# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.38.0.67
changelog:
  - jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()
  - NFSv4: fix open failure with O_ACCMODE flag
  - Revert "NFSv4: Handle the special Linux file open access mode"
  - jbd2: fix a potential race while discarding reserved buffers after an abort
  - x86: Pin task-stack in __get_wchan()
  - x86: Fix __get_wchan() for !STACKTRACE
  - x86: Fix get_wchan() to support the ORC unwinder
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - io_uring: fix using under-expanded iters
  - io_uring: don't re-import iovecs from callbacks
  - nfc: replace improper check device_is_registered() in netlink related functions
  - io_uring: always use original task when preparing req identity
  - block: fix NULL pointer dereference in disk_release()
  - block, bfq: make bfq_has_work() more accurate
  - blk-mq: fix panic during blk_mq_run_work_fn()
  - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()
  - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl
  - net: hns3: add query vf ring and vector map relation
  - net: hns3: add byte order conversion for VF to PF mailbox message
  - net: hns3: add byte order conversion for PF to VF mailbox message
  - net: hns3: remove the affinity settings of vector0
  - net: hns3: fix access null pointer issue when set tx-buf-size as 0
  - net: hns3: add return value for mailbox handling in PF
  - net: hns3: add validity check for message data length
  - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx
  - net: hns3: fix error log of tx/rx tqps stats
  - net: hns3: align the debugfs output to the left
  - net: hns3: clear inited state and stop client after failed to register netdev
  - net: hns3: Fix spelling mistake "actvie" -> "active"
  - net: hns3: remove unnecessary line wrap for hns3_set_tunable
  - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET
  - net: hns3: fix the wrong words in comments
  - net: hns3: update the comment of function hclgevf_get_mbx_resp
  - net: hns3: add log for setting tx spare buf size
  - net: hns3: add failure logs in hclge_set_vport_mtu
  - net: hns3: refine the definition for struct hclge_pf_to_vf_msg
  - net: hns3: refactor hns3_set_ringparam()
  - net: hns3: add ethtool parameter check for CQE/EQE mode
  - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
  - net: hns3: fix the concurrency between functions reading debugfs
  - skbuff: fix coalescing for page_pool fragment recycling
  - netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  - kselftest/vm: fix tests build with old libc
  - sfc: extend the locking on mcdi->seqno
  - tcp: make tcp_read_sock() more robust
  - nl80211: Update bss channel on channel switch for P2P_CLIENT
  - drm/vrr: Set VRR capable prop only if it is attached to connector
  - iwlwifi: don't advertise TWT support
  - atm: firestream: check the return value of ioremap() in fs_init()
  - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready
  - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
  - MIPS: smp: fill in sibling and core maps earlier
  - mac80211: refuse aggregations sessions before authorized
  - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
  - ARM: dts: rockchip: reorder rk322x hmdi clocks
  - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
  - arm64: dts: rockchip: reorder rk3399 hdmi clocks
  - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
  - xfrm: Fix xfrm migrate issues when address family changes
  - xfrm: Check if_id in xfrm_migrate
  - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.39.0.68
changelog:
  - eulerfs: fix potential sbi->persisters free error
  - fs/ntfs3: Fix invalid free in log_replay
  - Revert "nfs: nfs_file_write() should check for writeback errors"
  - xfs: Skip repetitive warnings about mount options
  - xfs: rename variable mp to parsing_mp
  - ext4: convert from atomic_t to refcount_t on ext4_io_end->count
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  - RDMA/hns: Refactor the alloc_cqc()
  - RDMA/hns: Refactor the alloc_srqc()
  - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox()
  - RDMA/hns: Remove similar code that configures the hardware contexts
  - RDMA/hns: Refactor mailbox functions
  - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox
  - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox
  - RDMA/hns: Remove fixed parameter "timeout" in the mailbox
  - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox
  - tcp: increase source port perturb table to 2^16
  - tcp: change source port randomizarion at connect() time
  - ext4: correct the judgment of BUG in ext4_mb_normalize_request
  - ext4: fix bug_on ext4_mb_use_inode_pa
  - net/ns: put workqueue of cleanup_net sleep for a while when notify.
  - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate()
  - md: bcache: check the return value of kzalloc() in detached_dev_do_request()
  - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init()
  - bcache: avoid journal no-space deadlock by reserving 1 journal bucket
  - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init()
  - bcache: improve multithreaded bch_sectors_dirty_init()
  - bcache: improve multithreaded bch_btree_check()
  - bcache: fixup multiple threads crash
  - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing
  - bcache: use default_groups in kobj_type
  - bcache: fix NULL pointer reference in cached_dev_detach_finish
  - bcache: replace snprintf in show functions with sysfs_emit
  - bcache: move uapi header bcache.h to bcache code directory
  - bcache: move calc_cached_dev_sectors to proper place on backing device detach
  - bcache: fix error info in register_bcache()
  - md: bcache: Fix spelling of 'acquire'
  - bcache: avoid oversized read request in cache missing code path
  - bcache: remove bcache device self-defined readahead
  - lib: crc64: fix kernel-doc warning
  - bcache: fix a regression of code compiling failure in debug.c
  - bcache: Use 64-bit arithmetic instead of 32-bit
  - md: bcache: Trivial typo fixes in the file journal.c
  - md: bcache: avoid -Wempty-body warnings
  - bcache: use NULL instead of using plain integer as pointer
  - bcache: remove PTR_CACHE
  - bcache: reduce redundant code in bch_cached_dev_run()
  - bcache: Avoid comma separated statements
  - bcache: Fix register_device_aync typo
  - bcache: consider the fragmentation when update the writeback rate
  - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set'
  - bcache: set pdev_set_uuid before scond loop iteration
  - md/bcache: convert comma to semicolon
  - bcache:remove a superfluous check in register_bcache
  - bcache: fix race between setting bdev state to none and new write request direct to backing
  - Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
  - smsc95xx: Ignore -ENODEV errors when device is unplugged
  - net: usb: Correct reset handling of smsc95xx
  - net: usb: Correct PHY handling of smsc95xx
  - perf symbols: Fix symbol size calculation condition
  - Input: aiptek - properly check endpoint type
  - scsi: mpt3sas: Page fault in reply q processing
  - usb: usbtmc: Fix bug in pipe direction for control transfers
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
  - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload
  - net: bcmgenet: skip invalid partial checksums
  - bnx2x: fix built-in kernel driver load failure
  - net: phy: mscc: Add MODULE_FIRMWARE macros
  - net: dsa: Add missing of_node_put() in dsa_port_parse_of
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
  - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
  - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check()
  - hv_netvsc: Add check for kvmalloc_array
  - atm: eni: Add check for dma_map_single
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  - net: phy: marvell: Fix invalid comparison in the resume and suspend functions
  - esp6: fix check on ipv6_skip_exthdr's return value
  - vsock: each transport cycles only on its own sockets
  - efi: fix return value of __setup handlers
  - mm: swap: get rid of livelock in swapin readahead
  - ocfs2: fix crash when initialize filecheck kobj fails
  - crypto: qcom-rng - ensure buffer for generate is completely filled


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.40.0.69
changelog:
  - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs
  - fs, mm: fix race in unlinking swapfile
  - ext4: recover csum seed of tmp_inode after migrating to extents
  - lockdown: also lock down previous kgdb use
  - nds32: fix access_ok() checks in get/put_user
  - wcn36xx: Differentiate wcn3660 from wcn3620
  - tpm: use try_get_ops() in tpm-space.c
  - mac80211: fix potential double free on mesh join
  - rcu: Don't deboost before reporting expedited quiescent state
  - Revert "ath: add support for special 0x0 regulatory domain"
  - crypto: qat - disable registration of algorithms
  - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
  - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
  - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
  - drivers: net: xgene: Fix regression in CRC stripping
  - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
  - ALSA: cmipci: Restore aux vol on suspend/resume
  - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
  - ALSA: pcm: Add stream lock during PCM reset ioctl operations
  - ALSA: pcm: Fix races among concurrent prealloc proc writes
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
  - ALSA: hda/realtek: Add quirk for ASUS GA402
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
  - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
  - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE
  - ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
  - staging: fbtft: fb_st7789v: reset display before initialization
  - tpm: Fix error handling in async work
  - cgroup-v1: Correct privileges check in release_agent writes
  - exfat: avoid incorrectly releasing for root inode
  - net: ipv6: fix skb_over_panic in __ip6_append_data


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.41.0.70
changelog:
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout
  - KVM: x86: avoid calling x86 emulator without a decoded instruction
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - net: hns3: fix PF rss size initialization bug
  - net: hns3: restore tm priority/qset to default settings when tc disabled
  - net: hns3: modify the ring param print info
  - net: hns3: don't push link state to VF if unalive
  - net: hns3: set port base vlan tbl_sta to false before removing old vlan


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.42.0.71
changelog:
  - smp: fix early_param csdlock_debug boot panic
  - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx()
  - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx()
  - RDMA/hns: Remove the num_cqc_timer variable
  - RDMA/hns: Add the detection for CMDQ status in the device initialization process
  - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr()
  - RDMA/hns: Init the variable at the suitable place
  - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource
  - RDMA/hns: Remove redundant variable "ret"
  - RDMA/hns: Remove unused function to_hns_roce_state()
  - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP
  - ipmi:watchdog: Set panic count to proper value on a panic
  - ipmi/watchdog: replace atomic_add() and atomic_sub()
  - scsi: hisi_sas: Change the debugfs parameters dump count default value
  - blk-mq: don't clear flush_rq from tags->rqs[]
  - ext4: correct the misjudgment in ext4_iget_extra_inode
  - ext4: correct max_inline_xattr_value_size computing
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
  - x86/speculation/mmio: Print SMT warning
  - KVM: x86/speculation: Disable Fill buffer clear within guests
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - x86/speculation/srbds: Update SRBDS mitigation selection
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - x86/speculation: Add a common function for MD_CLEAR mitigation update
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  - Documentation: Add documentation for Processor MMIO Stale Data
  - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup"
  - can: m_can: m_can_tx_handler(): fix use after free of skb
  - openvswitch: Fixed nd target mask field in the flow dump.
  - docs: sysctl/kernel: add missing bit to panic_print
  - um: Fix uml_mconsole stop/go
  - ARM: dts: spear13xx: Update SPI dma properties
  - ARM: dts: spear1340: Update serial node properties
  - ASoC: topology: Allow TLV control to be either read or write
  - dt-bindings: spi: mxic: The interrupt property is not mandatory
  - dt-bindings: mtd: nand-controller: Fix a comment in the examples
  - dt-bindings: mtd: nand-controller: Fix the reg property description
  - bpf: Fix comment for helper bpf_current_task_under_cgroup()
  - bpf: Adjust BPF stack helper functions to accommodate skip > 0
  - mm/usercopy: return 1 from hardened_usercopy __setup() handler
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler
  - ARM: 9187/1: JIVE: fix return value of __setup handler
  - mm/mmap: return 1 from stack_guard_gap __setup() handler
  - batman-adv: Check ptr for NULL before reducing its refcnt
  - ASoC: soc-compress: Change the check for codec_dai
  - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet
  - proc: bootconfig: Add null pointer check
  - can: isotp: restore accidentally removed MSG_PEEK feature
  - platform/chrome: cros_ec_typec: Check for EC device
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
  - riscv module: remove (NOLOAD)
  - io_uring: fix memory leak of uid in files registration
  - ARM: iop32x: offset IRQ numbers by 1
  - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
  - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
  - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function
  - pinctrl: pinconf-generic: Print arguments for bias-pull-*
  - watch_queue: Free the page array when watch_queue is dismantled
  - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes
  - mailbox: imx: fix wakeup failure from freeze mode
  - rxrpc: Fix call timer start racing with call destruction
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size
  - rtc: check if __rtc_read_time was successful
  - XArray: Update the LRU list in xas_split()
  - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value
  - can: mcba_usb: properly check endpoint type
  - XArray: Fix xas_create_range() when multi-order entry present
  - wireguard: socket: ignore v6 endpoints when ipv6 is disabled
  - wireguard: socket: free skb in send6 when ipv6 is disabled
  - wireguard: queueing: use CFI-safe ptr_ring cleanup function
  - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
  - KVM: SVM: fix panic on out-of-bounds guest IRQ
  - KVM: x86: fix sending PV IPI
  - KVM: Prevent module exit until all VMs are freed
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
  - platform: chrome: Split trace include file
  - scsi: qla2xxx: Use correct feature type field during RFF_ID processing
  - scsi: qla2xxx: Reduce false trigger to login
  - scsi: qla2xxx: Fix N2N inconsistent PLOGI
  - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
  - scsi: qla2xxx: Fix hang due to session stuck
  - scsi: qla2xxx: Fix incorrect reporting of task management failure
  - scsi: qla2xxx: Fix disk failure to rediscover
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - scsi: qla2xxx: Check for firmware dump already collected
  - scsi: qla2xxx: Add devids and conditionals for 28xx
  - scsi: qla2xxx: Fix device reconnect in loop topology
  - scsi: qla2xxx: Fix warning for missing error code
  - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
  - scsi: qla2xxx: Fix scheduling while atomic
  - scsi: qla2xxx: Fix stuck session in gpdb
  - powerpc: Fix build errors with newer binutils
  - powerpc/lib/sstep: Fix build errors with newer binutils
  - powerpc/lib/sstep: Fix 'sthcx' instruction
  - powerpc/kasan: Fix early region not updated correctly
  - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU
  - ALSA: hda/realtek: Add alc256-samsung-headphone fixup
  - media: atomisp: fix bad usage at error handling logic
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing
  - media: hdpvr: initialize dev->worker at hdpvr_register_videodev
  - media: Revert "media: em28xx: add missing em28xx_close_extension"
  - video: fbdev: sm712fb: Fix crash in smtcfb_write()
  - ARM: mmp: Fix failure to remove sram device
  - ARM: tegra: tamonten: Fix I2C3 pad setting
  - lib/test_lockup: fix kernel pointer check for separate address spaces
  - uaccess: fix type mismatch warnings from access_ok()
  - media: cx88-mpeg: clear interrupt status register before streaming video
  - ASoC: soc-core: skip zero num_dai component in searching dai name
  - ARM: dts: bcm2711: Add the missing L1/L2 cache information
  - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
  - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
  - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
  - arm64: defconfig: build imx-sdma as a module
  - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
  - ARM: ftrace: avoid redundant loads or clobbering IP
  - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
  - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards
  - ASoC: madera: Add dependencies on MFD
  - ARM: dts: bcm2837: Add the missing L1/L2 cache information
  - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
  - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  - video: fbdev: w100fb: Reset global state
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - media: ir_toy: free before error exiting
  - media: staging: media: zoran: fix various V4L2 compliance errors
  - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
  - media: staging: media: zoran: move videodev alloc
  - ntfs: add sanity check on allocation size
  - f2fs: compress: fix to print raw data size in error path of lz4 decompression
  - NFSD: Fix nfsd_breaker_owns_lease() return values
  - f2fs: fix to do sanity check on curseg->alloc_type
  - ext4: don't BUG if someone dirty pages without asking ext4 first
  - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
  - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb
  - locking/lockdep: Iterate lock_classes directly when reading lockdep files
  - spi: tegra20: Use of_device_get_match_data()
  - nvme-tcp: lockdep: annotate in-kernel sockets
  - parisc: Fix handling off probe non-access faults
  - PM: core: keep irq flags in device_pm_check_callbacks()
  - ACPI/APEI: Limit printable size of BERT table data
  - Revert "Revert "block, bfq: honor already-setup queue merges""
  - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3
  - ACPICA: Avoid walking the ACPI Namespace if it is not there
  - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
  - irqchip/nvic: Release nvic_base upon failure
  - irqchip/qcom-pdc: Fix broken locking
  - Fix incorrect type in assignment of ipv6 port for audit
  - loop: use sysfs_emit() in the sysfs xxx show()
  - selinux: allow FIOCLEX and FIONCLEX with policy capability
  - selinux: use correct type for context length
  - pinctrl: npcm: Fix broken references to chip->parent_device
  - gcc-plugins/stackleak: Exactly match strings instead of prefixes
  - regulator: rpi-panel: Handle I2C errors/timing to the Atmel
  - LSM: general protection fault in legacy_parse_param
  - fs: fix fd table size alignment properly
  - lib/test: use after free in register_test_dev_kmod()
  - fs: fd tables have to be multiples of BITS_PER_LONG
  - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
  - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
  - qlcnic: dcb: default to returning -EOPNOTSUPP
  - selftests: test_vxlan_under_vrf: Fix broken test case
  - net: phy: broadcom: Fix brcm_fet_config_init()
  - net: enetc: report software timestamping via SO_TIMESTAMPING
  - xen: fix is_xen_pmu()
  - clk: Initialize orphan req_rate
  - clk: qcom: gcc-msm8994: Fix gpll4 width
  - kdb: Fix the putarea helper function
  - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
  - jfs: fix divide error in dbNextAG
  - driver core: dd: fix return value of __setup handler
  - firmware: google: Properly state IOMEM dependency
  - kgdbts: fix return value of __setup handler
  - serial: 8250: fix XOFF/XON sending when DMA is used
  - kgdboc: fix return value of __setup handler
  - tty: hvc: fix return value of __setup handler
  - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
  - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
  - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs
  - pinctrl: mediatek: paris: Fix pingroup pin config state readback
  - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback
  - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
  - staging: mt7621-dts: fix GB-PC2 devicetree
  - staging: mt7621-dts: fix pinctrl properties for ethernet
  - staging: mt7621-dts: fix formatting
  - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
  - NFS: remove unneeded check in decode_devicenotify_args()
  - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
  - clk: clps711x: Terminate clk_div_table with sentinel element
  - clk: loongson1: Terminate clk_div_table with sentinel element
  - clk: actions: Terminate clk_div_table with sentinel element
  - nvdimm/region: Fix default alignment for small regions
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
  - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
  - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
  - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma
  - clk: qcom: clk-rcg2: Update the frac table for pixel clock
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
  - clk: at91: sama7g5: fix parents of PDMCs' GCLK
  - clk: imx7d: Remove audio_mclk_root_clk
  - dma-debug: fix return value of __setup handlers
  - NFS: Return valid errors from nfs2/3_decode_dirent()
  - habanalabs: Add check for pci_enable_device
  - iio: adc: Add check for devm_request_threaded_irq
  - serial: 8250: Fix race condition in RTS-after-send handling
  - NFS: Use of mapping_set_error() results in spurious errors
  - serial: 8250_lpss: Balance reference count for PCI DMA device
  - serial: 8250_mid: Balance reference count for PCI DMA device
  - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
  - clk: qcom: ipq8074: Use floor ops for SDCC1 clock
  - pinctrl: renesas: checker: Fix miscalculation of number of states
  - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
  - staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
  - iio: mma8452: Fix probe failing when an i2c_device_id is used
  - clk: qcom: ipq8074: fix PCI-E clock oops
  - soundwire: intel: fix wrong register name in intel_shim_wake
  - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
  - misc: alcor_pci: Fix an error handling path
  - fsi: Aspeed: Fix a potential double free
  - fsi: aspeed: convert to devm_platform_ioremap_resource
  - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
  - mxser: fix xmit_buf leak in activate when LSR == 0xff
  - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
  - tipc: fix the timer expires after interval 100ms
  - openvswitch: always update flow key after nat
  - tcp: ensure PMTU updates are processed during fastopen
  - net: bcmgenet: Use stronger register read/writes to assure ordering
  - PCI: Avoid broken MSI on SB600 USB devices
  - selftests/bpf/test_lirc_mode2.sh: Exit with proper code
  - i2c: mux: demux-pinctrl: do not deactivate a master that is not active
  - i2c: meson: Fix wrong speed use from probe
  - af_netlink: Fix shift out of bounds in group mask calculation
  - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates
  - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
  - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed
  - selftests/bpf: Fix error reporting from sock_fields programs
  - bareudp: use ipv6_mod_enabled to check if IPv6 enabled
  - can: isotp: support MSG_TRUNC flag when reading from socket
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket
  - USB: storage: ums-realtek: fix error code in rts51x_read_mem()
  - samples/bpf, xdpsock: Fix race when running for fix duration of time
  - bpf, sockmap: Fix double uncharge the mem of sk_msg
  - bpf, sockmap: Fix more uncharged while msg has more_data
  - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
  - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
  - MIPS: pgalloc: fix memory leak caused by pgd_free()
  - MIPS: RB532: fix return value of __setup handler
  - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base
  - ath10k: Fix error handling in ath10k_setup_msa_resources
  - vxcan: enable local echo for sent CAN frames
  - powerpc: 8xx: fix a return value error in mpc8xx_pic_init
  - platform/x86: huawei-wmi: check the return value of device_create_file()
  - selftests/bpf: Make test_lwt_ip_encap more stable and faster
  - libbpf: Unmap rings when umem deleted
  - mfd: mc13xxx: Add check for mc13xxx_irq_request
  - powerpc/sysdev: fix incorrect use to determine if list is empty
  - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
  - net: axienet: fix RX ring refill allocation failure handling
  - IB/hfi1: Allow larger MTU without AIP
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - power: supply: wm8350-power: Handle error for wm8350_register_irq
  - i2c: xiic: Make bus names unique
  - hv_balloon: rate-limit "Unhandled message" warning
  - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
  - KVM: x86: Fix emulation in writing cr8
  - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
  - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties()
  - libbpf: Skip forward declaration when counting duplicated type names
  - gpu: host1x: Fix a memory leak in 'host1x_remove()'
  - bpf, arm64: Feed byte-offset into bpf line info
  - bpf, arm64: Call build_prologue() first in first JIT pass
  - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
  - scsi: hisi_sas: Change permission of parameter prot_mask
  - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
  - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
  - ext2: correct max file size computing
  - TOMOYO: fix __setup handlers return values
  - drm/amd/display: Remove vupdate_int_entry definition
  - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR
  - scsi: pm8001: Fix abort all task initialization
  - scsi: pm8001: Fix NCQ NON DATA command completion handling
  - scsi: pm8001: Fix NCQ NON DATA command task initialization
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req()
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req()
  - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update()
  - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config()
  - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
  - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
  - scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
  - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
  - drm/msm/dpu: fix dp audio condition
  - drm/msm/dpu: add DSPP blocks teardown
  - drm/msm/dp: populate connector of struct dp_panel
  - iwlwifi: mvm: Fix an error code in iwl_mvm_up()
  - iwlwifi: Fix -EIO error code that is never returned
  - dax: make sure inodes are flushed before destroy cache
  - IB/cma: Allow XRC INI QPs to set their local ACK timeout
  - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
  - drm/amd/pm: enable pm sysfs write for one VF mode
  - iommu/ipmmu-vmsa: Check for error num after setting mask
  - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
  - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
  - drm/bridge: dw-hdmi: use safe format when first in bridge chain
  - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
  - scripts/dtc: Call pkg-config POSIXly correct
  - net: dsa: mv88e6xxx: Enable port policy support on 6097
  - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
  - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
  - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv
  - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode
  - powerpc/perf: Don't use perf_hw_context for trace IMC PMU
  - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init
  - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch
  - ray_cs: Check ioremap return value
  - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
  - i40e: respect metadata on XSK Rx to skb
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
  - KVM: PPC: Fix vmx/vsx mixup in mmio emulation
  - RDMA/core: Set MR type in ib_reg_user_mr
  - ath9k_htc: fix uninit value bugs
  - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl()
  - ionic: fix type complaint in ionic_dev_cmd_clean()
  - drm/edid: Don't clear formats if using deep color
  - mtd: rawnand: gpmi: fix controller timings setting
  - mtd: onenand: Check for error irq
  - Bluetooth: hci_serdev: call init_rwsem() before p->open()
  - udmabuf: validate ubuf->pagecount
  - libbpf: Fix possible NULL pointer dereference when destroying skeleton
  - drm/panfrost: Check for error num after setting mask
  - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
  - drm: bridge: adv7511: Fix ADV7535 HPD enablement
  - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe
  - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
  - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
  - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops
  - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS
  - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data
  - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card()
  - mmc: davinci_mmc: Handle error for clk_enable
  - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
  - ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
  - ASoC: fsl_spdif: Disable TX clock when stop
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
  - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
  - ASoC: SOF: Add missing of_node_put() in imx8m_probe
  - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe
  - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource()
  - ivtv: fix incorrect device_caps for ivtvfb
  - media: saa7134: fix incorrect use to determine if list is empty
  - media: saa7134: convert list_for_each to entry variant
  - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
  - ASoC: fsi: Add check for clk_enable
  - ASoC: wm8350: Handle error for wm8350_register_irq
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - media: vidtv: Check for null return of vzalloc
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined
  - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - memory: emif: check the pointer temp in get_device_details()
  - memory: emif: Add check for setup_interrupts
  - ASoC: soc-compress: prevent the potentially use of null pointer
  - ASoC: dwc-i2s: Handle errors for clk_enable
  - ASoC: atmel_ssc_dai: Handle errors for clk_enable
  - ASoC: mxs-saif: Handle errors for clk_enable
  - printk: fix return value of printk.devkmsg __setup handler
  - arm64: dts: broadcom: Fix sata nodename
  - arm64: dts: ns2: Fix spi-cpol and spi-cpha property
  - ALSA: spi: Add check for clk_enable()
  - ASoC: ti: davinci-i2s: Add check for clk_enable()
  - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
  - uaccess: fix nios2 and microblaze get_user_8()
  - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put
  - media: cedrus: h264: Fix neighbour info buffer size
  - media: cedrus: H265: Fix neighbour info buffer size
  - media: usb: go7007: s2250-board: fix leak in probe()
  - media: em28xx: initialize refcount before kref_get
  - media: video/hdmi: handle short reads of hdmi info frame.
  - ARM: dts: imx: Add missing LVDS decoder on M53Menlo
  - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order
  - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
  - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined
  - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
  - arm64: dts: qcom: sdm845: fix microphone bias properties and values
  - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
  - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem
  - soc: qcom: rpmpd: Check for null return of devm_kcalloc
  - ARM: dts: qcom: ipq4019: fix sleep clock
  - firmware: qcom: scm: Remove reassignment to desc following initializer
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
  - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - video: fbdev: controlfb: Fix COMPILE_TEST build
  - video: fbdev: controlfb: Fix set but not used warnings
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen
  - media: aspeed: Correct value for h-total-pixels
  - media: hantro: Fix overfill bottom register field name
  - media: meson: vdec: potential dereference of null pointer
  - media: coda: Fix missing put_device() call in coda_get_vdoa_data
  - ASoC: generic: simple-card-utils: remove useless assignment
  - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
  - media: bttv: fix WARNING regression on tunerless devices
  - media: mtk-vcodec: potential dereference of null pointer
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
  - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size
  - kunit: make kunit_test_timeout compatible with comment
  - selftests, x86: fix how check_cc.sh is being invoked
  - f2fs: fix compressed file start atomic write may cause data corruption
  - f2fs: compress: remove unneeded read when rewrite whole cluster
  - btrfs: fix unexpected error path when reflinking an inline extent
  - f2fs: fix to avoid potential deadlock
  - nfsd: more robust allocation failure handling in nfsd_file_cache_init
  - f2fs: fix missing free nid in f2fs_handle_failed_inode
  - perf/x86/intel/pt: Fix address filter config for 32-bit kernel
  - perf/core: Fix address filter parser for multiple filters
  - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs()
  - sched/core: Export pelt_thermal_tp
  - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
  - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface
  - watch_queue: Actually free the watch
  - watch_queue: Fix NULL dereference in error cleanup
  - io_uring: terminate manual loop iterator loop correctly for non-vecs
  - clocksource: acpi_pm: fix return value of __setup handler
  - hwmon: (pmbus) Add Vin unit off handling
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare
  - amba: Make the remove callback return void
  - vfio: platform: simplify device removal
  - crypto: ccree - Fix use after free in cc_cipher_exit()
  - crypto: ccp - ccp_dmaengine_unregister release dma channels
  - ACPI: APEI: fix return value of __setup handlers
  - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()
  - clocksource/drivers/timer-microchip-pit64b: Use notrace
  - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts
  - clocksource/drivers/exynos_mct: Refactor resources allocation
  - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix
  - crypto: vmx - add missing dependencies
  - crypto: amlogic - call finalize with bh disabled
  - crypto: sun8i-ce - call finalize with bh disabled
  - crypto: sun8i-ss - call finalize with bh disabled
  - hwrng: atmel - disable trng on failure path
  - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask
  - PM: suspend: fix return value of __setup handler
  - PM: hibernate: fix __setup handler error handling
  - block: don't delete queue kobject before its children
  - nvme: cleanup __nvme_check_ids
  - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
  - hwmon: (pmbus) Add mutex to regulator ops
  - spi: pxa2xx-pci: Balance reference count for PCI DMA device
  - crypto: ccree - don't attempt 0 len DMA mappings
  - EVM: fix the evm= __setup handler return value
  - audit: log AUDIT_TIME_* records only from rules
  - crypto: rockchip - ECB does not need IV
  - selftests/x86: Add validity check and allow field splitting
  - arm64/mm: avoid fixmap race condition when create pud mapping
  - spi: tegra114: Add missing IRQ check in tegra_spi_probe
  - thermal: int340x: Check for NULL after calling kmemdup()
  - crypto: mxs-dcp - Fix scatterlist processing
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail
  - crypto: sun8i-ss - really disable hash on A80
  - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER
  - hwrng: cavium - Check health status while reading random data
  - selinux: check return value of sel_make_avc_files
  - regulator: qcom_smd: fix for_each_child.cocci warnings
  - PCI: xgene: Revert "PCI: xgene: Fix IB window setup"
  - PCI: pciehp: Clear cmd_busy bit in polling mode
  - drm/i915/gem: add missing boundary check in vm_access
  - brcmfmac: pcie: Fix crashes due to early IRQs
  - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
  - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
  - brcmfmac: firmware: Allocate space for default boardrev in nvram
  - xtensa: fix xtensa_wsr always writing 0
  - xtensa: fix stop_machine_cpuslocked call in patch_text
  - media: davinci: vpif: fix unbalanced runtime PM enable
  - media: davinci: vpif: fix unbalanced runtime PM get
  - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC
  - DEC: Limit PMAX memory probing to R3k systems
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - crypto: rsa-pkcs1pad - restore signature length check
  - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
  - crypto: rsa-pkcs1pad - only allow with rsa
  - exec: Force single empty string when argv is empty
  - lib/raid6/test: fix multiple definition linking error
  - thermal: int340x: Increase bitmap size
  - pstore: Don't use semaphores in always-atomic-context code
  - carl9170: fix missing bit-wise or operator for tx_params
  - mgag200 fix memmapsl configuration in GCTL6 register
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5420
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5250
  - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
  - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
  - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
  - video: fbdev: sm712fb: Fix crash in smtcfb_read()
  - drm/edid: check basic audio support on CEA extension block
  - block: limit request dispatch loop duration
  - mailbox: tegra-hsp: Flush whole channel
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error
  - ext4: fix ext4_fc_stats trace point
  - coredump: Also dump first pages of non-executable ELF libraries
  - ACPI: properties: Consistently return -ENOENT if there are no more references
  - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs
  - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs
  - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available
  - udp: call udp_encap_enable for v6 sockets when enabling encap
  - powerpc/kvm: Fix kvm_use_magic_page
  - can: isotp: sanitize CAN ID checks in isotp_bind()
  - drbd: fix potential silent data corruption
  - dm integrity: set journal entry unused when shrinking device
  - mm/kmemleak: reset tag when compare object pointer
  - mm,hwpoison: unmap poisoned page before invalidation
  - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise"
  - mm: madvise: return correct bytes advised with process_madvise
  - mm: madvise: skip unmapped vma holes passed to process_madvise
  - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
  - ALSA: hda: Avoid unsol event during RPM suspending
  - ALSA: cs4236: fix an incorrect NULL check on list iterator
  - cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
  - cifs: prevent bad output lengths in smb2_ioctl_query_info()
  - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
  - riscv: Increase stack size under KASAN
  - riscv: Fix fill_callchain return value
  - qed: display VF trust config
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
  - mempolicy: mbind_range() set_policy() after vma_merge()
  - mm: invalidate hwpoison page cache page in fault path
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
  - mtd: rawnand: protect access to rawnand devices while in suspend
  - spi: mxic: Fix the transmit path
  - pinctrl: samsung: drop pin banks references on error paths
  - remoteproc: Fix count check in rproc_coredump_write()
  - f2fs: fix to do sanity check on .cp_pack_total_block_count
  - f2fs: quota: fix loop condition at f2fs_quota_sync()
  - f2fs: fix to unlock page correctly in error path of is_alive()
  - NFSD: prevent integer overflow on 32 bit systems
  - NFSD: prevent underflow in nfssvc_decode_writeargs()
  - SUNRPC: avoid race between mod_timer() and del_timer_sync()
  - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
  - firmware: stratix10-svc: add missing callback parameter on RSU
  - Documentation: update stable tree link
  - Documentation: add link to stable release candidate tree
  - KEYS: fix length validation in keyctl_pkey_params_get_2()
  - clk: uniphier: Fix fixed-rate initialization
  - greybus: svc: fix an error handling bug in gb_svc_hello()
  - iio: inkern: make a best effort on offset calculation
  - iio: inkern: apply consumer scale when no channel scale is available
  - iio: inkern: apply consumer scale on IIO_VAL_INT cases
  - iio: afe: rescale: use s64 for temporary scale calculations
  - coresight: Fix TRCCONFIGR.QE sysfs interface
  - mei: avoid iterator usage outside of list_for_each_entry
  - mei: me: add Alder Lake N device id.
  - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable
  - xhci: fix runtime PM imbalance in USB2 resume
  - xhci: fix garbage USBSTS being logged in some cases
  - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
  - virtio-blk: Use blk_validate_block_size() to validate block size
  - tpm: fix reference counting for struct tpm_chip
  - iommu/iova: Improve 32-bit free space estimate
  - locking/lockdep: Avoid potential access of invalid memory in lock_class
  - net: dsa: microchip: add spi_device_id tables
  - Input: zinitix - do not report shadow fingers
  - spi: Fix erroneous sgs value with min_t()
  - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)"
  - net:mcf8390: Use platform_get_irq() to get the interrupt
  - spi: Fix invalid sgs value
  - gpio: Revert regression in sysfs-gpio (gpiolib.c)
  - ethernet: sun: Free the coherent when failing in probing
  - tools/virtio: fix virtio_test execution
  - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ
  - virtio_console: break out of buf poll on remove
  - ARM: mstar: Select HAVE_ARM_ARCH_TIMER
  - xfrm: fix tunnel model fragmentation behavior
  - HID: logitech-dj: add new lightspeed receiver id
  - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build
  - USB: serial: simple: add Nokia phone driver
  - USB: serial: pl2303: add IBM device IDs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.43.0.72
changelog:
  - vt: drop old FONT ioctls
  - genirq: Take the proposed affinity at face value if force==true
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - sign-file: Support SM signature
  - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.45.0.73
changelog:
  - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
  - Revert "powerpc: Fix virt_addr_valid() check"
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
  - irqchip/gic, gic-v3: Prevent GSI to SGI translations
  - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb()
  - arm64: module: remove (NOLOAD) from linker script
  - selftests: cgroup: Test open-time cgroup namespace usage for migration checks
  - selftests: cgroup: Test open-time credential usage for migration checks
  - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
  - selftests/cgroup: Fix build on older distros
  - mm: don't skip swap entry even if zap_details specified
  - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE
  - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
  - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
  - tools build: Filter out options and warnings not supported by clang
  - perf python: Fix probing for some clang command line options
  - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13
  - drm/amdkfd: Create file descriptor after client is added to smi_clients list
  - drm/nouveau/pmu: Add missing callbacks for Tegra devices
  - drm/amdgpu/smu10: fix SoC/fclk units in auto mode
  - irqchip/gic-v3: Fix GICR_CTLR.RWP polling
  - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
  - ata: sata_dwc_460ex: Fix crash due to OOB write
  - gpio: Restrict usage of GPIO chip irq members before initialization
  - RDMA/hfi1: Fix use-after-free bug for mm struct
  - arm64: patch_text: Fixup last cpu should be master
  - btrfs: prevent subvol with swapfile from being deleted
  - btrfs: fix qgroup reserve overflow the qgroup limit
  - x86/speculation: Restore speculation related MSRs during S3 resume
  - x86/pm: Save the MSR validity status at context setup
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
  - lz4: fix LZ4_decompress_safe_partial read out of bound
  - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete
  - mmc: mmci: stm32: correctly check all elements of sg list
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
  - arm64: Add part number for Arm Cortex-A78AE
  - perf session: Remap buf if there is no space for event
  - perf tools: Fix perf's libperf_print callback
  - perf: arm-spe: Fix perf report --mem-mode
  - iommu/omap: Fix regression in probe for NULL pointer dereference
  - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec()
  - SUNRPC: Handle low memory situations in call_status()
  - SUNRPC: Handle ENOMEM in call_transmit_status()
  - io_uring: don't touch scm_fp_list after queueing skb
  - drbd: Fix five use after free bugs in get_initial_state
  - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
  - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
  - qede: confirm skb is allocated before using
  - net: phy: mscc-miim: reject clause 45 register accesses
  - rxrpc: fix a race in rxrpc_exit_net()
  - net: openvswitch: fix leak of nested actions
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - ice: synchronize_rcu() when terminating rings
  - ipv6: Fix stats accounting in ip6_pkt_drop
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation
  - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
  - RDMA/mlx5: Don't remove cache MRs when a delay is needed
  - sfc: Do not free an empty page_ring
  - bnxt_en: reserve space inside receive page for skb_shared_info
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - drm/imx: imx-ldb: Check for null pointer after calling kmemdup
  - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
  - net: ipv4: fix route with nexthop object delete warning
  - ice: Clear default forwarding VSI during VSI release
  - net/tls: fix slab-out-of-bounds bug in decrypt_internal
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - Drivers: hv: vmbus: Fix potential crash on module unload
  - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
  - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build"
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read
  - parisc: Fix patch code locking and flushing
  - parisc: Fix CPU affinity for Lasi, WAX and Dino chips
  - NFS: Avoid writeback threads getting stuck in mempool_alloc()
  - NFS: nfsiod should not block forever in mempool_alloc()
  - SUNRPC: Fix socket waits for write buffer space
  - jfs: prevent NULL deref in diFree
  - virtio_console: eliminate anonymous module_init & module_exit
  - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
  - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy
  - NFS: swap-out must always use STABLE writes.
  - NFS: swap IO handling is slightly different for O_DIRECT IO
  - SUNRPC: remove scheduling boost for "SWAPPER" tasks.
  - SUNRPC/xprt: async tasks mustn't block waiting for memory
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  - clk: Enforce that disjoints limits are invalid
  - clk: ti: Preserve node in ti_dt_clocks_register()
  - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
  - NFSv4: Protect the state recovery thread against direct reclaim
  - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
  - w1: w1_therm: fixes w1_seq for ds28ea00 sensors
  - staging: wfx: fix an error handling in wfx_init_common()
  - phy: amlogic: meson8b-usb2: Use dev_err_probe()
  - staging: vchiq_core: handle NULL result of find_service_by_handle
  - clk: si5341: fix reported clk_rate when output divider is 2
  - minix: fix bug when opening a file with O_DIRECT
  - init/main.c: return 1 from handled __setup() functions
  - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
  - netlabel: fix out-of-bounds memory accesses
  - Bluetooth: Fix use after free in hci_send_acl
  - MIPS: ingenic: correct unit node address
  - xtensa: fix DTC warning unit_address_format
  - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
  - net: sfp: add 2500base-X quirk for Lantech SFP module
  - net: limit altnames to 64k total
  - net: account alternate interface name memory
  - can: isotp: set default value for N_As to 50 micro seconds
  - scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - powerpc/secvar: fix refcount leak in format_show()
  - MIPS: fix fortify panic when copying asm exception handlers
  - PCI: endpoint: Fix misused goto label
  - bnxt_en: Eliminate unintended link toggle during FW reset
  - Bluetooth: use memset avoid memory leaks
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}
  - tuntap: add sanity checks about msg_controllen in sendmsg
  - macvtap: advertise link netns via netlink
  - mips: ralink: fix a refcount leak in ill_acc_of_setup()
  - net/smc: correct settings of RMB window update limit
  - scsi: hisi_sas: Free irq vectors in order for v3 HW
  - scsi: aha152x: Fix aha152x_setup() __setup handler return value
  - mt76: mt7615: Fix assigning negative values to unsigned variable
  - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
  - scsi: pm8001: Fix tag leaks on error
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all()
  - scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
  - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface
  - drm/amdkfd: make CRAT table missing message informational only
  - dm ioctl: prevent potential spectre v1 gadget
  - ipv4: Invalidate neighbour for broadcast address upon address addition
  - iwlwifi: mvm: Correctly set fragmented EBS
  - power: supply: axp288-charger: Set Vhold to 4.4V
  - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
  - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
  - PCI: endpoint: Fix alignment fault error in copy tests
  - usb: ehci: add pci device support for Aspeed platforms
  - iommu/arm-smmu-v3: fix event handling soft lockup
  - PCI: aardvark: Fix support for MSI interrupts
  - drm/amdgpu: Fix recursive locking warning
  - powerpc: Set crashkernel offset to mid of RMA region
  - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf
  - ipv6: make mc_forwarding atomic
  - libbpf: Fix build issue with llvm-readelf
  - cfg80211: don't add non transmitted BSS to 6GHz scanned channels
  - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill
  - power: supply: axp20x_battery: properly report current when discharging
  - scsi: bfa: Replace snprintf() with sysfs_emit()
  - scsi: mvsas: Replace snprintf() with sysfs_emit()
  - bpf: Make dst_port field in struct bpf_sock 16-bit wide
  - ath11k: mhi: use mhi_sync_power_up()
  - ath11k: fix kernel panic during unload/load ath11k modules
  - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
  - ptp: replace snprintf with sysfs_emit
  - usb: gadget: tegra-xudc: Fix control endpoint's definitions
  - usb: gadget: tegra-xudc: Do not program SPARAM
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - drm/amd/display: Add signal type check when verify stream backends same
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - drm: Add orientation quirk for GPD Win Max
  - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest
  - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
  - rtc: wm8350: Handle error for wm8350_register_irq
  - gfs2: gfs2_setattr_size error path fix
  - gfs2: Fix gfs2_release for non-writers regression
  - gfs2: Check for active reservation in gfs2_release
  - xen/blkfront: force data bouncing when backend is untrusted
  - xen/netfront: force data bouncing when backend is untrusted
  - xen/netfront: fix leaking data in shared pages
  - xen/blkfront: fix leaking data in shared pages
  - netfilter: nf_tables: stricter validation of element data
  - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses()
  - tmpfs: fix the issue that the mount and remount results are inconsistent.
  - tmpfs: fix undefined-behaviour in shmem_reconfigure()
  - mm/filemap: fix UAF in find_lock_entries
  - shmem: allow reporting fanotify events with file handles on tmpfs
  - fs: introduce a wrapper uuid_to_fsid()
  - Revert "iommu: handle page response timeout"
  - mm/filemap: fix that first page is not mark accessed in filemap_read()
  - block: don't use cmpxchg64() on 32-bit platform
  - block: fix that iostat can show huge wait time
  - block: fix sleeping function called from invalid context in part_get_stat_info()
  - block: fix kabi broken in struct hd_struct
  - blk-mq: fix kabi broken in struct request
  - block: update nsecs[] in part_stat_show() and diskstats_show()
  - blk-throttle: fix io hung due to configuration updates
  - kabi: deduplication friendly structs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.46.0.74
changelog:
  - KEYS: Fix mistaken sizeof call in pgp_key_generate_id
  - KEYS: Add safe guard against faulty PGP key
  - KEYS: Fix error path return value in pgp_generate_fingerprint
  - block: fix mismatch size for flush_rq
  - crypto: hisilicon/sec - don't sleep when in softirq
  - xen/arm: Fix race in RB-tree based P2M accounting
  - nbd: fix io hung while disconnecting device
  - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
  - filemap: Correct the conditions for marking a folio as accessed
  - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()"
  - net: rose: fix UAF bugs caused by timer handler
  - nbd: fix race between nbd_alloc_config() and module removal
  - nbd: call genl_unregister_family() first in nbd_cleanup()
  - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default
  - Driver for Zhaoxin CPU core temperature monitoring
  - scsi: iscsi: fix kabi broken in struct iscsi_transport
  - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn
  - scsi: iscsi: Fix unbound endpoint error handling
  - scsi: iscsi: Fix endpoint reuse regression
  - dma-direct: avoid redundant memory sync for swiotlb
  - timers: Fix warning condition in __run_timers()
  - i2c: pasemi: Wait for write xfers to finish
  - smp: Fix offline cpu check in flush_smp_call_function_queue()
  - dm integrity: fix memory corruption when tag_size is less than digest size
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
  - genirq/affinity: Consider that CPUs on nodes can be unbalanced
  - drm/amdgpu: Enable gfxoff quirk on MacBook Pro
  - drm/amd/display: don't ignore alpha property on pre-multiplied mode
  - ipv6: fix panic when forwarding a pkt with no in6 dev
  - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size
  - ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
  - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers
  - ALSA: hda/realtek: Add quirk for Clevo PD50PNT
  - btrfs: mark resumed async balance as writing
  - btrfs: fix root ref counts in error handling in btrfs_get_root_ref
  - ath9k: Fix usage of driver-private space in tx_info
  - ath9k: Properly clear TX status area before reporting to mac80211
  - gcc-plugins: latent_entropy: use /dev/urandom
  - memory: renesas-rpc-if: fix platform-device leak in error path
  - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  - mm: fix unexpected zeroed page mapping with zram swap
  - mm, page_alloc: fix build_zonerefs_node()
  - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
  - drivers: net: slip: fix NPD bug in sl_tx_timeout()
  - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
  - scsi: mvsas: Add PCI ID of RocketRaid 2640
  - drm/amd/display: Fix allocate_mst_payload assert on resume
  - drm/amd/display: Revert FEC check in validation
  - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso
  - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
  - net: axienet: setup mdio unconditionally
  - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
  - arm64: alternatives: mark patch_alternative() as `noinstr`
  - regulator: wm8994: Add an off-on delay for WM8994 variant
  - gpu: ipu-v3: Fix dev_dbg frequency output
  - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
  - net: micrel: fix KS8851_MLL Kconfig
  - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
  - scsi: lpfc: Fix queue failures when recovering from PCI parity error
  - scsi: target: tcmu: Fix possible page UAF
  - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
  - drm/amdkfd: Check for potential null return of kmalloc_array()
  - drm/amdgpu/vcn: improve vcn dpg stop procedure
  - drm/amdkfd: Fix Incorrect VMIDs passed to HWS
  - drm/amd/display: Update VTEM Infopacket definition
  - drm/amd/display: FEC check in timing validation
  - drm/amd/display: fix audio format not updated after edid updated
  - btrfs: do not warn for free space inode in cow_file_range
  - btrfs: fix fallocate to use file_modified to update permissions consistently
  - drm/amd: Add USBC connector ID
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering"
  - dm mpath: only use ktime_get_ns() in historical selector
  - cifs: potential buffer overflow in handling symlinks
  - nfc: nci: add flush_workqueue to prevent uaf
  - perf tools: Fix misleading add event PMU debug message
  - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
  - sctp: Initialize daddr on peeled off socket
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts
  - scsi: iscsi: Move iscsi_ep_disconnect()
  - scsi: iscsi: Fix in-kernel conn failure handling
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint()
  - scsi: iscsi: Use system_unbound_wq for destroy_work
  - scsi: iscsi: Force immediate failure during shutdown
  - scsi: iscsi: Stop queueing during ep_disconnect
  - scsi: pm80xx: Enable upper inbound, outbound queues
  - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63
  - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
  - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
  - drm/msm: Fix range size vs end confusion
  - cfg80211: hold bss_lock while updating nontrans_list
  - net/sched: taprio: Check if socket flags are valid
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
  - net: dsa: felix: suppress -EPROBE_DEFER errors
  - net/sched: fix initialization order when updating chain 0 head
  - mlxsw: i2c: Fix initialization error flow
  - net: mdio: Alphabetically sort header inclusion
  - gpiolib: acpi: use correct format characters
  - veth: Ensure eth header is in skb's linear part
  - SUNRPC: Fix the svc_deferred_event trace class
  - media: rockchip/rga: do proper error checking in probe
  - firmware: arm_scmi: Fix sorting of retrieved clock rates
  - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
  - drm/msm: Add missing put_task_struct() in debugfs path
  - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
  - ACPI: processor idle: Check for architectural support for LPI
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
  - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.47.0.75
changelog:
  - lockdown: Fix kexec lockdown bypass with ima policy
  - fbmem: Check virtual screen sizes in fb_set_var()
  - fbcon: Prevent that screen size is smaller than font size
  - fbcon: Disallow setting font bigger than screen size
  - inotify: show inotify mask flags in proc fdinfo
  - block: prevent lockdep false positive warning about 'bd_mutex'
  - block: fix that part scan is disabled in device_add_disk()
  - block: Fix warning in bd_link_disk_holder()
  - ucounts: add missing data type changes
  - bpf: Don't redirect packets with invalid pkt_len
  - Revert "net: micrel: fix KS8851_MLL Kconfig"
  - block/compat_ioctl: fix range check in BLKGETSIZE
  - staging: ion: Prevent incorrect reference counting behavour
  - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller
  - can: isotp: stop timeout monitoring when no first frame was sent
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - ext4: fix overhead calculation to account for the reserved gdt blocks
  - ext4, doc: fix incorrect h_reserved size
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - ext4: fix fallocate to use file_modified to update permissions consistently
  - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event
  - powerpc/perf: Fix power9 event alternatives
  - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
  - KVM: PPC: Fix TCE handling for VFIO
  - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
  - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - sched/pelt: Fix attach_entity_load_avg() corner case
  - arm_pmu: Validate single/group leader events
  - ARC: entry: fix syscall_trace_exit argument
  - e1000e: Fix possible overflow in LTR decoding
  - ASoC: soc-dapm: fix two incorrect uses of list iterator
  - gpio: Request interrupts after IRQ is initialized
  - openvswitch: fix OOB access in reserve_sfa_size()
  - xtensa: fix a7 clobbering in coprocessor context load/store
  - xtensa: patch_text: Fixup last cpu should be master
  - net: atlantic: invert deep par in pm functions, preventing null derefs
  - dma: at_xdmac: fix a missing check on list iterator
  - ata: pata_marvell: Check the 'bmdma_addr' beforing reading
  - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
  - mm, hugetlb: allow for "high" userspace addresses
  - EDAC/synopsys: Read the error count from the correct register
  - nvme-pci: disable namespace identifiers for Qemu controllers
  - nvme: add a quirk to disable namespace identifiers
  - stat: fix inconsistency between struct stat and struct compat_stat
  - scsi: qedi: Fix failed disconnect handling
  - net: macb: Restart tx only if queue pointer is lagging
  - drm/msm/mdp5: check the return of kzalloc()
  - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
  - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
  - mt76: Fix undefined behavior due to shift overflowing the constant
  - net: atlantic: Avoid out-of-bounds indexing
  - cifs: Check the IOCB_DIRECT flag, not O_DIRECT
  - vxlan: fix error return code in vxlan_fdb_append
  - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes
  - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
  - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
  - reset: tegra-bpmp: Restore Handle errors in BPMP response
  - ARM: vexpress/spc: Avoid negative array index when !SMP
  - arm64: mm: fix p?d_leaf()
  - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad()
  - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
  - dmaengine: idxd: add RO check for wq max_transfer_size write
  - dmaengine: idxd: add RO check for wq max_batch_size write
  - net: stmmac: Use readl_poll_timeout_atomic() in atomic state
  - netlink: reset network and mac headers in netlink_dump()
  - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6
  - ipv6: make ip6_rt_gc_expire an atomic_t
  - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
  - net/sched: cls_u32: fix possible leak in u32_init_knode()
  - ip6_gre: Fix skb_under_panic in __gre6_xmit()
  - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
  - net/packet: fix packet_sock xmit return value checking
  - net/smc: Fix sock leak when release after smc_shutdown()
  - rxrpc: Restore removed timer deletion
  - igc: Fix BUG: scheduling while atomic
  - igc: Fix infinite loop in release_swfw_sync
  - esp: limit skb_page_frag_refill use to a single page
  - spi: spi-mtk-nor: initialize spi controller after resume
  - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources
  - dmaengine: imx-sdma: Fix error checking in sdma_event_remap
  - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use
  - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
  - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNP
  - ALSA: usb-audio: Clear MIDI port active flag after draining
  - gfs2: assign rgrp glock before compute_bitstructs
  - perf tools: Fix segfault accessing sample_id xyarray
  - tracing: Dump stacktrace trigger to the corresponding instance
  - mm: page_alloc: fix building error on -Werror=array-compare
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.48.0.76
changelog:
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  - RDMA/hns: Recover 1bit-ECC error of RAM on chip
  - RDMA/hns: Refactor the abnormal interrupt handler function
  - RDMA/hns: Fix incorrect clearing of interrupt status register
  - RDMA/hns: Fix the wrong type of return value of the interrupt handler
  - RDMA/hns: Remove unused abnormal interrupt of type RAS
  - ext4: Fix race when reusing xattr blocks
  - ext4: Unindent codeblock in ext4_xattr_block_set()
  - ext4: Remove EA inode entry from mbcache on inode eviction
  - mbcache: Add functions to delete entry if unused
  - mbcache: Don't reclaim used entries
  - md/raid6: refactor raid5_read_one_chunk
  - md/raid10: enable io accounting
  - md/raid1: enable io accounting
  - md/raid1: rename print_msg with r1bio_existed
  - md/raid5: avoid redundant bio clone in raid5_read_one_chunk
  - md: add io accounting for raid0 and raid5
  - mmc: rtsx: add 74 Clocks in power on flow
  - PCI: aardvark: Fix reading MSI interrupt number
  - PCI: aardvark: Clear all MSIs at setup
  - dm: interlock pending dm_io and dm_wait_for_bios_completion
  - rcu: Apply callbacks processing time limit only on softirq
  - rcu: Fix callbacks processing time limit retaining cond_resched()
  - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
  - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs
  - KVM: x86: Do not change ICR on write to APIC_SELF_IPI
  - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
  - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu
  - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  - btrfs: always log symlinks in full mode
  - smsc911x: allow using IRQ0
  - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer
  - bnxt_en: Fix unnecessary dropping of RX packets
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
  - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational
  - net: emaclite: Add error handling for of_address_to_resource()
  - net: cpsw: add missing of_node_put() in cpsw_probe_dt()
  - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux()
  - net: dsa: mt7530: add missing of_node_put() in mt7530_setup()
  - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
  - NFSv4: Don't invalidate inode attributes on delegation return
  - RDMA/siw: Fix a condition race issue in MPA request processing
  - selftests/seccomp: Don't call read() on TTY from background pgrp
  - net/mlx5: Avoid double clear or set of sync reset requested
  - net/mlx5e: Fix the calling of update_buffer_lossy() API
  - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release
  - net/mlx5e: Fix trust state reset in reload
  - ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  - hwmon: (adt7470) Fix warning on module removal
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set)
  - can: grcan: only use the NAPI poll budget for RX
  - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs
  - can: grcan: use ofdev->dev when allocating DMA memory
  - can: isotp: remove re-binding of bound socket
  - can: grcan: grcan_close(): fix deadlock
  - s390/dasd: Fix read inconsistency for ESE DASD devices
  - s390/dasd: Fix read for ESE with blksize < 4k
  - s390/dasd: prevent double format of tracks for ESE devices
  - s390/dasd: fix data corruption for ESE devices
  - ASoC: meson: Fix event generation for AUI CODEC mux
  - ASoC: meson: Fix event generation for G12A tohdmi mux
  - ASoC: meson: Fix event generation for AUI ACODEC mux
  - ASoC: wm8958: Fix change notifications for DSP controls
  - ASoC: da7219: Fix change notifications for tone generator frequency
  - genirq: Synchronize interrupt thread startup
  - net: stmmac: disable Split Header (SPH) for Intel platforms
  - firewire: core: extend card->lock in fw_core_handle_bus_reset
  - firewire: remove check of list iterator against head past the loop body
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT
  - iommu/vt-d: Calculate mask for non-aligned flushes
  - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id
  - gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
  - mmc: core: Set HS clock speed before sending HS CMD13
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
  - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
  - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
  - parisc: Merge model and model name into one line in /proc/cpuinfo
  - MIPS: Fix CP0 counter erratum detection for R4k CPUs
  - perf symbol: Remove arch__symbols__fixup_end()
  - tty: n_gsm: fix software flow control handling
  - tty: n_gsm: fix incorrect UA handling
  - tty: n_gsm: fix reset fifo race condition
  - tty: n_gsm: fix wrong command frame length field encoding
  - tty: n_gsm: fix wrong command retry handling
  - tty: n_gsm: fix missing explicit ldisc flush
  - tty: n_gsm: fix wrong DLCI release order
  - tty: n_gsm: fix insufficient txframe size
  - netfilter: nft_socket: only do sk lookups when indev is available
  - tty: n_gsm: fix malformed counter for out of frame data
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
  - tty: n_gsm: fix mux cleanup after unregister tty device
  - tty: n_gsm: fix decoupled mux resource
  - tty: n_gsm: fix restart handling via CLD command
  - perf symbol: Update symbols__fixup_end()
  - perf symbol: Pass is_kallsyms to symbols__fixup_end()
  - x86/cpu: Load microcode during restore_processor_state()
  - thermal: int340x: Fix attr.show callback prototype
  - net: ethernet: stmmac: fix write to sgmii_adapter_base
  - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
  - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time
  - zonefs: Clear inode information flags on inode creation
  - zonefs: Fix management of open zones
  - powerpc/perf: Fix 32bit compile
  - drivers: net: hippi: Fix deadlock in rr_close()
  - cifs: destage any unwritten data to the server before calling copychunk_write
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  - ASoC: wm8731: Disable the regulator when probing fails
  - ASoC: Intel: soc-acpi: correct device endpoints for max98373
  - tcp: fix F-RTO may not work correctly when receiving DSACK
  - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits"
  - ibmvnic: fix miscellaneous checks
  - ixgbe: ensure IPsec VF<->PF compatibility
  - net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
  - bnx2x: fix napi API usage sequence
  - tls: Skip tls_append_frag on zero copy size
  - drm/amd/display: Fix memory leak in dcn21_clock_source_create
  - drm/amdkfd: Fix GWS queue count
  - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
  - net: phy: marvell10g: fix return value on error
  - net: bcmgenet: hide status block before TX timestamping
  - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
  - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
  - tcp: make sure treq->af_specific is initialized
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
  - ip6_gre: Make o_seqno start from 0 in native mode
  - ip_gre: Make o_seqno start from 0 in native mode
  - net/smc: sync err code when tcp connection was refused
  - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
  - pinctrl: pistachio: fix use of irq_of_parse_and_map()
  - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
  - ARM: dts: imx6ull-colibri: fix vqmmc regulator
  - sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  - wireguard: device: check for metadata_dst with skb_valid_dst()
  - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested
  - tcp: md5: incorrect tcp_header_len for incoming connections
  - pinctrl: rockchip: fix RK3308 pinmux bits
  - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook
  - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion
  - net: dsa: Add missing of_node_put() in dsa_port_link_register_of
  - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
  - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout
  - pinctrl: mediatek: moore: Fix build error
  - ipvs: correctly print the memory size of ip_vs_conn_tab
  - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
  - ARM: dts: am3517-evm: Fix misc pinmuxing
  - ARM: dts: Fix mmc order for omap3-gta04
  - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
  - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
  - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
  - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
  - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
  - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
  - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  - phy: samsung: exynos5250-sata: fix missing device put in probe error paths
  - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  - USB: Fix xhci event ring dequeue pointer ERDP update issue
  - mtd: rawnand: fix ecc parameters for mt7622
  - iio:imu:bmi160: disable regulator in error path
  - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
  - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
  - video: fbdev: udlfb: properly check endpoint type
  - iocost: don't reset the inuse weight of under-weighted debtors
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  - riscv: patch_text: Fixup last cpu should be master
  - hex2bin: fix access beyond string end
  - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
  - arch_topology: Do not set llc_sibling if llc_id is invalid
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  - serial: 8250: Also set sticky MCR bits in console restoration
  - serial: imx: fix overrun interrupts in DMA mode
  - usb: phy: generic: Get the vbus supply
  - usb: cdns3: Fix issue for clear halt endpoint
  - usb: dwc3: gadget: Return proper request status
  - usb: dwc3: core: Only handle soft-reset in DCTL
  - usb: dwc3: core: Fix tx/rx threshold settings
  - usb: dwc3: Try usb-role-switch first in dwc3_drd_init
  - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  - usb: gadget: uvc: Fix crash when encoding data for usb request
  - usb: typec: ucsi: Fix role swapping
  - usb: typec: ucsi: Fix reuse of completion structure
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - iio: imu: inv_icm42600: Fix I2C init possible nack
  - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
  - iio: dac: ad5446: Fix read_raw not returning set value
  - iio: dac: ad5592r: Fix the missing return value.
  - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
  - xhci: stop polling roothubs after shutdown
  - xhci: Enable runtime PM on second Alderlake controller
  - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
  - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
  - USB: quirks: add STRING quirk for VCOM device
  - USB: quirks: add a Realtek card reader
  - usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  - lightnvm: disable the subsystem


author: gaihuiying <gaihuiying1@huawei.com> - 4.12.5-5
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: gaihuiying <eaglegai@163.com> - 4.15.3-3
changelog:
  - Type:cves
  - ID:CVE-2022-0336 CVE-2021-44142
  - SUG:NA
  - DESC:backport to fix CVE-2022-0336 CVE-2021-44142


author: xinghe <xinghe2@h-partners.com> - 4.15.3-7
changelog:
  - Type:cves
  - ID:CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745


author: hanchao <hanchao47@huawei.com> - 1.17.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2022-28327,CVE-2022-24675
  - SUG:NA
  - DESC:fix CVE-2022-28327,CVE-2022-24675
  - fix CVE-2022-28327 CVE-2022-24675


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: panxiaohe <panxiaohe@huawei.com> - 2.9.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport bug fixes.
         work around lxml API abuse
         fix regression in xmlNodeDumpOutputInternal
         fix whitespace when serializing empty HTML documents
         forbid epsilon-reduction of final states
         fix buffering in xmlOutputBufferWrite


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-50
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-51
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


