# changelog

author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-82.0.0.75
changelog:
  - !15440 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Patches
  - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  - riscv: Fix text patching when IPI are used
  - mm: hugetlb: independent PMD page table shared count
  - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  - pgtable: fix s390 ptdesc field comments
  - workqueue: Add rcu lock check at the end of work item execution
  - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  - arm64: dts: rockchip: add hevc power domain clock to rk3328
  - ARM: dts: imxrt1050: Fix clocks for mmc
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  - riscv: kprobes: Fix incorrect address calculation
  - iio: adc: ad7124: Disable all channels at probe time
  - iio: inkern: call iio_device_put() only on mapped devices
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler
  - iio: imu: kmx61: fix information leak in triggered buffer
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  - usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
  - usb: gadget: midi2: Reverse-select at the right place
  - usb: fix reference leak in usb_new_device()
  - USB: core: Disable LPM only for non-suspended ports
  - USB: usblp: return error when setting unsupported protocol
  - usb: dwc3-am62: Disable autosuspend during remove
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  - tty: serial: 8250: Fix another runtime PM usage counter underflow
  - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  - usb: dwc3: gadget: fix writing NYET threshold
  - USB: serial: cp210x: add Phoenix Contact UPS Device
  - usb-storage: Add max sectors quirk for Nokia 208
  - staging: iio: ad9832: Correct phase range check
  - staging: iio: ad9834: Correct phase range check
  - USB: serial: option: add Neoway N723-EA support
  - USB: serial: option: add MeiG Smart SRM815
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  - io_uring/timeout: fix multishot updates
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw
  - drm/amdkfd: fixed page fault when enable MES shader debugger
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  - smb: client: sync the root session and superblock context passwords before automounting
  - thermal: of: fix OF node leak in of_thermal_zone_find()
  - ksmbd: Implement new SMB3 POSIX type
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  - sctp: sysctl: udp_port: avoid using current->nsproxy
  - sctp: sysctl: auth_enable: avoid using current->nsproxy
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  - mptcp: sysctl: sched: avoid using current->nsproxy
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  - scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
  - dm thin: make get_first_thin use rcu-safe list first function
  - riscv: mm: Fix the out of bound issue of vmemmap address
  - cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  - afs: Fix the maximum cell name length
  - drm/mediatek: Add return value check when reading DPCD
  - drm/mediatek: Fix mode valid issue for dp
  - drm/mediatek: Fix YCbCr422 color format issue for DP
  - drm/mediatek: stop selecting foreign drivers
  - net/mlx5: Fix variable not being completed when function returns
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  - netfilter: nf_tables: imbalance in flowtable binding
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - riscv: Fix early ftrace nop patching
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  - Bluetooth: btnxpuart: Fix driver sending truncated data
  - Bluetooth: MGMT: Fix Add Device to responding before completing
  - Bluetooth: hci_sync: Fix not setting Random Address when required
  - eth: gve: use appropriate helper to set xdp_features
  - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  - tls: Fix tls_sw_sendmsg error handling
  - igc: return early when failing to read EECD register
  - igc: field get conversion
  - ice: fix incorrect PHY settings for 100 GB/s
  - cxgb4: Avoid removal of uninserted tid
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - pds_core: limit loop over fw name list
  - net: libwx: fix firmware mailbox abnormal return
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  - selftests/alsa: Fix circular dependency involving global-timer
  - ASoC: mediatek: disable buffer pre-allocation
  - ASoC: rt722: add delay time to wait for the calibration procedure
  - erofs: fix PSI memstall accounting
  - erofs: handle overlapped pclusters out of crafted images properly
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ovl: do not encode lower fh with upper sb_writers held
  - exfat: fix the infinite loop in __exfat_free_cluster()
  - dm array: fix cursor index when skipping across block boundaries
  - dm array: fix unreleased btree blocks on closing a faulty array cursor
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - jbd2: flush filesystem device before updating tail sequence
  - jbd2: increase IO priority for writing revoke records
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - RDMA/bnxt_re: Fix max SGEs for the Work Request
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - mm/kmemleak: fix sleeping function called from invalid context at print message
  - mm/readahead: fix large folio support in async readahead
  - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - dt-bindings: display: adi,adv7533: Drop single lane support
  - drm: adv7511: Drop dsi single lane support
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075
  - RDMA/uverbs: Prevent integer overflow issue
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  - kcov: mark in_softirq_really() as __always_inline
  - ALSA hda/realtek: Add quirk for Framework F111:000C
  - ALSA: seq: Check UMP support for midi_version change
  - modpost: fix the missed iteration for the max bit in do_input()
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support
  - ARC: build: Try to guess GCC variant of cross compiler
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  - Bluetooth: hci_core: Fix sleeping function called from invalid context
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
  - smb: client: destroy cfid_put_wq on module exit
  - ksmbd: set ATTR_CTIME flags when setting mtime
  - ksmbd: retry iterate_dir in smb2_query_dir
  - bpf: fix potential error return
  - sound: usb: format: don't warn that raw DSD is unsupported
  - sound: usb: enable DSD output for ddHiFi TC44C
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  - drm/amdkfd: Correct the migration DMA map direction
  - wifi: mac80211: wake the queues in case of failure in resume
  - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  - ila: serialize calls to nf_register_net_hooks()
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  - af_packet: fix vlan_get_tci() vs MSG_PEEK
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  - net: restrict SO_REUSEPORT to inet sockets
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  - net: mv643xx_eth: fix an OF node reference leak
  - eth: bcmsysport: fix call balance of priv->clk handling routines
  - ALSA: usb-audio: US16x08: Initialize array before use
  - net: llc: reset skb->transport_header
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  - drm/i915/dg1: Fix power gate sequence.
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation
  - netrom: check buffer length before accessing it
  - net: Fix netns for ip_tunnel_init_flow()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  - ip_tunnel: annotate data-races around t->parms.link
  - net: stmmac: restructure the error path of stmmac_probe_config_dt()
  - net: stmmac: don't create a MDIO bus if unnecessary
  - net: dsa: microchip: Fix LAN937X set_ageing_time function
  - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  - RDMA/bnxt_re: Fix the locking while accessing the QP table
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  - RDMA/bnxt_re: Add send queue size check for variable wqe
  - RDMA/bnxt_re: Disable use of reserved wqes
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  - RDMA/bnxt_re: Fix max_qp_wrs reported
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device
  - RDMA/bnxt_re: Add check for path mtu in modify_qp
  - RDMA/bnxt_re: Fix the check for 9060 condition
  - nvme-pci: 512 byte aligned dma pool segment quirk
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues
  - RDMA/mlx5: Enforce same type port association for multiport RoCE
  - RDMA/bnxt_re: Remove always true dattr validity check
  - RDMA/bnxt_re: Allow MSN table capability check
  - powerpc: Remove initialisation of readpos
  - net: mctp: handle skb cleanup on sock_queue failures
  - ceph: give up on paths longer than PATH_MAX
  - mmc: sdhci-msm: fix crypto key eviction
  - !15418  ocfs2: handle a symlink read error correctly
  - ocfs2: handle a symlink read error correctly
  - !15299  ptp: Ensure info->enable callback is always set
  - !15299  ptp: Ensure info->enable callback is always set
  - ptp: Ensure info->enable callback is always set
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - libbpf: Fix segfault due to libelf functions not setting errno
  - !15417 [Intel-SIG] x86/cpu: Clearwater Forest support including CPU model and new ISAs
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15390  backport mainline bugfix patch
  - !15390  backport mainline bugfix patch
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available
  - !15229  NFS: remove unused variable nfs_rpcstat
  - NFS: remove unused variable nfs_rpcstat
  - !14975 [OLK-6.6] [Backport] scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - !15302 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Conflicts Patches
  - selftests: mptcp: join: test for prohibited MPC to port-based endp
  - !15292 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.56-6.6.57 LTS Conflicts Patches
  - HID: mcp2200: added driver for GPIOs of MCP2200
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4}
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15043  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - !15283  wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - !15308  CVE-2025-21732
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
  - RDMA/mlx5: Change check for cacheable mkeys
  - !15298  usbnet: ipheth: fix possible overflow in DPE length check
  - usbnet: ipheth: fix possible overflow in DPE length check
  - !15334  perf/core: Save raw sample data conditionally based on sample type
  - perf/core: Save raw sample data conditionally based on sample type
  - !15347  Mainline Patch
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - !15331  Fixes CVE-2025-21767
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message
  - !15221  smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - !15364  LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - !15345  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15363  gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - !15385  orangefs: fix a oob in orangefs_debug_write
  - orangefs: fix a oob in orangefs_debug_write
  - !15265  NFSD: fix hang in nfsd4_shutdown_callback
  - NFSD: fix hang in nfsd4_shutdown_callback
  - !15263  NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - !15266  nfsd: clear acl_access/acl_default after releasing them
  - nfsd: clear acl_access/acl_default after releasing them
  - !15346  block: mark GFP_NOIO around sysfs ->store()
  - block: mark GFP_NOIO around sysfs ->store()
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  - ALSA: ump: Shut up truncated string warning
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands
  - cleanup: Remove address space of returned pointer
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
  - Bluetooth: btusb: add callback function in btusb suspend/resume
  - scsi: mpi3mr: Start controller indexing from 0
  - scsi: mpi3mr: Use ida to manage mrioc ID
  - ALSA: ump: Update legacy substream names upon FB info update
  - ALSA: ump: Indicate the inactive group in legacy substream names
  - ALSA: ump: Don't open legacy substream for an inactive group
  - ALSA: ump: Use guard() for locking
  - udf: Verify inode link counts before performing rename
  - udf_rename(): only access the child content on cross-directory rename
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
  - of: address: Store number of bus flag cells rather than bool
  - of: address: Remove duplicated functions
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - x86, crash: wrap crash dumping code into crash related ifdefs
  - thunderbolt: Don't display nvm_version unless upgrade supported
  - thunderbolt: Add support for Intel Panther Lake-M/P
  - thunderbolt: Add support for Intel Lunar Lake
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
  - usb: xhci: Limit Stop Endpoint retries
  - xhci: retry Stop Endpoint on buggy NEC controllers
  - net: renesas: rswitch: fix possible early skb release
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  - net/mlx5: unique names for per device caches
  - Revert "nvme: make keep-alive synchronous operation"
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
  - usb: typec: ucsi: add update_connector callback
  - usb: typec: ucsi: add callback for connector status updates
  - iio: adc: ad7192: properly check spi_get_device_match_data()
  - iio: adc: ad7192: Convert from of specific to fwnode property handling
  - usb: chipidea: udc: limit usb request length to max 16KB
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
  - fs/ntfs3: Fix warning in ni_fiemap
  - fs/ntfs3: Implement fallocate for compressed files
  - remoteproc: qcom: pas: enable SAR2130P audio DSP support
  - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  - remoteproc: qcom: pas: Add sc7180 adsp
  - mailbox: pcc: Check before sending MCTP PCC response ACK
  - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
  - Bluetooth: Add support ITTIM PE50-M75C
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  - i2c: i801: Add support for Intel Panther Lake
  - i2c: i801: Add support for Intel Arrow Lake-H
  - wifi: ath10k: avoid NULL pointer error during sdio remove
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
  - cleanup: Add conditional guard support
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
  - crypto: ecdsa - Rename keylen to bufsize where necessary
  - crypto: ecdsa - Convert byte arrays with key coordinates to digits
  - ext4: partial zero eof block on unaligned inode size extension
  - ext4: convert to new timestamp accessors
  - memblock: allow zero threshold in validate_numa_converage()
  - NUMA: optimize detection of memory with no node id assigned by firmware
  - sched: Initialize idle tasks only once
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
  - smb: client: fix use-after-free of signing key
  - smb: client: stop flooding dmesg in smb2_calc_signature()
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  - smb/client: rename cifs_ace to smb_ace
  - smb/client: rename cifs_acl to smb_acl
  - smb/client: rename cifs_sid to smb_sid
  - smb/client: rename cifs_ntsd to smb_ntsd
  - x86/mm: Carve out INVLPG inline asm for use by others
  - docs: media: update location of the media patches
  - drm/amd/display: Fix incorrect DSC recompute trigger
  - drm/amd/display: Fix DSC-re-computing


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-82.0.0.76
changelog:
  - RISC-V kernel upgrade to 6.6.0-82.0.0
  - riscv: Fixed conflict created by commit c7c8e8a76904
  - riscv: Enable zstd-compressed firmware support
  - riscv: Enable AMDKFD driver for ROCm


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-83.0.0.77
changelog:
  - !15047 mm: Backport some mm patchs
  - mm/memmap: prevent double scanning of memmap by kmemleak
  - mm: kmemleak: fix upper boundary check for physical address objects
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios
  - mm: compaction: use the proper flag to determine watermarks
  - !15271  LoongArch: fix cacheinfo/unaligned/rtc/s3/hda/usb issues
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - ice: fix unaligned access in ice_create_lag_recipe
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !15516 mm: shmem: remove unnecessary warning in shmem_writepage()
  - mm: shmem: remove unnecessary warning in shmem_writepage()
  - !15492  Add dp module in hibmc driver
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - drm/hisilicon/hibmc: convert to struct drm_edid
  - !15395  clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - !15459  perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - !15369  media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - !15421 [OLK-6.6] [Backport] upstream fix for driver nvme
  - nvme: handle connectivity loss in nvme_set_queue_count
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
  - nvme: Add error path for xa_store in nvme_init_effects
  - nvme: Add error check for xa_store in nvme_get_effects_log
  - !15370  wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - !15483  CVE-2024-58069
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - !15470  some readahead improvement
  - readahead: properly shorten readahead when falling back to do_page_cache_ra()
  - readahead: don't shorten readahead window in read_pages()
  - readahead: make sure sync readahead reads needed page
  - !15404  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15376 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Conflicts Patches
  - mptcp: update local address flags when setting it
  - NFSD: Async COPY result needs to return a write verifier
  - !15164 [openEuler-24.03-LTS][linux-6.6.y sync] KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - !15375 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Conflicts Patches
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
  - !15149 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15147  Add device HID for Hygon GPIO controller
  - pinctrl: Add device HID for Hygon GPIO controller
  - !15438 fix HCT build err once VFIO disabled
  - hct: fix build err once VFIO disabled


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-84.0.0.78
changelog:
  - !15625 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.75-6.6.76 LTS Patches
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  - selftests/landlock: Fix error message
  - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
  - btrfs: output the reason for open_ctree() failure
  - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
  - staging: media: max96712: fix kernel oops when removing module
  - usb: gadget: f_tcm: Don't free command immediately
  - media: uvcvideo: Fix double free in error path
  - remoteproc: core: Fix ida_free call while not allocated
  - mptcp: handle fastopen disconnect correctly
  - mptcp: consolidate suboption status
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
  - usb: dwc3: core: Defer the probe until USB power supply ready
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
  - usb: gadget: f_tcm: Fix Get/SetInterface return value
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection
  - net: usb: rtl8150: enable basic endpoint checking
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
  - ktest.pl: Check kernelrelease return in get_version
  - selftests/rseq: Fix handling of glibc without rseq support
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length
  - kbuild: switch from lz4c to lz4 for compression
  - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
  - f2fs: Introduce linear search for dentries
  - hexagon: Fix unbalanced spinlock in die()
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
  - kconfig: fix memory leak in sym_warn_unmet_dep()
  - kconfig: WERROR unmet symbol dependency
  - kconfig: deduplicate code in conf_read_simple()
  - kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
  - kconfig: require a space after '#' for valid input
  - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
  - cifs: Fix getting and setting SACLs over SMB1
  - cifs: Validate EAs for WSL reparse points
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
  - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
  - RISC-V: Mark riscv_v_init() as __init
  - hostfs: fix the host directory parse when mounting.
  - hostfs: Add const qualifier to host_root in hostfs_fill_super()
  - hostfs: fix string handling in __dentry_name()
  - hostfs: convert hostfs to use the new mount API
  - genksyms: fix memory leak when the same symbol is read from *.symref file
  - genksyms: fix memory leak when the same symbol is added from source
  - net: hsr: fix fill_frame_info() regression vs VLAN packets
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path
  - net: xdp: Disallow attaching device-bound programs in generic mode
  - tcp: correct handling of extreme memory squeeze
  - bgmac: reduce max frame size to support just MTU 1500
  - vsock: Allow retrying on connect() failure
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
  - perf trace: Fix runtime error of index out of bounds
  - net: stmmac: Limit FIFO size by hardware capability
  - net: stmmac: Limit the number of MTL queues to hardware capability
  - ptp: Properly handle compat ioctls
  - net: davicom: fix UAF in dm9000_drv_remove
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
  - net: netdevsim: try to close UDP port harness races
  - net: rose: fix timer races against user threads
  - iavf: allow changing VLAN state without calling PF
  - PM: hibernate: Add error handling for syscore_suspend()
  - net: fec: implement TSO descriptor cleanup
  - gpio: mxc: remove dead code after switch to DT-only
  - regulator: core: Add missing newline character
  - ubifs: skip dumping tnc tree when zroot is null
  - xfrm: delete intermediate secpath entry in packet offload mode
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
  - tools/bootconfig: Fix the wrong format specifier
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
  - serial: 8250: Adjust the timeout for FIFO mode
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
  - module: Extend the preempt disabled section in dereference_symbol_descriptor().
  - nilfs2: protect access to buffers with no active references
  - nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
  - buffer: make folio_create_empty_buffers() return a buffer_head
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
  - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
  - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
  - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
  - media: nxp: imx8-isi: fix v4l2-compliance test errors
  - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
  - mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
  - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
  - media: uvcvideo: Propagate buf->error to userspace
  - media: camif-core: Add check for clk_enable()
  - media: mipi-csis: Add check for clk_enable()
  - media: i2c: ov9282: Correct the exposure offset
  - media: i2c: imx412: Add missing newline to prints
  - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
  - media: marvell: Add check for clk_enable()
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
  - media: lmedm04: Handle errors for lme2510_int_read
  - media: rc: iguanair: handle timeouts
  - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
  - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set
  - of: reserved-memory: Do not make kmemleak ignore freed address
  - RDMA/mlx5: Fix indirect mkey ODP page count
  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
  - i3c: dw: Add hot-join support.
  - arm64: tegra: Fix DMA ID for SPI2
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
  - ARM: dts: mediatek: mt7623: fix IR nodename
  - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
  - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
  - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
  - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
  - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
  - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
  - arm64: dts: qcom: sc7180: fix psci power domain node names
  - arm64: dts: qcom: sc7180: change labels to lower-case
  - arm64: dts: qcom: Add SM7125 device tree
  - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
  - arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
  - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
  - ARM: omap1: Fix up the Retu IRQ on Nokia 770
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
  - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
  - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
  - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
  - arm64: dts: qcom: sm8450: correct sleep clock frequency
  - arm64: dts: qcom: sm8350: correct sleep clock frequency
  - arm64: dts: qcom: sm8250: correct sleep clock frequency
  - arm64: dts: qcom: sm6375: correct sleep clock frequency
  - arm64: dts: qcom: sm6125: correct sleep clock frequency
  - arm64: dts: qcom: sm4450: correct sleep clock frequency
  - arm64: dts: qcom: sdx75: correct sleep clock frequency
  - arm64: dts: qcom: sc7280: correct sleep clock frequency
  - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
  - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
  - arm64: dts: qcom: qcs404: correct sleep clock frequency
  - arm64: dts: qcom: msm8994: correct sleep clock frequency
  - arm64: dts: qcom: msm8939: correct sleep clock frequency
  - arm64: dts: qcom: msm8916: correct sleep clock frequency
  - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
  - arm64: dts: qcom: msm8994: Describe USB interrupts
  - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
  - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
  - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
  - ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
  - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
  - RDMA/srp: Fix error handling in srp_add_port
  - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
  - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
  - RDMA/rxe: Fix mismatched max_msg_sz
  - RDMA/rxe: Improve newline in printing messages
  - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
  - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
  - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
  - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
  - rdma/cxgb4: Prevent potential integer overflow on 32bit
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array
  - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
  - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
  - arm64: dts: mediatek: mt8516: add i2c clock-div property
  - arm64: dts: mediatek: mt8516: fix wdt irq type
  - arm64: dts: mediatek: mt8516: fix GICv2 range
  - arm64: dts: mt8183: set DMIC one-wire mode on Damu
  - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
  - ARM: at91: pm: change BU Power Switch to automatic mode
  - soc: atmel: fix device_node release in atmel_soc_device_init()
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
  - smb: client: fix oops due to unset link speed
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - perf lock: Fix parse_lock_type which only retrieve one lock flag
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake
  - pinctrl: stm32: Add check for clk_enable()
  - perf report: Fix misleading help message about --demangle
  - ASoC: Intel: avs: Fix theoretical infinite loop
  - ASoC: Intel: avs: Do not readq() u32 registers
  - ASoC: Intel: avs: Abstract IPC handling
  - ASoC: Intel: avs: Prefix SKL/APL-specific members
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
  - perf namespaces: Introduce nsinfo__set_in_pidns()
  - perf machine: Don't ignore _etext when not a text symbol
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
  - padata: fix sysfs store callback check
  - ALSA: seq: Make dependency on UMP clearer
  - ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
  - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
  - ktest.pl: Remove unused declarations in run_bisect_test function
  - perf expr: Initialize is_test value in expr__ctx_new()
  - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_btf()
  - crypto: caam - use JobR's space to access page 0 regs
  - selftests/bpf: Fix fill_link_info selftest on powerpc
  - ASoC: sun4i-spdif: Add clock multiplier settings
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
  - net/rose: prevent integer overflows in rose_setsockopt()
  - tcp_cubic: fix incorrect HyStart round start detection
  - net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
  - netfilter: nft_flow_offload: update tcp state flags under lock
  - netfilter: nf_tables: fix set size with rbtree backend
  - netfilter: nft_set_rbtree: prefer sync gc to async worker
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function
  - netfilter: nf_tables: de-constify set commit ops function argument
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - net: avoid race between device unregistration and ethnl ops
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64
  - net/mlxfw: Drop hard coded max FW flash image size
  - net: let net.core.dev_weight always be non-zero
  - pwm: stm32: Add check for clk_enable()
  - clk: analogbits: Fix incorrect calculation of vco rate delta
  - inet: ipmr: fix data-races
  - wifi: cfg80211: adjust allocation of colocated AP data
  - wifi: cfg80211: Handle specific BSSID in 6GHz scanning
  - selftests: harness: fix printing of mismatch values in __EXPECT()
  - selftests: timers: clocksource-switch: Adapt progress to kselftest framework
  - wifi: mt76: mt7996: fix ldpc setting
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
  - wifi: mt76: mt7996: fix HE Phy capability
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
  - wifi: mt76: mt7996: add max mpdu len capability
  - wifi: mt76: mt7996: fix register mapping
  - wifi: mt76: mt7915: fix register mapping
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset
  - wifi: mt76: mt7915: improve hardware restart reliability
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
  - landlock: Handle weird files
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
  - wifi: mac80211: don't flush non-uploaded STAs
  - wifi: mac80211: Fix common size calculation for ML element
  - wifi: mac80211: fix tid removal during mesh forwarding
  - wifi: mac80211: prohibit deactivating all links
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
  - wifi: wlcore: fix unbalanced pm_runtime calls
  - samples/landlock: Fix possible NULL dereference in parse_path()
  - mfd: syscon: Fix race in device_node_get_regmap()
  - mfd: syscon: Use scoped variables with memory allocators to simplify error paths
  - mfd: syscon: Add of_syscon_register_regmap() API
  - mfd: syscon: Remove extern from function prototypes
  - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
  - HID: fix generic desktop D-Pad controls
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
  - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
  - wifi: ath12k: fix tx power, max reg power update to firmware
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
  - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
  - ax25: rcu protect dev->ax25_ptr
  - regulator: of: Implement the unwind path of of_regulator_match()
  - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
  - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
  - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
  - team: prevent adding a device which is already a team device lower
  - clk: imx8mp: Fix clkout1/2 support
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
  - gpio: pca953x: log an error when failing to get the reset GPIO
  - gpio: pca953x: Fully convert to device managed resources
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
  - pwm: stm32-lp: Add check for clk_enable()
  - inetpeer: do not get a refcount in inet_getpeer()
  - inetpeer: update inetpeer timestamp in inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer_v[46]()
  - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
  - dt-bindings: mfd: bd71815: Fix rsense and typos
  - cpupower: fix TSC MHz calculation
  - ACPI: fan: cleanup resources in the error path of .probe()
  - wifi: brcmfmac: add missing header include for brcmf_dbg
  - regulator: dt-bindings: mt6315: Drop regulator-compatible property
  - HID: multitouch: fix support for Goodix PID 0x01e9
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
  - wifi: rtlwifi: remove unused check_buddy_priv
  - dt-bindings: leds: class-multicolor: Fix path to color definitions
  - clk: fix an OF node reference leak in of_clk_get_parent_name()
  - of: remove internal arguments from of_property_for_each_u32()
  - clk: si5351: allow PLLs to be adjusted without reset
  - serial: sc16is7xx: use device_property APIs when configuring irda mode
  - dt-bindings: mmc: controller: clarify the address-cells description
  - rxrpc: Fix handling of received connection abort
  - spi: zynq-qspi: Add check for clk_enable()
  - net_sched: sch_sfq: don't allow 1 packet limit
  - net_sched: sch_sfq: handle bigger packets
  - net_sched: sch_sfq: annotate data-races around q->perturb_period
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails
  - wifi: rtlwifi: wait for firmware loading before releasing memory
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
  - wifi: rtlwifi: do not complete firmware loading needlessly
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
  - ipmi: ipmb: Add check devm_kasprintf() returned value
  - drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
  - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
  - drm/msm: Check return value of of_dma_configure()
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
  - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
  - drm/amdgpu/vcn: reset fw_shared under SRIOV
  - drm/rockchip: vop2: include rockchip_drm_drv.h
  - drm/rockchip: move output interface related definition to rockchip_drm_drv.h
  - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
  - drm/rockchip: vop2: Fix the windows switch between different layers
  - drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
  - drm/rockchip: vop2: Set YUV/RGB overlay mode
  - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
  - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
  - drm/etnaviv: Fix page property being used for non writecombine buffers
  - drm/msm/dp: set safe_to_exit_level before printing it
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
  - sched/topology: Rename 'DIE' domain to 'PKG'
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
  - select: Fix unbalanced user_access_end()
  - partitions: ldm: remove the initial kernel-doc notation
  - selftests/powerpc: Fix argument order to timer_sub()
  - pstore/blk: trivial typo fixes
  - block: retry call probe after request_module in blk_request_module
  - fs: fix proc_handler for sysctl_nr_open
  - afs: Fix cleanup of immediately failed async calls
  - afs: Fix directory format encoding struct
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
  - dlm: fix srcu_read_lock() return type to int
  - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
  - !15477  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - !15472  PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - !15473  iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - !15474  OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - !15475  wifi: wcn36xx: fix channel survey memory allocation size
  - wifi: wcn36xx: fix channel survey memory allocation size
  - !15476  LoongArch: Fix warnings during S3 suspend
  - LoongArch: Fix warnings during S3 suspend
  - !15464 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Patches
  - drm/v3d: Assign job pointer to NULL before signaling the fence
  - Input: xpad - add support for wooting two he (arm)
  - Input: xpad - add support for Nacon Evol-X Xbox One Controller
  - Input: xpad - improve name of 8BitDo controller 2dc8:3106
  - Input: xpad - add QH Electronics VID/PID
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone
  - Input: atkbd - map F23 key to support default copilot shortcut
  - Input: xpad - add support for Nacon Pro Compact
  - ALSA: usb-audio: Add delay quirk for USB Audio Device
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
  - vfio/platform: check the bounds of read/write syscalls
  - cachestat: fix page cache statistics permission checking
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
  - net: sched: fix ets qdisc OOB Indexing
  - smb: client: handle lack of EA support in smb2_query_path_info()
  - libfs: Add simple_offset_rename() API
  - ASoC: samsung: Add missing depends on I2C
  - hwmon: (drivetemp) Set scsi command timeout to 10s
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
  - of/unittest: Add test that of_address_to_resource() fails on non-translatable address
  - drm/amd/display: Use HW lock mgr for PSR1
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
  - seccomp: Stub for !CONFIG_SECCOMP
  - ASoC: samsung: Add missing selects for MFD_WM8994
  - ASoC: wm8994: Add depends on MFD core
  - x86/xen: fix SLS mitigation in xen_hypercall_iret()
  - nfsd: add list_head nf_gc to struct nfsd_file
  - Revert "drm/amdgpu: rework resume handling for display (v2)"
  - fs: relax assertions on failure to encode file handles
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ocfs2: fix deadlock in ocfs2_get_system_file_inode
  - iio: imu: inv_icm42600: fix spi burst write not supported
  - Revert "PCI: Use preserve_config in place of pci_flags"
  - drm/amdgpu: always sync the GFX pipe on ctx switch
  - drm/i915/fb: Relax clear color alignment to 64 bytes
  - hrtimers: Handle CPU state correctly on hotplug
  - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
  - filemap: avoid truncating 64-bit offset to 32 bits
  - nouveau/fence: handle cross device fences properly
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
  - vsock: reset socket state when de-assigning the transport
  - vsock/virtio: cancel close work in the destructor
  - vsock/virtio: discard packets if the transport changes
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
  - selftests: mptcp: avoid spurious errors on disconnect
  - mptcp: fix spurious wake-up on under memory pressure
  - mptcp: be sure to send ack when mptcp-level window re-opens
  - i2c: atr: Fix client detach
  - zram: fix potential UAF of zram table
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
  - x86/asm: Make serialize() always_inline
  - nvmet: propagate npwg topology
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
  - smb: client: fix double free of TCP_Server_Info::hostname
  - i2c: rcar: fix NACK handling when being a target
  - i2c: mux: demux-pinctrl: check initial mux selection, too
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
  - hwmon: (tmp513) Fix division of negative numbers
  - soc: ti: pruss: Fix pruss APIs
  - drm/v3d: Ensure job pointer is set to NULL after job completion
  - drm/vmwgfx: Add new keep_resv BO param
  - net/mlx5e: Always start IPsec sequence number from 1
  - net/mlx5e: Rely on reqid in IPsec tunnel mode
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
  - net/mlx5: Clear port select structure when fail to create
  - net/mlx5: Fix RDMA TX steering prio
  - net: fec: handle page_pool_dev_alloc_pages error
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
  - pktgen: Avoid out-of-bounds access in get_imix_entries
  - openvswitch: fix lockup on tx to unregistering netdev with carrier
  - bpf: Fix bpf_sk_select_reuseport() memory leak
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
  - Revert "ovl: do not encode lower fh with upper sb_writers held"
  - Revert "ovl: pass realinode to ovl_encode_real_fh() instead of realdentry"
  - Revert "ovl: support encoding fid from inode with no alias"
  - !15608  perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - !15360  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15597  CVE-2025-21853
  - bpf: avoid holding freeze_mutex during mmap operation
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
  - !15603  Mainline patch merged into OLK-6.6
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix soft lockup during bt pages loop
  - !15430  cpufreq: Fix some boost errors related to CPU online and offline
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - !15568 [olk 6.6] some features for hibmcge driver
  - net: hibmcge: Add support for ioctl
  - net: hibmcge: Add support for BMC diagnose feature
  - net: hibmcge: Add support for mac link exception handling feature
  - net: hibmcge: Add support for abnormal irq handling feature
  - net: hibmcge: Add support for checksum offload
  - net: hibmcge: Add support for dump statistics
  - ethtool: Implement ethtool_puts()
  - !15357  blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - !15333 VirtCCA Feature: cvm support UEFI boot
  - Bug fix: Resolve the issue of host hard lockup
  - VirtCCA: The cvm removes the vcpu binding limit.
  - VirtCCA: Improve nfs workqueue bind method
  - VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port
  - VirtCCA: an interface to retrieve the TMI version is added
  - VirtCCA: cvm support UEFI boot
  - !15414 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - !15580  two bugfixs
  - mm/migrate: fix shmem xarray update during migration
  - mm: fix finish_fault() handling for large folios


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.79
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.80
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.81
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.82
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.83
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.84
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


