# changelog

author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.90
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.91
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.92
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.93
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.94
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.95
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.96
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.97
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.98
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.99
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-52
changelog:
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
  - sysdeps/x86/Makefile: Split and sort tests
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix slow tls access after dlopen [BZ #19924]
  - x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
  - x86_64: Add log1p with FMA
  - x86_64: Add expm1 with FMA
  - x86_64: Add log2 with FMA
  - x86_64: Sort fpu/multiarch/Makefile


author: xiajimei <xiejiamei@hygon.cn> - 2.38-56
changelog:
  - x86: Enable non-temporal memset for Hygon processors
  - x86: Add `Avoid_STOSB` tunable to allow NT memset without ERMS
  - x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
  - x86: Disable non-temporal memset on Skylake Server
  - x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
  - x86: Enable non-temporal memset tunable for AMD
  - x86: Add seperate non-temporal tunable for memset
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86: Add cache information support for Hygon processors
  - x86: Add new architecture type for Hygon processors


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-57
changelog:
  - math: Improve layout of exp/exp10 data
  - AArch64: Use prefer_sve_ifuncs for SVE memset
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - assert: Add test for CVE-2025-0395


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-58
changelog:
  - x86_64: Fix typo in ifunc-impl-list.c.
  - elf: Test case for bug 32976 (CVE-2025-4802)
  - support: Add support_record_failure_barrier
  - support: Use const char * argument in support_capture_subprogram_self_sgid
  - elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


