# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: Funda Wang <fundawang@yeah.net> - 2.41-14
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.94
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.95
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.96
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.97
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.98
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.99
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: Li Nan <linan122@huawei.com> - 6.6.0-96.0.0.100
changelog:
  - !16670  mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - !16668  Remove useless file
  - mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - Remove useless file
  - !15819 [OLK-6.6]drm/phytium: Fix some Bugs in Phytium Display Engine
  - !16627  fix move_pages return value
  - !16620  close_files(): don't bother with xchg()
  - !16604  pds_core: remove write-after-free of client_id
  - !16434  ksmbd: fix use-after-free in ksmbd_session_rpc_open
  - !16585  tracing: Fix oob write in trace_seq_to_buffer()
  - mm/migrate: convert add_page_for_migration() from follow_page() to folio_walk
  - mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
  - mm/pagewalk: introduce folio_walk_start() + folio_walk_end()
  - mm: introduce vma_pgtable_walk_{begin|end}()
  - mm/migrate: use folio_likely_mapped_shared() in add_page_for_migration()
  - !16537  md: fix mddev uaf while iterating all_mddevs list
  - !16538  md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - !16494  scsi: st: Fix array overflow in st_setup()
  - !16582  module: ensure that kobject_put() is safe for module type kobjects
  - !16605  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - !16606  CVE-2024-58100
  - close_files(): don't bother with xchg()
  - !16609 migration: update status after RAS error
  - !16586  dlm: prevent NPD when writing a positive value to event_done
  - !16580  dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - bpf: Fix kabi breakage for changes_pkt_data in struct bpf_prog_aux
  - bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
  - bpf: check changes_pkt_data property for extension programs
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - pds_core: remove write-after-free of client_id
  - !16571  Fix erofs fid overflow
  - !16574  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - !16550  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16549  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16600  ftrace: Fix preemption accounting for stacktrace trigger command
  - !16596  powerpc/crash: Fix non-smp kexec preparation
  - !16562 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 6.6
  - !16593  vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - finally take no_llseek out
  - migration: update status after RAS error
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - powerpc/crash: Fix non-smp kexec preparation
  - !16588  ipc: fix to protect IPCS lookups using RCU
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - ipc: fix to protect IPCS lookups using RCU
  - dlm: prevent NPD when writing a positive value to event_done
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - !16492  arm64/watchdog: fix watchdog failure in low power scenarios
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - erofs: fix file handle encoding for 64-bit NIDs
  - exportfs: define FILEID_INO64_GEN* file handle types
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - md: fix mddev uaf while iterating all_mddevs list
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - scsi: st: Fix array overflow in st_setup()
  - arm64/watchdog: fix watchdog failure in low power scenarios
  - drm/phytium: Fix some Bugs in Phytium Display Engine
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open


author: Li Nan <linan122@huawei.com> - 6.6.0-98.0.0.101
changelog:
  - !16740  KVM: arm64: check if IPIV is enabled in BIOS
  - !16737  drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - KVM: arm64: check if IPIV is enabled in BIOS
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - !16694  RDMA/hns: Fix double destruction of rsv_qp
  - !16730  uacce: removal of the Shared Memory Feature for Queues
  - !16727  perf: Remove unstable events for uncore L3C PMU
  - !16732  drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - !16728  drivers/perf: hisi: Add cacheable option for L3C PMU
  - !16724  drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - !16723  perf iostat: hisi: Fix port range retrival
  - !16729  arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - crypto: hisilicon/qm - check whether the input parameters and device PF match
  - uacce: removal of the Shared Memory Feature for Queues
  - arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - !16721 cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - !16701  Add HiSilicon uncore frequency scaling driver
  - !16712 crypto: hisilicon - support algorithm fallback v2
  - arm64: topology: Setup amu fie when cpu hotplugging
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - !16717  Fix issues of nfs mounting
  - !16714 v2  Fix file content inconsistency issue and incorporate subsequent fix patches
  - sched/topology: Add a new arch_scale_freq_ref() method
  - !16696  KVM: arm64: Check whether GICv4.0 is enabled
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - vfs: generate FS_CREATE before FS_OPEN when ->atomic_open used.
  - NFS: abort nfs_atomic_open_v23 if name is too long.
  - NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly.
  - !16680  Fix the problem of NFS client mount read/write permission failure
  - crypto: hisilicon/qm - check the value obtained from the hardware
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon - implement full backlog support for sec
  - uacce: add queue lock for uacce_get_ss_dma
  - uacce: use WARN_ON_ONCE instead of WARN_ON
  - !16705  fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16691 v3  Rewrite smt interference account logic
  - !16662  Fix watchdog false positive problem
  - !16711  af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16287 Update the watchdog period according to real CPU frequency
  - !16679  fs/resctrl: L2_MON does not support the limbo mechanism
  - openeuler_defconfig: Enable devfreq and hisi_uncore_freq by default
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - PM / devfreq: Allow devfreq driver to add custom sysfs ABIs
  - PM / devfreq: Check governor before using governor->name
  - PM / devfreq: Remove redundant devfreq_get_freq_range() calling in devfreq_add_device()
  - PM / devfreq: Limit max_freq with scaling_min_freq
  - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
  - mailbox: pcc: Refactor and simplify check_and_ack()
  - mailbox: pcc: Always map the shared memory communication address
  - mailbox: pcc: Refactor error handling in irq handler into separate function
  - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
  - mailbox: pcc: Return early if no GAS register from pcc_mbox_cmd_complete_check
  - mailbox: pcc: Drop unnecessary endianness conversion of pcc_hdr.flags
  - !16653 [OLK-6.6] Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - !16699  mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - KVM: arm64: Check whether GICv4.0 is enabled
  - RDMA/hns: Fix double destruction of rsv_qp
  - interference: Rewrite smt interference account logic
  - interference: Fix the compilation warning of sched_task_is_throttled()
  - !16686 v2  Soft domain improves and bugfixes
  - sched: Fix might sleep in atomic section issue
  - sched: Consider task affinity in wake_soft_domain()
  - sched: Fix soft domain group memleak
  - sched: Rework cpu.soft_domain_nr_cpu
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - !16639  arm64/mpam: Add MPAM manual
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"
  - !16651  iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: L2_MON does not support the limbo mechanism
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: Prevent idle RMIDs from not being released in time from limbo
  - arm64/mpam: Update the chip condition judgment in resctrl_arch_would_mbm_overflow()
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - arm64/mpam: Add MPAM manual


author: Li Nan <linan122@huawei.com> - 6.6.0-99.0.0.102
changelog:
  - !16556 [OLK-6.6] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16559 mm: mincore: use pte_batch_hint() to batch process large folios
  - !16689 mm/madvise: batch tlb flushes for MADV_DONTNEED and MADV_FREE
  - !16426 FIX CVE-2025-40014
  - !16601 add virtcca capability and kae vf interface
  - !16866 v2  mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16865  pci:vga fix race condition in vga_arb_write
  - !16770 [OLK-6.6] Intel: Backport to fix QuickAssist Technology(QAT) in-tree driver from v6.10 to v6.16
  - !16773  mm:userswap: change VM_USWAP_BIT to bit 61
  - !16820 v2  Fix some smmu bugs
  - !16803  CVE-2025-38060
  - !16828  orangefs: Do not truncate file size
  - !16812 perf hisi-ptt: Fix memory leak in lseek failure handling
  - !16827  btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - !16775 [OLK-6.6]fix enfs bug
  - !16861  arm64: kaslr: fix nokaslr cmdline parsing
  - mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16804  HID: uclogic: Add NULL check in uclogic_input_configured()
  - !16806  vhost-scsi: protect vq->log_used with vq->mutex
  - !14552 [OLK-6.6]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16573  Backport 6.6.64-6.6.72 LTS
  - !16757  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16756  mm: pcp: increase pcp->free_count threshold to trigger free_high
  - pci:vga fix race condition in vga_arb_write
  - !16656  merge CVE patches into OLK-6.6
  - !16512  perf/x86/intel: Only check the group flag for X86 leader
  - !16617  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16748  arm64: xcall: Fix GPR touch as the original step
  - !16778  drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - !16848  tracing: probes: Fix a possible race in trace_probe_log APIs
  - !16842  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16837  ftrace: Fix preemption accounting for stacktrace filter command
  - !16845  bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - !16652 v2  CVE-2025-37948
  - !16791  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16851  drm/amd/display: Increase block_sequence array size
  - drm/amd/display: Increase block_sequence array size
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace filter command
  - orangefs: Do not truncate file size
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - iommu/arm-smmu-v3: Fix the problematic platform detection logic
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - fix review issue
  - vhost-scsi: protect vq->log_used with vq->mutex
  - perf hisi-ptt: Fix memory leak in lseek failure handling
  - HID: uclogic: Add NULL check in uclogic_input_configured()
  - bpf: abort verification if env->cur_state->loop_entry != NULL
  - bpf: copy_verifier_state() should copy 'loop_entry' field
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - fix enfs bug
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - mm:userswap: change VM_USWAP_BIT to bit 61
  - crypto: qat - switch to standard pattern for PCI IDs
  - crypto: qat - remove BITS_IN_DWORD()
  - crypto: qat - remove initialization in device class
  - crypto: qat - add shutdown handler to qat_c3xxx
  - crypto: qat - remove redundant prototypes in qat_c3xxx
  - crypto: qat - add shutdown handler to qat_c62x
  - crypto: qat - remove redundant prototypes in qat_c62x
  - crypto: qat - add shutdown handler to qat_dh895xcc
  - crypto: qat - remove redundant prototypes in qat_dh895xcc
  - crypto: qat - add shutdown handler to qat_420xx
  - crypto: qat - add shutdown handler to qat_4xxx
  - crypto: qat - Remove dst_null support
  - crypto: qat - remove access to parity register for QAT GEN4
  - crypto: qat - set parity error mask for qat_420xx
  - crypto: qat - optimize allocations for fw authentication
  - crypto: qat - remove redundant FW image size check
  - crypto: qat - remove unused members in suof structure
  - crypto: qat - introduce fuse array
  - crypto: qat - add macro to write 64-bit values to registers
  - crypto: qat - refactor service parsing logic
  - crypto: qat - do not export adf_cfg_services
  - crypto: qat - reorder objects in qat_common Makefile
  - crypto: qat - fix object goals in Makefiles
  - crypto: qat - set command ids as reserved
  - crypto: drivers - Use str_enable_disable-like helpers
  - vfio/qat: fix overflow check in qat_vf_resume_write()
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
  - crypto: qat - Fix typo "accelaration"
  - crypto: qat - Constify struct pm_status_row
  - crypto: qat - remove unused adf_devmgr_get_first
  - lib/string_choices: Add str_up_down() helper
  - crypto: qat - Remove trailing space after 
  - crypto: qat - fix "Full Going True" macro definition
  - crypto: qat - Use static_assert() to check struct sizes
  - crypto: qat - allow disabling SR-IOV VFs
  - crypto: qat - ensure correct order in VF restarting handler
  - crypto: qat - fix recovery flow for VFs
  - crypto: qat - disable IOV in adf_dev_stop()
  - crypto: qat - preserve ADF_GENERAL_SEC
  - crypto: qat - initialize user_input.lock for rate_limiting
  - crypto: qat - make adf_ctl_class constant
  - crypto: qat - Fix typo
  - crypto: qat - fix linking errors when PCI_IOV is disabled
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - mm: pcp: increase pcp->free_count threshold to trigger free_high
  - mm: page_alloc: remove redundant READ_ONCE
  - arm64: xcall: Fix GPR touch as the original step
  - mm/madvise: handle madvise_lock() failure during race unwinding
  - mm/madvise: batch tlb flushes for MADV_DONTNEED[_LOCKED]
  - mm/memory: split non-tlb flushing part from zap_page_range_single()
  - mm/madvise: batch tlb flushes for MADV_FREE
  - mm/madvise: define and use madvise_behavior struct for madvise_do_behavior()
  - mm/madvise: remove len parameter of madvise_do_behavior()
  - mm/madvise: remove redundant mmap_lock operations from process_madvise()
  - mm/madvise: split out madvise() behavior execution
  - mm/madvise: split out madvise input validity check
  - mm/madvise: split out mmap locking operations for madvise()
  - mm/madvise: unrestrict process_madvise() for current process
  - mm/madvise: don't perform madvise VMA walk for MADV_POPULATE_(READ|WRITE)
  - crypto: iaa - Fix potential use after free bug
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
  - mm: migrate_device: use more folio in migrate_device_finalize()
  - Revert "remoteproc: core: Clear table_sz when rproc_shutdown"
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - jfs: fix slab-out-of-bounds read in ea_get()
  - tpm: do not start chip while suspended
  - KVM: arm64: Tear down vGIC on failed vCPU creation
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  - arm64: proton-pack: Expose whether the branchy loop k value
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware
  - arm64: insn: Add support for encoding DSB
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
  - arm64: cputype: Add MIDR_CORTEX_A76AE
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
  - add virtcca capability and kae vf interface
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - seq_buf: Make DECLARE_SEQ_BUF() usable
  - seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
  - mm: mincore: use pte_batch_hint() to batch process large folios
  - perf/x86/intel: Only check the group flag for X86 leader
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap


author: Li Nan <linan122@huawei.com> - 6.6.0-100.0.0.103
changelog:
  - !17003  net_sched: red: fix a race in __red_change()
  - !16747  LoongArch: Fix bugs in huge_pte_offset/__alloc_pages_slowpath/iommu
  - !17026  CVE-2025-37842
  - !17022  spi-rockchip: Fix register out of bounds access
  - !17039  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17036  parisc: Fix double SIGFPE crash
  - !17001  Fix CVE-2025-38182
  - !17034  fix CVE-2025-38118
  - !17033  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - !17035  drm/amdkfd: Fix mode1 reset crash issue
  - !16792 v3  Support CCA Guest
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17023  bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - parisc: Fix double SIGFPE crash
  - drm/amdkfd: Fix mode1 reset crash issue
  - Bluetooth: MGMT: Fix sparse errors
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - spi: fsl-qspi: Fix double cleanup in probe error path
  - spi: fsl-qspi: use devm function instead of driver remove
  - !16991  hwmon: (asus-ec-sensors) check sensor index in read_string()
  - !17014 v2  CVE-2025-38099
  - !17013  crypto: null - Use spin lock instead of mutex
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - spi-rockchip: Fix register out of bounds access
  - !16983  crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - !16982  KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16957  f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16999  octeon_ep: Fix host hang issue during device reboot
  - !16995  f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - !17000 v2  mm: respect mmap hint address when aligning for THP
  - !17006  drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken
  - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING
  - crypto: null - Use spin lock instead of mutex
  - !16467 drm/virtio: implement virtio_gpu_shutdown
  - !16565 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16743 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !16902  cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16994  net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16996  wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - net_sched: red: fix a race in __red_change()
  - ublk: santizize the arguments from userspace when adding a device
  - mm: respect mmap hint address when aligning for THP
  - octeon_ep: Fix host hang issue during device reboot
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16988  Fix compile problem for psi_grained
  - hwmon: (asus-ec-sensors) check sensor index in read_string()
  - Fix compile problem for psi_grained
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16969  Fix CVE-2025-38170
  - !16967  net: openvswitch: Fix the dead loop of MPLS parse
  - !16964  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - !16891 fix some build errors of enfs
  - net: openvswitch: Fix the dead loop of MPLS parse
  - dma-buf: insert memory barrier before updating num_fences
  - !16557 [OLK-6.6] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16919  Backport mainline patches
  - f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16567 [OLK-6.6]:update patches for sw64 architecture
  - !16897  CVE-2025-37784
  - !16922 v2  irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16926  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16912 Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16908  OLK-6.6 Bperf
  - !16603 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.83-6.6.84 LTS Patches
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16906  rseq: Fix segfault on registration when rseq_cs is non-zero
  - xfrm: Clear low order bits of ->flowi4_tos in decode_session4().
  - xfrm: policy: fix layer 4 flowi decoding
  - xfrm: policy: replace session decode with flow dissector
  - xfrm: move mark and oif flowi decode into common code
  - xfrm: pass struct net to xfrm_decode_session wrappers
  - !16898  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16903  some optimization patches for inet_diag dump
  - Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16895 virtCCA supports SR-IOV in CoDA scenarios.
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf stat: Support inherit events during fork() for bperf
  - !16896  drm/v3d: Add job to pending list if the reset was skipped
  - rseq: Fix segfault on registration when rseq_cs is non-zero
  - inet_diag: skip over empty buckets
  - sock_diag: remove sock_diag_mutex
  - inet_diag: allow concurrent operations
  - inet_diag: add module pointer to "struct inet_diag_handler"
  - cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16780 v2  mm/mem_sampling: add trace event for spe based damon record
  - !16781 v4  mm/mem_sampling: fix some mem sampling issues
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
  - net: ti: icss-iep: Add phase offset configuration for perout signal
  - net: ti: icss-iep: Add pwidth configuration for perout signal
  - drm/v3d: Add job to pending list if the reset was skipped
  - !16753  nfs: handle failure of nfs_get_lock_context in unlock path
  - !16237  pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  - virtCCA supports SR-IOV in CoDA scenarios.
  - sunrpc, nfs: CONFIG_ENFS should select CONFIG_SUNRPC_ENFS
  - sunrpc, nfs: fix build errors when CONFIG_SUNRPC_ENFS=m && CONFIG_ENFS=m && CONFIG_NFS=y
  - nfs: fix build errors when CONFIG_ENFS=m && CONFIG_NFS_FS=y
  - nfs: fix enfs mount failure when CONFIG_ENFS=y
  - sw64: adapt to the upstream changes in huge_ptep_get_and_clear
  - sw64: sort arch/sw64/Kconfig
  - sw64: iommu: implement map_pages/unmap_pages API
  - gicv3: add lpi support for virtcca cvm guest
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry
  - configfs-tsm-report: Fix NULL dereference of tsm_ops
  - arm64: Document Arm Confidential Compute
  - virt: arm-cca-guest: TSM_REPORT support for realms
  - mm/slab: Add __free() support for kvfree
  - configfs-tsm: Introduce a shared ABI for attestation reports
  - virt: coco: Add a coco/Makefile and coco/Kconfig
  - arm64: realm: Use aliased addresses for device DMA to shared buffers
  - dma: Introduce generic dma_addr_*crypted helpers
  - dma: Fix encryption bit clearing for dma_to_phys
  - rme: make sure realm guest map memory in page granularity
  - arm64: realm: ioremap: Allow mapping memory as encrypted
  - parisc: Delay write-protection until mark_rodata_ro() call
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys
  - irqchip/gic-v3-its: Rely on genpool alignment
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool()
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor
  - arm64: Enable memory encrypt for Realms
  - arm64: mm: Avoid TLBI when marking pages as valid
  - arm64: Enforce bounce buffers for realm DMA
  - efi: arm64: Map Device with Prot Shared
  - arm64: rsi: Map unprotected MMIO as decrypted
  - arm64: rsi: Add support for checking whether an MMIO is protected
  - arm64: realm: Query IPA size from the RMM
  - arm64: Detect if in a realm and set RIPAS RAM
  - arm64: rsi: Add RSI definitions
  - arm64: mm: Add confidential computing hook to ioremap_prot()
  - arm64: mm: Add top-level dispatcher for internal mem_encrypt API
  - Revert "gicv3: add lpi support for cvm guest"
  - Revert "virtcca feature : disable swiotlb for passthrough device"
  - mm/mem_sampling: Fix inaccurate sampling for NUMA balancing and DAMON
  - mm/mem_sampling: Prevent mem_sampling from being enabled if SPE init failed
  - mm/mem_sampling: add trace event for spe based damon record
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - iommu/loongarch: fix potential hung task when error occurred
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
  - ksmbd: fix r_count dec/increment mismatch
  - Input: xpad - fix two controller table values
  - cifs: Ensure that all non-client-specific reparse points are processed by the server
  - nvme: unblock ctrl state transition for firmware update
  - vboxsf: Add __nonstring annotations for unterminated strings
  - netfilter: nf_tables: allow clone callbacks to sleep
  - netfilter: nf_tables: bail out if stateful expression provides no .clone
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - rust: lockdep: Remove support for dynamically allocated LockClassKeys
  - HID: apple: disable Fn key handling on the Omoton KB066
  - nvme-fc: rely on state transitions to handle connectivity loss
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
  - smb: client: Fix match_session bug preventing session reuse
  - smb3: add support for IAKerb
  - i2c: sis630: Fix an error handling path in sis630_probe()
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
  - i2c: ali1535: Fix an error handling path in ali1535_probe()
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
  - cifs: Validate content of WSL reparse point buffers
  - cifs: Fix integer overflow while processing closetimeo mount option
  - cifs: Fix integer overflow while processing actimeo mount option
  - scripts: generate_rust_analyzer: add missing macros deps
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
  - ASoC: rt722-sdca: add missing readable registers
  - rust: init: add missing newline to pr_info! calls
  - ASoC: cs42l43: Fix maximum ADC Volume
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
  - rust: error: add missing newline to pr_warn! calls
  - ASoC: ops: Consistently treat platform_max as control value
  - smb: client: fix regression with guest option
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
  - arm64: mm: Populate vmemmap at the page level if not section aligned
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
  - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
  - ksmbd: prevent connection release during oplock break notification
  - ksmbd: fix use-after-free in ksmbd_free_work_struct
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14
  - drm/amd/display: Restore correct backlight brightness after a GPU reset
  - drm/amd/display: Disable unneeded hpd interrupts during dm_init
  - drm/dp_mst: Fix locking when skipping CSN before topology probing
  - drm/atomic: Filter out redundant DPMS calls
  - drm/i915/cdclk: Do cdclk post plane programming later
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - USB: serial: option: match on interface class for Telit FN990B
  - USB: serial: option: fix Telit Cinterion FE990A name
  - USB: serial: option: add Telit Cinterion FE990B compositions
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
  - Input: i8042 - swap old quirk combination with new quirk for more devices
  - Input: i8042 - swap old quirk combination with new quirk for several devices
  - Input: i8042 - add required quirks for missing old boardnames
  - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
  - Input: xpad - rename QH controller to Legion Go S
  - Input: xpad - add support for TECNO Pocket Go
  - Input: xpad - add support for ZOTAC Gaming Zone
  - Input: xpad - add multiple supported devices
  - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
  - Input: iqs7222 - preserve system status register
  - Input: ads7846 - fix gpiod allocation
  - io_uring: use unpin_user_pages() where appropriate
  - io_uring/kbuf: vmap pinned buffer ring
  - io_uring: use vmap() for ring mapping
  - io_uring: fix corner case forgetting to vunmap
  - io_uring: don't attempt to mmap larger than what the user asks for
  - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
  - mm: add nommu variant of vm_insert_pages()
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - net: Handle napi_schedule() calls from non-interrupt
  - drm/nouveau: Do not override forced connector status
  - mptcp: safety check before fallback
  - x86/irq: Define trace events conditionally
  - perf/x86/intel: Use better start period for frequency mode
  - drm/vkms: Round fixp2int conversion in lerp_u16
  - fuse: don't truncate cached, mutated symlink
  - ASoC: tas2764: Set the SDOUT polarity correctly
  - ASoC: tas2764: Fix power control mask
  - ASoC: tas2770: Fix volume scale
  - nvme: only allow entering LIVE from CONNECTING state
  - sctp: Fix undefined behavior in left shift operation
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
  - apple-nvme: Release power domains when probe fails
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
  - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
  - io-wq: backoff when retrying worker creation
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
  - ASoC: rsnd: adjust convert rate limitation
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
  - ASoC: rsnd: indicate unsupported clock rate
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
  - ASoC: simple-card-utils.c: add missing dlc->of_node
  - selftests/bpf: Fix invalid flag of recv()
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
  - Xen/swiotlb: mark xen_swiotlb_fixup() __init
  - thermal/cpufreq_cooling: Remove structure member documentation
  - s390/cio: Fix CHPID "configure" attribute caching
  - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
  - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
  - sched: Clarify wake_up_q()'s write to task->wake_q.next
  - objtool: Ignore dangling jump table entries
  - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
  - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
  - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
  - usb: phy: generic: Use proper helper for property detection
  - HID: ignore non-functional sensor in HP 5MP Camera
  - HID: intel-ish-hid: Send clock sync message immediately after reset
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
  - vboxsf: fix building with GCC 15
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
  - smb: client: fix noisy when tree connecting to DFS interlink targets
  - ACPI: resource: IRQ override for Eluktronics MECH-17
  - scsi: ufs: core: Fix error return with query response
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
  - sched/debug: Provide slice length for fair tasks
  - powercap: call put_device() on an error path in powercap_register_control_type()
  - hrtimers: Mark is_migration_base() with __always_inline
  - nvme-fc: do not ignore connectivity loss during connecting
  - nvme-fc: go straight to connecting state when initializing
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
  - net/mlx5: Bridge, fix the crash caused by LAG state check
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
  - net: openvswitch: remove misbehaving actions length check
  - netfilter: nft_exthdr: fix offset with ipv4_find_option()
  - net_sched: Prevent creation of classes with TC_H_ROOT
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
  - bonding: fix incorrect MAC address setting to receive NS messages
  - net: switchdev: Convert blocking notification chain to a raw one
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
  - net/mlx5: handle errors in mlx5_chains_create_table()
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
  - netpoll: hold rcu read lock in __netpoll_send_skb()
  - net: mctp i2c: Copy headers if cloned
  - net: dsa: mv88e6xxx: Verify after ATU Load ops
  - net/mlx5: Fill out devlink dev info only for PFs
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
  - Bluetooth: hci_event: Fix enabling passive scanning
  - sched: address a potential NULL pointer dereference in the GRED scheduler.
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
  - ice: fix memory leak in aRFS after reset
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
  - tcp: fix forever orphan socket caused by tcp_abort
  - tcp: fix races in tcp_abort()
  - hrtimer: Use and report correct timerslack values for realtime tasks
  - zram: fix NULL pointer in comp_algorithm_show()
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
  - clockevents/drivers/i8253: Fix stop sequence for timer 0
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: ftrace: Add direct call trampoline samples support
  - sw64: ftrace: Add direct call support
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: perf: fix perf test 'import perf' in python failed
  - sw64: add support for function error injection
  - sw64: add sw64 rethook implementation
  - sw64: emit fixed-length instructions for BPF_PSEUDO_FUNC
  - sw64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  - drm/virtio: implement virtio_gpu_shutdown
  - virtgpu: don't reset on shutdown
  - virtio: break and reset virtio devices on device_shutdown()
  - LoongArch: sync kvm head file from upstream
  - LoongArch: fix migrate issue
  - LoongArch: Save and restore CSR.CNTC for hibernation
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result


author: Li Nan <linan122@huawei.com> - 6.6.0-101.0.0.104
changelog:
  - !17041 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Conflicts Patches
  - !17126  EDAC/skx_common: Fix general protection fault
  - !17136  xcall xint 644
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - !17070  arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - !17106  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17120 v3  mm: batched unmap lazyfree large folios
  - EDAC/skx_common: Fix general protection fault
  - mm/rmap: fix potential out-of-bounds page table access during batched unmap
  - mm: avoid splitting pmd for lazyfree pmd-mapped THP in try_to_unmap
  - mm: support batched unmap for lazyfree large folios during reclamation
  - mm: support tlbbatch flush for a range of PTEs
  - mm: set folio swapbacked iff folios are dirty in try_to_unmap_one
  - !16998  arm64/mpam: Fix L2 monitor issue under CDP mode
  - !17107  CVE-2025-38322
  - !16947 [OLK-6.6] Fix patches for X2avic to backport for OLK-6.6
  - !17092  drm/amd/display: Fix && vs || typos
  - perf/x86/intel: Fix crash in icl_update_topdown_event()
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
  - perf/x86/intel: Apply static call for drain_pebs
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !16884  fs: Backport four namespace fix patches
  - !17094  config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - config: Set TSM_REPORTS=m and ARM_CCA_GUEST=m
  - drm/amd/display: Fix && vs || typos
  - !17071  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !17068  mcb: fix a double free bug in chameleon_parse_gdd()
  - !17062  bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !16956 v3  config: Enable CONFIG_VIRT_DRIVERS
  - !16950 perf: Add support for SPE Data Source packet on HiSilicon HIP12
  - usb: dwc3: gadget: check that event count does not exceed event buffer length
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - mcb: fix a double free bug in chameleon_parse_gdd()
  - bnxt_en: Mask the bd_cnt field in the TX BD properly
  - !17055  bpf lts backport
  - !17054  bpf verifier fixes
  - !17049  platform/x86: dell_rbu: Fix list usage
  - !17059  media: cxusb: no longer judge rbuf when the write fails
  - !16462 fix  CVE-2025-22101
  - media: cxusb: no longer judge rbuf when the write fails
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - selftests/bpf: Add tests with stack ptr register in conditional jmp
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping
  - selftests/bpf: precision tracking test for BPF_NEG and BPF_END
  - platform/x86: dell_rbu: Fix list usage
  - fs/Kconfig: make hugetlbfs a menuconfig
  - workqueue: Update lock debugging code
  - memblock: use numa_valid_node() helper to check for invalid node ID
  - perf mem: Count L2 HITM for c2c statistic
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64: cputype: Add cputype definition for HIP12
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - arm64/mpam: Fix L2 monitor issue under CDP mode
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit()
  - config: Enable CONFIG_VIRT_DRIVERS
  - KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
  - path_overmount(): avoid false negatives
  - net: libwx: fix Tx L4 checksum


author: Li Nan <linan122@huawei.com> - 6.6.0-102.0.0.105
changelog:
  - !17076  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17102  smb: client: fix use-after-free in cifs_oplock_break
  - !17240  some fix for spe hotcold
  - !17159 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Conflicts Patches
  - !17206  driver core: Use kasprintf() instead of fixed buffer formatting
  - mm_monitor/mm_spe: Embed boost events within SPE packets
  - mm_monitor/mm_spe: Fix SPE boost enablement and continuation handling
  - !17161  olk-6.6-backport-bugfix-for-dynamic-affinity
  - !17150  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !17153  f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17154  media: vivid: Change the siize of the composing
  - !17238 v2  net: Fix kabi breakage for defer_free_list in struct net
  - !17237 RDMA/hns: Fix HW configurations not cleared in error flow
  - net: Fix kabi breakage for defer_free_list in struct net
  - RDMA/hns: Fix HW configurations not cleared in error flow
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Remove redundant hnae3.h in bond and sysfs
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - RDMA/hns: Get messgae length of ack_req from FW
  - !17229 net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
  - !17032  fbcon: Make sure modelist not set on unregistered console
  - !16958  scsi: target: iscsi: Fix timeout on deleted connection
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: add complete parentheses for some macros
  - net: hns3: use hns3_get_ops() helper to reduce the unnecessary middle layer conversion
  - net: hns3: use hns3_get_ae_dev() helper to reduce the unnecessary middle layer conversion
  - net: hns3: delete redundant address before the array
  - net: hns3: clear hns alarm: comparison of integer expressions of different signedness
  - net: hns3: add \n at the end when print msg
  - Revert "net: hns3: add \n at the end when print msg"
  - !17201 net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - !17215  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17214  netfilter: nf_set_pipapo_avx2: fix initial map fill
  - !17213  net: fix udp gso skb_segment after pull from frag_list
  - !17212  ice: fix Tx scheduler error handling in XDP callback
  - !17207  net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17200  xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - !17199  tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - !17198  bpf: consider that tail calls invalidate packet pointers
  - !17197  net: stmmac: Fix accessing freed irq affinity_hint
  - !17196  mptcp: fix NULL pointer in can_accept_new_subflow
  - !17194  tipc: fix memory leak in tipc_link_xmit
  - !17193  net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - !17192  cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - !17184  sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - !17181  net: fix NULL pointer dereference in l3mdev_l3_rcv
  - !17101  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17191  net: mctp: Set SOCK_RCU_FREE
  - !17190  usbnet:fix NPE during rx_complete
  - !17189  net: ibmveth: make veth_pool_store stop hanging
  - !17188  arcnet: Add NULL check in com20020pci_probe()
  - !17187  net: fix geneve_opt length integer overflow
  - !17186  udp: Fix memory accounting leak.
  - !17185  net: mvpp2: Prevent parser TCAM memory corruption
  - !17182  net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - !17179  net: dsa: free routing table on probe failure
  - !17178  sctp: detect and prevent references to a freed transport in sendmsg
  - !17177  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17176  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17175  net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - !17174  net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17172  xsk: fix an integer overflow in xp_create_and_assign_umem()
  - !17171  net: atm: fix use after free in lec_send()
  - !17170  eth: bnxt: fix truesize for mb-xdp-pass case
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - netfilter: nf_set_pipapo_avx2: fix initial map fill
  - net: fix udp gso skb_segment after pull from frag_list
  - ice: fix Tx scheduler error handling in XDP callback
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  - !17016 [OLK-6.6]:update patches for sw64 architecture
  - driver core: Use kasprintf() instead of fixed buffer formatting
  - !17074  ext4: only dirty folios when data journaling regular files
  - !16951  wifi: ath9k_htc: Abort software beacon handling if disabled
  - net: hns3: reduce stack usage in hclge_dbg_dump_tm_pri()
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - Revert "net: hns3: Resolved the issue that the debugfs query result is inconsistent."
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - Revert "net: hns3: initialize reset_timer before hclgevf_misc_irq_init()"
  - net: hns3: Use ARRAY_SIZE() to improve readability
  - Revert "net: hns3: fix spelling mistake "reg_um" -> "reg_num""
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  - bpf: consider that tail calls invalidate packet pointers
  - net: stmmac: Fix accessing freed irq affinity_hint
  - mptcp: fix NULL pointer in can_accept_new_subflow
  - tipc: fix memory leak in tipc_link_xmit
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  - net: mctp: Set SOCK_RCU_FREE
  - usbnet:fix NPE during rx_complete
  - net: ibmveth: make veth_pool_store stop hanging
  - arcnet: Add NULL check in com20020pci_probe()
  - net: fix geneve_opt length integer overflow
  - !16850 [OLK-6.6] Backport TDX HLT/SAFE-HLT fix
  - udp: Fix memory accounting leak.
  - net: mvpp2: Prevent parser TCAM memory corruption
  - sctp: add mutual exclusion in proc_sctp_do_udp_port()
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  - net: fix NULL pointer dereference in l3mdev_l3_rcv
  - net: dsa: free routing table on probe failure
  - sctp: detect and prevent references to a freed transport in sendmsg
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind
  - !17137 [olk 6.6] net: hibmcge: backport some feature patches
  - xsk: fix an integer overflow in xp_create_and_assign_umem()
  - net: atm: fix use after free in lec_send()
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - !17156  v3:add perpcu stock for kmem
  - scsi: ufs: core: Set default runtime/system PM levels before ufshcd_hba_init()
  - libfs: Fix simple_offset_rename_exchange()
  - shmem: Fix shmem_rename2()
  - mac802154: check local interfaces before deleting sdata list
  - hfs: Sanity check the root record
  - !17109 efi: efi_get_memory_map -- increase map headroom
  - !17148  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - sched/dynamic_affinity: fix CI test alway select prefer_cpu problem
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - sched/fair: reset idlest_cpu if not meet the conditions for preferred CPU
  - memcg: add stock for kmem [un]charging
  - memcg: add CONFIG_MEMCG_KMEM_STOCK
  - scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
  - selftests: tc-testing: reduce rshift value
  - media: vivid: Change the siize of the composing
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  - !17124  crypto: algif_hash - fix double free in hash_accept
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - net: hibmcge: configure FIFO thresholds according to the MAC controller documentation
  - net: hibmcge: adjust the burst len configuration of the MAC controller to improve TX performance.
  - net: hibmcge: support scenario without PHY
  - net: phy: fixed_phy: constify status argument where possible
  - net: phy: fixed_phy: remove irq argument from fixed_phy_register
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
  - net: phy: fixed_phy: remove irq argument from fixed_phy_add
  - net: phy: fixed_phy: remove fixed_phy_register_with_gpiod
  - !17140 v2  Cgroup-Based Interference Statistics followup
  - interference: Add distribution histogram support
  - interference: Use hardware timer counter
  - interference: Add mutex interference track support
  - interference: Add spinlock interference track support
  - interference: Add cgroup_ifs_enter/leave_lock helper
  - interference: Disable irq track when irqtime disabled
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support
  - sw64: Kconfig: enable HAS_IOPORT by default
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - ext4: only dirty folios when data journaling regular files
  - Fix kabi for TDX halt/safe-halt
  - fbcon: Make sure modelist not set on unregistered console
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: restore the register storing direct call address
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - scsi: target: iscsi: Fix timeout on deleted connection
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT


author: Li Nan <linan122@huawei.com> - 6.6.0-103.0.0.106
changelog:
  - !17341 v7  arm64: Add hardware xcall framework support
  - !17336  fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17308  arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - arm64: Add hardware xcall framework support
  - arm64: Reserve a kabi in task_struct exclusively for xcall
  - arm64: Refactor the xcall proc code
  - !17259  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - !17335 ROH: fix security issues and eliminate redundancies
  - ROH: fix security issues and eliminate redundancies
  - arm64/mpam: Ensure the err variable is initialized
  - fs/resctrl: Enqueue mon_event_count() forcefully for MPAM
  - !17261 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - !17296  nvmet-tcp: don't restore null sk_state_change
  - !17299  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17310  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17305  CVE-2025-38264
  - !17303  sched/fair: Only increment deadline once on yield
  - !17266 unify log function usage of enfs
  - arm64: Fix guest app segment fault when disable_sdei_nmi_watchdog
  - nvme-tcp: sanitize request list handling
  - llist: add interface to check if a node is on a list.
  - !17255  inspector: hold module refcnt when cpu inspector is running
  - !17291  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - sched/fair: Only increment deadline once on yield
  - nfs/enfs: use enfs_log_error() instead of pr_err() in enfs
  - nfs/enfs: use enfs_log_info() instead of pr_info() in enfs
  - nfs/enfs: cleanups in enfs/shard_route.c
  - nfs/enfs: use enfs_log_debug() instead of pr_debug() to debug enfs
  - nfs/enfs: remove unused code in enfs/dns_internal.h
  - nfs/enfs: use enfs_log_debug() instead of dfprintk() to debug enfs
  - nfs: use dfprintk() to debug enfs
  - !17262 v2  ifs: Defer cgroup ifs enable
  - !17287  i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - nvmet-tcp: don't restore null sk_state_change
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !17275  fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  - !17273  atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  - !17246 MPTCP UPTREAM PART25
  - ifs: Defer cgroup ifs enable
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - inspector: hold module refcnt when cpu inspector is running
  - selftests: mptcp: join: validate event numbers(part 2)
  - selftests: mptcp: pm_nl_ctl: remove re-definition
  - selftests: mptcp: join: simplify checksum_tests
  - selftests: mptcp: join: mute errors when ran in the background
  - selftests: mptcp: join: specify host being checked
  - selftests: mptcp: join: more explicit check name
  - selftests: mptcp: join: validate MPJ SYN TX MIB counters
  - selftests: mptcp: join: one line for join check
  - selftests: mptcp: join: reduce join_nr params
  - mptcp: MIB counters for sent MP_JOIN
  - mptcp: pm: reduce entries iterations on connect
  - mptcp: pm: fix backup support in signal endpoints
  - mptcp: pm: rename helpers linked to 'flush'
  - mptcp: Remove unused declaration mptcp_sockopt_sync()
  - !17250  arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - !17253  mm: fix uprobe pte be overwritten when expanding vma
  - !16602 【OLK-6.6】修复虚拟机下使用海光TKM功能可能返回TKM_UNSUPPORTED_CMD错误
  - !16797 【OLK-6.6】修复psp_mutex_lock_timeout超时触发soft lockup警告的问题
  - mm: fix uprobe pte be overwritten when expanding vma
  - arm64/mpam: Fix incorrect CPU-to-partid binding under CDP mode
  - arm64/mpam: Fix typo in resctrl_arch_set_cdp_enabled()
  - drivers/crypto/ccp: fix soft lockup warning in psp_mutex_lock_timeout()
  - crypto: ccp: fix The high priority queue changes cmd_id of the queued elements


author: Li Nan <linan122@huawei.com> - 6.6.0-104.0.0.107
changelog:
  - !17385 mptcp: pm: only set fullmesh for subflow endp
  - !17445  xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - !17444  Backport mainline patch
  - !17395  Squashfs: check return result of sb_min_blocksize
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
  - bonding: check xdp prog when set bond mode
  - bonding: return detailed error when loading native XDP fails
  - !17436  i2c/designware: Fix an initialization issue
  - !17432  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17421  ACPICA: fix acpi operand cache leak in dswstate.c
  - !17422  soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - !17423  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17301  fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - !17304  nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - !17331  dm-bufio: fix sched in atomic context
  - !17413  CVE-2025-37957
  - !17412 v3  livepatch: support for super-long symbol repositioning
  - !16933  virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - !16932  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17430  drm/v3d: Disable interrupts before resetting the GPU
  - i2c/designware: Fix an initialization issue
  - !17254 irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17406  usb: net: sierra: check for no status endpoint
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17393  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  - ACPICA: fix acpi operand cache leak in dswstate.c
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
  - livepatch: support for super-long symbol repositioning
  - usb: net: sierra: check for no status endpoint
  - !17380  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - mptcp: pm: only set fullmesh for subflow endp
  - !17115  xfs: fix attr inactive issue
  - Squashfs: check return result of sb_min_blocksize
  - selftests/tracing: Fix false failure of subsystem event test
  - !17390  ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17387  ipvlan: ensure network headers are in skb linear part
  - ipvlan: Fix out-of-bound bugs in ipvlan_xmit_mode_l2e()
  - !17205 fix some panic bugs and memory leak bugs of enfs
  - ipvlan: ensure network headers are in skb linear part
  - !17271 LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - !17251 migration: update status after RAS error
  - !17278 nvme: update firmware version after commit
  - !17330  livepatch: fix insn length check
  - irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !17372  drm/amd/display: Add null pointer check for get_first_active_display()
  - !17349  bnxt: properly flush XDP redirect lists
  - !17375  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - !17367  fd/proc: modify xcall proc file permissions to 640
  - !17346  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17222  fs: Add additional checks for block devices during mount
  - !17168  xfrm: state: fix out-of-bounds read during lookup
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17141 CVE-2025-37992：net_sched: Flush gso_skb list too during -&gt;change()
  - !17364  net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - !17167  eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - !17371  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - !17362  ucounts: fix mq_perf test error.
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - fd/proc: modify xcall proc file permissions to 640
  - !17361  scsi: lpfc: Use memcpy() for BIOS version
  - !17360  net: Fix CVE-2025-21884
  - !17356  serial: jsm: fix NPE during jsm_uart_port_init
  - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  - ucounts: fix mq_perf test error.
  - scsi: lpfc: Use memcpy() for BIOS version
  - net: better track kernel sockets lifetime
  - net: Add net_passive_inc() and net_passive_dec().
  - !17269 MPTCP UPTREAM PART26
  - !17358  serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17322  Fix CVE-2025-38424
  - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  - !17342  tls: always refresh the queue when reading sock
  - !17343  Fix WARN in perf_cgroup_switch()
  - !17080  serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - !17351  mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17319  mm/dpool: do not use uninitialized variable
  - serial: jsm: fix NPE during jsm_uart_port_init
  - nfs/enfs: remove unnecessary shard_should_stop in shard_route.c
  - mm/dynamic_pool: Fix free_huge_pages undefflow problem
  - !17345 net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - bnxt: properly flush XDP redirect lists
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - net: hns3: use seq_file for files in tx_bd_info/ and rx_bd_info/ in debugfs
  - net: hns3: use seq_file for files in common/ of hclge layer
  - net: hns3: use seq_file for files in fd/ in debugfs
  - !17328  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf/core: Fix the WARN_ON_ONCE is out of lock protected region
  - perf/core: Fix WARN in perf_cgroup_switch()
  - !17324  video: screen_info: Relocate framebuffers behind PCI bridges
  - tls: always refresh the queue when reading sock
  - nvme-host: fix the updating of the firmware version
  - nvme: update firmware version after commit
  - net: hns3: use seq_file for files in reg/ in debugfs
  - net: hns3: use seq_file for files in mac_list/ in debugfs
  - net: hns3: use seq_file for files in tm/ in debugfs
  - net: hns3: use seq_file for files in common/ of hns3 layer
  - net: hns3: use seq_file for files in queue/ in debugfs
  - net: hns3: clean up the build warning in debugfs by use seq file
  - net: hns3: remove tx spare info from debugfs.
  - net: hns3: use string choices helper
  - dm-bufio: fix sched in atomic context
  - livepatch: fix insn length check
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - video: screen_info: Relocate framebuffers behind PCI bridges
  - LoongArch: KVM: Enhance the robustness of extioi
  - perf/core: Fix WARN in perf_sigtrap()
  - perf: Fix sample vs do_exit()
  - mm/dpool: do not use uninitialized variable
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted
  - doc: mptcp: sysctl: blackhole_timeout is per-netns
  - mptcp: sysctl: avail sched: remove write access
  - mptcp: remove unneeded lock when listing scheds
  - nfs/enfs: remove enfs_uuid_debug in shard_route.c
  - nfs/enfs: remove usage of list_entry_is_head() in shard_route.c
  - sunrpc: remove redundant rpc_task_release_xprt() of enfs
  - nfs/enfs: remove judgement about enfs_option in nfs_multipath_client_info_init()
  - nfs/enfs: remove nfs_multipath_client_info_free_work()
  - nfs/enfs: fix typos in shard_route.c
  - nfs/enfs: remove unused functions in shard_route.c
  - nfs/enfs: make some functions static in shard_route.c
  - nfs/enfs: introduce DEFINE_PARSE_FH_FUNC to define parse_fh()
  - nfs/enfs: fix memory leak when free view_table
  - nfs/enfs: use DEFINE_CLEAR_LIST_FUNC to define enfs_clear_shard_view()
  - nfs/enfs: introduce DEFINE_CLEAR_LIST_FUNC to define enfs_clear_fs_info()
  - nfs/enfs: fix memory leak in enfs_delete_fs_info()
  - nfs/enfs: fix double free of multipath_client_info
  - nfs/enfs: fix null-ptr-deref in shard_update_work()
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  - LoongArch: KVM: Solve the problem of starting up the upstream qemu
  - drivers/iommu: Fix the initialization failure issue of the iommu module
  - LoongArch: KVM: Fix the extioi simulation error
  - netlink: specs: mptcp: fix port endianness
  - mptcp: disable active MPTCP in case of blackhole
  - mptcp: include inet_common in mib.h
  - mptcp: move mptcp_pm_gen.h's include
  - mptcp: remove unnecessary else statements
  - mptcp: prefer strscpy over strcpy
  - mptcp: add net.mptcp.available_schedulers
  - mptcp: sockopt: info: stop early if no buffer
  - mptcp: fallback to TCP after SYN+MPC drops
  - mptcp: export mptcp_subflow_early_fallback()
  - selftests: mptcp: connect: remove duplicated spaces in TAP output
  - selftests: mptcp: diag: remove trailing whitespace
  - selftests: mptcp: test last time mptcp_info
  - mptcp: add last time fields in mptcp_info
  - selftests: mptcp: reset the last TS before the first test
  - selftests: mptcp: netlink: drop disable=SC2086
  - selftests: mptcp: ip_mptcp option for more scripts
  - selftests: mptcp: use pm_nl endpoint ops
  - selftests: mptcp: export pm_nl endpoint ops
  - selftests: mptcp: join: update endpoint ops
  - selftests: mptcp: netlink: add change_address helper
  - selftests: mptcp: add {get,format}_endpoint(s) helpers
  - selftests: mptcp: netlink: add 'limits' helpers
  - selftests: mptcp: add tc check for check_tools
  - selftests: mptcp: connect: remote time in TAP output
  - selftests: mptcp: lib: add time per subtests in TAP output
  - migration: update status after RAS error
  - Revert "migration: update status after RAS error"
  - fs: Add additional checks for block devices during mount
  - xfrm: state: fix out-of-bounds read during lookup
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  - net_sched: Flush gso_skb list too during ->change()
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - serial: Fix potential null-ptr-deref in mlb_usio_probe()
  - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Li Nan <linan122@huawei.com> - 6.6.0-105.0.0.108
changelog:
  - !17513  sched-ebpf-add-for-exec-init
  - !17487  arm64/mpam: Support partial-core boot for MPAM
  - !16844  LeapIOraid: add device and support fw log
  - sched/bpf: Fix kabi breakage for including sched bpf header file
  - sched/ebpf: Add kfunc to set the preferred NUMA node for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - !17512  CVE-2025-21868
  - !17498  sched: Support NUMA parallel scheduling for multiple processes
  - !17508  Huawei iBMA: Added support for Hi1712 Chip
  - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
  - net: use __GENKSYMS__ to revert the kabi change
  - net: allow small head cache usage with large MAX_SKB_FRAGS values
  - Huawei iBMA: Added support for Hi1712 Chip
  - !17501 net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix rtnl deadlock issue
  - net: hibmcge: fix the division by zero issue
  - net: hibmcge: fix the np_link_fail error reporting issue
  - !17459 ROH: fix variable type inconsistency issue
  - sched: Support NUMA parallel scheduling for multiple processes
  - !17183  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17180  atm: Fix NULL pointer dereference
  - !16807 Support RME feature for CCA host
  - !17488  arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Set 1 as the minimum setting value for CMAX
  - arm64/mpam: Support partial-core boot for MPAM
  - !17440  sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - VirtCCA: Compatible with virtcca macro definitions
  - CCA: Fix cca kabi conflict
  - VirtCCA: Modify openeuler_defconfig
  - Reapply "VirtCCA: cvm support UEFI boot"
  - VirtCCA: Adapt virtcca operations by cca_base.
  - VirtCCA: Adapt realm operations by cca_base.
  - VirtCCA: Add CCA base operations.
  - [v8-43-43]KVM: arm64: Allow activating realms
  - [v8-42-43]KVM: arm64: Expose KVM_ARM_VCPU_REC to user space
  - [v8-40-43]arm64: RME: Provide accurate register list
  - [v8-39-43]arm64: RME: Provide register list for unfinalized RME RECs
  - [v8-38-43]rm64: RME: Configure max SVE vector length for a Realm
  - [v8-37-43]arm64: RME: Propagate max SVE vector length from RMM
  - [v8-36-43]arm64: RME: Initialize PMCR.N with number counter supported by RMM
  - [v8-35-43]arm64: RME: Set breakpoint parameters through  SET_ONE_REG
  - [v8-34-43]arm64: RME: Propagate number of breakpoints and watchpoints to userspace
  - [v8-33-43]arm64: RME: Hide KVM_CAP_READONLY_MEM for realm guests
  - [v8-32-43]arm64: rme: Enable PMU support with a realm guest
  - [backport]KVM: arm64: PMU: Introduce helpers to set the guest's PMU
  - [backport]KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest
  - !17463  crypto: hisilicon/qm - clear the memory before enabling the device
  - [backport]KVM: arm64: PMU: Set PMCR_EL0.N for vCPU  based  on the  associated PMU
  - [v8-31-43]arm_pmu: Provide a mechanism for disabling the physical  IRQ
  - [v8-30-43]arm64: RME: Prevent Device mappings for Realms
  - [v8-29-43]arm64: RME: Always use 4k pages for realms
  - [v8-28-43]arm64: RME: Allow checking SVE on VM instance
  - [v8-27-43]arm64: RME: support RSI_HOST_CALL
  - [v8-26-43]arm64: RME: allow userspace to inject aborts
  - [v8-25-43]arm64: Don't expose stolen time for realm guests
  - [v8-24-43]KVM: arm64: WARN on injected undef exceptions
  - [v8-23-43]KVM: arm64: Handle Realm PSCI requests
  - [v8-22-43]KVM: arm64: Validate register access for a Realm VM
  - [v8-21-43]KVM: arm64: Handle realm VCPU load
  - [v8-20-43]arm64: RME: Runtime faulting of memory
  - [backport]KVM: arm64: Move pagetable definitions to common header
  - [backport]rme: populate guest memory region without guest_memfd
  - [v8-19-43]arm64: RME: Allow populating initial contents
  - [v8-18-43]KVM: arm64: Handle realm MMIO emulation
  - [v8-17-43]arm64: RME: Handle RMI_EXIT_RIPAS_CHANGE
  - [v8-16-43]arm64: RME: Handle realm enter/exit
  - [v8-15-43]arm64: RME: Allow VMM to set RIPAS
  - [backport]KVM: Add member to struct kvm_gfn_range to indicate private/shared
  - [v8-14-43]KVM: arm64: Support timers in realm RECs
  - [v8-13-43]arm64: RME: Support for the VGIC in realms
  - [backport]KVM: arm64: Force GICv3 trap activation when no irqchip  is configured on VHE
  - [v8-12-43]KVM: arm64: vgic: Provide helper for number of list registers
  - [v8-11-43]arm64: RME: Allocate/free RECs to match vCPUs
  - [backport]KVM: arm64: Add generic check for system-supported vCPU features
  - !17467  arm-smmu-v3: adjust ecmdq log level
  - arm-smmu-v3: adjust ecmdq log level
  - crypto: hisilicon/qm - clear the memory before enabling the device
  - [v8-10-43]arm64: RME: RTT tear down
  - [v8-09-43]KVM: arm64: Allow passing machine type in KVM creation
  - [v8-08-43]kvm: arm64: Don't expose debug capabilities for realm  guests
  - [v8-07-43]arm64: RME: ioctls to create and configure  realms
  - [v8-06-43]arm64: RME: Define the user ABI
  - [v8-05-43]arm64: RME: Check for RME support at KVM init
  - [v8-04-43]arm64: RME: Add wrappers for RMI calls
  - [v8-03-43]arm64: RME: Add SMC definitions for calling the RMM
  - [v8-02-43]arm64: RME: Handle Granule Protection Faults (GPFs)
  - [v8-01-43]kvm: arm64: Include kvm_emulate.h in kvm/arm_psci.h
  - Revert "kvm: add virtcca cvm host feature"
  - Revert "VirtCCA: cvm support UEFI boot"
  - Revert "pmu: enable pmu phys irq inject for cvm"
  - !16720 [OLK-6.6] Not print information of SMMU 0x10 event and add phytium PS24080 SoC platform judgement
  - !17458 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - ROH: fix variable type inconsistency issue
  - !17441 net: hibmcge: support for statistics of reset failures
  - !17435 arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - net: hibmcge: support for statistics of reset failures
  - sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog
  - arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - atm: Fix NULL pointer dereference
  - LeapIOraid: add device and support fw log
  - iommu: smmuv3: Not print information of SMMU 0x10 event


author: Li Nan <linan122@huawei.com> - 6.6.0-106.0.0.109
changelog:
  - !17565  Enhance soft hwpoison handling and injection
  - !17569  drm/vkms: Fix use after free and double free on init error
  - drm/vkms: Fix use after free and double free on init error
  - !17564  bpf: Reject %p% format string in bprintf-like helpers
  - !17510 PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17547  net_sched: drr: Fix double list add in class with netem as child qdisc
  - !17556  filemap: move prefaulting out of hot write path
  - mm/memory-failure: send SIGBUS in the event of thp split fail
  - mm/memory-failure: move hwpoison_filter() higher up
  - mm/memory-failure: improve memory failure action_result messages
  - mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON)
  - mm/memory-failure: try to send SIGBUS even if unmap failed
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - !17529 mm: optimize mremap() by PTE batching
  - !17481  HID: core: fix __hid_request when no report ID is used
  - bpf: Reject %p% format string in bprintf-like helpers
  - !17495 v2  mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - !17546  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17542  net: sch: Fix CVE-2025-37798
  - !17538  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17537  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17553 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - filemap: move prefaulting out of hot write path
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - RDMA/hns: Fix querying wrong SCC context for DIP algorithm
  - !17479 fix some bugs of enfs
  - !17530  sched/psi: change permissions of /proc/pressure/stat
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - mm/mremap: avoid expensive folio lookup on mremap folio pte batch
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_ets: make est_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - sched/psi: change permissions of /proc/pressure/stat
  - mm: optimize mremap() by PTE batching
  - !17526 v7  High Performance Container Resource View Isolation -- Stage 2
  - !17515 gpiolib: Get rid of never false gpio_is_valid() calls
  - mm: call pointers to ptes as ptep
  - !17519  CVE-2025-38473
  - !17524  CVE-2025-38375
  - !17517  CVE-2025-38251
  - !17523  CVE-2025-38211
  - samples/bpf: Add iterator program for meminfo
  - bpf-rvi: Add bpf_x86_direct_pages kfunc
  - bpf-rvi: Add bpf_mem_vmalloc_{used,total} kfunc
  - bpf-rvi: Add bpf_mem_commit_limit & bpf_mem_committed kfunc
  - bpf-rvi: Add bpf_mem_percpu kfunc
  - bpf-rvi: Add bpf_mem_failure kfunc
  - bpf-rvi: Add bpf_hugetlb_report_meminfo kfunc
  - bpf-rvi: Add bpf_mem_{total,free}cma kfunc
  - bpf-rvi: Add bpf_mem_{file_{hugepage,pmdmapped},kreclaimable} kfunc
  - samples/bpf: Add iterator program for stat
  - bpf-rvi: stat: Add stat iterator target
  - bpf-rvi: Add kstat_ & kcpustat_ kfuncs
  - bpf-rvi: Add cpu runqueue related kfuncs
  - bpf-rvi: Add stat-related misc kfuncs
  - bpf-rvi: Add bpf_seq_file_append() kfunc
  - samples/bpf: Add iterator program for swaps
  - bpf-rvi: Add bpf_page_counter_read() kfunc
  - bpf-rvi: Add bpf_si_memswinfo() kfunc
  - samples/bpf: Add iterator program for uptime
  - bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc
  - samples/bpf: Add iterator program for loadavg
  - bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs
  - bpf-rvi: pidns: Calculate loadavg for each pid namespace
  - samples/bpf: Add iterator program for partitions
  - bpf-rvi: block: Look up /dev in reaper's fs->root and filter partitions
  - bpf-rvi: block: Add partitions iterator target
  - samples/bpf: Add iterator program for diskstats
  - bpf-rvi: blk-cgroup: Add bpf_blkcg_get_dev_iostat() kfunc
  - bpf-rvi: block: Add diskstats iterator target
  - samples/bpf: Add iterator program for cpuinfo_arm64
  - bpf-rvi: arm64: Add bpf_arch_flags kunc for arm64
  - bpf-rvi: arm64: Add cpuinfo_arm64 iterator target
  - bpf-rvi: arm64: Add bpf_arm64_cpu_have_feature() kfunc
  - bpf-rvi: cpuacct: Add task_cpuacct()
  - bpf-rvi: cpuacct: Add bpf_cpuacct_kcpustat_cpu_fetch kfunc
  - bpf-rvi: proc: add bpf_get_{idle,iowait}_time kfunc
  - bpf-rvi: cgroup: Add cgroup_rstat_flush_atomic() kfunc
  - bpf-rvi: Add bpf_mem_cgroup_from_task() kfunc
  - bpf-rvi: cpuset: Fix missing of return for !tsk in task_effective_cpumask()
  - virtio-net: ensure the received length does not exceed allocated size
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
  - nfs/enfs: make some functions static in enfs_multipath_client.c
  - nfs/enfs: remove enfs_init() and enfs_fini()
  - nfs/enfs: format get_ip_to_str() in shard_route.c
  - nfs/enfs: unlock uniformly at the end of function in shard_route.c
  - nfs/enfs: support debugging ip and dns list
  - nfs/enfs: fix error when showing dns list
  - nfs/enfs: fix alignment between struct rpc_clnt and rpc_clnt_reserve
  - nfs/enfs: set CONFIG_SUNRPC_ENFS=y by default
  - nfs/enfs: fix memory leak of shard_view_ctrl when removing nfs module
  - atm: clip: prevent NULL deref in clip_push()
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - Revert "PM / devfreq: Add HiSilicon uncore frequency scaling driver"
  - mm/mem_sampling: preserve kernel subsystem SPE state across perf sampling
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID


author: Li Nan <linan122@huawei.com> - 6.6.0-107.0.0.110
changelog:
  - !17744  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17737 soc cache: Fix incorrect error path of ioctl
  - !17660  cgroup/cpuset: Support dynamic affinity feature
  - !17293 [OLK-6.6] backport important bugfix for Broadcom BCM57414 nic driver from upstream linux-6.6.y
  - !17747  fix some CVE
  - !17751  iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17730  arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - !16545  KVM: arm64: fix memory leak in TLBI
  - iBMA: Fix veth soft lockup by adding DMA-pre-readl sync
  - !17716  hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17669  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17674  ftrace: Also allocate and copy hash for reading of filter files
  - !17725  perf/core: Don't leak AUX buffer refcount on allocation failure
  - usb: xhci: Fix invalid pointer dereference in Etron workaround
  - thunderbolt: Do not double dequeue a configuration request
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio
  - Bluetooth: btnxpuart: Fix kernel panic during FW release
  - !17592  ice: add NULL check in eswitch lag check
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17720  crypto: lzo - Fix compression buffer overrun
  - !17719  spi: spi-imx: Add check for spi_imx_setupxfer()
  - !17687  ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - soc cache: Fix incorrect error path of ioctl
  - soc cache: Fix incorrect size validation
  - soc cache: Enforce maintain type check
  - !17683 v2  Fix for bpf samples and selftests
  - !17724  mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17438 [OLK-6.6]:update patches for sw64 architecture
  - !17652  wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - !17728  CVE-2025-38006
  - !17677 v2  Fix static check warning reported by coccinelle
  - !17633  dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17455  raid10: cleanup memleak at raid10_make_request
  - !17453  md/raid1: Fix stack memory use after return in raid1_reshape
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  - net: mctp: Don't access ifa_index when missing
  - mctp: no longer rely on net->dev_index_head[]
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_folio()
  - !17606  drm/sched: Increment job count before swapping tail spsc queue
  - !17671  bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - crypto: lzo - Fix compression buffer overrun
  - spi: spi-imx: Add check for spi_imx_setupxfer()
  - hrtimers: Update new CPU's next event in hrtimers_cpu_dying()
  - !17632  perf/core: Exit early on perf_mmap() fail
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  - samples/bpf: Move bpf_rvi_* progs to bpf_rvi directory
  - selftests/bpf: fix perf_event link info name_len assertion
  - Revert "selftests/bpf: Use bpf_link__destroy in fill_link_info tests"
  - Revert "selftests/bpf: Add cookies check for perf_event fill_link_info test"
  - Revert "selftests/bpf: fix perf_event link info name_len assertion"
  - !17650 net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17634  HID: pidff: Fix null pointer dereference in pidff_find_fields
  - ACPI / MPAM: Fix wrong IS_ERR() check in _parse_table()
  - hiroce3: Use IS_ERR() to check the return value of kthread_run()
  - ftrace: Also allocate and copy hash for reading of filter files
  - bpf-rvi: pidns: fix null-pointer-derefence in pidns_update_load_tasks
  - !17642  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17641  net: clear the dst when changing skb protocol
  - !17653  wifi: iwlwifi: fix debug actions order
  - !17651  wifi: mt76: disable napi on driver removal
  - !17647  CVE-2025-38052
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - cgroup/cpuset: Support dynamic affinity feature
  - !17646  sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - !17648  CVE-2025-37920
  - !17643  net: Fix TOCTOU issue in sk_is_readable()
  - !17644  bridge: mcast: Fix use-after-free during router port configuration
  - !17645  CVE-2025-38465
  - !17600  two bugfix for arm64 support HVO
  - !17649  Fix CVE-2025-21839
  - !17628  Fix CVE-2025-37780
  - !17629  Fix CVE-2025-37767
  - !17637  netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - !17638  tcp: Correct signedness in skb remaining space calculation
  - !17639  tipc: Fix use-after-free in tipc_conn_close().
  - !17640  seg6: Fix validation of nexthop addresses
  - wifi: iwlwifi: fix debug actions order
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
  - wifi: mt76: disable napi on driver removal
  - net: phy: motorcomm: Add support for PHY LEDs on YT8521
  - !17608  mm/util: make memdup_user_nul() similar to memdup_user()
  - net: hns3: change the function return type from int to bool
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
  - xsk: Fix kabi broken
  - xsk: Fix race condition in AF_XDP generic RX path
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - bridge: mcast: Fix use-after-free during router port configuration
  - net: Fix TOCTOU issue in sk_is_readable()
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: clear the dst when changing skb protocol
  - seg6: Fix validation of nexthop addresses
  - tipc: Fix use-after-free in tipc_conn_close().
  - tcp: Correct signedness in skb remaining space calculation
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  - HID: pidff: Fix null pointer dereference in pidff_find_fields
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
  - !17597 Delete PHYTIUM_CPU_PART_FTC862 macro
  - perf/core: Exit early on perf_mmap() fail
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
  - isofs: Prevent the use of too small fid
  - !17307  scsi: megaraid_sas: Fix invalid node index
  - !17309  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - mm/util: make memdup_user_nul() similar to memdup_user()
  - drm/sched: Increment job count before swapping tail spsc queue
  - !17575  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - cputype: phytium: Delete PHYTIUM_CPU_PART_FTC862 macro
  - ice: add NULL check in eswitch lag check
  - !16528 [OLK-6.6] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - !17570  tracing: Add down_write(trace_event_sem) when adding trace event
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix missing kvm_unregister_perf_callbacks
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: fix missing characters for sw64_rrk
  - sw64: selftests/net: add sw64 support for io_uring_zerocopy_tx
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: fix incorrect macro definitions for sw64 in bpf_tracing.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: kvm: fix undefined error with ftrace disabled
  - raid10: cleanup memleak at raid10_make_request
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - scsi: megaraid_sas: Fix invalid node index
  - bnxt: properly flush XDP redirect lists
  - dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
  - dma: Fix kabi breakage due to "dma: pswiotlb: Move platform-identification to cpu errata"
  - dma: pswiotlb: Move platform-identification to cpu errata
  - dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
  - dma: phyitum: enable CONFIG_PSWIOTLB
  - dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
  - dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - KVM: arm64: fix memory leak in TLBI


author: Li Nan <linan122@huawei.com> - 6.6.0-108.0.0.111
changelog:
  - !17835 v2  perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - !17856  sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17635 mm: madvise: use per_vma lock for MADV_FREE
  - sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
  - !17841  fs/resctrl: Fix max_threshold_occupancy write operation
  - !17844  CVE-2025-37752
  - !17845  xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - !17733  proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - !17834  cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface
  - net_sched: sch_sfq: move the limit validation
  - net_sched: sch_sfq: use a temporary work area for validating configuration
  - !17840  arm64/mpam: Fix num_rmids when enable CDP mode
  - fs/resctrl: Fix max_threshold_occupancy write operation
  - arm64/mpam: Fix num_rmids when enable CDP mode
  - !17838  mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages
  - !17587 CVE-2025-38406: wifi: ath6kl: remove WARN on bad firmware input
  - !17585 CVE-2025-38408： genirq/irq_sim: Initialize work context pointers properly
  - !17586 CVE-2025-38409: drm/msm: Fix another leak in the submit error path
  - !17584 CVE-2025-38410: drm/msm: Fix a fence leak in submit error path
  - !17582 NFC: nci: uart: Set tty-&gt;disc_data only in success path
  - !17590 wifi: carl9170: do not ping device which has failed to load firmware
  - !17593 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - !17594 CVE-2025-38425: i2c: tegra: check msg length in SMBUS block read
  - !17595 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - !17596 usb: gadget: u_serial: Fix race condition in TTY wakeup
  - !17583 CVE-2025-38467：drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - perf/aux: Fix pending disable flow when the AUX ring buffer overruns
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  - !17789  bpf, sockmap: Fix CVE-2025-38154
  - !17712  wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - !17790  page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - !17788  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - !17786  net: xfrm: Fix CVE-2025-38097
  - !17784  bpf, sockmap: Fix panic when calling skb_linearize
  - !17785  bpf: fix ktls panic with sockmap
  - !17783  net/sched: fix use-after-free in taprio_dev_notifier
  - !17781  mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - !17782  net/mlx5e: Disable MACsec offload for uplink representor profile
  - !17780  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - !17779  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - !17778  phy: tegra: xusb: remove a stray unlock
  - !17777  net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - !17776  dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - !17775  espintcp: fix skb leaks
  - !17774  can: bcm: add locking for bcm_op runtime updates
  - !17711  net: lan743x: Fix memleak issue when GSO enabled
  - !17708  net: phy: Fix CVE-2025-37945
  - !17707  bpf: Scrub packet on bpf_redirect_peer
  - !17703  9p/net: fix improper handling of bogus negative read/write replies
  - !17699  netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - !17685  gtp: Fix CVE-2025-21678
  - !17816  vmci: Prevent the dispatching of uninitialized payloads
  - !17824  tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17609 cpufreq: Exit governor when failed to start old governor
  - !17823  arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - tracing/probes: Avoid using params uninitialized in parse_btf_arg()
  - !17821  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - arm64/mpam: Fix the logic that determines whether an MPAM MSC should initialize
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !17818  fix some CVEs
  - !17798  benet: fix BUG when creating VFs
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
  - mm/vmscan: don't try to reclaim hwpoison folio
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - memblock: Accept allocated memory before use in memblock_double_array()
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails
  - Input: synaptics - use guard notation when pausing serio port
  - vmci: Prevent the dispatching of uninitialized payloads
  - !17804  pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17800  gic: increase the arch_timer
  - !17794  perf/core: Prevent VMA split of buffer mappings
  - !17574 ROH: Add crc_err_cnt and retry_cnt mib statistics
  - pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17337 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - !17797 v3  HiSock Redirect Framework
  - gic: increase the arch_timer priority to avoid hardlockup
  - benet: fix BUG when creating VFs
  - !17768  net/oenetcls: introduce oenetcls for network optimization
  - ROH: Add crc_err_cnt and retry_cnt mib statistics
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_*_change_dev kfunc
  - bpf: Add bpf_xdp_set_ingress_dst kfunc
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_skops_get_ingress_dst kfunc
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - !17470  fix CVE-2025-38351
  - !17766 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - !17772  two CVE fix
  - perf/core: Prevent VMA split of buffer mappings
  - !17659 v2  sched: More flexible use of CPU quota when CPU is idle
  - !17748  fix bug in hdbss
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - bpf, sockmap: Avoid using sk_socket after free when sending
  - bpf, sockmap: fix duplicated data transmission
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - net: xfrm: Fix kabi breakage of struct xfrm_state
  - espintcp: remove encap socket caching to avoid reference leak
  - !17294 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !17714  can: bcm: add missing rcu read protection for procfs content
  - !17713  net: phy: leds: fix memory leak
  - !17717  ipvs: fix uninit-value for saddr in do_output_route4
  - !17706  RDMA/cma: Fix CVE-2025-37772
  - !17709  bnxt_en: Fix CVE-2025-37911
  - !17705  igc: fix PTM cycle trigger logic
  - !17718  ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - !17701  net: openvswitch: fix nested key length validation in the set() action
  - !17702  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - !17704  page_pool: avoid infinite loop to schedule delayed worker
  - !17700  wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - !17697  netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - !17715  netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - !17696  net: decrease cached dst counters in dst_release
  - !17695  netfilter: nf_tables: don't unregister hook when table is dormant
  - !17694  RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - !17693  drm/connector: Fix CVE-2025-22089
  - !17692  vmxnet3: unregister xdp rxq info in the reset path
  - !17690  Bluetooth: Fix error code in chan_alloc_skb_cb()
  - !17689  tcp: Fix CVE-2025-21864
  - !17741  Fix trace may OOB when trace_get_user failed
  - !17742  i2c: qup: jump out of the loop in case of timeout
  - !17678  dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - !17679  media: cx231xx: set device_caps for 417
  - bpf: fix ktls panic with sockmap
  - bpf, sockmap: Fix panic when calling skb_linearize
  - net/sched: fix use-after-free in taprio_dev_notifier
  - net/mlx5e: Disable MACsec offload for uplink representor profile
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - phy: tegra: xusb: remove a stray unlock
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
  - dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn
  - espintcp: fix skb leaks
  - can: bcm: add locking for bcm_op runtime updates
  - net: libwx: fix the using of Rx buffer DMA
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
  - !9218 [OLK-6.6] i2c/zhaoxin: I2C controller driver enhancement and optimization
  - !17755  arm64: perf: Add support for HIP12 hw metric
  - !17763  mm/smaps: fix race between smaps_hugetlb_range and migration
  - net/oenetcls: introduce oenetcls for network optimization
  - RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - fs/proc/task_mmu: convert smaps_hugetlb_range() to work on folios
  - i2c: zhaoxin: Add support for Zhaoxin I2C controller
  - arm64: perf: Add support for HIP12 hw metric
  - KVM: arm64: fix memory leak in HDBSS
  - KVM: arm64: do not support hdbss in nvhe
  - i2c: qup: jump out of the loop in case of timeout
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  - ipvs: fix uninit-value for saddr in do_output_route4
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  - can: bcm: add missing rcu read protection for procfs content
  - net: phy: leds: fix memory leak
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  - net: lan743x: Fix memleak issue when GSO enabled
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - bnxt_en: Fix coredump logic to free allocated buffer
  - genirq/irq_sim: Initialize work context pointers properly
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
  - bpf: Scrub packet on bpf_redirect_peer
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
  - igc: fix PTM cycle trigger logic
  - page_pool: avoid infinite loop to schedule delayed worker
  - 9p/net: fix improper handling of bogus negative read/write replies
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - net: openvswitch: fix nested key length validation in the set() action
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - net: decrease cached dst counters in dst_release
  - netfilter: nf_tables: don't unregister hook when table is dormant
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  - drm/connector: fix kabi broken in struct ib_device
  - RDMA/core: Don't expose hw_counters outside of init net namespace
  - vmxnet3: unregister xdp rxq info in the reset path
  - Bluetooth: Fix error code in chan_alloc_skb_cb()
  - net: use __GENKSYMS__ to revert the kabi change
  - tcp: drop secpath at the same time as we currently drop dst
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
  - gtp: Destroy device along with udp socket's netns dismantle.
  - media: cx231xx: set device_caps for 417
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes
  - sched: More flexible use of CPU quota when CPU is idle
  - mm: fix the race between collapse and PT_RECLAIM under per-vma lock
  - mm: madvise: use per_vma lock for MADV_FREE
  - mm: use per_vma lock for MADV_DONTNEED
  - mm: madvise: use walk_page_range_vma() instead of walk_page_range()
  - cpufreq: Exit governor when failed to start old governor
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq()
  - cpufreq: Init policy->rwsem before it may be possibly used
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost
  - cpufreq: Remove duplicate check in __cpufreq_offline()
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class()
  - cpufreq: CPPC: Remove cpu_data_list
  - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in .get() callback
  - i2c: tegra: check msg length in SMBUS block read
  - drm/msm: Fix another leak in the submit error path
  - wifi: ath6kl: remove WARN on bad firmware input
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - KVM: x86: Bury guest_cpuid_is_amd_or_hygon() in cpuid.c
  - KVM: SVM: Emulate SYSENTER RIP/RSP behavior for all Intel compat vCPUs
  - KVM: x86: Inhibit code #DBs in MOV-SS shadow for all Intel compat vCPUs
  - KVM: x86: Apply Intel's TSC_AUX reserved-bit behavior to Intel compat vCPUs
  - KVM: x86/pmu: Squash period for checkpointed events based on host HLE/RTM
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG
  - ALSA: hda/conexant: Use the new codec SSID matching
  - ALSA: hda: Use own quirk lookup helper
  - scsi: lpfc: Use memcpy() for BIOS version
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  - usb: gadget: u_serial: Fix race condition in TTY wakeup
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  - wifi: carl9170: do not ping device which has failed to load firmware
  - drm/msm: Fix a fence leak in submit error path
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  - NFC: nci: uart: Set tty->disc_data only in success path


author: Li Nan <linan122@huawei.com> - 6.6.0-109.0.0.112
changelog:
  - !17945  Fix CVE-2025-38687
  - !17936  padata: Fix pd UAF once and for all
  - !17879 sched: apply custom cpu range for idle cpu
  - comedi: fix race between polling and detaching
  - !17937  clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - padata: Fix pd UAF once and for all
  - !17853 v3  arm64: Fix actlr_el1 can not set problem in guest
  - !17882  CVE-2025-38502
  - !17922  x86/sgx: Prevent attempts to reclaim poisoned pages
  - !17923  media: vidtv: Terminating the subsequent process of initialization failure
  - !17924 [backport]KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler
  - !17913  Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
  - !17915  arm64/mpam: Half the number of RMIDs for all resources under CDP mode
  - [backport]KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler
  - media: vidtv: Terminating the subsequent process of initialization failure
  - x86/sgx: Prevent attempts to reclaim poisoned pages
  - !17848 [OLK-6.6]:update patches for sw64 architecture
  - !17731  arm64/mpam: Add mb_only boot option
  - !17911  CVE-2025-38305
  - !17244  Fix netns reference count issue
  - !17914 virtCCA CoDA: Expose I/O hook interfaces.
  - virtCCA CoDA: Expose I/O hook interfaces.
  - arm64/mpam: Half the number of RMIDs for all resources under CDP mode
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
  - ptp: fix breakage after ptp_vclock_in_use() rework
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
  - !17868  scsi: Remove scsi device no_start_on_resume flag
  - !17866  md: make rdev_addable usable for rcu mode
  - !17865  scsi: core: ufs: Fix a hang in the error handler
  - !17842 [OLK-6.6] Fix CVE-2025-37924
  - !17836 [OLK-6.6] Fix CVE-2025-38312
  - !17902 [OLK-6.6] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !17880 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !17890  LeapIOraid: fix strscpy size argument
  - !17892  pptp: Fix skb length handling and error path in pptp_xmit()
  - !17815 v2  ext4: better scalability for ext4 block allocation
  - pptp: fix pptp_xmit() error path
  - pptp: ensure minimal skb length in pptp_xmit()
  - LeapIOraid: fix strscpy size argument
  - !17883  net/mlx5e: Remove skb secpath if xfrm state is not found
  - net/mlx5e: Remove skb secpath if xfrm state is not found
  - Fix kabi breakage for bpf_map by using KABI_BROKEN_REPLACE and KABI_FILL_HOLE.
  - bpf: Fix oob access in cgroup local storage
  - bpf: Move cgroup iterator helpers to bpf.h
  - bpf: Move bpf map owner out of common struct
  - bpf: Add cookie object to bpf maps
  - sched: apply custom cpu range for idle cpu
  - !17756 [OLK-6.6] Provide host-side administrators/users with real-time access to the usage status of CSV3 CMA memory.
  - !17846  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - !17442  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
  - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
  - !17813  net/mlx5: Check device memory pointer before usage
  - scsi: fix kabi broken for no_start_on_resume flag in struct scsi_device
  - scsi: Remove scsi device no_start_on_resume flag
  - md: make rdev_addable usable for rcu mode
  - scsi: core: ufs: Fix a hang in the error handler
  - sw64: fix for userspace asking for syscall(-1)
  - sw64: update junzhang default config file
  - sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
  - sw64: add cross-page check in software unaligned write handling
  - sw64: ptrace: fail system calls on invalid address access in PEEKUSR
  - sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
  - sw64: perf: Add support for get_cpuid_str function
  - sw64: kvm: use read/write spin lock for KVM MMU
  - sw64: rethook: fix a bug in rethook_trampoline
  - sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - arm64: Fix actlr_el1 can not set problem in guest
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - ksmbd: fix use-after-free in kerberos authentication
  - ksmbd: Fix dangling pointer in krb_authenticate
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
  - ext4: fix potential null deref in ext4_mb_init()
  - ext4: implement linear-like traversal across order xarrays
  - ext4: refactor choose group to scan group
  - ext4: open coding repeated check in next_linear_group
  - ext4: use correct criteria name instead stale integer number in comment
  - ext4: remove unused parameter ngroup in ext4_mb_choose_next_group_*()
  - ext4: convert free groups order lists to xarrays
  - ext4: factor out ext4_mb_scan_group()
  - ext4: factor out ext4_mb_might_prefetch()
  - ext4: keep "prefetch_grp" and "nr" consistent
  - ext4: remove unused ext4_allocation_context::ac_groups_considered
  - ext4: factor out __ext4_mb_scan_group()
  - ext4: convert EXT4_B2C(sbi->s_stripe) users to EXT4_NUM_B2C
  - ext4: fallback to complex scan if aligned scan doesn't work
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch
  - ext4: fix zombie groups in average fragment size lists
  - ext4: merge freed extent with existing extents before insertion
  - ext4: convert sbi->s_mb_free_pending to atomic_t
  - ext4: make running and commit transaction have their own freed_data_list
  - ext4: fix typo in CR_GOAL_LEN_SLOW comment
  - ext4: get rid of some obsolete EXT4_MB_HINT flags
  - ext4: utilize multiple global goals to reduce contention
  - ext4: remove unnecessary s_md_lock on update s_mb_last_group
  - ext4: remove unnecessary s_mb_last_start
  - ext4: separate stream goal hits from s_bal_goals for better tracking
  - Revert "ext4: move mb_last_[group|start] to ext4_inode_info"
  - ext4: add ext4_try_lock_group() to skip busy groups
  - net/mlx5: Check device memory pointer before usage
  - x86/csv: Add function to get free size of CSV3 CMA
  - arm64/mpam: Add mb_only boot option
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
  - smb: client: fix netns refcount leak after net_passive changes
  - Revert "smb: client: fix TCP timers deadlock after rmmod"
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"


author: Li Nan <linan122@huawei.com> - 6.6.0-110.0.0.113
changelog:
  - !18015 arm64: cca_base: On the Adaptation of CCA and virtCCA.
  - arm64: cca_base: On the Adaptation of CCA and virtCCA.
  - !18017  pNFS: Fix uninited ptr deref in block/scsi layout
  - pNFS: Fix uninited ptr deref in block/scsi layout
  - !18000  gfs2: Validate i_depth for exhash directories
  - !17997  hv_netvsc: Fix panic during namespace deletion with VF
  - !17947  migration/hisilicon: some bugfix
  - !17919  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  - gfs2: Validate i_depth for exhash directories
  - hv_netvsc: Fix panic during namespace deletion with VF
  - !17985  Updates of HiSilicon Uncore L3C PMU
  - !17977  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - !17987 virtCCA CoDA: Prevent secure PFs/VFs load or probe native drivers.
  - virtCCA CoDA: Prevent secure PFs/VFs load or probe native drivers.
  - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
  - Documentation: hisi-pmu: Fix of minor format error
  - drivers/perf: hisi: Add support for L3C PMU v3
  - !17974 iommu: Fix the incorrect exception process of the failed memory allocation
  - !17983  fix oenetcls bugs
  - net/oenetcls: clean resource when init ntuple/flow fail
  - net/oenetcls: use workqueue for ntuple cfg
  - net/oenetcls: remove oenetcls trace hook
  - net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
  - !17898 enfs: fix some bugs and optimize performance
  - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - !17976  LoongArch: BPF: Fix jump offset calculation in tailcall
  - iommu: Fix the incorrect exception process of the failed memory allocation
  - LoongArch: BPF: Fix jump offset calculation in tailcall
  - !17602 [OLK-6.6] drm/phytium: Fix make allmodconfig build fail
  - !17792 virtCCA: Improve cvm performance.
  - !17869 [OLK-6.6]Backport upstream CC Measurement support in the efi libstub
  - !17862 [OLK-6.6]Hygon: Support RTMR and Attestation that includes RTMR for Hygon CSV3 VM
  - !17946 mm/shmem, swap: bugfix and improvement of mTHP swap in
  - !17969  arm64/mpam: Add quirk for cmax and cmin
  - !17967  sched: Fix sched_numa_find_nth_cpu() if mask offline
  - !17955 arm64: RME: handle RIPAS changes before kvm_rec_enter
  - arm64: RME: handle RIPAS changes before kvm_rec_enter
  - arm64: RME: Introduce kvm_rec_pre_enter() called before entering an atomic section
  - !17962  tools/mpam: Add MPAM dynamic adjustment and sampling scripts
  - arm64/mpam: Add quirk for cmax and cmin
  - !17940  net/tls: fix kernel panic when alloc_page failed
  - !17941  OLK-6.6-fix-CVE-2025-38147
  - sched: Fix sched_numa_find_nth_cpu() if mask offline
  - tools/mpam: Add MPAM dynamic adjustment and sampling scripts
  - !17939  pinctrl: qcom: msm: mark certain pins as invalid for interrupts
  - hisi_acc_vfio_pci: update device driver status
  - migration: resolve duplicate migration states
  - migration: fix VF reset timeout issue
  - migration: bugfix live migration function without VF device driver
  - mm/shmem, swap: fix major fault counting
  - mm/shmem, swap: rework swap entry and index calculation for large swapin
  - mm/shmem, swap: simplify swapin path and result handling
  - mm/shmem, swap: never use swap cache and readahead for SWP_SYNCHRONOUS_IO
  - mm/shmem, swap: tidy up swap entry splitting
  - mm/shmem, swap: tidy up THP swapin checks
  - mm/shmem, swap: avoid redundant Xarray lookup during swapin
  - mm/shmem, swap: improve cached mTHP handling and fix potential hang
  - mm/shmem, swap: fix softlockup with mTHP swapin
  - Add IPI direct inject method for virtCCA CVM.
  - Improve virtCCA CVM vtimer irq inject method.
  - Add poll method for nfs for virtCCA CVM.
  - calipso: unlock rcu before returning -EAFNOSUPPORT
  - calipso: Don't call calipso functions for AF_INET sk.
  - net/tls: fix kernel panic when alloc_page failed
  - pinctrl: qcom: msm: mark certain pins as invalid for interrupts
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  - nfs/enfs: remove duplicate definitions
  - nfs/enfs: fix some cleanup issues
  - nfs/enfs: fix finding root uuid issue
  - nfs/enfs: introduce is_enfs_debug()
  - nfs/enfs: get rpc procedure number from rpc_procinfo in get_uuid_from_task()
  - sunrpc: do not set enfs transport in rpc_task_set_client()
  - efi/libstub: Add get_event_log() support for CC platforms
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs
  - efi/tpm: Use symbolic GUID name from spec for final events table
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec
  - virt: csv-guest: Add support for extended attestation aware request in the CSV3 guest
  - virt: csv-guest: Implement CSV RTMR ioctl interfaces
  - virt: csv-guest: Introduce CSV RTMR uapi interface
  - x86/csv: Introduce RTMR interfaces
  - Add dynamic wfx trap method for virtCCA CVM.
  - drm/phytium: Fix Phytium DRM build fail


author: Li Nan <linan122@huawei.com> - 6.6.0-111.0.0.114
changelog:
  - !17932 [OLK-6.6] add support for WangXun 10G/25G/40G
  - !17665 cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - !17663 platform/x86: ISST: Add Clearwater Forest to support list
  - !17668 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - !17681 cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - !17468 [Intel-SIG] backporting KVM: x86: Advertise AVX10.1 CPUID to userspace
  - !17571 [OLK-6.6] Intel-SIG: Add new Intel CPU# definition
  - !18024  trace/fgraph: Fix error handling
  - !18061  net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18026  vsock/virtio: Validate length in packet header before skb_put()
  - !18088  net/oenetcls: Fix crash when removing module
  - net/oenetcls: Fix crash when removing module
  - !18071  media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
  - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
  - net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18054 arm64 kvm: On the Adaptation of CCA and virtCCA.
  - arm64 kvm: On the Adaptation of CCA and virtCCA.
  - !17972  arm64/mpam: Add quirk for L3 CSU counters
  - !18016  media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - !16579 Do not shatter hugezeropage on wp-fault
  - !17839 [OLK-6.6] Fix CVE-2025-37838
  - !17887 [OLK-6.6] Fix CVE-2025-38637
  - !17889 [OLK-6.6] Fix CVE-2025-37840
  - !17850 [OLK-6.6] Fix CVE-2025-38173
  - !17854 [OLK-6.6] Fix CVE-2025-38143
  - !17861 [OLK-6.6] Fix CVE-2025-38194
  - vsock/virtio: Validate length in packet header before skb_put()
  - trace/fgraph: Fix error handling
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - jffs2: check that raw node were preallocated before writing summary
  - net_sched: skbprio: Remove overly strict queue assertions
  - crypto: marvell/cesa - Handle zero-length skcipher requests
  - mtd: rawnand: brcmnand: fix PM resume warning
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
  - backlight: pm8941: Add NULL check in wled_configure()
  - arm64/mpam: Add quirk for L3 CSU counters
  - x86/cpu/vfm: Fix x86_vfm kabi
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
  - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor
  - net: wangxun: txgbe: add support for wangxun 10G/25G/40G
  - net: wangxun: remove wangxun txgbe inbox drivers
  - platform/x86: ISST: Add Clearwater Forest to support list
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - KVM: x86: Advertise AVX10.1 CPUID to userspace
  - mm: allocate THP on hugezeropage wp-fault
  - mm: abstract THP allocation


author: Li Nan <linan122@huawei.com> - 6.6.0-112.0.0.115
changelog:
  - !18320  workqueue: Fix kabi broken of enum WORK_OFFQ_POOL_SHIFT
  - !18336  soc cache: support L3 cache lock in framework
  - !18352  net/oenetcls: Fix memleak when clean flow table
  - !18306  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18342  tracing: Silence warning when chunk allocation fails in trace_pid_write
  - net/oenetcls: Fix memleak when clean flow table
  - tracing: Silence warning when chunk allocation fails in trace_pid_write
  - !18331  ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
  - !18330  cpufreq: Initialize cpufreq-based invariance before subsys
  - soc cache: L3 cache lockdown support for HiSilicon SoC
  - soc cache: support L3 cache lock in framework
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
  - cpufreq: Initialize cpufreq-based invariance before subsys
  - !18275 [OLK-6.6] Optimized the kernel driver of HYGON trusted functions
  - !18322  Fix CVE-2025-39715
  - !18293  CVE-2025-39886
  - !18290  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - parisc: Revise gateway LWS calls to probe user read access
  - workqueue: Fix kabi broken of enum WORK_OFFQ_POOL_SHIFT
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18286 mm: shmem: fix the strategy for the tmpfs 'huge=' options
  - !18282 v2: shmem cleanup
  - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
  - memcg: skip cgroup_file_notify if spinning is not allowed
  - !18291  CVE-2025-39844
  - !18031 Introduce fwctl subystem framework
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
  - mm: introduce and use {pgd,p4d}_populate_kernel()
  - mm: move page table sync declarations to linux/pgtable.h
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !18280  samples/bpf: fix cpuinfo_arm64 prog load issue
  - crypto: ccp: optimize PSP driver code logic to reduce modifications to native code
  - crypto: ccp: add "tdm_guard" as kernel and module parameter
  - crypto: ccp: optimize TDM kernel driver
  - mm: shmem: fix the strategy for the tmpfs 'huge=' options
  - docs: update THP documentation to clarify sysfs "never" setting
  - mm: shmem: drop the unnecessary folio_nr_pages()
  - mm: shmem: use 'folio' for shmem_partial_swap_usage()
  - samples/bpf: fix cpuinfo_arm64 prog load issue
  - !18264  memory tiers: use default_dram_perf_ref_source in log message
  - !18259  cgroup: split cgroup_destroy_wq into 3 workqueues
  - !18231  ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
  - !18230  net: ch9200: fix uninitialised access during mii_nway_restart
  - !18227  i40e: Fix potential invalid access when MAC list is empty
  - memory tiers: use default_dram_perf_ref_source in log message
  - !18250  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18253  samples/bpf: Fix print issue in bpf_rvi_diskstats
  - !18234  samples/bpf: Fix print issue in dump_partitions()
  - cgroup: split cgroup_destroy_wq into 3 workqueues
  - fwctl: Fix repeated device word in log message
  - fwctl: Add documentation
  - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware
  - taint: Add TAINT_FWCTL
  - fwctl: FWCTL_INFO to return basic information about the device
  - fwctl: Basic ioctl dispatch for the character device
  - fwctl: Add basic structure for a class subsystem with a cdev
  - samples/bpf: Fix print issue in bpf_rvi_diskstats
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18173  usb: core: config: Prevent OOB read in SS endpoint companion parsing
  - samples/bpf: Fix print issue in dump_partitions()
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
  - net: ch9200: fix uninitialised access during mii_nway_restart
  - i40e: Fix potential invalid access when MAC list is empty
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-112.0.0.116
changelog:
  - RISC-V kernel upgrade to 6.6.0-112.0.0
  - Sync patches from the rvck-olk repository, including:
    ACPI, IOMMU drivers;
    Key RISC-V extensions support;
    Add support for K1, SG2044, and DP1000.


author: Li Nan <linan122@huawei.com> - 6.6.0-113.0.0.117
changelog:
  - !18464  i40e: add max boundary check for VF filters
  - !18433  dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18256     Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D
  - !18254 Add IFS support for ClearWater Forest
  - !18455  KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18289 Expand scope of khugepaged anonymous collapse
  - !18324 arm64: Enable vmalloc-huge with ptdump
  - !18419  sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - i40e: add max boundary check for VF filters
  - !18151  ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - !18152  fs/buffer: fix use-after-free when call bh_read() helper
  - !18312  ext4: preserve SB_I_VERSION on remount
  - !18313  fs: quota: create dedicated workqueue for quota_release_work
  - !18311  ext4: fix an off-by-one issue during moving extents
  - !17401  fscrypt: Don't use problematic non-inline crypto engines
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18237  fuse: support sysfs api for flush and
  - !18422  net/hinic3: Modify driver version
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18425  Fix CVE-2025-39989
  - !18427  i40e: fix idx validation in config queues msg
  - i40e: fix idx validation in config queues msg
  - x86/mce: use is_copy_from_user() to determine copy-from-user context
  - x86/extable: Remove unused fixup type EX_TYPE_COPY
  - net/hinic3: Modify driver version
  - !18414 Fix add define COMPAT_ELF_HWCAP3
  - !18406  pcmcia: Add error handling for add_interval() in do_validate_mem()
  - sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - !18401  Bluetooth: btrtl: Prevent potential NULL dereference
  - !18241 ras: ACPI: HED: Always initialize before evged
  - Fix add define COMPAT_ELF_HWCAP3
  - !17928 bus: fsl-mc: fix double-free on mc_dev
  - !17908 fix CVE-2025-38630
  - !18224 fix CVE-2025-38624
  - !17871 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - !17877 fs/ntfs3: cancle set bad inode after removing name fails
  - !17909 fix CVE-2025-38555
  - !17872 f2fs: fix to avoid panic in f2fs_evict_inode
  - !17760 Fix CVE-2025-38414
  - !17611 net: ravb: Fix missing rtnl lock in suspend/resume path
  - !17859 f2fs: fix to bail out in get_new_segment()
  - !17354 net/atm/resources: Release atm_dev_mutex after removing procfs in atm_…
  - !18032 [OLK-6.6] Fix CVE-2025-37897
  - !18030 [OLK-6.6] Fix CVE-2025-37914
  - !18037 [OLK-6.6] Fix CVE-2025-37917
  - !18036 [OLK-6.6] Fix CVE-2025-37922
  - !18035 [OLK-6.6] Fix CVE-2025-37935
  - !18034 [OLK-6.6] Fix CVE-2025-37931
  - !18033 [OLK-6.6] Fix CVE-2025-37901
  - !18028 [OLK-6.6] Fix CVE-2025-37987
  - !18027 [OLK-6.6] Fix CVE-2025-37983
  - !17807 Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - pcmcia: Add error handling for add_interval() in do_validate_mem()
  - !18326 [OLK-6.6] Support Hygon TKM (Trusted Key Management) Guest live migration
  - !18199  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - !18131  loop: Avoid updating block size under exclusive owner
  - !18006  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - !18402  kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - !18249 enfs: add new path state PM_STATE_UNSTABLE
  - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - Bluetooth: btrtl: Prevent potential NULL dereference
  - nfs/enfs: cleanups in pm_set_path_state()
  - nfs/enfs: prefer normal rpc transport over unstable one
  - nfs/enfs: introduce reconnect time KUnit tests
  - nfs/enfs: set PM_STATE_UNSTABLE if path is unstable
  - nfs/enfs: introduce enum PM_STATE_UNSTABLE
  - !18357  *** OLK-6.6-fix-CVE-2025-39787 ***
  - !18374  locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - !18362  umount performance fix
  - locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - do_make_slave(): choose new master sanely
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
  - change_mnt_propagation() cleanups, step 1
  - soc: qcom: mdt_loader: Deal with zero e_shentsize
  - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
  - soc: qcom: mdt_loader: Ensure we don't read past the ELF header
  - crypto: ccp: ensure kvm_bind_vtkm is only executed once for csv guest
  - crypto: ccp: support vtkm live migration
  - arm64: Enable vmalloc-huge with ptdump
  - arm64: Restrict pagetable teardown to avoid false warning
  - fs: quota: create dedicated workqueue for quota_release_work
  - ext4: preserve SB_I_VERSION on remount
  - ext4: fix an off-by-one issue during moving extents
  - mm: drop all references of writable and SCAN_PAGE_RO
  - mm: enable khugepaged anonymous collapse on non-writable regions
  - khugepaged: pass folio instead of head page to trace events
  - ras: ACPI: HED: Always initialize before evged
  - fuse: fix issues in fuse_resend_pqueue() implementation
  - fuse: Introduce sysfs API for resend pending requests
  - fuse: Introduce sysfs API for flushing pending requests
  - PCI: pnv_php: Clean up allocated IRQs on unplug
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list
  - fs/buffer: fix use-after-free when call bh_read() helper
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - loop: Avoid updating block size under exclusive owner
  - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
  - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - net/atm/resources: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE
  - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
  - btrfs: adjust subpage bit start based on sectorsize
  - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
  - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
  - net_sched: ets: Fix double list add in class with netem as child qdisc
  - pds_core: Prevent possible adminq overflow/stuck condition
  - qibfs: fix _another_ leak
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - bus: fsl-mc: fix double-free on mc_dev
  - usb: gadget : fix use-after-free in composite_dev_cleanup()
  - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - fs/ntfs3: cancle set bad inode after removing name fails
  - f2fs: fix to bail out in get_new_segment()
  - net: ravb: Fix missing rtnl lock in suspend/resume path
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
  - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - f2fs: fix to avoid panic in f2fs_evict_inode
  - fscrypt: Don't use problematic non-inline crypto engines


author: Li Nan <linan122@huawei.com> - 6.6.0-114.0.0.118
changelog:
  - !18640 v3  Errata management for VM Live migration
  - !18638  CVE-2025-39982
  - !18564  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - !18639 net: hns3: fix null pointer in debugfs issue
  - KVM: arm64: fix kvm kabi conflict
  - smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI
  - smccc: kvm_guest: Fix kernel builds for 32 bit arm
  - smccc/kvm_guest: Enable errata based on implementation CPUs
  - arm64: Make  _midr_in_range_list() an exported function
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2
  - KVM: arm64: Specify hypercall ABI for retrieving target implementations
  - arm64: Modify _midr_range() functions to read MIDR/REVIDR internally
  - KVM: arm64: Allow userspace to change the implementation ID registers
  - KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value
  - KVM: arm64: Maintain per-VM copy of implementation ID regs
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
  - !18624 tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - !18622 support mempool feature
  - net: hns3: fix null pointer in debugfs issue
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - net: hns3: fixed vf get max channels bug
  - net: hns3: `req_autoneg` for fiber is initialized to `support_autoneg` instead of OFF.
  - net: hns3: use user configure after hardware reset when using kernel PHY.
  - net: hns3: Return error code when function fails.
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
  - net: hns3: using the num_tqps in the vf driver to apply for resources
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !18550  cpu/SMT: recover global num_threads after disable smt switch fail
  - !18589 net: hibmcge: support pci_driver.shutdown()
  - !18579  regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18415  sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - !18593  crypto: essiv - Check ssize for decryption and in-place encryption
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools/include: Sync arm64 headers with the kernel sources
  - tools/include: Sync arm64 asm/cputype.h with the kernel sources
  - openeuler_defconfig: enable CONFIG_PFN_RANGE_ALLOC by default
  - mm/pfn_range_alloc: check if folio is hwpoisoned in pfn_range_free
  - mm/pfn_range_alloc: add a interface to show borrowable physical range
  - mm/pfn_range_alloc: support update cachable attribue of linear mapping
  - mm/pfn_range_alloc: introduce set_linear_mapping_invalid
  - mm/pfn_range_alloc: introduce hugetlb_pool_alloc_size
  - mm/pfn_range_alloc: add tracepoint for hugetlb_pool_alloc and hugetlb_pool_free
  - mm/pfn_range_alloc: add tracepoint for pfn_range_alloc and pfn_range_free
  - mm/pfn_range_alloc: support allocate and free from hugetlb pool
  - mm/pfn_range_alloc: add interfaces to alloc/free for drivers
  - mm/pfn_range_alloc: reserve memory for each node
  - mm/contig_alloc: fix alloc_contig_range when __GFP_COMP and order < MAX_ORDER
  - mm: page_alloc: speed up fallbacks in rmqueue_bulk()
  - mm/page_alloc: clarify should_claim_block() commentary
  - mm/page_alloc: clarify terminology in migratetype fallback code
  - mm/page_alloc: add some detailed comments in can_steal_fallback
  - mm: page_alloc: remove remnants of unlocked migratetype updates
  - mm: page_alloc: don't steal single pages from biggest buddy
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()
  - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook()
  - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess
  - mm/page_alloc: make __alloc_contig_migrate_range() static
  - mm/page_isolation: don't pass gfp flags to isolate_single_pageblock()
  - mm/contig_alloc: support __GFP_COMP
  - mm: remove unused has_isolate_pageblock
  - mm: page_alloc: simpify page del and expand
  - mm: remove migration for HugePage in isolate_single_pageblock()
  - mm/page_alloc: keep track of free highatomic
  - mm: page_alloc: fix highatomic typing in multi-block buddies
  - mm: page_alloc: batch vmstat updates in expand()
  - mm: page_alloc: change move_freepages() to __move_freepages_block()
  - mm: page_alloc: consolidate free page accounting
  - mm: page_isolation: prepare for hygienic freelists
  - mm: page_alloc: set migratetype inside move_freepages()
  - mm: page_alloc: close migratetype race between freeing and stealing
  - mm: page_alloc: fix freelist movement during block conversion
  - mm: page_alloc: fix move_freepages_block() range error
  - mm: page_alloc: move free pages when converting block during isolation
  - mm: page_alloc: fix up block types when merging compatible blocks
  - mm: page_alloc: optimize free_unref_folios()
  - mm: page_alloc: remove pcppage migratetype caching
  - mm: page_alloc: simplify __free_pages_ok()
  - mm/page_alloc: remove unnecessary next_page in break_down_buddy_pages
  - mm/page_alloc: remove unnecessary check in break_down_buddy_pages
  - !18608  mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - !18588 add memory ras feature support
  - mm: add memory reclaim notifier
  - mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - panic: add notifier call before other cpu shutdown
  - !18592  Make ID reg writable
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - KVM: arm64: use KABI_EXTEND to revert struct kvm kabi change
  - KVM: arm64: Make AA64PFR1_EL1.NMI writeable
  - KVM: arm64: Expose S1PIE to guests
  - KVM: arm64: Sanitise ID_AA64MMFR3_EL1
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
  - KVM: arm64: Make ID_AA64MMFR1_EL1.{HCX, TWED} writable from userspace
  - KVM: arm64: Remove duplicated AA64MMFR1_EL1 XNX
  - KVM: arm64: Make the L1Ip feature bits in CTR_EL0 writable from userspace
  - KVM: arm64: rename functions for invariant sys regs
  - KVM: arm64: show writable masks for feature registers
  - KVM: arm64: Treat CTR_EL0 as a VM feature ID register
  - KVM: arm64: Add helper for writing ID regs
  - KVM: arm64: Use read-only helper for reading VM ID registers
  - KVM: arm64: Only reset vCPU-scoped feature ID regs once
  - KVM: arm64: Reset VM feature ID regs from kvm_reset_sys_regs()
  - KVM: arm64: Rename is_id_reg() to imply VM scope
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace
  - KVM: arm64: Document vCPU feature selection UAPIs
  - KVM: arm64: Allow userspace to change ID_AA64ZFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64PFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64MMFR{0-2}_EL1
  - KVM: arm64: Allow userspace to change ID_AA64ISAR{0-2}_EL1
  - KVM: arm64: Bump up the default KVM sanitised debug version to v8p8
  - KVM: arm64: Reject attempts to set invalid debug arch version
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version
  - KVM: arm64: Use guest ID register values for the sake of emulation
  - KVM: arm64: Document KVM_ARM_GET_REG_WRITABLE_MASKS
  - KVM: arm64: Allow userspace to get the writable masks for feature ID registers
  - net: hibmcge: support pci_driver.shutdown()
  - net: hibmcge: select FIXED_PHY
  - !18568 support NUMA.remote feature
  - !18498  serial: 8250: fix panic due to PSLVERR
  - regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18409 crypto: hisilicon - support for new ZIP features
  - !18545  HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - !18563  arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - mm/numa_remote: add kernel doc for numa remote feature
  - mm/numa_remote: extend cmdline numa_remote to limit the max number of remote node
  - mm: memory-failure: use kill_accessing_process() in ghes
  - mm: memory-failure: remove task_struct from kill_accessing_process()
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
  - arm64: configs: enable NUMA_REMOTE by default
  - mm/numa_remote: enable oom_kill_cpuless_numa_allocating_task when numa_remote is enabled
  - mm/oom_kill: kill current in OOM when binding to cpu-less nodes
  - mm/numa_rmeote: add preonline interface for each memory device
  - mm/numa_remote: add pre-online count in meminfo
  - mm/numa_remote: add sysfs to distinguish whether a remote node
  - mm/numa_remote: introduce hugetlb_nowatermark mode for remote node
  - mm/numa_remote: undo isolation of remote memory asynchronously
  - mm/numa_remote: introduce pre-online mode to support hotplug unready memory
  - mm/numa_remote: introduce nofallback mode for remote node
  - mm/numa_remote: support to set node distance
  - mm/numa_remote: support to hotplug/hotremove remote memory
  - mm/numa_remote: prepare numa node for remote memory
  - mm/memory_hotplug: support to hotplug memory on ZONE_EXTMEM
  - mm/hugetlb: fix folio is still mapped when deleted
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - !18559  arm64/mpam: Fix MBWU monitor overflow handling
  - !18544  fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !18536  arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18130 Net: nebula_matrix: set nebula_matrix driver to a newer state
  - !16777 RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - arm64/mpam: Print MPAM register operation for debug
  - arm64/mpam: Fix MBWU monitor overflow handling
  - cpu/SMT: recover global num_threads after disable smt switch fail
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !17676 [OLK-6.6] Backported patches of Transient Scheduler Attacks (TSA)
  - arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18533 [OLK-6.6]:update patches for sw64 architecture
  - !18516  arm64: Add support for HIP09 Spectre-BHB mitigation
  - !18457  arm64: add cnp verification on Hisilicon erratum 162100125
  - !18513  Fix CVE-2025-39679
  - !18531  arm/syscalls: mark syscall invocation as likely in
  - !11635  arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
  - !18507 Fix wrong CPU aff3 conversion between  MPIDR and SYS_LSUDVMBM_EL2
  - sw64: add CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y to defconfig
  - sw64: fix the condition for enabling hw_una_enabled
  - sw64: efi: fix compile error when CONFIG_EFI=n
  - sw64: powercap: fix misuse of an uninitialized temporary variable
  - sw64: powercap: increase the interval of polling mode
  - sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
  - sw64: powercap: avoid checking meaningless target freq
  - sw64: smp: fix unaligned access before trap_init()
  - sw64: irqchip: update effective affinity for INTx
  - sw64: msi: fix affinity change of managed irq
  - sw64: use orig_r0 as syscall nr
  - sw64: revert ioremap() to __va() in ioport_map()
  - sw64: fix unresolved reference error when close pci
  - sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
  - arm/syscalls: mark syscall invocation as likely in invoke_syscall
  - !18517  media: rc: fix races with imon_disconnect()
  - !18327 net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - !18488 RDMA/hns: Fix wrong WQE data when QP wraps around
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
  - media: rc: fix races with imon_disconnect()
  - arm64: Add support for HIP09 Spectre-BHB mitigation
  - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
  - !18495  CVE-2025-39967
  - !18258  perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions and Don't use PMCCNTR_EL0 on SMT cores
  - serial: 8250: fix panic due to PSLVERR
  - fbcon: Fix OOB access in font allocation
  - fbcon: fix integer overflow in fbcon_do_set_font
  - !16738 perf vendor events arm64: Add N2, V2, N3, V3 events/metrics
  - !18385  e1000e: fix heap overflow in e1000_set_eeprom
  - !18395  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - config: enable CONFIG_MITIGATION_TSA and CONFIG_KVM_HYPERV by default on x86
  - x86/cpu: Shorten CPU matching macro
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines
  - x86/microcode/AMD: Handle the case of no BIOS microcode
  - KVM: SVM: Advertise TSA CPUID bits to guests
  - tools headers: Sync x86 headers with the kernel source
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  - x86/microcode/AMD: Add some forgotten models to the SHA check
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array
  - x86/microcode/AMD: Split load_microcode_amd()
  - x86/microcode/AMD: Pay attention to the stepping dynamically
  - KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page()
  - x86/microcode/intel: Set new revision only after a successful update
  - x86/platform/atom: Switch to new Intel CPU model defines
  - x86/process: Move the buffer clearing before MONITOR
  - x86/microcode/AMD: Add TSA microcode SHAs
  - x86/microcode/AMD: Load only SHA256-checksummed patches
  - x86/microcode/AMD: Add get_patch_level()
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode()
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
  - x86/microcode/AMD: Avoid -Wformat warning with clang-15
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool
  - x86/microcode/AMD: Flush patch buffer mapping after application
  - x86/microcode: Rework early revisions reporting
  - x86/bugs: Add a Transient Scheduler Attacks mitigation
  - x86/bugs: Rename MDS machinery to something more generic
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h>
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init()
  - x86/cpu: Expose only stepping min/max interface
  - x86/cpu: Introduce new microcode matching helper
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines
  - cpufreq: Switch to new Intel CPU model defines
  - EDAC/skx: Switch to new Intel CPU model defines
  - EDAC/i10nm: Switch to new Intel CPU model defines
  - x86/aperfmperf: Switch to new Intel CPU model defines
  - x86/apic: Switch to new Intel CPU model defines
  - x86/bugs: Switch to new Intel CPU model defines
  - x86/CPU/AMD: Improve the erratum 1386 workaround
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake
  - KVM: x86: Make Hyper-V emulation optional
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS
  - KVM: VMX: Split off hyperv_evmcs.{ch}
  - net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - RDMA/hns: Fix wrong WQE data when QP wraps around
  - arm64: add cnp verification on Hisilicon erratum 162100125
  - net:nebula-matrix:Add S1000 SNIC driver support
  - sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - crypto: hisilicon/qm - clear all VF configurations in the hardware
  - Revert "crypto: hisilicon/qm - fix vfs_num error"
  - crypto: hisilicon/qm - invalidate queues in use
  - Revert "crypto: hisilicon/qm - invalidate queues in use"
  - Revert "crypto: hisilicon/qm - clear the memory before enabling the device"
  - crypto: hisilicon/zip - add hashjoin, gather, and UDMA data move features
  - crypto: hisilicon/zip - add lz4 and lz77_only to algorithm sysfs
  - crypto: hisilicon/sec2 - Fix false-positive warning of uninitialised qp_ctx
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - e1000e: fix heap overflow in e1000_set_eeprom
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions
  - RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - perf vendor events arm64: Add V3 events/metrics
  - perf vendor events arm64: Add N3 events/metrics
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event
  - perf vendor events arm64: Update N2/V2 events from source
  - arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register


author: Li Nan <linan122@huawei.com> - 6.6.0-115.0.0.119
changelog:
  - !18713 iommu: Enabling Broadcast TLB Maintenance (BTM) for UMMU on ARM64
  - iommu: Fix kabi breakage due to opening KVM_PINNED_VMID
  - vfio: Fix kabi breakage due to closing VFIO_CONTAINER
  - iommu: Pass in kvm pointer to domain_alloc_user
  - iommufd: Associate kvm pointer to iommufd ctx
  - KVM: arm64: Introduce support to pin VMIDs
  - KVM: Add generic infrastructure to support pinned VMIDs
  - !18695 PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - !18761 net: hns3: the multi-tcs VF can be configured only when the interface is down
  - !18735  KVM: arm64: Prevent access to vCPU events before init
  - !18598 arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - net: hns3: the multi-tcs VF can be configured only when the interface is down
  - net: hns3: remap vf's queue and qset when vport start
  - net: hns3: support dpdk using vf multiple tcs
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !18597 iommu/ummu-core: Add ummu-core framework.
  - !18316  jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - KVM: arm64: Prevent access to vCPU events before init
  - !18421 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.84-6.6.85 LTS Patches
  - !18702  i40e: fix idx validation in i40e_validate_queue_map
  - !18699  *** CVE-2025-39973 ***
  - !18649  tty: n_gsm: Don't block input queue by waiting MSC
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - iommu/ummu-core: core interfaces for ummu drivers
  - iommu/ummu-core: impl ioctl interface for /dev/ummu device
  - iommu/ummu-core: add pseudo Token Dev for Token ID abstraction
  - iommu/ummu-core: add UMMU Token ID operation interfaces
  - iommu/ummu-core: add UMMU EID operation interfaces
  - iommu/ummu-core: support IOVA on demand mapping
  - iommu/ummu-core: get iova_domain from iommu_domain
  - !18659  ptp: Add a upper bound on max_vclocks
  - !18680  futex: Prevent use-after-free during requeue-PI
  - !18683  qed: Don't collect too many protection override GRC elements
  - !18682  i40e: fix validation of VF state in get resources
  - !18681  i40e: fix input validation logic for action_meta
  - !18679  cnic: Fix use-after-free bugs in cnic_delete_task
  - !18668  openvswitch: Fix unsafe attribute parsing in output_userspace()
  - !18267  CVE-2025-39832
  - !18705  mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - Revert "watchdog/perf: Provide function for adjusting the event period"
  - Revert "arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh"
  - !18690 [OLK-6.6] Fix CVE-2025-38290
  - !18672 [OLK-6.6] Fix CVE-2025-38286
  - !17950 net: atm: add lec_mutex
  - iommu/ummu-core: introduce UMMU-CORE, basic configs
  - iommu/ummu-core: support iommu ksva mode
  - iommu/ummu-core: introduce iommu sva permission operation
  - iommu/ummu-core: introduce iommu_sva_bind_isolated interface
  - iommu/ummu-core: add the user invalidation type in iommufd file
  - iommu/ummu-core: iommu_dev new min_pasids attribute
  - mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - i40e: fix idx validation in i40e_validate_queue_map
  - i40e: add validation for ring_len param
  - i40e: increase max descriptors for XL710
  - !18372 sched/fair: remove qos_reweight logic under non-SMP scenario
  - !18423 ext4: disambiguate the return value of ext4_dio_write_end_io()
  - !18328 [OLK-6.6] fix txgbe link fec issues and  enhance hot reset mechanism
  - wifi: ath12k: fix node corruption in ar->arvifs list
  - !18662 net: hibmcge: fix the inappropriate netif_device_detach()
  - !18605 net: ubl: add depend to ARM64 and remove config in x86
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - futex: Prevent use-after-free during requeue-PI
  - cnic: Fix use-after-free bugs in cnic_delete_task
  - !18666  bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - !18270  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !18271  libceph: fix invalid accesses to ceph_connection_v1_info
  - !18272  CVE-2025-39889
  - !18273  ppp: fix memory leak in pad_compress_skb
  - !18268  RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - openvswitch: Fix unsafe attribute parsing in output_userspace()
  - pinctrl: at91: Fix possible out-of-boundary access
  - !18646  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18630  tracing: dynevent: Add a missing lockdown check on dynevent
  - bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - iommu/ummu-core: New ub bus added to the iommu framework
  - !18525 ub: add UBUS and UBFI driver framework
  - !18486  ACPI: pfr_update: Fix the driver update version check
  - !18363  comedi: pcl726: Prevent invalid irq number
  - net: hibmcge: fix the inappropriate netif_device_detach()
  - net: hibmcge: remove unnecessary check for np_link_fail in scenarios without phy.
  - net: hibmcge: fix rx buf avl irq is not re-enabled in irq_handle issue
  - ptp: Add a upper bound on max_vclocks
  - tty: n_gsm: Don't block input queue by waiting MSC
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - tracing: dynevent: Add a missing lockdown check on dynevent
  - ub:ubus: Supports decoder event processing
  - ub:ubus: Support for sending decoder commands
  - ub:ubus: Support for range table mapping and unmapping functions
  - ub:ubus: Support for page-range table address mapping and unmapping
  - ub:ubus: Support for Bus EID-UPI Table Configuration
  - ub:ubus: Support for UB Character Device Driver
  - ub:ubus: Support UBUS RAS capability
  - ub:ubus: Creating and deleting ub decoder page table mappings
  - ub:ubus: Adding a ue Creation Destruction Mechanism
  - ub:ubus: Enable the ub decoder device support
  - ub:ubus: Add UBUS RAS framework
  - ub:ubus: Support configuration of device information interface
  - ub:ubus: Support for enabling and disabling ue
  - ub:ubus: Add MSI capability for UBUS driver
  - ub:ubus: Add UBUS MSI basic functions
  - ub:ubus: Support UBUS Interrupt framework
  - ub:ubus: Add UBUS capability interfaces
  - ub:ubus: Support device level and port level reset
  - ub:ubus: Support for multiple mue enablement
  - ub:ubus: Support UB device enabling basic interface
  - ub:ubus: Supports device enumeration.
  - ub:ubus: Support for UB Bus Controller Enumeration
  - ub:ubus: Support for shortest path routing configuration
  - ub:ubus: Supports network address configuration and querying
  - ub:ubus: Support enumeration topology query commands
  - ub:ubus: Add UBUS resource space basic functions
  - ub:ubus: Add UBUS resource space framework
  - ub:ubus: Support for UB bus enumeration message initialization
  - ub:ubus: Support for UB routing table configuration function
  - ub:ubus: Add CNA allocate and free interfaces by kernel
  - ub:ubus: Add EID allocate and free interfaces by kernel
  - ub:ubus: Support cc configuration and query
  - ub:ubus: Supporting the UB Shared Port Function
  - ub:ubus: Support for UB port sysfs attribute files
  - ub:ubus: Support Ubus read/write configuration functions
  - ub:ubus: Support for UB Bus Port Management Framework
  - ub:ubus: Add Ubus setting configuration space function
  - ub:ubus: Support for UB Bus DMA Configuration Function
  - ub:ubfi: ubfi driver create ubc device
  - ub:ubus: Support for ubus messaging communication framework
  - ub:ubus: add ubus controller framework
  - ub:ubfi: ubfi driver parse ubc information from ubrt
  - ub:ubus: Support UB Bus Attribute Group
  - ub:ubfi: Support ub firmware interface basic functions
  - ub:ubus: Support for ub bus driver framework
  - net: ubl: add depend to ARM64 and remove config in x86
  - net: ubl: modify the description in Kconfig of UB
  - ACPI: pfr_update: Fix the driver update version check
  - net: txgbe: fix invoke hot reset multi times unexpectedly
  - net: txgbe: fix race condition when recover or close/suspend
  - net: txgbe: fix fec mode issues
  - net: txgbe: set pf promisc and vlan cannot receive packets
  - net: txgbe: fix 25G link issues
  - net: txgbe: change default tx queue depth
  - net: txgbe: fix i2c issues
  - net: txgbe: fix can't read rx_pb_n_pxoff
  - ext4: disambiguate the return value of ext4_dio_write_end_io()
  - net: lwtunnel: disable BHs when required
  - netfilter: nft_counter: Use u64_stats_t for statistic.
  - wifi: iwlwifi: mvm: ensure offloading TID queue exists
  - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
  - mptcp: Fix data stream corruption in the address announcement
  - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
  - drm/amd/display: should support dmub hw lock on Replay
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
  - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
  - drm/sched: Fix fence reference count leak
  - batman-adv: Ignore own maximum aggregation size during RX
  - efi/libstub: Avoid physical address 0x0 when doing random allocation
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment
  - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
  - mmc: atmel-mci: Add missing clk_disable_unprepare()
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
  - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
  - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
  - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
  - accel/qaic: Fix integer overflow in qaic_validate_req()
  - regulator: dummy: force synchronous probing
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
  - drm/v3d: Don't run jobs that have errors flagged in its fence
  - can: flexcan: disable transceiver during system PM
  - can: flexcan: only change CAN state when link up in system PM
  - can: ucan: fix out of bound read in strscpy() source
  - can: rcar_canfd: Fix page entries in the AFL list
  - i2c: omap: fix IRQ storms
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
  - net: lwtunnel: fix recursion loops
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
  - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
  - accel/qaic: Fix possible data corruption in BOs > 2G
  - Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured
  - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
  - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
  - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
  - soc: imx8m: Use devm_* to simplify probe failure handling
  - soc: imx8m: Remove global soc_uid
  - xfrm_output: Force software GSO only in tunnel mode
  - xfrm: fix tunnel mode TX datapath in packet offload mode
  - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
  - firmware: imx-scu: fix OF node leak in .probe()
  - net: txgbe: fix bond port rate is unknown when linkup
  - net: txgbe: fix VF multicast address removal not taking effect
  - net: txgbe: fix missing PFC mask configuration on AML
  - net: txgbe: fix pktgen cannot stop
  - sched/fair: remove qos_reweight logic under non-SMP scenario
  - comedi: pcl726: Prevent invalid irq number
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - ppp: fix memory leak in pad_compress_skb
  - Bluetooth: hci_event: Fix not using key encryption size when its known
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level
  - Bluetooth: l2cap: Check encryption key size on incoming connection
  - libceph: fix invalid accesses to ceph_connection_v1_info
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - net/mlx5: Fix lockdep assertion on sync reset unload event
  - net/mlx5: Add support for sync reset using hot reset
  - net/mlx5: Add device cap for supporting hot reset in sync reset flow
  - net/mlx5: Reload auxiliary drivers on fw_activate
  - net: txgbe: fix DAC cable link down
  - net: txgbe: fix display of supports Wake-on in the ethtool
  - net: atm: add lec_mutex


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-115.0.0.120
changelog:
  - RISC-V kernel upgrade to 6.6.0-115.0.0
  - Remove CI-related file changes
  - riscv: Backport steal-time support for RISC-V
  - riscv: RISC-V SBI debug console extension support
  - riscv: Add support for kernel mode vector


author: Li Nan <linan122@huawei.com> - 6.6.0-117.0.0.121
changelog:
  - !17926 spufs: fix a leak on spufs_new_file() failure
  - !18393 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - !18389 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - !18381 f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - !18370 dmaengine: ti: Add NULL check in udma_probe()
  - !18674 jfs: fix array-index-out-of-bounds read in add_missing_indices
  - !18438 jfs: Fix null-ptr-deref in jfs_ioc_trim
  - !18435 ksmbd: fix null pointer dereference in destroy_previous_session
  - !18434 tty: serial: uartlite: register uart driver in init
  - !18404 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-&gt;memcg_path on write
  - !18799 [OLK-6.6] Fix CVE-2025-38336
  - !18798 [OLK-6.6] Fix CVE-2025-38335
  - !18793 [OLK-6.6] Fix CVE-2025-38275
  - !18789 [OLK-6.6] Fix CVE-2025-38274
  - !18786 [OLK-6.6] Fix CVE-2025-38300
  - !18781 [OLK-6.6] Fix CVE-2025-38295
  - !18778 [OLK-6.6] Fix CVE-2025-38293
  - !18777 [OLK-6.6] Fix CVE-2025-38292
  - !18849 urma: introduce ubcore main module.
  - !18842 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.85-6.6.86 LTS Patches
  - !18484 btf: Avoid weak external references
  - !18921  blk-ioinf: introduce inflight-based IO QoS controller
  - blk-rq-qos: fix kabi broken in struct rq_qos
  - blk-mq: fix kabi broken in struct request
  - openeuler_defconfig: Enable CONFIG_BLK_CGROUP_IOINFLIGHT
  - blk-io-hierarchy: support new bio based stage ioinf
  - blk-ioinf: support percentile latency QoS for oneline workloads
  - blk-ioinf: dynamically adjust inflight limit to balance workloads
  - blk-ioinf: add rqos/inflight/stat debufs interface
  - blk-ioinf: introduce inflight-based IO QoS controller
  - !18863 drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - !18885 ub: ubase: Fix some compile warnings&fix pages free problem
  - !18910  um: virtio_uml: Fix use-after-free after put_device in probe
  - !18902  i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - urma: introduce ubcore main module.
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - ub: ubase: Fix some compile warnings
  - !18894  some bugfixes for NUMA.remote
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - !18723 GMEM: General Memory Management
  - !18852 vfio:ubus: Support Virtual Function I/O  of UBUS
  - !18788 ub: Support new features for UBUS
  - !18701 ubios_uvb: support uvb driver
  - mm/numa_remote: check if memory block is preonlined when undoing fake-online
  - mm/numa_remote: fix restoring to preonline when failing to offline from preonline
  - mm/numa_remote: fix memory leak of struct memory_block
  - !18840 v2  Backport some memory policy feature and bugfix from mainline
  - ub: ubase: Fix the problem that free pages when ubase driver destroy TA context
  - ubios_uvb: support CIS framework receive function
  - ubios_uvb: support CIS framework send function
  - ubios_uvb: support parse ubios information by dtb
  - ubios_uvb: support UBIOS object description specification parse
  - vfio:ubus: support obtaining and configuring function entity information in user mode
  - vfio:ubus: Support configuration for function entity interrupt
  - vfio:ubus: Support access to function entity resource space
  - vfio:ubus: Init vfio ub config space 1 perm and port perm bits during module init
  - vfio:ubus: Init vfio ub config space 0 perm bits during module init
  - vfio:ubus: Init vfio ub configuration space
  - vfio:ubus: Support ub vfio config read and write
  - vfio:ubus: Support for vfio ubus driver framework
  - ub:ubus: Support UBUS driver host probe and remove
  - ub:ubus: Add configuration and resource sysfs interfaces
  - ub:ubus: Add basic System Filesystem attributes
  - ub:ubus: Support processing protocol link messages
  - ub:ubus: Support hotplug processing main workflow
  - ub:ubus: Support for device enumeration during the hotplug phase
  - ub:ubus: Support for slot register configuration
  - ub:ubus: Support hotplug service driver
  - ub:ubus: Add generic ub component driver
  - ub:ubus: Add ub service driver framework
  - ub:ubus: Add new UBUS pool device interfaces
  - ub:ubus: Support UBUS pool devices register
  - ub:ubfi: register ubc usi domain
  - ub:ubus: Support for ub device resource space registration
  - ub:ubus: Add UBUS receive message framework
  - ub:ubus: Support device binding and unbinding bus instance
  - ub:ubus: Support for static cluster bus instance
  - ub:ubus: Support for dynamic bus instance
  - ub:ubus: Support for bus instance framework
  - ub:ubus: Support handle device link up and link down
  - ub:ubus: Support enumerate port and route set/clear for port
  - ub:ubus: Support route modify/delete function
  - !18750 iommu/ummu: Add ummu driver basic capabilities.
  - iommu/ummu: Add UMMU cache flush interfaces
  - iommu/ummu: Support UMMU event handling
  - iommu/ummu: Support UMMU global error handling
  - iommu/ummu: Support UMMU command queue
  - iommu/ummu: Support UMMU device
  - !18748 ub: ubfi: Support ummu node in ubfi
  - !18804 drivers/perf: hisi: Support UMMU pmu
  - !18855  mm: do not install PMD mappings when handling a COW fault
  - !18848 net:nebula-matrix:fix compile err
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - Revert "drivers/perf: hisi: Add support for HiSilicon NoC PMU"
  - Revert "drivers/perf: hisi: Add support for HiSilicon MN PMU driver"
  - ub: ubfi: Parsing ummu node in the ubrt table
  - net:nebula-matrix:fix compile err
  - mm: do not install PMD mappings when handling a COW fault
  - urma: implement workqueue management for ubcore module.
  - urma: implement topology information management for ubcore module.
  - urma: implement hash table utilities for ubcore module.
  - !18810 ub: ubase: support for advanced functions
  - urma: implement log module for ubcore subsystem.
  - gmem: open CONFIG_GMEM for arm64 and x86
  - mm: implement hmemcpy API
  - mm: implement hmadvise API
  - mm: support mmap/unmap peer-shared memory area
  - gmem: add gmem stat
  - gmem: support pin/unpin device memory
  - gmem: support swapping heterogeneous memory
  - gmem: implement page faulting for peer-shared vma
  - gmem: implement allocating/deallocating peer-shared vma.
  - gmem: introduce hnode for free peer-shared free page management
  - gmem: introduce vm_object for managing hetergoneous memory mapping
  - gmem: prepare config, boot parameter, vma flag and basic GMEM related structs
  - !18758  nbd: restrict sockets to TCP and UDP
  - !18407 net:Add a new protocol family definition AF_UB to support UB Memory based Socket(UMS)
  - !18839  rseq: Protect event mask against membarrier IPI
  - wifi: ath12k: fix invalid access to memory
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - net: usb: usbnet: restore usb%d name exception for local mac addresses
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
  - tty: serial: 8250: Add Brainboxes XC devices
  - tty: serial: 8250: Add some more device IDs
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe
  - counter: stm32-lptimer-cnt: fix error handling when enabling
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
  - mm/page_alloc: fix memory accept before watermarks gets initialized
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT
  - drm/dp_mst: Add a helper to queue a topology probe
  - drm/dp_mst: Factor out function to queue a topology probe work
  - ARM: Remove address checking for MMUless devices
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
  - mm/mempolicy: count MPOL_WEIGHTED_INTERLEAVE to "interleave_hit"
  - mm/mempolicy: fix memory leaks in weighted interleave sysfs
  - mempolicy: clean up minor dead code in queue_pages_test_walk()
  - mm/mempolicy: protect task interleave functions with tsk->mems_allowed_seq
  - mm/mempolicy: introduce MPOL_WEIGHTED_INTERLEAVE for weighted interleaving
  - mm/mempolicy: refactor a read-once mechanism into a function for re-use
  - mm/mempolicy: implement the sysfs-based weighted_interleave interface
  - mempolicy: migration attempt to match interleave nodes
  - mempolicy: mmap_lock is not needed while migrating folios
  - mempolicy: alloc_pages_mpol() for NUMA policy without vma
  - kernfs: drop shared NUMA mempolicy hooks
  - mempolicy: remove confusing MPOL_MF_LAZY dead code
  - mempolicy: mpol_shared_policy_init() without pseudo-vma
  - mempolicy trivia: use pgoff_t in shared mempolicy tree
  - mempolicy trivia: slightly more consistent naming
  - mempolicy trivia: delete those ancient pr_debug()s
  - mempolicy: fix migrate_pages(2) syscall return nr_failed
  - Revert "mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str"
  - ub: ubase: support for activate/deactivate dev interface
  - ub: ubase: pf supports debugfs query port/vl current.
  - ub: ubase: adds the function to get ub port stats for unic and other aux driver
  - ub: ubase: support pre-alloc 2M pages.
  - ub: ubase: support ras function
  - ub: ubase: Support to port reset
  - ub: ubase: Added QoS and traffic management debugging features
  - ub: ubase: Support reset count information statistics.
  - ub: ubase: Support for ELR and entity reset.
  - ub: ubase: Provide an entity_list query interface.
  - ub: ubase: support create and delete UM TP/TPG
  - ub: ubase: Support to config and query the sl scheduling mode and weight in ETS and TM modes.
  - ub: ubase: support querying sl information in initialization phase
  - ub: ubase: Supports for ctrl queue management.
  - rseq: Protect event mask against membarrier IPI
  - !18820 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !18817 [OLK-6.6] backport important bugfix for mpt3sas driver from upstream linux-6.6.y
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  - !18800 net: hibmcge: support pagepool for rx
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
  - !18745  *** Mainline PATCH backport ***
  - !18807  smb: client: fix wrong index reference in smb2_compound_op()
  - !18711  Bluetooth: hci_conn: Use disable_delayed_work_sync
  - !17268  LoongArch: fix nvme/megaraid/stmmac/uprobe/rtc/kdump problems
  - !18500 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Conflicts Patches
  - ub: ubase: adds the function that query oor caps
  - ub: ubase: Support for virtual register and unregister.
  - ub: ubase: Add trace events to aeqe and ceqe.
  - ub: ubase: Add the cmdq trace event print at the ubase layer.
  - ub: ubase: Support for timer/ext_dtb buffer management.
  - !18784  padata: Reset next CPU when reorder sequence wraps around
  - !18806 perf: fix ddrc redundant value set
  - !18802  KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - !18739  fs: udf: fix OOB read in lengthAllocDescs handling
  - !18710 ub: ubase: Add support of base driver for ub network
  - smb: client: fix wrong index reference in smb2_compound_op()
  - ub: ubase: Support for public Context memory allocation and release.
  - ub: ubase: support for cdma auxiliary device
  - ub: ubase: support for complete event process
  - ub: ubase: support for async event process
  - ub: ubase: add interrupt management framework and misc handler
  - ub: ubase: add function to query device resource
  - ub: ubase: add the function that query ueid
  - ub: ubase: support debugfs public interface.
  - ub: ubase: support for command process
  - ub: ubase: add support of ubase driver for ub network
  - perf: fix ddrc redundant value set
  - drivers/perf: hisi: Add the sysfs interface to configure pmu mpam
  - drivers/perf: hisi: Implement ummu-pmu driver.
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - net: hibmcge: support pagepool for rx
  - net: hibmcge: reduce packet drop under stress testing
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
  - padata: Reset next CPU when reorder sequence wraps around
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
  - wifi: ath11k: fix node corruption in ar->arvifs list
  - nbd: restrict sockets to TCP and UDP
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
  - x86/umip: Check that the instruction opcode is at least two bytes
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed
  - fs: udf: fix OOB read in lengthAllocDescs handling
  - net: Add a new protocol family AF_UB
  - Bluetooth: hci_conn: Use disable_delayed_work_sync
  - jfs: fix array-index-out-of-bounds read in add_missing_indices
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - regulator: max20086: fix invalid memory access
  - dmaengine: ti: Add NULL check in udma_probe()
  - selftests: net: test for lwtunnel dst ref loops
  - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou
  - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
  - net: ipv6: fix dst ref loop in ila lwtunnel
  - net: ipv6: fix missing dst ref drop in ila lwtunnel
  - arm64: dts: rockchip: add rs485 support on uart5 of px30-ringneck-haikou
  - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
  - btf: Avoid weak external references
  - vmlinux: Avoid weak reference to notes section
  - kallsyms: Avoid weak references for kallsyms symbols
  - jfs: Fix null-ptr-deref in jfs_ioc_trim
  - ksmbd: fix null pointer dereference in destroy_previous_session
  - tty: serial: uartlite: register uart driver in init
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - spufs: fix a leak on spufs_new_file() failure
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
  - LoongArch: Support mem=<size> kernel parameter
  - LoongArch: Reserve the EFI memory map region
  - LoongArch: Add debugfs entries to switch SFB/TSO state
  - LoongArch: uprobes: Remove redundant code about resume_era
  - LoongArch: uprobes: Remove user_{en,dis}able_single_step()
  - LoongArch: fix access mode of 7A2000 acpi gpio.
  - LoongArch: configs: enable zstd compressed firmware support
  - Loongarch: configs: Make EFI RTC built-in for correct vmcore timestamps
  - megaraid: Add udelay to avoid data error caused by dma sequence
  - nvme: Add udelay to avoid data error caused by dma sequence


author: Li Nan <linan122@huawei.com> - 6.6.0-119.0.0.122
changelog:
  - !19043  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18348 Intel: Backport PMU support for Intel Clearwater Forest platform
  - !18703 ub: udma: Support loading and unloading driver.
  - !19031 v6  fuse:io_uring: support fuse over io_uring
  - !19033 ub:ubus: Add ummu_map attribute in sysfs
  - !18980  misc: uacce - fix a null pointer access issue when poweroff
  - !18519 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - !18518 iio: imu: bno055: fix OOB access of hw_xlate array
  - !18515 s390/ism: fix concurrency management in ism_cmd()
  - !18493 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - !18506 Fix CVE-2025-39781
  - !18505 Fix CVE-2025-38696
  - !18504 Fix CVE-2025-38640
  - !18503 Fix CVE-2025-39716
  - !18502 Fix CVE-2025-39767
  - !18501 Fix CVE-2025-39693
  - !18494 Fix CVE-2025-39909
  - !18497 Fix CVE-2025-39952
  - !18492 Fix CVE-2025-39916
  - !18957 [OLK-6.6] Fix CVE-2025-39846
  - !18956 [OLK-6.6] Fix CVE-2025-39842
  - !18955 [OLK-6.6] Fix CVE-2025-39861
  - !18954 [OLK-6.6] Fix CVE-2025-39794
  - !18953 [OLK-6.6] Fix CVE-2025-39863
  - !18633 [OLK-6.6] Fix CVE-2025-38715
  - !18631 [OLK-6.6]Fix CVE-2025-38698
  - !18215 [OLK-6.6] Fix CVE-2025-38576
  - !18398 btrfs: avoid NULL pointer dereference if no valid csum tree
  - !18876 Fix CVE-2025-38011
  - !18388 fs/ntfs3: handle hdr_first_de() return value
  - !18369 usb: renesas_usbhs: Reorder clock handling and power management in probe
  - !18367 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - !18321 wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - !18310 net: usb: aqc111: debug info before sanitation
  - !18309 coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - !18949 [OLK-6.6] Fix CVE-2025-38107
  - !18947 [OLK-6.6] Fix CVE-2025-38126
  - !18946 [OLK-6.6] Fix CVE-2025-38218
  - !18945 [OLK-6.6] Fix CVE-2025-38217
  - !18944 [OLK-6.6] Fix CVE-2025-38230
  - !18814 [OLK-6.6] Fix CVE-2025-38225
  - !18813 [OLK-6.6] Fix CVE-2025-38185
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18812 [OLK-6.6] Fix CVE-2025-38206
  - !18675 wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - !18432 [OLK-6.6] Fix CVE-2025-38259
  - !18244 eventpoll: don't decrement ep refcount while still holding the ep mutex
  - !18245 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - !18243 f2fs: fix to do sanity check on ino and xnid
  - !18242 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - !18246 aoe: clean device rq_list in aoedev_downdev()
  - ub: udma: Support init and uninit dfx function.
  - ub: udma: Support register and unregister segment function.
  - ub: udma: Support set eid function.
  - ub: udma: Support register and unregister ctrlq event.
  - ub: udma: Support register and unregister ce and crq event.
  - ub: udma: Support register and unregister ae event.
  - ub: udma: Register and unregister debugfs.
  - ub: udma: Create and destroy u-context.
  - ub:ubus: Add ummu_map attribute in sysfs
  - openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default
  - fuse: remove unneeded atomic set in uring creation
  - fuse: removed unused function fuse_uring_create() from header
  - fuse: {io-uring} Fix a possible req cancellation race
  - fuse: fix possible deadlock if rings are never initialized
  - fuse: fix uring race condition for null dereference of fc
  - fuse: prevent disabling io-uring on active connections
  - fuse: enable fuse-over-io-uring
  - fuse: block request allocation until io-uring init is complete
  - fuse: {io-uring} Prevent mount point hang on fuse-server termination
  - fuse: Allow to queue bg requests through io-uring
  - fuse: Allow to queue fg requests through io-uring
  - fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static
  - fuse: {io-uring} Handle teardown of ring entries
  - fuse: Add io-uring sqe commit and fetch support
  - fuse: {io-uring} Make hash-list req unique finding functions non-static
  - fuse: Add fuse-io-uring handling into fuse_copy
  - fuse: Make fuse_copy non static
  - fuse: {io-uring} Handle SQEs - register commands
  - fuse: make args->in_args[0] to be always the header
  - fuse: Add fuse-io-uring design documentation
  - fuse: Move request bits
  - fuse: Move fuse_get_dev to header file
  - fuse: rename to fuse_dev_end_requests and make non-static
  - io_uring: fix kabi broken for header file changed
  - io_uring: fix kabi broken in struct io_submit_state
  - io_uring: fix kabi broken in struct io_ring_ctx
  - io_uring: fix kabi broken in struct io_tw_state
  - io_uring: kill dead code in io_req_complete_post
  - io_uring: remove dead struct io_submit_state member
  - io_uring/cmd: let cmds to know about dying task
  - io_uring: clean up io_lockdep_assert_cq_locked
  - io_uring: refactor io_req_complete_post()
  - io_uring: remove current check from complete_post
  - io_uring: get rid of intermediate aux cqe caches
  - io_uring: refactor io_fill_cqe_req_aux
  - io_uring: remove struct io_tw_state::locked
  - io_uring: force tw ctx locking
  - io_uring/cmd: document some uring_cmd related helpers
  - io_uring/cmd: fix tw <-> issue_flags conversion
  - io_uring/cmd: kill one issue_flags to tw conversion
  - io_uring/cmd: move io_uring_try_cancel_uring_cmd()
  - io_uring/cmd: give inline space in request to cmds
  - io_uring/cmd: expose iowq to cmds
  - io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
  - io_uring: split out cmd api into a separate header
  - io_uring: cancelable uring_cmd
  - io_uring: retain top 8bits of uring_cmd flags for kernel internal use
  - !19006 ub:ubus: Bugfix of ubus and ubfi
  - !18969  arm64/mpam: Add quirk to shrink MATA PMG range
  - ub:ubus: Bugfix of ubus and ubfi
  - ub: udma: Support loading and unloading driver.
  - !18859 KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19009 v2  mm: Fix shmem build and numa fault counting errors
  - !19019  media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19026  accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - !19024  sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !19027 v11  Add xcall 2.0 support
  - xcall2.0: Introduce xcall epollwait prefetch feature
  - openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default
  - xcall2.0: Add a basic testcase
  - xcall: Add debug mode to force fast syscall for all threads
  - xcall: Rework the early exception vector of XCALL and SYNC
  - xcall2.0: Support xcall1.0 for hardware xcall
  - xcall2.0: Hajack syscall with dynamic instruciton replace
  - xcall2.0: Add xcall_area
  - xcall2.0: Add xcall module register interface
  - xcall2.0: Add userspace proc interface
  - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !18988  zcopy: A zero-copy data transfer mechanism
  - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - mm: fix nr_pages counting for folio in task_numa_fault
  - mm: fix shmem build errors with CONFIG_SWAP disable
  - !18970 net: unic: Support advanced functions of unic driver
  - !18964 ub: add cdma driver code
  - !18874  mm: introduce memalloc_flags_{save,restore}
  - !18428 Add ccp-mdev feature into hygon ccp driver
  - !18440 [OLK-6.6] pinctrl: Zhaoxin: Add KH-50000 support
  - !18992  blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18482 [OLK-6.6] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !18478 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KH-50000
  - !18477 [OLK-6.6] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18467 [OLK-6.6] Enhance SM3 SM4 drivers with optimizations and compatibility fixes
  - !18450 [OLK-6.6] i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - !18449 [OLK-6.6] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18447 RDMA/bnxt_re: Fix error recovery sequence
  - !18448 bnxt_en: Fix ethtool -d byte order for 32-bit values
  - !18452 bnxt_en: Fix DCB ETS validation
  - !18961  mm: add huge pfnmap support for remap_pfn_range()
  - blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18950 urma: implement netlink and memory management features.
  - !18930 ubcore: implement device registration and jetty management
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - !18960  KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - misc: uacce - fix a null pointer access issue when poweroff
  - !18966  wakeup kswapd during node_reclaim
  - !18857 Backport PLR (Power Limit Reasons) TPMI driver for 6.6
  - !17988 [OLK-6.6] Fix CVE-2025-38734
  - !18005 [OLK-6.6] Fix CVE-2025-38718
  - !18977 mm: migrate: Fix the compilation error caused by redundant semicolons
  - mm: migrate: Fix the compilation error caused by redundant semicolons
  - !18943 smb: client: validate change notify buffer before copy
  - !18942 rtc: rx8025: fix incorrect register reference
  - !18051 [OLK-6.6] [Bugfix] Bug fix for min_free_kbytes warning storms
  - !18040 [OLK-6.6] Fix CVE-2025-39808
  - ub: cdma: support for cdma kernelspace north-south compatibility requirements
  - ub: cdma: support reset function
  - ub: cdma: support RX stop flow function
  - ub: cdma: support debugfs interface
  - ub: cdma: support dma faa semantic
  - ub: cdma: support dma cas semantic
  - ub: cdma: support dma read semantic
  - ub: cdma: support dma write with notify semantic
  - ub: cdma: support dma write semantic delivery
  - ub: cdma: support dma write semantic configuration
  - ub: cdma: support kernel resource reclamation
  - !18892 CCA: Fix soft lockup bug while destroy realm
  - ubcore: implement support for UVS commands
  - ubcore: implement device registration and jetty management
  - !18968 kvm: supports hugepages POD when migrate vm
  - ubcore: add device management for character device and class operations
  - kvm: supports hugepages POD when migrate vm
  - net: unic: Debugfs supports querying IP specifications and IP entries.
  - net: unic: support subscribes to the RX stream stop and recovery interface.
  - net: unic: support config/query traffic class parameters
  - net: unic: support config/query ets parameters
  - net: unic: Add debugfs support for QoS configuration and query.
  - net: unic: support config/query the mapping between dscp and tc
  - net: unic: Support RAS
  - net: unic: Drive supports ub entity reset.
  - net: unic: Support to query and clear historical NIC link status information
  - net: unic: support querying and configuring coalesce parameters.
  - net: unic: Add debugfs for JFS/JFR/JFC context.
  - net: unic: Support driver dump register.
  - arm64/mpam: Merge redundant local static variables 'cpus'
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !18963 kvm: supports hugepages reclaime notify
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arch_numa: Make node reclaim distance adjustment always available
  - kvm: supports hugepages reclaime notify
  - !18940 [OLK-6.6][linux-6.6.y sync] Backport 6.6.86-6.6.87 LTS Patches
  - arm64/x86: configs: Enable huge pfnmap support in openeuler defconfig
  - mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping
  - pgtable: add pte_clrhuge() implementation for arm64
  - arm64: mm: Drop dead code for pud special bit handling
  - mm/huge_memory: check pmd_special() only after pmd_present()
  - mm/arm64: support large pfn mappings
  - mm/x86: support large pfn mappings
  - mm: always define pxx_pgprot()
  - mm/fork: accept huge pfnmap entries
  - mm/pagewalk: check pfnmap for folio_walk_start()
  - mm/gup: detect huge pfnmap entries in gup-fast
  - mm: allow THP orders for PFNMAPs
  - mm: mark special bits for huge pfn mappings when inject
  - mm: drop is_huge_zero_pud()
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud
  - !18841 mm: add auxillary functions for folios and hugetlb
  - !18896 kvm: add struct kvm if only CONFIG_KVM enabled
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - mm: hugetlb: add putback_hugetlb_folio()
  - mm: hugetlb: add get_hugetlb_folio_nodemask() mm: hugetlb: add filter function to dequeue hugetlb functions
  - mm: migrate: add isolate_and_migrate_folios()
  - kvm: add struct kvm if only CONFIG_KVM enabled
  - !18908 [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - !18376 net: wangxun: ngbe: add support for wangxun 1G
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
  - ocfs2: prevent release journal inode after journal shutdown
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
  - !18887 urma: implement ubcore sysfs interface and device management
  - !18685 ub: add cdma driver code
  - !18684 ub: ub_fwctl:Add the ub_fwctl driver
  - net_sched: ets: fix a race in ets_qdisc_change()
  - [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
  - !18928 gmem: fix some warnings
  - !18938 dma-mapping: benchmark: add support for UB devices
  - f2fs: fix to do sanity check on sit_bitmap_size
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
  - jfs: validate AG parameters in dbMount() to prevent crashes
  - fs/jfs: consolidate sanity checking in dbMount
  - jfs: add sanity check for agwidth in dbMount
  - perf: Fix dangling cgroup pointer in cpuctx
  - nfsd: decrease sc_count directly if fail to queue dl_recall
  - tracing: Do not add length to print format in synthetic events
  - ksmbd: fix memory leak in parse_lease_state()
  - ipv6: Align behavior across nexthops during path selection
  - gre: Fix IPv6 multicast route creation.
  - gre: Fix again IPv6 link-local address generation.
  - Revert "drm/amd: Keep display off while going into S4"
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices"
  - Revert "PCI: Avoid reset when disabled via sysfs"
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
  - tracing: Do not use PERF enums when perf is not defined
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
  - nfsd: put dl_stid if fail to queue dl_recall
  - exec: fix the racy usage of fs_struct->in_exec
  - jfs: add index corruption check to DT_GETPAGE()
  - ext4: fix OOB read when checking dotdot dir
  - ext4: don't over-report free space or inodes in statvfs
  - arm64: Don't call NULL in do_compat_alignment_fixup()
  - tracing: Fix synth event printk format for str fields
  - tracing: Ensure module defining synth event cannot be unloaded while tracing
  - ksmbd: add bounds check for create lease context
  - ksmbd: add bounds check for durable handle context
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
  - mmc: omap: Fix memory leak in mmc_omap_new_slot
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
  - kunit/overflow: Fix UB in overflow_allocation_test
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
  - platform/x86: ISST: Correct command storage data length
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
  - x86/hyperv: Fix check of return value from snp_set_vmsa()
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
  - media: imx-jpeg: Cleanup after an allocation error
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
  - smb: client: validate change notify buffer before copy
  - ub: cdma: support register segment
  - ub: cdma: support unregister segment
  - ub: cdma: support reporting completed events
  - ub: cdma: support reporting asynchronous events
  - ub: cdma: support the creation of jfs
  - ub: cdma: support the deletion of jfs
  - ub: cdma: support the creation of ctp
  - ub: cdma: support the deletion of ctp
  - ub: cdma: support the creation of jfc
  - ub: cdma: support the deletion of jfc
  - ub: cdma: support for releasing queue
  - ub: cdma: support for allocating queue
  - ub: cdma: support for getting device by eid
  - ub: cdma: support for getting device list
  - ub: cdma: support querying sl information and updating eu
  - ub: cdma: support the probe and remove processes
  - !18906 v2  Add MFS Support
  - rtc: rx8025: fix incorrect register reference
  - !18920 perf: Fix tt_core mismatch over PG CPU
  - !18934  mm/thp: Add a new sysfs knob for zero COW
  - !18845  fs/resctrl: Fix the L3 CMAX conversion mechanism
  - !18858 ub: ubase: Support debugs functions
  - !18853 net: unic: add support of unic driver for ub network
  - !18901 ub:hisi-ubus: Support HISI-UBUS driver framework
  - !18927  mm: add nr_free_highatomic in show_free_areas
  - !18929 v2:mm/swap: get the swap device offset directly
  - perf/core: Fix child_total_time_enabled accounting bug at task exit
  - drm/amdgpu/gfx11: fix num_mec
  - ipv6: Do not consider link down nexthops in path selection
  - ipv6: Start path selection from the first nexthop
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
  - vsock: avoid timeout during connect() if the socket is closing
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
  - e1000e: change k1 configuration on MTP and later platforms
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
  - RISC-V: errata: Use medany for relocatable builds
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
  - ntb: intel: Fix using link status DB's
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
  - spufs: fix a leak in spufs_create_context()
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
  - memory: omap-gpmc: drop no compatible check
  - can: statistics: use atomic access in hot path
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
  - drm/amd: Keep display off while going into S4
  - nvme-pci: fix stuck reset on concurrent DPC and HP
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
  - x86/hyperv: Fix output argument to hypercall that changes page visibility
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
  - sched/deadline: Use online cpus for validating runtime
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
  - HID: i2c-hid: improve i2c_hid_get_report error message
  - platform/x86/intel/vsec: Add Diamond Rapids support
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
  - cifs: fix incorrect validation for num_aces field of smb_acl
  - perf/core: Fix perf_pmu_register() vs. perf_init_event()
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio
  - affs: don't write overlarge OFS data block size fields
  - affs: generate OFS sequence numbers starting at 1
  - wifi: brcmfmac: keep power during suspend if board requires it
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
  - nvme-pci: clean up CMBMSC when registering CMB fails
  - wifi: iwlwifi: mvm: use the right version of the rate API
  - wifi: iwlwifi: fw: allocate chained SG tables for dump
  - rcu-tasks: Always inline rcu_irq_work_resched()
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
  - sched/smt: Always inline sched_smt_active()
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
  - objtool: Fix segfault in ignore_unreachable_insn()
  - ring-buffer: Fix bytes_dropped calculation issue
  - net/mlx5e: SHAMPO, Make reserved size independent of page size
  - ksmbd: fix multichannel connection failure
  - ksmbd: use aead_request_free to match aead_request_alloc
  - rndis_host: Flag RNDIS modems as WWAN devices
  - exfat: fix the infinite loop in exfat_find_last_cluster()
  - NFS: Shut down the nfs_client only after all the superblocks
  - perf tools: annotate asm_pure_loop.S
  - fs/procfs: fix the comment above proc_pid_wchan()
  - tty: n_tty: use uint for space returned by tty_write_room()
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
  - perf python: Check if there is space to copy all the event
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space
  - perf python: Decrement the refcount of just created event on failure
  - perf python: Fixup description of sample.id event member
  - i3c: master: svc: Fix missing the IBI rules
  - um: hostfs: avoid issues on inode number reuse by host
  - um: remove copy_from_kernel_nofault_allowed
  - selftests/mm/cow: fix the incorrect error handling
  - fuse: fix dax truncate/punch_hole fault path
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
  - kexec: initialize ELF lowest address to ULONG_MAX
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
  - perf units: Fix insufficient array space
  - perf evlist: Add success path to evlist__create_syswide_maps
  - iio: adc: ad7124: Fix comparison of channel configs
  - iio: adc: ad4130: Fix comparison of channel setups
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
  - fs/ntfs3: Prevent integer overflow in hdr_first_de()
  - usb: xhci: correct debug message page size calculation
  - perf bench: Fix perf bench syscall loop count
  - perf arm-spe: Fix load-store operation checking
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
  - ucsi_ccg: Don't show failed to get FW build information error
  - perf pmu: Don't double count common sysfs and json events
  - coresight-etm4x: add isb() before reading the TRCSTATR
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - coresight: catu: Fix number of pages while using 64k pages
  - soundwire: slave: fix an OF node reference leak in soundwire slave device
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
  - perf stat: Fix find_stat for mixed legacy/non-legacy events
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
  - leds: Fix LED_OFF brightness race
  - mfd: sm501: Switch to BIT() to mitigate integer overflows
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
  - crypto: nx - Fix uninitialised hv_nxc on error
  - power: supply: max77693: Fix wrong conversion of charge input threshold value
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
  - clk: amlogic: g12a: fix mmc A peripheral clock
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
  - selftests/bpf: Select NUMA_NO_NODE to create map
  - clk: amlogic: gxbb: drop non existing 32k clock parent
  - clk: amlogic: g12b: fix cluster A parent data
  - pinctrl: tegra: Set SFIO mode to Mux Register
  - IB/mad: Check available slots before posting receive WRs
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  - RDMA/mlx5: Fix calculation of total invalidated pages
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
  - pinctrl: renesas: rza2: Fix missing of_node_put() call
  - lib: 842: Improve error handling in sw842_compress()
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
  - RDMA/mana_ib: Ensure variable err is initialized
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
  - clk: samsung: Fix UBSAN panic in samsung_clk_init()
  - selftests/bpf: Fix string read in strncmp benchmark
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock
  - fbdev: sm501fb: Add some geometry checks.
  - mdacon: rework dependency list
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode
  - PCI: histb: Fix an error handling path in histb_pcie_probe()
  - drm/amd/display: avoid NPD when ASIC does not support DMUB
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
  - PCI: Remove stray put_device() in pci_register_host_bridge()
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
  - PCI: Avoid reset when disabled via sysfs
  - PCI/portdrv: Only disable pciehp interrupts early when needed
  - PCI: brcmstb: Fix potential premature regulator disabling
  - PCI: brcmstb: Use internal register to change link capability
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing
  - drm/msm/dpu: don't use active in atomic_check()
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
  - PCI: Use downstream bridges for distributing resources
  - drm: xlnx: zynqmp: Fix max dma segment size
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly
  - drm/dp_mst: Fix drm RAD print
  - drm/bridge: ti-sn65dsi86: Fix multiple instances
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
  - ALSA: hda/realtek: Always honor no_shutup_pins
  - dt-bindings: vendor-prefixes: add GOcontroll
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
  - ASoC: cs35l41: check the return value from spi_setup()
  - platform/x86: dell-ddv: Fix temperature calculation
  - media: platform: allgro-dvt: unregister v4l2_device on the error path
  - media: verisilicon: HEVC: Initialize start_bit field
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
  - x86/traps: Make exc_double_fault() consistently noreturn
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
  - PM: sleep: Fix handling devices with direct_complete set on errors
  - EDAC/ie31200: Fix the error path order of ie31200_init()
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
  - selinux: Chain up tool resolving errors in install_policy.sh
  - RISC-V: KVM: Disable the kernel perf counter during configure
  - PM: sleep: Adjust check before setting power.must_resume
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
  - x86/platform: Only allow CONFIG_EISA for 32-bit
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
  - x86/fpu: Fix guest FPU state buffer allocation size
  - smack: dont compile ipv6 code unless ipv6 is configured
  - cpufreq: scpi: compare kHz instead of Hz
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
  - watch_queue: fix pipe accounting mismatch
  - ub: ub_fwctl: support ummu data processing
  - ub: ub_fwctl: query the MSG queue information and entry details within UB.
  - ub: ub_fwctl: support querying SCC and io_die related information.
  - ub: ub_fwctl: support querying UB link trace information.
  - ub: ub_fwctl: Support Dump register.
  - ub: ub_fwctl: supports querying and configuring some scattered registers.
  - ub: ub_fwctl: supports querying TP, BA related register information
  - dma-mapping: benchmark: add support for UB devices
  - ub: ub_fwctl: supports querying NL, TA, DL related register information
  - ub: ub_fwctl: Add some simple common framework functions
  - ub: ub_fwctl: Add the ub_fwctl driver and its basic features.
  - mm/thp: Add a new sysfs knob for zero COW
  - !18803  arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - net: unic: support querying and configuring queue parameters.
  - net: unic: support querying and configuring the number of queues.
  - net: unic: support querying and configuring simple RSS.
  - net: unic: support querying and configuring promisc.
  - net: unic: support querying and configuring MTU.
  - net: unic: support querying and configuring FEC parameters.
  - net: unic: add fec statistic support
  - net: unic: add rack ip for unic
  - net: unic: add io basic Rx/Tx functionality for unic
  - net: unic: add support of unic driver for ub network
  - !18914  misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - !18915  scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - !18916  software node: Correct a OOB check in software_node_get_reference_args()
  - !18917  KVM: x86: use array_index_nospec with indices that come from guest
  - !18877 iommu/ummu: Implement IOMMU ops and advanced capabilities.
  - mm/swap: get the swap device offset directly
  - mm: add nr_free_highatomic in show_free_areas
  - ub:ubus: reserve space for ub subsystem related structure
  - ub:hisi-ubus: Support UBUS configure EID-UPI table
  - ub:hisi-ubus: Support UBUS vdm entity enable message
  - ub:hisi-ubus: Support for MSGQ's debugging functionality
  - urma: implement ubcore sysfs interface and device management
  - mm: migrate: add isolate_folio_to_list()
  - urma: implement ubcore basic connection and bonding support
  - urma: add network framework facilities for ubcore.
  - urma: add tp table support and related cmd header for ubcore.
  - CCA: unmap state2 range can block to fix soft lockup while destroy realm
  - config: enable config for PLR
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID
  - perf: Fix tt_core mismatch over PG CPU
  - iommu/ummu: Add UMMU trace log
  - iommu/ummu: Support UMMU identity mapping
  - iommu/ummu: Add UB Memory support
  - iommu/ummu: Support UMMU iopf capability
  - iommu/ummu: Support UMMU nested mode
  - iommu/ummu: Add SVA API support to UMMU driver
  - iommu/ummu: Implement iommu_ops and iommu_domain_ops for UMMU driver
  - iommu/ummu: Implement domain and core ops in logic UMMU framework
  - iommu/ummu: Implement MPAM for QoS
  - iommu/ummu: Support UMMU attribute show and store operations
  - iommu/ummu: Implement IOMMU ops forwarding in logic UMMU framework
  - iommu/ummu: Support UMMU page table management
  - iommu/ummu: Introduce logic UMMU framework
  - iommu/ummu: Add UMMU permission queue
  - iommu/ummu: Add grant and ungrant operations for permission table
  - iommu/ummu: Add UMMU permission table memory management
  - iommu/ummu: Add UMMU private implementation
  - iommu/ummu: Add manager for UMMU permission table
  - iommu/ummu: Add tct/tect ops for configuration table
  - iommu/ummu: Support UMMU configuration table management
  - ub: ubase: Support querying dev caps.
  - ub: ubase: Supports the query of UBCL config.
  - ub: ubase: add function that query aeq/ceq/tp/tpg context
  - KVM: x86: use array_index_nospec with indices that come from guest
  - software node: Correct a OOB check in software_node_get_reference_args()
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - mfs: tool: Add mfs user space tool demo
  - mfs: Optimize mfs syncer process and metadata ops
  - mfs: enable MFS
  - MAINTAINERS: Add maintainer for mfs
  - mfs: Add MFS documentation
  - mfs: Add tracepoint for MFS
  - mfs: Add user command for handling events
  - mfs: Add communication devie and event acquisition operations
  - mfs: Add basic events framework
  - mfs: Add basic cache framework: check method and control structure
  - mfs: Add basic data operation for MFS
  - mfs: Add basic metadata operation for MFS
  - mfs: implement the mount procedure
  - mfs: Initialize mfs module
  - platform/x86/intel: power-domains: Add Clearwater Forest support
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits()
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits
  - platform/x86/intel: TPMI domain id and CPU mapping
  - platform/x86/intel/tpmi: Add API to get debugfs root
  - platform/x86/intel/tpmi: Add support for performance limit reasons
  - batman-adv: Switch to linux/array_size.h
  - ub:hisi-ubus: Support MSGQ queue exception handling
  - ub:hisi-ubus: Support for processing CQ request messages
  - ub:hisi-ubus: Provide callback functions for message devices
  - ub:hisi-ubus: Support for MSGQ channel processing in SQ and CQ
  - ub:hisi-ubus: Support for hisi MSGQ framework
  - ub:hisi-ubus: Support UBUS local RAS interfaces
  - ub:hisi-ubus: Support UBUS vdm pue/ue register and release
  - ub:hisi-ubus: Support UBUS vendor defined message framework
  - ub:hisi-ubus: Add HiSilicon ubus driver framework
  - drm/amdgpu: csa unmap use uninterruptible lock
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies
  - ASoC: codec: wcd9335: Convert to GPIO descriptors
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
  - mm: introduce memalloc_flags_{save,restore}
  - ub: ubase: Added debug information query function for FST/FVT/RQMT entries
  - ub: ubase: support debugfs for active dev stats.
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  - bpf: Disable migration in nf_hook_run_bpf().
  - gmem: fix some warnings
  - parisc: Revise __get_user() to probe user read access
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting
  - drm/amd/display: Avoid a NULL pointer dereference
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - eventpoll: don't decrement ep refcount while still holding the ep mutex
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - f2fs: fix to do sanity check on ino and xnid
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - aoe: clean device rq_list in aoedev_downdev()
  - arm64/mpam: Add quirk for L3 CPBM validity check
  - fs/resctrl: Fix the L3 CMAX conversion mechanism
  - kernel.h: Move ARRAY_SIZE() to a separate header
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  - exfat: fix double free in delayed_free
  - arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - configs: Add Zhaoxin GPIO pinctrl for kh-50000 in openeuler_config
  - pinctrl: Zhaoxin: Add KH-50000 support
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - iio: imu: bno055: fix OOB access of hw_xlate array
  - s390/ism: fix concurrency management in ism_cmd()
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - btrfs: avoid NULL pointer dereference if no valid csum tree
  - fs/ntfs3: handle hdr_first_de() return value
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - net: usb: aqc111: debug info before sanitation
  - net: usb: aqc111: fix error handling of usbnet read calls
  - coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - coresight: holding cscfg_csdev_lock while removing cscfg from csdev
  - coresight: change coresight_device lock type to raw_spinlock_t
  - hfs: fix slab-out-of-bounds in hfs_bnode_read()
  - jfs: Regular file corruption check
  - net: wangxun: ngbe: add support for wangxun 1G
  - RDMA/bnxt_re: Fix error recovery sequence
  - bnxt_en: Fix ethtool -d byte order for 32-bit values
  - bnxt_en: Fix DCB ETS validation
  - Fix kabi for CWF PMU support
  - crypto: sm4 - Refactor mode handling and optimize performance
  - i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - crypto: sm3 - Refactor code and harden security
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap()
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu
  - KVM: x86/pmu: Add common define to capture fixed counters offset
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools/include: Sync x86 headers with the kernel sources
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr()
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86: Optimize the is_x86_event
  - perf/x86/intel: Check the X86 leader for ACR group
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally
  - perf/x86/intel: Support auto counter reload
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload
  - perf: Extend the bit width of the arch-specific flag
  - perf/x86/intel: Track the num of events needs late setup
  - perf/x86: Add dynamic constraint
  - perf: Extend per event callchain limit to branch stack
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
  - perf/x86/intel: Support PEBS counters snapshotting
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - perf/x86/intel: Support RDPMC metrics clear mode
  - perf/x86/intel/ds: Add PEBS format 6
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS
  - perf/x86/intel/ds: Factor out functions for PEBS records processing
  - perf/x86/intel/ds: Clarify adaptive PEBS processing
  - perf/x86/intel: Support Perfmon MSRs aliasing
  - perf/x86/intel: Support PERFEVTSEL extension
  - perf/x86: Add config_mask to represent EVENTSEL bitmask
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86: Support counter mask
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - usb: renesas_usbhs: Reorder clock handling and power management in probe
  - perf/x86/intel: Support the PEBS event mask
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - powerpc/eeh: Make EEH driver device hotplug safe
  - mm: Use pr_warn_once() for min_free_kbytes warning
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
  - sctp: linearize cloned gso packets in sctp_rcv
  - net/smc: fix UAF on smcsk after smc_listen_out()


author: Li Nan <linan122@huawei.com> - 6.6.0-121.0.0.123
changelog:
  - !19291  usbnet: Fix using smp_processor_id() in preemptible code warnings
  - !19191  Fix CVE-2025-40200
  - !19303  pid: Add a judgment for ns null in pid_nr_ns
  - !19282  fix cves
  - !19211  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19175 [OLK-6.6] Fix CVE-2025-38666
  - !18496 [OLK-6.6] Fix CVE-2025-22107
  - !18029 [OLK-6.6] Fix CVE-2025-37892
  - !19151 [OLK-6.6] Fix CVE-2025-40055
  - !19131 [OLK-6.6] Fix CVE-2025-40012
  - !19125 [OLK-6.6] Fix CVE-2025-39692
  - !19124 [OLK-6.6] Fix CVE-2025-39694
  - !19133 [OLK-6.6] Fix CVE-2025-40082
  - !19118 [OLK-6.6] Fix CVE-2025-39703
  - !19113 [OLK-6.6] Fix CVE-2025-39938
  - !19111 [OLK-6.6] Fix CVE-2025-40043
  - !19100 obmm: Ownership Based Memory Management framework
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19285  xsched: XCU Partition
  - !19293  sched/rt: Fix race in push_rt_task
  - !19294  dm-stripe: fix a possible integer overflow
  - !19278 ub: ubase: Improve performance and fix some bug
  - dm-stripe: fix a possible integer overflow
  - sched/rt: Fix race in push_rt_task
  - usbnet: Fix using smp_processor_id() in preemptible code warnings
  - xsched: move stream_lock into xsched_vsm_add_tail() to avoid sleeping in atomic context
  - xsched: rename vstream->id to vstream->sq_id
  - xsched: add null check for sched in xsched_xse_set_class
  - xsched: modify the logic for inc and dec the count value
  - xsched: replace hard-coded numeric values
  - xsched: unify root detection logic for cgroups
  - xsched: remove parent->lock and rely on cgroup_mutex for shares update
  - xsched: avoid sleeping while holding spinlock in xcu_move_task()
  - xsched: add missing spin_unlock() in xcu_move_task() error path
  - xsched: enforce valid xsched scheduler config dependencies
  - xsched: unify log prefix format and remove duplicated prefix macros
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - mm/hugetlb: unshare page tables during VMA split, not before
  - !19194  ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - !19195  iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - !19273  net/ip6_tunnel: Prevent perpetual tunnel growth
  - !19272  tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19274  netfilter: nft_objref: validate objref and objrefmap expressions
  - !19052  arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - !19182  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19179  x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - !19178  fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - !19177  ACPICA: fix acpi parse and parseext cache leaks
  - !19176  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - ub: ubase: change cmdq/mbx timeout val & fix spell error
  - ub: ubase: adapt to response message structure change for ctrlq sl query
  - net: unic: Fix UE deactivate message cleaning
  - net: unic: Use copy instead of ummu map in tx
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - net/ip6_tunnel: Prevent perpetual tunnel growth
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19257  init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - obmm: Add resource management support for imported memory
  - obmm: Add sysfs interface for configuration and monitoring
  - obmm: Add low memory management support
  - obmm: Add ownership management and transfer mechanisms
  - obmm: Add mmap support for shared memory regions
  - obmm: Add shared memory device interface
  - obmm: Add pre-import support for performance optimization
  - obmm: Add memory region import functionality
  - obmm: Add address validation and checking
  - obmm: Add user address export support
  - obmm: Add memory region export functionality
  - obmm: Implement memory pool allocator
  - obmm: Add continuous memory allocator for OBMM framework
  - obmm: Add cache maintenance helpers for inter-node consistency
  - obmm: Add region definitions and core data structures
  - obmm: Add Ownership Based Memory Management framework
  - ub:hisi-ubus: Support for ub memory decoder ras handle
  - ub:hisi-ubus: Support for UB Memory Decoder Initialization
  - ub:ubus: Support for UB Memory Decoder general layer implementation
  - !19227  bpf: Avoid RCU context warning when unpinning htab with internal structs
  - !18830  mm: swap: check for stable address space before operating on the VMA
  - init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - !19165 Documentation: Add opensource document for ubase&unic&ubl
  - !19243 Revert "net: hns3: add support for queue bonding mode of flow director"
  - !19115  nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - !19222  sctp: Fix MAC comparison to be constant-time
  - !19223  net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - !19224  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19226  sunrpc: fix null pointer dereference on zero-length checksum
  - Revert "net: hns3: add support for queue bonding mode of flow director"
  - Revert "net: hns3: add queue bonding mode support for VF"
  - Revert "net: hns3: refactor the debugfs for dumping FD tcam"
  - Revert "net: hns3: correct the logic of hclge_sync_vf_qb_mode()"
  - Revert "net: hns3: allocate fd counter for queue bonding"
  - !19166 [OLK-6.6][linux-6.6.y sync] Backport 6.6.89-6.6.90 LTS Patches
  - !19116 Fix SPI registration failure logging level
  - !19216  net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - Fix SPI registration failure logging level
  - !19072 [OLK-6.6] Fix CVE-2025-39827
  - !18647 [OLK-6.6] Fix CVE-2025-38729
  - !19117 [OLK-6.6] Fix CVE-2025-40088
  - !19114 [OLK-6.6] Fix CVE-2025-40084
  - !19048 [OLK-6.6] Fix CVE-2025-39839
  - !18615 [OLK-6.6] Fix CVE-2025-39737
  - !18791 【OLK-6.6】fix CVE-2025-39736
  - !18644 [OLK-6.6] Fix CVE-2025-38717
  - !18653 [OLK-6.6] Fix CVE-2025-38705
  - !18780 【OLK-6.6】fix  CVE-2025-38712
  - !18613 [OLK-6.6] Fix CVE-2025-38713
  - !18632 [OLK-6.6] Fix CVE-2025-38714
  - !18861 [OLK-6.6] Fix CVE-2025-38697
  - !18345 [OLK-6.6] Fix CVE-2025-38663
  - !18948 [OLK-6.6] Fix CVE-2025-38105
  - !18661 [OLK-6.6] Fix CVE-2025-39790
  - !18867 [OLK-6.6] Fix CVE-2025-39766
  - !18636 [OLK-6.6]Fix CVE-2025-39751
  - !19110  CVE-2025-40198
  - !19212  CVE-2025-40179
  - !19057  blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - !19213  Fix CVE-2025-39964
  - !19189  KVM: arm64: ipiv: change declaration argument
  - bpf: Avoid RCU context warning when unpinning htab with internal structs
  - sunrpc: fix null pointer dereference on zero-length checksum
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - sctp: Fix MAC comparison to be constant-time
  - !19214 ub: udma: recent bugfix for udma.
  - !19209  Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - !19193  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - !19206  net: dlink: handle copy_thresh allocation failure
  - !19207  net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - ub: ubase: Introduces the functions and data structures exposed by the ubase driver
  - ub: ubase: Add ubase opensource document
  - net: unic: Add a doc for unic driver
  - ub: udma: Resolve issues related to stream logout and interrupt lock.
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
  - ext4: align max orphan file size with e2fsprogs limit
  - ext4: free orphan info with kvfree
  - ext4: verify orphan file size is not too big
  - ext4: use kmalloc_array() for array space allocation
  - ub: udma: reset and segment permission issues are resolved.
  - !19203  Fix CVE-2025-40202
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: dlink: handle copy_thresh allocation failure
  - spi: tegra114: Use value to check for invalid delays
  - platform/x86/amd: pmc: Clear metrics table at start of cycle
  - dm: fix copying after src array boundaries
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
  - drivers: base: handle module_kobject creation
  - kernel: globalize lookup_or_create_module_kobject()
  - kernel: param: rename locate_module_kobject
  - xhci: split free interrupter into separate remove and free parts
  - xhci: Clean up stale comment on ERST_SIZE macro
  - xhci: Use more than one Event Ring segment
  - xhci: Set DESI bits in ERDP register correctly
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
  - ARM: dts: opos6ul: add ksz8081 phy properties
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
  - firmware: arm_scmi: Balance device refcount when destroying devices
  - sch_htb: make htb_qlen_notify() idempotent
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
  - ASoC: Use of_property_read_bool()
  - net: vertexcom: mse102x: Fix RX error handling
  - net: vertexcom: mse102x: Add range check for CMD_RTS
  - net: vertexcom: mse102x: Fix LEN_MASK
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
  - net: fec: ERR007885 Workaround for conventional TX
  - net: ipv6: fix UDPv6 GSO segmentation with NAT
  - net: dsa: felix: fix broken taprio gate states after clock jump
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
  - net: dlink: Correct endianness handling of led_mode
  - nvme-pci: fix queue unquiesce check on slot_reset
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - pds_core: make pdsc_auxbus_dev_del() void
  - pds_core: delete VF dev on reset
  - pds_core: check health in devcmd wait
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
  - !19190  Revert "ipmi: fix msg stack when IPMI is disconnected"
  - !19167  drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - ipmi: Fix handling of messages with provided receive message pointer
  - ipmi: Rework user message limit handling
  - !19134  Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - !19119  dm: fix NULL pointer dereference in __dm_suspend()
  - !19137  ext4: guard against EA inode refcount underflow in xattr update
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - net/mlx5: E-switch, Fix error handling for enabling roce
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID
  - powerpc/boot: Fix dash warning
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
  - powerpc/boot: Check for ld-option support
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - Revert "ipmi: fix msg stack when IPMI is disconnected"
  - KVM: arm64: ipiv: change declaration argument
  - !19030  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19045 net: fix the compile problem introduced by AF_UB
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - ACPICA: fix acpi parse and parseext cache leaks
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: appletalk: Fix use-after-free in AARP proxy probe
  - net: ubl: Add a doc for ubl module
  - !19161 uburma: add tp_type in urma ioctl operation.
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  - selftests/bpf: validate that tail call invalidates packet pointers
  - selftests/bpf: freplace tests for tracking of changes_packet_data
  - cpufreq: Fix setting policy limits when frequency tables are used
  - cpufreq: Avoid using inconsistent policy->min and policy->max
  - smb: client: fix zero length for mkdir POSIX create context
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - dm: always update the array size in realloc_argv on success
  - dm-integrity: fix a warning on invalid table line
  - dm-bufio: don't schedule in atomic context
  - tracing: Do not take trace_event_sem in print_event_fields()
  - spi: tegra114: Don't fail set_cs_timing when delays are zero
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
  - mm/memblock: repeat setting reserved region nid if array is doubled
  - mm/memblock: pass size instead of end to memblock_set_node()
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  - i2c: imx-lpi2c: Fix clock count when probe defers
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  - EDAC/altera: Test the correct error reg offset
  - drm/fdinfo: Protect against driver unbind
  - btrfs: fix COW handling in run_delalloc_nocow()
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
  - !19143 [OLK-6.6][linux-6.6.y sync] Backport 6.6.88-6.6.89 LTS Patches
  - uburma: add tp_type in urma ioctl operation.
  - !19132  IPIV: fix bug in live migration
  - ocfs2: fix double free in user_cluster_connect()
  - !17056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Conflicts Patches
  - !18479 [OLK-6.6] xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - !19007  uio_hv_generic: Let userspace take care of interrupt mask
  - ACPI: PPTT: Fix processor subtable walk
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
  - ata: libata-scsi: Fix CDL control
  - net: fix the compile problem introduced by AF_UB
  - objtool: Silence more KCOV warnings, part 2
  - objtool: Ignore end-of-section jumps for KCOV/GCOV
  - nvme: fixup scan failure for non-ANA multipath controllers
  - MIPS: cm: Fix warning if MIPS_CM is disabled
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  - comedi: jr3_pci: Fix synchronous deletion of timer
  - driver core: introduce device_set_driver() helper
  - x86/pvh: Call C code via the kernel virtual mapping
  - md/raid1: Add check for missing source disk in process_checks()
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  - ubsan: Fix panic from test_ubsan_out_of_bounds
  - spi: tegra210-quad: add rate limiting and simplify timeout error message
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  - loop: aio inherit the ioprio of original request
  - riscv: Provide all alternative macros all the time
  - iomap: skip unnecessary ifs_block_is_uptodate check
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  - scsi: pm80xx: Set phy_attached to zero when device is gone
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  - ext4: make block validity check resistent to sb bh corruption
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
  - timekeeping: Add a lockdep override in tick_freeze()
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  - nvmet-fc: put ref when assoc->del_work is already scheduled
  - nvmet-fc: take tgtport reference only once
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - selftests/mincore: Allow read-ahead pages to reach the end of the file
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  - objtool: Stop UNRET validation on UD2
  - nvme: multipath: fix return value of nvme_available_path
  - nvme: re-read ANA log page after ns scan completes
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  - nvme: requeue namespace scan on missed AENs
  - xen: Change xen-acpi-processor dom0 dependency
  - selftests: ublk: fix test_stripe_04
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - KVM: s390: Don't use %pK through debug printing
  - KVM: s390: Don't use %pK through tracepoints
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  - io_uring: always do atomic put from iowq
  - rtc: pcf85063: do a SW reset if POR failed
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU
  - ntb: reduce stack usage in idt_scan_mws
  - objtool, lkdtm: Obfuscate the do_nothing() pointer
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
  - objtool, panic: Disable SMAP in __stack_chk_fail()
  - objtool: Silence more KCOV warnings
  - thunderbolt: Scan retimers after device router has been enumerated
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  - usb: host: max3421-hcd: Add missing spi_device_id table
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
  - bpf: bpftool: Setting error code in do_loader()
  - s390/tty: Fix a potential memory leak bug
  - s390/sclp: Add check for get_zeroed_page()
  - parisc: PDT: Fix missing prototype warning
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  - crypto: ccp - Add support for PCI device 0x1134
  - MIPS: cm: Detect CM quirks from device tree
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  - USB: wdm: add annotation
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - USB: wdm: handle IO errors in wdm_wwan_port_start
  - USB: VLI disk crashes if LPM is used
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  - usb: dwc3: xilinx: Prevent spike in reset signal
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  - usb: cdns3: Fix deadlock when using NCM gadget
  - USB: serial: simple: add OWON HDS200 series oscilloscope support
  - USB: serial: option: add Sierra Wireless EM9291
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  - serial: sifive: lock port in startup()/shutdown() callbacks
  - serial: msm: Configure correct working mode before starting earlycon
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  - char: misc: register chrdev region with all possible minors
  - KVM: x86: Explicitly treat routing entry type changes as changes
  - mei: me: add panther lake H DID
  - scsi: Improve CDL control
  - USB: storage: quirk for ADATA Portable HDD CH94
  - ata: libata-scsi: Fix ata_msense_control_ata_feature()
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  - ata: libata-scsi: Improve CDL control
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  - KVM: SVM: Allocate IR data using atomic allocation
  - io_uring: fix 'sync' handling of io_fallback_tw()
  - LoongArch: Remove a bogus reference to ZONE_DMA
  - drm/amd/display: Force full update in gpu reset
  - drm/amd/display: Fix gpu reset in multidisplay config
  - net: phy: microchip: force IRQ polling mode for lan88xx
  - net: selftests: initialize TCP header and skb payload with zero
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible
  - virtio_console: fix missing byte order handling for cols and rows
  - LoongArch: Make do_xyz() exception handlers more robust
  - LoongArch: Make regs_irqs_disabled() more clear
  - LoongArch: Select ARCH_USE_MEMTEST
  - splice: remove duplicate noinline from pipe_clear_nowait
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  - scsi: core: Clear flags for scsi_cmnd that did not complete
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  - dma/contiguous: avoid warning about unused size_bytes
  - ceph: Fix incorrect flush end position calculation
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  - of: resolver: Simplify of_resolve_phandles() using __free()
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
  - clk: renesas: rzg2l: Refactor SD mux driver
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
  - clk: renesas: rzg2l: Add struct clk_hw_data
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags
  - arm64: tegra: Remove the Orin NX/Nano suspend key
  - iio: adc: ad7768-1: Fix conversion result sign
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  - ASoC: qcom: Fix trivial code style issues
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c
  - auxdisplay: hd44780: Convert to platform remove callback returning void
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  - soc: qcom: ice: introduce devm_of_qcom_ice_get
  - module: sign with sha512 instead of sha1 by default
  - !18797 [OLK-6.6] Fix CVE-2025-38331
  - !18978 [OLK-6.6][linux-6.6.y sync] Backport 6.6.87-6.6.88 LTS Patches
  - !19141  crash: fix crashkernel resource shrink
  - !19136  ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !18976 ubagg: implement ubagg module with ioctl interface and topology management
  - crash: fix crashkernel resource shrink
  - !19139 ub: ubase: Fix CTRLQ init process
  - !18998 uburma: implement jetty linking features.
  - ub: ubase: Fix CTRLQ init process
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !19123 ub: udma: Support udma basic transaction operations and advanced features.
  - !19122  crypto: rng - Ensure set_ent is always present
  - !19121 ub: ubase: Do some bugfix about cmdq/ctrlq message and debugfs
  - net: rose: fix a typo in rose_clear_routes()
  - urma: add ubagg ioctl interface and topology management
  - ub: udma: jetty and rct support the hugepage buffer.
  - ub: udma: Support 2M hugepage function.
  - ub: udma: Support query ub memory info.
  - ub: udma: Support query resource ratio.
  - ub: udma: Support query entity information.
  - ub: udma: Support create and destroy stars jfc.
  - ub: udma: Support create and destroy stars jfs.
  - ub: udma: Support tp context inquiry.
  - ub: udma: Support entity index inquiry.
  - ub: udma: Support device status inquiry.
  - ub: udma: Support flush jfs and jetty.
  - ub: udma: Support destroy jfs and jetty batch.
  - ub: udma: Support bind and unbind jetty.
  - ub: udma: Support dump ce aux info.
  - ub: udma: Support dump ae aux info.
  - ub: udma: Support query NPU info.
  - ub: udma: Support deactivate tp.
  - ub: udma: Support active tp.
  - ub: udma: Support get tp list.
  - ub: udma: Support rearm jfc and clean jfc.
  - ub: udma: Support poll jfc.
  - ub: udma: Support post jetty work request.
  - ub: udma: Support post jfr work request.
  - ub: udma: Support post jfs work request.
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - net: nfc: nci: Add parameter validation for packet data
  - !19103  Fix CVE-2025-40123
  - !19082 ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - KVM: arm64: ipiv: fix bug in live migration
  - KVM: arm64: ipiv: Change parameter from vcpu to kvm
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uburma: implement comprehensive jetty linking and transport features
  - uburma: implement jetty resource control and command structures
  - uburma: add uburma command and user object framework headers
  - uburma: introduce uburma basic types and helper functions
  - !19120  KVM: arm64: Fix access_actlr() build warning
  - !18952 ubcore: implement memory and netlink features.
  - ub: ubase: Fix the lose of HIMAC reset.
  - ub: ubase: flush the work queue.
  - net: unic: Fix lose vport_ctx and vport_buf information query in debugfs
  - !19091 ub: ub_fwctl: Release rpc_out when kernel state return error
  - net/smc: fix warning in smc_rx_splice() when calling get_page()
  - ub: ubase: Fix link status timestamp information
  - net: unic: Fix configure coal parameters without deactivate
  - ub: ubase: Fix CTRLQ white list
  - ub: ubase: Optimization of ubase_ctrlq_send_msg interface parameters
  - ub: ubase: Fix verification to ctrlq message seq
  - net: unic: Fix the ethtool stats and basic capability information query interface
  - ub: ubase: add CMDQ&CTRLQ compatibility code
  - ub: ubase: Fix priqos infomaton interface functions to query and check sl_bitmap
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
  - s390/sclp: Fix SCCB present check
  - net: rose: include node references in rose_neigh refcount
  - net: rose: convert 'use' field to refcount_t
  - !19058 ub: udma: udma driver TA layer resource control operation.
  - net: rose: split remove and free operations in rose_remove_neigh()
  - crypto: rng - Ensure set_ent is always present
  - KVM: arm64: Fix access_actlr() build warning
  - dm: fix NULL pointer dereference in __dm_suspend()
  - net, hsr: reject HSR frame if skb can't hold tag
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - ksmbd: transport_ipc: validate payload size before reading handle
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
  - ext4: fix string copying in parse_apply_sb_mount_options()
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  - !19081 ub:ubus: Fix X86 build error
  - ub: ub_fwctl: Release rpc_out when kernel state return error
  - fwctl:Change the CONFIG_FWCTL in the config options to m
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - ubagg: implement ubagg basic infrastructure components
  - !19093  some minor bugfix about zcopy
  - !19087 v2  Fix bugs
  - !19064 iommu/ummu:  Bugfix of ummu
  - zcopy: Remove the dump_pagetable interface
  - zcopy: Fix the incorrect mapping size passed in attach_pte_range
  - ub: udma: Add and remove jetty to jetty group.
  - ub: udma: Support import and unimport jfr and jetty.
  - iommu/ummu: Fix builds under different kconfigs
  - xcall2.0: Fix stack-out-of-bounds bug in xcall_write()
  - xcall2.0: Fix the semantic changes in xcall_enable
  - xcall2.0: Fix module unload issue by fixing refcount
  - !19071 net:nebula-matrix:fix compile err
  - !19080  KVM: arm64: ipiv: Fix compilation warning
  - !19070  xsched: XCU Partition
  - !18995  CVE-2025-40169
  - !19028 mm/slab: make __free(kfree) accept error pointers
  - ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - ub:ubus: Fix X86 build error
  - KVM: arm64: ipiv: Fix compilation warning
  - !19069  mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - !19066  arch_numa: make node_reclaim_distance_setup static
  - !19053  blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - net:nebula-matrix:fix compile err
  - xsched: Add support for CFS quota for cgroups
  - xsched: Add XCU control group implementation and its backend in xsched CFS
  - xsched: Add xsched CFS class
  - xsched: Add xsched RT class
  - xsched: Add basic scheduler core support
  - xsched: Introduce vstream management
  - xcu: Add base NPU driver support
  - xsched: Add base vstream support
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - ubcore: implement ubcore connection management and messaging feature.
  - ubcore: add segment management support to ubcore module.
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - arch_numa: make node_reclaim_distance_setup static
  - ub: udma: Support modify jfc.
  - ub: udma: Support modify jfr.
  - ub: udma: Support modify jetty.
  - ub: udma: Support modify jfs.
  - ub: udma: Support destroy jetty group.
  - ub: udma: Support create jetty group.
  - ub: udma: Support destroy jetty.
  - ub: udma: Support create jetty.
  - ub: udma: Support destroy jfc.
  - ub: udma: Support create jfc.
  - ub: udma: Support destroy jfr.
  - ub: udma: Support create jfr.
  - ub: udma: Support destroy jfs.
  - ub: udma: Support create jfs.
  - ub: udma: Support query table item from hw.
  - ub: udma: Support query jfr context from hw.
  - ub: udma: Support query jfs and jetty context from hw.
  - iommu/ummu: Fix 2P virtualization error
  - iommu/ummu: Fix ubmem unmap return value error
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - batman-adv: fix OOB read/write in network-coding decode
  - mm/slab: make __free(kfree) accept error pointers
  - Revert "mm/slab: make __free(kfree) accept error pointers"
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - md/md-bitmap: fix GPF in bitmap_get_stats()
  - igc: fix lock order in igc_ptp_reset
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - xen/x86: fix initial memory balloon target
  - pwm: mediatek: Ensure to disable clocks in error path
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
  - btrfs: fix the length of reserved qgroup to free
  - MIPS: ds1287: Match ds1287_set_base_clock() function types
  - MIPS: cevt-ds1287: Add missing ds1287.h include
  - MIPS: dec: Declare which_prom() as static
  - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
  - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
  - sign-file,extract-cert: move common SSL helper functions to a header
  - nvmet-fc: Remove unused functions
  - landlock: Add the errata interface
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete
  - LoongArch: Eliminate superfluous get_numa_distances_cnt()
  - x86/split_lock: Fix the delayed detection logic
  - x86/xen: fix memblock_reserve() usage on PVH
  - x86/xen: move xen_reserve_extra_memory()
  - Fix mmu notifiers for range-based invalidates
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  - kbuild: Add '-fno-builtin-wcslen'
  - cpufreq: Reference count policy in cpufreq_update_limits()
  - io_uring/net: fix accept multishot handling
  - drm/i915/gvt: fix unterminated-string-initialization warning
  - drm/sti: remove duplicate object names
  - drm/amdgpu/dma_buf: fix page_link check
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - drm/amd/pm/smu11: Prevent division by zero
  - drm/amd/pm/powerplay: Prevent division by zero
  - drm/amd/pm: Prevent division by zero
  - drm/amd: Handle being compiled without SI or CIK support better
  - drm/msm/a6xx: Fix stale rpmh votes from GPU
  - drm/repaper: fix integer overflows in repeat functions
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  - perf/x86/intel: Allow to update user space GPRs from PEBS records
  - scsi: ufs: exynos: Ensure consistent phy reference counts
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
  - string: Add load_unaligned_zeropad() code path to sized_strscpy()
  - smb3 client: fix open hardlink on deferred close file error
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem
  - riscv: Avoid fortify warning in syscall_get_arguments()
  - ksmbd: fix the warning from __kernel_write_iter
  - ksmbd: Prevent integer overflow in calculation of deadtime
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ovl: don't allow datadir only
  - mm: fix apply_to_existing_page_range()
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  - loop: LOOP_SET_FD: send uevents for partitions
  - loop: properly send KOBJ_CHANGED uevent for disk device
  - crypto: caam/qi - Fix drv_ctx refcount bug
  - btrfs: correctly escape subvol in btrfs_show_options()
  - Bluetooth: vhci: Avoid needless snprintf() calls
  - Bluetooth: l2cap: Process valid commands in too long frame
  - ftrace: fix incorrect hash size in register_ftrace_direct()
  - i2c: atr: Fix wrong include
  - nfs: add missing selections of CONFIG_CRC32
  - asus-laptop: Fix an uninitialized variable
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  - writeback: fix false warning in inode_to_wb()
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  - kunit: qemu_configs: SH: Respect kunit cmdline
  - riscv: Properly export reserved regions in /proc/iomem
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  - net: bridge: switchdev: do not notify new brentries as changed
  - net: b53: enable BPDU reception for management port
  - netlink: specs: rt-link: adjust mctp attribute naming
  - netlink: specs: rt-link: add an attr layer around alt-ifname
  - ata: libata-sata: Save all fields from sense data descriptor
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  - test suite: use %zu to print size_t
  - igc: add lock preventing multiple simultaneous PTM transactions
  - igc: cleanup PTP module if probe fails
  - igc: handle the IGC_PTP_ENABLED flag correctly
  - igc: move ktime snapshot into PTM retry loop
  - igc: increase wait time before retrying PTM
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  - ASoC: cs42l43: Reset clamp override on jack removal
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  - ovl: remove unused forward declaration
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  - ASoC: dwc: always enable/disable i2s irqs
  - md/md-bitmap: fix stats collection for external bitmaps
  - md/raid10: fix missing discard IO accounting
  - scsi: iscsi: Fix missing scsi_host_put() in error path
  - wifi: wl1251: fix memory leak in wl1251_tx_work
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  - Bluetooth: hci_uart: Fix another race during initialization
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
  - selftests: mptcp: fix incorrect fd checks in main_loop
  - selftests: mptcp: close fd_in before returning in main_loop
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  - PCI: Fix reference leak in pci_alloc_child_bus()
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  - of/irq: Fix device node refcount leakages in of_irq_init()
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  - of/irq: Fix device node refcount leakages in of_irq_count()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  - ntb: use 64-bit arithmetic for the MSI doorbell mask
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  - gve: handle overflow when reporting TX consumed descriptors
  - gpio: zynq: Fix wakeup source leaks on device unbind
  - gpio: tegra186: fix resource handling in ACPI probe path
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  - dm-verity: fix prefetch-vs-suspend race
  - dm-integrity: set ti->error on memory allocation failure
  - dm-ebs: fix prefetch-vs-suspend race
  - crypto: ccp - Fix check for the primary ASP device
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  - clk: qcom: gdsc: Release pm subdomains in reverse add order
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  - cifs: fix integer overflow in match_server()
  - cifs: avoid NULL pointer dereference in dbg call
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry
  - x86/xen: fix balloon target initialization for PVH dom0
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  - mm/userfaultfd: fix release hang over concurrent GUP
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uio_hv_generic: Let userspace take care of interrupt mask
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0
  - mm: fix lazy mmu docs and usage
  - mm: make page_mapped_in_vma() hugetlb walk aware
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  - sparc/mm: disable preemption in lazy mmu mode
  - iommufd: Fix uninitialized rc in iommufd_access_rw()
  - btrfs: zoned: fix zone finishing with missing devices
  - btrfs: zoned: fix zone activation with missing devices
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  - arm64: mm: Correct the update of max_pfn
  - mtd: rawnand: Add status chack in r852_ready()
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  - jbd2: remove wrong sb->s_sequence check
  - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  - i3c: master: svc: Use readsb helper for reading MDB
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions
  - udf: Fix inode_getblk() return value
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit
  - f2fs: fix to avoid atomicity corruption of atomic file
  - ext4: fix off-by-one error in do_split
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  - ASoC: q6apm: add q6apm_get_hw_pointer helper
  - io_uring/kbuf: reject zero sized provided buffers
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  - wifi: mt76: Add check for devm_kstrdup()
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  - mtd: Replace kcalloc() with devm_kcalloc()
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  - mtd: Add check for devm_kcalloc()
  - mptcp: sockopt: fix getting IPV6_V6ONLY
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove
  - media: venus: hfi_parser: add check to avoid out of bound access
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  - media: i2c: ov7251: Set enable GPIO low in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  - media: platform: stm32: Add check for clk_enable()
  - media: visl: Fix ERANGE error when setting enum controls
  - media: streamzap: prevent processing IR data on URB failure
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  - spi: cadence-qspi: Fix probe on AM62A LP SK
  - xenfs/xensyms: respect hypervisor's "next" indication
  - media: siano: Fix error handling in smsdvb_module_init()
  - media: vim2m: print device name after registering device
  - media: venus: hfi: add check to handle incorrect queue size
  - media: venus: hfi: add a check to handle OOB in sfr region
  - media: i2c: adv748x: Fix test pattern selection mask
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0
  - pwm: rcar: Improve register calculation
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  - drm/amdgpu: grab an additional reference on the gang fence v2
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  - drm/amdkfd: debugfs hang_hws skip GPU with MES
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  - drm/amdkfd: clamp queue size to minimum
  - drivers: base: devres: Allow to release group on device release
  - drm/bridge: panel: forbid initializing a panel with unknown connector type
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  - drm: panel-orientation-quirks: Add support for AYANEO 2S
  - drm/amd/display: add workaround flag to link to force FFE preset
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always
  - drm: allow encoder mode_set even when connectors change for crtc
  - Bluetooth: qca: simplify WCN399x NVM loading
  - Bluetooth: hci_uart: fix race during initialization
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
  - net: vlan: don't propagate flags on open
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  - Revert "f2fs: rebuild nat_bits during umount"
  - ext4: protect ext4_release_dquot against freezing
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  - net: sfp: add quirk for 2.5G OEM BX SFP
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  - jfs: add sanity check for agwidth in dbMount
  - fs/jfs: cast inactags to s64 to prevent potential overflow
  - net: usb: asix_devices: add FiberGecko DeviceID
  - scsi: target: spc: Fix RSOC parameter data header size
  - f2fs: don't retry IO for corrupted data scenario
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  - ASoC: amd: yc: update quirk data for new Lenovo model
  - ASoC: amd: Add DMI quirk for ACP6X mic support
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  - media: uvcvideo: Add quirk for Actions UVC05
  - ASoC: fsl_audmix: register card device depends on 'dais' property
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  - ALSA: hda: intel: Fix Optimus when GPU has no sound
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets
  - bpf: Reject negative offsets for ALU ops
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  - HID: pidff: Add PERMISSIVE_CONTROL quirk
  - HID: pidff: Add MISSING_PBO quirk and its detection
  - HID: pidff: Add MISSING_DELAY quirk and its detection
  - HID: pidff: Do not send effect envelope if it's empty
  - HID: pidff: Convert infinite length from Linux API to PID standard
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
  - xen/mcelog: Add __nonstring annotations for unterminated strings
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
  - x86/ia32: Leave NULL selector values 0~3 unchanged
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  - umount: Allow superblock owners to force umount
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  - nvmet-fcloop: swap list_add_tail arguments
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  - drm/tests: probe-helper: Fix drm_display_mode memory leak
  - drm/tests: modes: Fix drm_display_mode memory leak
  - drm/tests: cmdline: Fix drm_display_mode memory leak
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  - drm/tests: helpers: Fix compiler warning
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
  - drm/tests: Add helper to create mock crtc
  - drm/tests: Add helper to create mock plane
  - drm/tests: helpers: Add atomic helpers
  - drm/tests: modeset: Fix drm_display_mode memory leak
  - net: ethtool: Don't call .cleanup_data when prepare_data fails
  - tc: Ensure we have enough buffer space when sending filter netlink notifications
  - net/sched: cls_api: conditional notification of events
  - rtnl: add helper to check if a notification is needed
  - rtnl: add helper to check if rtnl group has listeners
  - octeontx2-pf: qos: fix VF root node parent queue index
  - net: tls: explicitly disallow disconnect
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  - drm/i915: Disable RPG during live selftest
  - drm/i915/dg2: wait for HuC load completion before running selftests
  - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
  - drm/i915/mocs: use to_gt() instead of direct &i915->gt
  - selftests/futex: futex_waitv wouldblock test should fail
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - jfs: upper bound check of tree index in dbAllocAG
  - mm: swap: check for stable address space before operating on the VMA
  - net: ethernet: cortina: Use TOE/TSO on all TCP
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - bus: mhi: host: Detect events pointing to unexpected TREs
  - drm/amd/pm: fix null pointer access
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  - net: kcm: Fix race condition in kcm_unattach()
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - usb: xhci: Fix slot_id resource race conflict
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - nilfs2: reject invalid file types when reading inodes
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - freezer, sched: Report frozen tasks as 'D' instead of 'R'
  - io_uring/sqpoll: fix sqpoll error handling races
  - i2c: microchip-core: actually use repeated sends
  - PCI/MSI: Handle lack of irqdomain gracefully
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805
  - i2c: microchip-core: fix "ghost" detections


author: Li Nan <linan122@huawei.com> - 6.6.0-125.0.0.124
changelog:
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - !19402  sched: Fix incorrect cluster mask
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - !19327 ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - !19338 iommu/ummu: Fix UMMU documentation error
  - !19287 net: unic: Add support for uboe and ethernet related tools
  - !19337 ub: udma: Support retrieving the migr field.
  - zcopy: Fix context switch within RCU read-side error
  - ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - iommu/ummu: Fix UMMU documentation error
  - !19332 ub: udma: add requirement about document and tp attr.
  - !19330 iommu/ummu: Add UMMU documentation description
  - bpf: Sync pending IRQ work before freeing ring buffer
  - ub: udma: Support retrieving the migr field.
  - !18794 【OLK-6.6】fix CVE-2025-39801
  - ub: udma: Support eid and guid updates.
  - ub: udma: bugfix for set and get tp attr.
  - !18453 [OLK-6.6] ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - !18483 [OLK-6.6] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - iommu/ummu: Add UMMU-PMU devicetree file
  - iommu/ummu: Add UMMU devicetree file
  - iommu/ummu: Add UMMU documentation description
  - ub: udma: mask jetty context addr info.
  - ub: udma: add udma driver module doc.
  - ub: ubase: Remove non-cluster mode code
  - net: unic: Add support for uboe reset
  - net: unic: Add support for MAC statistics
  - net: unic: Add pause frame support.
  - net: unic: Add Priority Flow Control (PFC) support
  - net: unic: Add debugfs support for dumping MAC tables.
  - net: unic: Supports MAC filter, and allows users to add and delete MAC
  - net: unic: Add debugfs support for dumping vlan table
  - net: unic: Integrate valn filtering features with network device operations.
  - net: unic: Add valn filtering support.
  - net: unic: Add support for querying link diagnosis status
  - net: unic: Extend loopback test support to include external loopback modes
  - net: unic: Extend loopback test support to include serdes loopback modes.
  - net: unic: Add loopback test support.
  - net: unic: Add debugfs support for dumping hardware MAC tables.
  - net: unic: Add support for setting link speed, duplex, and autonegotiation via ethtool.
  - !19328 ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - !19264 ub: cdma: add CDMA userspace-api documentation description
  - ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - ub: cdma: add CDMA userspace-api documentation description
  - ub: cdma: add CDMA kernel driver design document specification
  - ub: cdma: add CDMA driver-api documentation description
  - !19305 ub:ubus: Add ubus and ubfi opensource document
  - !19320 urma: added functions for getting and setting TP attribute fields.
  - nfsd: don't ignore the return code of svc_proc_register()
  - ub:ubus: Add ubus devicetree file
  - urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus and ubfi opensource document
  - !19317 ub: ubase: Remove useless character '+'
  - ub: ubase: Remove useless character '+'
  - !18870 add sentry kmod
  - drivers/ub/sentry: add sentry_remote_reporter module
  - drivers/ub/sentry: add sentry_uvb_comm module
  - drivers/ub/sentry: add sentry_urma_comm module
  - drivers/ub/sentry: add sentry_reporter and sentry_msg_help
  - !19306  net: Netdev use RCU protection
  - !19290 urma: bugfix the issue of urma stream generation failure
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19292  blk-ioinf: accumulate total latency properly across sampling periods
  - !19230  drm/vmwgfx: Fix Use-after-free in validation
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - ipv6: use RCU in ip6_output()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv6: use RCU in ip6_xmit()
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - net: Add locking to protect skb->dev access in ip_output
  - net: dst: add four helpers to annotate data-races around dst->dev
  - urma: bugfix the issue of urma stream generation failure
  - acpi: provides acpi power notifier chain
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - blk-ioinf: accumulate total latency properly across sampling periods
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - drm/vmwgfx: Fix Use-after-free in validation
  - NFSv4: Fix deadlock during the running of state manager
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - ALSA: HDA: Roll back the old version for consistency with the mainline
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Li Nan <linan122@huawei.com> - 6.6.0-127.0.0.125
changelog:
  - !19620 iommufd: Prevent ALIGN() overflow
  - !19608 ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - !18634 [OLK-6.6]Fix CVE-2025-38706
  - iommufd: Prevent ALIGN() overflow
  - !19400  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - !19601  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19598  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19597  ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19354 [OLK-6.6] Fix CVE-2025-37822
  - !19355 [OLK-6.6] Fix CVE-2025-38361
  - !19563 ub: cdma: fix the timing issue during flow-based deregistration.
  - !19585 crypto: hisilicon/trng - Fix the issue where TRNG cannot be used by multiple threads.
  - !19610 perf: Fix lastup for multi-CPU PG
  - !19609 urma: fixed process exiting uburma driver's private memory UAF
  - !19592  Fix incorrect use of cpuhp_remove_multi_state parameter
  - perf: Fix lastup for multi-CPU PG
  - urma: fixed process exiting uburma driver's private memory UAF
  - !19607 Revert "RDMA/hns: Fix mismatch exception rollback"
  - ub: cdma: modify the compatibility field according to the Linux KABI specification
  - ub: cdma: fix the timing issue during flow-based deregistration.
  - ub: cdma: fix kasan cdma jfae uaf
  - ub: cdma: modify log level about en information
  - ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - !18664 [OLK-6.6] Fix CVE-2025-22039
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19558 obmm: sync obmm default params value to sysfs.
  - !19560 obmm: set MAX Numa Distance to 255
  - !19589 ub:ubus: add active_mutex in ub_entity
  - soc cache: Add compilation config for hisi_soc_l3c
  - soc cache: Don't poll before removing all locks
  - soc cache: Drop redundant vm_pgoff
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Check address while walking pages
  - soc_cache: Fix component removal order to avoid race condition
  - soc cache: cleanup: Remove the redundant check of vm_pgoff
  - soc cache: cleanup: Change type of mnt_type
  - soc cache: cleanup: avoid tag addr from interfering range validation
  - soc cache: cleanup: move judgement of soc cache dev into lock protection
  - soc cache: cleanup: fix memory leakage on error path
  - soc_cache: Fix error code returning from hisi_soc_l3c_do_lock
  - soc_cache: Fix incorrect use of cpuhp_remove_multi_state parameter
  - soc cache: cleanup: replace dynamically allocated param with local variable
  - ub:ubus: add active_mutex in ub_entity
  - !19576  Bugfix for two issues
  - crypto: hisilicon/trng - support tfms sharing the device
  - crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD()
  - Revert "crypto: hisilicon/trng - support to obtain random numbers from soft algorithm"
  - Revert "crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock"
  - !19557  Fix UAF issue for mfs
  - !19555 ub: bugfix of port, decoder and vfio
  - !19561 obmm: fix granu checking in mmap
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - ub:unic Adaptation of the port reset interface
  - !19521 uvb: change dir name
  - !19532 net: hns3: add VLAN id validation before using
  - !19271  Squashfs: fix uninit-value in squashfs_get_parent
  - !19269  media: venus: Add a check for packet size after reading from shared memory
  - !19268  eventpoll: Fix semi-unbounded recursion
  - !19267  kernfs: Relax constraint in draining guard
  - !19552  KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19551 add check ack_dono flag for reboot event
  - obmm: sync obmm default params value to module sysfs.
  - obmm: set MAX Numa Distance to 255
  - obmm: fix granu checking in mmap
  - ub:ubus adapt port local ras
  - vfio:ubus vfio-ub support ub entity enable
  - mfs: Fix UAF problem on event object when enable tracepoint
  - ub:ubus: fix bug of msg workqueue null
  - ub:hisi-ubus ub:hisi-ubus: Move the decoder's page table operations to hisi-ubus
  - add check ack_dono flag for reboot event
  - !19517 gmem: fix several issues
  - !19519  arm64/mpam: Reset mbwu_state while creating new monitor group
  - KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19530  Fix unexpected behavior in resctrl mounting
  - !19520 ub: udma: bugfix related to init xa flags.
  - !19205 [OLK-6.6] Fix CVE-2025-39732
  - !19156 [OLK-6.6] Fix CVE-2025-39684
  - !19157 [OLK-6.6] Fix CVE-2025-39675
  - net: hns3: add VLAN id validation before using
  - !19526  mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - fs/resctrl: Prevent mounting with unsupported options
  - fs/resctrl: Fix resctrl mount options display in mount list
  - ub: udma: bugfix related to init xa flags.
  - ub: udma: bugfix for rx close.
  - mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - uvb: change dir name
  - !19507  Fix some memory policy bugfix
  - arm64/mpam: Need to reset MPAM component when umounting resctrl
  - arm64/mpam: Remove the redundant prev_val member variable
  - arm64/mpam: Reset mbwu_state while creating new monitor group
  - !19508 ub: ub_fwctl: Modify the problem of incorret data when querying entry
  - !19513  zcopy: fix two issues
  - zcopy: Fix Bad rss-counter state while non-mapping pages attach
  - zcopy: Fix null pointer dereference while attach transhugepage twice to same addr
  - ub: ub_fwctl: Modify the problem of incorret data when querying entry information
  - !19357 ubios_uvb: add msleep in poll thread
  - ubios_uvb: add check for uvb window buffer size
  - !19494  crypto: hisilicon - add reference counting to queues for tfm kernel reuse
  - !19475  task_work: Fix NMI race condition
  - mempolicy: restrict smart grid scheduling to vma_alloc_folio path
  - mempolicy: fix missing mmap_read_unlock() in error path
  - ubios_uvb: add check for cis message and senderid
  - !19486 [OLK-6.6] fix possible crash caused by null pointer when hct get page.
  - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon/zip - support fallback for zip
  - crypto: hisilicon/qm - optimize device selection priority based on queue ref count and NUMA distance
  - crypto: hisilicon/qm - add reference counting to queues for tfm kernel reuse
  - crypto: hisilicon - consolidate qp creation and start in hisi_qm_alloc_qps_node
  - crypto: hisilicon/qm - centralize the sending locks of each module into qm
  - crypto: hisilicon/qm - enhance the configuration of req_type in queue attributes
  - Revert "crypto: hisilicon/hpre - support the hpre algorithm fallback"
  - crypto: hisilicon/hpre: extend tag field to 64 bits for better performance
  - crypto: hisilicon/sec - move backlog management to qp and store sqe in qp for callback
  - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
  - ubios_uvb: add msleep in poll thread
  - ccp/hct: fix possible crash caused by null pointer when hct get page.
  - task_work: Fix NMI race condition
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - drm/scheduler: signal scheduled fence when kill job
  - obmm: set up default mem allocator granule
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - smb: client: fix race with concurrent opens in rename(2)
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - drm/amd/display: Check dce_hwseq before dereferencing it
  - riscv: uprobes: Add missing fence.i after building the XOL buffer
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - Squashfs: fix uninit-value in squashfs_get_parent
  - media: venus: Add a check for packet size after reading from shared memory
  - eventpoll: Fix semi-unbounded recursion
  - kernfs: Relax constraint in draining guard
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
  - comedi: Fix initialization of data for instructions that write to subdevice
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - gmem: remove reduntant interfaces and use proper mmap flag
  - gmem: gmem_reserve_vma should use vma_flag_clear to remove flag
  - gmem: remove inpropre BUG_ON in do_peer_shared_anonymous_page
  - gmem: hmemcpy should use dma for phy addr
  - Add platform-specific quirks for ZX-200 device
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-64.0.0.68
changelog:
  - !14106 uacce: some bugfix and cleanup
  - migration: modify dfx error type without VM driver
  - crypto: hisilicon_qm - fix the uacce_alloc return value check
  - crypto: hisilicon_zip - correct the wrong word in the printed information
  - uacce: add mutex for check qfr
  - uacce: add stop_queue to replace put_queue in ioctl
  - uacce: check the qfr address before releasing the qfr
  - uacce: add error number for the unsupported mremap
  - !14117  mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - mm: fix kabi breakage due to struct per_cpu_pages
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - !14120  bpf: sync_linked_regs() must preserve subreg_def
  - bpf: sync_linked_regs() must preserve subreg_def
  - !14128  sched: Optimize the latency of select_task_rq and pick_next_task.
  - sched: Optimize the latency of select_task_rq and pick_next_task.
  - !13991  virtio-fs: introduce multi-queue support
  - virtio-fs: add multi-queue support
  - virtio-fs: limit number of request queues
  - virtiofs: include a newline in sysfs tag
  - virtiofs: emit uevents on filesystem events
  - virtiofs: export filesystem tags through sysfs
  - !14126 [OLK-6.6]perf:Add PMCG platform information for HiSilicon HIP09A
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - Revert "perf: Add PMCG platform information for HiSilicon HIP09A"
  - !14103  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13841 Fix livepatch selftest
  - selftests/livepatch: fix selftest execution error
  - !14069 MPTCP Upstream part 23
  - tcp: socket option to check for MPTCP fallback to TCP
  - mptcp: fix typos in comments
  - !13970  LoongArch: fix AVEC related issue
  - drivers/irqchip: Disable pci_irq_limit when using AVEC interrupt controller
  - irqchip/avec: Support AVEC for 3C6000 multi-node machine
  - !13981  LoongArch: backport ptw&set_pte patches from upstream
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !14107 ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - !14101 [sync] PR-14087: v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14095 ima: Fix violation digests extending issue in virtcca
  - ima: Fix violation digests extending issue in virtcca
  - !14079 v3  irqchip: gic: some bugfix of hip10
  - irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table
  - KVM: arm64: vgic-v3: Fix a issue of hip10 erratum 162200806
  - irqchip/gic-v3: Exclude GICv4.1 for hip10 erratum 162200803
  - !14085  ocfs2: uncache inode which has failed entering the group
  - ocfs2: uncache inode which has failed entering the group
  - !13837 update patches for sw64 architecture
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - sw64: distribute intx interrupts by hose
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: spi: update spi controller driver
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: irq: fix compile error when PINTC or LPC-INTC is not set
  - sw64: improve the verification logic of DTB
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: store topology and numa info by each cpu itself
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: dynamically switch between lib implementation
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: acpi: fix coding style and typos
  - sw64: fix rd_f compatibility issue for C4
  - sw64: refactor device interrupt domain
  - sw64: fix macro definition compilation error
  - USB: xHCI: fix resume issue of some ZHAOXIN hosts
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: add arch-specific SYM_END definition
  - !13151 [OLK-6.6] arm64: errata: Unify and expand speculative SSBS workaround
  - openeuler_defconfig: Enable CONFIG_ARM64_ERRATUM_3194386 by default
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
  - arm64: errata: Expand speculative SSBS workaround once more
  - arm64: errata: Expand speculative SSBS workaround (again)
  - arm64: errata: Expand speculative SSBS workaround
  - arm64: errata: Unify speculative SSBS errata logic
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-66.0.0.70
changelog:
  - !13846 [OLK-6.6] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !9184 [OLK-6.6] i2c: smbus: Add support for Zhaoxin SMBUS controller
  - configs: Add Zhaoxin i2c smbus items in openeuler_config
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - !9223 [OLK-6.6] x86/hpet: Read HPET directly if panic in progress
  - x86/hpet: Read HPET directly if panic in progress
  - !14088 ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - !14112  xfs: Fix data overflow
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - Revert "xfs: split xfs_mod_freecounter"
  - !14099 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: add uapi reg.h
  - sw64: pciehp: remove useless code
  - sw64: dts: support online-capable property for cpu device node
  - sw64: kvm: resolve a compile warning
  - sw64: pciehp: update code
  - sw64: kvm: fix mmio GPA for C4
  - sw64: handle null MSI irq in guest os
  - sw64: fix guest memory and cpu hotplug function
  - sw64: kvm: walk host page tables to find THP mapping size
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: kvm: rename mmu_notifier_* to mmu_invalidate_*
  - sw64: kvm: fix compiler errors caused by mismatched parameters
  - sw64: kvm: use get_page() instead of kvm_get_pfn()
  - sw64: kvm: fix the handling when the live migration fails
  - sw64: kvm: fix NULL poniter access in kvm_arch_prepare_memory_region
  - sw64: kvm: fix link error with CONFIG_KVM=m
  - sw64: kvm: fix build failure about KVM
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: add cpu hotplug support for C4 guest
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix guest send ipi target
  - sw64: kvm: add numa support for memory hotplug
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: kvm: remove some unused codes
  - sw64: kvm: fix pmd_trans_cont
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: redesign struct kvm_regs for C4
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: kvm: add trace kvm function
  - sw64: fix rc resource setup
  - sw64: 6.6 update: sunway_pciehp_reset_slot()
  - sw64: 6.6 update: arch_remove_memory()
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: fix bugs in decreasing frequency
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq
  - sw64: fix a compilation warning
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: fix io resource remapping
  - sw64: amdgpu/radeon: correct low-level mmio memset/memcpy direct calls
  - sw64: fix pci resource assignment bug
  - sw64: fix MSI compilation warnings
  - sw64: 6.6 io.h fixup
  - sw64: iommu: support SW64 IOMMU on 6.6 kernel
  - sw64: fix msi interrupt for guest os
  - sw64: msi: update code
  - sw64: gpio: fix compile error of sunway_gpio_add_port
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: fix a bug in gpio-sunway.c
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=xxx command line invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-67.0.0.71
changelog:
  - !14144 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: fix compile errors
  - sw64: work around gcc bugs with 'asm goto' with output
  - libbpf: add sw64 support
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: update defconfig
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: implementing VDSO with generic code
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: acpi: support reset and S5
  - sw64: kvm: use vma_lookup() instead of find_vma_intersection()
  - sw64: refactor reset routines with new API
  - sw64: kvm: remove unused kvm_arch_flush_remote_tlbs_memslot()
  - sw64: kvm: optimize the calling and implementation of functions in mmu.c
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: fix compilation issues on match.c
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: fix set_huge_pte_at for C4
  - sw64: add the missed clear_flush()
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: fix the register bug in do_entUna
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: add __vdso_getcpu support
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: reset the CSR:PTBR_USR
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: perf: add core4 pmu support
  - sw64: mm: support fdt memory reservation
  - sw64: provide a cleaner raw_smp_processor_id()
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: iommu: fix NULL hose check
  - sw64: fix judgements about legacy pci support
  - sw64: cacheinfo: give preference to cache information from PPTT table
  - sw64: cache: fix shared_cpu_map of cacheinfo
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: spi: convert SPI_MASTER_GPIO_SS to SPI_CONTROLLER_GPIO_SS
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: pci: remove legacy io reservation
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: 6.6 upgrade
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: iommu: improve iommu initialization
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: remove redundant link options
  - sw64: kvm: enable ring-based dirty page tracking
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: pciehp: fix compile error when CONFIG_PCIE_DPC=y
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: fix C4 INTx configuration
  - !14166  Align per_cpu osq_node to 64 Byte size cacheline
  - Align per_cpu osq_node to 64 Byte size cacheline
  - !14130 [virtcca] delete unused interfaces: tmi_data_destroy and tmi_ttt_unmap_range
  - virtCCA Feature: remove unused interfaces and add cpumask check
  - !14152  crypto: hisilicon/sec2 - the aead algorithm of sec2 is fixed.
  - crypto: hisilicon/trng - support to obtain random numbers from soft algorithm
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - crypto: hisilicon/qm - disable error report before flr
  - !13824 mm: some mTHPs improve
  - mm: fix docs for the kernel parameter ``thp_anon=``
  - mm: count the number of anonymous THPs per size
  - mm: tidy up shmem mTHP controls and stats
  - mm: cleanup count_mthp_stat() definition
  - mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n
  - mm: override mTHP "enabled" defaults at kernel cmdline
  - !10305 [OLK-6.6] Backport bugfixes for mm LRU from Linux upstream
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-68.0.0.72
changelog:
  - !14161  drm/rockchip: vop: Fix a dereferenced before check warning
  - drm/rockchip: vop: Fix a dereferenced before check warning
  - !14143 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !14177 v2  kabi: restrict the KABI fix to a specific architecture and dist
  - kabi: enable KABI_COMPAT series by default on x86_64 & ARM64
  - kabi: restrict the KABI fix to a specific architecture and dist
  - !14151  CVE-2024-53142
  - initramfs: avoid filename buffer overrun
  - !14183  mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - !13999 add iommu support for loongarch
  - LoongArch: add iommu support
  - LoongArch: Fix cpu hotplug issue
  - !13998 Synchronization with patch for loongarch virtualization
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: KVM: Remove unnecessary CSR register saving during enter guest
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall()
  - LoongArch: KVM: Add vcpu mapping from physical cpuid
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS
  - LoongArch: KVM: Add cpucfg area for kvm hypervisor
  - LoongArch: KVM: Add KVM hypercalls documentation for LoongArch
  - LoongArch: KVM: Implement function kvm_para_has_feature()
  - LoongArch: KVM: Enable paravirt feature control from VMM
  - LoongArch: KVM: Add PMU support for guest
  - LoongArch: KVM: Add vm migration support for LBT registers
  - LoongArch: KVM: Add Binary Translation extension support
  - LoongArch: KVM: Add VM feature detection function
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM
  - LoongArch: KVM: Invalidate guest steal time address on vCPU reset
  - KVM: Discard zero mask with function kvm_dirty_ring_reset
  - perf kvm: Add kvm-stat for loongarch64
  - LoongArch: KVM: Add PV steal time support in guest side
  - LoongArch: KVM: Add PV steal time support in host side
  - LoongArch: KVM: always make pte young in page map's fast path
  - LoongArch: KVM: Mark page accessed and dirty with page ref added
  - LoongArch: KVM: Add dirty bitmap initially all set support
  - LoongArch: KVM: Add memory barrier before update pmd entry
  - LoongArch: KVM: Discard dirty page tracking on readonly memslot
  - LoongArch: KVM: Select huge page only if secondary mmu supports it
  - LoongArch: KVM: Delay secondary mmu tlb flush until guest entry
  - LoongArch: KVM: Sync pending interrupt when getting ESTAT from user mode
  - LoongArch: KVM: Add mmio trace events support
  - LoongArch: KVM: Add software breakpoint support
  - LoongArch: KVM: Add PV IPI support on guest side
  - LoongArch: KVM: Add PV IPI support on host side
  - !14163  LeapIOraid： Remove Unnecessary header file references: version.h
  - LeapIOraid： Remove Unnecessary header file references: version.h
  - !13997 Add interrupt controller emulation in the kernel
  - LoongArch: KVM: Add irqfd support
  - LoongArch: KVM: Add PCHPIC user mode read and write functions
  - LoongArch: KVM: Add PCHPIC read and write functions
  - LoongArch: KVM: Add PCHPIC device support
  - LoongArch: KVM: Add EXTIOI user mode read and write functions
  - LoongArch: KVM: Add EXTIOI read and write functions
  - LoongArch: KVM: Add EXTIOI device support
  - LoongArch: KVM: Add IPI user mode read and write function
  - LoongArch: KVM: Add IPI read and write function
  - LoongArch: KVM: Add IPI device support
  - LoongArch: KVM: Add iocsr and mmio bus simulation in kernel
  - !14111  LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - !14162  LeapIOraid： Fix too many invalid interruptes in arm64
  - LeapIOraid： Fix too many invalid interruptes in arm64
  - !11509 [OLK-6.6] Enhanced Hygon processor's processing capabilities for large memory copying
  - mm: Enhanced copy capabilities for Hygon processor
  - !14155  drm/amd/display: Adjust VSDB parser for replay feature
  - drm/amd/display: Adjust VSDB parser for replay feature


author: Xie XiuQi <xiexiuqi@huawei.com> - 6.6.0-68.0.0.73
changelog:
  - kabi: add kabi_ext1 list for checking
  - check-kabi: fix kabi check failed when no namespace
  - kernel.spec: fix with_kabichk on non-arm64 platform


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-69.0.0.75
changelog:
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-72.0.0.76
changelog:
  - !14213 v2  bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - !14225  kabi OLK-6.6 reverve space
  - kabi: reserve space for uprobes.h
  - kabi: reserve space for internal.h
  - kabi: reserve space for perf_event.h
  - !14259 【OLK-6.6】 Hygon  family 18h model 6h~fh L3 PMU config incorrect issue fix
  - perf/x86/uncore: Correct the L3 PMU config for Hygon processors
  - !14251  kabi reserver space for i2c
  - kabi reserver space for i2c
  - !14258 v2  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-73.0.0.77
changelog:
  - !14618  drm: zynqmp_kms: Unplug DRM device before removal
  - drm: zynqmp_kms: Unplug DRM device before removal
  - !14621  brd: defer automatic disk creation until module initialization succeeds
  - brd: defer automatic disk creation until module initialization succeeds
  - !14617  block: fix uaf for flush rq while iterating tags
  - block: fix uaf for flush rq while iterating tags
  - !14614  scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - !14519  bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - !14593  CVE-2024-56702
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
  - bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
  - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
  - !14415  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - !14439  sh: intc: Fix use-after-free bug in register_intc_controller()
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14635  Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - !14648  memcg: fix soft lockup in the OOM process
  - memcg: fix soft lockup in the OOM process
  - !14562  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14524  The bugfix for LPM trie
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14459  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14454  drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - !14385  media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - !14546  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14244  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14243  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - !14504  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14418  LoongArch: Add CPU HWMon platform driver
  - LoongArch: Add CPU HWMon platform driver
  - !14387  LoongArch: compile loongson drm driver as module
  - drm/loongson: compile loongson drm driver as module
  - LoongArch: cleanup loongson3 defconfig
  - !14441  crypto: bcm - add error check in the ahash_hmac_init function
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14438  media: imx-jpeg: Set video drvdata before register video device
  - media: imx-jpeg: Set video drvdata before register video device
  - !14389  CVE-2024-53173
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - !14469  io_uring/tctx: work around xa_store() allocation error issue
  - io_uring/tctx: work around xa_store() allocation error issue
  - !14447  Fix CVE-2024-56744
  - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
  - !14394  scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - !14518  hfsplus: don't query the device logical block size multiple times
  - hfsplus: don't query the device logical block size multiple times
  - !14517  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14516  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14475  ext4: correct behaviors under errors=remount-ro mode
  - Revert "ext4: drop EXT4_MF_FS_ABORTED flag"
  - Revert "ext4: warn on read-only filesystem in ext4_journal_check_start()"
  - Revert "ext4: drop read-only check in ext4_init_inode_table()"
  - Revert "ext4: drop read-only check in ext4_write_inode()"
  - Revert "ext4: drop read-only check from ext4_force_commit()"
  - Revert "ext4: replace read-only check for shutdown check in mmp code"
  - Revert "ext4: don't set SB_RDONLY after filesystem errors"
  - sb_writers: fix kabi broken
  - fs: fix a hungtask problem when freeze/unfreeze fs
  - !14506  iommufd: Fix out_fput in iommufd_fault_alloc()
  - iommufd: Fix out_fput in iommufd_fault_alloc()
  - !14369  crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - !14417 v2  drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - !14423 v2  EDAC/igen6: Avoid segmentation fault on module unload
  - EDAC/igen6: Avoid segmentation fault on module unload
  - !14365  EDAC/bluefield: Fix potential integer overflow
  - EDAC/bluefield: Fix potential integer overflow
  - !14364  clk: clk-apple-nco: Add NULL check in applnco_probe
  - clk: clk-apple-nco: Add NULL check in applnco_probe
  - !14408  bpf: fix OOB devmap writes when deleting elements
  - bpf: fix OOB devmap writes when deleting elements
  - !14367  io_uring: check if iowq is killed before queuing
  - io_uring: check if iowq is killed before queuing
  - !14355  btrfs: ref-verify: fix use-after-free after invalid ref action
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14350  jfs: array-index-out-of-bounds fix in dtReadFirst
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - !14348  ksmbd: fix use-after-free in SMB request handling
  - ksmbd: fix use-after-free in SMB request handling
  - !14102  OLK-6.6-fix-CVE-2024-49906
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - !14346  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - !14420  HID: wacom: fix when get product name maybe null pointer
  - HID: wacom: fix when get product name maybe null pointer
  - !14301  Revert "unicode: Don't special case ignorable code points"
  - Revert "unicode: Don't special case ignorable code points"
  - !14332  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14362  CVE-2024-53217
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - !14319  exfat: fix out-of-bounds access of directory entries
  - exfat: fix out-of-bounds access of directory entries
  - !14405  NFSD: Prevent a potential integer overflow
  - NFSD: Prevent a potential integer overflow
  - !14395  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14401  gpio: grgpio: Add NULL check in grgpio_probe
  - gpio: grgpio: Add NULL check in grgpio_probe
  - !14400  bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - !14329  svcrdma: Address an integer overflow
  - svcrdma: Address an integer overflow
  - !14376  fix CVE-2024-53197
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - !14206 v4  erofs/fscache/cachefiles: Add ondemand loading support
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Clean up in cachefiles_commit_tmpfile()
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: add support for buffer I/O in ondemand mode
  - fscache: clean up for fscache_clear_volume_priv
  - fscache: Add the synchronous waiting mechanism for the volume unhash in erofs ondemand mode
  - cachefiles: Introduce "dir_has_put" in cachefiles_volume
  - erofs: remove EXPERIMENTAL feature warning for fscache-based
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - fscache: modify the waiting mechanism with duplicate volumes
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: add a memory barrier for FSCACHE_VOLUME_CREATING
  - !14377  ftrace: Fix regression with module command in stack_trace_filter
  - ftrace: Fix regression with module command in stack_trace_filter
  - !14373 [OLK-6.6]Hygon: Fix objtool warning cause by csv3_active()
  - x86: mm: Fix objtool warning about bool noinstr csv3_active()
  - !14358  firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - !14342  hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - !14271  iomap: fix zero padding data issue in concurrent append writes
  - iomap: fix zero padding data issue in concurrent append writes
  - !14340  ocfs2: free inode when ocfs2_get_init_inode() fails
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14312 OLK-6.6: Some patches of RDMA/hns from Linux to olk-6.6 v2
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - Revert "RDMA/hns: Fix accessing invalid dip_ctx during destroying QP"
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - !14338  CVE-2024-53230
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - !14336  mm: Backport mainline patch
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: fix arithmetic for bdi min_ratio
  - mm/kmemleak: fix partially freeing unknown object warning
  - mm: kmemleak: add __find_and_remove_object()
  - mm: kmemleak: use mem_pool_free() to free object
  - mm: kmemleak: split __create_object into two functions
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - !14337  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - !14322  back some mainline patches for damon
  - mm/damon/core: fix return value from damos_wmark_metric_value
  - mm/damon/core: remove unnecessary si_meminfo invoke.
  - !14323  zram: fix NULL pointer in comp_algorithm_show()
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14201 【OLK-6.6】  drivers: arch_topology: Refactor do-while loops
  - drivers: arch_topology: Refactor do-while loops
  - !14295  pmdomain: imx93-blk-ctrl: correct remove path
  - pmdomain: imx93-blk-ctrl: correct remove path
  - !14190  Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - !14134  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - !14214  mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - !14229 Fix extioi restart issue in vm
  - LoongArch: arch/loongarch/kvm: Fix extioi restart issue
  - !14127 MPTCP Upstream part 24
  - mptcp: refer to 'MPTCP' socket in comments
  - mptcp: add mptcp_space_from_win helper
  - mptcp: use mptcp_win_from_space helper
  - doc: new 'mptcp' page in 'networking'
  - doc: mptcp: alphabetical order
  - doc: mptcp: add missing 'available_schedulers' entry
  - selftests: mptcp: join: mark 'fastclose' tests as flaky
  - selftests: mptcp: lib: support flaky subtests
  - selftests: mptcp: export ip_mptcp to mptcp_lib
  - !13359 [OLK-6.6] [Backport] individual submission
  - MIPS: RB532: Declare prom_setup_cmdline() and rb532_gpio_init() static
  - MIPS: BCM47XX: Declare early_tlb_init() static
  - MIPS: BCM47XX: include header for bcm47xx_prom_highmem_init() prototype
  - ocfs2: spelling fix
  - !14291  vdpa: solidrun: Fix UB bug with devres
  - vdpa: solidrun: Fix UB bug with devres
  - !14256  RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank


