUB
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
  - PCI: Remove stray put_device() in pci_register_host_bridge()
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
  - PCI: Avoid reset when disabled via sysfs
  - PCI/portdrv: Only disable pciehp interrupts early when needed
  - PCI: brcmstb: Fix potential premature regulator disabling
  - PCI: brcmstb: Use internal register to change link capability
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing
  - drm/msm/dpu: don't use active in atomic_check()
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
  - PCI: Use downstream bridges for distributing resources
  - drm: xlnx: zynqmp: Fix max dma segment size
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly
  - drm/dp_mst: Fix drm RAD print
  - drm/bridge: ti-sn65dsi86: Fix multiple instances
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
  - ALSA: hda/realtek: Always honor no_shutup_pins
  - dt-bindings: vendor-prefixes: add GOcontroll
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
  - ASoC: cs35l41: check the return value from spi_setup()
  - platform/x86: dell-ddv: Fix temperature calculation
  - media: platform: allgro-dvt: unregister v4l2_device on the error path
  - media: verisilicon: HEVC: Initialize start_bit field
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
  - x86/traps: Make exc_double_fault() consistently noreturn
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
  - PM: sleep: Fix handling devices with direct_complete set on errors
  - EDAC/ie31200: Fix the error path order of ie31200_init()
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
  - selinux: Chain up tool resolving errors in install_policy.sh
  - RISC-V: KVM: Disable the kernel perf counter during configure
  - PM: sleep: Adjust check before setting power.must_resume
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
  - x86/platform: Only allow CONFIG_EISA for 32-bit
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
  - x86/fpu: Fix guest FPU state buffer allocation size
  - smack: dont compile ipv6 code unless ipv6 is configured
  - cpufreq: scpi: compare kHz instead of Hz
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
  - watch_queue: fix pipe accounting mismatch
  - ub: ub_fwctl: support ummu data processing
  - ub: ub_fwctl: query the MSG queue information and entry details within UB.
  - ub: ub_fwctl: support querying SCC and io_die related information.
  - ub: ub_fwctl: support querying UB link trace information.
  - ub: ub_fwctl: Support Dump register.
  - ub: ub_fwctl: supports querying and configuring some scattered registers.
  - ub: ub_fwctl: supports querying TP, BA related register information
  - dma-mapping: benchmark: add support for UB devices
  - ub: ub_fwctl: supports querying NL, TA, DL related register information
  - ub: ub_fwctl: Add some simple common framework functions
  - ub: ub_fwctl: Add the ub_fwctl driver and its basic features.
  - mm/thp: Add a new sysfs knob for zero COW
  - !18803  arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - net: unic: support querying and configuring queue parameters.
  - net: unic: support querying and configuring the number of queues.
  - net: unic: support querying and configuring simple RSS.
  - net: unic: support querying and configuring promisc.
  - net: unic: support querying and configuring MTU.
  - net: unic: support querying and configuring FEC parameters.
  - net: unic: add fec statistic support
  - net: unic: add rack ip for unic
  - net: unic: add io basic Rx/Tx functionality for unic
  - net: unic: add support of unic driver for ub network
  - !18914  misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - !18915  scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - !18916  software node: Correct a OOB check in software_node_get_reference_args()
  - !18917  KVM: x86: use array_index_nospec with indices that come from guest
  - !18877 iommu/ummu: Implement IOMMU ops and advanced capabilities.
  - mm/swap: get the swap device offset directly
  - mm: add nr_free_highatomic in show_free_areas
  - ub:ubus: reserve space for ub subsystem related structure
  - ub:hisi-ubus: Support UBUS configure EID-UPI table
  - ub:hisi-ubus: Support UBUS vdm entity enable message
  - ub:hisi-ubus: Support for MSGQ's debugging functionality
  - urma: implement ubcore sysfs interface and device management
  - mm: migrate: add isolate_folio_to_list()
  - urma: implement ubcore basic connection and bonding support
  - urma: add network framework facilities for ubcore.
  - urma: add tp table support and related cmd header for ubcore.
  - CCA: unmap state2 range can block to fix soft lockup while destroy realm
  - config: enable config for PLR
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID
  - perf: Fix tt_core mismatch over PG CPU
  - iommu/ummu: Add UMMU trace log
  - iommu/ummu: Support UMMU identity mapping
  - iommu/ummu: Add UB Memory support
  - iommu/ummu: Support UMMU iopf capability
  - iommu/ummu: Support UMMU nested mode
  - iommu/ummu: Add SVA API support to UMMU driver
  - iommu/ummu: Implement iommu_ops and iommu_domain_ops for UMMU driver
  - iommu/ummu: Implement domain and core ops in logic UMMU framework
  - iommu/ummu: Implement MPAM for QoS
  - iommu/ummu: Support UMMU attribute show and store operations
  - iommu/ummu: Implement IOMMU ops forwarding in logic UMMU framework
  - iommu/ummu: Support UMMU page table management
  - iommu/ummu: Introduce logic UMMU framework
  - iommu/ummu: Add UMMU permission queue
  - iommu/ummu: Add grant and ungrant operations for permission table
  - iommu/ummu: Add UMMU permission table memory management
  - iommu/ummu: Add UMMU private implementation
  - iommu/ummu: Add manager for UMMU permission table
  - iommu/ummu: Add tct/tect ops for configuration table
  - iommu/ummu: Support UMMU configuration table management
  - ub: ubase: Support querying dev caps.
  - ub: ubase: Supports the query of UBCL config.
  - ub: ubase: add function that query aeq/ceq/tp/tpg context
  - KVM: x86: use array_index_nospec with indices that come from guest
  - software node: Correct a OOB check in software_node_get_reference_args()
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - mfs: tool: Add mfs user space tool demo
  - mfs: Optimize mfs syncer process and metadata ops
  - mfs: enable MFS
  - MAINTAINERS: Add maintainer for mfs
  - mfs: Add MFS documentation
  - mfs: Add tracepoint for MFS
  - mfs: Add user command for handling events
  - mfs: Add communication devie and event acquisition operations
  - mfs: Add basic events framework
  - mfs: Add basic cache framework: check method and control structure
  - mfs: Add basic data operation for MFS
  - mfs: Add basic metadata operation for MFS
  - mfs: implement the mount procedure
  - mfs: Initialize mfs module
  - platform/x86/intel: power-domains: Add Clearwater Forest support
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits()
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits
  - platform/x86/intel: TPMI domain id and CPU mapping
  - platform/x86/intel/tpmi: Add API to get debugfs root
  - platform/x86/intel/tpmi: Add support for performance limit reasons
  - batman-adv: Switch to linux/array_size.h
  - ub:hisi-ubus: Support MSGQ queue exception handling
  - ub:hisi-ubus: Support for processing CQ request messages
  - ub:hisi-ubus: Provide callback functions for message devices
  - ub:hisi-ubus: Support for MSGQ channel processing in SQ and CQ
  - ub:hisi-ubus: Support for hisi MSGQ framework
  - ub:hisi-ubus: Support UBUS local RAS interfaces
  - ub:hisi-ubus: Support UBUS vdm pue/ue register and release
  - ub:hisi-ubus: Support UBUS vendor defined message framework
  - ub:hisi-ubus: Add HiSilicon ubus driver framework
  - drm/amdgpu: csa unmap use uninterruptible lock
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies
  - ASoC: codec: wcd9335: Convert to GPIO descriptors
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
  - mm: introduce memalloc_flags_{save,restore}
  - ub: ubase: Added debug information query function for FST/FVT/RQMT entries
  - ub: ubase: support debugfs for active dev stats.
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  - bpf: Disable migration in nf_hook_run_bpf().
  - gmem: fix some warnings
  - parisc: Revise __get_user() to probe user read access
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting
  - drm/amd/display: Avoid a NULL pointer dereference
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - eventpoll: don't decrement ep refcount while still holding the ep mutex
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - f2fs: fix to do sanity check on ino and xnid
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - aoe: clean device rq_list in aoedev_downdev()
  - arm64/mpam: Add quirk for L3 CPBM validity check
  - fs/resctrl: Fix the L3 CMAX conversion mechanism
  - kernel.h: Move ARRAY_SIZE() to a separate header
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  - exfat: fix double free in delayed_free
  - arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - configs: Add Zhaoxin GPIO pinctrl for kh-50000 in openeuler_config
  - pinctrl: Zhaoxin: Add KH-50000 support
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - iio: imu: bno055: fix OOB access of hw_xlate array
  - s390/ism: fix concurrency management in ism_cmd()
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - btrfs: avoid NULL pointer dereference if no valid csum tree
  - fs/ntfs3: handle hdr_first_de() return value
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - net: usb: aqc111: debug info before sanitation
  - net: usb: aqc111: fix error handling of usbnet read calls
  - coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - coresight: holding cscfg_csdev_lock while removing cscfg from csdev
  - coresight: change coresight_device lock type to raw_spinlock_t
  - hfs: fix slab-out-of-bounds in hfs_bnode_read()
  - jfs: Regular file corruption check
  - net: wangxun: ngbe: add support for wangxun 1G
  - RDMA/bnxt_re: Fix error recovery sequence
  - bnxt_en: Fix ethtool -d byte order for 32-bit values
  - bnxt_en: Fix DCB ETS validation
  - Fix kabi for CWF PMU support
  - crypto: sm4 - Refactor mode handling and optimize performance
  - i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - crypto: sm3 - Refactor code and harden security
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap()
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu
  - KVM: x86/pmu: Add common define to capture fixed counters offset
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools/include: Sync x86 headers with the kernel sources
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr()
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86: Optimize the is_x86_event
  - perf/x86/intel: Check the X86 leader for ACR group
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally
  - perf/x86/intel: Support auto counter reload
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload
  - perf: Extend the bit width of the arch-specific flag
  - perf/x86/intel: Track the num of events needs late setup
  - perf/x86: Add dynamic constraint
  - perf: Extend per event callchain limit to branch stack
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
  - perf/x86/intel: Support PEBS counters snapshotting
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - perf/x86/intel: Support RDPMC metrics clear mode
  - perf/x86/intel/ds: Add PEBS format 6
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS
  - perf/x86/intel/ds: Factor out functions for PEBS records processing
  - perf/x86/intel/ds: Clarify adaptive PEBS processing
  - perf/x86/intel: Support Perfmon MSRs aliasing
  - perf/x86/intel: Support PERFEVTSEL extension
  - perf/x86: Add config_mask to represent EVENTSEL bitmask
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86: Support counter mask
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - usb: renesas_usbhs: Reorder clock handling and power management in probe
  - perf/x86/intel: Support the PEBS event mask
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - powerpc/eeh: Make EEH driver device hotplug safe
  - mm: Use pr_warn_once() for min_free_kbytes warning
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
  - sctp: linearize cloned gso packets in sctp_rcv
  - net/smc: fix UAF on smcsk after smc_listen_out()


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-26.0.0.30
changelog:
  - !7198 v2  mm: prepare more high-order pages on pcplist
  - mm: prepare more high-order pages to be stored on the per-cpu lists
  - mm: page_alloc: use the correct THP order for THP PCP
  - !7196 v3  Backport folio feature and bugfix
  - mm: madvise: avoid split during MADV_PAGEOUT and MADV_COLD
  - mm: vmscan: avoid split during shrink_folio_list()
  - mm: swap: allow storage of all mTHP orders
  - mm: swap: update get_swap_pages() to take folio order
  - mm: swap: simplify struct percpu_cluster
  - mm: swap: free_swap_and_cache_nr() as batched free_swap_and_cache()
  - mm: swap: remove CLUSTER_FLAG_HUGE from swap_cluster_info:flags
  - mm/madvise: don't forget to leave lazy MMU mode in madvise_cold_or_pageout_pte_range()
  - mm/madvise: add cond_resched() in madvise_cold_or_pageout_pte_range()
  - mm: support multi-size THP numa balancing
  - mm: factor out the numa mapping rebuilding into a new helper
  - mm: alloc_anon_folio: avoid doing vma_thp_gfp_mask in fallback cases
  - huge_memory.c: document huge page splitting rules more thoroughly
  - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
  - mm/migrate: split source folio if it is on deferred split list
  - mm: hold PTL from the first PTE while reclaiming a large folio
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0
  - mm/filemap: don't decrease mmap_miss when folio has workingset flag
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - arm64: mm: swap: support THP_SWAP on hardware with MTE
  - mm: remove PageAnonExclusive assertions in unuse_pte()
  - mm: remove struct page from get_shadow_from_swap_cache
  - selftests: mm: fix unused and uninitialized variable warning
  - XArray: set the marks correctly when splitting an entry
  - mm/huge_memory: check new folio order when split a folio
  - mm: huge_memory: enable debugfs to split huge pages to any order
  - mm: thp: split huge page to any lower order pages
  - mm: page_owner: add support for splitting to any order in split page_owner
  - mm: memcg: make memcg huge page split support any order split
  - mm/page_owner: use order instead of nr in split_page_owner()
  - mm/memcg: use order instead of nr in split_page_memcg()
  - mm: support order-1 folios in the page cache
  - mm/huge_memory: only split PMD mapping when necessary in unmap_folio()
  - selftests/mm: split_huge_page_test: conform test to TAP format output
  - mm: huge_memory: use more folio api in __split_huge_page_tail()
  - mm/vmalloc: fix return value of vb_alloc if size is 0
  - mm: use memalloc_nofs_save() in page_cache_ra_order()
  - mm: madvise: pageout: ignore references rather than clearing young
  - mm: ratelimit stat flush from workingset shrinker
  - mm, oom:dump_tasks add rss detailed information printing
  - arm64/mm: improve comment in contpte_ptep_get_lockless()
  - arm64/mm: export contpte symbols only to GPL users
  - mm: page_alloc: enforce minimum zone size to do high atomic reserves
  - mm: page_alloc: correct high atomic reserve calculations
  - mm: fix draining remote pageset
  - !7190  entry: inline syscall enter/exit functions
  - entry: Move syscall_enter_from_user_mode() to header file
  - entry: Move enter_from_user_mode() to header file
  - entry: Move exit to usermode functions to header file
  - !7130 v2  openeuler_defconfig: update oedefconfig for the minimum set
  - openeuler_defconfig: update oedefconfig for the minimum set
  - !7141 spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: Add verification for the max_frequency provided by the firmware
  - !7136 Fix failed in acpi_gpiochip_find() by adding parent node match
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - !6778 v2 Fix two soc bugs of hip09
  - irqchip: gicv3: Add workaround for hip09 erratum 162200806
  - irqchip: gicv3: Add workaround for hip09 erratum 162200803
  - !7165 v2  tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - !7184 v3  md: do not delete safemode_timer in mddev_suspend
  - md: do not delete safemode_timer in mddev_suspend
  - !7131 net: hns3: Fix ROH mac address initialization.
  - net: hns3: Fix ROH mac address initialization.
  - !7126 net: hns3: some bugfixes for hns3 driver
  - net: hns3: fix kernel crash when devlink reload during initialization
  - net: hns3: direct return when receive a unknown mailbox message
  - net: hns3: release PTP resources if pf initialization failed
  - net: hns3: change type of numa_node_mask as nodemask_t
  - net: hns3: using cpumask_copy when set value to cpumask_t
  - net: hns3: set irq affinity directly
  - net: hns3: use appropriate barrier function after setting a bit value
  - net: hns3: don't need to check an unsigned number is less than 0
  - net: hns3: add 
  - net: hns3: using user configure after hardware reset
  - net: hns3: add cond_resched() to hns3 ring buffer init process
  - net: hns3: fix kernel crash problem in concurrent scenario
  - net: hns3: fix port vlan filter not disabled issue
  - net: hns3: revert "net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode"
  - !7159 【OLK 6.6】 backport some mailist patches for perf
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !7068  kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - !7153  Backports for OLK-6.6
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets
  - netfilter: bridge: confirm multicast packets before passing them up the stack
  - !7069  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - !7075 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix Use-After-Free of rsv_qp
  - RDMA/hns: Fix a missing check of atomic wr length
  - !3184 [OLK-6.6] add support for Zhaoxin ZXPAUSE instruction
  - x86/delay: add support for Zhaoxin ZXPAUSE instruction
  - !7078 v2  Backport four conflict stable patch
  - mm: turn folio_test_hugetlb into a PageType
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - fork: defer linking file vma until vma is fully initialized
  - mm, treewide: introduce NR_PAGE_ORDERS
  - !7067 crypto: hisilicon fix some issues
  - uacce: fix for cdev memory leak
  - crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable
  - crypto: hisilicon/zip - optimize the address offset of the reg query function
  - !4084 riscv64: initial LIVEPATCH_WO_FTRACE support
  - riscv64: add initial livepatch support
  - livepatch: add arch hook before doing klp_resolve_symbols
  - !6868  irqchip/loongson-pch-pic: Update interrupt registration policy
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - !6004 [OLK-6.6] fix bug：ethtool -S and ethtool -x/X for mucse rnpm drvier
  - mucse: ethtool -S and ethtool -x/X for mucse rnpm drvier

   at the end when print msg


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-27.0.0.31
changelog:
  - !7527  ext4 iomap performance optimize
  - ext4: fallback to generic_perform_write once iov_iter_count <= PAGE_SIZE
  - iomap: export __iomap_write_{begin|end}
  - !7530  mm: more thp control for large folio
  - mm: correct the docs for thp_fault_alloc and thp_fault_fallback
  - mm: add docs for per-order mTHP counters and transhuge_page ABI
  - mm: add per-order mTHP anon_swpout and anon_swpout_fallback counters
  - mm: add per-order mTHP anon_fault_alloc and anon_fault_fallback counters
  - mm: add control to allow specified high-order pages stored on PCP list
  - mm: huge_memory: add thp mapping align control
  - mm: huge_memory: add folio_get_unmapped_area()
  - mm: filemap: make mTHP configurable for exec mapping
  - mm/filemap: Allow arch to request folio size for exec memory
  - mm/memcontrol: remove __mod_lruvec_page_state()
  - mm/khugepaged: use a folio more in collapse_file()
  - mm: remove inc/dec lruvec page state functions
  - !7521 v2  Avoiding false sharing in field access of tk_core
  - openeuler_defconfig: Enable CONFIG_ARCH_LLC_128_LINE_SIZE for Hisilicon platforms
  - timekeeping: Avoiding false sharing in field access of tk_core
  - !7182 v3  mm: mglru: reuse some legacy trace
  - mm: multi-gen LRU: reuse some legacy trace events
  - mm, vmscan: remove ISOLATE_UNMAPPED
  - trace-vmscan-postprocess: sync with tracepoints updates
  - !7219 Hygon model 6h L3 PMU event duplicate creating issue fix
  - perf/x86/uncore: Create L3 event strictly to the CPU vendor
  - !7474  sched/fair: set burst to zero when cfs bandwidth is cancelled
  - sched/fair: set burst to zero when set max to cpu.max
  - sched/fair: limit burst to zero when cfs bandwidth is toggled off
  - !7475  Makefile.oever: add OPENEULER_RELEASE for version.h
  - Makefile.oever: add OPENEULER_RELEASE for version.h
  - !6241 add pmu support for loongarch kvm
  - LoongArch: KVM: Add PMU support
  - !5654 [OLK-6.6] USB: UAS: return ENODEV when submit urbs fail with device not attached
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - !5218 [OLK-6.6] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - crypto: ccp: Move the fixup code for Hygon psp to Hygon specific files
  - crypto: ccp: Bind specific sp_dev_vdata for Hygon secure processor
  - crypto: ccp: Introduce hygon specific interface to support driver
  - !6311 v2  ima: Avoid blocking in RCU read-side critical section
  - ima: Avoid blocking in RCU read-side critical section
  - !6837  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !5644 [OLK-6.6] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !7454  add new kvm_type for Confidential VMs
  - kvm: add macro CONFIG_CVM_HOST to defconfig
  - kvm: add new kvm_type for cvm
  - !7405 v2  mm: prepare to support weighted interleaving mempolicy
  - mm: prepare to support weighted interleaving mempolicy
  - !7370 v2  sched: smart_grid: silence complier error
  - sched: smart_grid: silence complier error
  - !7227  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !5291 [OLK-6.6] iommu/dma: Fix not fully traversing iova reservations issue
  - iommu/dma: Fix not fully traversing iova reservations issue
  - !6774 [OLK-6.6] merge upstream  4 wangxun related patches to fix i2c bug
  - Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
  - Revert "net: txgbe: fix i2c dev name cannot match clkdev"
  - net: wangxun: add ethtool_ops for channel number
  - clkdev: Update clkdev id usage to allow for longer names
  - !7206 v2  sched: programmable: Allow set tag for pid 1.
  - sched: programmable: Allow set tag for pid 1.


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-27.0.0.32
changelog:
  - Update the riscv-kernel patch for sg2042, rebase 6.6.0-27.0.0 and add features:
    - SPI Flash driver
    - kexec file raw image
    - HIGHMEM
  - This patch only applies to the RISC-V architecture, the related commit list:
  -
  - sg2042: Update sg2042 openeuler_defconfig
  - th1520: riscv: config: Enable th1520 support
  - riscv: thead: Use the wback_inv instead of wback_only
  - riscv: errata: thead: use pa based instructions for CMO
  - riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - Revert "riscv: use VA+PA variant of CMO macros for DMA page preparation"
  - Revert "riscv: use VA+PA variant of CMO macros for DMA synchorization"
  - Revert "riscv: errata: cmo: add CMO macro variant with both VA and PA"
  - Revert "riscv: errata: Replace thead cache clean with flush"
  - Revert "riscv: errata: thead: use riscv_nonstd_cache_ops for CMO"
  - Revert "riscv: errata: thead: use pa based instructions for CMO"
  - riscv: mm: fix NOCACHE_THEAD does not set bit[61] correctly
  - riscv: mm: update T-Head memory type definitions
  - Revert "sg2042: riscv: changing T-Head PBMT attributes"
  - riscv: remove compression for riscv Image
  - th1520: cpufreq: correct typo in config name
  - th1520: riscv: dts: thead: Add Milk-V Meles board
  - th1520: cpufreq: light-mpw-cpufreq: fix -Wunused-variable in panic_cpufreq_notifier_call
  - th1520: cpufreq: light-mpw-cpufreq: fix cpu_pll1 already disabled warning
  - riscv: Add th1520-lichee-cluster-4a dts support (8G/16G)
  - riscv: dts: th1520-beaglev-ahead: add alias for emmc & sd
  - riscv: dts: th1520-lichee-pi-4a: add alias for emmc & sd
  - riscv: dts: lpi4a 16g support
  - th1520: perf vendor events riscv: add T-HEAD C9xx JSON file
  - th1520: riscv: dts: thead: Add PMU event node
  - riscv: pinctrl: th1520: fix build
  - riscv: dts: th1520: lpi4a: add rpmsg node
  - riscv: dts: th1520: add mbox client node
  - riscv: rpmsg: mailbox-client: sync thead sdk 1.4.2
  - riscv: panic: add thead sdk quirks
  - riscv: dts: add watchdog node
  - th1520: riscv: dts: Add th1520 reset device tree
  - th1520: reset: Add th1520 reset driver support
  - th1520: dt-bindings: reset: Document th1520 reset control
  - riscv: light_wdt: update sdk 1.4.2
  - th1520_light_event: update sdk 1.4.2
  - th1520_aon: update sdk 1.4.2
  - th1520: fix compile th1520-beaglev-ahead error
  - th1520: add TH1520 cpu frequency driver
  - th1520: riscv: errata: thead: use pa based instructions for CMO
  - th1520: riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - riscv: dts: thead: Add TH1520 CPU reset node
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A USB
  - th1520: riscv: dts: thead: Add Lichee Pi 4A IO expansions
  - th1520: riscv: dts: thead: Add TH1520 USB nodes
  - th1520: riscv: dts: thead: Add TH1520 I2C nodes
  - th1520: usb: dwc3: add T-HEAD TH1520 usb driver
  - th1520: dt-bindings: usb: Add T-HEAD TH1520 USB controller
  - th1520: riscv: dts: thead: Add BeagleV Ahead SDIO0 pins
  - th1520: riscv: dts: thead: Add Lichee Pi 4A SDIO0 pins
  - th1520: riscv: dts: thead: Add TH1520 ethernet nodes
  - th1520: net: stmmac: add glue layer for T-HEAD TH1520 SoC
  - th1520: dt-bindings: net: add T-HEAD dwmac support
  - th1520: dt-bindings: net: snps,dwmac: allow dwmac-3.70a to set pbl properties
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A PWM fan
  - th1520: riscv: dts: thead: Add TH1520 PVT node
  - th1520: riscv: dts: thead: Add TH1520 PWM node
  - th1520: pwm: add T-HEAD PWM driver
  - th1520: dt-bindings: pwm: Add T-HEAD PWM controller
  - th1520: gpio: dwapb: Use generic request, free and set_config
  - riscv: dts: thead: Enable LicheePi 4A eMMC and microSD
  - riscv: dts: thead: Enable BeagleV Ahead eMMC and microSD
  - riscv: dts: thead: Add TH1520 mmc controllers and sdhci clock
  - riscv: defconfig: Enable mmc and dma drivers for T-Head TH1520
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520
  - mmc: sdhci: add __sdhci_execute_tuning() to header
  - dt-bindings: mmc: sdhci-of-dwcmhsc: Add T-Head TH1520 support
  - th1520: riscv: dtb: thead: Add BeagleV Ahead LEDs
  - th1520: riscv: dts: thead: Add TH1520 pinctrl settings for UART0
  - th1520: riscv: dts: thead: Adjust TH1520 GPIO labels
  - th1520: riscv: dts: thead: Add TH1520 GPIO ranges
  - th1520: riscv: dts: thead: Add TH1520 pin control nodes
  - th1520: pinctrl: Add driver for the T-Head TH1520 SoC
  - th1520: dt-bindings: pinctrl: Add thead,th1520-pinctrl bindings
  - th1520: dt-bindings: gpio: dwapb: allow gpio-ranges
  - sg2042: riscv: config: Enable sg2042 support
  - sg2042: drivers: rtc: disable BMC RTC device
  - sg2042: dts: add i2c-rtc ds1307 device node for single chip
  - sg2042: riscv:dts:modify dw gpio clock name
  - sg2042: drivers:pci:remove the err log of parsing pci
  - sg2042: driver: ipmi: support KVM and IPMI SI for BMC
  - sg2042: perf cpumap: Make counter as unsigned ints
  - sg2042: driver: radeon: deinit device during kexec
  - sg2042: kernel: schedule: Fix set_task_cpu() bug
  - sg2042: mm: Modify __find_max_addr for memory hole
  - sg2042: riscv: kernel: Optimize apply_relocate_add()
  - sg2042: riscv: mm: Clear compilation warning about last_cpupid
  - sg2042: kernel: tick: filter unnecessary printing
  - sg2042: kernel: Adjust the log level of the tick_switch_to_oneshot function
  - sg2042: driver: clk: Modify the timer clock is turned off defaultly
  - sg2042: drivers: clock: Add sophgo sg2042 multi-chip clock synchronous support
  - Revert "riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings"
  - Revert "riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC"
  - Revert "riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping"
  - sg2042: riscv: mm: Add high memory on riscv64 using sv39
  - sg2042: riscv/kexec: handle R_RISCV_ADD16 and R_RISCV_SUB16 relocation types
  - sg2042: riscv: kexec: Add image loader for kexec file
  - sg2042: drm/amd/display: Support DRM_AMD_DC_FP on RISC-V
  - sg2042: riscv: Factor out riscv-march-y to a separate Makefile
  - sg2042: riscv: Add support for kernel-mode FPU
  - sg2042: mango pci hack:broadcast when no MSI source known
  - sg2042: nvidia hda: force msi
  - sg2042: radeon hack: force 64-bit msi to fit top intc
  - sg2042: amdgpu: disable rebar
  - sg2042: ttm: disallow cached mapping
  - sg2042: driver: soc: Add sophgo sg2042 soc support
  - sg2042: drivers: pcie: Create msi-x whitelist,turn on msi-x for top intr
  - sg2042: driver: pcie: Add sophgo sg2042 soc support
  - sg2042: driver: net: Add sophgo sg2042 soc support
  - sg2042: driver: mtd: Add sophgo sg2042 soc support
  - sg2042: driver: mmc: Add sophgo sg2042 soc support
  - sg2042: driver: reset: Add sophgo sg2042 soc support
  - sg2042: driver: pinctrl: Add sophgo sg2042 soc support
  - sg2042: driver: clk: Add sophgo sg2042 soc support
  - sg2042: riscv: spinlock: Fix deadlock issue
  - sg2042: riscv: add smp_cond_load_acquire()
  - sg2042: riscv: add ioremap_wc for gpu
  - sg2042: riscv: changing T-Head PBMT attributes
  - sg2042: riscv: errata: thead: Make cache clean to flush
  - sg2042: riscv: use VA+PA variant of CMO macros for DMA page preparation
  - sg2042: riscv: use VA+PA variant of CMO macros for DMA synchorization
  - sg2042: riscv: errata: cmo: add CMO macro variant with both VA and PA
  - sg2042: riscv: errata: Replace thead cache clean with flush
  - sg2042: riscv: Kconfig: Set vector as default no
  - sg2042: riscv: Add sophgo sg2042 soc support


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-28.0.0.33
changelog:
  - !8010  mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str
  - mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str
  - !7997  mm: some misc bugfix
  - mm: vmalloc: bail out early in find_vmap_area() if vmap is not init
  - Revert "mm: support multi-size THP numa balancing"
  - mm: simplify thp_vma_allowable_order
  - mm: huge_memory: add the missing folio_test_pmd_mappable() for THP split statistics
  - mm/huge_memory: skip invalid debugfs new_order input for folio split
  - mm: prohibit the last subpage from reusing the entire large folio
  - mm/memory.c: do_numa_page(): remove a redundant page table read
  - mm: memory: fix shift-out-of-bounds in fault_around_bytes_set
  - !7966 [OLK-6.6] openeuler_defconfig: Modify openeuler-defconfig
  - openeuler_defconfig: Modify openeuler-defconfig
  - !7909  Scheduler load balance fixes
  - config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - sched/numa: Fix numa imbalance in load_balance()
  - !7917  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - Revert "sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED"
  - !7902 v3  Revert "ACPI: Rename ACPI_HOTPLUG_CPU to include 'present'"
  - Revert "ACPI: Rename ACPI_HOTPLUG_CPU to include 'present'"
  - !7888 v3  mm: add thp anon pmd size mapping align control
  - mm: add thp anon pmd size mapping align control
  - !7730 v2  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - !7808  Bluetooth: L2CAP: Fix not validating setsockopt user input
  - Bluetooth: L2CAP: Fix not validating setsockopt user input
  - !7822  LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors
  - LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors
  - !7823  LoongArch: fix kdump not work when legacy mode disabled
  - LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - !7764 v2  mm: Some bugfix and optimization
  - mm/dynamic_pool: clear PG_hugetlb when demote hugepages
  - mm: optimise vmf_anon_prepare() for VMAs without an anon_vma
  - mm: delay the check for a NULL anon_vma
  - mm: assert the mmap_lock is held in __anon_vma_prepare()
  - mm/memory: change vmf_anon_prepare() to be non-static
  - mm: always initialise folio->_deferred_list
  - mm: page_alloc: control latency caused by zone PCP draining
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
  - hugetlb: check for hugetlb folio before vmemmap_restore
  - hugetlb: set hugetlb page flag before optimizing vmemmap
  - mm: add alloc_contig_migrate_range allocation statistics
  - mm: convert free_zone_device_page to free_zone_device_folio
  - mm: combine __folio_put_small, __folio_put_large and __folio_put
  - mm: inline destroy_large_folio() into __folio_put_large()
  - mm: combine free_the_page() and free_unref_page()
  - mm: free non-hugetlb large folios in a batch
  - mm: increase folio batch size
  - mm: fix list corruption in put_pages_list
  - mm: remove folio from deferred split list before uncharging it
  - mm: convert free_swap_cache() to take a folio
  - mm: use a folio in __collapse_huge_page_copy_succeeded()
  - mm: convert free_pages_and_swap_cache() to use folios_put()
  - mm: remove lru_to_page()
  - mm: remove free_unref_page_list()
  - memcg: remove mem_cgroup_uncharge_list()
  - mm: free folios directly in move_folios_to_lru()
  - mm: free folios in a batch in shrink_folio_list()
  - mm: allow non-hugetlb large folios to be batch processed
  - mm: handle large folios in free_unref_folios()
  - mm: use __page_cache_release() in folios_put()
  - mm: use free_unref_folios() in put_pages_list()
  - mm: remove use of folio list from folios_put()
  - memcg: add mem_cgroup_uncharge_folios()
  - mm: use folios_put() in __folio_batch_release()
  - mm: add free_unref_folios()
  - mm: convert free_unref_page_list() to use folios
  - mm: make folios_put() the basis of release_pages()
  - !7812 [OLK-6.6] drm/phytium: Replace default efi fb0 with dc fb
  - drm/phytium: Replace default efi fb0 with dc fb
  - !7767  irqchip/loongson-eiointc: fix gsi register error
  - irqchip/loongson-eiointc: fix gsi register error
  - !7771  ext4: default enable iomap for buffered IO and large folio
  - ext4: default enable iomap for buffered IO and large folio
  - !7721 【OLK-6.6】bugfix from upstream v6.9 for AMD EPYC
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - x86/CPU/AMD: Do the common init on future Zens too
  - !7572 Fix pseudo nmi identifier undeclaration complilation error
  - arm64/cpufeature: Fix pseudo nmi identifier undeclaration complilation error
  - !7537 [OLK-6.6] irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - !7164 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
  - media: usbtv: Remove useless locks in usbtv_video_free()
  - !6386 [OLK-6.6] Fix warnings for RNPVF driver with loongarch-allmodconfig
  - RNPVF: NET: Fix "'%d' directive output may be truncated" warnings
  - !5243 [OLK-6.6] Support PSP identification for Hygon 4th CPU and print secure features when running on Hygon CPUs
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/cpu/hygon: Clear SME feature flag when not in use
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
  - !7180 【3snic】 use same string “sssnic" for "Kernel driver in use" and "Kernel modules"
  - 3snic: use sssnic as kernel driver name
  - !7607  Fix allmodconfig build error
  - net/ethernet/huawei/hiroce3: Fix allmodconfig build error
  - !7583 [OLK-6.6] Fixed display error for ps23xx when using ast and pe2201 bmc card
  - drm/ast: Fixed display error for ps23xx when using ast bmc card
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card
  - !7593  memcg_swap_qos: Backport two bugfix
  - mm/swapfile: fix infinite loop in get_swap_pages after set memory.swapfile
  - memcg: fix incorrect value of sysctl_memcg_swap_qos_stat
  - !7595  jbd2: speed up jbd2_transaction_committed()
  - jbd2: speed up jbd2_transaction_committed()
  - !5480 [OLK-6.6] Fix DMA RW sequence disorder issue
  - Add kh40000_iommu_dma_ops for KH-40000 platform
  - Add kh40000_direct_dma_ops for KH-40000 platform
  - !3133 [OLK-6.6] iommu/vt-d:Add support for detecting ACPI device in RMRR
  - iommu/vt-d: Add support for detecting ACPI namespace device in RMRR


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-28.0.0.36
changelog:
  - riscv-kernel patch update to 6.6.0-29.0.0
  - Fix QEMU UEFI boot panic
  - Deal with riscv SoC dtb search path


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-30.0.0.38
changelog:
  - !8809 MPTCP Upstream part 1
  - net: bpf: Use sockopt_lock_sock() in ip_sock_set_tos()
  - inet: lock the socket in ip_sock_set_tos()
  - inet: implement lockless IP_TOS
  - inet: implement lockless IP_MTU_DISCOVER
  - inet: implement lockless IP_MULTICAST_TTL
  - !9141  Fix allmodconfig build frame size error
  - net/ethernet/huawei/hiroce3: Fix allmodconfig build frame size error
  - !9101  ext4: Skip moving extents if page writeback failed
  - ext4: Skip moving extents if page writeback failed
  - !9126  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !9010 Backport 6.6.31&6.6.32 LTS patches from upstream
  - block: add a partscan sysfs attribute for disks
  - block: add a disk_has_partscan helper
  - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching sysfs file
  - docs: kernel_include.py: Cope with docutils 0.21
  - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  - KEYS: trusted: Do not use WARN when encode fails
  - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: tipd: fix event checking for tps6598x
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - net: usb: ax88179_178a: fix link status when link is set to down/up
  - usb: dwc3: Wait unconditionally after issuing EndXfer command
  - binder: fix max_thread type inconsistency
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - erofs: reliably distinguish block based and fscache mode
  - erofs: get rid of erofs_fs_context
  - kselftest: Add a ksft_perror() helper
  - mmc: core: Add HS400 tuning in HS400es initialization
  - KEYS: trusted: Fix memory leak in tpm2_key_encode()
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  - ice: remove unnecessary duplicate checks for VF VSI ID
  - ice: pass VSI pointer into ice_vc_isvalid_q_id
  - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings
  - ksmbd: add continuous availability share parameter
  - cifs: Add tracing for the cifs_tcon struct refcounting
  - smb: client: instantiate when creating SFU files
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
  - smb3: add trace event for mknod
  - smb311: additional compression flag defined in updated protocol spec
  - smb311: correct incorrect offset field in compression header
  - cifs: Move some extern decls from .c files to .h
  - ksmbd: Fix spelling mistake "connction" -> "connection"
  - ksmbd: fix possible null-deref in smb_lazy_parent_lease_break_close
  - cifs: remove redundant variable assignment
  - cifs: fixes for get_inode_info
  - cifs: defer close file handles having RH lease
  - ksmbd: add support for durable handles v1/v2
  - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
  - smb: common: simplify compression headers
  - smb: common: fix fields sizes in compression_pattern_payload_v1
  - smb: client: negotiate compression algorithms
  - smb3: add dynamic trace point for ioctls
  - smb: client: return reparse type in /proc/mounts
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point
  - smb: client: parse uid, gid, mode and dev from WSL reparse points
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs()
  - smb: client: add support for WSL reparse points
  - smb: client: reduce number of parameters in smb2_compound_op()
  - smb: client: fix potential broken compound request
  - smb: client: move most of reparse point handling code to common file
  - smb: client: introduce reparse mount option
  - smb: client: retry compound request without reusing lease
  - smb: client: do not defer close open handles to deleted files
  - smb: client: reuse file lease key in compound operations
  - smb: client: get rid of smb311_posix_query_path_info()
  - smb: client: parse owner/group when creating reparse points
  - smb3: update allocation size more accurately on write completion
  - smb: client: handle path separator of created SMB symlinks
  - cifs: update the same create_guid on replay
  - ksmbd: Add kernel-doc for ksmbd_extract_sharename() function
  - cifs: set replay flag for retries of write command
  - cifs: commands that are retried should have replay flag set
  - smb: client: delete "true", "false" defines
  - smb: Fix some kernel-doc comments
  - cifs: new mount option called retrans
  - smb: client: don't clobber ->i_rdev from cached reparse points
  - cifs: new nt status codes from MS-SMB2
  - cifs: pick channel for tcon and tdis
  - cifs: minor comment cleanup
  - cifs: remove redundant variable tcon_exist
  - ksmbd: vfs: fix all kernel-doc warnings
  - ksmbd: auth: fix most kernel-doc warnings
  - cifs: remove unneeded return statement
  - cifs: get rid of dup length check in parse_reparse_point()
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof()
  - smb3: Improve exception handling in allocate_mr_list()
  - cifs: fix in logging in cifs_chan_update_iface
  - smb: client: handle special files and symlinks in SMB3 POSIX
  - smb: client: cleanup smb2_query_reparse_point()
  - smb: client: allow creating symlinks via reparse points
  - smb: client: optimise reparse point querying
  - smb: client: allow creating special files via reparse points
  - smb: client: extend smb2_compound_op() to accept more commands
  - smb: client: Fix minor whitespace errors and warnings
  - smb: client: introduce cifs_sfu_make_node()
  - cifs: fix use after free for iface while disabling secondary channels
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO
  - smb3: minor cleanup of session handling code
  - smb3: more minor cleanups for session handling routines
  - smb3: minor RDMA cleanup
  - cifs: print server capabilities in DebugData
  - smb: use crypto_shash_digest() in symlink_hash()
  - Add definition for new smb3.1.1 command type
  - SMB3: clarify some of the unused CreateOption flags
  - cifs: Add client version details to NTLM authenticate message
  - md: fix kmemleak of rdev->serial
  - Revert "selftests/bpf: Add netkit to tc_redirect selftest"
  - btrfs: do not wait for short bulk allocation
  - keys: Fix overwrite of key expiration on instantiation
  - dmaengine: idxd: add a write() method for applications to submit work
  - dmaengine: idxd: add a new security check to deal with a hardware erratum
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
  - Bluetooth: qca: fix firmware check error path
  - Bluetooth: qca: fix info leak when fetching fw build id
  - Bluetooth: qca: fix info leak when fetching board id
  - Bluetooth: qca: generalise device address check
  - Bluetooth: qca: fix NVM configuration parsing
  - Bluetooth: qca: add missing firmware sanity checks
  - Bluetooth: qca: fix wcn3991 device address check
  - Bluetooth: qca: fix invalid device address check
  - eventfs: Do not treat events directory different than other directories
  - tracefs: Still use mount point as default permissions for instances
  - tracefs: Reset permissions on remount if permissions are options
  - ksmbd: do not grant v2 lease if parent lease key and epoch are not set
  - ksmbd: avoid to send duplicate lease break notifications
  - ksmbd: off ipv6only for both ipv4/ipv6 binding
  - spi: microchip-core-qspi: fix setting spi bus clock rate
  - regulator: core: fix debugfs creation regression
  - nvme-pci: Add quirk for broken MSIs
  - selftests/mm: fix powerpc ARCH check
  - x86/apic: Don't access the APIC when disabling x2APIC
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - net: fix out-of-bounds access in ops_init
  - arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
  - drm/amd/display: Fix incorrect DSC instance for MST
  - drm/amd/display: Handle Y carry-over in VCP X.Y calculation
  - drm/i915/bios: Fix parsing backlight BDB data
  - drm/i915/gt: Automate CCS Mode setting during engine resets
  - drm/i915/audio: Fix audio time stamp programming for DP
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/vmwgfx: Fix Legacy Display Unit
  - drm/ttm: Print the memory decryption status just once
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - Revert "drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()"
  - drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()
  - mei: me: add lunar lake point M DID
  - clk: sunxi-ng: a64: Set minimum and maximum rate for PLL-MIPI
  - clk: sunxi-ng: common: Support minimum and maximum rate
  - slimbus: qcom-ngd-ctrl: Add timeout for wait operation
  - dyndbg: fix old BUG_ON in >control parser
  - ASoC: ti: davinci-mcasp: Fix race condition during probe
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - xtensa: fix MAKE_PC_FROM_RA second argument
  - tipc: fix UAF in error path
  - e1000e: change usleep_range to udelay in PHY mdic access
  - kmsan: compiler_types: declare __no_sanitize_or_inline
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio: pressure: Fixes BME280 SPI driver data
  - iio:imu: adis16475: Fix sync mode setting
  - dt-bindings: iio: health: maxim,max30102: fix compatible check
  - workqueue: Fix selection of wake_cpu in kick_pool()
  - mptcp: only allow set existing scheduler for net.mptcp.scheduler
  - mptcp: ensure snd_nxt is properly initialized on connect
  - mm/slab: make __free(kfree) accept error pointers
  - maple_tree: fix mas_empty_area_rev() null pointer dereference
  - btrfs: set correct ram_bytes when splitting ordered extent
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  - firewire: ohci: fulfill timestamp for some local asynchronous transaction
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: typec: tcpm: Check for port partner validity before consuming it
  - usb: typec: tcpm: unregister existing source caps before re-registration
  - usb: typec: tcpm: clear pd_event queue in PORT_RESET
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - usb: gadget: uvc: use correct buffer size when parsing configfs lists
  - usb: gadget: composite: fix OS descriptors w_value logic
  - USB: core: Fix access violation during port device removal
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - Reapply "drm/qxl: simplify qxl_fence_wait"
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
  - drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible
  - drm/amd/display: Atom Integrated System Info v2_2 for DCN35
  - gpiolib: cdev: fix uninitialised kfifo
  - gpiolib: cdev: relocate debounce_period_us from struct gpio_desc
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users
  - drm/connector: Add 
  - drm/meson: dw-hdmi: add bandgap setting for g12
  - drm/meson: dw-hdmi: power up phy on device init
  - net: dsa: mv88e6xxx: add phylink_get_caps for the mv88e6320/21 family
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route()
  - ipv6: prevent NULL dereference in ip6_output()
  - ipv6: annotate data-races around cnf.disable_ipv6
  - hsr: Simplify code for announcing HSR nodes timer setup
  - net-sysfs: convert dev->operstate reads to lockless ones
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - dt-bindings: net: mediatek: remove wrongly added clocks and SerDes
  - rxrpc: Only transmit one ACK per jumbo packet received
  - rxrpc: Fix congestion control algorithm
  - rxrpc: Fix the names of the fields in the ACK trailer struct
  - selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC
  - selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - nfc: nci: Fix kcov check in nci_rx_work()
  - phonet: fix rtm_phonet_notify() skb allocation
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - Bluetooth: HCI: Fix potential null-ptr-deref
  - Bluetooth: msft: fix slab-use-after-free in msft_do_close()
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - ARM: 9381/1: kasan: clear stale stack poison
  - qibfs: fix dentry leak
  - SUNRPC: add a missing rpc_stat for TCP TLS
  - blk-iocost: do not WARN if iocg was already offlined
  - net:usb:qmi_wwan: support Rolling modules
  - drm/radeon: silence UBSAN warning (v3)
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - gpio: lpc32xx: fix module autoloading
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - powerpc/crypto/chacha-p10: Fix failure on non Power10
  - 9p: explicitly deny setlease attempts
  - fs/9p: fix the cache always being enabled on files with qid flags
  - fs/9p: translate O_TRUNC into OTRUNC
  - fs/9p: only translate RWX permissions for plain 9P2000
  - iommu: mtk: fix module autoloading
  - smb3: fix broken reconnect when password changing on the server by allowing password rotation
  - Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
  - uio_hv_generic: Don't free decrypted memory
  - hv_netvsc: Don't free decrypted memory
  - Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
  - Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdgpu: Fix VCN allocation in CPX partition
  - drm/amd/display: Skip on writeback when it's not applicable
  - drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2
  - drm/amdgpu: Refine IB schedule error logging
  - tools/power/turbostat: Fix uncore frequency file string
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - blk-iocost: avoid out of bounds shift
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - memblock tests: fix undefined reference to `BIT'
  - memblock tests: fix undefined reference to `panic'
  - memblock tests: fix undefined reference to `early_pfn_to_nid'
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix warning upon failed /dev/cpu_dma_latency read
  - tools/power turbostat: Print ucode revision only if valid
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Increase the limit for fd opened
  - tools/power turbostat: Fix added raw MSR output
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - ata: sata_gemini: Check clk_enable() result
  - vboxsf: explicitly deny setlease attempts
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - scsi: ufs: core: Fix MCQ mode dev command timeout
  - scsi: ufs: core: WLUN suspend dev/link state error recovery
  - regulator: tps65132: Add of_match table
  - ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3 suspend
  - kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
  - selftests/ftrace: Fix event filter target_func selection
  - bpf: Check bloom filter map value size
  - drm/amdkfd: range check cp bad op exception interrupts
  - drm/amdkfd: Check cgroup when returning DMABuf info
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal
  - wifi: iwlwifi: read txq->read_ptr under lock
  - wifi: mac80211: fix prep_connection error path
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Use a dedicated lock for ras_fwlog state
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - scsi: ufs: core: Fix MCQ MAC configuration
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
  - swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y
  - powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
  - powerpc/pseries: make max polling consistent for longer H_CALLs
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - clk: qcom: smd-rpm: Restore msm8976 num_clk
  - net: gro: add flush check in udp_gro_receive_segment
  - net: gro: fix udp bad offset in socket lookup by adding {inner_}network_offset to napi_gro_cb
  - net: gro: parse ipv6 ext headers without frag0 invalidation
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - drm/panel: ili9341: Use predefined error codes
  - drm/panel: ili9341: Respect deferred probe
  - drm/panel: ili9341: Correct use of device property APIs
  - s390/qeth: Fix kernel panic after setting hsuid
  - vxlan: Pull inner IP header in vxlan_rcv().
  - tipc: fix a possible memleak in tipc_buf_append
  - rxrpc: Clients must accept conn from any address
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - spi: fix null pointer dereference within spi_sync
  - drm/amdgpu: fix doorbell regression
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - s390/cio: Ensure the copied buf is NUL terminated
  - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: meson: axg-tdm-interface: manage formatters in trigger
  - ASoC: meson: axg-card: make links nonatomic
  - ASoC: meson: axg-fifo: use threaded irq to check periods
  - ASoC: meson: axg-fifo: use FIELD helpers
  - vxlan: Add missing VNI filter counter update in arp_reduce().
  - vxlan: Fix racy device stats updates.
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - ALSA: emu10k1: fix E-MU dock initialization
  - ALSA: emu10k1: move the whole GPIO event handling to the workqueue
  - ALSA: emu10k1: factor out snd_emu1010_load_dock_firmware()
  - ALSA: emu10k1: fix E-MU card dock presence monitoring
  - Fix a potential infinite loop in extract_user_to_sg()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - octeontx2-af: avoid off-by-one read from userspace
  - bna: ensure the copied buf is NUL terminated
  - xdp: use flags field to disambiguate broadcast redirect
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - ASoC: codecs: wsa881x: set clk_stop_mode1 flag
  - ASoC: Intel: avs: Set name of control as in topology
  - riscv, bpf: Fix incorrect runtime stats
  - bpf, arm64: Fix incorrect runtime stats
  - spi: axi-spi-engine: fix version format string
  - spi: axi-spi-engine: use common AXI macros
  - spi: axi-spi-engine: move msg state to new struct
  - spi: axi-spi-engine: use devm_spi_alloc_host()
  - spi: axi-spi-engine: simplify driver data allocation
  - spi: spi-axi-spi-engine: Use helper function devm_clk_get_enabled()
  - bpf: Fix a verifier verbose message
  - nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH
  - ASoC: SOF: Intel: add default firmware library path for LNL
  - ASoC: SOF: Introduce generic names for IPC types
  - regmap: Add regmap_read_bypassed()
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
  - regulator: change devm_regulator_get_enable_optional() stub to return Ok
  - regulator: change stubbed devm_regulator_get_enable to return Ok
  - regulator: mt6360: De-capitalize devicetree regulator subnodes
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
  - power: rt9455: hide unused rt9455_boost_voltage_values
  - pinctrl: baytrail: Fix selecting gpio pinctrl state
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
  - pinctrl: core: delete incorrect free in pinctrl_enable()
  - pinctrl/meson: fix typo in PDM's pin name
  - pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
  - Bluetooth: qca: add support for QCA2066
  - eeprom: at24: fix memory corruption race condition
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
  - rust: kernel: require `Send` for `Module` implementations
  - wifi: nl80211: don't free NULL coalescing rule
  - rust: macros: fix soundness issue in `module!` macro
  - rust: module: place generated init_module() function in .init.text
  - mtd: limit OTP NVMEM cell parse to non-NAND devices
  - nvmem: add explicit config option to read old syntax fixed OF cells
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
  - dmaengine: pl330: issue_pending waits until WFP state
  - !9104 [OLK-6.6] drm/phytium: Fix make allmodconfig build fail
  - DRM: Fix Phytium DRM build fail
  - !9085 [OLK-6.6] openeuler_defconfig: fix checkdefconfig fail
  - openeuler_defconfig: fix checkdefconfig fail
  - !8750  ubifs: Check @c->dirty_[n|p
  - ubifs: Check @c->dirty_[n|p]n_cnt and @c->nroot state under @c->lp_mutex
  - !8703 v2  IMA: Introduce a config to bypass i_version detection for Overlayfs issue
  - IMA: Introduce a config to bypass i_version detection for Overlayfs issue
  - !8621  LoongArch: fix HT RX INT TRANS register not initialized
  - LoongArch: fix HT RX INT TRANS register not initialized
  - !8440  arm64: cpufeature: Both the major and the minor version numbers need to be checked
  - arm64/mpam: skip mpam initialize under kdump kernel
  - arm64: cpufeature: Both the major and the minor version numbers need to be checked
  - !8107 [OLK 6.6]net: hns3: fix kernel crash when devlink reload  during pf/vf initialization
  - {topost} net: hns3: fix kernel crash when devlink reload during vf initialization
  - {topost} net: hns3: fix kernel crash when devlink reload during pf initialization
  - !8481  Fix vf init and common user permissions issue
  - net/ethernet/huawei/hiroce3: Fix vf init and common user permissions issue
  - !8576 【OLK-6.6】backport PCC patches to support shared interrupt for multiple subspaces and platform notification handling
  - soc: hisilicon: kunpeng_hccs: replace MAILBOX dependency with PCC
  - soc: hisilicon: kunpeng_hccs: Add the check for obtaining complete port attribute
  - mailbox: pcc: Support shared interrupt for multiple subspaces
  - mailbox: pcc: Add support for platform notification handling
  - !8471  ext4: Fixes len calculation in mpage_journal_page_buffers
  - ext4: Fixes len calculation in mpage_journal_page_buffers
  - !8496  mm/mlock: return EINVAL for illegal user memory range in mlock
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - !8435  LoongArch: add GMAC&GNET support
  - net: stmmac: dwmac-loongson: Add loongson module author
  - net: stmmac: dwmac-loongson: Move disable_force flag to _gnet_date
  - net: stmmac: dwmac-loongson: Add Loongson GNET support
  - net: stmmac: dwmac-loongson: Fixed failure to set network speed to 1000.
  - net: stmmac: dwmac-loongson: Add loongson_dwmac_config_legacy
  - net: stmmac: dwmac-loongson: Add full PCI support
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add phy mask for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add ref and ptp clocks for Loongson
  - net: stmmac: dwmac-loongson: Split up the platform data initialization
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification
  - net: stmmac: dwmac-loongson: Drop useless platform data
  - net: stmmac: Export dwmac1000_dma_ops
  - net: stmmac: Add multi-channel support
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure
  - !7896  backport upstream stmmac related patches.
  - net: stmmac: Move MAC caps init to phylink MAC caps getter
  - net: stmmac: Rename phylink_get_caps() callback to update_caps()
  - net: phylink: provide mac_get_caps() method
  - !8450  sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()
  - sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()
  - !7482 v2  perf parse-events: Make legacy events lower priority than sysfs/JSON
  - perf x86 test: Update hybrid expectations
  - perf parse-events: Make legacy events lower priority than sysfs/JSON
  - !8309  xfs: Fix file creation failure
  - xfs: Fix file creation failure
  - !8183  perf pmu: Count sys and cpuid JSON events separately
  - perf pmu: Count sys and cpuid JSON events separately
  - !7077 v4  block: dicard bugfix
  - block: check io size before submit discard
  - block: fix overflow in blk_ioctl_discard()
  - !8353  mm/dynamic_pool: clear PG_hugetlb when promote hugepages
  - mm/dynamic_pool: clear PG_hugetlb when promote hugepages
  - !8151  LoongArch: Fix secondary bridge routing errors
  - LoongArch: Fix secondary bridge routing errors
  - !7948 【OLK-6.6】Fix BUILD REGRESSION warnings in bzwx N5/N6 series NIC drivers
  - drivers: Fix BUILD REGRESSION warnings in bzwx N5/N6 series NIC drivers
  - !8228  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - !6283  fix deadlock in cgroup1_writeback V2
  - cgroup_writeback: fix deadlock in cgroup1_writeback
  - cgroup_writeback: Revert "fix deadlock in cgroup1_writeback"
  - !8036  fix CVE-2024-27010
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion

   to message about demoting connector force-probes


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-31.0.0.39
changelog:
  - !9438 【OLK-6.6】RDMA/hns: Fix some mutex UAF
  - RDMA/hns: Fix some mutex UAF
  - !9394  CVE-2024-38587
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - !9405  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9415  mm: drop the 'anon_' prefix for swap-out mTHP counters
  - mm: drop the 'anon_' prefix for swap-out mTHP counters
  - !9376  ALSA: core: Fix NULL module pointer assignment at card init
  - ALSA: core: Fix NULL module pointer assignment at card init
  - !9295  Port patches from OLK-5.10
  - livepatch: Enable CONFIG_LIVEPATCH_ISOLATE_KPROBE in openeuler_defconfig
  - livepatch: Avoid patching conflicts with kprobes
  - !9356  tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
  - !9332  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - !9355  f2fs: multidev: fix to recognize valid zero block address
  - f2fs: multidev: fix to recognize valid zero block address
  - !9329  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9352 MPTCP Upstream part 10
  - MAINTAINERS: add Geliang as reviewer for MPTCP
  - mailmap: add entries for Geliang Tang
  - mptcp: fill in missing MODULE_DESCRIPTION()
  - netlink: fill in missing MODULE_DESCRIPTION()
  - netlink: specs: mptcp: rename the MPTCP path management spec
  - !9304 MPTCP Upstream part 9
  - selftests: mptcp: add mptcp_lib_wait_local_port_listen
  - selftests: mptcp: add mptcp_lib_check_transfer
  - selftests: mptcp: add mptcp_lib_make_file
  - selftests: mptcp: add missing oflag=append
  - !9307  of: module: add buffer overflow check in of_modalias()
  - of: module: add buffer overflow check in of_modalias()
  - !9331  Some folio bugfix
  - mm/memory: don't require head page for do_set_pmd()
  - mm/migrate: fix kernel BUG at mm/compaction.c:2761!
  - mm: huge_memory: fix misused mapping_large_folio_support() for anon folios
  - mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
  - mm: fix possible OOB in numa_rebuild_large_mapping()
  - mm: support multi-size THP numa balancing
  - mm/rmap: do not add fully unmapped large folio to deferred split list
  - !9302  ring-buffer: Fix a race between readers and resize checks
  - ring-buffer: Fix a race between readers and resize checks
  - !9345  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9346  net: bridge: xmit: make sure we have at least eth header len bytes
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - !9301 MPTCP Upstream part 8
  - selftests: mptcp: userspace pm send RM_ADDR for ID 0
  - selftests: mptcp: userspace pm remove initial subflow
  - mptcp: userspace pm rename remove_err to out
  - selftests: mptcp: userspace pm create id 0 subflow
  - mptcp: add mptcpi_subflows_total counter
  - !9266 MPTCP Upstream part 7
  - net: fill in MODULE_DESCRIPTION()s for SOCK_DIAG modules
  - selftests: mptcp: sockopt: drop mptcp_connect var
  - mptcp: define more local variables sk
  - mptcp: move sk assignment statement ahead
  - !9262 MPTCP Upstream part 6
  - mptcp: use mptcp_get_ext helper
  - mptcp: use mptcp_check_fallback helper
  - mptcp: drop useless ssk in pm_subflow_check_next
  - mptcp: ignore notsent_lowat setting at the subflow level
  - mptcp: consolidate sockopt synchronization
  - !5257 [OLK-6.6] Support DOWNLOAD_FIRMWARE feature for hygon CSV
  - crypto: ccp: Implement CSV_DOWNLOAD_FIRMWARE ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_SHUTDOWN ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_INIT ioctl command
  - crypto: ccp: Support DOWNLOAD_FIRMWARE when detect CSV
  - !8058 Intel: Backport QuickAssist Technology(QAT) live migration support for in-tree driver
  - Enable QAT_VFIO_PCI as kernel module to support Intel QAT live migration
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - crypto: qat - specify firmware files for 402xx
  - crypto: qat - validate slices count returned by FW
  - crypto: qat - improve error logging to be consistent across features
  - crypto: qat - improve error message in adf_get_arbiter_mapping()
  - crypto: qat - implement dh fallback for primes > 4K
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid"
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices
  - crypto: qat - implement interface for live migration
  - crypto: qat - add interface for live migration
  - crypto: qat - add bank save and restore flows
  - crypto: qat - expand CSR operations for QAT GEN4 devices
  - crypto: qat - rename get_sla_arr_of_type()
  - crypto: qat - relocate CSR access code
  - crypto: qat - move PFVF compat checker to a function
  - crypto: qat - relocate and rename 4xxx PF2VM definitions
  - crypto: qat - adf_get_etr_base() helper
  - !8304 [OLK-6.6] Backport TPMI based RAPL PMU support for next Intel Xeon Granite Rapids (GNR)
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - !9245 MPTCP Upstream part 5
  - mptcp: prevent BPF accessing lowat from a subflow socket.
  - mptcp: use copy_from_iter helpers on transmit
  - mptcp: give rcvlowat some love
  - tcp: define initial scaling factor value as a macro
  - mptcp: use plain bool instead of custom binary enum
  - mptcp: add a new sysctl for make after break timeout
  - !8422 [OLK-6.6] Intel IAA Compression Accelerator Crypto Driver (iaa_crypto)
  - openeuler_defconfig: Add kernel config for Intel IAA crypto driver
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida
  - dmaengine: idxd: Check for driver name match before sva user feature
  - crypto: iaa - Use cpumask_weight() when rebalancing
  - crypto: iaa - Fix some errors in IAA documentation
  - crypto: iaa - Change iaa statistics to atomic64_t
  - crypto: iaa - Add global_stats file and remove individual stat files
  - crypto: iaa - Remove comp/decomp delay statistics
  - crypto: iaa - fix decomp_bytes_in stats
  - crypto: iaa - Fix nr_cpus < nr_iaa case
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - crypto: iaa - Fix comp/decomp delay statistics
  - crypto: iaa - Fix async_disable descriptor leak
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init()
  - crypto: iaa - Remove header table code
  - dmaengine: idxd: constify the struct device_type usage
  - dmaengine: idxd: make dsa_bus_type const
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
  - crypto: iaa - Account for cpu-less numa nodes
  - crypto: iaa - remove unneeded semicolon
  - crypto: iaa - Remove unneeded newline in update_max_adecomp_delay_ns()
  - crypto: iaa - Change desc->priv to 0
  - dmaengine: idxd: Add support for device/wq defaults
  - crypto: iaa - Add IAA Compression Accelerator stats
  - crypto: iaa - Add irq support for the crypto async interface
  - crypto: iaa - Add support for deflate-iaa compression algorithm
  - crypto: iaa - Add compression mode management along with fixed mode
  - crypto: iaa - Add per-cpu workqueue table with rebalancing
  - crypto: iaa - Add Intel IAA Compression Accelerator crypto driver core
  - crypto: iaa - Add IAA Compression Accelerator Documentation
  - dmaengine: idxd: add callback support for iaa crypto
  - dmaengine: idxd: Add wq private data accessors
  - dmaengine: idxd: Export wq resource management functions
  - dmaengine: idxd: Export descriptor management functions
  - dmaengine: idxd: Rename drv_enable/disable_wq to idxd_drv_enable/disable_wq, and export
  - dmaengine: idxd: add external module driver support for dsa_bus_type
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register
  - dmaengine: idxd: add wq driver name support for accel-config user tool
  - dmaengine: idxd: rate limit printk in misc interrupt thread
  - !9230 MPTCP Upstream part 4
  - net: mptcp: use policy generated by YAML spec
  - net: mptcp: rename netlink handlers to mptcp_pm_nl_<blah>_{doit,dumpit}
  - uapi: mptcp: use header file generated from YAML spec
  - Documentation: netlink: add a YAML spec for mptcp
  - net: mptcp: convert netlink from small_ops to ops
  - !9229 v2  sched: smart_grid: fix potential NULL pointer dereference
  - sched: smart_grid: fix potential NULL pointer dereference
  - !9226 MPTCP Upstream part 3
  - tools: ynl-gen: add support for exact-len validation
  - tools: ynl: add uns-admin-perm to genetlink legacy
  - tools: ynl-gen: support limit names
  - tools: ynl-gen: support full range of min/max checks for integer values
  - tools: ynl-gen: track attribute use
  - !9217  memcg: attach memcg async reclaim worker to curcpu
  - memcg: attach memcg async reclaim worker to curcpu
  - !9173 MPTCP Upstream part 2
  - inet: implement lockless getsockopt(IP_MULTICAST_IF)
  - inet: lockless IP_PKTOPTIONS implementation
  - inet: implement lockless getsockopt(IP_UNICAST_IF)
  - inet: lockless getsockopt(IP_MTU)
  - inet: lockless getsockopt(IP_OPTIONS)


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-33.0.0.40
changelog:
  - !9779  CVE-2024-39461
  - clk: bcm: rpi: Assign ->num before accessing ->hws
  - !9801 loongarch平台config配置对kdump的支持
  - loongarch: configs: Configure degbuginfo
  - Fix the kdump second kernel boot failure
  - loongarch: Cleanup loongson3_defconfig with make savedefconfig
  - !9811  fix CVE-2024-39481
  - media: mc: Fix graph walk in media_pipeline_start
  - !9810  KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
  - !9821  kdb: Fix buffer overflow during tab-complete
  - kdb: Fix buffer overflow during tab-complete
  - !9788  net: fix wrong return value in bpf_sock_ops_get_uid_gid
  - net: fix wrong return value in bpf_sock_ops_get_uid_gid
  - !9816  mm: mem_reliable: Make counting reliable task usage compatible with folio
  - mm: mem_reliable: Make counting reliable task usage compatible with folio
  - !9807  drm: zynqmp_dpsub: Always register bridge
  - drm: zynqmp_dpsub: Always register bridge
  - !9804  CVE-2024-36478
  - null_blk: Fix return value of nullb_device_power_store()
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9805  md: fix resync softlockup when bitmap size is less than array size
  - md: fix resync softlockup when bitmap size is less than array size
  - !9802  ax25: Fix reference count leak issue of net_device
  - ax25: Fix reference count leak issue of net_device
  - !9770  Add a switch to enable hungtask check for io
  - block: disable BLK_IO_HUNG_TASK_CHECK by default
  - block: add a switch to enable hungtask check for io
  - !9793  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - !9649  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - !9732  CVE-2024-39469
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - !9775  mm/slub: Reduce memory consumption in extreme scenarios
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !9614 v2  wifi: carl9170: add a proper sanity check for endpoints
  - wifi: carl9170: add a proper sanity check for endpoints
  - !9709  cgroup: fix uaf when proc_cpuset_show
  - cgroup: fix uaf when proc_cpuset_show
  - !9748  cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
  - cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
  - !8877  drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - !9730  efi: libstub: only free priv.runtime_map when allocated
  - efi: libstub: only free priv.runtime_map when allocated
  - !9679  cgroup/cpuset: Make cpuset hotplug processing synchronous
  - cgroup/cpuset: Make cpuset hotplug processing synchronous
  - !9757  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9665  CVE-2024-38622
  - drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more sensible
  - drm/msm/dpu: Add callback function pointer check before its call
  - drm/msm/dpu: stop using raw IRQ indices in the kernel output
  - drm/msm/dpu: make the irq table size static
  - drm/msm/dpu: add helper to get IRQ-related data
  - drm/msm/dpu: extract dpu_core_irq_is_valid() helper
  - drm/msm/dpu: remove irq_idx argument from IRQ callbacks
  - !9668  wifi: nl80211: Avoid address calculations via out of bounds array indexing
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing
  - !9715  CVE-2024-38602
  - ax25: Fix reference count leak issues of ax25_dev
  - ax25: Use kernel universal linked list to implement ax25_dev_list
  - !9746 v2  Revert "ACPI: processor: Add support for processors described as container packages"
  - Revert "ACPI: processor: Add support for processors described as container packages"
  - !9736  net/9p: fix uninit-value in p9_client_rpc()
  - net/9p: fix uninit-value in p9_client_rpc()
  - !9596  iomap: fix warning in iomap_write_delalloc_release()
  - iomap: fix warning in iomap_write_delalloc_release()
  - !9703  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9642  CVE-2024-38582
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - !9687  greybus: lights: check return of get_channel_from_mode
  - greybus: lights: check return of get_channel_from_mode
  - !9678  crypto: bcm - Fix pointer arithmetic
  - crypto: bcm - Fix pointer arithmetic
  - !7918 [OLK-6.6]drivers: support Yunsilicon's metaScale/metaVisor series NICs
  - drivers: support Yunsilicon's MS and MV series NICs
  - !9619  r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - !9664  tls: fix missing memory barrier in tls_init
  - tls: fix missing memory barrier in tls_init
  - !9161  xfs: don't use current->journal_info
  - xfs: don't use current->journal_info
  - !9624  CVE-2024-38597
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - !9631  ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture
  - ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture
  - !9632  drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
  - drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
  - !9399 fix CVE-2024-38544 and CVE-2024-37356
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9341  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9562  CVE-2024-38385
  - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
  - !9582 v2  eventfs: Fix a possible null pointer dereference in eventfs_find_events()
  - eventfs: Fix a possible null pointer dereference in eventfs_find_events()
  - !9588  s390/ap: Fix crash in AP internal function modify_bitmap()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9513  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9561 v2  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9578  net/mlx5: Discard command completions in internal error
  - net/mlx5: Discard command completions in internal error
  - !9549  btrfs: fix crash on racing fsync and size-extending write into prealloc
  - btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !9479  xfs: fix unlink vs cluster buffer instantiation race
  - xfs: fix unlink vs cluster buffer instantiation race
  - !9519 MPTCP Upstream part 12
  - mptcp: annotate lockless accesses around read-mostly fields
  - mptcp: annotate lockless access for token
  - mptcp: annotate lockless access for RX path fields
  - mptcp: annotate lockless access for the tx path
  - mptcp: annotate access for msk keys
  - !9557  i2c: acpi: Unbind mux adapters before delete
  - i2c: acpi: Unbind mux adapters before delete
  - !9555  smb: client: fix deadlock in smb2_find_smb_tcon()
  - smb: client: fix deadlock in smb2_find_smb_tcon()
  - !9489  fs/ntfs3: Check 'folio' pointer for NULL
  - fs/ntfs3: Check 'folio' pointer for NULL
  - !9482  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - !9506  usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
  - usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
  - !9528  media: lgdt3306a: Add a check against null-pointer-def
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9551  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - !9478  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9536  clk: bcm: dvp: Assign ->num before accessing ->hws
  - clk: bcm: dvp: Assign ->num before accessing ->hws
  - !9463  fix CVE-2024-38621
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - !9457  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - !9459  bpf: Fix verifier assumptions about socket->sk
  - bpf: Fix verifier assumptions about socket->sk
  - !9522  bonding: fix oops during rmmod
  - bonding: fix oops during rmmod
  - !9502  netrom: fix possible dead-lock in nr_rt_ioctl()
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - !9402  fs/ntfs3: Use variable length array instead of fixed size
  - fs/ntfs3: Use variable length array instead of fixed size
  - !9320  drm/amd/display: Fix potential index out of bounds in color transformation function
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9493  thermal/drivers/qcom/lmh: Check for SCM availability at probe
  - thermal/drivers/qcom/lmh: Check for SCM availability at probe
  - !9398  tracing/probes: fix error check in parse_btf_field()
  - tracing/probes: fix error check in parse_btf_field()
  - !9510  ftrace: Fix possible use-after-free issue in ftrace_location()
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - !9509  cifs: fix pagecache leak when do writepages
  - cifs: fix pagecache leak when do writepages
  - !9436 v2  ASoC: mediatek: Assign dummy when codec not specified for a DAI link
  - ASoC: mediatek: Assign dummy when codec not specified for a DAI link
  - !9486 [OLK-6.6] Fix os crash while enable sriov for rnp
  - RNPVF: NET: Fix os crash while enable sriov for rnp
  - !9371 MPTCP Upstream part 11
  - selftests: net: ip_local_port_range: define IPPROTO_MPTCP
  - selftests: mptcp: join: check CURRESTAB counters
  - selftests/net: add MPTCP coverage for IP_LOCAL_PORT_RANGE
  - mptcp: sockopt: support IP_LOCAL_PORT_RANGE and IP_BIND_ADDRESS_NO_PORT
  - mptcp: rename mptcp_setsockopt_sol_ip_set_transparent()
  - !5258 [OLK-6.6] Support request attestation report from CSV guest
  - driver/virt/coco: Add HYGON CSV Guest dirver.
  - KVM: x86: Support VM_ATTESTATION hypercall
  - !9485 v2  CVE-2024-38610
  - drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
  - virt: acrn: stop using follow_pfn
  - !9380  psi: using cpuacct_cgrp_id under CONFIG_CGROUP_CPUACCT
  - psi: using cpuacct_cgrp_id under CONFIG_CGROUP_CPUACCT
  - !8899  block: fix module reference leakage from bdev_open_by_dev error path
  - block: fix module reference leakage from bdev_open_by_dev error path
  - !9445  blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
  - !9466  io_uring: check for non-NULL file pointer in io_file_can_poll()
  - io_uring: check for non-NULL file pointer in io_file_can_poll()
  - !9389  block: refine the EOF check in blkdev_iomap_begin
  - block: refine the EOF check in blkdev_iomap_begin
  - !9414  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9455  jffs2: prevent xattr node from overflowing the eraseblock
  - jffs2: prevent xattr node from overflowing the eraseblock
  - !9465  CVE-2024-38662
  - Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
  - bpf: Allow delete from sockmap/sockhash only if update is allowed
  - !9410  Fix CVE-2024-31076
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - !9449  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-34.0.0.41
changelog:
  - !10059  nilfs2: fix use-after-free of timer for log writer thread
  - nilfs2: fix use-after-free of timer for log writer thread
  - !10025  9p: add missing locking around taking dentry fid list
  - 9p: add missing locking around taking dentry fid list
  - !9835 fix CVE-2024-39479
  - drm/i915/hwmon: Get rid of devm
  - !9998  ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
  - ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
  - !9997  openrisc: traps: Don't send signals to kernel mode threads
  - openrisc: traps: Don't send signals to kernel mode threads
  - !9956  drm/komeda: check for error-valued pointer
  - drm/komeda: check for error-valued pointer
  - !9914  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9944  f2fs: remove clear SB_INLINECRYPT flag in default_options
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - !9909  sock_map: avoid race between sock_map_close and sk_psock_put
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - !10045  misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
  - misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
  - !10055  media: v4l: async: Fix notifier list entry init
  - media: v4l: async: Fix notifier list entry init
  - !9900  ipv6: fix possible race in __fib6_drop_pcpu_from()
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - !9979  CVE-2024-40972
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - !9988  netpoll: Fix race condition in netpoll_owner_active
  - netpoll: Fix race condition in netpoll_owner_active
  - !9945  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9935  ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
  - ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
  - !9962  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - !9896  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - !9928  ocfs2: fix races between hole punching and AIO+DIO
  - ocfs2: fix races between hole punching and AIO+DIO
  - !9938  fix CVE-2024-40934
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  - !9899  ionic: fix use after netif_napi_del()
  - ionic: fix use after netif_napi_del()
  - !9898  cpufreq: amd-pstate: fix memory leak on CPU EPP exit
  - cpufreq: amd-pstate: fix memory leak on CPU EPP exit
  - !9903  mptcp: ensure snd_una is properly initialized on connect
  - mptcp: ensure snd_una is properly initialized on connect
  - !9878  CVE-2024-39478
  - crypto: starfive - Do not free stack buffer
  - !9888  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !5261 [OLK-6.6]Hygon: Some enhancement and bugfixes for HYGON CSV/CSV2
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy guest
  - KVM: x86: Fix KVM_GET_MSRS stack info leak
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests
  - x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt
  - KVM: x86: Calls is_64_bit_hypercall() instead of is_64_bit_mode() in complete_hypercall_exit()
  - x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from userspace
  - KVM: SVM: Fix the available ASID range for CSV2 guest
  - !9861 MPTCP Upstream part 13
  - selftests: mptcp: lib: catch duplicated subtest entries
  - selftests: mptcp: explicitly trigger the listener diag code-path
  - bpf, btf: Add check_btf_kconfigs helper
  - bpf, btf: Fix return value of register_btf_id_dtor_kfuncs
  - !9876 v3  Fix xfs file creation issue
  - xfs: Avoid races with cnt_btree lastrec updates
  - Revert "xfs: Fix file creation failure"
  - !9877  gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Fix potential glock use-after-free on unmount
  - !9862  ipvlan: Modify the value of ipvlan modes
  - ipvlan: Modify the value of ipvlan modes
  - !5260 [OLK-6.6] Support live migration for CSV/CSV2 guest, and support rebooting CSV/CSV2 guest
  - KVM: SVM: Force flush caches before reboot CSV guest
  - KVM: SVM: Add support for rebooting CSV2 guest
  - KVM: x86: Introduce control_{pre,post}_system_reset ioctl interfaces
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: x86: Restore control registers in __set_sregs() to support CSV2 guest live migration
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
  - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
  - crypto: ccp: Add support to switch to CSV RING_BUFFER mode
  - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
  - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
  - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
  - !9294 Compiler: Add clang's PGO support for kernel.
  - Compiler: Add clang's PGO support for kernel.
  - !9610  rcu: Fix buffer overflow in print_cpu_stall_info()
  - rcu: Fix buffer overflow in print_cpu_stall_info()
  - !9845  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - !9859  block: enable BLK_IO_HUNG_TASK_CHECK by default
  - block: enable BLK_IO_HUNG_TASK_CHECK by default
  - !9857  drm/amdgpu/mes: fix use-after-free issue
  - drm/amdgpu/mes: fix use-after-free issue
  - !9829  fix CVE-2024-38620
  - Bluetooth: fix connection setup in l2cap_connect
  - Bluetooth: HCI: Remove HCI_AMP support
  - Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS
  - Bluetooth: Remove usage of the deprecated ida_simple_xx() API
  - Bluetooth: ISO: Fix BIS cleanup
  - !9838  cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - !9841  ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
  - ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
  - !9834  mmc: davinci: Don't strip remove function when driver is builtin
  - mmc: davinci: Don't strip remove function when driver is builtin


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-35.0.0.43
changelog:
  - !9782  usb-storage: alauda: Check whether the media is initialized
  - usb-storage: alauda: Check whether the media is initialized
  - !10294 [OLK-6.6] drivers: Fix compile warning "argument used uninitialized"
  - drivers: Fix compile warning "argument used uninitialized"
  - !10257  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - !10287  CVE-2024-36979
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
  - net: bridge: mst: fix vlan use-after-free
  - !10018  ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
  - ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
  - !9985  btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
  - btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
  - !10260 [RoCE]从社区回合patch到openEuler（OLK-6.6）
  - RDMA/hns: Fix mbx timing out before CMD execution is completed
  - RDMA/hns: Fix insufficient extend DB for VFs.
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge
  - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR
  - RDMA/hns: Fix unmatch exception handling when init eq table fails
  - RDMA/hns: Check atomic wr length
  - !10248  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !9243  Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - !10160  fix CVE-2024-40915
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - !10264  mm: filemap: optimize semantic when thp_exec_enabled is set to 3
  - mm: filemap: optimize semantic when thp_exec_enabled is set to 3
  - !5264 [OLK-6.6]HYGON: Support CSV Reuse ASID feature on Hygon CPUs
  - KVM: SVM: Add support for different CSV guests to reuse the same ASID
  - !10231  fix CVE-2024-41007
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - !10233  fpga: bridge: add owner module and take its refcount
  - fpga: bridge: add owner module and take its refcount
  - !10237  ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
  - ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
  - !9915  powerpc/pseries: Enforce hcall result buffer validity and size
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - !10148  fs/9p: fix uninitialized values during inode evict
  - fs/9p: fix uninitialized values during inode evict
  - !10056  io_uring/rsrc: don't lock while !TASK_RUNNING
  - io_uring/rsrc: don't lock while !TASK_RUNNING
  - !10226  cxl/region: Fix memregion leaks in devm_cxl_add_region()
  - cxl/region: Fix memregion leaks in devm_cxl_add_region()
  - !10177  ima: Fix use-after-free on a dentry's dname.name
  - ima: Fix use-after-free on a dentry's dname.name
  - !5262 [OLK-6.6]HYGON: Support Hygon DCU passthrough to VMs
  - x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default
  - drm/hygon: Add support to passthrough Hygon DCU to virtual machine
  - !10220  bpf: Fix overrunning reservations in ringbuf
  - bpf: Fix overrunning reservations in ringbuf
  - !10219  CVE-2024-35931
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - !10167  CVE-2024-36022
  - drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
  - drm/amdgpu: move the drm client creation behind drm device registration
  - drm/amdkfd: init drm_client with funcs hook
  - drm/amdkfd: Export DMABufs from KFD using GEM handles
  - !9598  fpga: manager: add owner module and take its refcount
  - fpga: manager: add owner module and take its refcount
  - !10139 [sync] PR-10095:  CVE-2024-40968
  - MIPS: Octeon: Add PCIe link status check
  - !10044  btrfs: fix CVE-2024-39496
  - btrfs: zoned: fix use-after-free due to race with dev replace
  - btrfs: zoned: factor out DUP bg handling from btrfs_load_block_group_zone_info
  - btrfs: zoned: factor out single bg handling from btrfs_load_block_group_zone_info
  - btrfs: zoned: factor out per-zone logic from btrfs_load_block_group_zone_info
  - btrfs: zoned: introduce a zone_info struct in btrfs_load_block_group_zone_info
  - !10114 v2  ecryptfs: Fix buffer size for tag 66 packet
  - ecryptfs: Fix buffer size for tag 66 packet
  - !10133  ALSA: timer: Set lower bound of start tick time
  - ALSA: timer: Set lower bound of start tick time
  - !10115  efi/unaccepted: touch soft lockup during memory accept
  - efi/unaccepted: touch soft lockup during memory accept
  - !10131  kunit/fortify: Fix mismatched kvalloc()/vfree() usage
  - kunit/fortify: Fix mismatched kvalloc()/vfree() usage
  - !10132  wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
  - wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
  - !10188  Part of "mm: mapcount for large folios + page_mapcount() cleanups"
  - mm/rmap: add fast-path for small folios when adding/removing/duplicating
  - mm/rmap: always inline anon/file rmap duplication of a single PTE
  - mm: allow for detecting underflows with page_mapcount() again
  - !10001  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !10176  f2fs: compress: don't allow unaligned truncation on released compress inode
  - f2fs: compress: don't allow unaligned truncation on released compress inode
  - !10106  platform/x86: x86-android-tablets: Unregister devices in reverse order
  - platform/x86: x86-android-tablets: Unregister devices in reverse order
  - !10109  tracing: Build event generation tests only as modules
  - tracing: Build event generation tests only as modules
  - !10166  drop_monitor: replace spin_lock by raw_spin_lock
  - drop_monitor: replace spin_lock by raw_spin_lock
  - !10161  RDMA/mlx5: Add check for srq max_sge attribute
  - RDMA/mlx5: Add check for srq max_sge attribute
  - !10111  drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  - !10155  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !10149  mips: bmips: BCM6358: make sure CBR is correctly set
  - mips: bmips: BCM6358: make sure CBR is correctly set
  - !10103 v2  fpga: region: add owner module and take its refcount
  - fpga: region: add owner module and take its refcount
  - !10097 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - !10021  drm/exynos/vidi: fix memory leak in .get_modes()
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - !10127  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - !10117  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10116  wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
  - !10017  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10051  tipc: force a dst refcount before doing decryption
  - tipc: force a dst refcount before doing decryption
  - !10102  vmxnet3: disable rx data ring on dma allocation failure
  - vmxnet3: disable rx data ring on dma allocation failure
  - !10093  drm/arm/malidp: fix a possible null pointer dereference
  - drm/arm/malidp: fix a possible null pointer dereference
  - !9989  io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - !10083  CVE-2024-40955
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
  - ext4: add positive int attr pointer to avoid sysfs variables overflow
  - ext4: add new attr pointer attr_mb_order
  - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - ext4: refactor out ext4_generic_attr_show()
  - ext4: refactor out ext4_generic_attr_store()
  - ext4: avoid overflow when setting values via sysfs
  - !10069  ALSA: Fix deadlocks with kctl removals at disconnection
  - ALSA: Fix deadlocks with kctl removals at disconnection
  - !10074  PCI: of_property: Return error for int_map allocation failure
  - PCI: of_property: Return error for int_map allocation failure
  - !10087  fix CVE-2024-40995
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - !10064  net/mlx5: Always stop health timer during driver removal
  - net/mlx5: Always stop health timer during driver removal
  - !9240 v2  cachefiles: introduce failover mechanism
  - cachefiles: make on-demand read killable
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - cachefiles: never get a new anonymous fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: add consistency check for copen/cread
  - cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove requests from xarray during flushing requests
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - cachefiles: add restore command to recover inflight ondemand read requests
  - cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - cachefiles: resend an open request if the read request's object is closed
  - cachefiles: extract ondemand info field from cachefiles_object
  - cachefiles: introduce object ondemand state
  - !9933  nvdimm: Backport some bugfixs
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: fix leak on dax_add_host() failure
  - !10038  media: v4l: async: Properly re-initialise notifier entry in unregister
  - media: v4l: async: Properly re-initialise notifier entry in unregister
  - !9970  CVE-2024-39503
  - netfilter: ipset: Fix suspicious rcu_dereference_protected()
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
  - netfilter: ipset: Add list flush to cancel_gc
  - !10011  xfs: fix mount hung while sb recover fail
  - xfs: fix mount hung while sb recover fail
  - !10050  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - !10006  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !9959  parisc: Try to fix random segmentation faults in package builds
  - parisc: Try to fix random segmentation faults in package builds
  - !10028  ipv6: prevent possible NULL dereference in rt6_probe()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - !10005  seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-37.0.0.44
changelog:
  - !10793  perf util: Add a function for replacing characters in a string
  - perf util: Add a function for replacing characters in a string
  - !10635  nvme: avoid double free special payload
  - nvme: avoid double free special payload
  - !10757  CVE-2024-41045
  - bpf: Defer work in bpf_timer_cancel_and_free
  - bpf: replace bpf_timer_cancel_and_free with a generic helper
  - bpf: replace bpf_timer_set_callback with a generic helper
  - !10729  Backport vmalloc 2 bugfix
  - mm: vmalloc: fix lockdep warning
  - mm/vmalloc: eliminated the lock contention from twice to once
  - !10746  irqchip/mbigen: Fix mbigen node address layout
  - irqchip/mbigen: Fix mbigen node address layout
  - !10533  backport mainline patchs
  - cpufreq: Allow drivers to advertise boost enabled
  - irqdomain: Fixed unbalanced fwnode get and put
  - !10518  xfs: add bounds checking to xlog_recover_process_data
  - xfs: add bounds checking to xlog_recover_process_data
  - !10622  leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - !10677  gve: Account for stopped queues when reading NIC stats
  - gve: Account for stopped queues when reading NIC stats
  - !10639  s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - !10653  virtcca cvm feature patches
  - gicv3: add lpi support for cvm guest
  - config: modify arm64 defconfig for virtcca cvm feature
  - mm: enable swiotlb alloc for cvm share mem
  - pmu: enable pmu phys irq inject for cvm
  - kvm: add virtcca cvm host feature
  - !10658  CVE-2024-35860
  - bpf: Fix a potential use-after-free in bpf_link_free()
  - Fix kabi breakage in struct bpf_link and bpf_link_ops
  - bpf: support deferring bpf_link dealloc to after RCU grace period
  - !10649  xfs: don't walk off the end of a directory data block
  - xfs: don't walk off the end of a directory data block
  - !10556  smart_grid: introducing rebuild_affinity_domain
  - smart_grid: introducing rebuild_affinity_domain
  - !10631  sched/deadline: Fix task_struct reference leak
  - sched/deadline: Fix task_struct reference leak
  - !10319  block: propagate partition scanning errors to the BLKRRPART ioctl
  - block: propagate partition scanning errors to the BLKRRPART ioctl
  - !10500  fix CVE-2024-42155
  - s390/pkey: Wipe copies of protected- and secure-keys
  - !10657 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.40-6.6.44 LTS Patches
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
  - nvme-pci: add missing condition check for existence of mapped data
  - io_uring: fix io_match_task must_hold
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
  - s390/cpum_cf: Fix endless loop in CF_DIAG event stop
  - s390/pci: Allow allocation of more than 1 MSI interrupt
  - s390/pci: Refactor arch_setup_msi_irqs()
  - ceph: fix incorrect kmalloc size of pagevec mempool
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
  - spi: spidev: add correct compatible for Rohm BH2228FV
  - ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
  - nvme-pci: Fix the instructions for disabling power management
  - spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
  - spi: microchip-core: fix init function not setting the master and motorola modes
  - spi: microchip-core: switch to use modern name
  - spi: microchip-core: only disable SPI controller when register value change requires it
  - spi: microchip-core: defer asserting chip select until just before write to TX FIFO
  - spi: microchip-core: fix the issues in the isr
  - ASoC: SOF: imx8m: Fix DSP control regmap retrieval
  - auxdisplay: ht16k33: Drop reference after LED registration
  - lirc: rc_dev_get_from_fd(): fix file leak
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  - apparmor: Fix null pointer deref when receiving skb during sock creation
  - mISDN: Fix a use after free in hfcmulti_tx()
  - bpf: Fix a segment issue when downgrading gso_size
  - net: nexthop: Initialize all fields in dumped nexthops
  - net: stmmac: Correct byte order of perfect_match
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts
  - ice: Fix recipe read procedure
  - net: bonding: correctly annotate RCU in bond_should_notify_peers()
  - ipv4: Fix incorrect source address in Record Route option
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
  - tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
  - bpf, events: Use prog to emit ksymbol event for main program
  - dma: fix call order in dmam_free_coherent
  - af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
  - libbpf: Fix no-args func prototype BTF dumping syntax
  - selftests/bpf: fexit_sleep: Fix stack allocation for arm64
  - kbuild: avoid build error when single DTB is turned into composite DTB
  - f2fs: fix to update user block counts in block_operations()
  - watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
  - watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
  - f2fs: fix start segno of large section
  - um: time-travel: fix signal blocking race/hang
  - um: time-travel: fix time-travel-start option
  - phy: zynqmp: Enable reference clock correctly
  - phy: cadence-torrent: Check return value on register read
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
  - jfs: Fix array-index-out-of-bounds in diFree
  - kdb: Use the passed prompt in kdb_position_cursor()
  - kdb: address -Wformat-security warnings
  - f2fs: fix to truncate preallocated blocks in f2fs_file_open()
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - PCI: Introduce cleanup helpers for device reference counts and locks
  - wifi: mac80211: track capability/opmode NSS separately
  - mm/mglru: fix ineffective protection calculation
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - minmax: scsi: fix mis-use of 'clamp()' in sr.c
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
  - video: logo: Drop full path of the input filename in generated file
  - lib/build_OID_registry: don't mention the full path of the script in output
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
  - drm/panfrost: Mark simple_ondemand governor as softdep
  - drm/etnaviv: don't block scheduler when GPU is still active
  - MIPS: Loongson64: Test register availability before use
  - MIPS: Loongson64: reset: Prioritise firmware service
  - MIPS: Loongson64: Remove memory node for builtin-dtb
  - MIPS: Loongson64: env: Hook up Loongsson-2K
  - MIPS: dts: loongson: Fix GMAC phy node
  - MIPS: ip30: ip30-console: Add missing include
  - MIPS: dts: loongson: Add ISA node
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings
  - dm-verity: fix dm_is_verity_target() when dm-verity is builtin
  - selftests/sigaltstack: Fix ppc64 GCC build
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - rtc: abx80x: Fix return value of nvmem callback on read
  - rtc: isl1208: Fix return value of nvmem callbacks
  - drm/i915/dp: Don't switch the LTTPR mode on an active link
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link
  - drm/amd/amdgpu: Fix uninitialized variable warnings
  - drm/amdgpu: reset vm state machine after gpu reset(vram lost)
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
  - drm/udl: Remove DRM_CONNECTOR_POLL_HPD
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
  - perf/x86/intel/pt: Fix a topa_entry base address calculation
  - perf/x86/intel/pt: Fix topa_entry base length
  - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
  - perf stat: Fix the hard-coded metrics calculation on the hybrid
  - perf: Fix event leak upon exit
  - scsi: qla2xxx: validate nvme_local_port correctly
  - scsi: qla2xxx: Complete command early within lock
  - scsi: qla2xxx: Fix flash read failure
  - scsi: qla2xxx: Reduce fabric scan duplicate code
  - scsi: qla2xxx: Use QP lock to search for bsg
  - scsi: qla2xxx: Fix for possible memory corruption
  - scsi: qla2xxx: Unable to act on RSCN for port online
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state
  - rtc: cmos: Fix return value of nvmem callbacks
  - mm/numa_balancing: teach mpol_to_str about the balancing mode
  - irqchip/imx-irqsteer: Handle runtime power management correctly
  - irqdomain: Fixed unbalanced fwnode get and put
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - devres: Fix devm_krealloc() wasting memory
  - ice: Add a per-VF limit on number of FDIR filters
  - gve: Fix an edge case for TSO skb validity check
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
  - kbuild: Fix '-S -c' in x86 stack protector scripts
  - decompress_bunzip2: fix rare decompression failure
  - mm: fix old/young bit handling in the faulting path
  - block: fix deadlock between sd_remove & sd_release
  - ubi: eba: properly rollback inside self_check_eba
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
  - f2fs: use meta inode for GC of COW file
  - f2fs: use meta inode for GC of atomic file
  - f2fs: fix return value of f2fs_convert_inline_inode()
  - f2fs: fix to don't dirty inode for readonly filesystem
  - f2fs: fix to force buffered IO on inline_data inode
  - ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
  - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - efi/libstub: Zero initialize heap allocated struct screen_info
  - hostfs: fix dev_t handling
  - dev/parport: fix the array out-of-bounds risk
  - binder: fix hang of unregistered readers
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
  - PCI: dw-rockchip: Fix initial PERST# GPIO value
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
  - parisc: Fix warning at drivers/pci/msi/msi.h:121
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos
  - tools/memory-model: Fix bug in lock.cat
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  - ALSA: usb-audio: Move HD Webcam quirk to the right place
  - ALSA: usb-audio: Fix microphone sound on HD webcam.
  - ALSA: ump: Force 1 Group for MIDI1 FBs
  - ALSA: ump: Don't update FB name for static blocks
  - KVM: nVMX: Request immediate exit iff pending nested event needs injection
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
  - media: ivsc: csi: don't count privacy on as error
  - media: uvcvideo: Fix integer overflow calculating timestamp
  - jbd2: avoid infinite transaction commit loop
  - jbd2: precompute number of transaction descriptor blocks
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal
  - media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
  - media: ivsc: csi: add separate lock for v4l2 control handler
  - leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
  - md/md-bitmap: fix writing non bitmap pages
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos
  - drivers: soc: xilinx: check return status of get_api_version()
  - wifi: rtw88: usb: Fix disconnection after beacon loss
  - wifi: mwifiex: Fix interface type change
  - selftests/landlock: Add cred_transfer test
  - trace/pid_list: Change gfp flags in pid_list_fill_irq()
  - io_uring: tighten task exit cancellations
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - m68k: amiga: Turn off Warp1260 interrupts during boot
  - udf: Avoid using corrupted block bitmap buffer
  - task_work: Introduce task_work_cancel() again
  - task_work: s/task_work_cancel()/task_work_cancel_func()/
  - cifs: mount with "unix" mount option for SMB1 incorrectly handled
  - cifs: fix reconnect with SMB1 UNIX Extensions
  - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path
  - apparmor: use kvfree_sensitive to free data->data
  - drm/amd/display: Check for NULL pointer
  - scsi: qla2xxx: Fix optrom version displayed in FDMI
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - io_uring/io-wq: limit retrying worker initialisation
  - ext2: Verify bitmap and itable block numbers before using them
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error
  - ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
  - media: venus: fix use after free in vdec_close
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
  - ata: libata-scsi: Fix offsets for the fixed format sense data
  - fuse: verify {g,u}id mount options correctly
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
  - NFSD: Support write delegations in LAYOUTGET
  - ipv6: take care of scope when choosing the src addr
  - ipv4: fix source address selection with route leak
  - kernel: rerun task_work while freezing in get_signal()
  - btrfs: fix extent map use-after-free when adding pages to compressed bio
  - af_packet: Handle outgoing VLAN packets without hardware offloading
  - net: netconsole: Disable target before netpoll cleanup
  - tick/broadcast: Make takeover of broadcast hrtimer reliable
  - dt-bindings: thermal: correct thermal zone node name limit
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - x86/efistub: Revert to heap allocated boot_params for PE entrypoint
  - x86/efistub: Avoid returning EFI_SUCCESS on error
  - mm/mglru: fix overshooting shrinker memory
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
  - mm/mglru: fix div-by-zero in vmpressure_calc_level()
  - mm/hugetlb: fix possible recursive locking detected warning
  - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
  - landlock: Don't lose track of restrictions on cred_transfer
  - LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
  - sbitmap: use READ_ONCE to access map->word
  - s390/dasd: fix error checks in dasd_copy_pair_store()
  - powerpc/8xx: fix size given to set_huge_pte_at()
  - fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
  - fs/ntfs3: Missed error return
  - fs/ntfs3: Fix the format of the "nocase" mount option
  - rtc: interface: Add RTC offset to alarm after fix-up
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
  - fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped THPs
  - fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
  - fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - pinctrl: renesas: r8a779g0: Fix TPU suffixes
  - pinctrl: renesas: r8a779g0: Fix TCLK suffixes
  - pinctrl: renesas: r8a779g0: FIX PWM suffixes
  - pinctrl: renesas: r8a779g0: Fix IRQ suffixes
  - pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
  - pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
  - pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
  - pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR
  - fs/ntfs3: Drop stray '' (backslash) in formatting string
  - fs/ntfs3: Correct undo if ntfs_create_inode failed
  - fs/ntfs3: Replace inode_trylock with inode_lock
  - pinctrl: freescale: mxs: Fix refcount of child
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
  - pinctrl: rockchip: update rk3308 iomux routes
  - fs/ntfs3: Add missing .dirty_folio in address_space_operations
  - fs/ntfs3: Fix getting file type
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
  - fs/ntfs3: Deny getting attr data block in compressed frame
  - fs/ntfs3: Fix transform resident to nonresident for compressed files
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
  - ipv4: Fix incorrect TOS in fibmatch route get reply
  - ipv4: Fix incorrect TOS in route get reply
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - gve: Fix XDP TX completion handling when counters overflow
  - ipvs: properly dereference pe in ip_vs_add_service
  - netfilter: nf_set_pipapo: fix initial map fill
  - netfilter: nft_set_pipapo: constify lookup fn args where possible
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - bnxt_re: Fix imm_data endianness
  - RDMA: Fix netdev tracker in ib_device_set_netdev
  - RDMA/core: Remove NULL check before dev_{put, hold}
  - iommu/vt-d: Fix identity map bounds in si_domain_init()
  - macintosh/therm_windtunnel: fix module unload.
  - powerpc/xmon: Fix disassembly CPU feature checks
  - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
  - PCI: qcom-ep: Disable resources unconditionally during PERST# assert
  - MIPS: Octeron: remove source file executable bit
  - clk: en7523: fix rate divider for slic and spi clocks
  - clk: qcom: Park shared RCGs upon registration
  - clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
  - crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
  - nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
  - net: missing check virtio
  - vhost/vsock: always initialize seqpacket_allow
  - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
  - PCI: endpoint: Clean up error handling in vpci_scan_bus()
  - ASoC: amd: Adjust error handling in case of absent codec device
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure
  - RDMA/device: Return error earlier if port in not valid
  - mtd: make mtd_test.c a separate module
  - ASoC: max98088: Check for clk_prepare_enable() error
  - powerpc/prom: Add CPU info to hardware description string later
  - hwrng: core - Fix wrong quality calculation at hw rng registration
  - scsi: lpfc: Fix a possible null pointer dereference
  - ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe()
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
  - RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c
  - RDMA/mlx4: Fix truncated output warning in mad.c
  - Input: qt1050 - handle CHIP_ID reading error
  - interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
  - clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
  - clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
  - clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
  - clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
  - clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
  - RDMA/cache: Release GID table even if leak is detected
  - usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and remove
  - ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
  - ASoc: tas2781: Enable RCA-based playback without DSP firmware download
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails
  - KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
  - KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  - iio: frequency: adrf6780: rm clk provider include
  - clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
  - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
  - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - PCI: keystone: Don't enable BAR 0 for AM654x
  - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
  - PCI: Fix resource double counting on remove & rescan
  - iio: Fix the sorting functionality in iio_gts_build_avail_time_table
  - SUNRPC: Fixup gss_status tracepoint error output
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init
  - leds: flash: leds-qcom-flash: Test the correct variable in init
  - ext4: avoid writing unitialized memory to disk in EA inodes
  - ext4: don't track ranges in fast_commit if inode has inlined data
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
  - xprtrdma: Fix rpcrdma_reqs_reset()
  - mfd: omap-usb-tll: Use struct_size to allocate tll
  - mfd: rsmu: Split core code into separate module
  - perf intel-pt: Fix exclude_guest setting
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size
  - media: venus: flush all buffers in output plane streamoff
  - drm/mediatek/dp: Fix spurious kfree()
  - drm/mediatek/dp: switch to ->edid_read callback
  - ext4: fix infinite loop when replaying fast_commit
  - drm/mediatek: Remove less-than-zero comparison of an unsigned value
  - Revert "leds: led-core: Fix refcount leak in of_led_get()"
  - drm/qxl: Add check for drm_cvt_mode
  - drm/etnaviv: fix DMA direction handling for cached RW buffers
  - perf report: Fix condition in sort__sym_cmp()
  - perf pmus: Fixes always false when compare duplicates aliases
  - perf test: Make test_arm_callgraph_fp.sh more robust
  - drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
  - drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - media: imx-jpeg: Drop initial source change event if capture has been setup
  - drm/mediatek: Add OVL compatible name for MT8195
  - drm/mediatek: Turn off the layers with zero width or height
  - drm/mediatek: Fix destination alpha error in OVL
  - drm/mediatek: Fix XRGB setting error in Mixer
  - drm/mediatek: Fix XRGB setting error in OVL
  - drm/mediatek: Use 8-bit alpha in ETHDR
  - drm/mediatek: Add missing plane settings when async update
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance
  - media: renesas: vsp1: Fix _irqsave and _irq mix
  - media: rcar-csi2: Cleanup subdevice in remove()
  - media: rcar-csi2: Disable runtime_pm in probe error
  - media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
  - drm: zynqmp_kms: Fix AUX bus not getting unregistered
  - drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
  - media: uvcvideo: Override default flags
  - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
  - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
  - media: uvcvideo: Disable autosuspend for Insta360 Link
  - media: i2c: imx219: fix msr access command sequence
  - saa7134: Unchecked i2c_transfer function result fixed
  - ipmi: ssif_bmc: prevent integer overflow on 32bit systems
  - x86/shstk: Make return uprobe work with shadow stack
  - media: mediatek: vcodec: Handle invalid decoder vsi
  - s390/uv: Don't call folio_wait_writeback() without a folio reference
  - s390/mm: Convert gmap_make_secure to use a folio
  - s390/mm: Convert make_page_secure to use a folio
  - media: v4l: async: Fix NULL pointer dereference in adding ancillary links
  - media: i2c: Fix imx412 exposure control
  - media: imon: Fix race getting ictx->lock
  - media: pci: ivtv: Add check for DMA map result
  - drm/bridge: it6505: fix hibernate to resume no display issue
  - drm/bridge: Fixed a DP link training bug
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
  - drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better
  - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
  - drm/amdgpu: Fix memory range calculation
  - drm/amd/pm: Fix aldebaran pcie speed reporting
  - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
  - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
  - drm/amdkfd: Fix CU Masking for GFX 9.4.3
  - drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline
  - drm/rockchip: vop2: Fix the port mux of VP2
  - net: bridge: mst: Check vlan state for egress decision
  - xdp: fix invalid wait context of page_pool_destroy()
  - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
  - Bluetooth: btintel: Refactor btintel_set_ppag()
  - Bluetooth: hci_bcm4377: Use correct unit for timeouts
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - bpf: annotate BTF show functions with __printf
  - selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of loops
  - selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
  - selftests/resctrl: Move run_benchmark() to a more fitting file
  - selftests/bpf: Close obj in error path in xdp_adjust_tail
  - selftests/bpf: Null checks for links in bpf_tcp_ca
  - selftests/bpf: Close fd in error path in drop_on_reuseport
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers
  - wifi: virt_wifi: don't use strlen() in const context
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - xfrm: call xfrm_dev_policy_delete when kill policy
  - xfrm: fix netdev reference count imbalance
  - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
  - perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
  - perf: Fix default aux_watermark calculation
  - perf: Prevent passing zero nr_pages to rb_alloc_aux()
  - perf: Fix perf_aux_size() for greater-than 32-bit size
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
  - bpftool: Mount bpffs when pinmaps path not under the bpffs
  - wifi: rtl8xxxu: 8188f: Limit TX power index
  - wifi: rtw89: 8852b: fix definition of KIP register number
  - netfilter: nf_tables: rise cap on SELinux secmark context
  - ipvs: Avoid unnecessary calls to skb_is_gso_sctp
  - libbpf: Checking the btf_type kind when fixing variable offsets
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
  - net: fec: Refactor: #define magic constants
  - udf: Fix bogus checksum computation in udf_rename()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
  - jump_label: Fix concurrency issues in static_key_slow_dec()
  - perf/x86: Serialize set_attr_rdpmc()
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - lib: objagg: Fix general protection fault
  - udf: Fix lock ordering in udf_evict_inode()
  - selftests/bpf: Check length of recv in test_sockmap
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
  - tcp: fix races in tcp_v[46]_err()
  - tcp: fix race in tcp_write_err()
  - tcp: add tcp_done_with_error() helper
  - wifi: ath12k: fix wrong definition of CE ring's base address
  - wifi: ath11k: fix wrong definition of CE ring's base address
  - wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights
  - wifi: ath12k: fix firmware crash during reo reinject
  - wifi: ath12k: fix invalid memory access while processing fragmented packets
  - wifi: ath12k: change DMA direction while mapping reinjected packets
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
  - selftests/bpf: Fix prog numbers in test_sockmap
  - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
  - wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
  - wifi: ath12k: Correct 6 GHz frequency value in rx status
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
  - firmware: turris-mox-rwtm: Initialize completion before mailbox
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters
  - vmlinux.lds.h: catch .bss..L* sections into BSS")
  - ARM: spitz: fix GPIO assignment for backlight
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg()
  - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems
  - arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
  - arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
  - arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
  - arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
  - x86/xen: Convert comma to semicolon
  - arm64: dts: imx8mp: Fix pgc vpu locations
  - arm64: dts: imx8mp: add HDMI power-domains
  - arm64: dts: imx8mp: Fix pgc_mlmix location
  - arm64: dts: imx8mp: Add NPU Node
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
  - arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
  - arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
  - arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
  - arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
  - arm64: dts: amlogic: setup hdmi system clock
  - arm64: dts: amlogic: add power domain to hdmitx
  - arm64: dts: amlogic: gx: correct hdmi clocks
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
  - arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate` mismatch
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
  - arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for pp3300_mipibrdg
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
  - arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
  - arm64: dts: amlogic: sm1: fix spdif compatibles
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328
  - soc: qcom: pdr: fix parsing of domains lists
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
  - arm64: dts: qcom: qdu1000: Add secure qfprom node
  - arm64: dts: qcom: qdu1000-idp: drop unused LLCC multi-ch-bit-off
  - arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
  - arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
  - arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable
  - OPP: ti: Fix ti_opp_supply_probe wrong return values
  - cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
  - arm64: dts: qcom: qrb4210-rb2: make L9A always-on
  - ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
  - ARM: dts: sunxi: remove duplicated entries in makefile
  - soc: xilinx: rename cpu_number1 to dummy_cpu_number
  - arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
  - arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
  - arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
  - arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
  - arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
  - soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
  - arm64: dts: qcom: msm8998: enable adreno_smmu by default
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
  - arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
  - arm64: dts: qcom: sm8450: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8350: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings
  - arm64: dts: qcom: sm6350: add power-domain to UFS PHY
  - arm64: dts: qcom: sm6115: add power-domain to UFS PHY
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY
  - arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
  - arm64: dts: qcom: sc8180x: switch UFS QMP PHY to new style of bindings
  - arm64: dts: qcom: sc8180x: Correct PCIe slave ports
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms
  - hwmon: (max6697) Fix underflow when writing limit attributes
  - pwm: atmel-tcb: Fix race condition and convert to guards
  - drm/meson: fix canvas release in bind function
  - nvmet-auth: fix nvmet_auth hash error handling
  - pwm: stm32: Always do lazy disabling
  - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
  - block/mq-deadline: Fix the tag reservation code
  - block: Call .limit_depth() after .hctx has been set
  - hwmon: (adt7475) Fix default duty on fan is disabled
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
  - x86/pci/xen: Fix PCIBIOS_* return code handling
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
  - x86/of: Return consistent error type from x86_of_pci_irq_enable()
  - hfsplus: fix to avoid false alarm of circular locking
  - x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
  - block: initialize integrity buffer to zero before writing it to media
  - ubd: untagle discard vs write zeroes not support handling
  - ubd: refactor the interrupt handler
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version
  - md: fix deadlock between mddev_suspend and flush bio
  - rcu/tasks: Fix stale task snaphot for Tasks Trace
  - EDAC, i10nm: make skx_common.o a separate module
  - spi: atmel-quadspi: Add missing check for clk_prepare
  - spi: spi-microchip-core: Fix the number of chip selects supported
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
  - ALSA: seq: ump: Skip useless ports for static blocks
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
  - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
  - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
  - jfs: don't walk off the end of ealist
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume()
  - wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL
  - wifi: mac80211: disable softirqs for queued frame handling
  - wifi: cfg80211: wext: set ssids=NULL for passive scans
  - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo
  - mm: page_ref: remove folio_try_get_rcu()
  - ARM: 9324/1: fix get_user() broken with veneer
  - cifs: fix noisy message on copy_file_range
  - ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE
  - spi: mux: set ctlr->bits_per_word_mask
  - selftests/bpf: Extend tcx tests to cover late tcx_entry release
  - hfsplus: fix uninit-value in copy_name
  - selftests/vDSO: fix clang build errors and warnings
  - selftest/timerns: fix clang build failures for abs() calls
  - ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES
  - ksmbd: return FILE_DEVICE_DISK instead of super magic
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
  - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus
  - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK
  - fs: better handle deep ancestor chains in is_subdir()
  - drm/radeon: check bo_va->bo is non-NULL before using it
  - drm/amd/display: Fix refresh rate range for some panel
  - drm/amd/display: Account for cursor prefetch BW in DML1 mode support
  - drm/amd/display: Add refresh rate range check
  - erofs: ensure m_llen is reset to 0 if metadata is invalid
  - Bluetooth: btnxpuart: Enable Power Save feature on startup
  - tee: optee: ffa: Fix missing-field-initializers warning
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
  - net: usb: qmi_wwan: add Telit FN912 compositions
  - ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
  - ALSA: PCM: Allow resume only for suspended streams
  - ibmvnic: Add tx check to prevent skb leak
  - btrfs: qgroup: fix quota root leak after quota disable failure
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
  - platform/x86: lg-laptop: Change ACPI device id
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button
  - platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources
  - s390/sclp: Fix sclp_init() cleanup on failure
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
  - can: kvaser_usb: fix return value for hif_usb_send_regout
  - Input: ads7846 - use spi_device_id table
  - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA.
  - ASoC: rt722-sdca-sdw: add debounce time for type detection
  - ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback
  - ASoC: ti: omap-hdmi: Fix too long driver name
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config
  - ALSA: dmaengine: Synchronize dma channel after drop()
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium
  - Input: xpad - add support for ASUS ROG RAIKIRI PRO
  - ASoC: rt722-sdca-sdw: add silence detection register as volatile
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table
  - Input: elantech - fix touchpad state on resume for Lenovo N24
  - mips: fix compat_sys_lseek syscall
  - ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE
  - drm/amdgpu: Indicate CU havest info to CP
  - selftests: openvswitch: Set value to nla flags.
  - cpumask: limit FORCE_NR_CPUS to just the UP case
  - spi: Fix OCTAL mode support
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5
  - ALSA: hda: cs35l56: Fix lifecycle of codec pointer
  - nvmet: always initialize cqe.result
  - nvme: avoid double free special payload
  - drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time
  - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN
  - drm/exynos: dp: drop driver owner initialization
  - iomap: Fix iomap_adjust_read_range for plen calculation
  - mei: demote client disconnect warning on suspend to debug
  - fs/file: fix the check in find_next_fd()
  - nfs: don't invalidate dentries on transient errors
  - nfs: Avoid flushing many pages with NFS_FILE_SYNC
  - nfs: propagate readlink errors in nfs_symlink_filler
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116
  - input: Add support for "Do Not Disturb"
  - input: Add event code for accessibility key
  - kconfig: remove wrong expr_trans_bool()
  - kconfig: gconf: give a proper initial state to the Save button
  - ila: block BH in ila_output()
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  - Input: silead - Always support 10 fingers
  - of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw()
  - selftests/futex: pass _GNU_SOURCE without a value to the compiler
  - selftests/openat2: Fix build warnings on ppc64
  - selftests: cachestat: Fix build warnings on ppc64
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
  - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
  - wifi: iwlwifi: mvm: handle BA session teardown in RF-kill
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
  - wifi: iwlwifi: mvm: remove stale STA link data during restart
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
  - wifi: cfg80211: fix 6 GHz scan request building
  - wifi: mac80211: handle tasklet frames before stopping
  - wifi: mac80211: apply mcast rate only if interface is up
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler
  - ACPI: EC: Abort address space access upon error
  - efi/libstub: zboot.lds: Discard .discard sections
  - scsi: qedf: Set qed_slowpath_params to zero before use
  - scsi: qedf: Wait for stag work during unload
  - scsi: qedf: Don't process stag work during unload and recovery
  - scsi: sr: Fix unintentional arithmetic wraparound
  - scsi: core: alua: I/O errors for ALUA state transitions
  - filelock: Remove locks reliably when fcntl/close race is detected
  - i2c: rcar: fix error code in probe()
  - kbuild: Make ld-version.sh more robust against version string changes
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation
  - x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
  - x86/entry: Rename ignore_sysret()
  - i2c: rcar: clear NO_RXDMA flag after resetting
  - i2c: testunit: avoid re-issued work after read message
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets
  - i2c: rcar: introduce Gen4 devices
  - i2c: rcar: reset controller is mandatory for Gen3+
  - i2c: mark HostNotify target address as used
  - i2c: rcar: bring hardware to known state when probing
  - btrfs: tree-checker: add type and sequence check for inline backrefs
  - ext4: avoid ptr null pointer dereference
  - nilfs2: fix kernel bug on rename operation of broken directory
  - selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet
  - mm/shmem: disable PMD-sized page cache if needed
  - misc: fastrpc: Restrict untrusted app to attach to privileged PD
  - misc: fastrpc: Fix ownership reassignment of remote heap
  - misc: fastrpc: Fix memory leak in audio daemon attach operation
  - misc: fastrpc: Copy the complete capability structure to user
  - misc: fastrpc: Avoid updating PD type for capability request
  - misc: fastrpc: Fix DSP capabilities request
  - wireguard: send: annotate intentional data race in checking empty queue
  - wireguard: queueing: annotate intentional data race in cpu round robin
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
  - cpufreq: Allow drivers to advertise boost enabled
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
  - Fix userfaultfd_api to return EINVAL as expected
  - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
  - ALSA: hda/realtek: Enable Mute LED on HP 250 G7
  - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
  - tty: serial: ma35d1: Add a NULL check for of_node
  - platform/x86: toshiba_acpi: Fix array out-of-bounds access
  - nvmem: core: only change name to fram for current attribute
  - nvmem: meson-efuse: Fix return value of nvmem callbacks
  - nvmem: rmem: Fix return value of rmem_read()
  - arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
  - arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer
  - iio: trigger: Fix condition for own trigger
  - ksmbd: discard write access to the directory open
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
  - mm/filemap: skip to create PMD-sized page cache if needed
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask
  - s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
  - xhci: always resume roothubs if xHC was reset during resume
  - hpet: Support 32-bit userspace
  - misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - usb: dwc3: pci: add support for the Intel Panther Lake
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
  - USB: serial: mos7840: fix crash on resume
  - USB: serial: option: add Rolling RW350-GL variants
  - USB: serial: option: add Netprisma LCUK54 series modules
  - USB: serial: option: add support for Foxconn T99W651
  - USB: serial: option: add Fibocom FM350-GL
  - USB: serial: option: add Telit FN912 rmnet compositions
  - USB: serial: option: add Telit generic core-dump composition
  - net: ks8851: Fix potential TX stall after interface reopen
  - net: ks8851: Fix deadlock with the SPI chip variant
  - Revert "sched/fair: Make sure to try to detach at least one movable task"
  - cifs: fix setting SecurityFlags to true
  - octeontx2-af: fix issue with IPv4 match for RSS
  - octeontx2-af: fix issue with IPv6 ext match for RSS
  - octeontx2-af: fix detection of IP layer
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox
  - octeontx2-af: replace cpt slot with lf id on reg write
  - i40e: fix: remove needless retries of NVM update
  - ARM: davinci: Convert comma to semicolon
  - ASoC: SOF: Intel: hda: fix null deref on system suspend entry
  - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
  - firmware: cs_dsp: Validate payload length before processing block
  - firmware: cs_dsp: Return error if block header overflows file
  - arm64: dts: qcom: sc8180x: Fix LLCC reg property again
  - s390: Mark psw in __load_psw_mask() as __unitialized
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - ethtool: netlink: do not return SQI value if link is down
  - net: ethernet: mtk-star-emac: set mac_managed_pm when probing
  - bpf: Fail bpf_timer_cancel when callback is being cancelled
  - bpf: replace bpf_timer_init with a generic helper
  - bpf: make timer data struct more generic
  - bpf: fix order of args in call to bpf_map_kvcalloc
  - i40e: Fix XDP program unloading while removing the driver
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
  - net: phy: microchip: lan87xx: reinit PHY after cable test
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit
  - net: bcmasp: Fix error code in probe()
  - vfs: don't mod negative dentry count when on shrinker list
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
  - dsa: lan9303: Fix mapping between DSA port number and PHY address
  - cachefiles: add missing lock protection when polling
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - cachefiles: wait for ondemand_object_worker to finish when dropping object
  - cachefiles: cancel all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
  - mm: prevent derefencing NULL ptr in pfn_section_valid()
  - Compiler Attributes: Add __uninitialized macro
  - !10610  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10599  ppp: reject claimed-as-LCP but actually malformed packets
  - ppp: reject claimed-as-LCP but actually malformed packets
  - !10539  tun: add missing verification for short frame
  - tun: add missing verification for short frame
  - !10538  tap: add missing verification for short frame
  - tap: add missing verification for short frame
  - !10555  skmsg: Skip zero length skb in sk_msg_recvmsg
  - skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10596  net: ethernet: lantiq_etop: fix double free in detach
  - net: ethernet: lantiq_etop: fix double free in detach
  - !10517  mm/dynamic_pool: two bugfix about THP and migration
  - mm/dynamic_pool: check page_from_dynamic_pool() on migration
  - mm/dynamic_pool: replace task_in_dynamic_pool() with mm_in_dynamic_pool()
  - !10579  Fix CVE-2024-41062
  - Bluetooth: Fix usage of __hci_cmd_sync_status
  - Bluetooth: L2CAP: Fix deadlock
  - bluetooth/l2cap: sync sock recv cb and release
  - !10545  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - !10547  powerpc/eeh: avoid possible crash when edev->pdev changes
  - powerpc/eeh: avoid possible crash when edev->pdev changes
  - !10470  Make cpuset.cpus.exclusive independent of cpuset.cpus
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition
  - cgroup/cpuset: Documentation update for partition
  - !10443 v2  cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
  - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
  - !10351  bpf: Fix null-pointer-deref in resolve_prog_type()
  - selftests/bpf: Test for null-pointer-deref bugfix in resolve_prog_type()
  - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
  - !10401  firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
  - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
  - !10512  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - !10524  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10486  fix CVE-2024-42086
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - !10466  null_blk: fix validation of block size
  - null_blk: fix validation of block size
  - !10480  ALSA: emux: improve patch ioctl data validation
  - ALSA: emux: improve patch ioctl data validation
  - !10385  firmware: cs_dsp: Fix overflow checking of wmfw header
  - firmware: cs_dsp: Fix overflow checking of wmfw header
  - !10403  Fix CVE-2024-41069
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Do not assign fields that are already set
  - ASoC: topology: Fix references to freed memory
  - !10474  jffs2: Fix potential illegal address access in jffs2_free_inode
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - !10463  io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - !10456  NFSv4: Fix memory leak in nfs4_set_security_label
  - NFSv4: Fix memory leak in nfs4_set_security_label
  - !10450  fs/ntfs3: Validate ff offset
  - fs/ntfs3: Validate ff offset
  - !10394  filelock: Fix fcntl/close race recovery compat path
  - filelock: Fix fcntl/close race recovery compat path
  - !10496  PCI/MSI: Fix UAF in msi_capability_init
  - PCI/MSI: Fix UAF in msi_capability_init
  - !10380  filelock: fix potential use-after-free in posix_lock_inode
  - filelock: fix potential use-after-free in posix_lock_inode
  - !10378  fs/ntfs3: Add a check for attr_names and oatbl
  - fs/ntfs3: Add a check for attr_names and oatbl
  - !10491  Bluetooth: ISO: Check socket flag instead of hcon
  - Bluetooth: ISO: Check socket flag instead of hcon
  - !10495  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10442  net/sched: Fix UAF when resolving a clash
  - net/sched: Fix UAF when resolving a clash
  - !10457  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - !10371  iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - !10228  PCI/ROM: Fix PCI ROM header check bug
  - PCI/ROM: Fix PCI ROM header check bug
  - !10416 [sync] PR-10408:  iommu/arm-smmu-v3: Fix the compile warning
  - iommu/arm-smmu-v3: Fix the compile warning
  - !9824 fix CVE-2024-39486
  - drm/drm_file: Fix pid refcounting race
  - !10388  ovl: simplify ovl_parse_param_lowerdir()
  - ovl: ovl_parse_param_lowerdir: Add missed '
  - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir
  - ovl: pass string to ovl_parse_layer()
  - !10507 Backport 6.6.35-40 LTS patches from upstream
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB"
  - nilfs2: fix incorrect inode allocation from reserved inodes
  - null_blk: Do not allow runt zone with zone capacity smaller then zone size
  - drm/amdgpu: silence UBSAN warning
  - ALSA: ump: Set default protocol when not given explicitly
  - spi: cadence: Ensure data lines set to low during dummy-cycle period
  - nfc/nci: Add the inconsistency check between the input data length and count
  - kbuild: fix short log for AS in link-vmlinux.sh
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
  - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
  - regmap-i2c: Subtract reg size from max_write
  - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  - connector: Fix invalid conversion in cn_proc.h
  - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
  - nvme-multipath: find NUMA path only for online numa-node
  - vhost-scsi: Handle vhost_vq_work_queue failures for events
  - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
  - fs/ntfs3: Mark volume as dirty if xattr is broken
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
  - clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
  - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
  - media: dw2102: fix a potential buffer overflow
  - arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - net: stmmac: dwmac-qcom-ethqos: fix error array size
  - mtd: rawnand: rockchip: ensure NVDDR timings are rejected
  - mtd: rawnand: Bypass a couple of sanity checks during NAND identification
  - mtd: rawnand: Fix the nand_read_data_op() early check
  - mtd: rawnand: Ensure ECC configuration is propagated to upper layers
  - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
  - powerpc/pseries: Fix scv instruction crash with kexec
  - clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
  - clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
  - drm: panel-orientation-quirks: Add quirk for Valve Galileo
  - drm/amdgpu/atomfirmware: silence UBSAN warning
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - fsnotify: Do not generate events for O_PATH file descriptors
  - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - Bluetooth: hci_bcm4377: Fix msgid release
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - btrfs: fix adding block group to a reclaim list and the unused list during reclaim
  - mm: avoid overflows in dirty throttling logic
  - mm: optimize the redundant loop of mm_update_owner_next()
  - nilfs2: add missing check for inode numbers on directory entries
  - nilfs2: fix inode number range checks
  - Revert "igc: fix a log entry using uninitialized netdev"
  - platform/x86: toshiba_acpi: Fix quickstart quirk handling
  - cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
  - gpiolib: of: add polarity quirk for TSC2005
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - selftests: make order checking verbose in msg_zerocopy selftest
  - selftests: fix OOM in msg_zerocopy selftest
  - netfilter: nf_tables: unconditionally flush pending work before notifier
  - riscv: kexec: Avoid deadlock in kexec crash path
  - wifi: wilc1000: fix ies_len type in connect path
  - gpio: mmio: do not calculate bgpio_bits via "ngpios"
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
  - net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
  - gpiolib: of: fix lookup quirk for MIPS Lantiq
  - e1000e: Fix S0ix residency on corporate systems
  - KVM: s390: fix LPSWEY handling
  - tcp_metrics: validate source addr length
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
  - Bluetooth: ISO: Check socket flag instead of hcon
  - Bluetooth: Ignore too large handle values in BIG
  - Bluetooth: hci_event: Fix setting of unicast qos interval
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
  - net/mlx5: E-switch, Create ingress ACL when needed
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
  - net: phy: phy_device: Fix PHY LED blinking code comment
  - mac802154: fix time calculation in ieee802154_configure_durations()
  - vhost_task: Handle SIGKILL by flushing work and exiting
  - vhost: Release worker mutex during flushes
  - vhost: Use virtqueue mutex for swapping worker
  - tools/power turbostat: Remember global max_die_id
  - cdrom: rearrange last_media_change check to avoid unintentional overflow
  - btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning
  - s390/pkey: Wipe sensitive data on failure
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - serial: imx: Raise TX trigger level to 8
  - scsi: mpi3mr: Sanitise num_phys
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - igc: fix a log entry using uninitialized netdev
  - selftests/net: fix uninitialized variables
  - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
  - kunit: Fix timeout message
  - orangefs: fix out-of-bounds fsid access
  - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
  - i2c: i801: Annotate apanel_addr as __ro_after_init
  - media: dvb-frontends: tda10048: Fix integer overflow
  - media: s2255: Use refcount_t instead of atomic_t for num_channels
  - media: dvb-frontends: tda18271c2dd: Remove casting during div
  - net: dsa: mv88e6xxx: Correct check for empty list
  - thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
  - wifi: mt76: mt7996: add sanity checks for background radar trigger
  - wifi: mt76: replace skb_put with skb_put_zero
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
  - Input: ff-core - prefer struct_size over open coded arithmetic
  - firmware: dmi: Stop decoding on broken entry
  - sctp: prefer struct_size over open coded arithmetic
  - riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
  - media: dw2102: Don't translate i2c read into write
  - drm/amdgpu: fix the warning about the expression (int)size - len
  - drm/amdgpu: fix uninitialized scalar variable warning
  - drm/amd/display: Fix uninitialized variables in DM
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - drm/amd/display: Check pipe offset before setting vblank
  - drm/amd/display: Check index msg_id before read or write
  - drm/amdgpu: Initialize timestamp for some legacy SOCs
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - drm/amdgpu: Fix uninitialized variable warnings
  - media: mediatek: vcodec: Only free buffer VA that is not NULL
  - crypto: aead,cipher - zeroize key buffer after use
  - RISC-V: KVM: Fix the initial sample period value
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - IB/core: Implement a limit on UMAD receive List
  - media: dvb-usb: dib0700_devices: Add missing release_firmware()
  - media: dvb: as102-fe: Fix as10x_register_addr packing
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - drm/lima: fix shared irq handling on driver remove
  - leds: an30259a: Use devm_mutex_init() for mutex initialization
  - locking/mutex: Introduce devm_mutex_init()
  - Revert "powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data"
  - Revert "powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]"
  - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  - serial: imx: only set receiver level if it is zero
  - cxl/region: Avoid null pointer dereference in region lookup
  - cxl/region: Move cxl_dpa_to_region() work to the region driver
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368
  - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
  - arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
  - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
  - arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on rk3399-gru
  - arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
  - arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
  - pwm: stm32: Refuse too small period requests
  - syscalls: fix sys_fanotify_mark prototype
  - syscalls: fix compat_sys_io_pgetevents_time64 usage
  - ftruncate: pass a signed offset
  - ata: libata-core: Fix double free on error
  - ata: ahci: Clean up sysfs file on error
  - can: mcp251xfd: fix infinite loop when xmit fails
  - batman-adv: Don't accept TT entries for out-of-spec VIDs
  - drm/amdgpu/atomfirmware: fix parsing of vram_info
  - drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - drm/i915/gt: Fix potential UAF by revoke of fence registers
  - drm/amdgpu: avoid using null object of framebuffer
  - drm/fbdev-dma: Only set smem_start is enable per module option
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - drm/drm_file: Fix pid refcounting race
  - hexagon: fix fadvise64_64 calling conventions
  - csky, hexagon: fix broken sys_sync_file_range
  - btrfs: zoned: fix initial free space detection
  - sh: rework sync_file_range ABI
  - kbuild: Install dtb files as 0644 in Makefile.dtbinst
  - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
  - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
  - PCI/MSI: Fix UAF in msi_capability_init
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - net: can: j1939: recover socket queue on CAN bus error during BAM transmission
  - net: can: j1939: Initialize unused data in j1939_send_one()
  - tty: mcf: MCF54418 has 10 UARTS
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665 G11.
  - serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
  - serial: core: introduce uart_port_tx_limited_flags()
  - serial: imx: set receiver level before starting uart
  - serial: 8250_omap: Implementation of Errata i2310
  - Revert "serial: core: only stop transmit when HW fifo is empty"
  - usb: dwc3: core: Workaround for CSR read timeout
  - usb: dwc3: core: Add DWC31 version 2.00a controller
  - usb: ucsi: stm32: fix command completion handling
  - usb: typec: ucsi: glink: fix child node release in probe function
  - usb: gadget: aspeed_udc: fix device address configuration
  - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - usb: musb: da8xx: fix a resource leak in probe()
  - usb: gadget: printer: fix races against disable
  - usb: gadget: printer: SS+ support
  - net: usb: ax88179_178a: improve link status logs
  - iio: chemical: bme680: Fix sensor data read operation
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - iio: chemical: bme680: Fix calibration data variable
  - iio: chemical: bme680: Fix pressure value output
  - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
  - iio: adc: ad7266: Fix variable checking bug
  - ata,scsi: libata-core: Do not leak memory for ata_port struct members
  - ata: libata-core: Fix null pointer dereference on error
  - i2c: testunit: discard write requests while old command is running
  - i2c: testunit: don't erase registers after STOP
  - kbuild: Fix build target deb-pkg: ln: failed to create hard link
  - kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
  - counter: ti-eqep: enable clock at probe
  - iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
  - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  - mmc: sdhci: Do not invert write-protect twice
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
  - mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
  - mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
  - mm: fix incorrect vbq reference in purge_fragmented_block
  - nfs: drop the incorrect assertion in nfs_swap_rw()
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - pinctrl: qcom: spmi-gpio: drop broken pm8008 support
  - Revert "MIPS: pci: lantiq: restore reset gpio polarity"
  - parisc: use generic sys_fanotify_mark implementation
  - x86: stop playing stack games in profile_pc()
  - randomize_kstack: Remove non-functional per-arch entropy filtering
  - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
  - riscv: stacktrace: convert arch_stack_walk() to noinstr
  - drm/amdgpu: Fix pci state save during mode-1 reset
  - RISC-V: fix vector insn load/store width mask
  - gpio: davinci: Validate the obtained number of IRQs
  - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
  - nvme: fixup comment for nvme RDMA Provider Type
  - drm/radeon/radeon_display: Decrease the size of allocated memory
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush
  - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
  - irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for IRQ_LOONGARCH_CPU
  - media: dvbdev: Initialize sbuf
  - ALSA: emux: improve patch ioctl data validation
  - crypto: ecdh - explicitly zeroize private_key
  - net/dpaa2: Avoid explicit cpumask var allocation on stack
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - RDMA/restrack: Fix potential invalid address access
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
  - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
  - mtd: partitions: redboot: Added conversion of operands to a larger type
  - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
  - vduse: Temporarily fail if control queue feature requested
  - vduse: validate block features only with block devices
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]
  - powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data
  - net: mana: Fix possible double free in error handling path
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
  - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
  - powerpc: restore some missing spu syscalls
  - parisc: use correct compat recv/recvfrom syscalls
  - sparc: fix compat recv/recvfrom syscalls
  - sparc: fix old compat_sys_select()
  - net: dsa: microchip: fix wrong register write when masking interrupt
  - ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
  - Fix race for duplicate reqsk on identical SYN
  - btrfs: use NOFS context when getting inodes during logging and log replay
  - xdp: Remove WARN() from __xdp_reg_mem_model()
  - ice: Rebuild TC queues on VSI queue reconfiguration
  - net: dsa: microchip: use collision based back pressure mode
  - net: phy: micrel: add Microchip KSZ 9477 to the device table
  - ibmvnic: Free any outstanding tx skbs during scrq reset
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
  - openvswitch: get related ct labels from its master if it is not confirmed
  - net: dsa: microchip: fix initial port flush problem
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
  - ASoC: amd: acp: add a null check for chip_pdev structure
  - s390/pci: Add missing virt_to_phys() for directed DIBV
  - bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
  - bpf: Add missed var_off setting in set_sext32_default_val()
  - ASoC: q6apm-lpass-dai: close graph on prepare errors
  - workqueue: Increase worker desc's length to 32
  - ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
  - ASoC: atmel: convert not to use asoc_xxx()
  - ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
  - ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
  - wifi: mac80211: Use flexible array in struct ieee80211_tim_ie
  - selftests: mptcp: userspace_pm: fixed subtest names
  - selftests: mptcp: print_test out of verify_listener_events
  - MIPS: pci: lantiq: restore reset gpio polarity
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
  - pinctrl: rockchip: use dedicated pinctrl type for RK3328
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - Input: ili210x - fix ili251x_read_touch_data() return value
  - usb: typec: ucsi: Ack also failed Get Error commands
  - usb: typec: ucsi: Never send a lone connector change ack
  - iio: pressure: bmp280: Fix BMP580 temperature reading
  - iio: pressure: fix some word spelling errors
  - Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"
  - hid: asus: asus_report_fixup: fix potential read out of bounds
  - kprobe/ftrace: fix build error due to bad function definition
  - ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk
  - drm/amd/display: revert Exit idle optimizations before HDCP execution
  - LoongArch: Fix entry point in kernel image header
  - efi/loongarch: Directly position the loaded image file
  - vgacon: rework screen_info #ifdef checks
  - riscv: force PAGE_SIZE linear mapping if debug_pagealloc is enabled
  - riscv: Don't use PGD entries for the linear mapping
  - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
  - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
  - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - ocfs2: update inode fsync transaction id in ocfs2_unlink and ocfs2_link
  - ocfs2: convert to new timestamp accessors
  - wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor
  - perf script: Show also errors for --insn-trace option
  - perf: script: add raw|disasm arguments to --insn-trace option
  - spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
  - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
  - spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
  - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema
  - dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
  - i2c: ocores: set IACK bit after core is enabled
  - mm/page_table_check: fix crash on ZONE_DEVICE
  - tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
  - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default
  - efi/x86: Free EFI memory map only when installing a new one.
  - kcov: don't lose track of remote references during softirqs
  - gcov: add support for GCC 14
  - dt-bindings: dma: fsl-edma: fix dma-channels constraints
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - drm/i915/mso: using joiner is not possible with eDP MSO
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9
  - ALSA: hda/realtek: Limit mic boost on N14AP7
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
  - ovl: fix encoding fid for lower only root
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys
  - RDMA/mlx5: Remove extra unlock on error path
  - RDMA/rxe: Fix data copy for IB_SEND_INLINE
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
  - KVM: arm64: Disassociate vcpus from redistributor region on teardown
  - LoongArch: Fix multiple hardware watchpoint issues
  - LoongArch: Trigger user-space watchpoints correctly
  - LoongArch: Fix watchpoint setting error
  - cifs: fix typo in module parameter enable_gcm_256
  - scsi: ufs: core: Free memory allocated for model before reinit
  - btrfs: retry block group reclaim without infinite loop
  - net: do not leave a dangling sk pointer, when socket creation fails
  - net: usb: ax88179_178a: improve reset check
  - net: stmmac: Assign configured channel value to EXTTS event
  - locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc
  - arm64: defconfig: enable the vf610 gpio driver
  - ACPI: EC: Evaluate orphan _REG under EC device
  - RDMA/mana_ib: Ignore optional access flags for MRs
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init
  - firmware: psci: Fix return value from psci_system_suspend()
  - io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed
  - spi: spi-imx: imx51: revert burst length calculation back to bits_per_word
  - arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
  - arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
  - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix BT shutdown GPIO
  - arm64: dts: imx8mp: Fix TC9595 input clock on DH i.MX8M Plus DHCOM SoM
  - arm64: dts: imx8mp: Fix TC9595 reset GPIO on DH i.MX8M Plus DHCOM SoM
  - thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data
  - regulator: bd71815: fix ramp values
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy()
  - dmaengine: fsl-edma: avoid linking both modules
  - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
  - dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
  - dmaengine: ioatdma: Fix leaking on version mismatch
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined
  - RDMA/rxe: Fix responder length checking for UD request packets
  - spi: cs42l43: Correct SPI root clock speed
  - RDMA/bnxt_re: Fix the max msix vectors macro
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
  - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
  - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
  - octeontx2-pf: Fix linking objects into multiple modules
  - octeontx2-pf: Add error handling to VLAN unoffload handling
  - virtio_net: fixing XDP for fully checksummed packets handling
  - virtio_net: checksum offloading handling fix
  - net: stmmac: No need to calculate speed divider when offload is disabled
  - selftests: openvswitch: Use bash as interpreter
  - ptp: fix integer overflow in max_vclocks_store
  - sched: act_ct: add netns into the key of tcf_ct_flow_table
  - net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
  - net: lan743x: Support WOL at both the PHY and MAC appropriately
  - net: lan743x: disable WOL upon resume to restore full data path operation
  - qca_spi: Make interrupt remembering atomic
  - netns: Make get_net_ns() handle zero refcount net
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - ipv6: prevent possible NULL deref in fib6_nh_init()
  - bpf: Avoid splat in pskb_pull_reason
  - ALSA: hda: tas2781: Component should be unbound before deconstruction
  - ALSA: hda: cs35l56: Component should be unbound before deconstruction
  - cipso: fix total option length computation
  - net: mvpp2: use slab_build_skb for oversized frames
  - ice: avoid IRQ collision to fix init failure on ACPI S3 resume
  - ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
  - ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
  - MIPS: Routerboard 532: Fix vendor retry check code
  - ALSA: seq: ump: Fix missing System Reset message handling
  - PCI: Do not wait for disconnected devices when resuming
  - ACPI: EC: Install address space handler at the namespace root
  - usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
  - serial: exar: adding missing CTI and Exar PCI ids
  - f2fs: don't set RO when shutting down f2fs
  - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
  - udf: udftime: prevent overflow in udf_disk_stamp_to_time()
  - usb: typec: ucsi_glink: drop special handling for CCI_BUSY
  - usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380
  - Avoid hw_desc array overrun in dw-axi-dmac
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002
  - usb: gadget: uvc: configfs: ensure guid to be valid before set
  - kprobe/ftrace: bail out if ftrace was killed
  - power: supply: cros_usbpd: provide ID table for avoiding fallback match
  - platform/x86: p2sb: Don't init until unassigned resources have been assigned
  - powerpc/io: Avoid clang null pointer arithmetic warnings
  - media: mtk-vcodec: potential null pointer deference in SCP
  - media: intel/ipu6: Fix build with !ACPI
  - ALSA: hda/realtek: Add quirks for Lenovo 13X
  - drm/lima: mask irqs in timeout path before hard reset
  - drm/lima: add mask irq callback to gp and pp
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F
  - ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
  - platform/x86: toshiba_acpi: Add quirk for buttons on Z830
  - drm/amd/display: Exit idle optimizations before HDCP execution
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
  - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
  - HID: asus: fix more n-key report descriptors if n-key quirked
  - HID: Add quirk for Logitech Casa touchpad
  - net: dsa: realtek: keep default LED state in rtl8366rb
  - kselftest: arm64: Add a null pointer check
  - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module
  - scsi: qedi: Fix crash while reading debugfs attribute
  - ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets
  - af_packet: avoid a false positive warning in packet_setsockopt()
  - wifi: ath9k: work around memset overflow warning
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh
  - block/ioctl: prefer different overflow check
  - rcutorture: Fix invalid context warning when enable srcu barrier testing
  - rcutorture: Make stall-tasks directly exit when rcutorture tests end
  - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
  - io_uring/sqpoll: work around a potential audit memory leak
  - padata: Disable BH when taking works lock on MT path
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - i2c: designware: Fix the functionality flags of the slave-only interface
  - i2c: at91: Fix the functionality flags of the slave-only interface
  - misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()
  - serial: core: Add UPIO_UNKNOWN constant for unknown port type
  - device property: Implement device_is_big_endian()
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - remoteproc: k3-r5: Jump to error handling labels in start/stop errors
  - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
  - mm/huge_memory: don't unpoison huge_zero_folio
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - xfs: allow cross-linking special files without project quota
  - xfs: allow sunit mount option to repair bad primary sb stripe values
  - xfs: shrink failure needs to hold AGI buffer
  - xfs: fix SEEK_HOLE/DATA for regions with active COW extents
  - xfs: fix scrub stats file permissions
  - xfs: fix imprecise logic in xchk_btree_check_block_owner
  - pmdomain: ti-sci: Fix duplicate PD referrals
  - intel_th: pci: Add Lunar Lake support
  - intel_th: pci: Add Meteor Lake-S support
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support
  - drm/i915: Fix audio component initialization
  - drm/i915/dpt: Make DPT object unshrinkable
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - drm/i915/gt: Disarm breadcrumbs if engines are already idle
  - rtla/auto-analysis: Replace 	 with spaces
  - rtla/timerlat: Simplify "no value" printing on top
  - iio: invensense: fix interrupt timestamp alignment
  - iio: adc: axi-adc: make sure AXI clock is enabled
  - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
  - remoteproc: k3-r5: Wait for core0 power-up before powering up core1
  - dmaengine: axi-dmac: fix possible race in remove()
  - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
  - ocfs2: use coarse time for new created files
  - fs/proc: fix softlockup in __read_vmcore
  - knfsd: LOOKUP can return an illegal error value
  - spmi: hisi-spmi-controller: Do not override device identifier
  - dma-buf: handle testing kthreads creation failure
  - null_blk: Print correct max open zones limit in null_init_zoned_dev()
  - kheaders: explicitly define file modes for archived headers
  - tracing/selftests: Fix kprobe event name test for .isra. functions
  - riscv: fix overlap of allocated page and PTR_ERR
  - perf auxtrace: Fix multiple use of --itrace option
  - perf/core: Fix missing wakeup when waiting for context reference
  - x86/amd_nb: Check for invalid SMN reads
  - x86/kexec: Fix bug with call depth tracking
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
  - mptcp: pm: update add_addr counters after connect
  - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
  - ACPI: x86: Force StorageD3Enable on more products
  - drivers: core: synchronize really_probe() and dev_uevent()
  - iio: imu: inv_icm42600: delete unneeded update watermark call
  - iio: invensense: fix odr switching to same value
  - iio: dac: ad5592r: fix temperature channel scaling value
  - iio: adc: ad9467: fix scan type sign
  - x86/boot: Don't add the EFI stub to targets, again
  - ksmbd: fix missing use of get_write in in smb2_set_ea()
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
  - af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay
  - nvmet-passthru: propagate status from id override functions
  - block: fix request.queuelist usage in flush
  - block: sed-opal: avoid possible wrong address reference in read_sed_opal_key()
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters
  - gve: ignore nonrelevant GSO type bits when processing TSO headers
  - net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
  - scsi: ufs: core: Quiesce request queues before checking pending cmds
  - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking
  - x86/asm: Use %c/%n instead of %PATCHoperand
  - netfilter: nft_inner: validate mandatory meta and payload
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set
  - net dsa: qca8k: fix usages of device_get_named_child_node()
  - tcp: fix race in tcp_v6_syn_recv_sock()
  - drm/bridge/panel: Fix runtime warning on panel bridge release
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width
  - net: sfp: Always call `sfp_sm_mod_remove()` on remove
  - modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o
  - af_unix: Annotate data-race of sk->sk_state in unix_accept().
  - drm/vmwgfx: Don't memcmp equivalent pointers
  - drm/vmwgfx: Remove STDU logic from generic mode_valid function
  - drm/vmwgfx: 3D disabled should not effect STDU memory limits
  - drm/vmwgfx: Filter modes which exceed graphics memory
  - drm/vmwgfx: Refactor drm connector probing for display modes
  - io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()
  - iommu: Return right value in iommu_sva_bind_device()
  - iommu/amd: Fix sysfs leak in iommu init
  - HID: core: remove unnecessary WARN_ON() in implement()
  - gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
  - gpio: tqmx86: store IRQ trigger type and unmask status separately
  - gpio: tqmx86: introduce shadow register for GPIO output value
  - gpio: tqmx86: fix typo in Kconfig label
  - platform/x86: dell-smbios: Fix wrong token data in sysfs
  - drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation
  - nvme: fix nvme_pr_* status code parsing
  - selftests/tracing: Fix event filter test to retry up to 10 times
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED
  - SUNRPC: return proper error from gss_wrap_req_priv
  - NFSv4.1 enforce rootpath check in fs_location query
  - clk: sifive: Do not register clkdevs for PRCI clocks
  - selftests/ftrace: Fix to check required event file
  - cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
  - HID: nvidia-shield: Add missing check for input_ff_create_memless
  - powerpc/uaccess: Fix build errors seen with GCC 13/14
  - gve: Clear napi->skb before dev_kfree_skb_any()
  - scsi: sd: Use READ(16) when reading block zero on large capacity disks
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - scsi: mpi3mr: Fix ATA NCQ priority support
  - scsi: core: Disable CDL by default
  - thunderbolt: debugfs: Fix margin debugfs node creation condition
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host
  - xhci: Handle TD clearing for multiple streams case
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host
  - xhci: Set correct transferred length for cancelled bulk transfers
  - jfs: xattr: fix buffer overflow for invalid xattr
  - landlock: Fix d_parent walk
  - serial: port: Don't block system suspend even if bytes are left to xmit
  - tty: n_tty: Fix buffer offsets when lookahead is used
  - mei: me: release irq in mei_me_pci_resume error path
  - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
  - usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
  - USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - bpf: fix multi-uprobe PID filtering logic
  - eventfs: Update all the eventfs_inodes from the events descriptor
  - irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails
  - irqchip/riscv-intc: Introduce Andes hart-level interrupt controller
  - irqchip/riscv-intc: Allow large non-standard interrupt number
  - selftests/mm: compaction_test: fix bogus test success on Aarch64
  - selftests/mm: log a consistent test name for check_compaction
  - selftests/mm: conform test to TAP format output
  - memory-failure: use a folio in me_huge_page()
  - firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
  - ksmbd: use rwsem instead of rwlock for lease break
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
  - af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
  - af_unix: Annotate data-races around sk->sk_sndbuf.
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
  - af_unix: Annodate data-races around sk->sk_state for writers.
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
  - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config
  - ice: remove af_xdp_zc_qps bitmap
  - ice: fix iteration of TLVs in Preserved Fields Area
  - ptp: Fix error message on failed pin verification
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
  - net/mlx5: Stop waiting for PCI if pci channel is offline
  - mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - net: phy: Micrel KSZ8061: fix errata solution not taking effect problem
  - net/smc: avoid overwriting when adjusting sock bufsizes
  - octeontx2-af: Always allocate PF entries from low prioriy zone
  - net: tls: fix marking packets as decrypted
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  - ipv6: ioam: block BH from ioam6_output()
  - bpf: Store ref_ctr_offsets values in bpf_uprobe array
  - net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume
  - net/ncsi: Fix the multi thread manner of NCSI driver
  - net/ncsi: Simplify Kconfig/dts control flow
  - ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
  - ax25: Fix refcount imbalance on inbound connections
  - RISC-V: KVM: Fix incorrect reg_subtype labels in kvm_riscv_vcpu_set_reg_isa_ext function
  - RISC-V: KVM: No need to use mask when hart-index-bit is 0
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()
  - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
  - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
  - wifi: iwlwifi: mvm: set properly mac header
  - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
  - wifi: iwlwifi: mvm: don't initialize csa_work twice
  - wifi: cfg80211: pmsr: use correct nla_get_uX functions
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station
  - wifi: cfg80211: fully move wiphy work to unbound workqueue
  - !10369 Backport 6.6.33-34 LTS patches from upstream
  - openeuler_defconfig: add new config
  - selftests: net: more strict check in net_helper
  - powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
  - ALSA: seq: Fix incorrect UMP type for system messages
  - btrfs: fix leak of qgroup extent records after transaction abort
  - tracefs: Clear EVENT_INODE flag in tracefs_drop_inode()
  - eventfs: Keep the directories from having the same inode number as files
  - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
  - nfs: fix undefined behavior in nfs_block_bits()
  - EDAC/igen6: Convert PCIBIOS_* return codes to errnos
  - ALSA: ump: Don't accept an invalid UMP protocol number
  - ALSA: ump: Don't clear bank selection after sending a program change
  - i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
  - s390/cpacf: Make use of invalid opcode produce a link error
  - s390/cpacf: Split and rework cpacf query functions
  - parisc: Define sigset_t in parisc uapi header
  - parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
  - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
  - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
  - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
  - riscv: dts: starfive: Remove PMIC interrupt info for Visionfive 2 board
  - drm/amdkfd: handle duplicate BOs in reserve_bo_and_cond_vms
  - sparc: move struct termio to asm/termios.h
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read()
  - kdb: Merge identical case statements in kdb_read()
  - kdb: Fix console handling when editing and tab-completing commands
  - kdb: Use format-strings rather than '0' injection in kdb_read()
  - wifi: ath10k: fix QCOM_RPROC_COMMON dependency
  - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
  - selftests/mm: fix build warnings on ppc64
  - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
  - mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
  - mm: /proc/pid/smaps_rollup: avoid skipping vma after getting mmap_lock again
  - mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
  - mm/cma: drop incorrect alignment check in cma_init_reserved_mem
  - sparc64: Fix number of online CPUs
  - rtla/timerlat: Fix histogram report when a cpu count is 0
  - intel_th: pci: Add Meteor Lake-S CPU support
  - tpm_tis: Do *not* flush uninitialized work
  - kmsan: do not wipe out origin when doing partial unpoisoning
  - mm/ksm: fix ksm_pages_scanned accounting
  - net/ipv6: Fix route deleting failure when metric equals 0
  - scsi: core: Handle devices which return an unusually large VPD page count
  - HID: i2c-hid: elan: fix reset suspend current leakage
  - filemap: add helper mapping_max_folio_size()
  - kbuild: Remove support for Clang's ThinLTO caching
  - crypto: ecrdsa - Fix module auto-load on add_key
  - crypto: ecdsa - Fix module auto-load on add-key
  - clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs
  - LoongArch: Override higher address bits in JUMP_VIRT_ADDR
  - LoongArch: Add all CPUs enabled by fdt to NUMA node 0
  - KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
  - KVM: arm64: Fix AArch32 register narrowing on userspace write
  - Revert "drm/amdkfd: fix gfx_target_version for certain 11.0.3 devices"
  - drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
  - drm/amdgpu/atomfirmware: add intergrated info v2.3 table
  - drm/fbdev-generic: Do not set physical framebuffer address
  - mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA
  - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
  - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
  - mmc: sdhci-acpi: Sort DMI quirks alphabetically
  - mmc: sdhci: Add support for "Tuning Error" interrupts
  - mmc: core: Add mmc_gpiod_set_cd_config() function
  - media: v4l: async: Don't set notifier's V4L2 device if registering fails
  - media: v4l2-core: hold videodev_lock until dev reg, finishes
  - media: mxl5xx: Move xpt structures off stack
  - media: mc: mark the media devnode as registered from the, start
  - arm64: dts: ti: verdin-am62: Set memory size to 2gb
  - arm64: dts: hi3798cv200: fix the size of GICR
  - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
  - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
  - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
  - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
  - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - arm64: dts: qcom: qcs404: fix bluetooth device address
  - arm64: tegra: Correct Tegra132 I2C alias
  - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
  - soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
  - proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
  - fsverity: use register_sysctl_init() to avoid kmemleak warning
  - ata: pata_legacy: make legacy_exit() work again
  - wifi: rtw89: correct aSIFSTime for 6GHz band
  - bcache: fix variable length array abuse in btree_iter
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - drm/sun4i: hdmi: Move mode_set into enable
  - drm/sun4i: hdmi: Convert encoder to atomic
  - selftests: net: List helper scripts in TEST_FILES Makefile variable
  - selftests: net: included needed helper in the install targets
  - selftests/net: synchronize udpgro tests' tx and rx connection
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - erofs: avoid allocating DEFLATE streams before mounting
  - mptcp: fix full TCP keep-alive support
  - mptcp: cleanup SOL_TCP handling
  - mptcp: avoid some duplicate code in socket option handling
  - net: sfp-bus: fix SFP mode detect from bitrate
  - afs: Don't cross .backup mountpoint from backup volume
  - mmc: core: Do not force a retune before RPMB switch
  - riscv: stacktrace: fixed walk_stackframe()
  - riscv: prevent pt_regs corruption for secondary idle threads
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
  - f2fs: use f2fs_{err,info}_ratelimited() for cleanup
  - f2fs: write missing last sum blk of file pinning section
  - perf sched timehist: Fix -g/--call-graph option failure
  - media: vsp1: Remove unbalanced .s_stream(0) calls
  - nouveau: report byte usage in VRAM usage.
  - RDMA/bnxt_re: Fix the sparse warnings
  - perf evlist: Add perf_evlist__go_system_wide() helper
  - platform/x86/intel-uncore-freq: Don't present root domain on error
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
  - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
  - x86/pci: Skip early E820 check for ECAM region
  - x86/efistub: Omit physical KASLR when memory reservations exist
  - ALSA: seq: ump: Fix swapped song position pointer data
  - hwmon: (shtc1) Fix property misspelling
  - hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor
  - drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel
  - drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel
  - drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel
  - powerpc/pseries/lparcfg: drop error message from guest name lookup
  - ALSA: seq: Fix yet another spot for system message conversion
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - net: ena: Fix redundant device NUMA node override
  - net: ena: Reduce lines with longer column width boundary
  - net: dsa: microchip: fix RGMII error in KSZ DSA driver
  - spi: stm32: Don't warn about spurious interrupts
  - kheaders: use `command -v` to test for existence of `cpio`
  - drm/i915/gt: Fix CCS id's calculation for CCS mode setting
  - drm/i915/guc: avoid FIELD_PREP warning
  - kconfig: fix comparison to constant symbols, 'm', 'n'
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
  - netfilter: nft_fib: allow from forward/input without iif selector
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - netfilter: nft_payload: skbuff vlan metadata mangle support
  - net: ti: icssg-prueth: Fix start counter for ft1 filter
  - ALSA: seq: Don't clear bank selection at event -> UMP MIDI2 conversion
  - ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion
  - selftests: mptcp: join: mark 'fail' tests as flaky
  - selftests: mptcp: add ms units for tc-netem delay
  - selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky
  - ice: fix accounting if a VLAN already exists
  - net: micrel: Fix lan8841_config_intr after getting out of sleep mode
  - net:fec: Add fec_enet_deinit()
  - ASoC: cs42l43: Only restrict 44.1kHz for the ASP
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner
  - af_unix: Read sk->sk_hash under bindlock during bind().
  - af_unix: Annotate data-race around unix_sk(sk)->addr.
  - enic: Validate length of nl attributes in enic_set_vf_port
  - ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp
  - ALSA: core: Remove debugfs at disconnection
  - ALSA: jack: Use guard() for locking
  - bpf: Fix potential integer overflow in resolve_btfids
  - net/mlx5e: Fix UDP GSO for encapsulated packets
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion
  - net/mlx5e: Fix IPsec tunnel mode offload feature check
  - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
  - net/mlx5: Fix MTMP register capability offset in MCAM register
  - net/mlx5: Lag, do bond only if slaves agree on roce state
  - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
  - drm/amd/display: Enable colorspace property for MST connectors
  - nvmet: fix ns enable/disable possible hang
  - nvme-multipath: fix io accounting on failover
  - nvme-tcp: add definitions for TLS cipher suites
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - dma-mapping: benchmark: fix node id validation
  - dma-mapping: benchmark: fix up kthread-related error handling
  - kthread: add kthread_stop_put
  - netfilter: nft_payload: restore vlan q-in-q match support
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - kasan, fortify: properly rename memintrinsics
  - ice: Interpret .set_channels() input differently
  - drivers/xen: Improve the late XenStore init protocol
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - net: relax socket state check at accept time.
  - net: fec: avoid lock evasion when reading pps_enable
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI"
  - i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame
  - i3c: master: svc: return actual transfer data len
  - i3c: master: svc: rename read_len as actual_len
  - i3c: add actual_len in i3c_priv_xfer
  - net: lan966x: Remove ptp traps in case the ptp is not enabled.
  - rv: Update rv_en(dis)able_monitor doc to match kernel-doc
  - openvswitch: Set the skbuff pkt_type for proper pmtud support.
  - pNFS/filelayout: fixup pNfs allocation modes
  - regulator: tps6594-regulator: Correct multi-phase configuration
  - af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
  - regulator: tps6287x: Force writing VSEL bit
  - regulator: pickable ranges: don't always cache vsel
  - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
  - sunrpc: fix NFSACL RPC retry on soft mount
  - nfs: keep server info for remounts
  - NFSv4: Fixup smatch warning for ambiguous return
  - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
  - nfc: nci: Fix uninit-value in nci_rx_work
  - selftests: net: kill smcrouted in the cleanup logic in amt.sh
  - ipv6: sr: fix missing sk_buff release in seg6_input_core
  - net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y
  - perf/arm-dmc620: Fix lockdep assert in ->event_init()
  - xen/x86: add extra pages to unpopulated-alloc if available
  - regulator: bd71828: Don't overwrite runtime voltages
  - blk-cgroup: Properly propagate the iostat update up the hierarchy
  - blk-cgroup: fix list corruption from resetting io stat
  - drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations
  - nouveau: add an ioctl to report vram usage
  - nouveau: add an ioctl to return vram bar size.
  - ASoC: mediatek: mt8192: fix register configuration for tdm
  - ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
  - ALSA: hda: cs35l56: Initialize all ASP1 registers
  - ASoC: cs35l56: Fix to ensure ASP1 registers match cache
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
  - ASoC: tas2781: Fix a warning reported by robot kernel test
  - selftests/powerpc/dexcr: Add -no-pie to hashchk tests
  - Revert "drm/bridge: ti-sn65dsi83: Fix enable error path"
  - media: cec: core: avoid confusing "transmit timed out" message
  - media: cec: core: avoid recursive cec_claim_log_addrs
  - media: cec: cec-api: add locking in cec_release()
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  - media: sunxi: a83-mips-csi2: also select GENERIC_PHY
  - cxl/region: Fix cxlr_pmem leaks
  - cxl/trace: Correct DPA field masks for general_media & dram events
  - um: Fix the declaration of kasan_map_memory
  - um: Fix the -Wmissing-prototypes warning for get_thread_reg
  - um: Fix the -Wmissing-prototypes warning for __switch_mm
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
  - media: flexcop-usb: fix sanity check of bNumEndpoints
  - platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit()
  - tools/arch/x86/intel_sdsi: Fix meter_certificate decoding
  - tools/arch/x86/intel_sdsi: Fix meter_show display
  - tools/arch/x86/intel_sdsi: Fix maximum meter bundle length
  - media: mediatek: vcodec: fix possible unbalanced PM counter
  - media: mediatek: vcodec: add encoder power management helper functions
  - drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()
  - drm/amdgpu: init microcode chip name from ip versions
  - Input: cyapa - add missing input core locking to suspend/resume functions
  - drm/bridge: tc358775: fix support for jeida-18 and jeida-24
  - um: vector: fix bpfflash parameter evaluation
  - um: Add winch to winch_handlers before registering winch IRQ
  - um: Fix return value in ubd_init()
  - drm/meson: gate px_clk when setting rate
  - drm/mediatek: dp: Fix mtk_dp_aux_transfer return value
  - drm/msm/dpu: Always flush the slave INTF on the CTL
  - drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
  - media: ov2680: Do not fail if data-lanes property is absent
  - media: ov2680: Allow probing if link-frequencies is absent
  - media: ov2680: Clear the 'ret' variable on success
  - media: v4l: Don't turn on privacy LED if streamon fails
  - media: v4l2-subdev: Document and enforce .s_stream() requirements
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
  - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
  - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
  - mmc: sdhci_am654: Add OTAP/ITAP delay enable
  - mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel
  - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
  - mmc: sdhci_am654: Add tuning algorithm for delay chain
  - Input: ims-pcu - fix printf string overflow
  - dt-bindings: adc: axi-adc: add clocks property
  - dt-bindings: adc: axi-adc: update bindings for backend framework
  - eventfs: Have "events" directory get permissions from its parent
  - eventfs: Free all of the eventfs_inode after RCU
  - eventfs/tracing: Add callback for release of an eventfs_inode
  - eventfs: Create eventfs_root_inode to store dentry
  - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
  - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
  - misc/pvpanic-pci: register attributes via pci_driver
  - misc/pvpanic: deduplicate common code
  - iio: accel: mxc4005: Reset chip on probe() and resume()
  - iio: accel: mxc4005: allow module autoloading via OF compatible
  - eventfs: Do not differentiate the toplevel events directory
  - drm/amd/display: Revert Remove pixle rate limit for subvp
  - drm/amd/display: Remove pixle rate limit for subvp
  - dt-bindings: PCI: rockchip,rk3399-pcie: Add missing maxItems to ep-gpios
  - s390/boot: Remove alt_stfle_fac_list from decompressor
  - s390/ipl: Fix incorrect initialization of nvme dump block
  - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
  - s390/vdso: Use standard stack frame layout
  - s390/vdso: Generate unwind information for C modules
  - s390/vdso64: filter out munaligned-symbols flag for vdso
  - LoongArch: Fix callchain parse error with kernel tracepoint events again
  - perf tools: Add/use PMU reverse lookup from config to name
  - perf tools: Use pmus to describe type from attribute
  - perf pmu: "Compat" supports regular expression matching identifiers
  - perf pmu: Move pmu__find_core_pmu() to pmus.c
  - perf test: Add a test for strcmp_cpuid_str() expression
  - perf stat: Don't display metric header for non-leader uncore events
  - usb: fotg210: Add missing kernel doc description
  - f2fs: fix to add missing iput() in gc_data_segment()
  - perf daemon: Fix file leak in daemon_session__control
  - libsubcmd: Fix parse-options memory leak
  - serial: sh-sci: protect invalidating RXDMA on shutdown
  - f2fs: fix to release node block count in error path of f2fs_new_node_page()
  - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - f2fs: compress: fix error path of inc_valid_block_count()
  - f2fs: introduce get_available_block_count() for cleanup
  - f2fs: deprecate io_bits
  - f2fs: compress: fix to update i_compr_blocks correctly
  - perf symbols: Fix ownership of string in dso__load_vmlinux()
  - perf maps: Move symbol maps functions to maps.c
  - perf thread: Fixes to thread__new() related to initializing comm
  - perf report: Avoid SEGV in report__setup_sample_type()
  - perf ui browser: Avoid SEGV on title
  - f2fs: fix block migration when section is not aligned to pow2
  - f2fs: support file pinning for zoned devices
  - f2fs: kill heap-based allocation
  - f2fs: separate f2fs_gc_range() to use GC for a range
  - f2fs: use BLKS_PER_SEG, BLKS_PER_SEC, and SEGS_PER_SEC
  - f2fs: support printk_ratelimited() in f2fs_printk()
  - f2fs: Clean up errors in segment.h
  - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
  - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
  - dt-bindings: spmi: hisilicon,hisi-spmi-controller: fix binding references
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it
  - perf ui browser: Don't save pointer to stack memory
  - perf bench internals inject-build-id: Fix trap divide when collecting just one DSO
  - i2c: synquacer: Fix an error handling path in synquacer_i2c_probe()
  - i2c: cadence: Avoid fifo clear after start
  - ppdev: Add an error check in register_device
  - ppdev: Remove usage of the deprecated ida_simple_xx() API
  - stm class: Fix a double free in stm_register_device()
  - usb: gadget: u_audio: Clear uac pointer when freed.
  - dt-bindings: phy: qcom,usb-snps-femto-v2: use correct fallback for sc8180x
  - dt-bindings: phy: qcom,sc8280xp-qmp-ufs-phy: fix msm899[68] power-domains
  - watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe()
  - watchdog: bd9576: Drop "always-running" property
  - pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs
  - dt-bindings: pinctrl: mediatek: mt7622: fix array properties
  - VMCI: Fix an error handling path in vmci_guest_probe_device()
  - ovl: remove upper umask handling from ovl_create_upper()
  - leds: pwm: Disable PWM when going to suspend
  - pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()
  - perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer)
  - PCI: Wait for Link Training==0 before starting Link retrain
  - microblaze: Remove early printk call from cpuinfo-static.c
  - microblaze: Remove gcc flag for non existing early_printk.c file
  - udf: Convert udf_expand_file_adinicb() to use a folio
  - udf: Remove GFP_NOFS allocation in udf_expand_file_adinicb()
  - i915: make inject_virtual_interrupt() void
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - iio: adc: adi-axi-adc: only error out in major version mismatch
  - iio: adc: adi-axi-adc: move to backend framework
  - iio: adc: ad9467: convert to backend framework
  - iio: add the IIO backend framework
  - iio: buffer-dmaengine: export buffer alloc and free functions
  - iio: adc: adi-axi-adc: convert to regmap
  - iio: adc: ad9467: use chip_info variables instead of array
  - iio: adc: ad9467: use spi_get_device_match_data()
  - iio: pressure: dps310: support negative temperature values
  - perf test shell arm_coresight: Increase buffer size for Coresight basic tests
  - perf docs: Document bpf event modifier
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - riscv: dts: starfive: visionfive 2: Remove non-existing TDM hardware
  - iio: adc: stm32: Fixing err code to not indicate success
  - f2fs: fix to check pinfile flag in f2fs_move_file_range()
  - f2fs: fix to relocate check condition in f2fs_fallocate()
  - f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file()
  - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks()
  - perf bench uprobe: Remove lib64 from libc.so.6 binary path
  - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
  - dt-bindings: PCI: rcar-pci-host: Add optional regulators
  - perf record: Fix debug message placement for test consumption
  - perf record: Move setting tracking events before record__init_thread_masks()
  - perf evlist: Add evlist__findnew_tracking_event() helper
  - perf tests: Apply attributes to all events in object code reading test
  - perf tests: Make "test data symbol" more robust on Neoverse N1
  - arm64: dts: meson: fix S4 power-controller node
  - interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment
  - module: don't ignore sysfs_create_link() failures
  - serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
  - PCI: tegra194: Fix probe path for Endpoint mode
  - greybus: arche-ctrl: move device table to its right location
  - serial: max3100: Fix bitwise types
  - serial: max3100: Update uart_driver_registered on driver removal
  - perf annotate: Fix annotation_calc_lines() to pass correct address to get_srcline()
  - perf annotate: Use global annotation_options
  - perf top: Convert to the global annotation_options
  - perf report: Convert to the global annotation_options
  - perf annotate: Introduce global annotation_options
  - perf annotate: Split branch stack cycles information out of 'struct annotation_line'
  - perf machine thread: Remove exited threads by default
  - perf record: Lazy load kernel symbols
  - firmware: dmi-id: add a release callback function
  - dmaengine: idma64: Add check for dma_set_max_seg_size
  - soundwire: cadence: fix invalid PDI offset
  - perf stat: Do not fail on metrics on s390 z/VM systems
  - usb: typec: ucsi: simplify partner's PD caps registration
  - usb: typec: ucsi: always register a link to USB PD device
  - perf annotate: Get rid of duplicate --group option item
  - counter: linux/counter.h: fix Excess kernel-doc description warning
  - f2fs: fix to wait on page writeback in __clone_blkaddrs()
  - phy: qcom: qmp-combo: fix duplicate return in qmp_v4_configure_dp_phy
  - iio: core: Leave private pointer NULL when no private data supplied
  - perf probe: Add missing libgen.h header needed for using basename()
  - perf record: Delete session after stopping sideband thread
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
  - net: qrtr: ns: Fix module refcnt
  - selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval
  - tracing/user_events: Fix non-spaced field matching
  - tracing/user_events: Prepare find/delete for same name events
  - tracing/user_events: Allow events to persist for perfmon_capable users
  - RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw
  - RDMA/IPoIB: Fix format truncation compilation errors
  - selftests/kcmp: remove unused open mode
  - SUNRPC: Fix gss_free_in_token_pages()
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  - RDMA/bnxt_re: Adds MSN table capability for Gen P7 adapters
  - RDMA/bnxt_re: Update the HW interface definitions
  - RDMA/bnxt_re: Remove roundup_pow_of_two depth for all hardware queue resources
  - RDMA/bnxt_re: Refactor the queue index update
  - ext4: remove the redundant folio_wait_stable()
  - ext4: fix potential unnitialized variable
  - sunrpc: removed redundant procp check
  - ext4: avoid excessive credit estimate in ext4_tmpfile()
  - x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
  - clk: qcom: mmcc-msm8998: fix venus clock issue
  - clk: qcom: dispcc-sm8550: fix DisplayPort clocks
  - clk: qcom: dispcc-sm6350: fix DisplayPort clocks
  - clk: qcom: dispcc-sm8450: fix DisplayPort clocks
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
  - clk: renesas: r9a07g043: Add clock and reset entry for PLIC
  - clk: renesas: r8a779a0: Fix CANFD parent clock
  - IB/mlx5: Use __iowrite64_copy() for write combining stores
  - RDMA/rxe: Fix incorrect rxe_put in error path
  - RDMA/rxe: Allow good work requests to be executed
  - clk: qcom: clk-alpha-pll: remove invalid Stromer register offset
  - clk: rs9: fix wrong default value for clock amplitude
  - clk: mediatek: mt8365-mm: fix DPI0 parent
  - clk: mediatek: pllfh: Don't log error for missing fhctl node
  - RDMA/mlx5: Adding remote atomic access flag to updatable flags
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent
  - clk: samsung: exynosautov9: fix wrong pll clock id value
  - media: cadence: csi2rx: configure DPHY before starting source stream
  - drm/edid: Parse topology block for all DispID structure v1.x
  - drm/rockchip: vop2: Do not divide height twice for YUV
  - media: uvcvideo: Add quirk for Logitech Rally Bar
  - drm/mipi-dsi: use correct return type for the DSC functions
  - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
  - drm/bridge: anx7625: Update audio status while detecting
  - drm/panel: novatek-nt35950: Don't log an error when DSI host can't be found
  - drm/bridge: dpc3433: Don't log an error when DSI host can't be found
  - drm/bridge: tc358775: Don't log an error when DSI host can't be found
  - drm/bridge: lt9611uxc: Don't log an error when DSI host can't be found
  - drm/bridge: lt9611: Don't log an error when DSI host can't be found
  - drm/bridge: lt8912b: Don't log an error when DSI host can't be found
  - drm/bridge: icn6211: Don't log an error when DSI host can't be found
  - drm/bridge: anx7625: Don't log an error when DSI host can't be found
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
  - drm: vc4: Fix possible null pointer dereference
  - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - fbdev: sh7760fb: allow modular build
  - media: v4l2-subdev: Fix stream handling for crop API
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - media: dt-bindings: ovti,ov2680: Fix the power supply names
  - media: ipu3-cio2: Request IRQ earlier
  - drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected
  - drm/msm/dp: allow voltage swing / pre emphasis of 3
  - media: radio-shark2: Avoid led_names truncations
  - media: rcar-vin: work around -Wenum-compare-conditional warning
  - media: ngene: Add dvb_ca_en50221_init return value check
  - ASoC: Intel: avs: Test result of avs_get_module_entry()
  - ASoC: Intel: avs: Fix potential integer overflow
  - ASoC: Intel: avs: Fix ASRC module initialization
  - selftests: cgroup: skip test_cgcore_lesser_ns_open when cgroup2 mounted without nsdelegate
  - fbdev: sisfb: hide unused variables
  - ASoC: SOF: Intel: mtl: Implement firmware boot state check
  - ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed
  - ASoC: SOF: Intel: mtl: call dsp dump when boot retry fails
  - ASoC: SOF: Intel: lnl: Correct rom_status_reg
  - ASoC: SOF: Intel: mtl: Correct rom_status_reg
  - ASoC: SOF: Intel: pci-mtl: fix ARL-S definitions
  - ASoC: SOF: Intel: pci-mtl: use ARL specific firmware definitions
  - ASoC: Intel: common: add ACPI matching tables for Arrow Lake
  - powerpc/fsl-soc: hide unused const variable
  - drm/meson: vclk: fix calculation of 59.94 fractional rates
  - ASoC: kirkwood: Fix potential NULL dereference
  - fbdev: shmobile: fix snprintf truncation
  - mtd: rawnand: hynix: fixed typo
  - mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add()
  - ASoC: Intel: avs: ssm4567: Do not ignore route checks
  - ASoC: Intel: Disable route checks for Skylake boards
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD doesn't assert
  - drm/dp: Don't attempt AUX transfers when eDP panels are not powered
  - drm/lcdif: Do not disable clocks on already suspended hardware
  - dev_printk: Add and use dev_no_printk()
  - printk: Let no_printk() use _printk()
  - drm/omapdrm: Fix console with deferred ops
  - fbdev: Provide I/O-memory helpers as module
  - drm/omapdrm: Fix console by implementing fb_dirty
  - drm/ci: update device type for volteer devices
  - drm/ci: add subset-1-gfx to LAVA_TAGS and adjust shards
  - drm/ci: uprev mesa version: fix container build & crosvm
  - drm/bridge: Fix improper bridge init order with pre_enable_prev_first
  - Bluetooth: qca: Fix error code in qca_read_fw_build_info()
  - Bluetooth: compute LE flow credits based on recvbuf space
  - net: micrel: Fix receiving the timestamp in the frame for lan8841
  - mptcp: SO_KEEPALIVE: fix getsockopt support
  - riscv, bpf: make some atomic operations fully ordered
  - s390/bpf: Emit a barrier for BPF_FETCH instructions
  - net/mlx5: Reload only IB representors upon lag disable/enable
  - net/mlx5: Enable 4 ports multiport E-switch
  - ipv6: sr: fix invalid unregister error path
  - ipv6: sr: fix incorrect unregister order
  - ipv6: sr: add missing seg6_local_exit
  - net: usb: smsc95xx: stop lying about skb->truesize
  - net: ethernet: cortina: Locking fixes
  - selftests: net: move amt to socat for better compatibility
  - selftests: net: add missing config for amt.sh
  - selftests: net: add more missing kernel config
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment
  - m68k: mac: Fix reboot hang on Mac IIci
  - m68k: Fix spinlock race in kernel thread creation
  - net: usb: sr9700: stop lying about skb->truesize
  - usb: aqc111: stop lying about skb->truesize
  - HID: amd_sfh: Handle "no sensors" in PM operations
  - wifi: mwl8k: initialize cmd->addr[] properly
  - scsi: qla2xxx: Fix debugfs output for fw_resource_count
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
  - selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect
  - kunit: Fix kthread reference
  - selftests: default to host arch for LLVM builds
  - selftests/resctrl: fix clang build failure: use LOCAL_HDRS
  - selftests/binderfs: use the Makefile's rules, not Make's implicit rules
  - libbpf: Fix error message in attach_kprobe_multi
  - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset
  - wifi: mt76: mt7603: fix tx queue of loopback packets
  - Revert "sh: Handle calling csum_partial with misaligned data"
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
  - wifi: ar5523: enable proper endpoint verification
  - net: give more chances to rcu in netdev_wait_allrefs_any()
  - pwm: sti: Simplify probe function using devm functions
  - pwm: sti: Prepare removing pwm_chip from driver data
  - tcp: avoid premature drops in tcp_add_backlog()
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches
  - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers
  - wifi: ath10k: populate board data for WCN3990
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search()
  - selftests/bpf: Fix a fd leak in error paths in open_netns
  - gfs2: do_xmote fixes
  - gfs2: finish_xmote cleanup
  - gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn
  - gfs2: Mark withdraws as unlikely
  - gfs2: Rename gfs2_lookup_{ simple => meta }
  - gfs2: Convert gfs2_internal_read to folios
  - gfs2: Get rid of gfs2_alloc_blocks generation parameter
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger()
  - dt-bindings: thermal: loongson,ls2k-thermal: Fix incorrect compatible definition
  - dt-bindings: thermal: loongson,ls2k-thermal: Add Loongson-2K0500 compatible
  - dt-bindings: thermal: loongson,ls2k-thermal: Fix binding check issues
  - thermal/drivers/tsens: Fix null pointer dereference
  - x86/purgatory: Switch to the position-independent small code model
  - scsi: hpsa: Fix allocation size for Scsi_Host private data
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - udp: Avoid call to compute_score on multiple sites
  - x86/pat: Fix W^X violation false-positives when running as Xen PV guest
  - x86/pat: Restructure _lookup_address_cpa()
  - x86/pat: Introduce lookup_address_in_pgd_attr()
  - cpufreq: exit() callback is optional
  - tcp: increase the default TCP scaling ratio
  - selftests/bpf: Fix umount cgroup2 error in test_sockmap
  - x86/boot/64: Clear most of CR4 in startup_64(), except PAE, MCE and LA57
  - gfs2: Fix "ignore unlock failures after withdraw"
  - gfs2: Don't forget to complete delayed withdraw
  - ACPI: disable -Wstringop-truncation
  - irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
  - irqchip/alpine-msi: Fix off-by-one in allocation error path
  - locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128()
  - ACPI: LPSS: Advertise number of chip selects via property
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
  - scsi: ufs: core: Perform read back after disabling interrupts
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
  - scsi: ufs: qcom: Perform read back after writing CGC enable
  - scsi: ufs: qcom: Perform read back after writing unipro mode
  - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
  - scsi: ufs: qcom: Perform read back after writing reset bit
  - bpf: prevent r10 register from being marked as precise
  - bpf: Pack struct bpf_fib_lookup
  - bpftool: Mount bpffs on provided dir instead of parent dir
  - wifi: carl9170: re-fix fortified-memset warning
  - dlm: fix user space lock decision to copy lvb
  - bitops: add missing prototype check
  - mlx5: stop warning for 64KB pages
  - mlx5: avoid truncating error message
  - qed: avoid truncating work queue length
  - enetc: avoid truncating error message
  - ACPI: Fix Generic Initiator Affinity _OSC bit
  - sched/fair: Add EAS checks before updating root_domain::overutilized
  - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask
  - wifi: iwlwifi: reconfigure TLC during HW restart
  - wifi: iwlwifi: mvm: select STA mask only for active links
  - wifi: iwlwifi: mvm: allocate STA links only for active links
  - wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok()
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - wifi: mt76: mt7915: workaround too long expansion sparse warnings
  - wifi: ath12k: use correct flag field for 320 MHz channels
  - bpftool: Fix missing pids during link show
  - wifi: ath11k: don't force enable power save on non-running vdevs
  - wifi: brcmfmac: pcie: handle randbuf allocation failure
  - wifi: ath10k: poll service ready message before failing
  - block: fix and simplify blkdevparts= cmdline parsing
  - lkdtm: Disable CFI checking for perms functions
  - soc: qcom: pmic_glink: Make client-lock non-sleeping
  - null_blk: Fix missing mutex_destroy() at module removal
  - soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
  - firmware: qcom: scm: Fix __scm and waitq completion variable initialization
  - soc: qcom: pmic_glink: notify clients about the current state
  - soc: qcom: pmic_glink: don't traverse clients list without a lock
  - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests
  - mm/userfaultfd: Do not place zeropages when zeropages are disallowed
  - io-wq: write next_work before dropping acct_lock
  - ARM: configs: sunxi: Enable DRM_DW_HDMI
  - io_uring: use the right type for work_llist empty check
  - s390/cio: fix tracepoint subchannel type field
  - crypto: x86/sha512-avx2 - add missing vzeroupper
  - crypto: x86/sha256-avx2 - add missing vzeroupper
  - crypto: x86/nh-avx2 - add missing vzeroupper
  - crypto: ccp - drop platform ifdef checks
  - parisc: add missing export of __cmpxchg_u8()
  - nilfs2: fix out-of-range warning
  - firmware: raspberrypi: Use correct device for DMA mappings
  - mm/slub, kunit: Use inverted data to corrupt kmem cache
  - openpromfs: finish conversion to the new mount API
  - nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists()
  - ksmbd: fix uninitialized symbol 'share' in smb2_tree_connect()
  - epoll: be better about file lifetimes
  - nvmet: fix nvme status code when namespace is disabled
  - nvmet-tcp: fix possible memory leak when tearing down a controller
  - nvme: cancel pending I/O if nvme controller is in terminal state
  - nvmet-auth: replace pr_debug() with pr_err() to report an error.
  - nvmet-auth: return the error code to the nvmet_auth_host_hash() callers
  - nvme: find numa distance only if controller has valid numa id
  - drm/amdkfd: Flush the process wq before creating a kfd_process
  - drm/amd/display: Disable seamless boot on 128b/132b encoding
  - drm/amd/display: Fix DC mode screen flickering on DCN321
  - drm/amd/display: Add VCO speed parameter for DCN31 FPU
  - drm/amd/display: Allocate zero bw after bw alloc enable
  - drm/amd/display: Add dtbclk access to dcn315
  - drm/amdgpu: Fix VRAM memory accounting
  - ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection
  - ASoC: da7219-aad: fix usage of device_get_named_child_node()
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list
  - softirq: Fix suspicious RCU usage in __do_softirq()
  - ALSA: emu10k1: make E-MU FPGA writes potentially more reliable
  - bpf, x86: Fix PROBE_MEM runtime load check
  - fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card
  - Input: xpad - add support for ASUS ROG RAIKIRI
  - KVM: selftests: Add test for uaccesses to non-existent vgic-v2 CPUIF
  - ASoC: rt715-sdca: volume step modification
  - ASoC: rt715: add vendor clear control register
  - ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config
  - regulator: vqmmc-ipq4019: fix module autoloading
  - regulator: qcom-refgen: fix module autoloading
  - ASoC: rt722-sdca: add headset microphone vrefo setting
  - ASoC: rt722-sdca: modify channel number to support 4 channels
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
  - ASoC: acp: Support microphone from device Acer 315-24p
  - ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3
  - ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot()
  - regulator: irq_helpers: duplicate IRQ name
  - ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too
  - sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU
  - selftests: sud_test: return correct emulated syscall value on RISC-V
  - drm/etnaviv: fix tx clock gating on some GC7000 variants
  - LoongArch: Lately init pmu after smp is online
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n
  - drm/amdgpu: Fix the ring buffer size for queue VM flush
  - drm/amdkfd: Add VRAM accounting for SVM migration
  - drm/amd/pm: Restore config space after reset
  - drm/amdgpu: Update BO eviction priorities
  - drm/amd/display: Set color_mgmt_changed to true on unsuspend
  - net: usb: qmi_wwan: add Telit FN920C04 compositions
  - HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled
  - dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class
  - wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon timestamp field
  - wifi: mac80211: don't use rate mask for scanning
  - KEYS: asymmetric: Add missing dependency on CRYPTO_SIG
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 440/460 G11.
  - ksmbd: ignore trailing slashes in share paths
  - ksmbd: avoid to send duplicate oplock break notifications
  - fs/ntfs3: Break dir enumeration if directory contents error
  - fs/ntfs3: Fix case when index is reused during tree transformation
  - fs/ntfs3: Taking DOS names into account during link counting
  - fs/ntfs3: Remove max link count info display during driver init
  - net: smc91x: Fix m68k kernel compilation for ColdFire CPU
  - net: lan966x: remove debugfs directory in probe() error path
  - net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
  - tools/nolibc/stdlib: fix memory error in realloc()
  - tools/latency-collector: Fix -Wformat-security compile warns
  - net: mana: Fix the extra HZ in mana_hwc_send_request
  - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already"
  - io_uring: fail NOP if non-zero op flags is passed in
  - Input: try trimming too long modalias strings
  - serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup
  - serial: 8250_bcm7271: use default_mux_rate if possible
  - tty: n_gsm: fix missing receive state reset after mode switch
  - selftests/ftrace: Fix BTFARG testcase to check fprobe is enabled correctly
  - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
  - !10398  BMA: Fix DMA reset problem and change the version
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !10358  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10344  CVE-2024-39471
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  - drm/amdgpu: add error handle to avoid out-of-bounds
  - !9904  ext4: improve buffered write with more than one blocks_per_folio
  - ext4: improve sub-polio check in ext4_iomap_write_begin()
  - iomap: add iomap_is_fully_dirty()
  - iomap: correct the dirty length in page mkwrite
  - iomap: advance the ifs allocation if we have more than one blocks per folio
  - iomap: support invalidating partial folios
  - iomap: correct the range of a partial dirty clear
  - !9533  net/mlx5: Add a timeout to acquire the command queue semaphore
  - net/mlx5: Add a timeout to acquire the command queue semaphore
  - !10317  improve dump_page() robustness
  - mm: improve dumping of mapcount and page_type
  - mm: add __dump_folio()
  - fs: improve dump_mapping() robustness
  - !9361  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9892  support for SMC-D loopback_lo feature
  - net/smc: enable the smc-lo on the x86 and arm64 platforms
  - net/smc: implement DMB-merged operations of loopback-ism
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged
  - net/smc: {at|de}tach sndbuf to peer DMB if supported
  - net/smc: add operations to merge sndbuf with peer DMB
  - net/smc: register loopback-ism into SMC-D device list
  - net/smc: ignore loopback-ism when dumping SMC-D devices
  - net/smc: mark optional smcd_ops and check for support when called
  - net/smc: implement DMB-related operations of loopback-ism
  - net/smc: implement ID-related operations of loopback-ism
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut
  - net/smc: decouple ism_client from SMC-D DMB registration
  - net/smc: change the term virtual ISM to Emulated-ISM
  - net/smc: fix incorrect SMC-D link group matching logic
  - net/smc: manage system EID in SMC stack instead of ISM driver
  - net/smc: support extended GID in SMC-D lgr netlink attribute
  - net/smc: compatible with 128-bits extended GID of virtual ISM device
  - net/smc: define a reserved CHID range for virtual ISM devices
  - net/smc: introduce virtual ISM device support feature
  - net/smc: support SMCv2.x supplemental features negotiation
  - net/smc: unify the structs of accept or confirm message for v1 and v2
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity
  - !10171  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - netrom: Fix a memory leak in nr_heartbeat_expiry()
  - !10312  bpf: Fix too early release of tcx_entry
  - bpf: Fix too early release of tcx_entry
  - !10170  x86: resctrl: Fix illegal access by the chips not having RDT
  - x86: resctrl: Fix illegal access by the chips not having RDT
  - !10311  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10254  fbdev: savage: Handle err return when savagefb_check_var failed
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - !10078  bpf: Set run context for rawtp test_run callback
  - bpf: Set run context for rawtp test_run callback
  - !10261  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10066  serial: imx: Introduce timeout when waiting on transmitter empty
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - !9971  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()

  ' for pr_err


