# changelog

author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-73.0.0.66
changelog:
  - riscv kernel upgrade to 6.6.0-73.0.0
  - Backport RISC-V AIA driver from mainline linux
  - Fix kernel-mode FPU support on riscv
  - Add cache info for SG2042 dts


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-75.0.0.67
changelog:
  - !14904  net: renesas: rswitch: avoid use-after-put for a device tree node
  - net: renesas: rswitch: avoid use-after-put for a device tree node
  - !14898  Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - !14741  io_uring: check for overflows in io_pin_pages
  - io_uring: check for overflows in io_pin_pages
  - !14863  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14882  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14879  CVE-2024-57872
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
  - scsi: ufs: Convert all platform drivers to return void
  - !14880  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - !14873 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Patches
  - mm/damon/core: copy nr_accesses when splitting region
  - mm/damon/core: handle zero schemes apply interval
  - mm/damon/core: check apply interval in damon_do_apply_schemes()
  - mm: refactor map_deny_write_exec()
  - mm: unconditionally close VMAs on error
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  - mptcp: pm: use _rcu variant under rcu_read_lock
  - mptcp: hold pm lock when deleting entry
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
  - lib/buildid: Fix build ID parsing logic
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
  - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
  - mm/damon/core: implement scheme-specific apply interval
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
  - nouveau: fw: sync dma after setup is called.
  - drm/bridge: tc358768: Fix DSI command tx
  - mmc: sunxi-mmc: Fix A100 compatible description
  - LoongArch: Make KASAN work with 5-level page-tables
  - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
  - nommu: pass NULL argument to vma_iter_prealloc()
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
  - KVM: x86: Unconditionally set irr_pending when updating APICv state
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
  - tools/mm: fix compile error
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
  - bonding: add ns target multicast address to slave device
  - net: ti: icssg-prueth: Fix 1 PPS sync
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt()
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt()
  - net: Make copy_safe_from_sockptr() match documentation
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
  - samples: pktgen: correct dev to DEV
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes.
  - net/sched: cls_u32: replace int refcounts with proper refcounts
  - Bluetooth: btintel: Direct exception event to bluetooth stack
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
  - Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
  - virtio/vsock: Fix accept_queue memory leak
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  - net/mlx5e: clear xdp features on non-uplink representors
  - net/mlx5e: kTLS, Fix incorrect page refcounting
  - net/mlx5: fs, lock FTE when checking if active
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  - mptcp: error out earlier on disconnect
  - net: vertexcom: mse102x: Fix tx_bytes calculation
  - sctp: fix possible UAF in sctp_v6_available()
  - netlink: terminate outstanding dump on socket close
  - !14856  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - !14861  drm/sti: avoid potential dereference of error pointers
  - drm/sti: avoid potential dereference of error pointers
  - !14846  net: stmmac: fix TSO DMA API usage causing oops
  - net: stmmac: fix TSO DMA API usage causing oops
  - !14789  erofs: handle NONHEAD !delta[1
  - erofs: handle NONHEAD !delta[1] lclusters gracefully
  - !14848  LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - !14840 [OLK-6.6][bugfix]Hygon: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - x86/config: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - !14690 Improve the tmpfs large folio read performance
  - mm: shmem: fallback to page size splice if large folio has poisoned pages
  - mm: shmem: improve the tmpfs large folio read performance
  - mm: shmem: update iocb->ki_pos directly to simplify tmpfs read logic
  - !14466  bpf: Call free_htab_elem() after htab_unlock_bucket()
  - bpf: Call free_htab_elem() after htab_unlock_bucket()
  - !14818  olk-6.6
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - !14738  LoongArch: fix some dwmac/pci/SE/i2c/interrupt issues
  - LoongArch: adjust the calc method of number of packages.
  - LoongArch: eiointc: fix ext irq route error
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: fix i2c related issues
  - net: stmmac: dwmac-loongson: fix Mac DMA reset
  - pci/quirks: LS7A2000: fix pm transition of devices under pcie port
  - !14573  RDMA/rxe: Fix the qp flush warnings in req
  - RDMA/rxe: Fix the qp flush warnings in req
  - !14574  ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - !14035  Backport fs optimizing patch from mainline
  - fs/file.c: conditionally clear full_fds
  - !14828  cgroup/cpuset: remove kernfs active break
  - cgroup/cpuset: remove kernfs active break
  - !14589  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14800  Bluetooth: fix use-after-free in device_for_each_child()
  - Bluetooth: fix use-after-free in device_for_each_child()
  - !14792  jfs: fix shift-out-of-bounds in dbSplit
  - jfs: fix shift-out-of-bounds in dbSplit
  - !14791  scsi: ufs: core: sysfs: Prevent div by zero
  - scsi: ufs: core: sysfs: Prevent div by zero
  - !14787  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14786  x86/xen: don't do PV iret hypercall through hypercall page
  - x86/xen: don't do PV iret hypercall through hypercall page
  - !14785  drm/i915: Fix NULL pointer dereference in capture_engine
  - drm/i915: Fix NULL pointer dereference in capture_engine
  - !14817  olk-6.6
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14784  wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - !14807  btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - !14591  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14587  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14747  net: enetc: Do not configure preemptible TCs if SIs do not support
  - net: enetc: Do not configure preemptible TCs if SIs do not support
  - !14796  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14655  vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - !14656  iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - !14659  firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - !14712  CVE-2024-56654
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  - Bluetooth: ISO: Reassociate a socket with an active BIS
  - !14761  Add Huawei Intelligent Network Card Driver:hibifur
  - Add Huawei Intelligent Network Card Driver:hibifur
  - !14772  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - !14769  svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - !14770  bpf, sockmap: Several fixes to bpf_msg_pop_data
  - bpf, sockmap: Several fixes to bpf_msg_pop_data
  - !14730  sched: Fix bpf cpustats refcount leak
  - sched: Fix bpf cpustats refcount leak
  - !14739  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14731  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - !14759  wifi: ath12k: Skip Rx TID cleanup for self peer
  - wifi: ath12k: Skip Rx TID cleanup for self peer
  - !14757  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14605  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14490  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14489  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14488  ovl: Filter invalid inodes with missing lookup function
  - ovl: Filter invalid inodes with missing lookup function
  - !14486  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14754  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14776  tracing: Prevent bad count for tracing_cpumask_write
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14766  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14765  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - !14764  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14729  KVM: arm64: Don't retire aborted MMIO instruction
  - KVM: arm64: Don't retire aborted MMIO instruction
  - !14763  usb: musb: Fix hardware lockup on first Rx endpoint request
  - usb: musb: Fix hardware lockup on first Rx endpoint request
  - !14762  sched/numa: fix memory leak due to the overwritten vma->numab_state
  - sched/numa: fix memory leak due to the overwritten vma->numab_state
  - !14749  net/mlx5: DR, prevent potential error pointer dereference
  - net/mlx5: DR, prevent potential error pointer dereference
  - !14746  nvme-pci: fix freeing of the HMB descriptor table
  - nvme-pci: fix freeing of the HMB descriptor table
  - !14722  Bluetooth: MGMT: Fix possible deadlocks
  - Bluetooth: MGMT: Fix possible deadlocks
  - !14670  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14608  scsi: qla2xxx: Fix use after free on unload
  - scsi: qla2xxx: Fix use after free on unload
  - !14724  etmem: fix use-after-free of mm in the scan release process
  - etmem: fix use-after-free of mm in the scan release process
  - !14384  virtiofs: use pages instead of pointer for kernel direct IO
  - virtiofs: use pages instead of pointer for kernel direct IO
  - !14673  ALSA: 6fire: Release resources at card release
  - ALSA: 6fire: Release resources at card release
  - !14666  Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - !14634  backport mainline bugfix patch
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - !14611  merge mainline patches into OLK-6.6
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  - mm/mglru: reset page lru tier bits when activating
  - tmpfs: don't enable large folios if not supported
  - mm: migrate: annotate data-race in migrate_folio_unmap()
  - mm: Kconfig: fixup zsmalloc configuration
  - mm: ignore data-race in __swap_writepage
  - !14602  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - !14720  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14719  rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - !14718  PCI: Fix reset_method_store() memory leak
  - PCI: Fix reset_method_store() memory leak
  - !14455  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14542  net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - !14531  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14528  drm/amdgpu: set the right AMDGPU sg segment limitation
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14525  CVE-2024-56609
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
  - !14667  sched: fix warning in sched_setaffinity
  - sched: fix warning in sched_setaffinity
  - !14412 [OLK-6.6]Workaround ARM PMUs cpu maps having offline cpus
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - !14698  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - !14694  arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - !14677  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14569  PCI: Fix use-after-free of slot->bus on hot remove
  - PCI: Fix use-after-free of slot->bus on hot remove
  - !14568  wifi: ath12k: fix warning when unbinding
  - wifi: ath12k: fix warning when unbinding
  - !14424  octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - !14714  Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - !14715  media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: Add check for rgby_data memory allocation failure
  - !14699  CVE-2024-53158
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14710  CVE-2024-56546
  - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
  - !14507  sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - !14511  netfilter: nft_inner: incorrect percpu area handling under softirq
  - netfilter: nft_inner: incorrect percpu area handling under softirq
  - !14472  jfs: fix array-index-out-of-bounds in jfs_readdir
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14664 v2  CVE-2024-53224
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - IB/mlx5: Allocate resources just before first QP/SRQ is created


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-76.0.0.69
changelog:
  - !14997  wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - !14941  CVE-2024-57906
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - !14990  mainline patches
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
  - !14993  arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - !14952  drm/mediatek: Set private->all_drm_private[i
  - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
  - !14835 v2  media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - !14994  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14893  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14876  *** jffs2: Prevent rtime decompress memory corruption ***
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption
  - !14833  btrfs: check folio mapping after unlock in relocate_one_folio()
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - !14588  smb: Initialize cfid->tcon before performing network ops
  - smb: Initialize cfid->tcon before performing network ops
  - !14977  PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - !14984  vsock/bpf: return early if transport is not assigned
  - vsock/bpf: return early if transport is not assigned
  - !14976  x86/fpu: Ensure shadow stack is active before "getting" registers
  - x86/fpu: Ensure shadow stack is active before "getting" registers
  - !14682  CVE-2024-56701
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - !14780  CVE-2024-56677
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
  - !14681  CVE-2024-56567
  - ad7780: fix division by zero in ad7780_write_raw()
  - !14981  nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - !14916  CVE-2024-56641
  - net/smc: initialize close_work early to avoid warning
  - net/smc: refactoring initialization of smc sock
  - !14914  bnxt_en: Fix receive ring space parameters when XDP is active
  - bnxt_en: Fix receive ring space parameters when XDP is active
  - !14915  net/smc: protect link down work from execute after lgr freed
  - net/smc: protect link down work from execute after lgr freed
  - !14913  xsk: fix OOB map writes when deleting elements
  - xsk: fix OOB map writes when deleting elements
  - !14911  net/smc: fix LGR and link use-after-free issue
  - net/smc: fix LGR and link use-after-free issue
  - !14912  net: fix data-races around sk->sk_forward_alloc
  - net: fix data-races around sk->sk_forward_alloc
  - !14907  ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - !14908  net: dsa: improve shutdown sequence
  - net: dsa: improve shutdown sequence
  - !14877  sched: qos sched support online task to preempt offline task
  - sched: qos sched support online task to preempt offline task
  - !14974  BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14973 v2  fix CVE-2024-54193
  - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  - accel/ivpu: Move set autosuspend delay to HW specific code
  - !14901  Fix CVE-2024-47794
  - bpf: Fix kabi breakage in struct bpf_prog_aux
  - selftests/bpf: Add test to verify tailcall and freplace restrictions
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map
  - bpf: Prevent tailcall infinite loop caused by freplace
  - !14874  bpf: Check size for BTF-based ctx access of pointer members
  - bpf: Check size for BTF-based ctx access of pointer members
  - !14847  bpf: put bpf_link's program when link is safe to be deallocated
  - bpf: put bpf_link's program when link is safe to be deallocated
  - !14945  btrfs: avoid NULL pointer dereference if no valid extent tree
  - btrfs: avoid NULL pointer dereference if no valid extent tree
  - !14823 mm：some shmem bugfix
  - mm: shmem: fix ShmemHugePages at swapout
  - mm: shmem: extend shmem_unused_huge_shrink() to all sizes
  - mm: shmem: fix minor off-by-one in shrinkable calculation
  - docs: mm: fix the incorrect 'FileHugeMapped' field
  - mm: shmem: fix the update of 'shmem_falloc->nr_unswapped'
  - mm: shmem: fix incorrect index alignment for within_size policy
  - !14970  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - !14969  topology: Keep the cpumask unchanged when printing cpumap
  - topology: Keep the cpumask unchanged when printing cpumap
  - !14935  Two CVE fixes for ksmbd
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !14930  tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - !14931  bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - !14953  mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - !14767 mm: shmem: control THP support through the kernel command line
  - mm: shmem: remove __shmem_huge_global_enabled()
  - mm: shmem: override mTHP shmem default with a kernel parameter
  - mm: move ``get_order_from_str()`` to internal.h
  - mm: shmem: control THP support through the kernel command line
  - !14962  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - !14944  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - !14946  swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single()
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
  - !14897  perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - !14920  iio: light: vcnl4035: fix information leak in triggered buffer
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14964 v2  fix BUG: unable to handle kernel paging request in build_id_parse
  - lib/buildid: Handle memfd_secret() files in build_id_parse()
  - mm: merge folio_is_secretmem() and folio_fast_pin_allowed() into gup_fast_folio_allowed()
  - !14951  Mainline patch to olk-6.6
  - RDMA/hns: Fix UAF for cq async event
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14925  RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - !14884  um: Fix potential integer overflow during physmem setup
  - um: Fix potential integer overflow during physmem setup
  - !14886  Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - !14889  clk: ralink: mtmips: clock fixes for Ralink SoCs
  - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
  - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
  - !14888  usb: dwc3: gadget: Fix looping of queued SG entries
  - usb: dwc3: gadget: Fix looping of queued SG entries
  - !14924  soc: imx8m: Probe the SoC driver as platform driver
  - soc: imx8m: Probe the SoC driver as platform driver
  - !14813  drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
  - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-77.0.0.70
changelog:
  - !15062  gpio: xilinx: Convert gpio_lock to raw spinlock
  - gpio: xilinx: Convert gpio_lock to raw spinlock
  - !15060  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - !15052 [OLK-6.6] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - !15048 net: hns3: add sync command to sync io-pgtable
  - net: hns3: add sync command to sync io-pgtable
  - Revert "net: hns3: add sync command to sync io-pgtable"
  - net: hns3: fix oops when unload drivers paralleling
  - !15031  nbd: don't allow reconnect after disconnect
  - nbd: don't allow reconnect after disconnect
  - !15002  riscv: Fix sleeping in invalid context in die()
  - riscv: Fix sleeping in invalid context in die()
  - !14989  ksmbd: fix a missing return value check bug
  - ksmbd: fix a missing return value check bug
  - !15027  pinmux: Use sequential access to access desc->pinmux data
  - pinmux: Use sequential access to access desc->pinmux data
  - !14321 [OLK-6.6] rcu: Provide a boot time parameter to control lazy RCU
  - rcu: Provide a boot time parameter to control lazy RCU
  - rcu/tree: Remove superfluous return from void call_rcu* functions
  - !14900  LeapIOraid: update leapioraid driver version
  - LeapIOraid: update leapioraid driver version
  - !14325  LeapIOraid: Fix hiding ugood disk problem
  - LeapIOraid: Fix hiding ugood disk problem
  - !15016  spi: mpc52xx: Add cancel_work_sync before module remove
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - !15041  gve: guard XDP xmit NDO on existence of xdp queues
  - gve: guard XDP xmit NDO on existence of xdp queues
  - !15040  gve: guard XSK operations on the existence of queues
  - gve: guard XSK operations on the existence of queues
  - !15039  mptcp: fix TCP options overflow.
  - mptcp: fix TCP options overflow.
  - !15038  net: fix memory leak in tcp_conn_request()
  - net: fix memory leak in tcp_conn_request()
  - !15037  net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - !15036  net/smc: check return value of sock_recvmsg when draining clc data
  - net/smc: check return value of sock_recvmsg when draining clc data
  - !15025  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15019  platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - !15020  drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - !14979  igb: Fix potential invalid memory access in igb_init_module()
  - igb: Fix potential invalid memory access in igb_init_module()
  - !14963  exfat: fix the infinite loop in exfat_readdir()
  - exfat: fix the infinite loop in exfat_readdir()
  - !14988  net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - !14987  workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - !14985  i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - !14892  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15013 v2  nilfs2: prevent use of deleted inode
  - nilfs2: prevent use of deleted inode
  - !14845  merge HULK-6.6 patches into OLK-6.6
  - mm: refactor map_deny_write_exec()
  - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
  - nommu: pass NULL argument to vma_iter_prealloc()
  - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - ionic: Fix netdev notifier unregister on failure
  - !15018  misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - !15009  i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - !15008  nvme-rdma: unquiesce admin_q before destroy it
  - nvme-rdma: unquiesce admin_q before destroy it


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-78.0.0.71
changelog:
  - !15076 [olk 6.6] backport some feature patches for hibmcge driver
  - net: hibmcge: Add nway_reset supported in this module
  - net: hibmcge: Add reset supported in this module
  - net: hibmcge: Add pauseparam supported in this module
  - net: hibmcge: Add register dump supported in this module
  - net: hibmcge: Add unicast frame filter supported in this module
  - net: hibmcge: Add irq_info file to debugfs
  - net: hibmcge: Add debugfs supported in this module
  - lib/string_choices: Add str_true_false()/str_false_true() helper
  - !15109  net: Fix icmp host relookup triggering ip_rt_bug
  - net: Fix icmp host relookup triggering ip_rt_bug
  - !15105  ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - !15106  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15101  net/mlx5e: Don't call cleanup on profile rollback failure
  - net/mlx5e: Don't call cleanup on profile rollback failure
  - !15103  ethtool: fail closed if we can't get max channel used in indirection tables
  - ethtool: fail closed if we can't get max channel used in indirection tables
  - !15102 v2  net: Fix CVE-2024-56658
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - !15107  netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - !15110  net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - !15111  net: wwan: t7xx: Fix FSM command timeout issue
  - net: wwan: t7xx: Fix FSM command timeout issue
  - !15112  net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - !15113  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15119  mm: resolve faulty mmap_region() error path behaviour
  - mm: resolve faulty mmap_region() error path behaviour
  - !15118  iio: adc: at91: call input_free_device() on allocated iio_dev
  - iio: adc: at91: call input_free_device() on allocated iio_dev
  - !15123  mm, madvise: fix potential workingset node list_lru leaks
  - mm, madvise: fix potential workingset node list_lru leaks
  - mm: move mapping_set_update out of <linux/swap.h>
  - !15055  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - !15128  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14972  selinux: ignore unknown extended permissions
  - selinux: ignore unknown extended permissions
  - !15121  KVM: arm64: Get rid of userspace_irqchip_in_use
  - KVM: arm64: Get rid of userspace_irqchip_in_use
  - !13446 [OLK-6.6]crypto: montage - fix variable 'device_handle' is uninitialized warning for Mont-TSSE driver
  - crypto: montage - fix variable 'device_handle' is unintialized warning for Mont-TSSE driver
  - !15133 Upgrade Hygon HCT driver to version 0.6
  - hct: remove the unused variables from hct shared structure.
  - hct: add write support for node use of MDEV devices.
  - hct: fix vm_start issue caused by pre allocated vma changes.
  - hct: compatible with hct.ko modules in versions 0.5 and earlier.
  - hct: update pasid type from int to long.
  - hct: sharing CCP resources between host and virtual machines.
  - hct: adding node to identifies hct mdev device usage status.
  - !15083  mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - !15080 [OLK-6.6] crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - !15078 [OLK-6.6] crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - !15068 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Patches
  - i3c: master: svc: fix possible assignment of the same address to two devices
  - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
  - serial: amba-pl011: fix build regression
  - platform/x86: asus-wmi: Fix thermal profile initialization
  - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
  - usb: dwc3: ep0: Don't reset resource alloc flag
  - drm/amdgpu: rework resume handling for display (v2)
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
  - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
  - btrfs: add cancellation points to trim loops
  - iio: invensense: fix multiple odr switch when FIFO is off
  - xhci: dbc: Fix STALL transfer event handling
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
  - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from kvm_faultin_pfn()
  - vfio/mlx5: Align the page tracking max message size with the device capability
  - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
  - clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation
  - setlocalversion: work around "git describe" performance
  - smb: client: don't try following DFS links in cifs_tree_connect()
  - serial: 8250_dw: Add Sophgo SG2044 quirk
  - rtc: cmos: avoid taking rtc_lock for extended period of time
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
  - powerpc/prom_init: Fixup missing powermac #size-cells
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
  - ASoC: amd: yc: fix internal mic on Redmi G 2022
  - iio: light: ltr501: Add LTER0303 to the supported devices
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
  - fs/ntfs3: Fix case when unmarked clusters intersect with zone
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
  - f2fs: fix to shrink read extent node in batches
  - f2fs: print message if fscorrupted was found in f2fs_new_node_page()
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
  - PCI: Detect and trust built-in Thunderbolt chips
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
  - PCI: qcom: Add support for IPQ9574
  - KMSAN: uninit-value in inode_go_dump (5)
  - verification/dot2: Improve dot parser robustness
  - smb: client: memcpy() with surrounding object base address
  - nvdimm: rectify the illogical code within nd_dax_probe()
  - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
  - pinctrl: qcom: spmi-mpp: Add PM8937 compatible
  - pinctrl: qcom-pmic-gpio: add support for PM8937
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
  - scsi: st: Don't modify unknown block number in MTIOCGET
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  - clk: qcom: tcsrcc-sm8550: add SAR2130P support
  - clk: qcom: rpmh: add support for SAR2130P
  - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
  - scsi: ufs: core: Make DMA mask configuration more flexible
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr
  - tracing: Use atomic64_inc_return() in trace_clock_counter()
  - tracing/ftrace: disable preemption in syscall probe
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
  - netpoll: Use rcu_access_pointer() in __netpoll_setup
  - net/neighbor: clear error in case strict check is not set
  - rocker: fix link status detection in rocker_carrier_init()
  - ASoC: hdmi-codec: reorder channel allocation list
  - Bluetooth: Set quirks for ATS2851
  - Bluetooth: Support new quirks for ATS2851
  - Bluetooth: Add new quirks for ATS2851
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
  - dsa: qca8k: Use nested lock to avoid splat
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
  - ALSA: usb-audio: Make mic volume workarounds globally applicable
  - virtio-net: fix overflow inside virtnet_rq_alloc
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
  - fsl/fman: Validate cell-index value obtained from Device Tree
  - dma-debug: fix a possible deadlock on radix_lock
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
  - netlink: specs: Add missing bitset attrs to ethtool spec
  - drm/amdgpu: Dereference the ATCS ACPI buffer
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
  - drm/sched: memset() 'job' in drm_sched_job_init()
  - net: stmmac: Programming sequence for VLAN packets with split header
  - net: sfp: change quirks for Alcatel Lucent G-010S-P
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
  - fanotify: allow reporting errors on failure to open fd
  - wifi: ath5k: add PCI ID for Arcadyan devices
  - wifi: ath5k: add PCI ID for SX76X
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - net: af_can: do not leave a dangling sk pointer in can_create()
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
  - net: ethernet: fs_enet: Use %pa to format resource_size_t
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
  - samples/bpf: Fix a resource leak
  - r8169: don't apply UDP padding quirk on RTL8126A
  - drm/display: Fix building with GCC 15
  - dlm: fix possible lkb_resource null dereference
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
  - drm/mcde: Enable module autoloading
  - drm/bridge: it6505: Enable module autoloading
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
  - drm/vc4: hvs: Set AXI panic modes for the HVS
  - drm/vc4: hdmi: Avoid log spam for audio start failure
  - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
  - selftests/resctrl: Protect against array overflow when reading strings
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
  - mmc: core: Add SD card quirk for broken poweroff notification
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
  - media: uvcvideo: RealSense D421 Depth module metadata
  - HID: add per device quirk to force bind to hid-generic
  - spi: spi-fsl-lpspi: Adjust type of scldiv
  - perf/x86/amd: Warn only on new bits set
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
  - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
  - btrfs: do not clear read-only when adding sprout device
  - btrfs: avoid unnecessary device path update for the same device
  - btrfs: don't take dev_replace rwsem on task already holding it
  - kselftest/arm64: Log fp-stress child startup errors to stdout
  - epoll: annotate racy check
  - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
  - kasan: make report_lock a raw spinlock
  - lib: stackinit: hide never-taken branch from compiler
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next
  - mmc: core: Further prevent card detect during shutdown
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
  - regmap: detach regmap from dev on regmap_exit
  - dma-fence: Use kernel's sort for merging fences
  - dma-fence: Fix reference leak on fence merge failure path
  - dma-buf: fix dma_fence_array_signaled v4
  - x86/kexec: Restore GDT on return from ::preserve_context kexec
  - modpost: Add .irqentry.text to OTHER_SECTIONS
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
  - drm/dp_mst: Fix resetting msg rx state after topology removal
  - drm/dp_mst: Verify request type in the corresponding down message reply
  - drm/dp_mst: Fix MST sideband message body length check
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  - smb3.1.1: fix posix mounts to older servers
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
  - fs/smb/client: Implement new SMB3 POSIX type
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
  - scsi: ufs: core: Add missing post notify for power mode change
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue
  - scsi: qla2xxx: Fix abort in bsg timeout
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
  - ALSA: usb-audio: add mixer mapping for Corsair HS80
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
  - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
  - can: dev: can_set_termination(): allow sleeping GPIOs
  - watchdog: rti: of: honor timeout-sec property
  - LoongArch: Add architecture specific huge_pte_clear()
  - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
  - bpf: Fix exact match conditions in trie_get_next_key()
  - iio: magnetometer: yas530: use signed integer type for clamp limits
  - scatterlist: fix incorrect func name in kernel-doc
  - drm/v3d: Enable Performance Counters before clearing them
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
  - scsi: scsi_debug: Fix hrtimer support for ndelay
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai()
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
  - tools: Override makefile ARCH variable if defined, but empty
  - ALSA: usb-audio: Notify xrun for low-latency mode
  - ALSA: seq: ump: Fix seq port updates per FB info notify
  - ALSA: ump: Update substream name from assigned FB names
  - ALSA: seq: ump: Use automatic cleanup of kfree()
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
  - bpftool: fix potential NULL pointer dereferencing in prog_dump()
  - xsk: always clear DMA mapping information when unmapping the pool
  - bpf, vsock: Invoke proto::close on close()
  - bpf, vsock: Fix poll() missing a queue
  - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
  - scsi: ufs: core: Always initialize the UIC done completion
  - drm/bridge: it6505: Fix inverted reset polarity
  - drm/bridge: it6505: update usleep_range for RC circuit charge time
  - i3c: master: Fix dynamic address leak when 'assigned-address' is present
  - i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
  - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
  - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
  - i3c: master: svc: use slow speed for first broadcast address
  - i3c: master: support to adjust first broadcast address speed
  - i3c: master: fix kernel-doc check warning
  - i3c: master: svc: add hot join support
  - i3c: master: add enable(disable) hot join in sys entry
  - f2fs: fix to drop all discards after creating snapshot on lvm device
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
  - driver core: fw_devlink: Improve logs for cycle detection
  - ntp: Remove invalid cast in time offset math
  - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
  - powerpc/vdso: Refactor CFLAGS for CVDSO build
  - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
  - mmc: mtk-sd: fix devm_clk_get_optional usage
  - mmc: mtk-sd: Fix error handle of probe function
  - mmc: mtk-sd: use devm_mmc_alloc_host
  - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
  - usb: dwc3: gadget: Rewrite endpoint allocation flow
  - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
  - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
  - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
  - soc: fsl: cpm1: qmc: Re-order probe() operations
  - soc: fsl: cpm1: qmc: Fix blank line and spaces
  - soc/fsl: cpm: qmc: Convert to platform remove callback returning void
  - serial: amba-pl011: Fix RX stall when DMA is used
  - serial: amba-pl011: Use port lock wrappers
  - xhci: Fix control transfer error on Etron xHCI host
  - xhci: Don't issue Reset Device command to Etron xHCI host
  - xhci: Combine two if statements for Etron xHCI host
  - xhci: remove XHCI_TRUST_TX_LENGTH quirk
  - xhci: Allow RPM on the USB controller (1022:43f7) by default
  - net: avoid potential UAF in default_operstate()
  - net/mlx5e: Remove workaround to avoid syndrome for internal port
  - geneve: do not assume mac header is set in geneve_xmit_skb()
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
  - mlxsw: Mark high entropy key blocks
  - mlxsw: Edit IPv6 key blocks to use one less block for multicast forwarding
  - mlxsw: spectrum_acl_flex_keys: Add 'ipv4_5b' flex key
  - mlxsw: Add 'ipv4_5' flex key
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
  - netfilter: nft_set_hash: skip duplicated elements pending gc run
  - netfilter: ipset: Hold module reference while requesting a module
  - net: sched: fix erspan_opt settings in cls_flower
  - ixgbe: downgrade logging of unsupported VF API version to debug
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
  - net/qed: allow old cards not supporting "num_images" to work
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - dccp: Fix memory leak in dccp_feat_change_recv
  - net/ipv6: release expired exception dst cached in socket
  - ipv6: introduce dst_rt6_info() helper
  - net-timestamp: make sk_tskey more predictable in error path
  - platform/x86: asus-wmi: Ignore return value when writing thermal policy
  - platform/x86: asus-wmi: Fix inconsistent use of thermal policies
  - platform/x86: asus-wmi: add support for vivobook fan profiles
  - can: j1939: j1939_session_new(): fix skb reference counting
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - net/sched: tbf: correct backlog statistic for GSO packets
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
  - selftests: hid: fix typo and exit code
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
  - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
  - can: gs_usb: add usb endpoint address detection at driver probe step
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
  - watchdog: apple: Actually flush writes after requesting watchdog restart
  - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
  - openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
  - Revert "x86/pvh: Set phys_base when calling xen_prepare_pvh()"
  - Revert "x86/pvh: Call C code via the kernel virtual mapping"
  - !15069  fs/proc: fix softlockup in __read_vmcore (part 2)
  - fs/proc: fix softlockup in __read_vmcore (part 2)
  - !15067  irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - !15065  fix CVE-2025-21668
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition
  - !15056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Patches
  - posix-timers: Target group sigqueue to current task only if not exiting
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7
  - drm/amdgpu: fix usage slab after free
  - drm/amdkfd: Use the correct wptr size
  - drm: xlnx: zynqmp_dpsub: fix hotplug detection
  - drm/etnaviv: flush shader L1 cache after user commandstream
  - drm/mediatek: Fix child node refcount handling in early exit
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
  - udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
  - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
  - powerpc: Fix stack protector Kconfig test for clang
  - iio: gts: fix infinite loop for gain_to_scaletables()
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
  - iio: accel: kx022a: Fix raw read format
  - nfsd: make sure exp active before svc_export_show
  - PCI: rockchip-ep: Fix address translation unit programming
  - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
  - dm thin: Add missing destroy_work_on_stack()
  - dm: Fix typo in error message
  - ovl: properly handle large files in ovl_security_fileattr
  - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error paths
  - thermal: int3400: Fix reading of current_uuid for active policy
  - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful iov_iter_zero
  - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
  - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
  - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
  - scsi: ufs: exynos: Fix hibern8 notify callbacks
  - util_macros.h: fix/rework find_closest() macros
  - ceph: extract entity name from device id
  - mm/slub: Avoid list corruption when removing a slab from the full list
  - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
  - ARM: 9430/1: entry: Do a dummy read from VMAP shadow
  - s390/entry: Mark IRQ entries to fix stack depot warnings
  - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
  - leds: lp55xx: Remove redundant test for invalid channel number
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
  - zram: clear IDLE flag after recompression
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
  - maple_tree: refine mas_store_root() on storing NULL
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - media: uvcvideo: Stop stream during unregister
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
  - efi/libstub: Free correct pointer on failure
  - media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available
  - media: ts2020: fix null-ptr-deref in ts2020_probe()
  - media: verisilicon: av1: Fix reference video buffer pointer assignment
  - media: i2c: tc358743: Fix crash in the probe error path when using polling
  - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
  - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: mtk-jpeg: Fix null-ptr-deref during unload module
  - media: amphion: Set video drvdata before register video device
  - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
  - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
  - md/md-bitmap: Add missing destroy_work_on_stack()
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  - btrfs: don't loop for nowait writes when checking for cross references
  - quota: flush quota_release_work upon quota writeback
  - xfs: remove unknown compat feature check in superblock write validation
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
  - cifs: unlock on error in smb3_reconfigure()
  - cifs: during remount, make sure passwords are in sync
  - modpost: remove incorrect code in do_eisa_entry()
  - Rename .data.once to .data..once to fix resetting WARN*_ONCE
  - Rename .data.unlikely to .data..unlikely
  - init/modpost: conditionally check section mismatch to __meminit*
  - modpost: squash ALL_{INIT,EXIT}_TEXT_SECTIONS to ALL_TEXT_SECTIONS
  - modpost: use ALL_INIT_SECTIONS for the section check from DATA_SECTIONS
  - modpost: disallow the combination of EXPORT_SYMBOL and __meminit*
  - modpost: remove EXIT_SECTIONS macro
  - modpost: remove MEM_INIT_SECTIONS macro
  - modpost: disallow *driver to reference .meminit* sections
  - modpost: remove ALL_EXIT_DATA_SECTIONS macro
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session
  - cifs: Fix parsing native symlinks relative to the export
  - smb: client: disable directory caching when dir_cache_timeout is zero
  - perf/arm-cmn: Ensure port and device id bits are set properly
  - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
  - 9p/xen: fix release of IRQ
  - 9p/xen: fix init sequence
  - block: return unsigned int from bdev_io_min
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive
  - nvme-multipath: avoid hang on inaccessible namespaces
  - nvme-multipath: implement "queue-depth" iopolicy
  - nvme-multipath: prepare for "queue-depth" iopolicy
  - rtc: rzn1: fix BCD to rtc_time conversion errors
  - jffs2: fix use of uninitialized variable
  - ubi: fastmap: Fix duplicate slab cache names while attaching
  - ubifs: Correct the total block count by deducting journal reservation
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - rtc: abx80x: Fix WDT bit position of the status register
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
  - um: Always dump trace for specified task in show_stack
  - um: Fix the return value of elf_core_copy_task_fpregs
  - SUNRPC: make sure cache entry active before cache_show
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
  - lib: string_helpers: silence snprintf() output truncation warning
  - ublk: fix error code for unsupported command
  - usb: dwc3: gadget: Fix checking for number of TRBs left
  - smb: During unmount, ensure all cached dir instances drop their dentry
  - smb: prevent use-after-free due to open_cached_dir error paths
  - smb: Don't leak cfid when reconnect races with open_cached_dir
  - smb: client: handle max length for SMB symlinks
  - smb3: request handle caching when caching directories
  - ALSA: hda/realtek: Apply quirk for Medion E15433
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274
  - ALSA: hda/realtek: Update ALC225 depop procedure
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
  - block: fix missing dispatching request when queue is started or unquiesced
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
  - ublk: fix ublk_ch_mmap() for 64K page size
  - iio: gts: Fix uninitialized symbol 'ret'
  - um: vector: Do not use drvdata in release
  - serial: 8250: omap: Move pm_runtime_get_sync
  - serial: 8250_fintek: Add support for F81216E
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property
  - um: net: Do not use drvdata in release
  - um: ubd: Do not use drvdata in release
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - parisc/ftrace: Fix function graph tracing disablement
  - cifs: support mounting with alternate password to allow password rotation
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
  - mtd: spi-nor: core: replace dummy buswidth from addr to data
  - spi: Fix acpi deferred irq probe
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - gpio: exar: set value when external pull-up or pull-down is present
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
  - wifi: brcmfmac: release 'root' node in all execution paths
  - wifi: ath12k: fix crash when unbinding
  - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - Compiler Attributes: disable __counted_by for clang < 19.1.3
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
  - exfat: fix uninit-value in __exfat_get_dentry_set
  - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
  - pinctrl: qcom: spmi: fix debugfs drive strength
  - tools/nolibc: s390: include std.h
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
  - comedi: Flush partial mappings in error case
  - fsnotify: fix sending inotify event with unexpected filename
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
  - perf/x86/intel/pt: Fix buffer full but size is 0 case
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00
  - jfs: xattr: check invalid xattr size more strictly
  - ext4: fix FS_IOC_GETFSMAP handling
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
  - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  - Revert "arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled"
  - btrfs: do not BUG_ON() when freeing tree block after error
  - dm-bufio: fix warnings about duplicate slab caches
  - dm-cache: fix warnings about duplicate slab caches
  - closures: Change BUG_ON() to WARN_ON()
  - usb: ehci-spear: fix call balance of sehci clk handling routines
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - nvme: fix metadata handling in nvme-passthrough
  - mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()
  - f2fs: fix fiemap failure issue when page size is 16KB
  - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
  - apparmor: fix 'Do simple duplicate message elimination'
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
  - drm/radeon: Fix spurious unplug event on radeon HDMI
  - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
  - drm/radeon: add helper rdev_to_drm(rdev)
  - ALSA: hda/realtek: Update ALC256 depop procedure
  - counter: ti-ecap-capture: Add check for clk_enable()
  - counter: stm32-timer-cnt: Add check for clk_enable()
  - misc: apds990x: Fix missing pm_runtime_disable()
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
  - USB: chaoskey: fail open after removal
  - usb: yurex: make waiting on yurex_write interruptible
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
  - iio: light: al3010: Fix an error handling path in al3010_probe()
  - ipmr: fix tables suspicious RCU usage
  - ip6mr: fix tables suspicious RCU usage
  - rxrpc: Improve setsockopt() handling of malformed user input
  - llc: Improve setsockopt() handling of malformed user input
  - bnxt_en: Unregister PTP during PCI shutdown and suspend
  - bnxt_en: Refactor bnxt_ptp_init()
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - net: hsr: fix hsr_init_sk() vs network/transport headers.
  - spi: atmel-quadspi: Fix register name in verbose logging function
  - octeontx2-af: Quiesce traffic before NIX block reset
  - octeontx2-af: RPM: fix stale FCFEC counters
  - octeontx2-af: RPM: fix stale RSFEC counters
  - octeontx2-pf: Reset MAC stats during probe
  - octeontx2-af: RPM: Fix low network performance
  - octeontx2-af: RPM: Fix mismatch in lmac type
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines
  - net: mdio-ipq4019: add missing error check
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
  - net: microchip: vcap: Add typegroup table terminators in kunit tests
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
  - power: supply: rt9471: Use IC status regfield to report real charger status
  - power: supply: rt9471: Fix wrong WDT function regfield declaration
  - power: supply: bq27xxx: Fix registers of bq27426
  - power: supply: core: Remove might_sleep() from power_supply_put()
  - LoongArch: BPF: Sign-extend return values
  - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
  - fs_parser: update mount_api doc to match function signature
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - gpio: zevio: Add missed label initialisation
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration
  - hwmon: (tps23861) Fix reporting of negative temperatures
  - NFSD: Fix nfsd4_shutdown_copy()
  - nfsd: release svc_expkey/svc_export with rcu_work
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
  - remoteproc: qcom: pas: add minidump_id to SM8350 resources
  - perf trace: Avoid garbage when not printing a syscall's arguments
  - perf trace: Do not lose last events in a race
  - perf trace: Fix tracing itself, creating feedback loops
  - perf list: Fix topic and pmu_name argument order
  - m68k: coldfire/device.c: only build FEC when HW macros are defined
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
  - perf trace: avoid garbage when not printing a trace event's arguments
  - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
  - PCI: j721e: Add suspend and resume support
  - PCI: j721e: Use T_PERST_CLK_US macro
  - PCI: j721e: Add reset GPIO to struct j721e_pcie
  - PCI: cadence: Set cdns_pcie_host_init() global
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
  - PCI: j721e: Add PCIe 4x lane selection support
  - PCI: j721e: Add per platform maximum lane settings
  - PCI: Add T_PVPERL macro
  - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID
  - f2fs: check curseg->inited before write_sum_page in change_curseg
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
  - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
  - rust: macros: fix documentation of the paste! macro
  - perf probe: Correct demangled symbols in C++ program
  - perf probe: Fix libdw memory leak
  - f2fs: fix to account dirty data in __get_secs_required()
  - f2fs: compress: fix inconsistent update of i_blocks in release_compress_blocks and reserve_compress_blocks
  - perf test attr: Add back missing topdown events
  - perf trace: Keep exited threads for summary
  - perf stat: Fix affinity memory leaks on error path
  - perf stat: Close cork_fd when create_perf_stat_counter() failed
  - gfs2: Allow immediate GLF_VERIFY_DELETE work
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
  - perf cs-etm: Don't flush when packet_queue fills up
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
  - smb: cached directories can be more than root file handle
  - pinctrl: k210: Undef K210_PC_DEFAULT
  - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
  - dt-bindings: clock: axi-clkgen: include AXI clk
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - powerpc/kexec: Fix return of uninitialized variable
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
  - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells
  - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
  - dax: delete a stale directory pmem
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
  - x86/tdx: Introduce wrappers to read and write TD metadata
  - x86/tdx: Pass TDCALL/SEAMCALL input/output registers via a structure
  - x86/tdx: Rename __tdx_module_call() to __tdcall()
  - x86/tdx: Make macros of TDCALLs consistent with the spec
  - x86/tdx: Skip saving output regs when SEAMCALL fails with VMFailInvalid
  - scsi: fusion: Remove unused variable 'rc'
  - fs/proc/kcore.c: fix coccinelle reported ERROR instances
  - mfd: rt5033: Fix missing regmap_del_irq_chip()
  - checkpatch: always parse orig_commit in fixes tag
  - checkpatch: check for missing Fixes tags
  - iommu/vt-d: Fix checks and print in pgtable_walk()
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
  - clk: imx: imx8-acm: Fix return value check in clk_imx_acm_attach_pm_domains()
  - clk: imx: clk-scu: fix clk enable state save and restore
  - clk: imx: fracn-gppll: fix pll power up
  - clk: imx: fracn-gppll: correct PLL initialization flow
  - clk: imx: lpcg-scu: SW workaround for errata (e10858)
  - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
  - RDMA/rxe: Set queue pair cur_qp_state when being queried
  - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
  - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
  - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in RD_ANY_REG_OP
  - powerpc/mm/fault: Fix kfence page fault reporting
  - mtd: rawnand: atmel: Fix possible memory leak
  - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
  - mtd: hyperbus: rpc-if: Convert to platform remove callback returning void
  - cpufreq: loongson2: Unregister platform_driver on failure
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  - mfd: da9052-spi: Change read-mask to write-mask
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
  - powerpc/vdso: Flag VDSO64 entry points as functions
  - pinctrl: zynqmp: drop excess struct member description
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event
  - clk: mediatek: drop two dead config options
  - unicode: Fix utf8_load() error path
  - bpf: fix recursive lock when verdict program return SK_PASS
  - wireguard: selftests: load nf_conntrack if not present
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
  - net: rfkill: gpio: Add check for clk_enable()
  - bpf: Force uprobe bpf program to always return 0
  - drm/amdkfd: Fix wrong usage of INIT_WORK()
  - selftests: net: really check for bg process completion
  - ipv6: release nexthop on device removal
  - net: use unrcu_pointer() helper
  - sock_diag: allow concurrent operation in sock_diag_rcv_msg()
  - sock_diag: allow concurrent operations
  - sock_diag: add module pointer to "struct sock_diag_handler"
  - bpf, sockmap: Fix sk_msg_reset_curr
  - bpf, sockmap: Several fixes to bpf_msg_push_data
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
  - netlink: typographical error in nlmsg_type constants definition
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list
  - netfilter: nf_tables: skip transaction if update object is not implemented
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list
  - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
  - netfilter: nf_tables: Introduce nf_tables_getrule_single()
  - netfilter: nf_tables: Open-code audit log call in nf_tables_getrule()
  - drm: use ATOMIC64_INIT() for atomic64_t
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
  - bpf, bpftool: Fix incorrect disasm pc
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
  - wifi: wfx: Fix error handling in wfx_core_init()
  - drm/etnaviv: hold GPU lock across perfmon sampling
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
  - drm/msm/gpu: Check the status of registration to PM QoS
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
  - bpf, arm64: Remove garbage frame for struct_ops trampoline
  - drm/panfrost: Remove unused id_mask from struct panfrost_model
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
  - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
  - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
  - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
  - drm: fsl-dcu: enable PIXCLK on LS1021A
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
  - selftests/bpf: Fix msg_verify_data in test_sockmap
  - drm/bridge: tc358767: Fix link properties discovery
  - netdevsim: copy addresses for both in and out paths
  - libbpf: never interpret subprogs in .text as entry programs
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
  - libbpf: fix sym_is_subprog() logic for weak global subprogs
  - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
  - ice: Support FCS/CRC strip disable for VF
  - virtchnl: Add CRC stripping capability
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
  - bpf: Fix the xdp_adjust_tail sample prog issue
  - libbpf: Fix expected_attach_type set handling in program load callback
  - drm/bridge: it6505: Drop EDID cache on bridge power off
  - drm/bridge: anx7625: Drop EDID cache on bridge power off
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
  - ASoC: fsl_micfil: fix regmap_write_bits usage
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
  - drm/v3d: Address race-condition in MMU flush
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/omap: Fix locking in omap_gem_new_dmabuf()
  - drm/omap: Fix possible NULL dereference
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - drm/vc4: hvs: Correct logic on stopping an HVS channel
  - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
  - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
  - drm/vc4: hvs: Don't write gamma luts on 2711
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
  - platform/x86: panasonic-laptop: Return errno correctly in show callback
  - HID: hyperv: streamline driver probe to avoid devres issues
  - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
  - selftests/resctrl: Protect against array overrun during iMC config parsing
  - selftests/resctrl: Fix memory overflow due to unhandled wraparound
  - selftests/resctrl: Refactor fill_buf functions
  - selftests/resctrl: Split fill_buf to allow tests finer-grained control
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
  - arm64: dts: mediatek: mt6358: fix dtbs_check error
  - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
  - arm64: dts: renesas: hihope: Drop #sound-dai-cells
  - regmap: irq: Set lockdep class for hierarchical IRQ domains
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
  - spi: tegra210-quad: Avoid shift-out-of-bounds
  - pmdomain: ti-sci: Add missing of_node_put() for args.np
  - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
  - x86/of: Unconditionally call unflatten_and_copy_device_tree()
  - um: Unconditionally call unflatten_device_tree()
  - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
  - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
  - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
  - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
  - tpm: fix signed/unsigned bug when checking event logs
  - efi/libstub: fix efi_parse_options() ignoring the default command line
  - openrisc: Implement fixmap to fix earlycon
  - mmc: mmc_spi: drop buggy snprintf()
  - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
  - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
  - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
  - arm64: dts: mt8195: Fix dtbs_check error for mutex node
  - microblaze: Export xmb_manager functions
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
  - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
  - clocksource/drivers:sp804: Make user selectable
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
  - kcsan, seqlock: Support seqcount_latch_t
  - time: Fix references to _msecs_to_jiffies() handling of values
  - time: Partially revert cleanup on msecs_to_jiffies() documentation
  - x86/unwind/orc: Fix unwind for newly forked tasks
  - thermal/lib: Fix memory leak on error in thermal_genl_auto()
  - tools/lib/thermal: Make more generic the command encoding function
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
  - crypto: caam - add error check to caam_rsa_set_priv_key_form
  - hwmon: (pmbus/core) clear faults after setting smbalert mask
  - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
  - doc: rcu: update printed dynticks counter bits
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
  - crypto: cavium - Fix the if condition to exit loop after timeout
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/fsl_ddr: Fix bad bit shift operations
  - thermal: core: Initialize thermal zones before registering them
  - crypto: qat - remove faulty arbiter config reset
  - firmware: google: Unregister driver_info on failure
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
  - crypto: qat - remove check after debugfs_create_dir()
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - virtio_blk: reverse request order in virtio_queue_rqs
  - nvme-pci: reverse request order in nvme_queue_rqs
  - ext4: remove calls to to set/clear the folio error flag
  - s390/syscalls: Avoid creation of arch/arch/ directory
  - block: fix bio_split_rw_at to take zone_write_granularity into account
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
  - m68k: mvme147: Reinstate early console
  - m68k: mvme16x: Add and use "mvme16x.h"
  - m68k: mvme147: Fix SCSI controller IRQ numbers
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
  - x86/pvh: Call C code via the kernel virtual mapping
  - x86/pvh: Set phys_base when calling xen_prepare_pvh()
  - s390/pageattr: Implement missing kernel_page_present()
  - s390/cio: Do not unregister the subchannel based on DNV
  - kselftest/arm64: mte: fix printf type warnings about longs
  - kselftest/arm64: mte: fix printf type warnings about __u64
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
  - x86/stackprotector: Work around strict Clang TLS symbol requirements
  - ipmr: Fix access to mfc_cache_list without lock held
  - ARM: 9420/1: smp: Fix SMP for xip kernels
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
  - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
  - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
  - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
  - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
  - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed
  - can: j1939: fix error in J1939 documentation.
  - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
  - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
  - platform/x86: dell-smbios-base: Extends support to Alienware products
  - regulator: rk808: Add apply_bit for BUCK3 on RK809
  - firmware: arm_scmi: Reject clear channel request on A2P
  - soc: qcom: Add check devm_kasprintf() returned value
  - net: usb: qmi_wwan: add Quectel RG650V
  - bpf: fix filed access without lock
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
  - usb: typec: use cleanup facility for 'altmodes_node'
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
  - mac80211: fix user-power when emulating chanctx
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
  - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-79.0.0.72
changelog:
  - !15203  usb: cdc-acm: Check control transfer buffer size before access
  - usb: cdc-acm: Check control transfer buffer size before access
  - !15214  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - !15178 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Conflicts Patches
  - perf time-utils: Fix 32-bit nsec parsing
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
  - perf stat: Display iostat headers correctly
  - perf sched timehist: Fix missing free of session in perf_sched__timehist()
  - perf report: Fix --total-cycles --stdio output error
  - perf ui/browser/annotate: Use global annotation_options
  - perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
  - perf annotate: Split branch stack cycles info from 'struct annotation'
  - perf inject: Fix leader sampling inserting additional samples
  - perf mem: Free the allocated sort string, fixing a leak
  - !14179 [OLK-6.6] update ITMT support patch for Zhaoxin CPUs
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - Revert "cpufreq: ACPI: add ITMT support when CPPC enabled"
  - !15200  arm64/mpam: Try reading again if monitor instance returns not ready
  - arm64/mpam: Try reading again if monitor instance returns not ready
  - !15197 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Patches
  - block: avoid to reuse `hctx` not removed from cpuhp callback list
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
  - ALSA: sh: Fix wrong argument order for copy_from_iter()
  - btrfs: sysfs: fix direct super block member reads
  - btrfs: avoid monopolizing a core when activating a swap file
  - power: supply: gpio-charger: Fix set charge current limits
  - drm/amdkfd: pause autosuspend when creating pdd
  - drm/amdkfd: Use device based logging for errors
  - drm/amdkfd: drop struct kfd_cu_info
  - drm/amdkfd: reduce stack size in kfd_topology_add_device()
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
  - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
  - pmdomain: core: Add missing put_device()
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
  - MIPS: mipsregs: Set proper ISA level for virt extensions
  - MIPS: Probe toolchain support of -msym32
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock
  - blk-mq: register cpuhp callback after hctx is added to xarray table
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - spi: intel: Add Panther Lake SPI controller support
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
  - LoongArch: BPF: Adjust the parameter of emit_jirl()
  - LoongArch: Fix reserving screen info memory for above-4G firmware
  - regmap: Use correct format specifier for logging range errors
  - smb: server: Fix building with GCC 15
  - ALSA: sh: Use standard helper for buffer accesses
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue
  - udf: Skip parent dir link count update if corrupted
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
  - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
  - stddef: make __struct_group() UAPI C++-friendly
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - mtd: rawnand: fix double free in atmel_pmecc_create_user()
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  - dmaengine: apple-admac: Avoid accessing registers in probe
  - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
  - dmaengine: tegra: Return correct DMA status when paused
  - dmaengine: dw: Select only supported masters for ACPI devices
  - dmaengine: mv_xor: fix child node refcount handling in early exit
  - phy: rockchip: naneng-combphy: fix phy reset
  - phy: usb: Toggle the PHY power during init
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
  - phy: core: Fix that API devm_phy_put() fails to release the phy
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
  - phy: core: Fix an OF node refcount leakage in _of_phy_get()
  - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
  - mtd: rawnand: arasan: Fix missing de-registration of NAND
  - mtd: rawnand: arasan: Fix double assertion of chip-select
  - mtd: diskonchip: Cast an operand to prevent potential overflow
  - nfsd: restore callback functionality for NFSv4.0
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - bpf: Check negative offsets in __bpf_skb_min_len()
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
  - mm/vmstat: fix a W=1 clang compiler warning
  - ceph: allocate sparse_ext map only for sparse reads
  - ceph: fix memory leak in ceph_direct_read_write()
  - ceph: try to allocate a smaller extent map for sparse read
  - !15190 v2  fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - arm64/mpam: Add write memory barrier to guarantee monitor results
  - arm64/mpam: Improve conversion accuracy between percent and fixed-point fraction
  - arm64/mpam: Fix out-of-bound access of cfg array
  - arm64/mpam: fix bug in percent_to_mbw_max()
  - arm64/mpam: fix MBA granularity conversion formula
  - arm64/mpam: Fix out-of-bound access of mbwu_state array
  - arm64/mpam: Add judgment to distinguish MSMON_MBWU_CAPTURE definition
  - arm64/mpam: Support MATA monitor feature for MPAM
  - fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - !15192  scsi: megaraid_sas: Fix for a potential deadlock
  - scsi: megaraid_sas: Fix for a potential deadlock
  - !15191  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - !15170  The QoS feature adapts to the cfs bandwidth throttling
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - sched/qos: Fix qos throttling in SMT expelled
  - hungtask: fixed offline group hung task issue under high load scenarios
  - !15176  virtio-blk: don't keep queue frozen during system suspend
  - virtio-blk: don't keep queue frozen during system suspend
  - !15175  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - !15167  Backport tracing fix patch
  - trace: Fix kabi breakage for trace_event_fields
  - tracing: Check "%s" dereference via the field and not the TP_printk format
  - !15181  kobject: Fix global-out-of-bounds in kobject_action_type()
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !15184  binfmt_flat: Fix integer overflow bug on 32 bit systems
  - binfmt_flat: Fix integer overflow bug on 32 bit systems
  - !15161 Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - !15166  tracing: Have process_string() also allow arrays
  - tracing: Have process_string() also allow arrays
  - !14939 Fix  the performance monitor  relates to core for Hygon family 18h processor
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - !15159  mm/thp: fix deferred split unqueue naming and locking
  - mm/thp: fix deferred split unqueue naming and locking
  - !15142 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.66-6.6.68 LTS Patches
  - dt-bindings: net: fec: add pps channel property
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
  - net: fec: make PPS channel configurable
  - net: fec: refactor PPS channel configuration
  - io_uring/rw: avoid punting to io-wq directly
  - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  - io_uring/rw: split io_read() into a helper
  - epoll: Add synchronous wakeup support for ep_poll_callback
  - ceph: fix memory leaks in __ceph_sync_read()
  - ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
  - ceph: validate snapdirname option length when mounting
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
  - of: Fix error path in of_parse_phandle_with_args_map()
  - udmabuf: also check for F_SEAL_FUTURE_WRITE
  - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
  - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
  - io_uring: Fix registered ring file refcount leak
  - selftests/bpf: Use asm constraint "m" for LoongArch
  - selftests/memfd: run sysctl tests when PID namespace support is enabled
  - tracing: Add "%s" check in test_event_printk()
  - tracing: Add missing helper functions in event pointer dereference check
  - tracing: Fix test_event_printk() to process entire print argument
  - smb: client: fix TCP timers deadlock after rmmod
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  - btrfs: tree-checker: reject inline extent items with 0 ref count
  - vmalloc: fix accounting with i915
  - zram: fix uninitialized ZRAM not releasing backing device
  - zram: refuse to use zero sized block device as backing device
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
  - hwmon: (tmp513) Fix Current Register value interpretation
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
  - hwmon: (tmp513) Use SI constants from units.h
  - hwmon: (tmp513) Simplify with dev_err_probe()
  - hwmon: (tmp513) Don't use "proxy" headers
  - drm/amdgpu: don't access invalid sched
  - i915/guc: Accumulate active runtime on gt reset
  - i915/guc: Ensure busyness counter increases motonically
  - i915/guc: Reset engine utilization buffer before registration
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
  - thunderbolt: Improve redrive mode handling
  - USB: serial: option: add Telit FE910C04 rmnet compositions
  - USB: serial: option: add MediaTek T7XX compositions
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
  - USB: serial: option: add MeiG Smart SLM770A
  - USB: serial: option: add TCL IK512 MBIM & ECM
  - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
  - efivarfs: Fix error on non-existent file
  - i2c: riic: Always round-up when calculating bus period
  - chelsio/chtls: prevent potential integer overflow on 32bit
  - net: tun: fix tun_napi_alloc_frags()
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  - EDAC/amd64: Simplify ECC check on unified memory controllers
  - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
  - net: mdiobus: fix an OF node reference leak
  - selftests: openvswitch: fix tcpdump execution
  - netfilter: ipset: Fix for recursive locking warning
  - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
  - net: ethernet: bgmac-platform: fix an OF node reference leak
  - ksmbd: fix broken transfers when exceeding max simultaneous operations
  - ksmbd: count all requests in req_running counter
  - net: renesas: rswitch: rework ts tags management
  - ionic: use ee->offset when returning sprom data
  - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - cxl/region: Fix region creation for greater than x2 switches
  - cxl/pci: Fix potential bogus return value upon successful probing
  - tools: hv: change permissions of NetworkManager configuration file
  - xfs: reset rootdir extent size hint after growfsrt
  - xfs: take m_growlock when running growfsrt
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
  - xfs: attr forks require attr, not attr2
  - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
  - xfs: fix file_path handling in tracepoints
  - xfs: convert comma to semicolon
  - xfs: Fix xfs_prepare_shift() range for RT
  - xfs: Fix xfs_flush_unmap_range() range for RT
  - xfs: create a new helper to return a file's allocation unit
  - xfs: declare xfs_file.c symbols in xfs_file.h
  - xfs: use consistent uid/gid when grabbing dquots for inodes
  - xfs: verify buffer, inode, and dquot items every tx commit
  - xfs: fix the contact address for the sysfs ABI documentation
  - i2c: pnx: Fix timeout in wait functions
  - p2sb: Do not scan and remove the P2SB device when it is unhidden
  - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
  - p2sb: Introduce the global flag p2sb_hidden_by_bios
  - p2sb: Factor out p2sb_read_from_cache()
  - platform/x86: p2sb: Make p2sb_get_devfn() return void
  - usb: cdns3: Add quirk flag to enable suspend residency
  - PCI/AER: Disable AER service on suspend
  - PCI: Use preserve_config in place of pci_flags
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
  - MIPS: Loongson64: DTS: Fix msi node for ls7a
  - usb: cdns3-ti: Add workaround for Errata i2409
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC
  - PCI: vmd: Create domain symlink before pci_bus_add_devices()
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
  - net: sched: fix ordering of qlen adjustment
  - x86/static-call: fix 32-bit build
  - x86/xen: remove hypercall page
  - x86/xen: use new hypercall functions instead of hypercall page
  - x86/xen: add central hypercall functions
  - x86/static-call: provide a way to do very early static-call updates
  - objtool/x86: allow syscall instruction
  - x86: make get_cpu_vendor() accessible from Xen code
  - xen/netfront: fix crash when removing device
  - net: rswitch: Avoid use-after-free in rswitch_poll()
  - selftests/bpf: remove use of __xlated()
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
  - kselftest/arm64: abi: fix SVCR detection
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
  - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
  - net: renesas: rswitch: fix initial MPIC register setting
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting
  - Bluetooth: iso: Fix recursive locking warning
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - net/sched: netem: account for backlog updates from child qdisc
  - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
  - netfilter: nf_tables: do not defer rule destruction via call_rcu
  - net: renesas: rswitch: handle stop vs interrupt race
  - net: renesas: rswitch: fix leaked pointer on error path
  - net: renesas: rswitch: fix race window between tx start and complete
  - net: rswitch: Add jumbo frames handling for TX
  - net: rswitch: Add a setting ext descriptor function
  - net: rswitch: Add unmap_addrs instead of dma address in each desc
  - net: rswitch: Use build_skb() for RX
  - net: rswitch: Use unsigned int for desc related array index
  - net: rswitch: Drop unused argument/return value
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
  - ASoC: amd: yc: Fix the wrong return value
  - ALSA: control: Avoid WARN() for symlink errors
  - qca_spi: Make driver probing reliable
  - qca_spi: Fix clock speed for multiple QCA7000
  - cxgb4: use port number to set mac addr
  - ACPI: resource: Fix memory resource type union access
  - net: sparx5: fix the maximum frame length register
  - net: sparx5: fix FDMA performance issue
  - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
  - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
  - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
  - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
  - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
  - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
  - net: lapb: increase LAPB_HEADER_LEN
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
  - wifi: cfg80211: sme: init n_channels before channels[] access
  - tipc: fix NULL deref in cleanup_bearer()
  - batman-adv: Do not let TT changes list grows indefinitely
  - batman-adv: Remove uninitialized data in full table TT response
  - batman-adv: Do not send uninitialized TT changes
  - amdgpu/uvd: get ring reference from rq scheduler
  - wifi: mac80211: fix station NSS capability initialization order
  - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
  - bpf, sockmap: Fix update element with same
  - bpf, sockmap: Fix race between element replace and close()
  - xfs: only run precommits once per transaction object
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved
  - xfs: return from xfs_symlink_verify early on V4 filesystems
  - xfs: don't drop errno values when we fail to ficlone the entire range
  - xfs: update btree keys correctly when _insrec splits an inode root block
  - drm/i915: Fix memory leak by correcting cache object name in error handler
  - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
  - usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
  - usb: typec: anx7411: fix fwnode_handle reference leak
  - usb: ehci-hcd: fix call balance of clocks handling routines
  - usb: gadget: midi2: Fix interpretation of is_midi1 bits
  - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
  - usb: dwc2: Fix HCD port connection race
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
  - usb: dwc2: Fix HCD resume
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
  - usb: host: max3421-hcd: Correctly abort a USB request.
  - riscv: Fix IPIs usage in kfence_protect_page()
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
  - riscv: Fix wrong usage of __pa() on a fixmap address
  - tcp: check space before adding MPTCP SYN options
  - splice: do not checksum AF_UNIX sockets
  - ksmbd: fix racy issue from session lookup and expire
  - !15144  hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - !15143  scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - !15132  CVE-2024-56607 fix
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  - wifi: mac80211: Add non-atomic station iterator
  - !15140  iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-80.0.0.73
changelog:
  - !15278  tracing/osnoise: Fix resetting of tracepoints
  - tracing/osnoise: Fix resetting of tracepoints
  - !15227 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Conflicts Patches
  - mm: z3fold: deprecate CONFIG_Z3FOLD
  - null_blk: Remove usage of the deprecated ida_simple_xx() API
  - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
  - proc: add config & param to block forcing mem writes
  - HID: Ignore battery for all ELAN I2C-HID devices
  - ata: sata_sil: Rename sil_blacklist to sil_quirks
  - ata: pata_serverworks: Do not use the term blacklist
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
  - uprobes: Fix race in uprobe_free_utask
  - perf,x86: Fix kabi breakage in struct uprobe_task
  - perf,x86: avoid missing caller address in stack traces captured in uprobe
  - i2c: synquacer: Deal with optional PCLK correctly
  - i2c: synquacer: Remove a clk reference from struct synquacer_i2c
  - !15248 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - selftests/ftrace: adjust offset for kprobe syntax error test
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
  - iommu/arm-smmu: Defer probe of clients after smmu device bound
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev
  - KVM: arm64: Change kvm_handle_mmio_return() return polarity
  - !15270 v2  mm: Backport two patch
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont()
  - arm64/mm: Re-organize arch_make_huge_pte()
  - mm/hugetlb: use arch_make_huge_pte() in __hugetlb_insert_pfn()
  - !14820 [OLK-6.6]Hygon: Support kernel boot verification and secret injection for Hygon CSV3 VM
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !14819 [OLK-6.6]Hygon: Support CSV3 Attestation
  - x86/configs: openeuler_defconfig: Set CONFIG_VIRT_DRIVERS=y and CONFIG_EFI_SECRET=m
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !15251 Intel: Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - !15185 hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-82.0.0.75
changelog:
  - !15440 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Patches
  - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  - riscv: Fix text patching when IPI are used
  - mm: hugetlb: independent PMD page table shared count
  - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  - pgtable: fix s390 ptdesc field comments
  - workqueue: Add rcu lock check at the end of work item execution
  - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  - arm64: dts: rockchip: add hevc power domain clock to rk3328
  - ARM: dts: imxrt1050: Fix clocks for mmc
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  - riscv: kprobes: Fix incorrect address calculation
  - iio: adc: ad7124: Disable all channels at probe time
  - iio: inkern: call iio_device_put() only on mapped devices
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler
  - iio: imu: kmx61: fix information leak in triggered buffer
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  - usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
  - usb: gadget: midi2: Reverse-select at the right place
  - usb: fix reference leak in usb_new_device()
  - USB: core: Disable LPM only for non-suspended ports
  - USB: usblp: return error when setting unsupported protocol
  - usb: dwc3-am62: Disable autosuspend during remove
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  - tty: serial: 8250: Fix another runtime PM usage counter underflow
  - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  - usb: dwc3: gadget: fix writing NYET threshold
  - USB: serial: cp210x: add Phoenix Contact UPS Device
  - usb-storage: Add max sectors quirk for Nokia 208
  - staging: iio: ad9832: Correct phase range check
  - staging: iio: ad9834: Correct phase range check
  - USB: serial: option: add Neoway N723-EA support
  - USB: serial: option: add MeiG Smart SRM815
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  - io_uring/timeout: fix multishot updates
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw
  - drm/amdkfd: fixed page fault when enable MES shader debugger
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  - smb: client: sync the root session and superblock context passwords before automounting
  - thermal: of: fix OF node leak in of_thermal_zone_find()
  - ksmbd: Implement new SMB3 POSIX type
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  - sctp: sysctl: udp_port: avoid using current->nsproxy
  - sctp: sysctl: auth_enable: avoid using current->nsproxy
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  - mptcp: sysctl: sched: avoid using current->nsproxy
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  - scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
  - dm thin: make get_first_thin use rcu-safe list first function
  - riscv: mm: Fix the out of bound issue of vmemmap address
  - cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  - afs: Fix the maximum cell name length
  - drm/mediatek: Add return value check when reading DPCD
  - drm/mediatek: Fix mode valid issue for dp
  - drm/mediatek: Fix YCbCr422 color format issue for DP
  - drm/mediatek: stop selecting foreign drivers
  - net/mlx5: Fix variable not being completed when function returns
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  - netfilter: nf_tables: imbalance in flowtable binding
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - riscv: Fix early ftrace nop patching
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  - Bluetooth: btnxpuart: Fix driver sending truncated data
  - Bluetooth: MGMT: Fix Add Device to responding before completing
  - Bluetooth: hci_sync: Fix not setting Random Address when required
  - eth: gve: use appropriate helper to set xdp_features
  - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  - tls: Fix tls_sw_sendmsg error handling
  - igc: return early when failing to read EECD register
  - igc: field get conversion
  - ice: fix incorrect PHY settings for 100 GB/s
  - cxgb4: Avoid removal of uninserted tid
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - pds_core: limit loop over fw name list
  - net: libwx: fix firmware mailbox abnormal return
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  - selftests/alsa: Fix circular dependency involving global-timer
  - ASoC: mediatek: disable buffer pre-allocation
  - ASoC: rt722: add delay time to wait for the calibration procedure
  - erofs: fix PSI memstall accounting
  - erofs: handle overlapped pclusters out of crafted images properly
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ovl: do not encode lower fh with upper sb_writers held
  - exfat: fix the infinite loop in __exfat_free_cluster()
  - dm array: fix cursor index when skipping across block boundaries
  - dm array: fix unreleased btree blocks on closing a faulty array cursor
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - jbd2: flush filesystem device before updating tail sequence
  - jbd2: increase IO priority for writing revoke records
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - RDMA/bnxt_re: Fix max SGEs for the Work Request
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - mm/kmemleak: fix sleeping function called from invalid context at print message
  - mm/readahead: fix large folio support in async readahead
  - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - dt-bindings: display: adi,adv7533: Drop single lane support
  - drm: adv7511: Drop dsi single lane support
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075
  - RDMA/uverbs: Prevent integer overflow issue
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  - kcov: mark in_softirq_really() as __always_inline
  - ALSA hda/realtek: Add quirk for Framework F111:000C
  - ALSA: seq: Check UMP support for midi_version change
  - modpost: fix the missed iteration for the max bit in do_input()
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support
  - ARC: build: Try to guess GCC variant of cross compiler
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  - Bluetooth: hci_core: Fix sleeping function called from invalid context
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
  - smb: client: destroy cfid_put_wq on module exit
  - ksmbd: set ATTR_CTIME flags when setting mtime
  - ksmbd: retry iterate_dir in smb2_query_dir
  - bpf: fix potential error return
  - sound: usb: format: don't warn that raw DSD is unsupported
  - sound: usb: enable DSD output for ddHiFi TC44C
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  - drm/amdkfd: Correct the migration DMA map direction
  - wifi: mac80211: wake the queues in case of failure in resume
  - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  - ila: serialize calls to nf_register_net_hooks()
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  - af_packet: fix vlan_get_tci() vs MSG_PEEK
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  - net: restrict SO_REUSEPORT to inet sockets
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  - net: mv643xx_eth: fix an OF node reference leak
  - eth: bcmsysport: fix call balance of priv->clk handling routines
  - ALSA: usb-audio: US16x08: Initialize array before use
  - net: llc: reset skb->transport_header
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  - drm/i915/dg1: Fix power gate sequence.
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation
  - netrom: check buffer length before accessing it
  - net: Fix netns for ip_tunnel_init_flow()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  - ip_tunnel: annotate data-races around t->parms.link
  - net: stmmac: restructure the error path of stmmac_probe_config_dt()
  - net: stmmac: don't create a MDIO bus if unnecessary
  - net: dsa: microchip: Fix LAN937X set_ageing_time function
  - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  - RDMA/bnxt_re: Fix the locking while accessing the QP table
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  - RDMA/bnxt_re: Add send queue size check for variable wqe
  - RDMA/bnxt_re: Disable use of reserved wqes
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  - RDMA/bnxt_re: Fix max_qp_wrs reported
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device
  - RDMA/bnxt_re: Add check for path mtu in modify_qp
  - RDMA/bnxt_re: Fix the check for 9060 condition
  - nvme-pci: 512 byte aligned dma pool segment quirk
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues
  - RDMA/mlx5: Enforce same type port association for multiport RoCE
  - RDMA/bnxt_re: Remove always true dattr validity check
  - RDMA/bnxt_re: Allow MSN table capability check
  - powerpc: Remove initialisation of readpos
  - net: mctp: handle skb cleanup on sock_queue failures
  - ceph: give up on paths longer than PATH_MAX
  - mmc: sdhci-msm: fix crypto key eviction
  - !15418  ocfs2: handle a symlink read error correctly
  - ocfs2: handle a symlink read error correctly
  - !15299  ptp: Ensure info->enable callback is always set
  - !15299  ptp: Ensure info->enable callback is always set
  - ptp: Ensure info->enable callback is always set
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - libbpf: Fix segfault due to libelf functions not setting errno
  - !15417 [Intel-SIG] x86/cpu: Clearwater Forest support including CPU model and new ISAs
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15390  backport mainline bugfix patch
  - !15390  backport mainline bugfix patch
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available
  - !15229  NFS: remove unused variable nfs_rpcstat
  - NFS: remove unused variable nfs_rpcstat
  - !14975 [OLK-6.6] [Backport] scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - !15302 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Conflicts Patches
  - selftests: mptcp: join: test for prohibited MPC to port-based endp
  - !15292 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.56-6.6.57 LTS Conflicts Patches
  - HID: mcp2200: added driver for GPIOs of MCP2200
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4}
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15043  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - !15283  wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - !15308  CVE-2025-21732
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
  - RDMA/mlx5: Change check for cacheable mkeys
  - !15298  usbnet: ipheth: fix possible overflow in DPE length check
  - usbnet: ipheth: fix possible overflow in DPE length check
  - !15334  perf/core: Save raw sample data conditionally based on sample type
  - perf/core: Save raw sample data conditionally based on sample type
  - !15347  Mainline Patch
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - !15331  Fixes CVE-2025-21767
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message
  - !15221  smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - !15364  LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - !15345  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15363  gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - !15385  orangefs: fix a oob in orangefs_debug_write
  - orangefs: fix a oob in orangefs_debug_write
  - !15265  NFSD: fix hang in nfsd4_shutdown_callback
  - NFSD: fix hang in nfsd4_shutdown_callback
  - !15263  NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - !15266  nfsd: clear acl_access/acl_default after releasing them
  - nfsd: clear acl_access/acl_default after releasing them
  - !15346  block: mark GFP_NOIO around sysfs ->store()
  - block: mark GFP_NOIO around sysfs ->store()
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  - ALSA: ump: Shut up truncated string warning
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands
  - cleanup: Remove address space of returned pointer
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
  - Bluetooth: btusb: add callback function in btusb suspend/resume
  - scsi: mpi3mr: Start controller indexing from 0
  - scsi: mpi3mr: Use ida to manage mrioc ID
  - ALSA: ump: Update legacy substream names upon FB info update
  - ALSA: ump: Indicate the inactive group in legacy substream names
  - ALSA: ump: Don't open legacy substream for an inactive group
  - ALSA: ump: Use guard() for locking
  - udf: Verify inode link counts before performing rename
  - udf_rename(): only access the child content on cross-directory rename
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
  - of: address: Store number of bus flag cells rather than bool
  - of: address: Remove duplicated functions
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - x86, crash: wrap crash dumping code into crash related ifdefs
  - thunderbolt: Don't display nvm_version unless upgrade supported
  - thunderbolt: Add support for Intel Panther Lake-M/P
  - thunderbolt: Add support for Intel Lunar Lake
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
  - usb: xhci: Limit Stop Endpoint retries
  - xhci: retry Stop Endpoint on buggy NEC controllers
  - net: renesas: rswitch: fix possible early skb release
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  - net/mlx5: unique names for per device caches
  - Revert "nvme: make keep-alive synchronous operation"
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
  - usb: typec: ucsi: add update_connector callback
  - usb: typec: ucsi: add callback for connector status updates
  - iio: adc: ad7192: properly check spi_get_device_match_data()
  - iio: adc: ad7192: Convert from of specific to fwnode property handling
  - usb: chipidea: udc: limit usb request length to max 16KB
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
  - fs/ntfs3: Fix warning in ni_fiemap
  - fs/ntfs3: Implement fallocate for compressed files
  - remoteproc: qcom: pas: enable SAR2130P audio DSP support
  - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  - remoteproc: qcom: pas: Add sc7180 adsp
  - mailbox: pcc: Check before sending MCTP PCC response ACK
  - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
  - Bluetooth: Add support ITTIM PE50-M75C
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  - i2c: i801: Add support for Intel Panther Lake
  - i2c: i801: Add support for Intel Arrow Lake-H
  - wifi: ath10k: avoid NULL pointer error during sdio remove
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
  - cleanup: Add conditional guard support
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
  - crypto: ecdsa - Rename keylen to bufsize where necessary
  - crypto: ecdsa - Convert byte arrays with key coordinates to digits
  - ext4: partial zero eof block on unaligned inode size extension
  - ext4: convert to new timestamp accessors
  - memblock: allow zero threshold in validate_numa_converage()
  - NUMA: optimize detection of memory with no node id assigned by firmware
  - sched: Initialize idle tasks only once
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
  - smb: client: fix use-after-free of signing key
  - smb: client: stop flooding dmesg in smb2_calc_signature()
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  - smb/client: rename cifs_ace to smb_ace
  - smb/client: rename cifs_acl to smb_acl
  - smb/client: rename cifs_sid to smb_sid
  - smb/client: rename cifs_ntsd to smb_ntsd
  - x86/mm: Carve out INVLPG inline asm for use by others
  - docs: media: update location of the media patches
  - drm/amd/display: Fix incorrect DSC recompute trigger
  - drm/amd/display: Fix DSC-re-computing


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


