# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.25.0.101
changelog:
  - !1893 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1887 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1868 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1782 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1890 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - !1908  fix build error when setting CONFIG_HISI_PMU=y
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver
  - Revert "drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver"
  - Revert "drivers/perf: hisi: Add support for HiSilicon UC PMU driver"
  - Revert "perf: hisi: delete global enable pmu from xxx_write_counter()"
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1798 Backport 5.10.163 LTS patches from upstream
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1829 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
  - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
  - mptcp: use proper req destructor for IPv6
  - mptcp: dedicated request sock for subflow in v6
  - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
  - mptcp: mark ops structures as ro_after_init
  - serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way"
  - fsl_lpuart: Don't enable interrupts too early
  - ext4: don't set up encryption key during jbd2 transaction
  - ext4: disable fast-commit of encrypted dir operations
  - parisc: Align parisc MADV_XXX constants with all other architectures
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
  - efi: random: combine bootloader provided RNG seed with RNG protocol output
  - mbcache: Avoid nesting of cache->c_list_lock under bit locks
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
  - hfs/hfsplus: use WARN_ON for sanity check
  - selftests: set the BUILD variable to absolute path
  - ext4: don't allow journal inode to have encrypt flag
  - drm/i915/gvt: fix vgpu debugfs clean in remove
  - drm/i915/gvt: fix gvt debugfs destroy
  - riscv: uaccess: fix type of 0 variable on error in get_user()
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout
  - nvme: fix multipath crash caused by flush request when blktrace is enabled
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
  - udf: Fix extension of the last extent in the file
  - caif: fix memory leak in cfctrl_linkup_request()
  - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  - usb: rndis_host: Secure rndis_query check against int overflow
  - drivers/net/bonding/bond_3ad: return when there's no aggregator
  - perf tools: Fix resources leak in perf_data__open_dir()
  - netfilter: ipset: Rework long task execution when adding/deleting entries
  - netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  - gpio: sifive: Fix refcount leak in sifive_gpio_probe
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug
  - filelock: new helper: vfs_inode_has_locks
  - drm/meson: Reduce the FIFO lines held when AFBC is not used
  - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  - net: amd-xgbe: add missed tasklet_kill
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
  - net/mlx5: Avoid recovery in probe flows
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
  - vhost: fix range used in translate_desc()
  - vringh: fix range used in iotlb_translate()
  - vhost/vsock: Fix error handling in vhost_vsock_init()
  - nfc: Fix potential resource leaks
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
  - nfsd: shut down the NFSv4 state objects before the filecache
  - veth: Fix race with AF_XDP exposing old or uninitialized descriptors
  - vmxnet3: correctly report csum_level for encapsulated packet
  - drm/panfrost: Fix GEM handle creation ref-counting
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - ext4: use kmemdup() to replace kmalloc + memcpy
  - ext4: fix leaking uninitialized memory in fast-commit journal
  - ext4: fix various seppling typos
  - fs: ext4: initialize fsdata in pagecache_write()
  - ext4: use memcpy_to_page() in pagecache_write()
  - mm/highmem: Lift memcpy_[to|from]_page to core
  - ext4: correct inconsistent error msg in nojournal mode
  - ext4: goto right label 'failed_mount3a'
  - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
  - riscv/stacktrace: Fix stack output without ra on the stack top
  - ravb: Fix "failed to switch device to config mode" message during unbind
  - staging: media: tegra-video: fix device_node use after free
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
  - x86/kprobes: Convert to insn_decode()
  - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
  - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
  - media: s5p-mfc: Fix in register read and write for H264
  - media: s5p-mfc: Clear workbit to handle error condition
  - media: s5p-mfc: Fix to handle reference queue during finishing
  - x86/MCE/AMD: Clear DFR errors found in THR handler
  - x86/mce: Get rid of msr_ops
  - btrfs: replace strncpy() with strscpy()
  - perf/x86/intel/uncore: Clear attr_update properly
  - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure
  - ARM: renumber bits related to _TIF_WORK_MASK
  - drm/amdgpu: make display pinning more flexible (v2)
  - drm/amdgpu: handle polaris10/11 overlap asics (v2)
  - ext4: allocate extended attribute value in vmalloc area
  - ext4: avoid unaccounted block allocation when expanding inode
  - ext4: initialize quota before expanding inode in setproject ioctl
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path
  - ext4: avoid BUG_ON when creating xattrs
  - ext4: fix error code return to user-space in ext4_get_branch()
  - ext4: fix corruption when online resizing a 1K bigalloc fs
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
  - ext4: init quota for 'old.inode' in 'ext4_rename'
  - ext4: check and assert if marking an no_delete evicting inode dirty
  - ext4: fix reserved cluster accounting in __es_remove_extent()
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
  - ext4: silence the warning when evicting inode with dioread_nolock
  - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
  - drm/i915/dsi: fix VBT send packet port selection for dual link DSI
  - drm/connector: send hotplug uevent on connector cleanup
  - device_cgroup: Roll back to original exceptions after copy failure
  - parisc: led: Fix potential null-ptr-deref in start_task()
  - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - crypto: n2 - add missing hash statesize
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
  - ipmi: fix long wait in unload when IPMI disconnect
  - ASoC: jz4740-i2s: Handle independent FIFO flush bits
  - wifi: wilc1000: sdio: fix module autoloading
  - efi: Add iMac Pro 2017 to uefi skip cert quirk
  - md/bitmap: Fix bitmap chunk size overflow issues
  - rtc: ds1347: fix value written to century register
  - cifs: fix missing display of three mount options
  - cifs: fix confusing debug message
  - media: dvb-core: Fix double free in dvb_register_device()
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  - staging: media: tegra-video: fix chan->mipi value on error
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - tracing/hist: Fix wrong return value in parse_action_params()
  - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
  - ftrace/x86: Add back ftrace_expected for ftrace bug reports
  - perf/core: Call LSM hook after copying perf_event_attr
  - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
  - dm cache: set needs_check flag after aborting metadata
  - dm cache: Fix UAF in destroy()
  - dm clone: Fix UAF in clone_dtr()
  - dm integrity: Fix UAF in dm_integrity_dtr()
  - dm thin: Fix UAF in run_timer_softirq()
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
  - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
  - ALSA: patch_realtek: Fix Dell Inspiron Plus 16
  - cpufreq: Init completion before kobject_init_and_add()
  - PM/devfreq: governor: Add a private governor_data for governor
  - selftests: Use optional USERCFLAGS and USERLDFLAGS
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
  - ARM: ux500: do not directly dereference __iomem
  - btrfs: fix resolving backrefs for inline extent followed by prealloc
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
  - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
  - jbd2: use the correct print format
  - ktest.pl minconfig: Unset configs instead of just removing them
  - kest.pl: Fix grub2 menu handling for rebooting
  - soc: qcom: Select REMAP_MMIO for LLCC driver
  - media: stv0288: use explicitly signed char
  - rcu: Prevent lockdep-RCU splats on lock acquisition/release
  - torture: Exclude "NOHZ tick-stop error" from fatal errors
  - wifi: rtlwifi: 8192de: correct checking of IQK reload
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12
  - net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
  - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
  - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
  - kcsan: Instrument memcpy/memset/memmove with newer Clang
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
  - tpm: acpi: Call acpi_put_table() to fix memory leak
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
  - f2fs: should put a page when checking the summary info
  - mm, compaction: fix fast_isolate_around() to stay within boundaries
  - md: fix a crash in mempool_free
  - pnode: terminate at peers of source
  - ALSA: line6: fix stack overflow in line6_midi_transmit
  - ALSA: line6: correct midi status byte when receiving data from podxt
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount
  - pstore/zone: Use GFP_ATOMIC to allocate zone buffer
  - HID: plantronics: Additional PIDs for double volume key presses quirk
  - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  - powerpc/rtas: avoid scheduling in rtas_os_term()
  - powerpc/rtas: avoid device tree lookups in rtas_os_term()
  - objtool: Fix SEGFAULT
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue
  - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
  - ata: ahci: Fix PCS quirk application for suspend
  - nvme-pci: fix page size checks
  - nvme-pci: fix mempool alloc size
  - nvme-pci: fix doorbell buffer value endianness
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - cifs: fix oops during encryption
  - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
  - pwm: tegra: Fix 32 bit build
  - media: dvbdev: fix refcnt bug
  - media: dvbdev: fix build warning due to comments
  - gcov: add support for checksum field
  - regulator: core: fix deadlock on regulator enable
  - iio: adc128s052: add proper .data members in adc128_of_match table
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock
  - reiserfs: Add missing calls to reiserfs_security_free()
  - HID: mcp2221: don't connect hidraw
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode
  - usb: dwc3: core: defer probe on ulpi_read_id timeout
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
  - ALSA: usb-audio: add the quirk for KT0206 device
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
  - afs: Fix lost servers_outstanding count
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option()
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
  - LoadPin: Ignore the "contents" argument of the LSM hooks
  - ASoC: rt5670: Remove unbalanced pm_runtime_put()
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()
  - ASoC: wm8994: Fix potential deadlock
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()
  - ASoC: Intel: Skylake: Fix driver hang during shutdown
  - ALSA: hda: add snd_hdac_stop_streams() helper
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
  - hwmon: (jc42) Fix missing unlock on error in jc42_write()
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
  - clk: st: Fix memory leak in st_of_quadfs_setup()
  - media: si470x: Fix use-after-free in si470x_int_in_callback()
  - mmc: renesas_sdhi: better reset from HS400 mode
  - mmc: f-sdh30: Add quirks for broken timeout clock capability
  - regulator: core: fix use_count leakage when handling boot-on
  - libbpf: Avoid enum forward-declarations in public API in C++ mode
  - blk-mq: fix possible memleak when register 'hctx' failed
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
  - media: dvbdev: adopts refcnt to avoid UAF
  - media: dvb-frontends: fix leak of memory fw
  - ethtool: avoiding integer overflow in ethtool_phys_id()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - drm/amd/display: fix array index out of bound error in bios parser
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
  - drm/sti: Use drm_mode_copy()
  - drm/rockchip: Use drm_mode_copy()
  - drm/msm: Use drm_mode_copy()
  - s390/lcs: Fix return type of lcs_start_xmit()
  - s390/netiucv: Fix return type of netiucv_tx()
  - s390/ctcm: Fix return type of ctc{mp,}m_tx()
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback
  - igb: Do not free q_vector unless new one was allocated
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()
  - hamradio: baycom_epp: Fix return type of baycom_send_packet()
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
  - qed (gcc13): use u16 for fid to be big enough
  - ipmi: fix memleak when unload ipmi driver
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
  - wifi: ath9k: verify the expected usb_endpoints are present
  - brcmfmac: return error when getting invalid max_flowrings from dongle
  - drm/etnaviv: add missing quirks for GC300
  - hfs: fix OOB Read in __hfs_brec_find
  - acct: fix potential integer overflow in encode_comp_t()
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG
  - udf: Avoid double brelse() in udf_rename()
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
  - video: hyperv_fb: Avoid taking busy spinlock on panic path
  - arm64: make is_ttbrX_addr() noinstr-safe
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - myri10ge: Fix an error handling path in myri10ge_probe()
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module
  - mailbox: zynq-ipi: fix error handling while device_register() fails
  - skbuff: Account for tail adjustment during pull operations
  - openvswitch: Fix flow lookup to use unmasked key
  - selftests: devlink: fix the fd redirect in dummy_reporter_test
  - rtc: mxc_v2: Add missing clk_disable_unprepare()
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL
  - igc: Lift TAPRIO schedule restriction
  - igc: recalculate Qbv end_time by considering cycle time
  - igc: Add checking for basetime less than zero
  - igc: Use strict cycles for Qbv scheduling
  - igc: Enhance Qbv scheduling by using first flag bit
  - net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME
  - r6040: Fix kmemleak in probe and remove
  - nfc: pn533: Clear nfc_target before being used
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - net: macsec: fix net device access prior to holding a lock
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
  - NFSD: Remove spurious cb_setup_err tracepoint
  - rtc: pcf85063: fix pcf85063_clkout_control
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
  - netfilter: flowtable: really fix NAT IPv6 offload
  - powerpc/pseries/eeh: use correct API for error log size
  - powerpc/eeh: Drop redundant spinlock initialization
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()
  - remoteproc: qcom_q6v5_pas: detach power domains on remove
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
  - selftests/powerpc: Fix resource leaks
  - powerpc/hv-gpci: Fix hv_gpci event list
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()
  - powerpc/perf: callchain validate kernel stack pointer bounds
  - kbuild: refactor single builds of *.ko
  - kbuild: unify modules(_install) for in-tree and external modules
  - kbuild: remove unneeded mkdir for external modules_install
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
  - powerpc/xmon: Enable breakpoints on 8xx
  - cxl: Fix refcount leak in cxl_calc_capp_routing
  - powerpc/52xx: Fix a resource leak in an error handling path
  - macintosh/macio-adb: check the return value of ioremap()
  - macintosh: fix possible memory leak in macio_add_one_device()
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
  - iommu/amd: Fix pci device refcount leak in ppr_notifier()
  - rtc: pcf85063: Fix reading alarm
  - rtc: snvs: Allow a time difference on clock register read
  - rtc: cmos: Disable ACPI RTC event on removal
  - rtc: cmos: Rename ACPI-related functions
  - rtc: cmos: Eliminate forward declarations of some functions
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
  - rtc: cmos: fix build on non-ACPI platforms
  - rtc: cmos: Fix wake alarm breakage
  - rtc: cmos: Fix event handler registration ordering issue
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
  - pwm: tegra: Improve required rate calculation
  - include/uapi/linux/swab: Fix potentially missing __always_inline
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
  - iommu/sun50i: Fix flush size
  - iommu/sun50i: Fix R/W permission check
  - iommu/sun50i: Consider all fault sources for reset
  - iommu/sun50i: Fix reset release
  - RDMA/siw: Fix pointer cast warning
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info
  - HSI: omap_ssi_core: Fix error handling in ssi_init()
  - perf symbol: correction while adjusting symbol
  - perf trace: Handle failure when trace point folder is missed
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
  - perf trace: Return error if a system call doesn't exist
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register()
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
  - fbdev: vermilion: decrease reference count in error path
  - fbdev: via: Fix error in via_core_init()
  - fbdev: pm2fb: fix missing pci_disable_device()
  - fbdev: ssd1307fb: Drop optional dependency
  - thermal/drivers/imx8mm_thermal: Validate temperature range
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
  - tracing/hist: Fix issue of losting command info in error_log
  - usb: storage: Add check for kcalloc
  - i2c: mux: reg: check return value after calling platform_get_resource()
  - gpiolib: cdev: fix NULL-pointer dereferences
  - gpiolib: Get rid of redundant 'else'
  - vme: Fix error not catched in fake_init()
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
  - staging: rtl8192u: Fix use after free in ieee80211_rx()
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
  - chardev: fix error handling in cdev_device_add()
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
  - drivers: mcb: fix resource leak in mcb_probe()
  - usb: gadget: f_hid: fix refcount leak on error path
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev
  - usb: gadget: f_hid: optional SETUP/SET_REPORT mode
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
  - iio: adis: add '__adis_enable_irq()' implementation
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace
  - iio: adis: stylistic changes
  - iio: adis: handle devices that cannot unmask the drdy pin
  - iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
  - ocxl: fix pci device refcount leak when calling get_function_0()
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu()
  - test_firmware: fix memory leak in test_firmware_init()
  - serial: sunsab: Fix error handling in sunsab_init()
  - serial: altera_uart: fix locking in polling mode
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars()
  - serial: pch: Fix PCI device refcount leak in pch_request_dma()
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add
  - usb: fotg210-udc: Fix ages old endianness issues
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration
  - vfio: platform: Do not pass return buffer to ACPI _RST method
  - class: fix possible memory leak in __class_register()
  - serial: tegra: Read DMA status before terminating
  - drivers: dio: fix possible memory leak in dio_init()
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
  - hwrng: geode - Fix PCI device refcount leak
  - hwrng: amd - Fix PCI device refcount leak
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
  - orangefs: Fix sysfs not cleanup when dev init failed
  - RDMA/srp: Fix error return code in srp_parse_options()
  - RDMA/hfi1: Fix error return code in parse_platform_config()
  - riscv/mm: add arch hook arch_clear_hugepage_flags
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
  - crypto: amlogic - Remove kcalloc without check
  - RDMA/nldev: Fix failure to send large messages
  - f2fs: avoid victim selection from previous victim section
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
  - scsi: snic: Fix possible UAF in snic_tgt_create()
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
  - scsi: ipr: Fix WARNING in ipr_init()
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
  - scsi: fcoe: Fix possible name leak when device_register() fails
  - scsi: scsi_debug: Fix a warning in resp_report_zones()
  - scsi: scsi_debug: Fix a warning in resp_verify()
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host()
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - padata: Fix list iterator in padata_do_serial()
  - padata: Always leave BHs disabled when running ->parallel()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one()
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function
  - RDMA/hfi: Decrease PCI device reference count in error path
  - PCI: Check for alloc failure in pci_request_irq()
  - crypto: cryptd - Use request context instead of stack for sub-request
  - crypto: ccree - Remove debugfs when platform_driver_register failed
  - scsi: scsi_debug: Fix a warning in resp_write_scat()
  - RDMA/siw: Set defined status for work completion with undefined status
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
  - RDMA/siw: Fix immediate work request flush to completion queue
  - f2fs: fix normal discard process
  - apparmor: Fix memleak in alloc_ns()
  - crypto: rockchip - rework by using crypto_engine
  - crypto: rockchip - delete unneeded variable initialization
  - crypto: rockchip - remove non-aligned handling
  - crypto: rockchip - better handle cipher key
  - crypto: rockchip - add fallback for ahash
  - crypto: rockchip - add fallback for cipher
  - crypto: rockchip - do not store mode globally
  - crypto: rockchip - do not do custom power management
  - f2fs: Fix the race condition of resize flag between resizefs
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
  - RDMA/core: Fix order of nldev_exit call
  - PCI: dwc: Fix n_fts[] array overrun
  - apparmor: Use pointer to struct aa_label for lbs_cred
  - scsi: core: Fix a race between scsi_done() and scsi_timeout()
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
  - crypto: sun8i-ss - use dma_addr instead u32
  - apparmor: Fix abi check to include v8 abi
  - apparmor: fix lockdep warning when removing a namespace
  - apparmor: fix a memleak in multi_transaction_new()
  - stmmac: fix potential division by 0
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
  - sctp: sysctl: make extra pointers netns aware
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context
  - net: lan9303: Fix read error execution path
  - can: tcan4x5x: Remove invalid write in clear_interrupts
  - net: amd-xgbe: Check only the minimum speed for active/passive cables
  - net: amd-xgbe: Fix logic around active and passive cables
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock
  - net: farsync: Fix kmemleak when rmmods farsync
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
  - net: defxx: Fix missing err handling in dfx_init()
  - net: vmw_vsock: vmci: Check memcpy_from_msg()
  - clk: socfpga: Fix memory leak in socfpga_gate_init()
  - clk: socfpga: use clk_hw_register for a5/c5
  - clk: socfpga: clk-pll: Remove unused variable 'rc'
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
  - wifi: rtl8xxxu: Fix the channel width reporting
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll()
  - media: coda: Add check for kmalloc
  - media: coda: Add check for dcoda_iram_alloc
  - media: c8sectpfe: Add of_node_put() when breaking out of loop
  - mmc: mmci: fix return value check of mmc_add_host()
  - mmc: wbsd: fix return value check of mmc_add_host()
  - mmc: via-sdmmc: fix return value check of mmc_add_host()
  - mmc: meson-gx: fix return value check of mmc_add_host()
  - mmc: omap_hsmmc: fix return value check of mmc_add_host()
  - mmc: atmel-mci: fix return value check of mmc_add_host()
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host()
  - mmc: vub300: fix return value check of mmc_add_host()
  - mmc: toshsd: fix return value check of mmc_add_host()
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
  - mmc: pxamci: fix return value check of mmc_add_host()
  - mmc: mxcmmc: fix return value check of mmc_add_host()
  - mmc: moxart: fix return value check of mmc_add_host()
  - mmc: alcor: fix return value check of mmc_add_host()
  - NFSv4.x: Fail client initialisation if state manager thread can't run
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
  - media: saa7164: fix missing pci_disable_device()
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume
  - hwmon: (jc42) Convert register access and caching to regmap/regcache
  - regulator: core: fix resource leak in regulator_register()
  - configfs: fix possible memory leak in configfs_create_dir()
  - hsr: Synchronize sequence number updates.
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr.
  - hsr: Disable netpoll.
  - net: hsr: generate supervision frame without HSR/PRP tag
  - hsr: Add a rcu-read lock to hsr_forward_skb().
  - clk: qcom: clk-krait: fix wrong div2 functions
  - regulator: core: fix module refcount leak in set_supply()
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
  - wifi: mac80211: fix memory leak in ieee80211_if_add()
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
  - bonding: uninitialized variable in bond_miimon_inspect()
  - netfilter: conntrack: set icmpv6 redirects as RELATED
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
  - ASoC: mediatek: mt8173: Fix debugfs registration for components
  - wifi: iwlwifi: mvm: fix double free on tx path.
  - ALSA: asihpi: fix missing pci_disable_device()
  - NFS: Fix an Oops in nfs_d_automount()
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
  - NFSv4.2: Fix initialisation of struct nfs4_label
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
  - media: dvb-core: Fix ignored return value in dvb_register_frontend()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - clk: imx: replace osc_hdmi with dummy
  - media: imon: fix a race condition in send_packet()
  - media: vimc: Fix wrong function called when vimc_init() fails
  - ASoC: qcom: Add checks for devm_kcalloc
  - drbd: fix an invalid memory access caused by incorrect use of list iterator
  - mtd: maps: pxa2xx-flash: fix memory leak in probe
  - bonding: fix link recovery in mode 2 when updelay is nonzero
  - drm/amdgpu: fix pci device refcount leak
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
  - regulator: core: use kfree_const() to free space conditionally
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
  - HID: hid-sensor-custom: set fixed size for custom attributes
  - bpf: Move skb->len == 0 checks into __bpf_redirect
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
  - media: videobuf-dma-contig: use dma_mmap_coherent
  - media: platform: exynos4-is: Fix error handling in fimc_md_init()
  - media: solo6x10: fix possible memory leak in solo_sysfs_init()
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
  - Input: elants_i2c - properly handle the reset GPIO when power is off
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref
  - wifi: ath10k: Fix return value in ath10k_pci_init()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - integrity: Fix memory leakage in keyring allocation error path
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
  - ASoC: pxa: fix null-pointer dereference in filter()
  - drm/mediatek: Modify dpi power on/off sequence.
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
  - media: camss: Clean up received buffers on failed start of streaming
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC
  - mtd: Fix device name leak when register device failed in add_mtd_device()
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
  - bpf: propagate precision across all frames, not just the last one
  - bpf: Check the other end of slot_type for STACK_SPILL
  - bpf: propagate precision in ALU/ALU64 operations
  - media: platform: exynos4-is: fix return value check in fimc_md_probe()
  - bpf: Fix slot type check in check_stack_write_var_off
  - drm/msm/hdmi: drop unused GPIO support
  - drm/msm/hdmi: switch to drm_bridge_connector
  - ima: Fix fall-through warnings for Clang
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
  - spi: Update reference to struct spi_controller
  - clk: renesas: r9a06g032: Repair grave increment error
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming
  - can: kvaser_usb: Add struct kvaser_usb_busparams
  - can: kvaser_usb_leaf: Fix bogus restart events
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping
  - can: kvaser_usb_leaf: Fix improved state not being reported
  - can: kvaser_usb_leaf: Set Warning state even without bus errors
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
  - can: kvaser_usb: do not increase tx statistics when sending error message frames
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals
  - media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev
  - venus: pm_helpers: Fix error check in vcodec_domains_get()
  - media: i2c: ad5820: Fix error path
  - media: coda: jpeg: Add check for kmalloc
  - pata_ipx4xx_cf: Fix unsigned comparison with less than zero
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
  - rapidio: devices: fix missing put_device in mport_cdev_open
  - hfs: Fix OOB Write in hfs_asc2mac
  - relay: fix type mismatch when allocating memory in relay_create_buf()
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
  - rapidio: fix possible UAF when kfifo_alloc() fails
  - fs: sysv: Fix sysv_nblocks() returns wrong value
  - MIPS: OCTEON: warn only once if deprecated link status is being used
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
  - PM: runtime: Do not call __rpm_callback() from rpm_idle()
  - PM: runtime: Improve path in rpm_idle() when no callback
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
  - x86/xen: Fix memory leak in xen_init_lock_cpu()
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
  - cpu/hotplug: Make target_store() a nop when target == state
  - futex: Resend potentially swallowed owner death notification
  - futex: Move to kernel/futex/
  - clocksource/drivers/sh_cmt: Access registers according to spec
  - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
  - rapidio: rio: fix possible name leak in rio_register_mport()
  - rapidio: fix possible name leaks when rio_add_device() fails
  - ocfs2: fix memory leak in ocfs2_mount_volume()
  - ocfs2: rewrite error handling of ocfs2_fill_super
  - ocfs2: ocfs2_mount_volume does cleanup job before return error
  - debugfs: fix error when writing negative value to atomic_t debugfs file
  - docs: fault-injection: fix non-working usage of negative values
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
  - genirq/irqdesc: Don't try to remove non-existing sysfs files
  - nfsd: don't call nfsd_file_put from client states seqfile display
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
  - PNP: fix name memory leak in pnp_alloc_dev()
  - selftests/efivarfs: Add checking of the test return value
  - MIPS: vpe-cmp: fix possible memory leak while module exiting
  - MIPS: vpe-mt: fix possible memory leak while module exiting
  - ocfs2: fix memory leak in ocfs2_stack_glue_init()
  - lib/fonts: fix undefined behavior in bit shift for get_default_font
  - proc: fixup uptime selftest
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - platform/x86: huawei-wmi: fix return value calculation
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init
  - perf: Fix possible memleak in pmu_dev_alloc()
  - selftests/ftrace: event_triggers: wait longer for test_event_enable
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
  - fs: don't audit the capability check in simple_xattr_list()
  - PM: hibernate: Fix mistake in kerneldoc comment
  - alpha: fix syscall entry in !AUDUT_SYSCALL case
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - sched/uclamp: Fix relationship between uclamp and migration margin
  - sched/fair: Cleanup task_util and capacity type
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - ARM: mmp: fix timer_read delay
  - pstore/ram: Fix error return code in ramoops_probe()
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
  - ARM: dts: turris-omnia: Add switch port 6 node
  - ARM: dts: turris-omnia: Add ethernet aliases
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
  - arm64: dts: mt2712e: Fix unit address for pinctrl node
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - arm: dts: spear600: Fix clcd interrupt
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
  - soc: qcom: apr: make code more reuseable
  - soc: qcom: llcc: make irq truly optional
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
  - arm64: dts: qcom: sdm630: fix UART1 pin bias
  - ARM: dts: qcom: apq8064: fix coresight compatible
  - arm64: dts: qcom: msm8996: fix GPU OPP table
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
  - usb: musb: remove extra check in musb_gadget_vbus_draw
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.26.0.102
changelog:
  - !2004 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !1628 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1819 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1981 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1386 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - !1929 [sync] PR-1920: net/hinic3: Add DPU PF device type support.
  - net/hinic3: Add DPU PF device type support.
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.27.0.103
changelog:
  - !2145 [sync] PR-2126:  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2110 [sync] PR-2090:  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2103 [sync] PR-2092:  netfilter: nf_tables: skip bound chain on rule flush
  - !2112 [sync] PR-2085:  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2104 [sync] PR-2097:  Fixed 4 CVEs of the ksmbd
  - !2078 [sync] PR-2065:  dm: switch to precise io accounting
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - !1927 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - !2008 [sync] PR-1928: RDMA/hns Bugfix from mainline linux
  - dm: switch to precise io accounting
  - !2059 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2049 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request
  - RDMA/hns: Remove the num_qpc_timer variable


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.28.0.105
changelog:
  - !2215 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2241 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2244 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2235 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
  - !2233 [sync] PR-2086:  fix CVE-2023-20588
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1879 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2172 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2083 [sync] PR-2009: Fix errors related to bond for RDMA/hns
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2151 [sync] PR-2095:  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - RDMA/hns: Fix missing cleanup when bond_grp becomes invalid
  - RDMA/hns: Fix the device loss after unbinding RoCE bond resource slave
  - RDMA/hns: Fix wild pointer error of RoCE bonding when rmmod hns3
  - RDMA/hns: Add functions to obtain netdev and bus_num from an hr_dev
  - RDMA/hns: Fix a memory leak error when bond clear failed
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.29.0.106
changelog:
  - !2393  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2386  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2380 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !1939 [sync] PR-1771: Backport 5.10.164 - 5.10.165  LTS patches from upstream.
  - !2320 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !2311 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !2279 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2125 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !2187  nvme-pci: fix timeout request state check
  - !2251 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - nvme-pci: fix timeout request state check
  - nvme-pci: fix DMA direction of unmapping integrity data
  - io_uring/rw: remove leftover debug statement
  - io_uring/rw: ensure kiocb_end_write() is always called
  - io_uring: fix double poll leak on repolling
  - io_uring: Clean up a false-positive warning from GCC 9.3.0
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
  - Bluetooth: hci_qca: Fixed issue during suspend
  - Bluetooth: hci_qca: check for SSR triggered flag while suspend
  - Bluetooth: hci_qca: Wait for SSR completion during suspend
  - soc: qcom: apr: Make qcom,protection-domain optional again
  - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
  - tracing: Use alignof__(struct {type b;}) instead of offsetof()
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
  - Revert "drm/amdgpu: make display pinning more flexible (v2)"
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Execute runtime services from a dedicated stack
  - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
  - drm/amd/display: Calculate output_color_space after pixel encoding adjustment
  - drm/amd/display: Fix set scaling doesn's work
  - drm/i915: re-disable RC6p on Sandy Bridge
  - mei: me: add meteor lake point M DID
  - gsmi: fix null-deref in gsmi_get_variable
  - serial: atmel: fix incorrect baudrate setup
  - dmaengine: tegra210-adma: fix global intr clear
  - serial: pch_uart: Pass correct sg to dma_unmap_sg()
  - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
  - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
  - usb: gadget: g_webcam: Send color matching descriptor per frame
  - usb: typec: altmodes/displayport: Fix pin assignment calculation
  - usb: typec: altmodes/displayport: Add pin assignment helper
  - usb: host: ehci-fsl: Fix module alias
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id
  - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
  - thunderbolt: Use correct function to calculate maximum USB3 link rate
  - cifs: do not include page data when checking signature
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref
  - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
  - comedi: adv_pci1760: Fix PWM instruction handling
  - usb: core: hub: disable autosuspend for TI TUSB8041
  - misc: fastrpc: Fix use-after-free race condition for maps
  - misc: fastrpc: Don't remove map on creater_process and device_release
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
  - staging: vchiq_arm: fix enum vchiq_status return types
  - USB: serial: option: add Quectel EM05CN modem
  - USB: serial: option: add Quectel EM05CN (SG) modem
  - USB: serial: option: add Quectel EC200U modem
  - USB: serial: option: add Quectel EM05-G (RS) modem
  - USB: serial: option: add Quectel EM05-G (CS) modem
  - USB: serial: option: add Quectel EM05-G (GR) modem
  - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
  - usb: acpi: add helper to check port lpm capability using acpi _DSM
  - xhci: Add a flag to disable USB3 lpm on a xhci root port level.
  - xhci: Add update_hub_device override for PCI xHCI hosts
  - xhci: Fix null pointer dereference when host dies
  - usb: xhci: Check endpoint is valid before dereferencing it
  - xhci-pci: set the dma max_seg_size
  - io_uring/rw: defer fsnotify calls to task context
  - io_uring: do not recalculate ppos unnecessarily
  - io_uring: update kiocb->ki_pos at execution time
  - io_uring: remove duplicated calls to io_kiocb_ppos
  - io_uring: ensure that cached task references are always put on exit
  - io_uring: fix CQ waiting timeout handling
  - io_uring: lock overflowing for IOPOLL
  - io_uring: check for valid register opcode earlier
  - io_uring: fix async accept on O_NONBLOCK sockets
  - io_uring: allow re-poll if we made progress
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
  - io_uring: add flag for disabling provided buffer recycling
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
  - io_uring: improve send/recv error handling
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
  - Bluetooth: hci_qca: Wait for timeout during suspend
  - drm/i915/gt: Reset twice
  - ALSA: hda/realtek - Turn on power early
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - nilfs2: fix general protection fault in nilfs_btree_insert()
  - zonefs: Detect append writes at invalid locations
  - Add exception protection processing for vd in axi_chan_handle_err function
  - wifi: mac80211: sdata can be NULL during AMPDU start
  - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
  - f2fs: let's avoid panic if extent_tree is not created
  - x86/asm: Fix an assembler warning with current binutils
  - btrfs: always report error in run_one_delayed_ref()
  - RDMA/srp: Move large values to a new enum for gcc13
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
  - tools/virtio: initialize spinlocks in vring_test.c
  - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID
  - pNFS/filelayout: Fix coalescing test for single DS
  - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  - io_uring/io-wq: only free worker if it was allocated for creation
  - io_uring/io-wq: free worker if task_work creation is canceled
  - drm/virtio: Fix GEM handle creation UAF
  - efi: fix NULL-deref in init error path
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - arm64: atomics: remove LL/SC trampolines
  - arm64: atomics: format whitespace consistently
  - x86/resctrl: Fix task CLOSID/RMID update race
  - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI
  - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID
  - Documentation: KVM: add API issues section
  - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
  - iommu/mediatek-v1: Add error handle for mtk_iommu_probe
  - mm: Always release pages to the buddy allocator in memblock_free_late().
  - net/mlx5e: Don't support encap rules with gbp option
  - net/mlx5: Fix ptp max frequency adjustment range
  - net/sched: act_mpls: Fix warning during failed attribute validation
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
  - hvc/xen: lock console list traversal
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
  - octeontx2-af: Map NIX block from CGX connection
  - octeontx2-af: Update get/set resource count functions
  - tipc: fix unexpected link reset due to discovery messages
  - ASoC: wm8904: fix wrong outputs volume after power reactivation
  - regulator: da9211: Use irq handler when ready
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period()
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
  - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ext4: fix uninititialized value in 'ext4_evict_inode'
  - usb: ulpi: defer ulpi_register on ulpi_read_id timeout
  - xhci: Prevent infinite loop in transaction errors recovery for streams
  - xhci: move and rename xhci_cleanup_halted_endpoint()
  - xhci: store TD status in the td struct instead of passing it along
  - xhci: move xhci_td_cleanup so it can be called by more functions
  - xhci: Add xhci_reset_halted_ep() helper function
  - xhci: adjust parameters passed to cleanup_halted_endpoint()
  - xhci: get isochronous ring directly from endpoint structure
  - xhci: Avoid parsing transfer events several times
  - clk: imx: imx8mp: add shared clk gate for usb suspend clk
  - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  - clk: imx8mp: add clkout1/2 support
  - clk: imx8mp: Add DISP2 pixel clock
  - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options
  - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands
  - bus: mhi: host: Fix race between channel preparation and M0 event
  - ixgbe: fix pci device refcount leak
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe
  - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
  - drm/msm/adreno: Make adreno quirks not overwrite each other
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
  - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
  - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
  - s390/kexec: fix ipl report address for kdump
  - perf auxtrace: Fix address filter duplicate symbol selection
  - docs: Fix the docs build with Sphinx 6.0
  - efi: tpm: Avoid READ_ONCE() for accessing the event log
  - KVM: arm64: Fix S1PTW handling on RO memslots
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.30.0.107
changelog:
  - !2422 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - !2398 Backport 5.10.166 - 5.10.167 LTS patches from upstream.
  - net/sched: Retire rsvp classifier
  - !1122  ext4: delete redundant uptodate check for buffer
  - !2368 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - net: fix NULL pointer in skb_segment_list
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - blk-cgroup: fix missing pd_online_fn() while activating policy
  - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
  - ARM: dts: vf610: Fix pca9548 i2c-mux node names
  - ARM: dts: imx: Fix pca9547 i2c-mux node name
  - clk: Fix pointer casting to prevent oops in devm_clk_release()
  - perf/x86/amd: fix potential integer overflow on shift of a int
  - netfilter: conntrack: unify established states for SCTP paths
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - block: fix and cleanup bio_check_ro
  - Revert "selftests/ftrace: Update synthetic event syntax errors"
  - nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode"
  - tools: gpio: fix -c option of gpio-event-mon
  - net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH
  - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  - net: ravb: Fix possible hang if RIS2_QFF1 happen
  - netrom: Fix use-after-free of a listening socket.
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - net: fix UaF in netns ops registration error path
  - netlink: prevent potential spectre v1 gadgets
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro
  - units: Add SI metric prefix definitions
  - units: Add Watt units
  - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  - EDAC/device: Respect any driver-supplied workqueue polling value
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  - thermal: intel: int340x: Protect trip temperature from concurrent updates
  - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  - ftrace/scripts: Update the instructions for ftrace-bisect.sh
  - trace_events_hist: add check for return value of 'create_hist_field'
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - module: Don't wait for GOING modules
  - scsi: hpsa: Fix allocation size for scsi_host_alloc()
  - xhci: Set HCD flag to defer primary roothub registration
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - docs: Fix path paste-o for /sys/kernel/warn_count
  - panic: Expose "warn_count" to sysfs
  - panic: Introduce warn_limit
  - panic: Consolidate open-coded panic_on_warn checks
  - panic: Separate sysctl logic from CONFIG_SMP
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate
  - kasan: no need to unset panic_on_warn in end_report()
  - ubsan: no need to unset panic_on_warn in ubsan_epilogue()
  - panic: unset panic_on_warn inside panic()
  - kernel/panic: move panic sysctls to its own file
  - fs: reiserfs: remove useless new_opts in reiserfs_remount
  - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID"
  - lockref: stop doing cpu_relax in the cmpxchg loop
  - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  - spi: spidev: remove debug messages that access spidev->spi without locking
  - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  - cpufreq: armada-37xx: stop using 0 as NULL pointer
  - s390/debug: add _ASM_S390_ prefix to header guard
  - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  - ASoC: fsl_micfil: Correct the number of steps on SX controls
  - kcsan: test: don't put the expect array on the stack
  - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  - tcp: fix rate_app_limited to default to 1
  - net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  - driver core: Fix test_async_probe_init saves device in wrong array
  - w1: fix WARNING after calling w1_process()
  - w1: fix deadloop in __w1_remove_master_device()
  - tcp: avoid the lookup process failing to get sk in ehash table
  - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()
  - HID: betop: check shape of output reports
  - l2tp: prevent lockdep issue in l2tp_tunnel_register()
  - net: macb: fix PTP TX timestamp failure due to packet padding
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - drm/panfrost: fix GENERIC_ATOMIC64 dependency
  - net: mlx5: eliminate anonymous module_init & module_exit
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - HID: revert CHERRY_MOUSE_000C quirk
  - net: stmmac: fix invalid call to mdiobus_get_phy()
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: usb: sr9700: Handle negative len
  - l2tp: close all race conditions in l2tp_tunnel_register()
  - l2tp: convert l2tp_tunnel_list to idr
  - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  - net: nfc: Fix use-after-free in local_cleanup()
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - amd-xgbe: Delay AN timeout during KR training
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  - phy: ti: fix Kconfig warning and operator precedence
  - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  - affs: initialize fsdata in affs_truncate()
  - IB/hfi1: Remove user expected buffer invalidate race
  - IB/hfi1: Immediately remove invalid memory from hardware
  - IB/hfi1: Fix expected receive setup error exit issues
  - IB/hfi1: Reserve user expected TIDs
  - IB/hfi1: Reject a zero-length user expected buffer
  - RDMA/core: Fix ib block iterator counter overflow
  - tomoyo: fix broken dependency on *.conf.default
  - firmware: arm_scmi: Harden shared memory access in fetch_notification
  - firmware: arm_scmi: Harden shared memory access in fetch_response
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - ARM: imx: add missing of_node_put()
  - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  - ARM: dts: imx7d-pico: Use 'clock-frequency'
  - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
  - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  - clk: Provide new devm_clk helpers for prepared and enabled clocks
  - clk: generalize devm_clk_get() a bit
  - sdei_watchdog: Avoid exception during sdei handler
  - ext4: delete redundant uptodate check for buffer


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.31.0.108
changelog:
  - !2680 [sync] PR-2390: Backport 5.10.174 -  5.10.175 LTS patches from upstream.
  - !2692 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
  - !2375 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
  - !2639 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
  - net: xfrm: Fix xfrm_address_filter OOB read
  - !2533 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
  - !2526 [sync] PR-2440:  netfilter: xt_u32: validate user space input
  - !2534 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
  - !2529 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
  - !2660 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
  - s390/dasd: add missing discipline function
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper
  - KVM: nVMX: Don't use Enlightened MSR Bitmap for L3
  - UML: define RUNTIME_DISCARD_EXIT
  - sh: define RUNTIME_DISCARD_EXIT
  - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
  - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
  - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
  - arch: fix broken BuildID for arm64 and riscv
  - ext4: block range must be validated before use in ext4_mb_clear_bb()
  - ext4: add strict range checks while freeing blocks
  - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid()
  - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb()
  - drm/i915: Don't use BAR mappings for ring buffers with LLC
  - skbuff: Fix nfct leak on napi stolen
  - media: rc: gpio-ir-recv: add remove function
  - media: ov5640: Fix analogue gain control
  - scripts: handle BrokenPipeError for python scripts
  - PCI: Add SolidRun vendor ID
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields
  - alpha: fix R_ALPHA_LITERAL reloc for large modules
  - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
  - MIPS: Fix a compilation issue
  - block, bfq: fix uaf for bfqq in bic_set_bfqq()
  - block, bfq: replace 0/1 with false/true in bic apis
  - block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
  - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
  - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
  - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
  - ext4: Fix deadlock during directory rename
  - RISC-V: Don't check text_mutex during stop_machine
  - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
  - SUNRPC: Fix a server shutdown leak
  - net/smc: fix fallback failed while sendmsg with fastopen
  - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
  - scsi: megaraid_sas: Update max supported LD IDs to 240
  - net: ethernet: mtk_eth_soc: fix RX data corruption issue
  - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
  - netfilter: tproxy: fix deadlock due to missing BH disable
  - netfilter: ctnetlink: revert to dumping mark regardless of event type
  - bnxt_en: Avoid order-5 memory allocation for TPA data
  - net: phylib: get rid of unnecessary locking
  - net: stmmac: add to set device wake up flag when stmmac init phy
  - net: caif: Fix use-after-free in cfusbl_device_notify()
  - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver
  - net: usb: lan78xx: Remove lots of set but unused 'ret' variables
  - selftests: nft_nat: ensuring the listening side is up before starting the client
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
  - powerpc: dts: t1040rdb: fix compatible string for Rev A boards
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
  - bgmac: fix *initial* chip reset to support BCM5358
  - drm/msm/a5xx: fix context faults during ring switch
  - drm/msm/a5xx: fix the emptyness check in the preempt code
  - drm/msm: Document and rename preempt_lock
  - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
  - drm/msm: Fix potential invalid ptr free
  - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
  - drm/nouveau/kms/nv50-: remove unused functions
  - ext4: Fix possible corruption when moving a directory
  - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
  - riscv: Add header include guards to insn.h
  - riscv: Avoid enabling interrupts in die()
  - RISC-V: Avoid dereferening NULL regs in die()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - iommu/vt-d: Fix PASID directory pointer coherency
  - iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry()
  - irqdomain: Fix mapping-creation race
  - irqdomain: Refactor __irq_domain_alloc_irqs()
  - irqdomain: Look for existing mapping only once
  - irq: Fix typos in comments
  - udf: Fix off-by-one error when discarding preallocation
  - nfc: change order inside nfc_se_io error path
  - ext4: zero i_disksize when initializing the bootloader inode
  - ext4: fix WARNING in ext4_update_inline_data
  - ext4: move where set the MAY_INLINE_DATA flag is set
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - ext4: fix cgroup writeback accounting with fs-layer encryption
  - drm/connector: print max_requested_bpc in state debugfs
  - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17
  - fork: allow CLONE_NEWTIME in clone3 flags
  - fs: prevent out-of-bounds array speculation when closing a file descriptor
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
  - !2674 [22.03-LTS-SP2]Backport 5.10.173 LTS patches from upstream.
  - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
  - scsi: mpt3sas: Remove usage of dma_get_required_mask() API
  - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix
  - scsi: mpt3sas: Don't change DMA mask while reallocating pools
  - Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()"
  - media: uvcvideo: Fix race condition with usb_kill_urb
  - media: uvcvideo: Provide sync and async uvc_ctrl_status_event
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback
  - drm/display/dp_mst: Fix down message handling after a packet reception error
  - drm/display/dp_mst: Fix down/up message handling after sink disconnect
  - net: tls: avoid hanging tasks on the tx_lock
  - soundwire: cadence: Drain the RX FIFO after an IO timeout
  - soundwire: cadence: Remove wasted space in response_buf
  - phy: rockchip-typec: Fix unsigned comparison with less than zero
  - kernel/fail_function: fix memory leak with using debugfs_lookup()
  - PCI: Take other bus devices into account when distributing resources
  - PCI: Align extra resources for hotplug bridges properly
  - usb: gadget: uvc: Make bSourceID read/write
  - usb: uvc: Enumerate valid values for color matching
  - USB: ene_usb6250: Allocate enough memory for full object
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()
  - tools/iio/iio_utils:fix memory leak
  - mei: bus-fixup:upon error print return values of send and receive
  - serial: sc16is7xx: setup GPIO controller later in probe
  - tty: serial: fsl_lpuart: disable the CTS when send break signal
  - staging: emxx_udc: Add checks for dma_alloc_coherent()
  - media: uvcvideo: Silence memcpy() run-time false positive warnings
  - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
  - media: uvcvideo: Handle errors from calls to usb_string
  - media: uvcvideo: Handle cameras with invalid descriptors
  - IB/hfi1: Update RMT size calculation
  - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
  - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
  - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
  - thermal: intel: quark_dts: fix error pointer dereference
  - ASoC: zl38060 add gpiolib dependency
  - ASoC: zl38060: Remove spurious gpiolib select
  - ASoC: adau7118: don't disable regulators on device unbind
  - scsi: ipr: Work around fortify-string warning
  - rtc: sun6i: Always export the internal oscillator
  - tcp: tcp_check_req() can be called from process context
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible
  - net/sched: act_sample: fix action bind logic
  - nfc: fix memory leak of se_io context in nfc_genl_se_io
  - net/mlx5: Geneve, Fix handling of Geneve object id as error code
  - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
  - 9p/xen: fix connection sequence
  - 9p/xen: fix version parsing
  - net: fix __dev_kfree_skb_any() vs drop monitor
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
  - netfilter: ebtables: fix table blob use-after-free
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory
  - watchdog: Fix kmemleak in watchdog_cdev_register
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
  - ubi: Fix possible null-ptr-deref in ubi_free_volume()
  - ubifs: Fix memory leak in alloc_wbufs()
  - ubifs: Fix build errors as symbol undefined
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - um: vector: Fix memory leak in vector_config
  - fs: f2fs: initialize fsdata in pagecache_write()
  - f2fs: use memcpy_{to,from}_page() where possible
  - pwm: stm32-lp: fix the check on arr and cmp registers update
  - pwm: sifive: Always let the first pwm_apply_state succeed
  - pwm: sifive: Reduce time the controller lock is held
  - objtool: Fix memory leak in create_static_call_sections()
  - kbuild: Port silent mode detection to future gnu make.
  - pinctrl: rockchip: fix reading pull type on rk3568
  - pinctrl: rockchip: fix mux route data for rk3568
  - wifi: ath9k: use proper statements in conditionals
  - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
  - drm/edid: fix AVI infoframe aspect ratio handling
  - drm/radeon: Fix eDP for single-display iMac11,2
  - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
  - vfio/type1: prevent underflow of locked_vm via exec()
  - PCI: Avoid FLR for AMD FCH AHCI adapters
  - PCI: hotplug: Allow marking devices as disconnected during bind/unbind
  - PCI/PM: Observe reset delay irrespective of bridge_d3
  - riscv: jump_label: Fixup unaligned arch_static_branch function
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  - scsi: ses: Don't attach if enclosure has no components
  - scsi: qla2xxx: Fix erroneous link down
  - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
  - scsi: qla2xxx: Fix link failure in NPIV environment
  - ktest.pl: Add RUN_TIMEOUT option with default unlimited
  - ktest.pl: Fix missing "end_monitor" when machine check fails
  - ktest.pl: Give back console on Ctrt^C on monitor
  - mm/thp: check and bail out if page in deferred queue already
  - mm: memcontrol: deprecate charge moving
  - docs: gdbmacros: print newest record
  - remoteproc/mtk_scp: Move clk ops outside send_lock
  - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
  - mips: fix syscall_get_nr
  - dax/kmem: Fix leak of memory-hotplug resources
  - alpha: fix FEN fault handling
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
  - ARM: dts: exynos: correct TMU phandle in Odroid HC1
  - ARM: dts: exynos: correct TMU phandle in Odroid XU
  - ARM: dts: exynos: correct TMU phandle in Exynos5250
  - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
  - ARM: dts: exynos: correct TMU phandle in Exynos4
  - ARM: dts: exynos: correct TMU phandle in Exynos4210
  - dm flakey: don't corrupt the zero page
  - dm flakey: fix logic when corrupting a bio
  - thermal: intel: powerclamp: Fix cur_state for multi package system
  - wifi: cfg80211: Fix use after free for wext
  - wifi: rtl8xxxu: Use a longer retry limit of 48
  - dm: add cond_resched() to dm_wq_work()
  - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
  - ext4: refuse to create ea block when umounted
  - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
  - io_uring: remove MSG_NOSIGNAL from recvmsg
  - io_uring/rsrc: disallow multi-source reg buffers
  - io_uring: add a conditional reschedule to the IOPOLL cancelation loop
  - io_uring: mark task TASK_RUNNING before handling resume/task work
  - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook
  - brd: return 0/-error from brd_insert_page()
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs
  - x86/reboot: Disable virtualization in an emergency if SVM is supported
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
  - KVM: s390: disable migration mode when dirty tracking is disabled
  - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
  - KVM: Destroy target device if coalesced MMIO unregistration fails
  - udf: Fix file corruption when appending just after end of preallocated extent
  - udf: Detect system inodes linked into directory hierarchy
  - udf: Preserve link count of system files
  - udf: Do not update file length for failed writes to inline files
  - udf: Do not bother merging very long extents
  - udf: Truncate added extents on failed expansion
  - ocfs2: fix non-auto defrag path not working issue
  - ocfs2: fix defrag path triggering jbd2 ASSERT
  - f2fs: fix cgroup writeback accounting with fs-layer encryption
  - f2fs: fix information leak in f2fs_move_inline_dirents()
  - exfat: fix inode->i_blocks for non-512 byte sector size device
  - exfat: redefine DIR_DELETED as the bad cluster number
  - exfat: fix unexpected EOF while reading dir
  - exfat: fix reporting fs error when reading dir beyond EOF
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
  - ARM: dts: exynos: correct HDMI phy compatible in Exynos4
  - cifs: Fix uninitialized memory read in smb3_qfs_tcon()
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
  - s390: discard .interp section
  - s390/extmem: return correct segment type in __segment_load()
  - ipmi_ssif: Rename idle state and check
  - rtc: pm8xxx: fix set-alarm race
  - firmware: coreboot: framebuffer: Ignore reserved pixel color bits
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error
  - dm cache: add cond_resched() to various workqueue loops
  - dm thin: add cond_resched() to various workqueue loops
  - HID: logitech-hidpp: Don't restart communication if not necessary
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks
  - hwmon: (coretemp) Simplify platform device handling
  - gfs2: Improve gfs2_make_fs_rw error handling
  - regulator: s5m8767: Bounds check id indexing into arrays
  - regulator: max77802: Bounds check regulator id against opmode
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math
  - docs/scripts/gdb: add necessary make scripts_gdb step
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue
  - drm: amd: display: Fix memory leakage
  - drm/radeon: free iio for atombios when driver shutdown
  - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
  - HID: Add Mapping for System Microphone Mute
  - drm/omap: dsi: Fix excessive stack usage
  - drm/amd/display: Fix potential null-deref in dm_resume
  - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
  - PM: EM: fix memory leak with using debugfs_lookup()
  - uaccess: Add minimum bounds check on kernel buffer size
  - coda: Avoid partial allocation of sig_inputArgs
  - net/mlx5: fw_tracer: Fix debug print
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match
  - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
  - m68k: Check syscall_trace_enter() return code
  - net: bcmgenet: Add a check for oversized packets
  - ACPI: Don't build ACPICA with '-Os'
  - ice: add missing checks for PF vsi type
  - inet: fix fast path in __inet_hash_connect()
  - wifi: mt7601u: fix an integer underflow
  - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - thermal: intel: Fix unsigned comparison with less than zero
  - wifi: ath11k: debugfs: fix to work with multiple PCI devices
  - rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
  - rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
  - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
  - blk-iocost: fix divide by 0 error in calc_lcoefs()
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
  - udf: Define EFSCORRUPTED error code
  - rpmsg: glink: Avoid infinite loop on intent for missing channel
  - media: saa7134: Use video_unregister_device for radio_dev
  - media: i2c: ov7670: 0 instead of -EINVAL was returned
  - media: i2c: imx219: Fix binning for RAW8 capture
  - media: i2c: imx219: Split common registers from mode tables
  - media: i2c: imx219: remove redundant writes
  - media: i2c: ov772x: Fix memleak in ov772x_probe()
  - media: ov5675: Fix memleak in ov5675_init_controls()
  - media: ov2740: Fix memleak in ov2740_init_controls()
  - media: max9286: Fix memleak in max9286_v4l2_register()
  - builddeb: clean generated package content
  - powerpc: Remove linker flag from KBUILD_AFLAGS
  - media: platform: ti: Add missing check for devm_regulator_get
  - media: ti: cal: fix possible memory leak in cal_ctx_create()
  - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
  - Input: iqs269a - do not poll during ATI
  - Input: iqs269a - do not poll during suspend or resume
  - alpha/boot/tools/objstrip: fix the check for ELF header
  - vdpa/mlx5: Don't clear mr struct on destroy MR
  - MIPS: vpe-mt: drop physical_memsize
  - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
  - powerpc/eeh: Set channel state after notifying the drivers
  - powerpc/eeh: Small refactor of eeh_handle_normal_event()
  - powerpc/rtas: ensure 4KB alignment for rtas_data_buf
  - powerpc/rtas: make all exports GPL
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling
  - powerpc/pseries/lpar: add missing RTAS retry status handling
  - powerpc/perf/hv-24x7: add missing RTAS retry status handling
  - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
  - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
  - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
  - Input: ads7846 - don't check penirq immediately for 7845
  - Input: ads7846 - always set last command to PWRDOWN
  - Input: ads7846 - convert to one message
  - Input: ads7846 - convert to full duplex
  - Input: ads7846 - don't report pressure for ads7845
  - clk: imx: avoid memory leak
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
  - linux/kconfig.h: replace IF_ENABLED() with PTR_IF() in <linux/kernel.h>
  - Input: iqs269a - configure device with a single block write
  - Input: iqs269a - increase interrupt handler return delay
  - Input: iqs269a - drop unused device node references
  - mtd: rawnand: sunxi: Fix the size of the last OOB region
  - RISC-V: fix funct4 definition for c.jalr in parse_asm.h
  - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
  - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
  - objtool: add UACCESS exceptions for __tsan_volatile_read/write
  - printf: fix errname.c list
  - sparc: allow PM configs for sparc32 COMPILE_TEST
  - perf tools: Fix auto-complete on aarch64
  - leds: led-core: Fix refcount leak in of_led_get()
  - perf llvm: Fix inadvertent file creation
  - gfs2: jdata writepage fix
  - cifs: Fix warning and UAF when destroy the MR list
  - cifs: Fix lost destroy smbd connection when MR allocate failed
  - nfsd: fix race to check ls_layouts
  - hid: bigben_probe(): validate report count
  - HID: bigben: use spinlock to safely schedule workers
  - HID: bigben_worker() remove unneeded check on report_field
  - HID: bigben: use spinlock to protect concurrent accesses
  - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
  - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
  - NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
  - dm: remove flush_scheduled_work() during local_exit()
  - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
  - hwmon: (mlxreg-fan) Return zero speed for broken fan
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting
  - spi: bcm63xx-hsspi: fix pm_runtime
  - scsi: aic94xx: Add missing check for dma_map_single()
  - scsi: mpt3sas: Fix a memory leak
  - drm/amdgpu: fix enum odm_combine_mode mismatch
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store
  - ASoC: dt-bindings: meson: fix gx-card codec node regex
  - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
  - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
  - ASoC: mchp-spdifrx: fix controls that works with completion mechanism
  - ASoC: mchp-spdifrx: fix return value in case completion times out
  - ASoC: atmel: fix spelling mistakes
  - ASoC: mchp-spdifrx: fix controls which rely on rsr register
  - spi: dw_bt1: fix MUX_MMIO dependencies
  - gpio: vf610: connect GPIO label to dev name
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
  - drm/mediatek: Clean dangling pointer on bind error path
  - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
  - drm/mediatek: Drop unbalanced obj unref
  - drm/mediatek: Use NULL instead of 0 for NULL pointer
  - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
  - gpu: host1x: Don't skip assigning syncpoints to channels
  - pinctrl: mediatek: Initialize variable *buf to zero
  - pinctrl: mediatek: Initialize variable pullen and pullup to zero
  - pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
  - drm/msm/mdp5: Add check for kzalloc
  - drm/msm/dpu: Add check for cstate
  - drm/msm: use strscpy instead of strncpy
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
  - drm/bridge: lt9611: pass a pointer to the of node
  - drm/bridge: lt9611: fix clock calculation
  - drm/bridge: lt9611: fix programming of video modes
  - drm/bridge: lt9611: fix polarity programming
  - drm/bridge: lt9611: fix HPD reenablement
  - drm/bridge: lt9611: fix sleep mode setup
  - drm/msm/dpu: Disallow unallocated resources to be returned
  - ALSA: hda/ca0132: minor fix for allocation size
  - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
  - ASoC: fsl_sai: initialize is_dsp_mode flag
  - drm/vc4: hdmi: Correct interlaced timings again
  - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
  - drm/vc4: hvs: Set AXI panic modes
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
  - pinctrl: rockchip: do coding style for mux route struct
  - pinctrl: rockchip: add support for rk3568
  - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
  - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()
  - drm: tidss: Fix pixel format definition
  - drm/vc4: dpi: Fix format mapping for RGB565
  - drm/vc4: dpi: Add option for inverting pixel clock and output enable
  - drm/vkms: Fix null-ptr-deref in vkms_release()
  - drm/bridge: megachips: Fix error handling in i2c_register_driver()
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
  - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
  - drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  - sefltests: netdevsim: wait for devlink instance after netns removal
  - selftest: fib_tests: Always cleanup before exit
  - net: bcmgenet: fix MoCA LED control
  - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
  - selftests/net: Interpret UDP_GRO cmsg data as an int value
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
  - irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
  - bpf: Fix global subprog context argument resolution logic
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error
  - thermal/drivers/hisi: Drop second sensor hi3660
  - wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
  - crypto: crypto4xx - Call dma_unmap_page when done
  - selftests/bpf: Fix out-of-srctree build
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
  - wifi: iwl4965: Add missing check for create_singlethread_workqueue()
  - wifi: iwl3945: Add missing check for create_singlethread_workqueue
  - RISC-V: time: initialize hrtimer based broadcast clock event device
  - m68k: /proc/hardware should depend on PROC_FS
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
  - libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
  - Bluetooth: L2CAP: Fix potential user-after-free
  - OPP: fix error checking in opp_migrate_dentry()
  - s390/vmem: fix empty page tables cleanup under KASAN
  - irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
  - irqchip: Fix refcount leak in platform_irqchip_probe
  - net/mlx5: Enhance debug print in page allocation failure
  - bpftool: profile online CPUs instead of possible
  - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
  - crypto: ccp - Refactor out sev_fw_alloc()
  - leds: led-class: Add missing put_device() to led_put()
  - crypto: xts - Handle EBUSY correctly
  - net: ethernet: ti: add missing of_node_put before return
  - net: ethernet: ti: am65-cpsw: handle deferred probe with dev_err_probe()
  - net: ethernet: ti: am65-cpsw: fix tx csum offload for multi mac mode
  - x86/microcode: Print previous version of microcode after reload
  - x86/microcode: Default-disable late loading
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86: Mark stop_this_cpu() __noreturn
  - x86/microcode: Replace deprecated CPU-hotplug functions.
  - x86/cpu: Init AP exception handling from cpu_init_secondary()
  - powercap: fix possible name leak in powercap_register_zone()
  - crypto: seqiv - Handle EBUSY correctly
  - crypto: essiv - Handle EBUSY correctly
  - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
  - ACPI: battery: Fix missing NUL-termination with large strings
  - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
  - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
  - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
  - ath9k: htc: clean up statistics macros
  - ath9k: hif_usb: simplify if-if to if-else
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
  - wifi: orinoco: check return value of hermes_write_wordrec()
  - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
  - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
  - thermal/drivers/tsens: Add compat string for the qcom,msm8960
  - thermal/drivers/qcom/tsens_v1: Enable sensor 3 on MSM8976
  - thermal/drivers/tsens: Drop msm8976-specific defines
  - ACPICA: nsrepair: handle cases without a return value correctly
  - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak
  - crypto: ccp: Use the stack and common buffer for status commands
  - crypto: ccp: Use the stack for small SEV command buffers
  - lib/mpi: Fix buffer overrun when SG is too long
  - rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
  - rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
  - rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPICA: Drop port I/O validation for some regions
  - crypto: x86/ghash - fix unaligned access in ghash_setkey()
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
  - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
  - wifi: ipw2200: fix memory leak in ipw_wdev_init()
  - wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
  - libbpf: Fix btf__align_of() by taking into account field offsets
  - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()
  - rtlwifi: fix -Wpointer-sign warning
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: fix memory leak in lbs_init_adapter()
  - wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rsi: Fix memory leak in rsi_coex_attach()
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned
  - x86/perf/zhaoxin: Add stepping check for ZXC
  - sched/rt: pick_next_rt_entity(): check list_entry
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
  - s390/dasd: Fix potential memleak in dasd_eckd_init()
  - s390/dasd: Prepare for additional path event handling
  - blk-mq: correct stale comment of .get_budget
  - blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
  - blk-mq: avoid sleep in blk_mq_alloc_request_hctx
  - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
  - ARM: dts: imx7s: correct iomuxc gpr mux controller cells
  - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
  - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
  - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
  - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
  - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
  - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property
  - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
  - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
  - ARM: imx: Call ida_simple_remove() for ida_simple_get
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
  - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
  - ARM: s3c: fix s3c64xx_set_timer_source prototype
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
  - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
  - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
  - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
  - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
  - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
  - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
  - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name
  - arm64: dts: qcom: sc7180: correct SPMI bus address cells
  - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
  - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init
  - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
  - powerpc/mm: Rearrange if-else block to avoid clang warning
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2649 [sync] PR-2641:  Fix CVE-2023-5717
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2572  Fix cgroup psi poll UAF
  - !2521 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - igb: set max size RX buffer when store bad packet is enabled
  - !2597 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2568 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2582 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
  - !2623 [sync] PR-2613:  CVE-2022-44033
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !2586 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - xen/events: replace evtchn_rwlock with RCU
  - !2523 [sync] PR-2159: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
  - ksmbd: send proper error response in smb2_tree_connect()
  - ksmbd: fix racy issue from smb2 close and logoff with multichannel
  - ksmbd: call rcu_barrier() in ksmbd_server_exit()
  - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  - sched/psi: Select KERNFS as needed
  - kernfs: add stub helper for kernfs_generic_poll()
  - sched/psi: use kernfs polling functions for PSI trigger polling
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2467 [sync] PR-1851: Backport 5.10.169 - 5.10.172 LTS patches from upstream
  - netfilter: xt_sctp: validate the flag_info count
  - ipv4: fix null-deref in ipv4_link_failure
  - !2324 [sync] PR-2197: [RoCE] Support getting xrcd num from firmware；Fix incorrect post-send with direct wqe of wr-list
  - netfilter: nfnetlink_osf: avoid OOB read
  - netfilter: xt_u32: validate user space input
  - perf/smmuv3: Add MODULE_ALIAS for module auto loading
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - Revert "perf/smmuv3: Enable HiSilicon Erratum quirk"
  - !2516 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2487 [sync] PR-2340:  xfs: recent patches to fix xfs issues
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - xfs: update the last_sync_lsn with ctx start lsn
  - xfs: shutdown xfs once inode double free
  - xfs: fix off-by-one-block in xfs_discard_folio()
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range
  - iomap: buffered write failure should not truncate the page cache
  - xfs,iomap: move delalloc punching to iomap
  - xfs: use byte ranges for write cleanup ranges
  - xfs: punching delalloc extents on write failure is racy
  - xfs: longest free extent no need consider postalloc
  - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
  - xfs: block reservation too large for minleft allocation
  - xfs: set minleft correctly for randomly sparse inode allocations
  - xfs: shutdown to ensure submits buffers on LSN boundaries
  - xfs: don't verify agf length when log recovery
  - xfs: Remove redundant assignment to busy
  - xfs: remove redundant pointer lip
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf
  - xfs: xfs_trans_cancel() path must check for log shutdown
  - xfs: fix bounds check in xfs_defer_agfl_block()
  - xfs: AGF length has never been bounds checked
  - xfs: journal geometry is not properly bounds checked
  - xfs: don't block in busy flushing when freeing extents
  - xfs: allow extent free intents to be retried
  - xfs: pass alloc flags through to xfs_extent_busy_flush()
  - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
  - xfs: use deferred frees for btree block freeing
  - xfs: don't reverse order of items in bulk AIL insertion
  - xfs: validate block number being freed before adding to xefi
  - xfs: validity check agbnos on the AGFL
  - xfs: pass xfs_extent_free_item directly through the log intent code
  - xfs: remove unused parameter from refcount code
  - xfs: reduce the size of struct xfs_extent_free_item
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later
  - xfs: create slab caches for frequently-used deferred items
  - xfs: compact deferred intent item structures
  - xfs: rename _zone variables to _cache
  - xfs: remove kmem_zone typedef
  - xfs: remove xfs_setattr_time() declaration
  - xfs: use setattr_copy to set vfs inode attributes
  - xfs: set prealloc flag in xfs_alloc_file_space()
  - xfs: don't assert fail on perag references on teardown
  - xfs: fix dir3 block read verify fail during log recover
  - xfs: propagate the return value of xfs_log_force() to avoid soft lockup
  - xfs: keep growfs sb log item active until ail flush success
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file
  - usb: gadget: u_serial: Add null pointer check in gserial_resume
  - USB: serial: option: add support for VW/Skoda "Carstick LTE"
  - scripts/tags.sh: fix incompatibility with PCRE2
  - scripts/tags.sh: Invoke 'realpath' via 'xargs'
  - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
  - HID: core: Fix deadloop in hid_apply_multiplier.
  - IB/hfi1: Assign npages earlier
  - btrfs: send: limit number of clones and allocated memory size
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288
  - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
  - Fix XFRM-I support for nested ESP tunnels
  - ext4: Fix function prototype mismatch for ext4_feat_ktype
  - audit: update the mailing list in MAINTAINERS
  - wifi: mwifiex: Add missing compatible string for SD8787
  - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
  - nbd: fix max value for 'first_minor'
  - Revert "Revert "block: nbd: add sanity check for first_minor""
  - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
  - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
  - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
  - random: always mix cycle counter in add_latent_entropy()
  - clk: mxl: syscon_node_to_regmap() returns error pointers
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
  - clk: mxl: Fix a clk entry by adding relevant flags
  - clk: mxl: Add option to override gate clks
  - clk: mxl: Remove redundant spinlocks
  - clk: mxl: Switch from direct readl/writel based IO to regmap based IO
  - wifi: rtl8xxxu: gen2: Turn on the rate control
  - drm/etnaviv: don't truncate physical page address
  - nvmem: core: fix return value
  - net: sched: sch: Fix off by one in htb_activate_prios()
  - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - i40e: Add checking for null for nlmsg_find_attr()
  - net/sched: act_ctinfo: use percpu stats
  - flow_offload: fill flags to action structure
  - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
  - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init()
  - nilfs2: fix underflow in second superblock position calculations
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - ixgbe: add double of VLAN header when computing the max MTU
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode
  - bnxt_en: Fix mqprio and XDP ring checking logic
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
  - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
  - net: bgmac: fix BCM5358 support by setting correct flags
  - i40e: add double of VLAN header when computing the max MTU
  - ixgbe: allow to increase MTU to 3K with XDP enabled
  - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
  - Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."
  - hugetlb: check for undefined shift on 32 bit architectures
  - sched/psi: Fix use-after-free in ep_remove_wait_queue()
  - ALSA: hda/realtek - fixed wrong gpio assigned
  - ALSA: hda/conexant: add a new hda codec SN6180
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - mmc: sdio: fix possible resource leaks in some error paths
  - mmc: jz4740: Work around bug on JZ4760(B)
  - netfilter: nft_tproxy: restrict to prerouting hook
  - ovl: remove privs in ovl_fallocate()
  - ovl: remove privs in ovl_copyfile()
  - s390/signal: fix endless loop in do_signal
  - aio: fix mremap after fork null-deref
  - nvmem: core: fix registration vs use race
  - nvmem: core: fix cleanup after dev_set_name()
  - nvmem: core: remove nvmem_config wp_gpio
  - nvmem: core: add error handling for dev_set_name
  - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
  - s390/decompressor: specify __decompress() buf len to avoid overflow
  - net: sched: sch: Bounds check priority
  - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
  - net/rose: Fix to not accept on connected socket
  - tools/virtio: fix the vringh test for virtio ring changes
  - ASoC: cs42l56: fix DT probe
  - ALSA: hda: Do not unset preset when cleaning up codec
  - selftests/bpf: Verify copy_register_state() preserves parent/live fields
  - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
  - !2430 [sync] PR-1822: Backport 5.10.168 LTS patches from upstream
  - Fix page corruption caused by racy check in __free_pages
  - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
  - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
  - ceph: flush cap releases when the session is flushed
  - usb: typec: altmodes/displayport: Fix probe pin assign check
  - usb: core: add quirk for Alcor Link AK9563 smartcard reader
  - btrfs: free device in btrfs_close_devices for a single device filesystem
  - net: USB: Fix wrong-direction WARNING in plusb.c
  - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
  - spi: dw: Fix wrong FIFO level setting for long xfers
  - pinctrl: single: fix potential NULL dereference
  - pinctrl: aspeed: Fix confusing types in return value
  - ALSA: pci: lx6464es: fix a debug loop
  - selftests: forwarding: lib: quote the sysctl values
  - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
  - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
  - net/mlx5e: IPoIB, Show unknown speed instead of error
  - net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q"
  - ice: Do not use WQ_MEM_RECLAIM flag for workqueue
  - uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
  - ionic: clean interrupt before enabling queue to avoid credit race
  - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
  - bonding: fix error checking in bond_debug_reregister()
  - xfrm: fix bug with DSCP copy to v6 from v4 tunnel
  - RDMA/usnic: use iommu_map_atomic() under spin_lock()
  - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
  - xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
  - IB/hfi1: Restore allocated resources on failed copyout
  - xfrm: compat: change expression for switch in xfrm_xlate64
  - can: j1939: do not wait 250 ms if the same addr was already claimed
  - of/address: Return an error when no valid dma-ranges are found
  - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
  - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
  - ALSA: hda/realtek: Add Positivo N14KP6-TG
  - btrfs: zlib: zero-initialize zlib workspace
  - btrfs: limit device extents to the device size
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm/migration: return errno when isolate_huge_page failed
  - iio:adc:twl6030: Enable measurement of VAC
  - bpf: Do not reject when the stack read size is different from the tracked scalar size
  - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - f2fs: fix to do sanity check on i_extra_isize in is_alive()
  - fbdev: smscufx: fix error handling code in ufx_usb_probe
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - nvmem: core: fix cell removal on error
  - nvmem: core: initialise nvmem->id early
  - drm/i915: Fix potential bit_17 double-free
  - Squashfs: fix handling and sanity checking of xattr_ids count
  - fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
  - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - riscv: disable generation of unwind tables
  - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
  - parisc: Fix return code of pdc_iodc_print()
  - nvmem: qcom-spmi-sdam: fix module autoloading
  - iio: imu: fxos8700: fix MAGN sensor scale and unit
  - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
  - iio: imu: fxos8700: fix failed initialization ODR mode assignment
  - iio: imu: fxos8700: fix incorrect ODR mode readback
  - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix map label of channel type to MAGN sensor
  - iio: imu: fxos8700: fix IMU data bits returned to user space
  - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix ACCEL measurement range selection
  - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
  - iio: adc: berlin2-adc: Add missing of_node_put() in error path
  - iio: hid: fix the retval in accel_3d_capture_sample
  - efi: Accept version 2 of memory attributes table
  - ALSA: hda/realtek: Add Acer Predator PH315-54
  - watchdog: diag288_wdt: fix __diag288() inline assembly
  - watchdog: diag288_wdt: do not use stack buffers for hardware data
  - net: qrtr: free memory on error path in radix_tree_insert()
  - Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables
  - Input: i8042 - merge quirk tables
  - Input: i8042 - move __initconst to fix code styling warning
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: dwc3: qcom: enable vbus override when in OTG dr-mode
  - usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
  - iio: adc: stm32-dfsdm: fill module aliases
  - net/x25: Fix to not accept on connected socket
  - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
  - i2c: rk3x: fix a bunch of kernel-doc warnings
  - scsi: target: core: Fix warning on RT kernels
  - i2c: mxs: suppress probe-deferral error message
  - qede: execute xdp_do_flush() before napi_complete_done()
  - qede: add netpoll support for qede driver
  - efi: fix potential NULL deref in efi_mem_reserve_persistent
  - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
  - virtio-net: Keep stop() to follow mirror sequence of open()
  - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking
  - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
  - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
  - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
  - ata: libata: Fix sata_down_spd_limit() when no link speed is reported
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
  - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp()
  - net: phy: meson-gxl: Add generic dummy stubs for MMD register access
  - squashfs: harden sanity check in squashfs_read_xattr_id_table
  - netfilter: br_netfilter: disable sabotage_in hook after first suppression
  - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
  - sfc: correctly advertise tunneled IPv6 segmentation
  - virtio-net: execute xdp_do_flush() before napi_complete_done()
  - fix "direction" argument of iov_iter_kvec()
  - fix iov_iter_bvec() "direction" argument
  - READ is "data destination", not source...
  - WRITE is "data source", not destination...
  - vhost/net: Clear the pending messages when the backend is removed
  - scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
  - drm/vc4: hdmi: make CEC adapter name unique
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
  - bpf: Fix to preserve reg parent/live fields when copying range info
  - bpf: Support <8-byte scalar spill and refill
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
  - powerpc/imc-pmu: Revert nest_init_lock to being a mutex
  - bpf: Fix incorrect state pruning for <8B spill/fill
  - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
  - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
  - ext4: do not mark inode dirty every time when appending using delalloc
  - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
  - RDMA/hns: Support get XRCD number from firmware
  - Revert "RDMA/hns: Fix incorrect post-send with direct wqe of wr-list in kernel space"
  - Revert "RDMA/hns: Support getting xrcd num from firmware"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.32.0.109
changelog:
  - !2719 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2741 [sync] PR-2443:  CVE-2023-37453
  - !2735 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
  - USB: core: Fix oversight in SuperSpeed initialization
  - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
  - USB: core: Change usb_get_device_descriptor() API
  - USB: core: Unite old scheme and new scheme descriptor reads
  - !2729 [sync] PR-2686: Backport 5.10.179 LTS patches from upstream.
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
  - ASN.1: Fix check for strdup() success
  - ASoC: fsl_asrc_dma: fix potential null-ptr-deref
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
  - pwm: hibvt: Explicitly set .polarity in .get_state()
  - pwm: iqs620a: Explicitly set .polarity in .get_state()
  - pwm: meson: Explicitly set .polarity in .get_state()
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry"
  - fuse: fix deadlock between atomic O_TRUNC and page invalidation
  - fuse: always revalidate rename target dentry
  - fuse: fix attr version comparison in fuse_read_update_size()
  - fuse: check s_root when destroying sb
  - virtiofs: split requests that exceed virtqueue size
  - virtiofs: clean up error handling in virtio_fs_get_tree()
  - purgatory: fix disabling debug info
  - docs: futex: Fix kernel-doc references after code split-up preparation
  - MIPS: Define RUNTIME_DISCARD_EXIT in LD script
  - sched/uclamp: Fix a uninitialized variable warnings
  - sched/uclamp: Make cpu_overutilized() use util_fits_cpu()
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
  - sched/uclamp: Fix fits_capacity() check in feec()
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
  - mm/khugepaged: check again on anon uffd-wp during isolation
  - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
  - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  - memstick: fix memory leak if card device is never registered
  - nilfs2: initialize unused bytes in segment summary blocks
  - iio: light: tsl2772: fix reading proximity-diodes from device tree
  - powerpc/doc: Fix htmldocs errors
  - xen/netback: use same error messages for same errors
  - nvme-tcp: fix a possible UAF when failing to allocate an io queue
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
  - net: dsa: b53: mmap: add phy ops
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - scsi: megaraid_sas: Fix fw_crash_buffer_show()
  - selftests: sigaltstack: fix -Wuninitialized
  - Input: i8042 - add quirk for Fujitsu Lifebook A574/H
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event
  - e1000e: Disable TSO on i219-LM card to increase speed
  - mlxsw: pci: Fix possible crash during initialization
  - net: rpl: fix rpl header size calculation
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
  - i40e: fix i40e_setup_misc_vector() error handling
  - i40e: fix accessing vsi->active_filters without holding lock
  - netfilter: nf_tables: fix ifdef to also consider nf_tables=m
  - sfc: Fix use-after-free due to selftest_work
  - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP.
  - virtio_net: bugfix overflow inside xdp_linearize_page()
  - regulator: fan53555: Explicitly include bits header
  - netfilter: br_netfilter: fix recent physdev match breakage
  - arm64: dts: imx8mm-evk: correct pmic clock source
  - arm64: dts: meson-g12-common: specify full DMC range
  - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node
  - !2724 [22.03-LTS-SP2]Backport 5.10.178 LTS patches from upstream
  - sysctl: Fix data-races in proc_dou8vec_minmax().
  - panic, kexec: make __crash_kexec() NMI safe
  - kexec: turn all kexec_mutex acquisitions into trylocks
  - kexec: move locking into do_kexec_load
  - riscv: Handle zicsr/zifencei issues between clang and binutils
  - kbuild: check CONFIG_AS_IS_LLVM instead of LLVM_IAS
  - kbuild: Switch to 'f' variants of integrated assembler flag
  - kbuild: check the minimum assembler version in Kconfig
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
  - i2c: ocores: generate stop condition after timeout in polling mode
  - x86/rtc: Remove __init for runtime functions
  - sched/fair: Fix imbalance overflow
  - sched/fair: Move calculate of avg_load to a better location
  - powerpc/papr_scm: Update the NUMA distance table for the target node
  - powerpc/pseries: Add support for FORM2 associativity
  - powerpc/pseries: Add a helper for form1 cpu distance
  - powerpc/pseries: Consolidate different NUMA distance update code paths
  - powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY
  - powerpc/pseries: rename min_common_depth to primary_domain_index
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
  - scsi: ses: Handle enclosure with just a primary component gracefully
  - net: sfp: initialize sfp->i2c_block_size at sfp allocation
  - riscv: add icache flush for nommu sigreturn trampoline
  - asymmetric_keys: log on fatal failures in PE/pkcs7
  - verify_pefile: relax wrapper length check
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message
  - wifi: mwifiex: mark OF related data as maybe unused
  - power: supply: cros_usbpd: reclassify "default case!" as debug
  - libbpf: Fix single-line struct definition output in btf_dump
  - net: macb: fix a memory corruption in extended buffer descriptor mode
  - udp6: fix potential access to stale information
  - RDMA/core: Fix GID entry ref leak when create_ah fails
  - sctp: fix a potential overflow in sctp_ifwdtsn_skip
  - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
  - qlcnic: check pci_reset_function result
  - drm/armada: Fix a potential double free in an error handling path
  - sysctl: add proc_dou8vec_minmax()
  - niu: Fix missing unwind goto in niu_alloc_channels()
  - RDMA/cma: Allow UD qp_type to join multicast only
  - IB/mlx5: Add support for 400G_8X lane speed
  - IB/mlx5: Add support for NDR link speed
  - clk: sprd: set max_register according to mapping range
  - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
  - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  - mtd: rawnand: meson: fix bitmask for length in command word
  - mtdblock: tolerate corrected bit-flips
  - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
  - btrfs: fix fast csum implementation detection
  - btrfs: print checksum type and implementation at mount time
  - Bluetooth: Fix race condition in hidp_session_thread
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
  - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
  - ALSA: emu10k1: fix capture interrupt handler unlinking
  - Revert "pinctrl: amd: Disable and mask interrupts on resume"
  - bpftool: Print newline before '}' for struct with padding only fields
  - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
  - Revert "media: ti: cal: fix possible memory leak in cal_ctx_create()"
  - drm/bridge: lt9611: Fix PLL being unable to lock
  - selftests: intel_pstate: ftime() is deprecated
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - drm/nouveau/disp: Support more modes by checking with lower bpc
  - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  - ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
  - tracing: Free error logs of tracing instances
  - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
  - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - iio: adc: ad7791: fix IRQ flags
  - ALSA: hda/realtek: Add quirk for Clevo X370SNW
  - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  - nilfs2: fix sysfs interface lifetime
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
  - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
  - tty: serial: sh-sci: Fix transmit end interrupt handler
  - iio: light: cm32181: Unregister second I2C client if present
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  - USB: serial: option: add Quectel RM500U-CN modem
  - USB: serial: option: add Telit FE990 compositions
  - usb: typec: altmodes/displayport: Fix configure initial pin assignment
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
  - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
  - usb: xhci: tegra: fix sleep in atomic call
  - NFSD: callback request does not use correct credential for AUTH_SYS
  - sunrpc: only free unix grouplist after RCU settles
  - net: stmmac: fix up RX flow hash indirection table when setting channels
  - net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
  - gpio: davinci: Add irq chip flag to skip set wake
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
  - sctp: check send stream number after wait_for_sndbuf
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - net: qrtr: Fix a refcount bug in qrtr_recvmsg()
  - net: qrtr: combine nameservice into main module
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta
  - KVM: s390: pv: fix external interruption loop not always detected
  - pwm: sprd: Explicitly set .polarity in .get_state()
  - pwm: cros-ec: Explicitly set .polarity in .get_state()
  - Drivers: vmbus: Check for channel allocation before looking up relids
  - gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  - !2703 [sync] PR-2672:  fix CVE-2023-46813
  - !2711 [sync] PR-2465: Backport 5.10.177 LTS patches from upstream
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - hsr: ratelimit only when errors are printed
  - gfs2: Always check inode size of inline inodes
  - libbpf: Fix btf_dump's packed struct determination
  - selftests/bpf: Add few corner cases to test padding handling of btf_dump
  - libbpf: Fix BTF-to-C converter's padding logic
  - selftests/bpf: Test btf dump for struct with padding only fields
  - zonefs: Fix error message in zonefs_file_dio_append()
  - btrfs: scan device in non-exclusive mode
  - s390/uaccess: add missing earlyclobber annotations to __clear_user()
  - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  - drm/etnaviv: fix reference leak when mmaping imported buffer
  - rcu: Fix rcu_torture_read ftrace event
  - xtensa: fix KASAN report for show_stack
  - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo
  - NFSv4: Fix hangs when recovering open state after a server reboot
  - powerpc: Don't try to copy PPR for task with NULL pt_regs
  - pinctrl: at91-pio4: fix domain name assignment
  - pinctrl: amd: Disable and mask interrupts on resume
  - net: phy: dp83869: fix default value for tx-/rx-internal-delay
  - xen/netback: don't do grant copy across page boundary
  - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
  - cifs: prevent infinite recursion in CIFSGetDFSRefer()
  - Input: focaltech - use explicitly signed char type
  - Input: alps - fix compatibility with -funsigned-char
  - pinctrl: ocelot: Fix alt mode for ocelot
  - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
  - bnxt_en: Add missing 200G link speed reporting
  - bnxt_en: Fix typo in PCI id to device description string mapping
  - i40e: fix registers dump after run ethtool adapter self test
  - net: ipa: compute DMA pool size properly
  - ALSA: ymfpci: Fix BUG_ON in probe function
  - ALSA: ymfpci: Fix assignment in if condition
  - s390/vfio-ap: fix memory leak in vfio_ap device driver
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
  - net: stmmac: don't reject VLANs when IFF_PROMISC is set
  - net/net_failover: fix txq exceeding warning
  - regulator: Handle deferred clk
  - r8169: fix RTL8168H and RTL8107E rx crc error
  - ptp_qoriq: fix memory leak in probe()
  - scsi: megaraid_sas: Fix crash after a double completion
  - sfc: ef10: don't overwrite offload features at NIC reset
  - mtd: rawnand: meson: invalidate cache on polling ECC bit
  - mips: bmips: BCM6358: disable RAC flush for TP1
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
  - tracing: Fix wrong return in kprobe_event_gen_test.c
  - tools/power turbostat: Fix /dev/cpu_dma_latency warnings
  - fbdev: au1200fb: Fix potential divide by zero
  - fbdev: lxfb: Fix potential divide by zero
  - fbdev: intelfb: Fix potential divide by zero
  - fbdev: nvidia: Fix potential divide by zero
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - fbdev: tgafb: Fix potential divide by zero
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  - ALSA: asihpi: check pao in control_message()
  - net: hsr: Don't log netdev_err message on unknown prp dst node
  - md: avoid signed overflow in slot_store()
  - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
  - dm crypt: avoid accessing uninitialized tasklet
  - bus: imx-weim: fix branch condition evaluates to a garbage value
  - drm/meson: fix missing component unbind on bind errors
  - drm/meson: Fix error handling when afbcd.ops->init fails
  - kcsan: avoid passing -g for test
  - kernel: kcsan: kcsan_test: build without structleak plugin
  - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
  - usb: dwc3: gadget: move cmd_endtransfer to extra function
  - NFSD: fix use-after-free in __nfs42_ssc_open()
  - KVM: fix memoryleak in kvm_init()
  - ocfs2: fix data corruption after failed write
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - firmware: arm_scmi: Fix device node validation for mailbox transport
  - tee: amdtee: fix race condition in amdtee_open_session
  - drm/i915: Preserve crtc_state->inherited during state clearing
  - drm/i915/active: Fix missing debug object activation
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
  - wifi: mac80211: fix qos on mesh interfaces
  - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
  - usb: chipidea: core: fix possible concurrent when switch role
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role
  - usb: cdns3: Fix issue with using incorrect PCI device function
  - igb: revert rtnl_lock() that causes deadlock
  - fsverity: Remove WQ_UNBOUND from fsverity read workqueue
  - usb: gadget: u_audio: don't let userspace block driver unbind
  - usb: dwc2: fix a devres leak in hw_enable upon suspend resume
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
  - cifs: empty interface list when server doesn't support query interfaces
  - sh: sanitize the flags on sigreturn
  - net: usb: qmi_wwan: add Telit 0x1080 composition
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
  - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
  - scsi: lpfc: Avoid usage of list iterator variable after loop
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand
  - scsi: hisi_sas: Check devm_add_action() return value
  - scsi: target: iscsi: Fix an error message in iscsi_check_key()
  - selftests/bpf: check that modifier resolves after pointer
  - m68k: Only force 030 bus error if PC not in exception table
  - ca8210: fix mac_len negative array access
  - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
  - riscv: Bump COMMAND_LINE_SIZE value to 1024
  - thunderbolt: Use const qualifier for `ring_interrupt_index`
  - thunderbolt: Use scale field when allocating USB3 bandwidth
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
  - scsi: qla2xxx: Perform lockless command completion in abort path
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
  - hwmon: fix potential sensor registration fail if of_node is missing
  - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
  - Bluetooth: L2CAP: Fix responding with wrong PDU type
  - Bluetooth: L2CAP: Fix not checking for maximum number of DCID
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address
  - net: mdio: thunder: Add missing fwnode_handle_put()
  - gve: Cache link_speed value from device
  - nvme-tcp: fix nvme_tcp_term_pdu to match spec
  - net/sonic: use dma_mapping_error() for error check
  - erspan: do not use skb_mac_header() in ndo_start_xmit()
  - atm: idt77252: fix kmemleak when rmmod idt77252
  - net/mlx5: E-Switch, Fix an Oops in error handling code
  - net/mlx5: Read the TC mapping of all priorities on ETS query
  - net/mlx5: Fix steering rules cleanup
  - bpf: Adjust insufficient default bpf_jit_limit
  - keys: Do not cache key in task struct if key is requested from kernel thread
  - bootconfig: Fix testcase to increase max node
  - net/ps3_gelic_net: Use dma_mapping_error
  - net/ps3_gelic_net: Fix RX sk_buff length
  - net: phy: Ensure state transitions are processed from phy_stop()
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - net: usb: smsc95xx: Limit packet length to skb->len
  - i2c: imx-lpi2c: check only for enabled interrupt flags
  - igc: fix the validation logic for taprio's gate list
  - igbvf: Regard vf reset nack as success
  - intel/igbvf: free irq on the error path in igbvf_request_msix()
  - iavf: fix non-tunneled IPv6 UDP packet type and hashing
  - iavf: fix inverted Rx hash condition leading to disabled hash
  - xsk: Add missing overflow check in xdp_umem_reg
  - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
  - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
  - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - drm/sun4i: fix missing component unbind on bind errors
  - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
  - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown
  - serial: fsl_lpuart: Fix comment typo
  - KVM: Register /dev/kvm as the _very_ last thing during initialization
  - KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except()
  - KVM: Optimize kvm_make_vcpus_request_mask() a bit
  - KVM: KVM: Use cpumask_available() to check for NULL cpumask when kicking vCPUs
  - KVM: Clean up benign vcpu->cpu data races when kicking vCPUs
  - ipmi:ssif: Add a timer between request retries
  - ipmi:ssif: resend_msg() cannot fail
  - ipmi:ssif: Increase the message retry time
  - ipmi:ssif: make ssif_i2c_send() void
  - interconnect: qcom: osm-l3: fix icc_onecell_data allocation
  - !2700 [22.03-LTS-SP2]Backport 5.10.176 LTS patches from upstream.
  - !2646 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
  - x86/sev: Check for user-space IOIO pointing to kernel space
  - x86/sev: Check IOBM for IOIO exceptions from user-space
  - x86/sev: Disable MMIO emulation from user mode
  - HID: uhid: Over-ride the default maximum data buffer value with our own
  - HID: core: Provide new max_buffer_size attribute to over-ride the default
  - fs: use consistent setgid checks in is_sxid()
  - attr: add in_group_or_capable()
  - fs: move S_ISGID stripping into the vfs_*() helpers
  - fs: add mode_strip_sgid() helper
  - PCI/DPC: Await readiness of secondary bus after reset
  - PCI: Unify delay handling for reset and resume
  - s390/ipl: add missing intersection check to ipl_report handling
  - drm/i915/active: Fix misuse of non-idle barriers as fence trackers
  - drm/i915: Don't use stolen memory for ring buffers with LLC
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - x86/mce: Make sure logged MCEs are processed after sysfs update
  - cpuidle: psci: Iterate backwards over list in psci_pd_remove()
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
  - mmc: sdhci_am654: lower power-on failed message severity
  - mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
  - mptcp: avoid setting TCP_CLOSE state twice
  - drm/shmem-helper: Remove another errant put in error path
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
  - ALSA: hda: intel-dsp-config: add MTL PCI id
  - cifs: Fix smb2_set_path_size()
  - tracing: Make tracepoint lockdep check actually test something
  - tracing: Check field value in hist_field_name()
  - tracing: Make splice_read available again
  - interconnect: fix mem leak when freeing nodes
  - firmware: xilinx: don't make a sleepable memory allocation from an atomic context
  - serial: 8250_em: Fix UART port type
  - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted
  - ext4: fix possible double unlock when moving a directory
  - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
  - sh: intc: Avoid spurious sizeof-pointer-div warning
  - drm/amdkfd: Fix an illegal memory access
  - ext4: fix task hung in ext4_xattr_delete_inode
  - ext4: fail ext4_iget if special inode unallocated
  - jffs2: correct logic when creating a hole in jffs2_write_begin
  - mmc: atmel-mci: fix race between stop command and start of next command
  - media: m5mols: fix off-by-one loop termination error
  - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
  - hwmon: tmp512: drop of_match_ptr for ID table
  - hwmon: (ucd90320) Add minimum delay between bus accesses
  - hwmon: (ina3221) return prober error code
  - hwmon: (adt7475) Fix masking of hysteresis registers
  - hwmon: (adt7475) Display smoothing attributes in correct order
  - ethernet: sun: add check for the mdesc_grab()
  - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
  - selftests: net: devlink_port_split.py: skip test if no suitable device available
  - net/iucv: Fix size of interrupt data
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
  - ipv4: Fix incorrect table ID in IOCTL path
  - net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
  - ice: xsk: disable txq irq before flushing hw
  - block: sunvdc: add check for mdesc_grab() returning NULL
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - nvme: fix handling single range discard request
  - block: null_blk: Fix handling of fake timeout request
  - null_blk: Move driver into its own directory
  - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
  - net: usb: smsc75xx: Limit packet length to skb->len
  - net/smc: fix deadlock triggered by cancel_delayed_work_syn()
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
  - net: tunnels: annotate lockless accesses to dev->needed_headroom
  - qed/qed_dev: guard against a possible division by zero
  - net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode
  - ipvlan: Make skb->skb_iif track skb->dev for l3s mode
  - nfc: pn533: initialize struct pn533_out_arg properly
  - tcp: tcp_make_synack() can be called from process context
  - scsi: core: Fix a procfs host directory removal regression
  - scsi: core: Fix a comment in function scsi_host_dev_release()
  - netfilter: nft_redir: correct value of inet type `.maxattrs`
  - netfilter: nft_redir: correct length for loading protocol registers
  - netfilter: nft_masq: correct length for loading protocol registers
  - netfilter: nft_nat: correct length for loading protocol registers
  - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
  - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate
  - clk: HI655X: select REGMAP instead of depending on it
  - drm/meson: fix 1px pink line on GXM when scaling video overlay
  - cifs: Move the in_send statistic to __smb_send_rqst()
  - drm/panfrost: Don't sync rpm suspension after mmu flushing
  - xfrm: Allow transport-mode states with AF_UNSPEC selector
  - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.33.0.110
changelog:
  - !2858 [sync] PR-2851:  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: dvbdev: fix error logic at dvb_register_device()
  - media: dvbdev: Fix memleak in dvb_register_device
  - !2848 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
  - drm/qxl: fix UAF on handle creation
  - !2832 [22.03-LTS-SP2]Backport 5.10.180 LTS patches from upstream.
  - !2518 [sync] PR-2501:  scsi: mpt3sas: Perform additional retries if doorbell read returns 0
  - ext4: fix data races when using cached status extents
  - drm/amd/display: Fix hang when skipping modeset
  - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - KVM: x86: move guest_pv_has out of user_access section
  - KVM: x86: do not report preemption if the steal time cache is stale
  - KVM: x86: revalidate steal time cache if MSR value changes
  - KVM: x86: do not set st->preempted when going back to user space
  - KVM: x86: Remove obsolete disabling of page faults in kvm_arch_vcpu_put()
  - KVM: Fix steal time asm constraints
  - KVM: x86: Fix recording of guest steal time / preempted status
  - KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
  - drbd: correctly submit flush bio on barrier
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa()
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason
  - ext4: add bounds checking in get_max_inline_xattr_value_size()
  - ext4: fix deadlock when converting an inline directory in nojournal mode
  - ext4: improve error recovery code paths in __ext4_remount()
  - KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL
  - HID: wacom: insert timestamp to packed Bluetooth (BT) events
  - HID: wacom: Set a default resolution for older tablets
  - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
  - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
  - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  - drm/panel: otm8009a: Set backlight parent to panel device
  - f2fs: fix potential corruption when moving a directory
  - ARM: dts: s5pv210: correct MIPI CSIS clock name
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite
  - remoteproc: st: Call of_node_put() on iteration error
  - remoteproc: stm32: Call of_node_put() on iteration error
  - sh: nmi_debug: fix return value of __setup handler
  - sh: init: use OF_EARLY_FLATTREE for early init
  - sh: mcount.S: fix build error when PRINTK is not enabled
  - sh: math-emu: fix macro redefined warning
  - inotify: Avoid reporting event with invalid wd
  - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
  - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet
  - cifs: fix pcchunk length type in smb2_copychunk_range
  - btrfs: print-tree: parent bytenr must be aligned to sector size
  - btrfs: don't free qgroup space unless specified
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id()
  - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
  - perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents
  - perf vendor events power9: Remove UTF-8 characters from JSON files
  - net: enetc: check the index of the SFI rather than the handle
  - virtio_net: suppress cpu stall when free_unused_bufs
  - virtio_net: split free_unused_bufs()
  - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
  - drm/amdgpu: add a missing lock for AMDGPU_SCHED
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - ionic: remove noise from ethtool rxnfc error msg
  - octeontx2-vf: Detach LF resources on probe cleanup
  - octeontx2-pf: Disable packet I/O for graceful exit
  - rxrpc: Fix hard call timeout units
  - sfc: Fix module EEPROM reporting for QSFP modules
  - net/sched: act_mirred: Add carrier check
  - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
  - writeback: fix call of incorrect macro
  - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
  - net/sched: cls_api: remove block_cb from driver_list before freeing
  - net/ncsi: clear Tx enable mode when handling a Config required AEN
  - scsi: qedi: Fix use after free bug in qedi_remove()
  - dm verity: fix error handling for check_at_most_once on FEC
  - dm verity: skip redundant verity_handle_err() on I/O errors
  - mailbox: zynqmp: Fix counts of child nodes
  - mailbox: zynq: Switch to flexible array to simplify code
  - crypto: ccp - Clear PSP interrupt status register before calling handler
  - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - tty: clean include/linux/tty.h up
  - tty: move some tty-only functions to drivers/tty/tty.h
  - tty: move some internal tty lock enums and functions out of tty.h
  - tty: audit: move some local functions out of tty.h
  - tty: create internal tty.h file
  - scsi: target: core: Avoid smp_processor_id() in preemptible code
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - sound/oss/dmasound: fix 'dmasound_setup' defined but not used
  - debugobject: Ensure pool refill (again)
  - arm64: Stash shadow stack pointer in the task struct on interrupt
  - arm64: Always load shadow stack pointer directly from the task struct
  - perf intel-pt: Fix CYC timestamps after standalone CBR
  - perf auxtrace: Fix address filter entire kernel size
  - dm flakey: fix a crash with invalid table line
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
  - dm clone: call kmem_cache_destroy() in dm_clone_init() error path
  - ia64: fix an addr to taddr in huge_pte_offset()
  - s390/dasd: fix hanging blockdevice after request requeue
  - btrfs: scrub: reject unsupported scrub flags
  - scripts/gdb: fix lx-timerlist for Python3
  - afs: Fix updating of i_size with dv jump from server
  - mfd: tqmx86: Correct board names for TQMxE39x
  - mfd: tqmx86: Specify IO port register range more precisely
  - mfd: tqmx86: Add support for TQMx110EB and TQMxE40x
  - mfd: tqmx86: Remove incorrect TQMx90UC board ID
  - mfd: tqmx86: Do not access I2C_DETECT register through io_base
  - thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe
  - dmaengine: at_xdmac: do not enable all cyclic channels
  - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
  - dmaengine: dw-edma: Fix to change for continuous transfer
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
  - pwm: mtk-disp: Disable shadow registers before setting backlight values
  - pwm: mtk-disp: Adjust the clocks to avoid them mismatch
  - pwm: mtk-disp: Don't check the return code of pwmchip_remove()
  - leds: tca6507: Fix error handling of using fwnode_property_read_string
  - dmaengine: mv_xor_v2: Fix an error code.
  - leds: TI_LMU_COMMON: select REGMAP instead of depending on it
  - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
  - openrisc: Properly store r31 to pt_regs on unhandled exceptions
  - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails
  - RDMA/mlx5: Use correct device num_ports when modify DC
  - SUNRPC: remove the maximum number of retries in call_bind_status
  - RDMA/mlx5: Fix flow counter query via DEVX
  - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  - input: raspberrypi-ts: Release firmware handle when not needed
  - firmware: raspberrypi: Introduce devm_rpi_firmware_get()
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
  - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
  - IB/hfi1: Add additional usdma traces
  - IB/hfi1: Add AIP tx traces
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
  - RDMA/srpt: Add a check for valid 'mad_agent' pointer
  - RDMA/cm: Trace icm_send_rej event before the cm state is reset
  - RDMA/siw: Remove namespace check from siw_netdev_event()
  - clk: add missing of_node_put() in "assigned-clocks" property parsing
  - power: supply: generic-adc-battery: fix unit scaling
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
  - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
  - rtc: omap: include header for omap_rtc_power_off_program prototype
  - workqueue: Fix hung time report of worker pools
  - RDMA/rdmavt: Delete unnecessary NULL check
  - RDMA/siw: Fix potential page_array out of range access
  - clk: at91: clk-sam9x60-pll: fix return value check
  - perf/core: Fix hardlockup failure caused by perf throttle
  - powerpc/rtas: use memmove for potentially overlapping buffer copy
  - macintosh: via-pmu-led: requires ATA to be set
  - powerpc/sysdev/tsi108: fix resource printk format warnings
  - powerpc/wii: fix resource printk format warnings
  - powerpc/mpc512x: fix resource printk format warning
  - macintosh/windfarm_smu_sat: Add missing of_node_put()
  - spmi: Add a check for remove callback when removing a SPMI driver
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  - serial: 8250: Add missing wakeup event reporting
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  - usb: mtu3: fix kernel panic at qmu transfer done irq handler
  - usb: chipidea: fix missing goto in `ci_hdrc_probe`
  - usb: gadget: tegra-xudc: Fix crash in vbus_draw
  - sh: sq: Fix incorrect element size for allocating bitmap buffer
  - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
  - spi: cadence-quadspi: fix suspend-resume implementations
  - ASoC: fsl_mqs: move of_node_put() to the correct location
  - coresight: etm_pmu: Set the module field
  - scripts/gdb: bail early if there are no generic PD
  - scripts/gdb: bail early if there are no clocks
  - ia64: salinfo: placate defined-but-not-used warning
  - ia64: mm/contig: fix section mismatch warning/error
  - PCI/EDR: Clear Device Status after EDR error recovery
  - of: Fix modalias string generation
  - vmci_host: fix a race condition in vmci_host_poll() causing GPF
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian
  - spi: qup: Don't skip cleanup in remove's error path
  - linux/vt_buffer.h: allow either builtin or modular for macros
  - ASoC: es8316: Handle optional IRQ assignment
  - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
  - PCI: imx6: Install the fault handler only on compatible match
  - spi: imx: Don't skip cleanup in remove's error path
  - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - iio: light: max44009: add missing OF device matching
  - fpga: bridge: fix kernel-doc parameter description
  - usb: dwc3: gadget: Change condition for processing suspend event
  - usb: host: xhci-rcar: remove leftover quirk handling
  - pstore: Revert pmsg_lock back to a normal mutex
  - ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - net: amd: Fix link leak when verifying config failed
  - netlink: Use copy_to_user() for optval in netlink_getsockopt().
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - net/sched: sch_fq: fix integer overflow of "credit"
  - bpf: Don't EFAULT for getsockopt with optval=NULL
  - ixgbe: Enable setting RSS table to default values
  - ixgbe: Allow flow hash to be set via ethtool
  - wifi: iwlwifi: fw: fix memory leak in debugfs
  - wifi: iwlwifi: mvm: check firmware response size
  - wifi: iwlwifi: make the loop for card preparation effective
  - jdb2: Don't refuse invalidation of already invalidated buffers
  - wifi: iwlwifi: fw: move memset before early return
  - wifi: iwlwifi: yoyo: Fix possible division by zero
  - md/raid10: fix memleak of md thread
  - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
  - nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
  - nvme: fix async event trace event
  - nvme: handle the persistent internal error AER
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
  - f2fs: fix to avoid use-after-free for cached IPU bio
  - xsk: Fix unaligned descriptor validation
  - bpftool: Fix bug for long instructions in program CFG dumps
  - selftests/bpf: Wait for receive in cg_storage_multi test
  - net: qrtr: correct types of trace event parameters
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
  - crypto: sa2ul - Select CRYPTO_DES
  - crypto: caam - Clear some memory in instantiate_rng
  - f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
  - f2fs: apply zone capacity to all zone type
  - f2fs: enforce single zone capacity
  - f2fs: handle dqget error in f2fs_transfer_project_quota()
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
  - scsi: target: iscsit: Fix TAS handling during conn cleanup
  - scsi: target: Fix multiple LUN_RESET handling
  - scsi: target: Make state_list per CPU
  - scsi: target: Rename cmd.bad_sector to cmd.sense_info
  - scsi: target: Rename struct sense_info to sense_detail
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - net/packet: annotate accesses to po->xmit
  - vlan: partially enable SIOCSHWTSTAMP in container
  - bpf: Remove misleading spec_v1 check on var-offset stack read
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  - bpf: fix precision propagation verbose logging
  - bpf: take into account liveness when propagating precision
  - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
  - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
  - tools: bpftool: Remove invalid ' json escape
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
  - wifi: ath9k: hif_usb: fix memory leak of remain_skbs
  - wifi: ath6kl: minor fix for allocation size
  - tick/common: Align tick period with the HZ tick.
  - tick: Get rid of tick_period
  - drm/i915: Make intel_get_crtc_new_encoder() less oopsy
  - debugobject: Prevent init race with static objects
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
  - regulator: stm32-pwr: fix of_iomap leak
  - media: venus: dec: Fix handling of the start cmd
  - media: venus: vdec: Handle DRC after drain
  - media: venus: preserve DRC state across seeks
  - media: venus: vdec: Make decoder return LAST flag for sufficient event
  - media: venus: vdec: Fix non reliable setting of LAST flag
  - media: rc: gpio-ir-recv: Fix support for wake-up
  - media: rcar_fdp1: Fix refcount leak in probe and remove function
  - media: rcar_fdp1: Fix the correct variable assignments
  - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()
  - media: rcar_fdp1: fix pm_runtime_get_sync() usage count
  - media: rcar_fdp1: simplify error check logic at fdp_open()
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
  - regulator: core: Avoid lockdep reports when resolving supplies
  - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
  - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
  - ARM: dts: gta04: fix excess dma channel usage
  - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
  - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
  - drm: msm: adreno: Disable preemption on Adreno 510
  - drm/msm/adreno: drop bogus pm_runtime_set_active()
  - drm/msm/adreno: Defer enabling runpm until hw_init()
  - media: max9286: Free control handler
  - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
  - firmware: qcom_scm: Clear download bit during reboot
  - media: bdisp: Add missing check for create_workqueue
  - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
  - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K
  - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8996: Fix the PCI I/O port range
  - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8998: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
  - EDAC/skx: Fix overflows on the DRAM row address mapping arrays
  - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources
  - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
  - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
  - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
  - soc: ti: pm33xx: Enable basic PM runtime support for genpd
  - drm/probe-helper: Cancel previous job before starting new one
  - drm/vgem: add missing mutex_destroy
  - drm/rockchip: Drop unbalanced obj unref
  - erofs: fix potential overflow calculating xattr_isize
  - erofs: stop parsing non-compact HEAD index if clusterofs is invalid
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
  - tpm, tpm: Implement usage counter for locality
  - tpm, tpm_tis: Claim locality before writing interrupt registers
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
  - tpm, tpm_tis: Do not skip reset of original interrupt vector
  - selinux: ensure av_permissions.h is built when needed
  - selinux: fix Makefile dependencies of flask.h
  - selftests/resctrl: Check for return value after write_schemata()
  - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
  - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
  - wifi: rtl8xxxu: RTL8192EU always needs full init
  - mailbox: zynqmp: Fix typo in IPI documentation
  - mailbox: zynqmp: Fix IPI isr handling
  - nilfs2: fix infinite loop in nilfs_mdt_get_block()
  - nilfs2: do not write dirty data after degenerating to read-only
  - parisc: Fix argument pointer in real64_call_asm()
  - sound/oss/dmasound: fix build when drivers are mixed =y/=m
  - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
  - i2c: omap: Fix standard mode false ACK readings
  - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  - crypto: safexcel - Cleanup ring IRQ workqueues on load failure
  - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
  - ring-buffer: Sync IRQ works before buffer destruction
  - pwm: meson: Fix g12a ao clk81 name
  - pwm: meson: Fix axg ao mux parents
  - kheaders: Use array declaration instead of char
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi:ssif: Add send_retries increment
  - MIPS: fw: Allow firmware to pass a empty env
  - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
  - xhci: fix debugfs register accesses while suspended
  - staging: iio: resolver: ads1210: fix config mode
  - ext4: use ext4_journal_start/stop for fast commit transactions
  - blk-crypto: make blk_crypto_evict_key() more robust
  - blk-crypto: make blk_crypto_evict_key() return void
  - blk-mq: release crypto keyslot before reporting I/O complete
  - hwmon: (adt7475) Use device_property APIs when configuring polarity
  - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
  - USB: dwc3: fix runtime pm imbalance on unbind
  - USB: dwc3: fix runtime pm imbalance on probe errors
  - PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - wireguard: timers: cast enum limits members to int in prints
  - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod
  - driver core: Don't require dynamic_debug for initcall_debug probe timing
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product
  - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  - KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
  - !2802 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


