# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.52.0.80
changelog:
  - module: check for exit sections in layout_sections() instead of module_init_section()
  - afs: Fix afs_getattr() to refetch file status if callback break occurred
  - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()
  - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD
  - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group
  - Input: ili210x - fix reset timing
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs
  - net: atlantic: verify hw_head_ lies within TX buffer ring
  - net: atlantic: add check for MAX_SKB_FRAGS
  - net: atlantic: reduce scope of is_rsc_complete
  - net: atlantic: fix "frag[0] not initialized"
  - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
  - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
  - nl80211: fix locking in nl80211_set_tx_bitrate_mask()
  - selftests: add ping test with ping_group_range tuned
  - nl80211: validate S1G channel width
  - mac80211: fix rx reordering with non explicit / psmp ack policy
  - scsi: qla2xxx: Fix missed DMA unmap for aborted commands
  - perf bench numa: Address compiler error on s390
  - gpio: mvebu/pwm: Refuse requests with inverted polarity
  - gpio: gpio-vf610: do not touch other bits when set the target bit
  - riscv: dts: sifive: fu540-c000: align dma node name with dtschema
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  - igb: skip phy status check where unavailable
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  - net: af_key: add check for pfkey_broadcast in function pfkey_process
  - net/mlx5e: Properly block LRO when XDP is enabled
  - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
  - net/qla3xxx: Fix a test in ql_reset_work()
  - clk: at91: generated: consider range when calculating best rate
  - ice: fix possible under reporting of ethtool Tx and Rx statistics
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: systemport: Fix an error handling path in bcm_sysport_probe()
  - net/sched: act_pedit: sanitize shift argument before usage
  - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm
  - net: macb: Increment rx bd head after allocating skb and buffer
  - net: ipa: record proper RX transaction count
  - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group
  - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl
  - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi
  - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
  - drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
  - libceph: fix potential use-after-free on linger ping and resends
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE
  - arm64: paravirt: Use RCU read locks to guard stolen_time
  - KVM: x86/mmu: Update number of zapped pages even if page list is stable
  - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
  - Fix double fget() in vhost_net_set_backend()
  - selinux: fix bad cleanup on error in hashtab_duplicate()
  - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise
  - ALSA: wavefront: Proper check of get_user() error
  - ALSA: usb-audio: Restore Rane SL-1 quirk
  - nilfs2: fix lockdep warnings during disk space reclamation
  - nilfs2: fix lockdep warnings in page operations for btree nodes
  - platform/chrome: cros_ec_debugfs: detach log reader wq from devm
  - drbd: remove usage of list iterator variable after loop
  - MIPS: lantiq: check the return value of kzalloc()
  - fs: fix an infinite loop in iomap_fiemap
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - nvme-multipath: fix hang when disk goes live over reconnect
  - tools/virtio: compile with -pthread
  - vhost_vdpa: don't setup irq offloading when irq_num < 0
  - s390/pci: improve zpci_dev reference counting
  - ALSA: hda/realtek: Enable headset mic on Lenovo P360
  - crypto: x86/chacha20 - Avoid spurious jumps to other functions
  - crypto: stm32 - fix reference leak in stm32_crc_remove
  - rtc: sun6i: Fix time overflow handling
  - gfs2: Disable page faults during lockless buffered reads
  - nvme-pci: add quirks for Samsung X5 SSDs
  - Input: stmfts - fix reference leak in stmfts_input_open
  - Input: add bounds checking to input_set_capability()
  - um: Cleanup syscall_handler_t definition/cast, fix warning
  - rtc: pcf2127: fix bug when reading alarm registers
  - rtc: fix use-after-free on device removal
  - igc: Update I226_K device ID
  - igc: Remove phy->type checking
  - igc: Remove _I_PHY_ID checking
  - io_uring: always grab file table for deferred statx
  - usb: gadget: fix race when gadget driver register via ioctl


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.53.0.81
changelog:
  - net: fix sk_wmem_schedule() and sk_rmem_schedule() errors
  - KVM: arm64: Use generic KVM xfer to guest work function
  - entry: KVM: Allow use of generic KVM entry w/o full generic support
  - KVM: arm64: Record number of signal exits as a vCPU stat
  - VFS: Rolling Back the fmode macro definition and structure members
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback
  - Revert "NFS: Use of mapping_set_error() results in spurious errors"
  - random: Fix kabi change of get_random_bytes()
  - random: Fix kabi change due to enum cpuhp_state
  - ALSA: ctxfi: Add SB046x PCI ID
  - random: check for signals after page of pool writes
  - random: wire up fops->splice_{read,write}_iter()
  - random: convert to using fops->write_iter()
  - random: convert to using fops->read_iter()
  - random: unify batched entropy implementations
  - random: move randomize_page() into mm where it belongs
  - random: move initialization functions out of hot pages
  - random: make consistent use of buf and len
  - random: use proper return types on get_random_{int,long}_wait()
  - random: remove extern from functions in header
  - random: use static branch for crng_ready()
  - random: credit architectural init the exact amount
  - random: handle latent entropy and command line from random_init()
  - random: use proper jiffies comparison macro
  - random: remove ratelimiting for in-kernel unseeded randomness
  - random: move initialization out of reseeding hot path
  - random: avoid initializing twice in credit race
  - random: use symbolic constants for crng_init states
  - siphash: use one source of truth for siphash permutations
  - random: help compiler out with fast_mix() by using simpler arguments
  - random: do not use input pool from hard IRQs
  - random: order timer entropy functions below interrupt functions
  - random: do not pretend to handle premature next security model
  - random: use first 128 bits of input as fast init
  - random: do not use batches when !crng_ready()
  - random: insist on random_get_entropy() existing in order to simplify
  - xtensa: use fallback for random_get_entropy() instead of zero
  - sparc: use fallback for random_get_entropy() instead of zero
  - um: use fallback for random_get_entropy() instead of zero
  - x86/tsc: Use fallback for random_get_entropy() instead of zero
  - nios2: use fallback for random_get_entropy() instead of zero
  - arm: use fallback for random_get_entropy() instead of zero
  - mips: use fallback for random_get_entropy() instead of just c0 random
  - riscv: use fallback for random_get_entropy() instead of zero
  - m68k: use fallback for random_get_entropy() instead of zero
  - timekeeping: Add raw clock fallback for random_get_entropy()
  - powerpc: define get_cycles macro for arch-override
  - alpha: define get_cycles macro for arch-override
  - parisc: define get_cycles macro for arch-override
  - s390: define get_cycles macro for arch-override
  - ia64: define get_cycles macro for arch-override
  - init: call time_init() before rand_initialize()
  - random: fix sysctl documentation nits
  - random: document crng_fast_key_erasure() destination possibility
  - random: make random_get_entropy() return an unsigned long
  - random: allow partial reads if later user copies fail
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random
  - random: check for signal_pending() outside of need_resched() check
  - random: do not allow user to keep crng key around on stack
  - random: do not split fast init input in add_hwgenerator_randomness()
  - random: mix build-time latent entropy into pool at init
  - random: re-add removed comment about get_random_{u32,u64} reseeding
  - random: treat bootloader trust toggle the same way as cpu trust toggle
  - random: skip fast_init if hwrng provides large chunk of entropy
  - random: check for signal and try earlier when generating entropy
  - random: reseed more often immediately after booting
  - random: make consistent usage of crng_ready()
  - random: use SipHash as interrupt entropy accumulator
  - random: replace custom notifier chain with standard one
  - random: don't let 644 read-only sysctls be written to
  - random: give sysctl_random_min_urandom_seed a more sensible value
  - random: do crng pre-init loading in worker rather than irq
  - random: unify cycles_t and jiffies usage and types
  - random: cleanup UUID handling
  - random: only wake up writers after zap if threshold was passed
  - random: round-robin registers as ulong, not u32
  - random: clear fast pool, crng, and batches in cpuhp bring up
  - random: pull add_hwgenerator_randomness() declaration into random.h
  - random: check for crng_init == 0 in add_device_randomness()
  - random: unify early init crng load accounting
  - random: do not take pool spinlock at boot
  - random: defer fast pool mixing to worker
  - random: rewrite header introductory comment
  - random: group sysctl functions
  - random: group userspace read/write functions
  - random: group entropy collection functions
  - random: group entropy extraction functions
  - random: group crng functions
  - random: group initialization wait functions
  - random: remove whitespace and reorder includes
  - random: remove useless header comment
  - random: introduce drain_entropy() helper to declutter crng_reseed()
  - random: deobfuscate irq u32/u64 contributions
  - random: add proper SPDX header
  - random: remove unused tracepoints
  - random: remove ifdef'd out interrupt bench
  - random: tie batched entropy generation to base_crng generation
  - random: fix locking for crng_init in crng_reseed()
  - random: zero buffer after reading entropy from userspace
  - random: remove outdated INT_MAX >> 6 check in urandom_read()
  - random: make more consistent use of integer types
  - random: use hash function for crng_slow_load()
  - random: use simpler fast key erasure flow on per-cpu keys
  - random: absorb fast pool into input pool after fast load
  - random: do not xor RDRAND when writing into /dev/random
  - random: ensure early RDSEED goes through mixer on init
  - random: inline leaves of rand_initialize()
  - random: get rid of secondary crngs
  - random: use RDSEED instead of RDRAND in entropy extraction
  - random: fix locking in crng_fast_load()
  - random: remove batched entropy locking
  - random: remove use_input_pool parameter from crng_reseed()
  - random: make credit_entropy_bits() always safe
  - random: always wake up entropy writers after extraction
  - random: use linear min-entropy accumulation crediting
  - random: simplify entropy debiting
  - random: use computational hash for entropy extraction
  - random: only call crng_finalize_init() for primary_crng
  - random: access primary_pool directly rather than through pointer
  - random: continually use hwgenerator randomness
  - random: simplify arithmetic function flow in account()
  - random: selectively clang-format where it makes sense
  - random: access input_pool_data directly rather than through pointer
  - random: cleanup fractional entropy shift constants
  - random: prepend remaining pool constants with POOL_
  - random: de-duplicate INPUT_POOL constants
  - random: remove unused OUTPUT_POOL constants
  - random: rather than entropy_store abstraction, use global
  - random: remove unused extract_entropy() reserved argument
  - random: remove incomplete last_data logic
  - random: cleanup integer types
  - random: cleanup poolinfo abstraction
  - random: fix typo in comments
  - random: don't reset crng_init_cnt on urandom_read()
  - random: avoid superfluous call to RDRAND in CRNG extraction
  - random: early initialization of ChaCha constants
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
  - random: harmonize "crng init done" messages
  - random: mix bootloader randomness into pool
  - random: do not re-init if crng_reseed completes before primary init
  - random: do not sign extend bytes for rotation when mixing
  - random: use BLAKE2s instead of SHA1 in extraction
  - random: remove unused irq_flags argument from add_interrupt_randomness()
  - random: document add_hwgenerator_randomness() with other input functions
  - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI
  - lib/crypto: sha1: re-roll loops to reduce code size
  - lib/crypto: blake2s: move hmac construction into wireguard
  - lib/crypto: blake2s: include as built-in
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
  - crypto: blake2s - adjust include guard naming
  - crypto: blake2s - add comment for blake2s_state fields
  - crypto: blake2s - optimize blake2s initialization
  - crypto: blake2s - share the "shash" API boilerplate code
  - crypto: blake2s - move update and final logic to internal/blake2s.h
  - crypto: blake2s - remove unneeded includes
  - crypto: x86/blake2s - define shash_alg structs using macros
  - crypto: blake2s - define shash_alg structs using macros
  - crypto: lib/blake2s - Move selftest prototype into header file
  - MAINTAINERS: add git tree for random.c
  - MAINTAINERS: co-maintain random.c
  - random: remove dead code left over from blocking pool
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness
  - ACPI: sysfs: Fix BERT error region memory mapping
  - ACPI: sysfs: Make sparse happy about address space in use
  - media: vim2m: initialize the media device earlier
  - media: vim2m: Register video device after setting up internals
  - KVM: x86: Properly handle APF vs disabled LAPIC situation
  - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
  - Revert "alinux: random: speed up the initialization of module"
  - !71 xfs: backport 2 patches from upstream
  - xfs: fix inode reservation space for removing transaction
  - xfs: fix comment for start time value of inode with bigtime enabled


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.54.0.82
changelog:
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs
  - bpf: Don't use tnum_range on array range checking for poke descriptors
  - configfs: fix a race in configfs_lookup()
  - configfs: fold configfs_attach_attr into configfs_lookup
  - configfs: simplify the configfs_dirent_is_ready
  - configfs: return -ENAMETOOLONG earlier in configfs_lookup
  - af_key: Do not call xfrm_probe_algs in parallel
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
  - tty: drop tty_schedule_flip()
  - tty: the rest, stop using tty_schedule_flip()
  - tty: drivers/tty/, stop using tty_schedule_flip()
  - pipe: fix kabi for poll_usage in struct pipe_inode_info
  - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
  - bpf: Fix potential array overflow in bpf_trampoline_get_progs()
  - NFSD: Fix possible sleep during nfsd4_release_lockowner()
  - NFS: Memory allocation failures are not server fatal errors
  - docs: submitting-patches: Fix crossref to 'The canonical patch format'
  - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
  - tpm: Fix buffer access in tpm2_get_tpm_pt()
  - HID: multitouch: add quirks to enable Lenovo X12 trackpoint
  - HID: multitouch: Add support for Google Whiskers Touchpad
  - raid5: introduce MD_BROKEN
  - dm verity: set DM_TARGET_IMMUTABLE feature flag
  - dm stats: add cond_resched when looping over entries
  - dm crypt: make printing of the key constant-time
  - dm integrity: fix error code in dm_integrity_ctr()
  - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries
  - Bluetooth: hci_qca: Use del_timer_sync() before freeing
  - zsmalloc: fix races between asynchronous zspage free and page migration
  - crypto: ecrdsa - Fix incorrect use of vli_cmp
  - crypto: caam - fix i.MX6SX entropy delay value
  - x86, kvm: use correct GFP flags for preemption disabled
  - x86/kvm: Alloc dummy async #PF token outside of raw spinlock
  - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator
  - netfilter: conntrack: re-fetch conntrack after insertion
  - crypto: drbg - make reseeding from get_random_bytes() synchronous
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
  - crypto: drbg - prepare for more fine-grained tracking of seeding state
  - lib/crypto: add prompts back to crypto libraries
  - exfat: check if cluster num is valid
  - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
  - xfs: detect overflows in bmbt records
  - net: ipa: compute proper aggregation limit
  - assoc_array: Fix BUG_ON during garbage collect
  - cfg80211: set custom regdomain after wiphy registration
  - pipe: Fix missing lock in pipe_resize_ring()
  - pipe: make poll_usage boolean and annotate its access
  - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers
  - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
  - net: ftgmac100: Disable hardware checksum on AST2600
  - nfc: pn533: Fix buggy cleanup order
  - net: af_key: check encryption module availability consistency
  - percpu_ref_init(): clean ->percpu_count_ref on failure
  - pinctrl: sunxi: fix f1c100s uart2 function


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.55.0.83
changelog:
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
  - netfilter: nf_tables: do not allow SET_ID to refer to another table


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.56.0.84
changelog:
  - netfilter: nf_tables: disallow binding to already bound chain
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message
  - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero
  - block: fix the problem of io_ticks becoming smaller
  - KVM: x86: do not report a vCPU as preempted outside instruction boundaries
  - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in  pxa3xx_gcu_write
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.57.0.85
changelog:
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write
  - etmem: Add a scan flag to support specified page swap-out
  - etmem: add swapcache reclaim to etmem
  - etmem: add original kernel swap enabled options
  - etmem: add CONFIG_ETMEM macro definition for etmem feature
  - config: enable CONFIG_ETMEM by default
  - add ETMEM feature CONFIG to mm/Kconfig
  - quota: Add more checking after reading from quota file
  - quota: Replace all block number checking with helper function
  - quota: Check next/prev free block number after reading from quota file
  - RDMA/hns: Fix gid idx issue caused by free mr
  - RDMA/hns: Use the reserved loopback QPs to free MR before destroying MPT
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  - blk-mq: fix io hung due to missing commit_rqs
  - x86/speculation: Add LFENCE to RSB fill sequence
  - x86/speculation: Add RSB VM Exit protections
  - !110 Add patches for CVE-2022-29900, CVE-2022-23816 and CVE-2022-29901
  - Re-add padlen to the structure alt_instr
  - tools headers: Remove broken definition of __LITTLE_ENDIAN
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again
  - objtool: Fix elf_create_undef_symbol() endianness
  - kvm: fix objtool relocation warning
  - um: Add missing apply_returns()
  - x86/bugs: Remove apostrophe typo
  - tools headers cpufeatures: Sync with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/kvm: fix FASTOP_SIZE when return thunks are enabled
  - efi/x86: use naked RET on mixed mode call wrapper
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub
  - x86/xen: Fix initialisation in hypercall_page after rethunk
  - x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted
  - tools/insn: Restore the relative include paths for cross building
  - x86/static_call: Serialize __static_call_fixup() properly
  - x86/speculation: Disable RRSBA behavior
  - x86/kexec: Disable RET on kexec
  - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/retbleed: Add fine grained Kconfig knobs
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - KVM: VMX: Convert launched argument to flags
  - KVM: VMX: Flatten __vmx_vcpu_run()
  - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/cpu/amd: Add Spectral Chicken
  - objtool: Add entry UNRET validation
  - x86/bugs: Do IBPB fallback check only once
  - x86/bugs: Add retbleed=ibpb
  - x86/xen: Rename SYS* entry points
  - objtool: Update Retpoline validation
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Enable STIBP for JMP2RET
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86: Add magic AMD return-thunk
  - objtool: Treat .text.__x86.* as noinstr
  - x86: Use return-thunk in asm code
  - x86/sev: Avoid using __x86_return_thunk
  - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
  - x86/kvm: Fix SETcc emulation for return thunks
  - x86/bpf: Use alternative RET encoding
  - x86/ftrace: Use alternative RET encoding
  - x86,static_call: Use alternative RET encoding
  - objtool: skip non-text sections when adding return-thunk sites
  - x86,objtool: Create .return_sites
  - x86: Undo return-thunk damage
  - x86/retpoline: Use -mfunction-return
  - Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC}
  - x86/retpoline: Swizzle retpoline thunk
  - x86/retpoline: Cleanup some #ifdefery
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/kvm/vmx: Make noinstr clean
  - x86/realmode: build with -D__DISABLE_EXPORTS
  - x86/entry: Remove skip_r11rcx
  - objtool: Fix SLS validation for kcov tail-call replacement
  - crypto: x86/poly1305 - Fixup SLS
  - objtool: Default ignore INT3 for unreachable
  - kvm/emulate: Fix SETcc emulation function offsets with SLS
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy'
  - x86: Add straight-line-speculation mitigation
  - objtool: Add straight-line-speculation validation
  - x86/alternative: Relax text_poke_bp() constraint
  - x86: Fix objtool build warning
  - x86: Prepare inline-asm for straight-line-speculation
  - x86: Prepare asm files for straight-line-speculation
  - x86/lib/atomic64_386_32: Rename things
  - bpf,x86: Respect X86_FEATURE_RETPOLINE*
  - bpf,x86: Simplify computing label offsets
  - x86/alternative: Implement .retpoline_sites support
  - x86/retpoline: Create a retpoline thunk array
  - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h
  - x86/asm: Fixup odd GEN-for-each-reg.h usage
  - x86/asm: Fix register order
  - x86/retpoline: Remove unused replacement symbols
  - objtool,x86: Replace alternatives with .retpoline_sites
  - objtool: Explicitly avoid self modifying code in .altinstr_replacement
  - objtool: Classify symbols
  - objtool: Handle __sanitize_cov*() tail calls
  - objtool: Introduce CFI hash
  - objtool: Make .altinstructions section entry size consistent
  - objtool: Remove reloc symbol type checks in get_alt_entry()
  - objtool: print out the symbol type when complaining about it
  - objtool: Teach get_alt_entry() about more relocation types
  - objtool: Don't make .altinstructions writable
  - objtool/x86: Ignore __x86_indirect_alt_* symbols
  - objtool: Only rewrite unconditional retpoline thunk calls
  - objtool: Fix .symtab_shndx handling for elf_create_undef_symbol()
  - x86/alternative: Optimize single-byte NOPs at an arbitrary position
  - objtool: Support asm jump tables
  - objtool/x86: Rewrite retpoline thunk calls
  - objtool: Skip magical retpoline .altinstr_replacement
  - objtool: Cache instruction relocs
  - objtool: Keep track of retpoline call sites
  - objtool: Add elf_create_undef_symbol()
  - objtool: Extract elf_symbol_add()
  - objtool: Extract elf_strtab_concat()
  - objtool: Create reloc sections implicitly
  - objtool: Add elf_create_reloc() helper
  - objtool: Rework the elf_rebuild_reloc_section() logic
  - objtool: Handle per arch retpoline naming
  - objtool: Correctly handle retpoline thunk calls
  - x86/retpoline: Simplify retpolines
  - x86/alternatives: Optimize optimize_nops()
  - x86: Add insn_decode_kernel()
  - x86/alternative: Use insn_decode()
  - x86/insn: Add an insn_decode() API
  - x86/insn: Add a __ignore_sync_check__ marker
  - x86/insn: Rename insn_decode() to insn_decode_from_regs()
  - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has()
  - x86/alternative: Support ALTERNATIVE_TERNARY
  - x86/alternative: Support not-feature
  - x86/alternative: Merge include files
  - x86/xen: Support objtool vmlinux.o validation in xen-head.S
  - x86/xen: Support objtool validation in xen-asm.S
  - objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC
  - objtool: Assume only ELF functions do sibling calls
  - objtool: Support retpoline jump detection for vmlinux.o
  - objtool: Support stack layout changes in alternatives
  - objtool: Add 'alt_group' struct
  - objtool: Refactor ORC section generation
  - KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw
  - KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.58.0.86
changelog:
  - KVM: arm64: Try stage2 block mapping for host device MMIO
  - KVM: arm64: Remove the creation time's mapping of MMIO regions
  - ext4: fix use-after-free in ext4_ext_shift_extents
  - arm64: kdump: Properly handle the 4G boundary
  - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog
  - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces
  - hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private"
  - MAINTAINERS: Add maintainer for HiSilicon PTT driver
  - docs: trace: Add HiSilicon PTT device driver documentation
  - hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device
  - hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity
  - spi: hisi-sfc-v3xx: add address mode check
  - spi: hisi-sfc-v3xx: fix potential irq race condition
  - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection
  - spi: hisi-sfc-v3xx: extend version checking compatibility
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  - sched/fair: Fix kabi broken in struct cfs_rq
  - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
  - ext4: only allow test_dummy_encryption when supported
  - MIPS: IP30: Remove incorrect `cpu_has_fpu' override
  - MIPS: IP27: Remove incorrect `cpu_has_fpu' override
  - RDMA/rxe: Generate a completion for unsupported/invalid opcode
  - Revert "random: use static branch for crng_ready()"
  - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
  - bfq: Remove pointless bfq_init_rq() calls
  - bfq: Drop pointless unlock-lock pair
  - bfq: Avoid merging queues with different parents
  - thermal/core: Fix memory leak in the error path
  - thermal/core: fix a UAF bug in __thermal_cooling_device_register()
  - kseltest/cgroup: Make test_stress.sh work if run interactively
  - xfs: assert in xfs_btree_del_cursor should take into account error
  - xfs: consider shutdown in bmapbt cursor delete assert
  - xfs: restore shutdown check in mapped write fault path
  - xfs: fix incorrect root dquot corruption error when switching group/project quota types
  - xfs: sync lazy sb accounting on quiesce of read-only mounts
  - xfs: set inode size after creating symlink
  - net: ipa: fix page free in ipa_endpoint_replenish_one()
  - net: ipa: fix page free in ipa_endpoint_trans_release()
  - phy: qcom-qmp: fix reset-controller leak on probe errors
  - coresight: core: Fix coresight device probe failure issue
  - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - vdpasim: allow to enable a vq repeatedly
  - dt-bindings: gpio: altera: correct interrupt-cells
  - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
  - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op
  - ARM: pxa: maybe fix gpio lookup tables
  - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries
  - phy: qcom-qmp: fix struct clk leak on probe errors
  - arm64: dts: qcom: ipq8074: fix the sleep clock frequency
  - gma500: fix an incorrect NULL check on list iterator
  - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
  - serial: pch: don't overwrite xmit->buf[0] by x_char
  - stm: ltdc: fix two incorrect NULL checks on list iterator
  - carl9170: tx: fix an incorrect use of list iterator
  - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
  - rtl818x: Prevent using not initialized queues
  - xtensa/simdisk: fix proc_read_simdisk()
  - hugetlb: fix huge_pmd_unshare address update
  - nodemask.h: fix compilation error with GCC12
  - iommu/msm: Fix an incorrect NULL check on list iterator
  - ftrace: Clean up hash direct_functions on register failures
  - um: Fix out-of-bounds read in LDT setup
  - um: chan_user: Fix winch_tramp() return value
  - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
  - cfg80211: declare MODULE_FIRMWARE for regulatory.db
  - irqchip: irq-xtensa-mx: fix initial IRQ affinity
  - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
  - csky: patch_text: Fixup last cpu should be master
  - RDMA/hfi1: Fix potential integer multiplication overflow errors
  - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
  - ima: remove the IMA_TEMPLATE Kconfig option
  - media: coda: Add more H264 levels for CODA960
  - media: coda: Fix reported H264 profile
  - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
  - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
  - md: fix an incorrect NULL check in md_reload_sb
  - md: fix an incorrect NULL check in does_sb_need_changing
  - drm/i915/dsi: fix VBT send packet port selection for ICL+
  - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
  - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator
  - drm/nouveau/clk: Fix an incorrect NULL check on list iterator
  - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
  - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
  - scsi: dc395x: Fix a missing check on list iterator
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - dlm: fix missing lkb refcount handling
  - dlm: fix plock invalid read
  - s390/perf: obtain sie_block from the right address
  - mm, compaction: fast_find_migrateblock() should return pfn in the target zone
  - PCI: qcom: Fix unbalanced PHY init on probe errors
  - PCI: qcom: Fix runtime PM imbalance on probe errors
  - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
  - tracing: Fix potential double free in create_var_ref()
  - ACPI: property: Release subnode properties with data nodes
  - ext4: avoid cycles in directory h-tree
  - ext4: verify dir block before splitting it
  - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
  - bfq: Update cgroup information before merging bio
  - bfq: Split shared queues on move between cgroups
  - efi: Do not import certificates from UEFI Secure Boot for T2 Macs
  - iwlwifi: mvm: fix assert 1F04 upon reconfig
  - wifi: mac80211: fix use-after-free in chanctx code
  - f2fs: fix to do sanity check for inline inode
  - f2fs: fix fallocate to use file_modified to update permissions consistently
  - f2fs: fix to do sanity check on total_data_blocks
  - f2fs: don't need inode lock for system hidden quota
  - f2fs: fix deadloop in foreground GC
  - f2fs: fix to clear dirty inode in f2fs_evict_inode()
  - f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
  - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
  - perf jevents: Fix event syntax error caused by ExtSel
  - perf c2c: Use stdio interface if slang is not supported
  - i2c: rcar: fix PM ref counts in probe error paths
  - i2c: npcm: Handle spurious interrupts
  - i2c: npcm: Correct register access width
  - i2c: npcm: Fix timeout calculation
  - iommu/amd: Increase timeout waiting for GA log enablement
  - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler()
  - dmaengine: stm32-mdma: rework interrupt handler
  - dmaengine: stm32-mdma: remove GISR1 register
  - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
  - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
  - NFS: Don't report errors from nfs_pageio_complete() more than once
  - NFS: Do not report flush errors in nfs_write_end()
  - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS
  - NFS: Do not report EINTR/ERESTARTSYS as mapping errors
  - dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
  - i2c: at91: Initialize dma_buf in at91_twi_xfer()
  - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon
  - cpufreq: mediatek: Unregister platform device on exit
  - cpufreq: mediatek: Use module_init and add module_exit
  - cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init
  - i2c: at91: use dma safe buffers
  - iommu/mediatek: Add list_del in mtk_iommu_remove
  - f2fs: fix dereference of stale list iterator after loop body
  - OPP: call of_node_put() on error path in _bandwidth_supported()
  - Input: stmfts - do not leave device disabled in stmfts_input_open
  - RDMA/hfi1: Prevent use of lock before it is initialized
  - mailbox: forward the hrtimer if not queued and under a lock
  - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
  - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - macintosh: via-pmu and via-cuda need RTC_LIB
  - powerpc/perf: Fix the threshold compare group constraint for power9
  - powerpc/64: Only WARN if __pa()/__va() called with bad addresses
  - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume()
  - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits
  - Input: sparcspkr - fix refcount leak in bbc_beep_probe
  - crypto: cryptd - Protect per-CPU resource by disabling BH.
  - crypto: sun8i-ss - handle zero sized sg
  - crypto: sun8i-ss - rework handling of IV
  - PCI: imx6: Fix PERST# start-up sequence
  - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net
  - ASoC: atmel-classd: Remove endianness flag on class d component
  - ASoC: atmel-pdmic: Remove endianness flag on pdmic component
  - powerpc/4xx/cpm: Fix return value of __setup() handler
  - powerpc/idle: Fix return value of __setup() handler
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()
  - powerpc/8xx: export 'cpm_setbrg' for modules
  - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block()
  - dax: fix cache flush on PMD-mapped pages
  - drivers/base/node.c: fix compaction sysfs file leak
  - pinctrl: mvebu: Fix irq_of_parse_and_map() return value
  - nvdimm: Allow overwrite in the presence of disabled dimms
  - nvdimm: Fix firmware activation deadlock scenarios
  - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - mfd: ipaq-micro: Fix error check return value of platform_get_irq()
  - powerpc/fadump: fix PT_LOAD segment for boot memory area
  - arm: mediatek: select arch timer for mt7629
  - pinctrl: bcm2835: implement hook for missing gpio-ranges
  - gpiolib: of: Introduce hook for missing gpio-ranges
  - crypto: marvell/cesa - ECB does not IV
  - misc: ocxl: fix possible double free in ocxl_file_register_afu
  - ARM: dts: bcm2835-rpi-b: Fix GPIO line names
  - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
  - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
  - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96
  - can: xilinx_can: mark bit timing constants as const
  - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls
  - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing
  - platform/chrome: cros_ec: fix error handling in cros_ec_register()
  - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault
  - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
  - soc: qcom: llcc: Add MODULE_DEVICE_TABLE()
  - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks
  - PCI: dwc: Fix setting error return on MSI DMA mapping failure
  - PCI: rockchip: Fix find_first_zero_bit() limit
  - PCI: cadence: Fix find_first_zero_bit() limit
  - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
  - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
  - ARM: dts: suniv: F1C100: fix watchdog compatible
  - memory: samsung: exynos5422-dmc: Avoid some over memory allocation
  - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
  - net/smc: postpone sk_refcnt increment in connect()
  - rxrpc: Fix decision on when to generate an IDLE ACK
  - rxrpc: Don't let ack.previousPacket regress
  - rxrpc: Fix overlapping ACK accounting
  - rxrpc: Don't try to resend the request if we're receiving the reply
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - hv_netvsc: Fix potential dereference of NULL pointer
  - net: stmmac: fix out-of-bounds access in a selftest
  - net: stmmac: selftests: Use kcalloc() instead of kzalloc()
  - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv()
  - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
  - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
  - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
  - thermal/core: Fix memory leak in __thermal_cooling_device_register()
  - thermal/drivers/core: Use a char pointer for the cooling device name
  - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
  - thermal/drivers/bcm2711: Don't clamp temperature at zero
  - drm/i915: Fix CFI violation with show_dynamic_id()
  - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path
  - x86/sev: Annotate stack change in the #VC handler
  - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
  - ext4: reject the 'commit' option on ext2 filesystems
  - media: rkvdec: h264: Fix bit depth wrap in pps packet
  - media: rkvdec: h264: Fix dpb_valid implementation
  - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource()
  - media: ov7670: remove ov7670_power_off from ov7670_remove
  - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
  - sctp: read sk->sk_bound_dev_if once in sctp_rcv()
  - lsm,selinux: pass flowi_common instead of flowi to the LSM hooks
  - m68k: math-emu: Fix dependencies of math emulation support
  - nvme: set dma alignment to dword
  - Bluetooth: use hdev lock for accept_list and reject_list in conn req
  - Bluetooth: use inclusive language when filtering devices
  - Bluetooth: use inclusive language in HCI role comments
  - Bluetooth: LL privacy allow RPA
  - Bluetooth: L2CAP: Rudimentary typo fixes
  - Bluetooth: Interleave with allowlist scan
  - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
  - media: vsp1: Fix offset calculation for plane cropping
  - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - media: exynos4-is: Change clk_disable to clk_disable_unprepare
  - media: st-delta: Fix PM disable depth imbalance in delta_probe
  - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe
  - media: aspeed: Fix an error handling path in aspeed_video_probe()
  - scripts/faddr2line: Fix overlapping text section failures
  - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir
  - ASoC: samsung: Fix refcount leak in aries_audio_probe
  - ASoC: samsung: Use dev_err_probe() helper
  - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
  - ath11k: Don't check arvif->is_started before sending management frames
  - perf/amd/ibs: Use interrupt regs ip for stack unwinding
  - regulator: qcom_smd: Fix up PM8950 regulator configuration
  - Revert "cpufreq: Fix possible race in cpufreq online error path"
  - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()
  - iomap: iomap_write_failed fix
  - media: uvcvideo: Fix missing check to determine if element is found in list
  - drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
  - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
  - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop()
  - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
  - arm64: fix types in copy_highpage()
  - x86/mm: Cleanup the control_va_addr_alignment() __setup handler
  - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value
  - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
  - irqchip/exiu: Fix acknowledgment of edge triggered interrupts
  - x86: Fix return value of __setup handlers
  - virtio_blk: fix the discard_granularity and discard_alignment queue limits
  - perf tools: Use Python devtools for version autodetection rather than runtime
  - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H
  - drm/msm: add missing include to msm_drv.c
  - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
  - drm/msm/hdmi: check return value after calling platform_get_resource_byname()
  - drm/msm/dsi: fix error checks and return values for DSI xmit functions
  - drm/msm/dp: fix error check return value of irq_of_parse_and_map()
  - drm/msm/dp: stop event kernel thread when DP unbind
  - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - perf tools: Add missing headers needed by util/data.h
  - ASoC: rk3328: fix disabling mclk on pclk probe failure
  - x86/speculation: Add missing prototype for unpriv_ebpf_notify()
  - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check()
  - libbpf: Fix logic for finding matching program for CO-RE relocation
  - selftests/resctrl: Fix null pointer dereference on open failed
  - scsi: ufs: core: Exclude UECxx from SFR dump list
  - scsi: ufs: qcom: Fix ufs_qcom_resume()
  - drm/msm/dpu: adjust display_v_end for eDP and DP
  - of: overlay: do not break notify on NOTIFY_{OK|STOP}
  - fsnotify: fix wrong lockdep annotations
  - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
  - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01
  - media: hantro: Empty encoder capture buffers by default
  - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - cpufreq: Fix possible race in cpufreq online error path
  - spi: img-spfi: Fix pm_runtime_get_sync() error checking
  - drm/bridge: Fix error handling in analogix_dp_probe
  - HID: elan: Fix potential double free in elan_input_configured
  - HID: hid-led: fix maximum brightness for Dream Cheeky
  - mtd: rawnand: denali: Use managed device resources
  - EDAC/dmc520: Don't print an error for each unconfigured interrupt line
  - drbd: fix duplicate array initializer
  - target: remove an incorrect unmap zeroes data deduction
  - efi: Add missing prototype for efi_capsule_setup_info
  - NFC: NULL out the dev->rfkill to prevent UAF
  - net: dsa: mt7530: 1G can also support 1000BASE-X link mode
  - scftorture: Fix distribution of short handler delays
  - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
  - drm: mali-dp: potential dereference of null pointer
  - drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
  - nl80211: show SSID for P2P_GO interfaces
  - bpf: Fix excessive memory allocation in stack_map_alloc()
  - libbpf: Don't error out on CO-RE relos for overriden weak subprogs
  - drm/vc4: txp: Force alpha to be 0xff if it's disabled
  - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
  - drm/vc4: hvs: Reset muxes at probe time
  - drm/mediatek: Fix mtk_cec_mask()
  - drm/ingenic: Reset pixclock rate when parent clock rate changes
  - x86/delay: Fix the wrong asm constraint in delay_loop()
  - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  - spi: qcom-qspi: Add minItems to interconnect-names
  - drm/bridge: adv7511: clean up CEC adapter when probe fails
  - drm/edid: fix invalid EDID extension block filtering
  - ath9k: fix ar9003_get_eepmisc
  - ath11k: acquire ab->base_lock in unassign when finding the peer by addr
  - dt-bindings: display: sitronix, st7735r: Fix backlight in example
  - RDMA/hfi1: Prevent panic when SDMA is disabled
  - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
  - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
  - powerpc/powernv: fix missing of_node_put in uv_init()
  - powerpc/xics: fix refcount leak in icp_opal_init()
  - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr
  - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
  - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
  - ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
  - ARM: versatile: Add missing of_node_put in dcscb_init
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()
  - fat: add ratelimit to fat*_ent_bread()
  - powerpc/fadump: Fix fadump to work with a different endian capture kernel
  - ARM: OMAP1: clock: Fix UART rate reporting algorithm
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
  - crypto: ccree - use fine grained DMA mapping dir
  - PM / devfreq: rk3399_dmc: Disable edev on remove()
  - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count
  - ARM: dts: s5pv210: align DMA channels with dtschema
  - ARM: dts: ox820: align interrupt controller node name with dtschema
  - IB/rdmavt: add missing locks in rvt_ruc_loopback
  - gfs2: use i_lock spin_lock for inode qadata
  - selftests/bpf: fix btf_dump/btf_dump due to recent clang change
  - eth: tg3: silence the GCC 12 array-bounds warning
  - rxrpc, afs: Fix selection of abort codes
  - rxrpc: Return an error to sendmsg if call failed
  - m68k: atari: Make Atari ROM port I/O write macros return void
  - x86/microcode: Add explicit CPU vendor dependency
  - can: mcp251xfd: silence clang's -Wunaligned-access warning
  - ASoC: rt1015p: remove dependency on GPIOLIB
  - ASoC: max98357a: remove dependency on GPIOLIB
  - media: exynos4-is: Fix compile warning
  - net: phy: micrel: Allow probing without .driver_data
  - nbd: Fix hung on disconnect request if socket is closed before
  - ASoC: rt5645: Fix errorenous cleanup order
  - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
  - openrisc: start CPU timer early in boot
  - media: cec-adap.c: fix is_configuring state
  - media: imon: reorganize serialization
  - media: coda: limit frame interval enumeration to supported encoder frame sizes
  - media: rga: fix possible memory leak in rga_probe
  - rtlwifi: Use pr_warn instead of WARN_ONCE
  - ipmi: Fix pr_fmt to avoid compilation issues
  - ipmi:ssif: Check for NULL msg when handling events and messages
  - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
  - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
  - spi: stm32-qspi: Fix wait_cmd timeout in APM mode
  - perf/amd/ibs: Cascade pmu init functions' return value
  - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
  - net: remove two BUG() from skb_checksum_help()
  - ASoC: tscs454: Add endianness flag in snd_soc_component_driver
  - HID: bigben: fix slab-out-of-bounds Write in bigben_probe
  - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
  - mlxsw: Treat LLDP packets as control
  - mlxsw: spectrum_dcb: Do not warn about priority changes
  - ASoC: dapm: Don't fold register value changes into notifications
  - net/mlx5: fs, delete the FTE when there are no rules attached to it
  - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
  - drm: msm: fix error check return value of irq_of_parse_and_map()
  - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
  - ath10k: skip ath10k_halt during suspend for driver state RESTARTING
  - drm/amd/pm: fix the compile warning
  - drm/plane: Move range check for format_count earlier
  - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408
  - ath11k: disable spectral scan during spectral deinit
  - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
  - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync()
  - scsi: megaraid: Fix error check return value of register_chrdev()
  - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
  - mmc: jz4740: Apply DMA engine limits to maximum segment size
  - md/bitmap: don't set sb values if can't pass sanity check
  - media: cx25821: Fix the warning when removing the module
  - media: pci: cx23885: Fix the error handling in cx23885_initdev()
  - media: venus: hfi: avoid null dereference in deinit
  - ath9k: fix QCA9561 PA bias level
  - drm/amd/pm: fix double free in si_parse_power_table()
  - tools/power turbostat: fix ICX DRAM power numbers
  - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction
  - ALSA: jack: Access input_dev under mutex
  - sfc: ef10: Fix assigning negative value to unsigned variable
  - rcu: Make TASKS_RUDE_RCU select IRQ_WORK
  - rcu-tasks: Fix race in schedule and flush work
  - drm/komeda: return early if drm_universal_plane_init() fails.
  - ACPICA: Avoid cache flush inside virtual machines
  - x86/platform/uv: Update TSC sync state for UV5
  - fbcon: Consistently protect deferred_takeover with console_lock()
  - ipv6: fix locking issues with loops over idev->addr_list
  - ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - b43: Fix assigning negative value to unsigned variable
  - b43legacy: Fix assigning negative value to unsigned variable
  - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
  - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
  - iommu/vt-d: Add RPLS to quirk list to skip TE disabling
  - btrfs: repair super block num_devices automatically
  - btrfs: add "0x" prefix for unsupported optional features
  - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
  - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
  - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
  - perf/x86/intel: Fix event constraints for ICL
  - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
  - parisc/stifb: Keep track of hardware path of graphics card
  - Fonts: Make font size unsigned in font_desc
  - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
  - cifs: when extending a file with falloc we should make files not-sparse
  - usb: core: hcd: Add support for deferring roothub registration
  - usb: dwc3: gadget: Move null pinter check to proper place
  - USB: new quirk for Dell Gen 2 devices
  - USB: serial: option: add Quectel BG95 modem
  - ALSA: usb-audio: Cancel pending work at closing a MIDI substream
  - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
  - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop
  - riscv: Fix irq_work when SMP is disabled
  - riscv: Initialize thread pointer before calling C functions
  - parisc/stifb: Implement fb_is_primary_device()
  - binfmt_flat: do not stop relocating GOT entries prematurely on riscv


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.59.0.87
changelog:
  - netfilter: nf_conntrack_irc: Fix forged IP logic
  - ext4: fix dir corruption when ext4_dx_add_entry() fails
  - ext4: fix check for block being out of directory size
  - ext4: make sure ext4_append() always allocates new block
  - ext4: check if directory block is within i_size
  - ext4: make variable "count" signed
  - iommu: Fix compliation failure caused by iommu_device_register
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  - blk-iocost: don't ignore vrate_min on QD contention
  - !157 Enable NVMe over TCP for arm64
  - arm64: openeuler_defconfig: enable nvmf tcp


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.61.0.88
changelog:
  - binder: fix UAF of ref->proc caused by race condition
  - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
  - wifi: mac80211: fix MBSSID parsing use-after-free
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open()
  - arm64: fix oops in concurrently setting insn_emulation sysctls
  - wifi: cfg80211: avoid nontransmitted BSS list corruption
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
  - HID: roccat: Fix use-after-free in roccat_read()
  - wifi: cfg80211: fix BSS refcounting bugs
  - mm/rmap: Fix kabi broken in anon_vma
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
  - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
  - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT
  - zonefs: fix handling of explicit_open option on mount
  - PCI: qcom: Fix pipe clock imbalance
  - md/raid0: Ignore RAID0 layout if the second zone has only one device
  - interconnect: Restore sync state by ignoring ipa-virt in provider count
  - interconnect: qcom: sc7180: Drop IP0 interconnects
  - powerpc/mm: Switch obsolete dssall to .long
  - drm/atomic: Force bridge self-refresh-exit on CRTC switch
  - drm/bridge: analogix_dp: Support PSR-exit to disable transition
  - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
  - ixgbe: fix unexpected VLAN Rx in promisc mode on VF
  - ixgbe: fix bcast packets Rx on VF after promisc removal
  - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
  - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
  - net: phy: dp83867: retrigger SGMII AN when link change
  - mmc: block: Fix CQE recovery reset success
  - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
  - cifs: fix reconnect on smb3 mount types
  - cifs: return errors during session setup during reconnects
  - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021
  - ALSA: hda/conexant - Fix loopback issue with CX20632
  - scripts/gdb: change kernel config dumping method
  - vringh: Fix loop descriptors check in the indirect cases
  - nodemask: Fix return values to be unsigned
  - cifs: version operations for smb20 unneeded when legacy support disabled
  - s390/gmap: voluntarily schedule during key setting
  - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds
  - x86/cpu: Elide KCSAN for cpu_has() and friends
  - modpost: fix undefined behavior of is_arm_mapping_symbol()
  - drm/radeon: fix a possible null pointer dereference
  - ceph: allow ceph.dir.rctime xattr to be updatable
  - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  - scsi: myrb: Fix up null pointer access on myrb_cleanup()
  - md: protect md_unregister_thread from reentrancy
  - watchdog: wdat_wdt: Stop watchdog when rebooting the system
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock.
  - serial: msm_serial: disable interrupts in __msm_console_write()
  - staging: rtl8712: fix uninit-value in r871xu_drv_init()
  - staging: rtl8712: fix uninit-value in usb_read8() and friends
  - clocksource/drivers/sp804: Avoid error on multiple instances
  - extcon: Modify extcon device to be created after driver data is set
  - misc: rtsx: set NULL intfdata when probe fails
  - usb: dwc2: gadget: don't reset gadget's driver->bus
  - sysrq: do not omit current cpu when showing backtrace of all active CPUs
  - USB: hcd-pci: Fully suspend across freeze/thaw cycle
  - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - drivers: tty: serial: Fix deadlock in sa1100_set_termios()
  - USB: host: isp116x: check return value after calling platform_get_resource()
  - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
  - tty: Fix a possible resource leak in icom_probe
  - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  - lkdtm/usercopy: Expand size of "out of frame" object
  - iio: st_sensors: Add a local lock for protecting odr
  - staging: rtl8712: fix a potential memory leak in r871xu_drv_init()
  - iio: dummy: iio_simple_dummy: check the return value of kstrdup()
  - drm: imx: fix compiler warning with gcc-12
  - net: altera: Fix refcount leak in altera_tse_mdio_create
  - ip_gre: test csum_start instead of transport header
  - net/mlx5: fs, fail conflicting actions
  - net/mlx5: Rearm the FW tracer after each tracer event
  - net: ipv6: unexport __init-annotated seg6_hmac_init()
  - net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  - net: mdio: unexport __init-annotated mdio_bus_init()
  - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
  - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
  - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
  - bpf, arm64: Clear prog->jited_len along prog->jited
  - af_unix: Fix a data-race in unix_dgram_peer_wake_me().
  - xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
  - netfilter: nf_tables: bail out early if hardware offload is not supported
  - netfilter: nf_tables: memleak flow rule from commit path
  - netfilter: nf_tables: release new hooks on unsupported flowtable flags
  - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - netfilter: nf_tables: always initialize flowtable hook list in transaction
  - powerpc/kasan: Force thread size increase with KASAN
  - netfilter: nf_tables: delete flowtable hooks via transaction list
  - netfilter: nat: really support inet nat without l3 address
  - xprtrdma: treat all calls not a bcall when bc_serv is NULL
  - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
  - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1
  - NFSv4: Don't hold the layoutget locks across multiple RPC calls
  - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
  - m68knommu: fix undefined reference to `_init_sp'
  - m68knommu: set ZERO_PAGE() to the allocated zeroed page
  - i2c: cadence: Increase timeout per message if necessary
  - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
  - iommu/arm-smmu-v3: check return value after calling platform_get_resource()
  - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()
  - tracing: Avoid adding tracer option before update_tracer_options
  - tracing: Fix sleeping function called from invalid context on RT kernel
  - bootconfig: Make the bootconfig.o as a normal object file
  - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - dmaengine: idxd: set DMA_INTERRUPT cap bit
  - perf c2c: Fix sorting in percent_rmt_hitm_cmp()
  - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction
  - tipc: check attribute length for bearer name
  - scsi: sd: Fix potential NULL pointer dereference
  - afs: Fix infinite loop found by xfstest generic/676
  - gpio: pca953x: use the correct register address to do regcache sync
  - tcp: tcp_rtx_synack() can be called from process context
  - net: sched: add barrier to fix packet stuck problem for lockless qdisc
  - net/mlx5e: Update netdev features after changing XDP state
  - net/mlx5: correct ECE offset in query qp output
  - net/mlx5: Don't use already freed action pointer
  - sfc: fix wrong tx channel offset with efx_separate_tx_channels
  - sfc: fix considering that all channels have TX queues
  - nfp: only report pause frame configuration for physical device
  - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *"
  - riscv: read-only pages should not be writable
  - bpf: Fix probe read error in ___bpf_prog_run()
  - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty
  - jffs2: fix memory leak in jffs2_do_fill_super
  - modpost: fix removing numeric suffixes
  - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks
  - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
  - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
  - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
  - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
  - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
  - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
  - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking
  - driver: base: fix UAF when driver_attach failed
  - bus: ti-sysc: Fix warnings for unbind for serial
  - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  - serial: stm32-usart: Correct CSIZE, bits, and parity
  - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
  - serial: sifive: Sanitize CSIZE and c_iflag
  - serial: sh-sci: Don't allow CS5-6
  - serial: txx9: Don't allow CS5-6
  - serial: rda-uart: Don't allow CS5-6
  - serial: digicolor-usart: Don't allow CS5-6
  - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
  - serial: meson: acquire port->lock in startup()
  - rtc: mt6397: check return value after calling platform_get_resource()
  - clocksource/drivers/riscv: Events are stopped during CPU suspend
  - soc: rockchip: Fix refcount leak in rockchip_grf_init
  - extcon: ptn5150: Add queue work sync before driver release
  - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
  - serial: sifive: Report actual baud base rather than fixed 115200
  - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
  - iio: adc: sc27xx: Fine tune the scale calibration values
  - iio: adc: sc27xx: fix read big scale voltage not right
  - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout
  - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
  - usb: typec: mux: Check dev_set_name() return value
  - firmware: stratix10-svc: fix a missing check on list iterator
  - misc: fastrpc: fix an incorrect NULL check on list iterator
  - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
  - pwm: lp3943: Fix duty calculation in case period was clamped
  - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()
  - usb: musb: Fix missing of_node_put() in omap2430_probe
  - USB: storage: karma: fix rio_karma_init return
  - usb: usbip: add missing device lock on tweak configuration cmd
  - usb: usbip: fix a refcount leak in stub_probe()
  - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get
  - tty: n_tty: Restore EOF push handling behavior
  - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
  - tty: goldfish: Use tty_port_destroy() to destroy port
  - lkdtm/bugs: Check for the NULL pointer after calling kmalloc
  - iio: adc: ad7124: Remove shift from scan_type
  - staging: greybus: codecs: fix type confusion of list iterator variable
  - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended
  - tty: fix deadlock caused by calling printk() under tty_port->lock


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.63.0.89
changelog:
  - nilfs2: fix use-after-free bug of struct nilfs_root
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs
  - r8152: Rate limit overflow messages
  - nfp: fix use-after-free in area_cache_get()
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
  - media: pvrusb2: fix memory leak in pvr_probe
  - binderfs: rework superblock destruction
  - libbpf: Fix use-after-free in btf_dump_name_dups
  - sch_sfb: Also store skb len before calling child enqueue
  - sch_sfb: Don't assume the skb is still around after enqueueing to child
  - watch-queue: remove spurious double semicolon
  - watchqueue: make sure to serialize 'wqueue->defunct' properly
  - kabi: net: fix kabi broken in sk_buff
  - io_uring/af_unix: defer registered files gc to io_uring release
  - mISDN: fix use-after-free bugs in l1oip timer handlers
  - ubi: fastmap: Add fastmap control support for Module parameters
  - ubi: fastmap: Add fastmap control support for 'UBI_IOCATT' ioctl
  - ipv6: Fix data races around sk->sk_prot.
  - io_uring: Use original task for req identity in io_identity_cow()
  - tcp: Fix data races around icsk->icsk_af_ops.
  - wifi: mac80211: fix crash in beacon protection for P2P-device
  - ovl: do not fail because of O_NOATIME
  - x86/ftrace: Use alternative RET encoding
  - x86/ibt,ftrace: Make function-graph play nice
  - Revert "x86/ftrace: Use alternative RET encoding"
  - tcp/udp: Fix memory leak in ipv6_renew_options().
  - kcm: avoid potential race in kcm_tx_work
  - ubifs: Reserve one leb for each journal head while doing budget
  - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
  - ubifs: Fix wrong dirty space budget for dirty inode
  - ubifs: Rectify space budget for ubifs_xrename()
  - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
  - powerpc/pseries: wire up rng during setup_arch()
  - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
  - random: update comment from copy_to_user() -> copy_to_iter()
  - modpost: fix section mismatch check for exported init/exit sections
  - ARM: cns3xxx: Fix refcount leak in cns3xxx_init
  - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings
  - ARM: Fix refcount leak in axxia_boot_secondary
  - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
  - ARM: exynos: Fix refcount leak in exynos_map_pmu
  - ARM: dts: imx6qdl: correct PU regulator ramp delay
  - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node
  - powerpc/powernv: wire up rng during setup_arch
  - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
  - powerpc: Enable execve syscall exit tracepoint
  - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX
  - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI
  - xtensa: Fix refcount leak bug in time.c
  - xtensa: xtfpga: Fix refcount leak bug in setup
  - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client
  - iio: adc: axp288: Override TS pin bias current for some models
  - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message
  - iio: adc: stm32: Fix ADCs iteration in irq handler
  - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value)
  - iio: adc: stm32: fix maximum clock rate for stm32mp15x
  - iio: trigger: sysfs: fix use-after-free on remove
  - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
  - iio: accel: mma8452: ignore the return value of reset operation
  - iio:accel:mxc4005: rearrange iio trigger get and register
  - iio:accel:bma180: rearrange iio trigger get and register
  - iio:chemical:ccs811: rearrange iio trigger get and register
  - f2fs: attach inline_data after setting compression
  - usb: chipidea: udc: check request status before setting device address
  - USB: gadget: Fix double-free bug in raw_gadget driver
  - usb: gadget: Fix non-unique driver names in raw-gadget driver
  - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI
  - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI
  - xhci: turn off port power in shutdown
  - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC
  - iio: adc: vf610: fix conversion mode sysfs node name
  - iio: mma8452: fix probe fail when device tree compatible is used.
  - s390/cpumf: Handle events cycles and instructions identical
  - gpio: winbond: Fix error code in winbond_gpio_get()
  - nvme: move the Samsung X5 quirk entry to the core quirks
  - nvme-pci: add NO APST quirk for Kioxia device
  - nvme-pci: allocate nvme_command within driver pdu
  - nvme: mark nvme_setup_passsthru() inline
  - nvme: centralize setting the timeout in nvme_alloc_request
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
  - virtio_net: fix xdp_rxq_info bug after suspend/resume
  - igb: Make DMA faster when CPU is active on the PCIe link
  - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
  - ice: ethtool: advertise 1000M speeds properly
  - afs: Fix dynamic root getattr
  - MIPS: Remove repetitive increase irq_err_count
  - x86/xen: Remove undefined behavior in setup_features()
  - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh
  - udmabuf: add back sanity check
  - net/tls: fix tls_sk_proto_close executed repeatedly
  - erspan: do not assume transport header is always set
  - drm/msm/dp: fix connect/disconnect handled at irq_hpd
  - drm/msm/dp: promote irq_hpd handle to handle link training correctly
  - drm/msm/dp: deinitialize mainlink if link training failed
  - drm/msm/dp: fixes wrong connection state caused by failure of link train
  - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind()
  - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
  - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
  - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
  - igb: fix a use-after-free issue in igb_clean_tx_ring
  - tipc: fix use-after-free Read in tipc_named_reinit
  - tipc: simplify the finalize work queue
  - phy: aquantia: Fix AN when higher speeds than 1G are not advertised
  - bpf, x86: Fix tail call count offset calculation on bpf2bpf call
  - drm/sun4i: Fix crash during suspend after component bind failure
  - bpf: Fix request_sock leak in sk lookup helpers
  - drm/msm: use for_each_sgtable_sg to iterate over scatterlist
  - scsi: scsi_debug: Fix zone transition to full condition
  - netfilter: use get_random_u32 instead of prandom
  - netfilter: nftables: add nft_parse_register_store() and use it
  - netfilter: nftables: add nft_parse_register_load() and use it
  - drm/msm: Fix double pm_runtime_disable() call
  - USB: serial: option: add Quectel RM500K module support
  - USB: serial: option: add Quectel EM05-G modem
  - USB: serial: option: add Telit LE910Cx 0x1250 composition
  - dm mirror log: clear log bits up to BITS_PER_LONG boundary
  - dm era: commit metadata in postsuspend after worker stops
  - ata: libata: add qc->flags in ata_qc_complete_template tracepoint
  - mtd: rawnand: gpmi: Fix setting busy timeout setting
  - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
  - btrfs: add error messages to all unrecognized mount options
  - net: openvswitch: fix parsing of nw_proto for IPv6 fragments
  - ALSA: hda/realtek: Add quirk for Clevo NS50PU
  - ALSA: hda/realtek: Add quirk for Clevo PD70PNT
  - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly
  - ALSA: hda/realtek - ALC897 headset MIC no sound
  - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop
  - ALSA: hda/conexant: Fix missing beep setup
  - ALSA: hda/via: Fix missing beep setup
  - random: quiet urandom warning ratelimit suppression message
  - random: schedule mix_interrupt_randomness() less often
  - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
  - serial: core: Initialize rs485 RTS polarity already on probe
  - tcp: drop the hash_32() part from the index calculation
  - tcp: dynamically allocate the perturb table used by source ports
  - tcp: add small random increments to the source port
  - tcp: use different parts of the port_offset for index and offset
  - tcp: add some entropy in __inet_hash_connect()
  - usb: gadget: u_ether: fix regression in setting fixed MAC address
  - zonefs: fix zonefs_iomap_begin() for reads
  - s390/mm: use non-quiescing sske for KVM switch to keyed guest
  - clk: imx8mp: fix usb_root_clk parent
  - powerpc/book3e: get rid of #include <generated/compile.h>
  - igc: Enable PCIe PTM
  - Revert "PCI: Make pci_enable_ptm() private"
  - net: openvswitch: fix misuse of the cached connection on tuple changes
  - net/sched: act_police: more accurate MTU policing
  - dma-direct: don't over-decrypt memory
  - virtio-pci: Remove wrong address verification in vp_del_vqs()
  - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine
  - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak
  - KVM: x86: Account a variety of miscellaneous allocations
  - KVM: arm64: Don't read a HW interrupt pending state in user context
  - ext4: add reserved GDT blocks check
  - drm/amd/display: Cap OLED brightness per max frame-average luminance
  - dm mirror log: round up region bitmap size to BITS_PER_LONG
  - serial: 8250: Store to lsr_save_flags after lsr read
  - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
  - usb: dwc2: Fix memory leak in dwc2_hcd_init
  - USB: serial: io_ti: add Agilent E5805A support
  - USB: serial: option: add support for Cinterion MV31 with new baseline
  - crypto: memneq - move into lib/
  - comedi: vmk80xx: fix expression for tx buffer size
  - mei: me: add raptor lake point S DID
  - i2c: designware: Use standard optional ref clock implementation
  - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
  - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
  - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
  - i2c: npcm7xx: Add check for platform_driver_register
  - faddr2line: Fix overlapping text section failures, the sequel
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - certs/blacklist_hashes.c: fix const confusion in certs blacklist
  - arm64: ftrace: consistently handle PLTs.
  - arm64: ftrace: fix branch range checks
  - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg
  - net: bgmac: Fix an erroneous kfree() in bgmac_remove()
  - mlxsw: spectrum_cnt: Reorder counter pools
  - nvme: add device name to warning in uuid_show()
  - nvme: use sysfs_emit instead of sprintf
  - drm/i915/reset: Fix error_state_read ptr + offset use
  - misc: atmel-ssc: Fix IRQ check in ssc_probe
  - tty: goldfish: Fix free_irq() on remove
  - Drivers: hv: vmbus: Release cpu lock in error case
  - i40e: Fix call trace in setup_tx_descriptors
  - i40e: Fix calculating the number of queue pairs
  - i40e: Fix adding ADQ filter to TC0
  - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
  - pNFS: Avoid a live lock condition in pnfs_update_layout()
  - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
  - random: credit cpu and bootloader seeds by default
  - gpio: dwapb: Don't print error on -EPROBE_DEFER
  - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error.
  - mellanox: mlx5: avoid uninitialized variable warning with gcc-12
  - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed
  - ALSA: hda/realtek - Add HW8326 support
  - scsi: pmcraid: Fix missing resource cleanup in error case
  - scsi: ipr: Fix missing/incorrect resource cleanup in error case
  - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion
  - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
  - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
  - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq
  - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
  - ASoC: es8328: Fix event generation for deemphasis control
  - ASoC: wm8962: Fix suspend while playing music
  - quota: Prevent memory allocation recursion while holding dq_lock
  - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
  - ASoC: cs42l51: Correct minimum value for SX volume control
  - ASoC: cs42l56: Correct typo in minimum level for SX volume controls
  - ASoC: cs42l52: Correct TLV for Bypass Volume
  - ASoC: cs53l30: Correct number of volume levels on SX controls
  - ASoC: cs35l36: Update digital volume TLV
  - ASoC: cs42l52: Fix TLV scales for mixer controls
  - dma-debug: make things less spammy under memory pressure
  - ASoC: nau8822: Add operation for internal PLL off and on
  - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3
  - bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()
  - nfsd: Replace use of rwsem with errseq_t
  - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"
  - !164 add CONFIG_TXGBE=m for arm64 openeuler_deconfig
  - openeuler: configs: add CONFIG_NET_VENDOR_NETSWIFT=y and CONFIG_TXGBE=m for arm64 arch default config


