# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.3-2
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:add oci image digests check when upgrade and fix the issue with the software version display


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 2.3.1-7
changelog:
  - Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now


author: shixuantong <shixuantong1@huawei.com> - 1.0.3-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix period task some bugs
         fix env_file and environ_conf


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 36.16.5-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport & adjust upstream patch for fixing building issues with clang
  - run autoreconf before building


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yaoxin <1024769339@qq.com> - 5.3.1-20
changelog:
  - Fix some CVEs: CVE-2025-70067, CVE-2025-70069, CVE-2025-70070,
    CVE-2025-70071, CVE-2025-70072, CVE-2026-10200, CVE-2026-10232,
    CVE-2026-14610


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-11
changelog:
  - the mayexec function no longer checks cmdline each time that verifies whether a script are allowed to run


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.18.21-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: tangce <tangce1@h-partners.com> - 32:9.18.21-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204
  - SUG:NA
  - DESC:fix CVE-2026-10822,CVE-2026-11331,CVE-2026-12617,CVE-2026-13204


author: tangce <tangce1@h-partners.com> - 32:9.18.21-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-10723,CVE-2026-11721,CVE-2026-13321
  - SUG:NA
  - DESC:fix CVE-2026-10723,CVE-2026-11721,CVE-2026-13321


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: lijian <lijian2@kylinos.cn> - 1:1.36.1-21
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: wjiang <cameyan@163.com> - 2023.2.64-6
changelog:
  - sync certificate from upstream
    Adding:
      Certificate "TrustAsia SMIME ECC Root CA"
      Certificate "TrustAsia SMIME RSA Root CA"
      Certificate "TrustAsia TLS ECC Root CA"
      Certificate "TrustAsia TLS RSA Root CA"
      Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
      Certificate "SwissSign RSA TLS Root CA 2022 - 1"
      Certificate "OISTE Client Root ECC G1"
      Certificate "OISTE Client Root RSA G1"
      Certificate "OISTE Server Root ECC G1"
      Certificate "OISTE Server Root RSA G1"
      Certificate "e-Szigno TLS Root CA 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.18.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix "out of memory" when using linear gradient
          Fix a memory leak


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.27.9-8.oe2403sp1.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: shaojiansong <shaojiansong@kylinos.cn> - 309-8
changelog:
  - Fix networking: renaming of bridges and other groups (upstream fdba746e4, RHEL-131249, backport to openEuler-24.03-LTS-Next cockpit 309, keep member activation consistent when group name is changed.)


author: shaojiansong <shaojiansong@kylinos.cn> - 309-9
changelog:
  - Fix ws: only hand out the saved password to authorize messages once. Prevents account lockout via pam_faillock when sudo sends a 'Try again' prompt, by poisoning the password after the first use.


author: liweigang <liweiganga@gmail.com> - 1.22.8-4
changelog:
  - Format and tidy the spec file
  - Convert License to SPDX expression: MIT AND BSD-3-Clause AND SGI-B-2.0
  - Update URL to upstream GitLab repository


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: Yu Peng <yupeng@kylinos.cn> - 1.6.22-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix ctr snapshot mount produce invalid mount command for empty option.


author: gaoyukun <gaoyukun@kylinos.cn> - 1.2.0-8
changelog:
  - Declare k3s-cni-adaptation patch as Patch0 and apply it in prep stage to a dedicated tree used for building the multi-call cni binary


author: Qin Fandong <qinfandong@kylinos.cn> - 9.4-23
changelog:
  - Type:CVE
  - ID:CVE-2026-56392
  - SUG:NA
  - DESC:fix heap overflow in unexpand with large tab stop values


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: liyancheng <412998149@qq.com> - 12.3.1-66
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Don't use local_detect_cpu when cross build and fix hip09 costs.


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.19.3-10
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-15
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-32
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: wangchong <wangchong56@huawei.com> - 3.2.0-9
changelog:
  - ID:NA
  - SUG:NA
  - DESC: add kernel-rt, raspberrypi-kernel, raspberrypi-kernel-rt and haoc-kernel to the exclude tag


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 3.2.0-11
changelog:
  - ID:NA
  - SUG:NA
  - DESC: add rpmlist.xml normal.xml for loongarch64
  	enable efi boot for loongarch64


author: wangkai <13474090681@163.com> - 25.3.2.6-18
changelog:
  - Fix CVE-2026-48855, CVE-2026-48858, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422,
    CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55950, CVE-2026-55952


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: fly_fzc <2385803914@qq.com> - 2.5.0-22
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Liu Wang <1823363429@qq.com> - 140.13.0-2
changelog:
  - Add StartupWMClass=firefox so that GNOME can correctly recognize the Firefox window and associate it with the icon.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.4.3-5
changelog:
  - backport: Refind import cuesheet op after appending seekpoints
  - backport: Make UTF-8 decoder more restrictive
  - backport: Fix endless loop in foreign metadata handling
  - backport: Fix overflow when skipping over raw input


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.17.1-4
changelog:
  - Remove riscv64 prebuilded files
  - Build protoc, protoc-jar and protoc-jar-maven-plugin in prep state for riscv64


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-4
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: JDLihoo <donglihao1@huawei.com> - 2.0.2-6
changelog:
  - restore the pristine source tarball and package upstream changes as patches
  - consolidate upstream changes into 25 Git-formatted patches
  - exclude build artifacts, IDE metadata, profiling images, and unrelated line-ending churn


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: liqian <liqian@kylinos.cn> - 1.0-7
changelog:
  -Type:Fix
  -ID:NA
  -SUG:NA
  -DESC: Fix Only the spec file is packaged in src.rpm without the source code file, 
         so it cannot be directly decompressed and compiled using src.rpm


author: zhaoshujian <zhaoshujian@huawei.com> - 14.2.1-3
changelog:
  - [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
  - Add gcc-toolset-14 Readme


author: shenyangyang<shenyangyang4@huawei.com> - 1.0-0.7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: bump release rebuilding for adding rhash.spec to macro gcc_secure_exclude


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: yaoxin <1024769339@qq.com> - 2:3.0.2-18
changelog:
  - Fix CVE-2026-18301, CVE-2026-18302, CVE-2026-18303, CVE-2026-18304,
    CVE-2026-18305, CVE-2026-18306 and CVE-2026-18308


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: fly_fzc <2385803914@qq.com> - 2.43.0-12
changelog:
  - fix crash with find object outside repository
  - fix crash with run git-shortlog outside repository


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
changelog:
  - Upgrade to 3.6.0
    - Support multi-stage authentication with Git credential helpers and relative worktree paths
    - New object transfer batch size configuration option
    - More POSIX-compliant hook scripts


author: Funda Wang <fundawang@yeah.net> - 3.6.1-1
changelog:
  - Upgrade to 3.6.1
    - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.3-16
changelog:
  - apply 3 patches: backport-Fix-a-buffer-leak-when-finishing-connecting.patch, backport-Add-thread-pool-stress-test-to-task-c.patch, backport-Cleanup-trailing-spaces-task-c.patch


author: zhusicong <zhusicong@h-partners> - 2.78.3-17
changelog:
  - fix CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016


author: panzhe <panzhe@kylinos.cn> - 2.38-107
changelog:
  - Sw64: Fix getpriority error

   * Fri May 29 2026 zhongxuan2 <zhongxuan2@h-partners.com> - 2.38-106
   - fix-cve-2026-5435
   - fix-CVE-2026-6238


author: litenglong <litenglong@kylinos.cn> - 2.38-115
changelog:
  - aarch64: delete revert-aarch64-Use-memcpy_simd-as-the-default-memcpy.patch to align with the upstream community.


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Xu Raoqing <609179072@qq.com> - 3.8.2-16
changelog:
  - buffers: simplify and tighten parse_handshake_header checks
  - lib/auth/psk_passwd: limit the length of the comparison
  - x509/name_constraints: fix intersecting empty constraints
  - datum, mem, str: add helper functions to steal pointers
  - mem,str,datum: rename _steal_* to _take_*
  - x509/virt-san: a small OOM-correctness fix
  - x509: add bare-bones awareness of SRV virtual SAN
  - x509/hostname-verify: make URI/SRV SAN preclude CN fallback
  - fix CVE-2026-42012


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: huzhangying <huzhangying@huawei.com> - 1.21.4-44
changelog:
  - Type:CVE
  - CVE:CVE-2026-27139,CVE-2026-27142,CVE-2026-25679
  - SUG:NA
  - DESC:fix CVE-2026-27139,CVE-2026-27142,CVE-2026-25679


author: huzhangying <huzhangying@huawei.com> - 1.21.4-45
changelog:
  - Type:CVE
  - CVE:CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mmap/mmap: Add missing grub_malloc() failure check
         mmap/mmap: Fix resource leak
         mmap/mmap: Fix integer overflow in binary search
         grub-mkimage: Do not generate empty SBAT metadata
         efi: Fix several memory leaks of UEFI handles
         script/execute: Add a NULL check after grub_calloc() call
         normal/cmdline: Add grub_calloc() failure check and fix hist_lines state loss
         osdep/linux/ofpath: Add missing strdup() failure checks
         lib/relocator: Fix dereference after NULL check
         osdep/linux/getroot: Add missing strdup() failure checks
         script/execute: Add missing grub_strdup() failure check


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-18
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - SUG:NA
  - DESC:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: tangce <tangce1@h-partners.com> - 2.4.58-19
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update i40e version to 2.22.8 to fix kernel-6.1 based build error


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Remove the obsolte u64_stats_fetch_*_irq() users
         use mul_u64_u64_div_u64 and convert .adjfreq to .adjfine


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-45
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Inline set_extend_atomic_seg() and optimize memory allocation to reduce page faults.


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:1.21.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:[pci] Ensure that pci_read_config() initialises all fields
         [image] Do not clear current working URI when executing embedded image
         [uri] Retain original encodings for path, query, and fragment fields
         [uri] Allow for relative URIs that include colons within the path


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: douyiwang <douyiwang@huawei.com> -1:1.8.0.472.b08-5
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.32.9-0
changelog:
  - update to 11.0.32+9(GA)
  - delete fix-zlib-CVE-2026-27171.patch
  - modify G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modify delete_expired_certificates.patch
  - modify Add-KAE-implementation.patch


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.10.7-0
changelog:
  - update to jdk21.0.9-ga
  - modify Add-Compact-Object-Headers-feature-for-Aarch64.patch
  - modify Add-dynamic-max-heap-size.patch
  - modify Fix-kae-testcat-and-EATest-testcast-bug-and-fix-cve-.patch
  - modify add-version.txt.patch
  - add huawei-Fix-KAE-Provider-SM2-code.patch
  - add huawei-fix-UseCompactObjectHeaders-slowdebug-build-fail.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: sundapeng <sundapeng_yewu@cmss.chinamobile.com> - 2.8.2-17
changelog:
  - log clean relative index range check of group consider empty log segment to avoid too many empty log segment left


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 3.2.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify the git clone download address in kata_integration_clone


author: jade_t <yzd50036@gmail.com> - 3.2.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.8.147
changelog:
  - !22175 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-149.0.0 to 6.6.0-151.0.0
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - x86/platform/uv: Handle deconfigured sockets
  - x86/CPU: Fix FPDSS on Zen1
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - bfq: Lock when clearing the q->elevator entry
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - team: Move team device type change at the end of team_port_add
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - drm/i915/gt: Check set_default_submission() before deferencing
  - urma: change kzalloc into vzalloc for ubcore
  - ALSA: ctxfi: Limit PTP to a single page
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - ext4: convert inline data to extents when truncate exceeds inline size
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - mmc: vub300: fix NULL-deref on disconnect
  - X.509: Fix out-of-bounds access when parsing extensions
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - af_key: validate families in pfkey_send_migrate()
  - openvswitch: defer tunnel netdev_put to RCU release
  - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - perf/x86/intel: Add missing branch counters constraint apply
  - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - urma: move variable initialization before use in error branch


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.9.148
changelog:
  - !22247 sync pr 22246: Revert efi/cper ARM CPER type alignment
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.10.149
changelog:
  - !22435 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-151.0.0 to 6.6.0-152.0.0
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - ceph: fix i_nlink underrun during async unlink
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - rxrpc: proc: size address buffers for %pISpc output
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - gfs2: fiemap page fault fix
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - urma: fix potential parameter overflow in initialization
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - tracing: Fix soft lockup when lseeking trace file
  - urma: query resource options by id.
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - net: sched: act_csum: validate nested VLAN headers
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - perf/x86/intel/uncore: Skip discovery table for offline dies


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.13.151
changelog:
  - !22969 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-154.0.0 to 6.6.0-155.0.0
  - Revert "net: unic: adapt to the change for ETS tsa and bw configuration permission"
  - Revert "net: unic: Notify MAMI when the LACP status changes"
  - Revert "net: unic: The unsupported VL rate limit value is displayed as 0"
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - gpio: omap: do not register driver in probe()
  - vsock/test: verify socket options after setting them
  - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
  - scsi: qla2xxx: Query FW again before proceeding with login
  - scsi: qla2xxx: Allow recovery for tape devices
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  - nilfs2: Fix potential block overflow that cause system hang
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
  - driver core: enforce device_lock for driver_match_device()
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
  - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
  - dpaa2-switch: do not clear any interrupts automatically
  - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  - spi: tegra114: Preserve SPI mode bits in def_command1_reg
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
  - hwmon: (occ) Mark occ_init_attribute() as __printf
  - drm/mgag200: fix mgag200_bmc_stop_scanout()
  - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
  - tipc: use kfree_sensitive() for session key material
  - net: don't touch dev->stats in BPF redirect paths
  - dpaa2-switch: add bounds check for if_id in IRQ handler
  - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  - net: liquidio: Initialize netdev pointer before queue setup
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  - platform/x86: hp-bioscfg: Skip empty attribute names
  - platform/x86: intel_telemetry: Fix PSS event register mask
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
  - wifi: mac80211: correctly check if CSA is active
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates
  - ASoC: tlv320adcx140: Propagate error codes during probe
  - ASoC: amd: yc: Fix microphone on ASUS M6500RE
  - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
  - wifi: mac80211: collect station statistics earlier when disconnect
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
  - netfilter: replace -EEXIST with -EBUSY
  - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
  - HID: playstation: Center initial joystick axes to prevent spurious events
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration
  - btrfs: fix reservation leak in some error paths when inserting inline extent
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table
  - LoongArch: Enable exception fixup for specific ADE subcode
  - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
  - block,bfq: fix aux stat accumulation destination
  - net: usb: sr9700: support devices with virtual driver CD
  - wifi: wlcore: ensure skb headroom before skb_push
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  - tracing: Fix ftrace event field alignments
  - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
  - binderfs: fix ida_alloc_max() upper bound
  - binder: fix BR_FROZEN_REPLY error log
  - ublk: fix deadlock when reading partition table
  - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  - ARM: 9468/1: fix memset64() on big-endian
  - rbd: check for EOD after exclusive lock is ensured to be held
  - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
  - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
  - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
  - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  - !22835 config: x86: Fix openeuler_defconfig to resolve CI failure
  - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - !22778 revert mpam from openEuler-24.03-LTS_SP1
  - Revert "x86: Decouple resctrl with resctrl-mpam"
  - Revert "x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()"
  - Revert "x86/resctrl: Remove hard-coded memory bandwidth limit"
  - Revert "x86/resctrl: Read supported bandwidth sources from CPUID"
  - Revert "x86/resctrl: Implement new mba_MBps throttling heuristic"
  - Revert "x86/resctrl: Remove redundant variable in mbm_config_write_domain()"
  - Revert "x86/resctrl: Free rmid_ptrs from resctrl_exit()"
  - Revert "x86/resctrl: Create helper for RMID allocation and mondata dir creation"
  - Revert "x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()"
  - Revert "x86/resctrl: Track the closid with the rmid"
  - Revert "x86/resctrl: Access per-rmid structures by index"
  - Revert "x86/resctrl: Allow RMID allocation to be scoped by CLOSID"
  - Revert "x86/resctrl: Track the number of dirty RMID a CLOSID has"
  - Revert "x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding"
  - Revert "x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid"
  - Revert "x86/resctrl: Move CLOSID/RMID matching and setting to use helpers"
  - Revert "x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow"
  - Revert "x86/resctrl: Queue mon_event_read() instead of sending an IPI"
  - Revert "x86/resctrl: Allow resctrl_arch_rmid_read() to sleep"
  - Revert "x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()"
  - Revert "x86/resctrl: Make resctrl_mounted checks explicit"
  - Revert "x86/resctrl: Move alloc/mon static keys into helpers"
  - Revert "x86/resctrl: Make rdt_enable_key the arch's decision to switch"
  - Revert "x86/resctrl: Add helpers for system wide mon/alloc capable"
  - Revert "x86/resctrl: Add CPU online callback for resctrl work"
  - Revert "x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU"
  - Revert "x86/resctrl: Add CPU offline callback for resctrl work"
  - Revert "x86/resctrl: Move domain helper migration into resctrl_offline_cpu()"
  - Revert "x86/resctrl: Separate arch and fs resctrl locks"
  - Revert "x86/resctrl: Remove lockdep annotation that triggers false positive"
  - Revert "Documentation/x86: Document that resctrl bandwidth control units are MiB"
  - Revert "Documentation/x86: Fix title underline length"
  - Revert "x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline"
  - Revert "x86/resctrl: Switch to new Intel CPU model defines"
  - Revert "x86/resctrl: Pass domain to target CPU"
  - Revert "x86/resctrl: Simplify call convention for MSR update functions"
  - Revert "x86/resctrl: Rename pseudo_lock_event.h to trace.h"
  - Revert "x86/resctrl: Add tracepoint for llc_occupancy tracking"
  - Revert "x86/resctrl: Don't try to free nonexistent RMIDs"
  - Revert "cpu: Move CPU hotplug function declarations into their own header"
  - Revert "cpu: Drop "extern" from function declarations in cpuhplock.h"
  - Revert "cacheinfo: Add function to get cacheinfo for a given CPU and cache level"
  - Revert "x86/resctrl: Replace open coded cacheinfo searches"
  - Revert "x86/resctrl: Prepare for new domain scope"
  - Revert "x86/resctrl: Prepare to split rdt_domain structure"
  - Revert "x86/resctrl: Prepare for different scope for control/monitor operations"
  - Revert "x86/resctrl: Split the rdt_domain and rdt_hw_domain structures"
  - Revert "x86/resctrl: Add node-scope to the options for feature scope"
  - Revert "x86/resctrl: Introduce snc_nodes_per_l3_cache"
  - Revert "x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Add a new field to struct rmid_read for summation of domains"
  - Revert "x86/resctrl: Initialize on-stack struct rmid_read instances"
  - Revert "x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function"
  - Revert "x86/resctrl: Allocate a new field in union mon_data_bits"
  - Revert "x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter"
  - Revert "x86/resctrl: Make __mon_event_count() handle sum domains"
  - Revert "x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Update documentation with Sub-NUMA cluster changes"
  - Revert "x86/resctrl: Fix arch_mbm_* array overrun on SNC"
  - Revert "x86/resctrl: Avoid overflow in MB settings in bw_validate()"
  - Revert "x86/resctrl: Annotate get_mem_config() functions as __init"
  - Revert "x86/resctrl: Slightly clean-up mbm_config_show()"
  - Revert "x86/resctrl: Support Sub-NUMA cluster mode SNC6"
  - Revert "x86/resctrl: Use kthread_run_on_cpu()"
  - Revert "x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags"
  - Revert "x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control"
  - Revert "x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event"
  - Revert "x86/resctrl: Compute memory bandwidth for all supported events"
  - Revert "x86/resctrl: Make mba_sc use total bandwidth if local is not supported"
  - Revert "x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories"
  - Revert "x86/resctrl: Add write option to "mba_MBps_event" file"
  - Revert "x86/resctrl: Document the new "mba_MBps_event" file"
  - Revert "x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors"
  - Revert "x86/resctrl: Add a helper to avoid reaching into the arch code resource list"
  - Revert "x86/resctrl: Remove fflags from struct rdt_resource"
  - Revert "x86/resctrl: Use schema type to determine how to parse schema values"
  - Revert "x86/resctrl: Use schema type to determine the schema format string"
  - Revert "x86/resctrl: Remove data_width and the tabular format"
  - Revert "x86/resctrl: Add max_bw to struct resctrl_membw"
  - Revert "x86/resctrl: Generate default_ctrl instead of sharing it"
  - Revert "x86/resctrl: Add helper for setting CPU default properties"
  - Revert "x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()"
  - Revert "x86/resctrl: Expose resctrl fs's init function to the rest of the kernel"
  - Revert "x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code"
  - Revert "x86/resctrl: Move resctrl types to a separate header"
  - Revert "x86/resctrl: Add an arch helper to reset one resource"
  - Revert "x86/resctrl: Move monitor exit work to a resctrl exit call"
  - Revert "x86/resctrl: Move monitor init work to a resctrl init call"
  - Revert "x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers"
  - Revert "x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h"
  - Revert "x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC"
  - Revert "x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers"
  - Revert "x86/resctrl: Move mba_mbps_default_event init to filesystem code"
  - Revert "x86/resctrl: Move mbm_cfg_mask to struct rdt_resource"
  - Revert "x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions"
  - Revert "x86/resctrl: Allow an architecture to disable pseudo lock"
  - Revert "x86/resctrl: Make prefetch_disable_bits belong to the arch code"
  - Revert "x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr"
  - Revert "x86/resctrl: Move RFTYPE flags to be managed by resctrl"
  - Revert "x86/resctrl: Handle throttle_mode for SMBA resources"
  - Revert "x86/resctrl: Move get_config_index() to a header"
  - Revert "x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers"
  - Revert "cpumask: kernel-doc cleanups and additions"
  - Revert "cpumask: add cpumask_any_and_but()"
  - Revert "cpumask: add cpumask_weight_andnot()"
  - Revert "cpumask: Introduce cpumask_first_and_and()"
  - Revert "cpumask: Switch from inline to __always_inline"
  - Revert "cpumask: Relax cpumask_any_but()"
  - Revert "find: Add find_first_andnot_bit()"
  - Revert "cpumask: Add cpumask_{first,next}_andnot() API"
  - Revert "ptrace: Convert ptrace_attach() to use lock guards"
  - Revert "kernfs: sysfs: support custom llseek method for sysfs entries"
  - Revert "kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()"
  - Revert "kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: mount: Remove unnecessary ‘NULL’ values from knparent"
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_node_dentry()."
  - Revert "kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: Use RCU to access kernfs_node::parent."
  - Revert "kernfs: Use RCU to access kernfs_node::name."
  - Revert "kernfs: annotate different lockdep class for of->mutex of writable files"
  - Revert "kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked()."
  - Revert "kernfs: Move dput() outside of the RCU section."
  - Revert "x86/resctrl: Optimize cpumask_any_housekeeping()"
  - Revert "x86/resctrl: Remove the limit on the number of CLOSID"
  - Revert "x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_""
  - Revert "x86/resctrl: Check all domains are offline in resctrl_exit()"
  - Revert "x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point"
  - Revert "x86/resctrl: Drop __init/__exit on assorted symbols"
  - Revert "x86/resctrl: Move is_mba_sc() out of core.c"
  - Revert "x86/resctrl: Add end-marker to the resctrl_event_id enum"
  - Revert "x86/resctrl: Expand the width of domid by replacing mon_data_bits"
  - Revert "x86/resctrl: Split trace.h"
  - Revert "x86/resctrl: Add 'resctrl' to the title of the resctrl documentation"
  - Revert "fs/resctrl: Add boiler plate for external resctrl code"
  - Revert "x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl"
  - Revert "x86/resctrl: Move enum resctrl_event_id to resctrl.h"
  - Revert "x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs"
  - Revert "x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h"
  - Revert "x86/resctrl: Squelch whitespace anomalies in resctrl core code"
  - Revert "x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()"
  - Revert "x86/resctrl: Relax some asm #includes"
  - Revert "x86/resctrl: Always initialise rid field in rdt_resources_all[]"
  - Revert "x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name"
  - Revert "x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl"
  - Revert "MAINTAINERS: Add reviewers for fs/resctrl"
  - Revert "fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex"
  - Revert "x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem"
  - Revert "resctrl: get rid of pointless debugfs_file_{get,put}()"
  - Revert "fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters"
  - Revert "fs/resctrl: Optimize code in rdt_get_tree()"
  - Revert "x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest"
  - Revert "x86,fs/resctrl: Consolidate monitor event descriptions"
  - Revert "x86,fs/resctrl: Replace architecture event enabled checks"
  - Revert "x86/resctrl: Remove the rdt_mon_features global variable"
  - Revert "x86,fs/resctrl: Prepare for more monitor events"
  - !22737 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-152.0.0 to 6.6.0-154.0.0
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - fbcon: check return value of con2fb_acquire_newinfo()
  - media: pvrusb2: fix URB leak in pvr2_send_request_ex
  - unshare: fix unshare_fs() handling
  - bridge: br_nd_send: validate ND option lengths
  - obmm: add VMA access for ptrace/GDB on PFNMAP regions
  - obmm: support VMA split with ownership-aligned attributes
  - obmm: refactor ownership tracking for PMD-granularity support
  - obmm: fix PTE protection bits for READWRITE mappings
  - mm: export split_vma for module use
  - USB: core: Limit the length of unkillable synchronous timeouts
  - udp: Fix wildcard bind conflict check when using hash2
  - tcp: Rearrange tests in inet_csk_bind_conflict().
  - usb: dwc3: gadget: Move vbus draw to workqueue context
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - crypto: hisilicon - remove unused and non-public APIs for qm and sec
  - crypto: hisilicon/qm - drop redundant variable initialization
  - crypto: hisilicon/qm - remove else after return
  - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item
  - crypto: hisilicon - fix the format string type error
  - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  - crypto: hisilicon - add device load query functionality to debugfs
  - crypto: hisilicon/qm - increase wait time for mailbox
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write()
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - crypto: hisilicon/qm - move the barrier before writing to the mailbox register
  - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip
  - virtCCA-Live-Migration: Add host agent support for CVM live migration
  - fix migvm_queue_dev_mmap buffer check
  - gpiolib: acpi: Fix potential out-of-boundary left shift
  - bpf/selftests: test_select_reuseport_kern: Remove unused header
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  - ksmbd: fix recursive locking in RPC handle list access
  - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  - mptcp: avoid dup SUB_CLOSED events after disconnect
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  - drm/msm/a6xx: fix bogus hwcg register updates
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
  - net/sched: act_ife: convert comma to semicolon
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - wifi: mac80211: move TDLS work to wiphy work
  - ksmbd: Fix race condition in RPC handle list access
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
  - ksmbd: smbd: fix dma_unmap_sg() nents
  - mei: trace: treat reg parameter as string
  - mm/kfence: randomize the freelist on initialization
  - drm/amdgpu/gfx11: fix wptr reset in KGQ init
  - drm/amdgpu/gfx10: fix wptr reset in KGQ init
  - drm/amdgpu/soc21: fix xclk for APUs
  - drm/imx/tve: fix probe device leak
  - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  - flex_proportions: make fprop_new_period() hardirq safe
  - selftests: mptcp: join: fix local endp not being tracked
  - mptcp: only reset subflow errors when propagated
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size
  - gpio: pca953x: mask interrupts in irq shutdown
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  - ASoC: fsl: imx-card: Do not force slot width to sample width
  - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  - riscv: compat: fix COMPAT_UTS_MACHINE definition
  - pinctrl: meson: mark the GPIO controller as sleeping
  - dma/pool: distinguish between missing and exhausted atomic pools
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  - net: bridge: fix static key check
  - nfc: nci: Fix race between rfkill and nci_unregister_device().
  - net/mlx5e: Account for netdev stats in ndo_get_stats64
  - net/mlx5e: Report rx_discards_phy via rx_dropped
  - ice: stop counting UDP csum mismatch as rx_errors
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  - rocker: fix memory leak in rocker_world_port_post_fini()
  - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  - ipv6: use the right ifindex when replying to icmpv6 from localhost
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  - octeon_ep: Fix memory leak in octep_device_setup()
  - net: bcmasp: fix early exit leak with fixed phy
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - sched/fair: Fix overflow in vruntime_eligible()
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics
  - sched/fair: Mark m*_vruntime() with __maybe_unused
  - sched/fair: Clear rel_deadline when initializing forked entities
  - Revert "sched/fair: Clear rel_deadline when initializing forked entities"
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - ceph: add a bunch of missing ceph_path_info initializers
  - blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - urma: fix the panic when ipourma module is repeatedly loaded
  - net: ipa: fix event ring index not programmed for IPA v5.0+
  - net/oenetcls: remove duplicated linux/inet.h include
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - net/oenetcls: fix RPS CPU index scaling bias
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - net/oenetcls: Add mode 2 for rps numa affinity
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - urma: Enable RH2D streaming by IPoURMA
  - urma: fix spinlock usage in ubagg_get_seg_info function
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - apei: use blocking notifier for page offline policy chain
  - urma: fix reference count imbalance in ubagg and uburma modules
  - powerpc, perf: Check that current->mm is alive before getting user callchain
  - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device
  - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM
  - ub:ubus: change the condition of io decoder creating page table or not
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - iommu: Optimize the iommu PLBI Framework
  - iommu/ummu: remove swap operation when ungrant
  - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - perf/x86/intel/uncore: Fix die ID init and look up bugs
  - scsi: target: tcm_loop: Drain commands in target_reset handler


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.14.152
changelog:
  - !23144 sync CVE LTS and bugfix from OLK-6.6 from 14ed6c3948b1 to b39d11626963
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - vxlan: validate ND option lengths in vxlan_na_create
  - net: use skb_header_pointer() for TCPv4 GSO frag_off check
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
  - USB: serial: option: add Telit FN920C04 RNDIS compositions
  - f2fs: fix to avoid mapping wrong physical block for swapfile
  - f2fs: fix zoned block device information initialization
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to add gc count stat in f2fs_gc_range
  - fbdev: smscufx: properly copy ioctl memory to kernelspace
  - fbdev: rivafb: fix divide error in nv3_arb()
  - Revert "wireguard: device: enable threaded NAPI"
  - gpiolib: acpi: Fix gpio count with string references
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
  - ASoC: cs42l43: Correct handling of 3-pole jack load detection
  - platform/x86: panasonic-laptop: Fix sysfs group leak in error path
  - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
  - ASoC: amd: yc: Add quirk for HP 200 G2a 16
  - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
  - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
  - romfs: check sb_set_blocksize() return value
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
  - ALSA: hda/realtek: Add quirk for Inspur S14-G1
  - gpio: sprd: Change sprd_gpio lock to raw_spin_lock
  - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - PCI: endpoint: Avoid creating sub-groups asynchronously
  - PCI: endpoint: Remove unused field in struct pci_epf_group
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - driver core: enforce device_lock for driver_match_device()
  - !23084 sync CVE LTS and bugfix from OLK-6.6 from 8238b832b9ac to 14ed6c3948b1
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.15.153
changelog:
  - !23824 sync CVE LTS and bugfix from OLK-6.6 from af2b85218113 to 62d67c0aee60
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - iommu/ummu: Enable separated SVA page table by default
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - usb: gadget: f_hid: don't call cdev_init while cdev in use
  - urma: fix dev cap struct length by reserved
  - urma: fix ipourma eid setup ordering
  - crypto: hisilicon/hpre: implement full backlog support for hpre driver
  - crypto: hisilicon/sec2 - restore iv for ctr mode
  - crypto: hisilicon/sec2 - fix resource leakage issues in non-backlog mode
  - crypto: hisilicon/sec2 - fix UAF in sec_alg_send_backlog
  - crypto: hisilicon/zip - add backlog support for zip
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict
  - xfrm: account XFRMA_IF_ID in aevent size calculation
  - mm/filemap: fix filemap_alloc_folio_local() return NULL with GFP_NOFAIL
  - cpufreq: conservative: Simplify frequency limit handling
  - cpufreq: Avoid redundant target() calls for unchanged limits
  - cpufreq: Fix typo in comment
  - arm64: smp: Do not mark secondary CPUs possible under nosmp
  - cpufreq: Documentation: fix freq_step description
  - cpufreq: Documentation: fix sampling_down_factor documentation range
  - rethook: Use tsk->on_cpu to check task execution state
  - rethook: Remove warning messages printed for finding return address of a frame.
  - smb: client: reject userspace cifs.spnego descriptions
  - urma: remove the redundant update of the tx_ring in error branch
  - virtcca huk-based key encryption
  - xfrm_user: fix info leak in build_mapping()
  - fbdev: defio: Remove unused variable 'fbdefio' to fix build warning
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev/deferred-io: Always call get_page() for framebuffer pages
  - fbdev/deferred-io: Clean up pageref on lastclose
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
  - urma: fix cm payload and async bind callback
  - ub: udma: modify the UDMA document.
  - tcp: restore kABI for syn_recv_sock() backport
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - 8021q: delete cleared egress QoS mappings
  - 8021q: use RCU for egress QoS mappings
  - net: af_key: zero aligned sockaddr tail in PF_KEY exports
  - vhost: move vdpa group bound check to vhost_vdpa
  - x86-64: rename misleadingly named '__copy_user_nocache()' function
  - ipvs: skip ipv6 extension headers for csum checks
  - drm/amd/display: Fix dc_link NULL handling in HPD init
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl
  - smb: client: validate the whole DACL before rewriting it in cifsacl
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF
  - eventpoll: move epi_fget() up
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
  - eventpoll: kill __ep_remove()
  - eventpoll: split __ep_remove()
  - eventpoll: use hlist_is_singular_node() in __ep_remove()
  - mm/page_alloc: clear page->private in free_pages_prepare()
  - net: Drop the lock in skb_may_tx_timestamp()
  - KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
  - mm/vmscan: fix wrong callback in shrinker_v2_to_v1_scan_objects()
  - ipvs: do not keep dest_dst if dev is going down
  - RDMA/hns: Fix log flood after cmd_mbox failure
  - xfrm: esp: restore combined single-frag length gate
  - obmm: validate VMA identity via vm_ops before accessing vm_file
  - obmm: add PMD huge entry support for ptrace/GDB vma access
  - obmm: fix VMA access for ptrace/GDB on export regions
  - obmm: fix page table walk for ownership permission updates
  - obmm: reject MAP_PRIVATE
  - !23644 sync sentry modules bugfix patches
  - drivers/ub/sentry: enhance sentry module error handling and logging observability
  - drivers/ub/sentry: remove send/recv counter-based tjetty rebuild mechanism
  - drivers/ub/sentry: delete unimportant logs and optimize some log content
  - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.17.155
changelog:
  * Mon Jun 22 2026 Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.16.154
  - !24099 CVE-2026-46331
  - net/sched: fix pedit partial COW leading to page cache corruption


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.19.156
changelog:
  - !24889 sync CVE LTS and bugfix from OLK-6.6
  - ub/ubdevshm: Support for acquiring va is a sub-range of registered va
  - urma: use xarray for ubagg/ubcore session lookup
  - urma: make ratelimit burst configurable for ubcore/uburma/ubagg
  - urma: use vzalloc for ubmad tjetty and ini_rtbuffer
  - urma: fix UAF of accessing jfs/jetty in log.
  - urma: ratelimit import jetty/jfr error logs
  - urma: drain jfe event lists in batches to avoid soft-lockup
  - urma: reduce ubagg topo log noise
  - urma: free jfe events outside lock
  - urma: free completion events outside jfe lock
  - urma: Fix the issue of inaccurate timing for some functions in DFX
  - urma: fix UAF of accessing token_id in log.
  - urma: fix tpid_reuse attached to vtpn causes use_after_free
  - urma: retry import jetty/jfr on EIO from tpid reuse failure
  - urma: limit ubagg connect exchange logs
  - mm/madvise: add MADV_FCMA_ENABLE to set PF_FOLIO_CMA via madvise
  - urma: limit ubcore logs in reuse paths
  - ub: udma: Optimize udma jetty id access logic.
  - urma: fix workqueue use-after-free in ubagg_exit teardown sequence
  - sched/fair: Optimize wake_soft_domain() fast path
  - Revert "sched/fair: Record per-LLC utilization to guide cache-aware scheduling decisions"
  - Revert "kabi: Protect new sched_domain_shared fields with KABI_EXTEND"
  - Revert "sched: Inhibit soft domain scheduling when overutil"
  - Revert "sched/fair: Optimize wake_soft_domain() fast path"
  - Revert "sched/fair: Filter soft domain candidates in find_idlest_group/cpu"
  - sched/fair: Filter soft domain candidates in find_idlest_group/cpu
  - sched/fair: Optimize wake_soft_domain() fast path
  - sched: Inhibit soft domain scheduling when overutil
  - kabi: Protect new sched_domain_shared fields with KABI_EXTEND
  - sched/fair: Record per-LLC utilization to guide cache-aware scheduling decisions
  - urma: kref_get in find_add_tpid_reuse
  - iommu/ummu: Fix use-after-free in ummu_core_alloc_separate_tdev
  - urma: change log level to rl in ubagg_import_jetty and ubagg_import_seg
  - urma: create resources in ubmad_post_send before the ack message returns
  - ub: udma: Adjust the order of delete global variables.
  - urma: fix nullptr in ubcore_remove_jetty_from_jetty_grp
  - urma: fix several tp state and adapter disconnect cleanup bugs
  - urma: split tpid_reuse from vtpn to avoid use_after_free
  - urma: fix file lifetime race between open, close and device removal
  - urma: fix urma ping server cleanup paths
  - urma: fix call trace during JFR deletion
  - ub:ubus: Always invalidate tlb during decoder unmap
  - iommu/ummu: Fix nested TLB invalidation commands
  - iommu/ummu: Fix NULL pointer dereference in logic_ummu_tlb_inv_walk
  - ub: ubase: clear FE reset status register during probe
  - urma: free vtpn after free tpid reuse
  - urma: Support user mode to obtain statistical results of kernel interrupt times
  - urma: delete whether head is null in select tpid
  - urma: fix isref send no rsp to confirm state
  - urma: add huge lock in create tpid
  - urma: fix ref in ubmad and fix UAF in ubmad_rt_work_handler
  - urma: fix flush done event dispatch
  - urma: optimize sleep and logging in TPID reuse and rate-limited logs
  - ub: udma: Optimize the process of refcount_inc
  - mm/numa_remote: fix variable undeclared error when CONFIG_MEMORY_RELIABLE isn't enabled
  - ub:ubus: Optimize the initialization performance of USI INT_TYPE2
  - ub:ubus: Resolve the link change message is not reported before sending notify message
  - ub: udma: Intercept unsupported operations.
  - urma: fix ubcore device attr sl flag error
  - urma: fix tpid status and state reset
  - urma: fix reuse use cnt not balance cause dead lock
  - urma: fix deadlock when using loopback mode
  - urma: add order_type conversion for jfs/jfr/jetty/tjetty config
  - net: Fix kabi breakage of struct nf_queue_entry
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
  - xfrm: Fix dev use-after-free in xfrm async resumption
  - xfrm: hold dev ref until after transport_finish NF_HOOK
  - xfrm: hold device only for the asynchronous decryption
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
  - net: Fix kabi breakage of struct nf_conntrack_expect
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation
  - netfilter: ctnetlink: ignore explicit helper on new expectations
  - netfilter: nf_conntrack_expect: store netns and zone in expectation
  - config: Enable ARM64_ERRATUM_4193714 ARM64_ERRATUM_4118414
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs
  - arm64: cputype: Add C1-Premium definitions
  - arm64: cputype: Add C1-Ultra definitions
  - arm64: cputype: Add NVIDIA Olympus definitions
  - md raid: fix hang when stopping arrays with metadata through dm-raid
  - xfs: avoid dereferencing log items after push callbacks
  - xfs: save ailp before dropping the AIL lock in push callbacks
  - Revert "xfs: fix a UAF when inode item push"
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
  - cifs: Fix busy dentry used after unmounting
  - wifi: cw1200: Revert "Fix locking in error paths"
  - drm/ssd130x: Fix atomic_check for disabled planes
  - cifs: open files should not hold ref on superblock
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement
  - regulator: pca9450: Make IRQ optional
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays
  - ASoC: simple-card-utils: use __free(device_node) for device node
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets
  - ASoC: soc-core: drop delayed_work_pending() check before flush
  - wifi: cw1200: Fix locking in error paths
  - drm/solomon: Fix page start when updating rectangle in page addressing mode
  - drm/ssd130x: Replace .page_height field in device info with a constant
  - drm/ssd130x: Store the HW buffer in the driver-private CRTC state
  - drm/ssd130x: Use bool for ssd130x_deviceinfo flags
  - ALSA: usb-audio: Cap the packet size pre-calculations
  - smb: client: require a full NFS mode SID before reading mode bits
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync
  - tun: free page on short-frame rejection in tun_xdp_one()
  - net: gro: don't merge zcopy skbs
  - Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
  - wifi: libertas: don't kill URBs in interrupt context
  - wifi: libertas: use USB anchors for tracking in-flight URBs
  - x86/kexec: add a sanity check on previous kernel's ima kexec buffer
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
  - Bluetooth: hci_qca: Cleanup on all setup failures
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
  - nfc: nxp-nci: remove interrupt trigger type
  - PCI: Enable ACS after configuring IOMMU for OF platforms
  - wifi: libertas: fix WARNING in usb_tx_block
  - Revert "net/smc: Introduce TCP ULP support"
  - tap: free page on error paths in tap_get_user_xdp()
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
  - urma: fix ubcore device attr sl flag
  - urma: urma: use ctp+um to support large-scale D2D communications
  - urma: set tpid_status after deactive tp failed
  - urma: fix tpid reuse ref wrong
  - urma: fix jfr nullptr in ubcore_delete_jfr_batch
  - urma: fix ubagg topo bonding device name
  - urma: ubcore restrict CNA-level shared-CTP to RM+CTP only
  - urma: fix solves the UAF issue in the uburma_release_comp_event
  - ub: ub_fwctl: Modify the way ub_fwctl obtains device type and port type.
  - urma: fix mm_struct leakage in concurrent mmu_notifier release
  - urma: fix obj_arr memory leak
  - urma: fix tpid memory leak
  - urma: move ubagg failback req/result to user_ctl
  - urma: fix exist tpid reuse use cnt
  - urma: fix ubagg failback device lookup and teardown
  - ub: ub_fwctl: Modify the index for retrieving port historical status in ub_fwctl.
  - net: unic: Fix the DSCP-TC mapping is reset by the UNIC driver when the UNIC driver is reloaded
  - net: unic: Fix the issue of the first up network port reporting the netdev_change event
  - ub: udma: Resolve the issue of repeated va not being recognized.
  - sched/fair: Only update stats for allowed CPUs when looking for dst group
  - ub: cdma: replace ummu_alloc_tdev_separated with ummu_core_alloc_separate_tdev
  - urma: ubcore fix potential null pointer dereference on cnas
  - urma: add new query information of TP
  - urma: fix the incorrect reference count of tpid_list
  - urma: add order_type validation for UM+CTP in import functions
  - urma: Fix the issue of missing timing logic in the delete_jfc path
  - urma: fix missing lock when query tp_reuse info
  - urma: no error reported when failed to query host EID during shared-ctp
  - ub: udma: fix the bug in the eid update process.
  - urma: support failback notification in 1:N and N:1 scenarios
  - urma: ubcore fix missing topo CNA field in topology structs
  - urma: add multi-transport types,FLUSH_DMA opcode,device config extensions
  - urma: using nlattr to query tp information
  - urma: ubcore add CNA-level shared-CTP
  - urma: move topo query api from ubcore to ubagg
  - urma: fix post send failure when msn cfg is different
  - urma: add multi-transport types,FLUSH_DMA opcode,device config extensions
  - urma: Fix the issue of DFX functionality missing some header files during compilation
  - urma: ubagg add GET_RJETTY and GET_SEG_CTX ioctl handlers
  - urma: fix err log to info and change query to create
  - urma: Optimize the adaptability of the ubagg NL commands
  - urma: move v2p resource query api from ubcore to ubagg
  - urma: Optimize the adaptability of the NL commands
  - urma: remove uvs_get_route_list and standardize uvs tlv formats
  - urma: change the enum in ubcore_cmd.h for set_sl and genl_pid
  - iommu/ummu: Fix the problem of the shared identity page
  - iommu/ummu: Fix the adapt disable DVM issue
  - ub:ubus: modify ub virt notify
  - iommu/ummu: Mask the impact of the iommu.passthrough=1 configuration
  - iommu/ummu: Add dedicated Kconfig for GFP_HIGHUSER_MOVABLE support
  - iommu/ummu: Improve code quality and fix potential issues
  - ub: ub_fwctl: Modify TA layer to obtain WQE delay related registers.
  - iommu/ummu: Add the tect cache synchronization operation
  - ub: udma: Optimize the duplicate registration
  - ub: udma: fix issues of safe mode
  - !24825 Roll back the patch that was repeatedly integrated.
  - Revert "urma: Kernel-mode file for bugfix to move hashtable from alloc to active"
  - Revert "i3c: master: Inherit DMA masks and parameters from parent device"
  - !24817 sync from OLK-6.6  (6.6.0-145.0...6.6.0-159.0)
  - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - x86: config: Enable resctrl related configs
  - x86: config: Enable Intel Application Energy Telemetry (AET)
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - drivers/ub/sentry: add link down/up event detection and reporting
  - net: unic: Fix JFC context domain segment fields and
  - ub: unic: separate DSCP-TC and prio-TC mapping configuration
  - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - net: add sockopt TCP_UBS_HANDSHAKE
  - urma: refactor ubagg connect and message handling
  - ub: ub_fwctl: Modify the method of obtaining link status in the port_link command.
  - urma: ubcore enable shared-ctp
  - iommu/ummu: Fix the UB_UMMU_BYPASSEID dependency error
  - iommu/ummu: Fix null pointer problem during permission table expansion
  - urma: fix log error print wrong place
  - urma: add set_share_topo host EID programming path
  - ub: udma: fix the bug in the eid update process.
  - ub:ubus: Resolve the issue of msgq consuming CPU resources
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
  - ub: ubase: optimize activate dev request handling in
  - ub: ubase: process change for querying SL through the
  - ub: udma: resolve the issue of false verification.
  - ub:ubus: Add new chip information into ubus_error_table
  - ub:ubus: ras adapter of the new chips
  - urma: Add host info lookup trie for CTP reuse
  - urma: add dfx for ns mode
  - tun: free page on build_skb failure in tun_xdp_one()
  - ub: ubase: set the delay processing time for ctrlq crq to
  - urma: add command to query TP information
  - ub: udma: resolve issues of create ccu_jetty.
  - ub: udma: set the jetty type by id
  - urma: fix target_reuse_tpid connect waiting times
  - drivers/ub/sentry: fix memory leak and use-after-free in smh_message_get()
  - vfio:ubus: Corrected the English errors of vfio
  - ub:ubfi: Corrected the English errors of ubfi
  - ub:ubus: Corrected the English errors of ubus
  - ub:ubus: add module_version for udev modules
  - ub:ubus: Eliminate some compilation warnings on the code review platform
  - net: unic: resolve environment panic caused by alloc page
  - ub: cdma: refactor naming conventions and code cleanup
  - ASoC: nau8821: Cancel delayed work on component remove
  - ASoC: nau8821: Cancel pending work before suspend
  - octeon_ep: initialise control mbox tasks before using APIs
  - ub: ubase: increase reset task scheduling delay to avoid
  - urma: fix tpid reuse start up link error and ref cnt
  - iommu/ummu: Fix TLB invalidation flow in map/unmap
  - octeon_ep: ensure dbell BADDR updation
  - octeon_ep: set backpressure watermark for RX queues
  - octeon_ep: disable per ring interrupts
  - octeon_ep: support Octeon CN10K devices
  - octeon_ep: restructured interrupt handlers
  - octeon_ep: support to fetch firmware info
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect()
  - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
  - ASoC: nau8821: Consistently clear interrupts before unmasking
  - bpf, sockmap: Fix incorrect copied_seq calculation
  - urma: add eid sharing mode
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
  - xfrm: Wait for RCU readers during policy netns exit
  - obmm: fix vma access check for PROT_WRITE-only mappings
  - ub: cdma: fix some code errors detected by AI in the kernel cdma
  - most: core: fix leak on early registration failure
  - most: core: fix resource leak in most_register_interface error paths
  - most: remove usage of the deprecated ida_simple_xx() API
  - fix "KVM: x86: Use scratch field in MMIO fragment to hold small write values" KABI CRC break issue
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - RDMA/hns: Return actual error code instead of fixed EINVAL
  - RDMA/hns: Fix RoCEv1 failure due to DSCP
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg
  - MAINTAINERS: remove Jerin Jacob from Marvell OcteonTX2
  - netfilter: x_tables: ensure names are nul-terminated
  - urma: validate ubcore message version for compatibility
  - netconsole: avoid OOB reads, msg is not nul-terminated
  - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
  - scsi/hiraid: Support new RAID features and bug fixes
  - ub:ubus: Fix the calculation of the total_ues for MUE in VDM registration
  - urma: change the enum in ubcore_cmd.h for netlink msg_type
  - ub:ubus: Using activate mutex to prevent reset and activate/deactivate occuring concurrently
  - bug fix for virtcca huk-based key encryption
  - urma: fix panic issue when ifconfig up/down ipourma device
  - drivers/iommu: Revise IOMMU memory reservation interface call timing
  - LoongArch: KVM: Revert "LoongArch: KVM: Add paravirt preempt feature in hypervisor side"
  - LoongArch: KVM: Revert "LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side"
  - LoongArch: KVM: Revert "LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function"
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - Revert "irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support"
  - bcache: fix uninitialized closure object
  - bcache: fix cached_dev.sb_bio use-after-free and crash
  - spi: spidev: fix lock inversion between spi_lock and buf_lock
  - mm: make SPLIT_PTE_PTLOCKS depend on SMP
  - powerpc/8xx: document and enforce that split PT locks are not used
  - mm: turn USE_SPLIT_PTE_PTLOCKS / USE_SPLIT_PTE_PTLOCKS into Kconfig options
  - ub: udma: optimizing the scheme for separating page
  - KVM: SVM: Add missing save/restore handling of LBR MSRs
  - urma:  fix unimport jetty function call and remove debug logs
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - urma: enhance the reliability of the kernel-mode wk_jetty retransmission
  - x86/cpu/hygon: Adjust the die_id and logical_die_id for Hygon models 0x4-0x8
  - urma: fix well-known jetty create/delete hook up with main ue eid event
  - ksmbd: close durable scavenger races against m_fp_list lookups
  - ksmbd: validate owner of durable handle on reconnect
  - ksmbd: add durable scavenger timer
  - ksmbd: avoid reclaiming expired durable opens by the client
  - usb: gadget: f_ecm: Fix net_device lifecycle with device_move
  - mm: fix CMA folio migration problems
  - mm: enhance CMA folio mempolicy support and fix MPOL_BIND bypass
  - urma: Fix the issue where functions such as uburma_cmd_unimport_seg() cannot measure running time
  - ub: udma: add get tp list function.
  - EDAC/amd64:Update the SMN and nb interface used by Hygon processors in EDAC
  - hwmon/k10temp: Update the SMN interface used by Hygon processors in k10temp
  - x86/hygon_nb: Add Hygon Northbridge driver support via PCI enumeration
  - hwrng: core - use RCU and work_struct to fix race condition
  - hwrng: core - Allow runtime disabling of the HW RNG
  - RDMA/mlx5: Fix UMR hang in LAG error state unload
  - ub: ubase: adapt to the API of alloc memory of ummu
  - bpf: Remove smap argument from bpf_selem_free()
  - urma: implement kernel-space get tp list with hash table.
  - x86/cpu/hygon: Fix node ID overflow for Hygon models 0x4-0x8
  - apparmor: Fix & Optimize table creation from possibly unaligned memory
  - AppArmor: Allow apparmor to handle unaligned dfa tables
  - drivers/ub/sentry: adapt to ubcore_get_tp_list semantic change
  - urma: fix uburma ioctl error handling for connection
  - xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - selftests/bpf: Add test for stale pkt range after scalar arithmetic
  - bpf: Drop pkt_end markers on arithmetic to prevent is_pkt_ptr_branch_taken
  - obmm: add feature-based enable control
  - dlm: validate length in dlm_search_rsb_tree
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter()
  - net/rds: reset op_nents when zerocopy page pin fails
  - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race
  - spi: sifive: fix controller deregistration
  - spi: sifive: Simplify clock handling with devm_clk_get_enabled()
  - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
  - spi: st-ssc4: fix controller deregistration
  - spi: st-ssc4: switch to use modern name
  - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
  - f2fs: fix false alarm of lockdep on cp_global_sem lock
  - f2fs: fix incorrect file address mapping when inline inode is unwritten
  - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
  - mptcp: pm: prio: skip closed subflows
  - mptcp: fix rx timestamp corruption on fastopen
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq()
  - RDMA/mana: Validate rx_hash_key_len
  - btrfs: fix missing last_unlink_trans update when removing a directory
  - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I()
  - btrfs: use inode already stored in local variable at btrfs_rmdir()
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation
  - drm/v3d: Reject empty multisync extension to prevent infinite loop
  - eventfs: Use list_add_tail_rcu() for SRCU-protected children list
  - pmdomain: core: Fix detach procedure for virtual devices in genpd
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
  - drm/gma500/oaktrail_lvds: fix hang on init failure
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
  - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()
  - drm/i915: skip __i915_request_skip() for already signaled requests
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX
  - libceph: handle rbtree insertion error in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in crush_decode()
  - libceph: Fix potential null-ptr-deref in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in osdmap_decode()
  - netfs: fix error handling in netfs_extract_user_iter()
  - powerpc/warp: Fix error handling in pika_dtm_thread
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending()
  - ceph: fix a buffer leak in __ceph_setxattr()
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio
  - ASoC: SOF: Intel: hda-dai: remove dspless special case
  - KVM: x86: Fix Xen hypercall tracepoint argument assignment
  - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
  - KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
  - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
  - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
  - netfilter: nft_ct: fix missing expect put in obj eval
  - audit: fix incorrect inheritable capability in CAPSET records
  - netfilter: nf_conntrack_sip: get helper before allocating expectation
  - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path
  - i40e: Cleanup PTP pins on probe failure
  - crypto: af_alg - Cap AEAD AD length to 0x80000000
  - netconsole: avoid out-of-bounds access on empty string in trim_newline()
  - net/sched: sch_pie: annotate more data-races in pie_dump_stats()
  - ksmbd: validate response sizes in ipc_validate_msg()
  - net: bcmgenet: fix leaking free_bds
  - net: bcmgenet: Initialize u64 stats seq counter
  - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
  - ntfs: ->d_compare() must not block
  - net/sched: cls_flower: revert unintended changes
  - sfc: fix error code in efx_devlink_info_running_versions()
  - net: tls: fix strparser anchor skb leak on offload RX setup failure
  - ice: fix NULL pointer dereference in ice_reset_all_vfs()
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
  - iavf: wait for PF confirmation before removing VLAN filters
  - iavf: stop removing VLAN filters from PF on interface down
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING
  - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner
  - drm/amd/display: Read EDID from VBIOS embedded panel info
  - drm/amd/display: Allow DCE link encoder without AUX registers
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
  - ALSA: hda/conexant: Fix missing error check for jack detection
  - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87
  - ALSA: hda/conexant: fix some typos
  - netconsole: propagate device name truncation in dev_name_store()
  - net: netconsole: move newline trimming to function
  - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)
  - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
  - ipv6: rename and move ip6_dst_lookup_tunnel()
  - ipv4: add new arguments to udp_tunnel_dst_lookup()
  - ipv4: remove "proto" argument from udp_tunnel_dst_lookup()
  - ipv4: rename and move ip_route_output_tunnel()
  - sctp: discard stale INIT after handshake completion
  - netfilter: skip recording stale or retransmitted INIT
  - ASoC: codecs: ab8500: Fix casting of private data
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
  - net: phy: dp83869: fix setting CLK_O_SEL field.
  - net: mctp i2c: check length before marking flow active
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams
  - neigh: let neigh_xmit take skb ownership
  - neighbour: add RCU protection to neigh_tables[]
  - net/sched: taprio: fix NULL pointer dereference in class dump
  - NFC: trf7970a: Ignore antenna noise when checking for RF field
  - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
  - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
  - vrf: Fix a potential NPD when removing a port from a VRF
  - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
  - net/sched: sch_choke: annotate data-races in choke_dump_stats()
  - net/sched: netem: check for negative latency and jitter
  - net/sched: netem: fix slot delay calculation overflow
  - net/sched: netem: validate slot configuration
  - net/sched: netem: only reseed PRNG when seed is explicitly provided
  - net/sched: netem: fix queue limit check to include reordered packets
  - net/sched: netem: fix probability gaps in 4-state loss model
  - netdevsim: zero initialize struct iphdr in dummy sk_buff
  - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()
  - arm64/scs: Fix potential sign extension issue of advance_loc4
  - drm/sysfb: ofdrm: fix PCI device reference leaks
  - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
  - netfilter: nf_conntrack_sip: don't use simple_strtoul
  - netfilter: xt_policy: fix strict mode inbound policy matching
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated
  - drm/amdgpu: fix spelling typos
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
  - nvme-pci: fix missed admin queue sq doorbell write
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing
  - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()
  - mailbox: mailbox-test: make data_ready a per-instance variable
  - mailbox: mailbox-test: initialize struct earlier
  - mailbox: mailbox-test: don't free the reused channel
  - mailbox: add sanity check for channel array
  - cgroup/rdma: fix integer overflow in rdmacg_try_charge()
  - mailbox: mailbox-test: free channels on probe error
  - fbdev: offb: fix PCI device reference leak on probe failure
  - rtc: abx80x: Disable alarm feature if no interrupt attached
  - fs/adfs: validate nzones in adfs_validate_bblk()
  - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
  - tipc: fix double-free in tipc_buf_append()
  - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
  - net: dsa: realtek: rtl8365mb: fix mode mask calculation
  - net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
  - net/sched: sch_red: annotate data-races in red_dump_stats()
  - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()
  - net/sched: sch_pie: annotate data-races in pie_dump_stats()
  - net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
  - net/rds: zero per-item info buffer before handing it to visitors
  - ksmbd: scope conn->binding slowpath to bound sessions only
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
  - ksmbd: destroy async_ida in ksmbd_conn_free()
  - ksmbd: add support for supplementary groups
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit()
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
  - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
  - slip: bound decode() reads against the compressed packet length
  - slip: reject VJ receive packets on instances with no rstate array
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  - ipvs: fix MTU check for GSO packets in tunnel mode
  - netfilter: xtables: restrict several matches to inet family
  - netfilter: conntrack: remove sprintf usage
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  - netfilter: nft_osf: restrict it to ipv4
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
  - ipv6: fix possible UAF in icmpv6_rcv()
  - e1000e: Unroll PTP in probe error handling
  - i40e: don't advertise IFF_SUPP_NOFCS
  - ice: fix double-free of tx_buf skb
  - ice: Remove jumbo_remove step from TX path
  - tcp: annotate data-races around tp->plb_rehash
  - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
  - tcp: annotate data-races around tp->dsack_dups
  - tcp: annotate data-races around tp->bytes_retrans
  - tcp: annotate data-races around tp->bytes_sent
  - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans
  - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
  - nexthop: fix IPv6 route referencing IPv4 nexthop
  - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys
  - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
  - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
  - PCMCIA: Fix garbled log messages for KERN_CONT
  - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT
  - crypto: ccp - copy IV using skcipher ivsize
  - crypto: sa2ul - Fix AEAD fallback algorithm names
  - drm/i915/wm: Verify the correct plane DDB entry
  - drm/i915: Loop over all active pipes in intel_mbus_dbox_update
  - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update()
  - drm/i915: Simplify watermark state checker calling convention
  - drm/i915: Constify watermark state checker
  - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
  - f2fs: Use sysfs_emit_at() to simplify code
  - clk: visconti: pll: initialize clk_init_data to zero
  - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
  - clk: qcom: dispcc-sc7180: Add missing MDSS resets
  - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
  - clk: xgene: Fix mapping leak in xgene_pllclk_init()
  - clk: qoriq: avoid format string warning
  - clk: imx8mq: Correct the CSI PHY sels
  - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()
  - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()
  - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
  - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
  - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
  - clk: qcom: gcc-sc8180x: Use retention for USB power domains
  - clk: qcom: gcc-sc8180x: Add missing GDSCs
  - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
  - scsi: target: core: Fix integer overflow in UNMAP bounds check
  - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers
  - scsi: sg: Resolve soft lockup issue when opening /dev/sgX
  - scsi: sg: Fix sysctl sg-big-buff register during sg_init()
  - scsi: sg: Make sg_sysfs_class constant
  - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source
  - RDMA/core: Prefer NLA_NUL_STRING
  - platform/x86: dell-wmi-sysman: bound enumeration string aggregation
  - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()
  - fs/ntfs3: terminate the cached volume label after UTF-8 conversion
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()
  - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()
  - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup
  - tty: hvc_iucv: fix off-by-one in number of supported devices
  - leds: lgm-sso: Remove duplicate assignments for priv->mmap
  - platform/surface: surfacepro3_button: Drop wakeup source on remove
  - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()
  - dev_printk: add new dev_err_probe() helpers
  - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status
  - perf util: Kill die() prototype, dead for a long time
  - ipmi: ssif_bmc: change log level to dbg in irq callback
  - ipmi: ssif_bmc: fix message desynchronization after truncated response
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure
  - perf expr: Return -EINVAL for syntax error in expr__find_ids()
  - perf lock: Fix option value type in parse_max_stack
  - pinctrl: abx500: Fix type of 'argument' variable
  - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace
  - perf branch: Avoid incrementing NULL
  - pinctrl: cy8c95x0: Avoid returning positive values to user space
  - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
  - pinctrl: cy8c95x0: remove duplicate error message
  - pinctrl: pinctrl-pic32: Fix resource leak
  - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
  - bpf: allow UTF-8 literals in bpf_bprintf_prepare()
  - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
  - bpf, sockmap: Take state lock for af_unix iter
  - bpf, sockmap: Fix af_unix null-ptr-deref in proto update
  - bpf, sockmap: Fix af_unix iter deadlock
  - HID: usbhid: fix deadlock in hid_post_reset()
  - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
  - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions
  - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path
  - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
  - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
  - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook
  - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook
  - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations
  - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
  - mtd: physmap_of_gemini: Fix disabled pinctrl state check
  - HID: asus: do not abort probe when not necessary
  - HID: asus: make asus_resume adhere to linux kernel coding standards
  - ima: check return value of crypto_shash_final() in boot aggregate
  - soundwire: cadence: Clear message complete before signaling waiting thread
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
  - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function
  - ocfs2: validate group add input before caching
  - ocfs2: validate bg_bits during freefrag scan
  - ocfs2: fix listxattr handling when the buffer is full
  - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended
  - arm64/xor: fix conflicting attributes for xor_block_template
  - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
  - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
  - soc: qcom: aoss: compare against normalized cooling state
  - soc: qcom: llcc: fix v1 SB syndrome register offset
  - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
  - ocfs2/dlm: validate qr_numregions in dlm_match_regions()
  - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure
  - soc/tegra: cbb: Set ERD on resume for err interrupt
  - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual
  - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot
  - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl
  - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller
  - arm64: dts: qcom: sm8550: Fix GIC_ITS range length
  - arm64: dts: qcom: sm8450: Fix GIC_ITS range length
  - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
  - soc: qcom: ocmem: register reasons for probe deferrals
  - soc: qcom: ocmem: use scoped device node handling to simplify error paths
  - soc: qcom: ocmem: make the core clock optional
  - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
  - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
  - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
  - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
  - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1)
  - arm64: dts: imx8-apalis: Fix LEDs name collision
  - memory: tegra30-emc: Fix dll_change check
  - memory: tegra124-emc: Fix dll_change check
  - ARM: dts: mediatek: mt7623: fix efuse fallback compatible
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation
  - gfs2: prevent NULL pointer dereference during unmount
  - gfs2: add some missing log locking
  - quota: Fix race of dquot_scan_active() with quota deactivation
  - ktest: Run POST_KTEST hooks on failure and cancellation
  - ktest: Honor empty per-test option overrides
  - ktest: Avoid undef warning when WARNINGS_FILE is unset
  - gfs2: Call unlock_new_inode before d_instantiate
  - crypto: jitterentropy - replace long-held spinlock with mutex
  - dm cache: fix missing return in invalidate_committed's error path
  - ALSA: sc6000: Keep the programmed board state in card-private data
  - ALSA: sc6000: Use standard print API
  - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
  - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
  - PCI: tegra194: Use DWC IP core version
  - PCI: tegra194: Allow system suspend when the Endpoint link is not up
  - PCI: tegra194: Disable direct speed change for Endpoint mode
  - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"
  - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
  - PCI: tegra194: Don't force the device into the D0 state before L2
  - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0()
  - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down
  - PCI: tegra194: Increase LTSSM poll time on surprise link down
  - PCI: tegra194: Fix polling delay for L2 state
  - ASoC: SOF: compress: return the configured codec from get_params
  - ALSA: scarlett2: Add missing sentinel initializer field
  - selftest: memcg: skip memcg_sock test if address family not supported
  - Documentation: fix a hugetlbfs reservation statement
  - selftests/mm: skip migration tests if NUMA is unavailable
  - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
  - PCI: Enable AtomicOps only if Root Port supports them
  - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
  - crypto: qat - use swab32 macro
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
  - ASoC: fsl_micfil: Add access property for "VAD Detected"
  - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()
  - pmdomain: ti: omap_prm: Fix a reference leak on device node
  - drm/msm/a6xx: Use barriers while updating HFI Q headers
  - drm/msm/shrinker: Fix can_block() logic
  - drm/msm/a6xx: Fix HLSQ register dumping
  - ASoC: SOF: Intel: hda: Place check before dereference
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
  - drm/amd/pm/ci: Fill DW8 fields from SMC
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
  - ALSA: core: Validate compress device numbers without dynamic minors
  - drm/panel: simple: Correct G190EAN01 prepare timing
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
  - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
  - drm/msm/dsi: add the missing parameter description
  - drm/msm/dpu: fix mismatch between power and frequency
  - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority
  - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs
  - crypto: atmel - Use unregister_{aeads,ahashes,skciphers}
  - crypto: atmel - Remove cfb and ofb
  - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break
  - dm init: ensure device probing has finished in dm-mod.waitfor=
  - drm/amdgpu: Add default case in DVI mode validation
  - drm/sun4i: Fix resource leaks
  - spi: fsl-qspi: Use reinit_completion() for repeated operations
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
  - dm log: fix out-of-bounds write due to region_count overflow
  - dm cache metadata: fix memory leak on metadata abort retry
  - platform/chrome: chromeos_tbmc: Drop wakeup source on remove
  - dm cache: fix dirty mapping checking in passthrough mode switching
  - dm cache: support shrinking the origin device
  - dm cache: fix concurrent write failure in passthrough mode
  - dm cache policy smq: fix missing locks in invalidating cache blocks
  - dm cache: fix write hang in passthrough mode
  - dm cache: fix write path cache coherency in passthrough mode
  - dm cache: fix null-deref with concurrent writes in passthrough mode
  - ASoC: sti: use managed regmap_field allocations
  - ASoC: sti: Return errors from regmap_field_alloc()
  - drm/sun4i: backend: fix error pointer dereference
  - drm/komeda: fix integer overflow in AFBC framebuffer size check
  - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
  - sctp: fix missing encap_port propagation for GSO fragments
  - net: phy: qcom: at803x: Use the correct bit to disable extended next page
  - net: phy: move at803x PHY driver to dedicated directory
  - net: phy: add Rust Asix PHY driver
  - net: phy: aquantia: move to separate directory
  - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
  - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic()
  - net/mlx5e: Fix features not applied during netdev registration
  - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110
  - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+
  - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
  - net/rds: Restrict use of RDS/IB to the initial network namespace
  - net/rds: Optimize rds_ib_laddr_check
  - net/sched: act_ct: Only release RCU read lock after ct_ft
  - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
  - 6pack: propagage new tty types
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding
  - netfilter: xt_socket: enable defrag after all other checks
  - net: bcmgenet: fix racing timeout handler
  - net: bcmgenet: switch to use 64bit statistics
  - net: bcmgenet: support reclaiming unsent Tx packets
  - net: bcmgenet: move DESC_INDEX flow to ring 0
  - net: bcmgenet: add bcmgenet_has_* helpers
  - net: bcmgenet: Remove custom ndo_poll_controller()
  - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  - arm64: kexec: Remove duplicate allocation for trans_pgd
  - ACPI: AGDI: fix missing newline in error message
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
  - wifi: brcmfmac: Fix error pointer dereference
  - macvlan: annotate data-races around port->bc_queue_len_used
  - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  - selftests/powerpc: Re-order *FLAGS to follow lib.mk
  - powerpc/crash: fix backup region offset update to elfcorehdr
  - r8152: fix incorrect register write to USB_UPHY_XTAL
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
  - wifi: mt76: mt7915: fix use_cts_prot support
  - wifi: mt76: mt7615: fix use_cts_prot support
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr()
  - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n
  - params: Replace __modinit with __init_or_module
  - s390/bpf: Zero-extend bpf prog return values and kfunc arguments
  - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n
  - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
  - bpf: Add CHECKSUM_COMPLETE to bpf test progs
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
  - firmware: dmi: Correct an indexing error in dmi.h
  - locking: Fix rwlock support in <linux/spinlock_up.h>
  - hrtimer: Reduce trace noise in hrtimer_start()
  - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()
  - hrtimers: Update the return type of enqueue_hrtimer()
  - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter
  - s390/cio: use generic driver_override infrastructure
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit()
  - s390/cio: make sch->lock spinlock pointer a member
  - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str()
  - debugfs: check for NULL pointer in debugfs_create_str()
  - thermal/drivers/spear: Fix error condition for reading st,thermal-flags
  - devres: fix missing node debug info in devm_krealloc()
  - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
  - ACPI: x86: cmos_rtc: Clean up address space handler driver
  - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()
  - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
  - loop: fix partition scan race between udev and loop_reread_partitions()
  - drbd: Balance RCU calls in drbd_adm_dump_devices()
  - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  - blk-cgroup: wait for blkcg cleanup before initializing new disk
  - smb: client: use kzalloc to zero-initialize security descriptor buffer
  - mtd: spi-nor: sst: Fix SST write failure
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check
  - vsock/virtio: fix length and offset in tap skb for split packets
  - vsock: fix buffer size clamping order
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  - usb: dwc3: Move GUID programming after PHY initialization
  - tracing/probes: Limit size of event probe to 3K
  - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
  - pwm: imx-tpm: Count the number of enabled channels in probe
  - mtd: spi-nor: sst: Fix write enable before AAI sequence
  - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()`
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
  - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
  - usb: typec: tcpm: reset internal port states on soft reset AMS
  - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
  - mm/damon/core: implement damon_kdamond_pid()
  - mm/damon/core: disallow time-quota setting zero esz
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
  - fbcon: Avoid OOB font access if console rotation fails
  - spi: microchip-core-qspi: fix controller deregistration
  - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled()
  - mm/hugetlb_cma: round up per_node before logging it
  - spi: uniphier: fix controller deregistration
  - spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
  - spi: uniphier: switch to use modern name
  - spi: tegra20-sflash: fix controller deregistration
  - spi: tegra114: fix controller deregistration
  - spi: sun6i: fix controller deregistration
  - spi: sun6i: switch to use modern name
  - spi: zynq-qspi: fix controller deregistration
  - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
  - spi: zynq-qspi: switch to use modern name
  - spi: ti-qspi: fix controller deregistration
  - spi: spi-ti-qspi: switch to use modern name
  - spi: spi-ti-qspi: Convert to platform remove callback returning void
  - spi: sun4i: fix controller deregistration
  - spi: sun4i: switch to use modern name
  - spi: syncuacer: fix controller deregistration
  - spi: synquacer: switch to use modern name
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - xfrm: ah: account for ESN high bits in async callbacks
  - net: ipv6: stop checking crypto_ahash_alignmask
  - net: ipv4: stop checking crypto_ahash_alignmask
  - net: stmmac: Prevent NULL deref when RX memory exhausted
  - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
  - net: stmmac: avoid shadowing global buf_sz
  - crypto: caam - guard HMAC key hex dumps in hash_digest_key
  - printk: add print_hex_dump_devel()
  - wifi: rtl8xxxu: fix potential use of uninitialized value
  - hfsplus: fix held lock freed on hfsplus_fill_super()
  - hfsplus: fix uninit-value by validating catalog record size
  - xfs: fix a resource leak in xfs_alloc_buftarg()
  - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
  - udf: fix partition descriptor append bookkeeping
  - firmware: google: framebuffer: Do not unregister platform device
  - spi: fix resource leaks on device setup failure
  - net: qrtr: ns: Limit the total number of nodes
  - net: qrtr: ns: Limit the maximum number of lookups
  - net: qrtr: ns: Limit the maximum server registration per node
  - net: bridge: use a stable FDB dst snapshot in RCU readers
  - net: mctp: fix don't require received header reserved bits to be zero
  - RDMA/mana_ib: Disable RX steering on RSS QP destroy
  - sched: Use u64 for bandwidth ratio calculations
  - block: relax pgmap check in bio_add_page for compatible zone device pages
  - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
  - wifi: mt76: connac: introduce helper for mt7925 chipset
  - lib: test_hmm: evict device pages on file close to avoid use-after-free
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
  - batman-adv: bla: put backbone reference on failed claim hash insert
  - batman-adv: bla: only purge non-released claims
  - batman-adv: bla: prevent use-after-free when deleting claims
  - batman-adv: stop caching unowned originator pointers in BAT IV
  - batman-adv: reject new tp_meter sessions during teardown
  - batman-adv: fix integer overflow on buff_pos
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon
  - drm/amdgpu/pm: add missing revision check for CI
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
  - drm/amdgpu: zero-initialize GART table on allocation
  - drm/radeon: add missing revision check for CI
  - drm/amdkfd: validate SVM ioctl nattr against buffer size
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vce: Prevent partial address patches
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value
  - drm/amdkfd: Add upper bound check for num_of_nodes
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
  - spi: cadence: fix unclocked access on unbind
  - spi: cadence: fix controller deregistration
  - spi: mpc52xx: fix use-after-free on unbind
  - spi: orion: fix clock imbalance on registration failure
  - spi: orion: fix runtime pm leak on unbind
  - spi: imx: fix runtime pm leak on probe deferral
  - spi: img-spfi: fix controller deregistration
  - spi: rspi: fix controller deregistration
  - spi: sprd: fix controller deregistration
  - spi: coldfire-qspi: fix controller deregistration
  - spi: bcmbca-hsspi: fix controller deregistration
  - spi: fsl: fix controller deregistration
  - spi: sh-hspi: fix controller deregistration
  - spi: mtk-nor: fix controller deregistration
  - spi: omap2-mcspi: fix controller deregistration
  - spi: fsl-espi: fix controller deregistration
  - spi: s3c64xx: fix controller deregistration
  - spi: dln2: fix controller deregistration
  - media: omap3isp: drop the use count of v4l2 pipeline
  - media: i2c: ov08d10: fix image vertical start setting
  - media: staging: imx: request mbus_config in csi_start
  - media: i2c: imx412: Assert reset GPIO during probe
  - media: dib8000: avoid division by 0 in dib8000_set_dds()
  - media: pci: zoran: fix potential memory leak in zoran_probe()
  - platform/x86: hp-wmi: Ignore backlight and FnLock events
  - media: saa7164: add ioremap return checks and cleanups
  - spi: at91-usart: fix controller deregistration
  - spi: qup: fix controller deregistration
  - spi: lantiq-ssc: fix controller deregistration
  - regulator: bd9571mwv: fix OF node reference imbalance
  - regulator: act8945a: fix OF node reference imbalance
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
  - regulator: rk808: fix OF node reference imbalance
  - media: rc: streamzap: Error handling in probe
  - media: rc: xbox_remote: heed DMA restrictions
  - regulator: max77650: fix OF node reference imbalance
  - regulator: mt6357: fix OF node reference imbalance
  - staging: media: atomisp: Disallow all private IOCTLs
  - spi: atmel: fix controller deregistration
  - spi: bcm63xx: fix controller deregistration
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls()
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream
  - HID: playstation: Clamp num_touch_reports
  - exit: Sleep at TASK_IDLE when waiting for application core dump
  - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
  - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value
  - f2fs: fix node_cnt race between extent node destroy and writeback
  - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
  - f2fs: fix fiemap boundary handling when read extent cache is incomplete
  - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
  - mptcp: fix scheduling with atomic in timestamp sockopt
  - mptcp: sockopt: set timestamp flags on subflow socket, not msk
  - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
  - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
  - mptcp: fastclose msk when linger time is 0
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
  - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
  - power: supply: max17042: avoid overflow when determining health
  - PCI/AER: Stop ruling out unbound devices as error source
  - PCI/AER: Clear only error bits in PCIe Device Status
  - KVM: x86: check for nEPT/nNPT in slow flush hypercalls
  - smb: client: validate dacloffset before building DACL pointers
  - smb/client: fix out-of-bounds read in symlink_data()
  - smb/client: fix out-of-bounds read in smb2_compound_op()
  - s390/debug: Reject zero-length input in debug_input_flush_fn()
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
  - nvme-apple: drop invalid put of admin queue reference count
  - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
  - libceph: Fix slab-out-of-bounds access in auth message processing
  - lib/scatterlist: fix temp buffer in extract_user_to_sg()
  - lib/scatterlist: fix length calculations in extract_kvec_to_sg
  - isofs: validate block number from NFS file handle in isofs_export_iget
  - isofs: validate Rock Ridge CE continuation extent against volume size
  - dm-verity-fec: correctly reject too-small hash devices
  - dm-verity-fec: correctly reject too-small FEC devices
  - dm: fix a buffer overflow in ioctl processing
  - dm: don't report warning when doing deferred remove
  - dm-thin: fix metadata refcount underflow
  - ASoC: qcom: q6apm: remove child devices when apm is removed
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
  - ASoC: fsl_easrc: fix comment typo
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table
  - cpuidle: powerpc: avoid double clear when breaking snooze
  - clk: microchip: mpfs-ccc: fix out of bounds access during output registration
  - clk: imx: imx8-acm: fix flags for acm clocks
  - spi: topcliff-pch: fix use-after-free on unbind
  - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp
  - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
  - udf: reject descriptors with oversized CRC length
  - ibmveth: Disable GSO for packets with small MSS
  - hv_sock: fix ARM64 support
  - gpio: of: clear OF_POPULATED on hog nodes in remove path
  - extcon: ptn5150: handle pending IRQ events during system resume
  - cifs: change_conf needs to be called for session setup
  - cifs: abort open_cached_dir if we don't request leases
  - block: add pgmap check to biovec_phys_mergeable
  - af_unix: Reject SIOCATMARK on non-stream sockets
  - hwmon: (corsair-psu) Close HID device on probe errors
  - clk: rk808: fix OF node reference imbalance
  - hwmon: (ltc2992) Fix u32 overflow in power read path
  - hwmon: (ltc2992) Clamp threshold writes to hardware range
  - parisc: Fix IRQ leak in LASI driver
  - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
  - net/rds: handle zerocopy send cleanup before the message is queued
  - ip6_gre: Use cached t->net in ip6erspan_changelink().
  - net: libwx: fix VF illegal register access
  - sound: ua101: fix division by zero at probe
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - fanotify: fix false positive on permission events
  - staging: vme_user: fix root device leak on init failure
  - spi: s3c64xx: fix NULL-deref on driver unbind
  - spi: zynqmp-gqspi: fix controller deregistration
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
  - Bluetooth: virtio_bt: validate rx pkt_type header length
  - Bluetooth: virtio_bt: clamp rx length before skb_put
  - selinux: prune /sys/fs/selinux/disable
  - selinux: shrink critical section in sel_write_load()
  - selinux: don't reserve xattr slot when we won't fill it
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: provide message size for XFRM_MSG_MAPPING
  - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
  - ALSA: firewire-tascam: Do not drop unread control events
  - USB: serial: option: add Telit Cinterion LE910Cx compositions
  - USB: omap_udc: DMA: Don't enable burst 4 mode
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
  - ALSA: usb-audio: midi2: Restart output URBs on resume
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
  - wifi: b43: enforce bounds check on firmware key index in b43_rx()
  - wifi: mac80211: remove station if connection prep fails
  - wifi: ath5k: do not access array OOB
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow
  - exit: prevent preemption of oopsing TASK_DEAD task
  - selftests/bpf: validate fake register spill/fill precision backtracking logic
  - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros
  - selftests/bpf: validate zero preservation for sub-slot loads
  - selftests/bpf: validate STACK_ZERO is preserved on subreg spill
  - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - KVM: SVM: check validity of VMCB controls when returning from SMM
  - flow_dissector: do not dissect PPPoE PFC frames
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
  - rxrpc: Fix potential UAF after skb_unshare() failure
  - spi: meson-spicc: Fix double-put in remove path
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation
  - spi: rockchip: fix controller deregistration
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams
  - iommufd: Fix a race with concurrent allocation and unmap
  - ACPI: video: force native backlight on HP OMEN 16 (8A44)
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
  - ACPI: scan: Use acpi_dev_put() in object add error paths
  - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
  - ipmi:si: Return state to normal if message allocation fails
  - ipmi: Check event message buffer response for bad data
  - ipmi: Add limits to event and receive message requests
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
  - netfilter: reject zero shift in nft_bitwise
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
  - drm/amdgpu: fix zero-size GDS range init on RDNA4
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
  - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
  - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - ntfs3: fix integer overflow in run_unpack() volume boundary check
  - ntfs3: add buffer boundary checks to run_unpack()
  - ktest: Fix the month in the name of the failure directory
  - IB/core: Fix zero dmac race in neighbor resolution
  - dm mirror: fix integer overflow in create_dirty_log()
  - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
  - crypto: atmel-tdes - fix DMA sync direction
  - crypto: ccree - fix a memory leak in cc_mac_digest()
  - crypto: hisilicon - Fix dma_unmap_single() direction
  - crypto: atmel-ecc - Release client on allocation failure
  - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
  - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
  - can: ucan: fix devres lifetime
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - taskstats: set version in TGID exit notifications
  - tcp: call sk_data_ready() after listener migration
  - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
  - md/raid5: validate payload size before accessing journal metadata
  - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
  - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
  - mtd: docg3: fix use-after-free in docg3_release()
  - mtd: docg3: Convert to platform remove callback returning void
  - KVM: nSVM: Add missing consistency check for nCR3 validity
  - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
  - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
  - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
  - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
  - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
  - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT
  - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
  - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
  - KVM: x86: Defer non-architectural deliver of exception payload to userspace read
  - userfaultfd: allow registration of ranges below mmap_min_addr
  - mm/damon/core: use time_in_range_open() for damos quota window start
  - rtc: ntxec: fix OF node reference imbalance
  - tpm: tpm_tis: stop transmit if retries are exhausted
  - tpm: tpm_tis: add error logging for data transfer
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
  - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
  - mmc: block: use single block write in retry
  - power: supply: axp288_charger: Do not cancel work before initializing it
  - LoongArch: Show CPU vulnerabilites correctly
  - tpm: avoid -Wunused-but-set-variable
  - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
  - ipv4: icmp: validate reply type before using icmp_pointers
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - drm/arcpgu: fix device node leak
  - net: ks8851: Avoid excess softirq scheduling
  - net: ks8851: Reinstate disabling of BHs around IRQ handler
  - net/smc: avoid early lgr access in smc_clc_wait_msg
  - net: rds: fix MR cleanup on copy error
  - net: qrtr: ns: Free the node during ctrl_cmd_bye()
  - tools/accounting: handle truncated taskstats netlink messages
  - rxrpc: Fix re-decryption of RESPONSE packets
  - rxrpc: Fix rxkad crypto unalignment handling
  - rxrpc: Fix memory leaks in rxkad_verify_response()
  - iio: adc: ad7768-1: fix one-shot mode data acquisition
  - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE
  - io_uring/poll: fix signed comparison in io_poll_get_ownership()
  - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
  - io_uring/timeout: check unused sqe fields
  - rbd: fix null-ptr-deref when device_add_disk() fails
  - selftests/mqueue: Fix incorrectly named file
  - remoteproc: xlnx: Only access buffer information if IPI is buffered
  - parisc: _llseek syscall is only available for 32-bit userspace
  - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
  - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
  - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused
  - md/raid10: fix deadlock with check operation and nowait requests
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - ALSA: aoa: i2sbus: fix OF node lifetime handling
  - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
  - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()
  - lib/ts_kmp: fix integer overflow in pattern length calculation
  - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
  - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - media: amphion: Fix race between m2m job_abort and device_run
  - of: unittest: fix use-after-free in testdrv_probe()
  - spi: imx: fix use-after-free on unbind
  - um: drivers: call kernel_strrchr() explicitly in cow_user.c
  - wifi: rtw88: check for PCI upstream bridge existence
  - zram: do not forget to endio for partial discard requests
  - LoongArch: Add spectre boundry for syscall dispatch table
  - ocfs2: split transactions in dio completion to avoid credit exhaustion
  - regset: use kvzalloc() for regset_get_alloc()
  - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
  - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array
  - padata: Remove comment for reorder_work
  - firmware: google: framebuffer: Do not mark framebuffer as busy
  - ibmasm: fix heap over-read in ibmasm_send_i2o_message()
  - ibmasm: fix OOB reads in command_file_write due to missing size checks
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
  - leds: qcom-lpg: Check for array overflow when selecting the high resolution
  - ALSA: usb-audio: Evaluate packsize caps at the right place
  - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change
  - usb: chipidea: otg: not wait vbus drop if use role_switch
  - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - md/raid1: fix data lost for writemostly rdev
  - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  - crypto: testmgr - Hide ENOENT errors better
  - crypto: testmgr - Hide ENOENT errors
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
  - fuse: quiet down complaints in fuse_conn_limit_write
  - fuse: Check for large folio with SPLICE_F_MOVE
  - fuse: reject oversized dirents in page cache
  - f2fs: fix to avoid memory leak in f2fs_rename()
  - fs/ntfs3: validate rec->used in journal-replay file record check
  - rxrpc: only handle RESPONSE during service challenge
  - rxrpc: Fix anonymous key handling
  - scripts/dtc: Remove unused dts_version in dtc-lexer.l
  - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
  - ocfs2: validate inline data i_size during inode read
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
  - rxrpc: Fix key quota calculation for multitoken keys
  - scripts: generate_rust_analyzer.py: define scripts
  - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers
  - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
  - Revert "perf unwind-libdw: Fix invalid reference counts"
  - media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
  - media: vidtv: fix pass-by-value structs causing MSAN warnings
  - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
  - media: as102: fix to not free memory after the device is registered in as102_usb_probe()
  - ALSA: 6fire: fix use-after-free on disconnect
  - media: em28xx: fix use-after-free in em28xx_v4l2_open()
  - media: mediatek: vcodec: fix use-after-free in encoder release path
  - media: vidtv: fix nfeeds state corruption on start_streaming failure
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - mm/kasan: fix double free for kasan pXds
  - ASoC: qcom: q6apm: move component registration to unmanaged version
  - checkpatch: add support for Assisted-by tag
  - nfc: nci: complete pending data exchange on device close
  - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
  - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events()
  - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
  - ocfs2: handle invalid dinode in ocfs2_group_extend
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
  - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race
  - USB: serial: option: add Telit Cinterion FN990A MBIM composition
  - staging: sm750fb: fix division by zero in ps_to_hz()
  - wifi: rtw88: fix device leak on probe failure
  - scripts: generate_rust_analyzer.py: avoid FD leak
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
  - ksmbd: require 3 sub-authorities before reading sub_auth[2]
  - ksmbd: validate EaNameLength in smb2_get_ea()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vc4: platform_get_irq_byname() returns an int
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  - i2c: s3c24xx: check the size of the SMBUS message before using it
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - drm/i915/psr: Do not use pipe_src as borders for SU area
  - objtool: Remove max symbol name length limitation
  - ALSA: usb-audio: Improve Focusrite sample rate filtering
  - gpio: tegra: fix irq_release_resources calling enable instead of disable
  - l2tp: Drop large packets with UDP encap
  - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
  - ipvs: fix NULL deref in ip_vs_add_service error path
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check
  - xsk: validate MTU against usable frame size on bind
  - xsk: fix XDP_UMEM_SG_FLAG issues
  - xsk: respect tailroom for ZC setups
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - e1000: check return value of e1000_read_eeprom
  - dt-bindings: net: Fix Tegra234 MGBE PTP clock
  - net: stmmac: Fix PTP ref clock for Tegra234
  - nfc: s3fwrn5: allocate rx skb before consuming bytes
  - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
  - eventpoll: defer struct eventpoll free to RCU grace period
  - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
  - drm/vc4: Fix a memory leak in hang state error path
  - drm/vc4: Fix memory leak of BO array in hang state
  - drm/vc4: Release runtime PM reference after binding V3D
  - PCI: hv: Set default NUMA node to 0 for devices without affinity info
  - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
  - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J
  - wifi: brcmfmac: validate bsscfg indices in IF events
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
  - HID: roccat: fix use-after-free in roccat_report_event
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
  - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug
  - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
  - wifi: wl1251: validate packet IDs before indexing tx_frames
  - ALSA: hda/realtek: add quirk for Framework F111:000F
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
  - can: mcp251x: add error handling for power enable in open and resume
  - ASoC: SOF: topology: reject invalid vendor array size in token parser
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF
  - ALSA: asihpi: avoid write overflow check warning
  - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl()
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA
  - RDMA/irdma: Fix double free related to rereg_user_mr
  - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure
  - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)
  - rxrpc: fix reference count leak in rxrpc_server_keyring()
  - rxrpc: reject undecryptable rxkad response tickets
  - rxrpc: Only put the call ref if one was acquired
  - rxrpc: Fix key reference count leak from call->key
  - rxrpc: Fix call removal to use RCU safe deletion
  - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
  - net: stmmac: fix integer underflow in chain mode
  - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure
  - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
  - net/mlx5: Update the list of the PCI supported devices
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
  - batman-adv: hold claim backbone gateways by reference
  - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
  - batman-adv: reject oversized global TT response buffers
  - nfc: pn533: allocate rx skb before consuming bytes
  - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
  - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
  - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V
  - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
  - wifi: brcmsmac: Fix dma_free_coherent() size
  - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
  - usb: gadget: f_hid: move list and spinlock inits from bind to alloc
  - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
  - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
  - MIPS: mm: Suppress TLB uniquification on EHINV hardware
  - MIPS: Always record SEGBITS in cpu_data.vmbits
  - Input: uinput - take event lock when submitting FF request "event"
  - mptcp: fix slab-use-after-free in __inet_lookup_established
  - net: rfkill: prevent unlimited numbers of rfkill events from being created
  - wifi: rt2x00usb: fix devres lifetime
  - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
  - MPTCP: fix lock class name family in pm_nl_create_listen_socket
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests
  - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
  - net: mana: fix use-after-free in add_adev() error path
  - net: macb: Move devm_{free,request}_irq() out of spin lock area
  - iio: imu: inv_icm42600: fix odr switch when turning buffer off
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
  - usb: gadget: f_uac1_legacy: validate control request size
  - usb: gadget: f_rndis: Protect RNDIS options with mutex
  - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  - usb: gadget: uvc: fix NULL pointer dereference during unbind race
  - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
  - btrfs: do not free data reservation in fallback from inline due to -ENOSPC
  - btrfs: fix the qgroup data free range for inline data extents
  - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
  - USB: dummy-hcd: Fix interrupt synchronization error
  - USB: dummy-hcd: Fix locking/synchronization error
  - thunderbolt: Fix property read in nhi_wake_supported()
  - misc: fastrpc: possible double-free of cctx->remote_heap
  - thermal: core: Fix thermal zone device registration error path
  - gpio: mxc: map Both Edge pad wakeup to Rising Edge
  - net: ftgmac100: fix ring allocation unwind on open failure
  - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
  - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
  - nvmem: imx: assign nvmem_cell_info::raw_len
  - dt-bindings: connector: add pd-disable dependency
  - comedi: me4000: Fix potential overrun of firmware buffer
  - comedi: me_daq: Fix potential overrun of firmware buffer
  - comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  - comedi: Reinit dev->spinlock between attachments to low-level drivers
  - comedi: dt2815: add hardware detection to prevent crash
  - cdc-acm: new quirk for EPSON HMD
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
  - usb: ehci-brcm: fix sleep during atomic
  - usb: usbtmc: Flush anchored URBs in usbtmc_release
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
  - iio: gyro: mpu3050: Fix out-of-sequence free_irq()
  - iio: gyro: mpu3050: Move iio_device_register() to correct location
  - iio: gyro: mpu3050: Fix irq resource leak
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable
  - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
  - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
  - iio: light: vcnl4035: fix scan buffer on big-endian
  - iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  - iio: accel: fix ADXL355 temperature signature value
  - Input: xpad - add support for Razer Wolverine V3 Pro
  - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
  - Input: synaptics-rmi4 - fix a locking bug in an error path
  - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
  - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
  - drm/ast: dp501: Fix initialization of SCU2C
  - iio: adc: ti-adc161s626: fix buffer read on big-endian
  - mips: mm: Allocate tlb_vpn array atomically
  - hwmon: (occ) Fix division by zero in occ_show_power_1()
  - MIPS: Fix the GCC version check for `__multi3' workaround
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - USB: serial: option: add MeiG Smart SRM825WN
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
  - riscv: kgdb: fix several debug register assignment bugs
  - mips: ralink: update CPU clock index
  - hwmon: (occ) Fix missing newline in occ_show_extended()
  - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
  - dt-bindings: gpio: fix microchip #interrupt-cells
  - hwmon: (pxe1610) Check return value of page-select write in probe
  - accel/qaic: Handle DBC deactivation if the owner went away
  - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  - net: hsr: fix VLAN add unwind on slave errors
  - net/x25: Fix overflow when accumulating packets
  - net/x25: Fix potential double free of skb
  - net/mlx5: Avoid "No data available" when FW version queries fail
  - net: macb: properly unregister fixed rate clocks
  - net: macb: fix clk handling on PCI glue driver removal
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
  - rds: ib: reject FRMR registration before IB connection is established
  - Bluetooth: SCO: fix race conditions in sco_sock_connect()
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
  - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
  - NFC: pn533: bound the UART receive buffer
  - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
  - tg3: Fix race for querying speed/duplex
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill
  - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
  - net: fec: fix the PTP periodic output sysfs interface
  - crypto: caam - fix overflow on long hmac keys
  - crypto: caam - fix DMA corruption on long hmac keys
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
  - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
  - wifi: ath11k: skip status ring entry processing
  - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
  - spi: geni-qcom: Check DMA interrupts early in ISR
  - btrfs: reject root items with drop_progress and zero drop_level
  - i2c: tegra: Don't mark devices with pins as IRQ safe
  - objtool: Fix Clang jump table detection
  - tg3: replace placeholder MAC address with device property
  - btrfs: don't take device_list_mutex when querying zone info
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
  - arm64/scs: Fix handling of advance_loc4
  - Revert "rust: pin-init: add references to previously initialized fields"
  - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors"
  - dmaengine: idxd: Fix freeing the allocated ida too late
  - btrfs: fix lost error when running device stats on multiple devices fs
  - btrfs: fix super block offset in error message in btrfs_validate_super()
  - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA
  - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
  - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA
  - dmaengine: xilinx: xilinx_dma: Fix dma_device directions
  - dmaengine: xilinx: xdma: Fix regmap init error handling
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA.
  - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types()
  - erofs: fix "BUG: Bad page state in z_erofs_do_read_page"
  - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
  - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode
  - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode
  - rust: pin-init: internal: init: document load-bearing fact of field accessors
  - rust: pin-init: add references to previously initialized fields
  - tracing: Fix potential deadlock in cpu hotplug with osnoise
  - tracing: Switch trace_osnoise.c code over to use guard() and __free()
  - ksmbd: fix memory leaks and NULL deref in smb2_lock()
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
  - powerpc64/bpf: do not increment tailcall count when prog is NULL
  - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off
  - ext4: always drain queued discard work in ext4_mb_release()
  - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
  - ext4: fix the might_sleep() warnings in kvfree()
  - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
  - ext4: make recently_deleted() properly work with lazy itable initialization
  - ext4: fix fsync(2) for nojournal mode
  - ext4: fix stale xarray tags after writeback
  - ext4: fix journal credit check when setting fscrypt context
  - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
  - xfs: stop reclaim before pushing AIL during unmount
  - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
  - dmaengine: sh: rz-dmac: Protect the driver specific lists
  - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
  - jbd2: gracefully abort on checkpointing state corruptions
  - net: macb: Use dev_consume_skb_any() to free TX SKBs
  - scsi: ses: Handle positive SCSI error from ses_recv_diag()
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - alarmtimer: Fix argument order in alarm_timer_forward()
  - s390/entry: Scrub r12 register on kernel entry
  - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
  - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature
  - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes
  - KVM: arm64: Discard PC update state on vcpu reset
  - platform/x86: ISST: Correct locked bit width
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload
  - ALSA: firewire-lib: fix uninitialized local variable
  - ksmbd: do not expire session on binding failure
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
  - s390/barrier: Make array_index_mask_nospec() __always_inline
  - s390/syscalls: Add spectre boundary for syscall dispatch table
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  - ASoC: adau1372: Fix clock leak on PLL lock failure
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
  - sysctl: fix uninitialized variable in proc_do_large_bitmap
  - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion
  - ASoC: Intel: catpt: Fix the device initialization
  - spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
  - PM: hibernate: Drain trailing zero pages on userspace restore
  - PM: hibernate: Don't ignore return from set_memory_ro()
  - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
  - scsi: scsi_transport_sas: Fix the maximum channel scanning issue
  - RDMA/irdma: Return EINVAL for invalid arp index error
  - RDMA/irdma: Fix deadlock during netdev reset with active connections
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
  - RDMA/irdma: Update ibqp state to error if QP is already in error state
  - RDMA/irdma: Initialize free_qp completion before using it
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion
  - regmap: Synchronize cache for the page selector
  - Bluetooth: btusb: clamp SCO altsetting table indices
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request
  - Bluetooth: Remove 3 repeated macro definitions
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link
  - dma-mapping: add missing `inline` for `dma_free_attrs`
  - net: enetc: fix the output issue of 'ethtool --show-ring'
  - ice: use ice_update_eth_stats() for representor stats
  - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen
  - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - nfc: nci: fix circular locking dependency in nci_close_device
  - ionic: fix persistent MAC address override on PF
  - pinctrl: mediatek: common: Fix probe failure for devices without EINT
  - Bluetooth: hci_ll: Fix firmware leak on error path
  - can: statistics: add missing atomic access in hot path
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
  - xfrm: call xdo_dev_state_delete during state update
  - spi: intel-pci: Add support for Nova Lake mobile SPI flash
  - usb: core: new quirk to handle devices with zero configurations
  - objtool: Handle Clang RSP musical chairs
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
  - dma-buf: Include ioctl.h in UAPI header
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg()
  - HID: asus: add xg mobile 2023 external hardware support
  - HID: mcp2221: cancel last I2C command on read error
  - net: usb: r8152: add TRENDnet TUC-ET2G
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2
  - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1
  - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  - nvme-pci: cap queue creation to used queues
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list
  - HID: asus: avoid memory leak in asus_report_fixup()
  - sh: platform_early: remove pdev->driver_override check
  - hwmon: (axi-fan-control) Use device firmware agnostic API
  - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled
  - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
  - lib/bootconfig: check xbc_init_node() return in override path
  - ksmbd: fix use-after-free in durable v2 replay of active file handles
  - ksmbd: fix use-after-free of share_conf in compound request
  - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
  - mtd: rawnand: brcmnand: skip DMA during panic write
  - mtd: rawnand: serialize lock/unlock against other NAND operations
  - i2c: cp2615: fix serial string NULL-deref at probe
  - i2c: cp2615: replace deprecated strncpy with strscpy
  - i2c: pxa: defer reset on Armada 3700 when recovery is used
  - i2c: fsi: Fix a potential leak in fsi_i2c_probe()
  - USB: serial: f81232: fix incomplete serial port generation
  - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
  - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
  - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
  - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
  - net: mvpp2: guard flow control update with global_tx_fc in buffer switching
  - netfilter: bpf: defer hook memory release until rcu readers are done
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
  - net: macb: fix uninitialized rx_fs_lock
  - wifi: mac80211: fix NULL deref in mesh_matches_local()
  - iavf: fix VLAN filter lost on add/delete race
  - igc: fix missing update of skb->tail in igc_xmit_frame()
  - net: usb: aqc111: Do not perform PM inside suspend callback
  - sched: idle: Consolidate the handling of two special cases
  - net: bcmgenet: increase WoL poll timeout
  - netfilter: xt_time: use unsigned int for monthday bit shift
  - netfilter: nft_ct: drop pending enqueued packets on removal
  - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
  - firmware: arm_scpi: Fix device_node reference leak in probe path
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
  - soc: fsl: qbman: fix race condition in qman_destroy_fq
  - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
  - btrfs: tree-checker: fix misleading root drop_level error message
  - btrfs: log new dentries when logging parent dir of a conflicting inode
  - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
  - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
  - drm/radeon: apply state adjust rules to some additional HAINAN vairants
  - drm/amdgpu/mmhub3.0: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.2: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.1: add bounds checking for cid
  - drm/amdgpu/mmhub2.3: add bounds checking for cid
  - drm/amdgpu/mmhub2.0: add bounds checking for cid
  - drm/amdgpu/gmc9.0: add bounds checking for cid
  - serial: uartlite: fix PM runtime usage count underflow on probe
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
  - serial: 8250_pci: add support for the AX99100
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
  - mtd: Avoid boot crash in RedBoot partition table parser
  - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
  - mtd: rawnand: pl353: make sure optimal timings are applied
  - pmdomain: bcm: bcm2835-power: Increase ASB control timeout
  - mmc: sdhci: fix timing selection for 1-bit bus width
  - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - iio: light: bh1780: fix PM runtime leak on error path
  - btrfs: fix transaction abort on file creation due to name hash collision
  - btrfs: fix transaction abort on set received ioctl due to item overflow
  - btrfs: fix transaction abort when snapshotting received subvolumes
  - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
  - kprobes: Remove unneeded goto
  - ksmbd: unset conn->binding on failed binding request
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
  - parisc: Flush correct cache in cacheflush() syscall
  - net: macb: fix use-after-free access to PTP clock
  - NFC: nxp-nci: allow GPIOs to sleep
  - LoongArch: Give more information if kmem access failed
  - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
  - s390/stackleak: Fix __stackleak_poison() inline assembly constraint
  - s390/xor: Fix xor_xc_2() inline assembly constraints
  - mptcp: pm: in-kernel: always set ID as avail when rm endp
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
  - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
  - drm/exynos: vidi: fix to avoid directly dereferencing user pointer
  - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
  - drm/amdgpu: Add basic validation for RAS header
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
  - drm/amd/display: Add pixel_clock to amd_pp_display_configuration
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages
  - rxrpc: Fix data-race warning and potential load/store tearing
  - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  - x86/sev: Harden #VC instruction emulation somewhat
  - dm-verity: disable recursive forward error correction
  - rxrpc: Fix recvmsg() unconditional requeue
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - arm64: mm: Don't remap pgtables for allocate vs populate
  - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - ksmbd: Compare MACs in constant time
  - smb: client: Compare MACs in constant time
  - xfs: ensure dquot item is deleted from AIL only after log shutdown
  - xfs: fix integer overflow in bmap intent sort comparator
  - crypto: atmel-sha204a - Fix OOM ->tfm_count leak
  - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output
  - drm/msm: Fix dma_free_attrs() buffer size
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids
  - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
  - can: gs_usb: gs_can_open(): always configure bitrates before starting device
  - kbuild: Leave objtool binary around with 'make clean'
  - mptcp: pm: avoid sending RM_ADDR over same subflow
  - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
  - x86/sev: Allow IBPB-on-Entry feature for SNP guests
  - platform/x86: hp-bioscfg: Support allocations of larger data
  - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
  - gve: defer interrupt enabling until NAPI registration
  - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD
  - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
  - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
  - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
  - iio: imu: inv_icm42600: fix odr switch to the same value
  - iio: gyro: mpu3050-i2c: fix pm_runtime error handling
  - iio: gyro: mpu3050-core: fix pm_runtime error handling
  - iio: buffer: Fix wait_queue not being removed
  - iio: chemical: bme680: Fix measurement wait duration calculation
  - iio: potentiometer: mcp4131: fix double application of wiper shift
  - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
  - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
  - iio: frequency: adf4377: Fix duplicated soft reset mask
  - iio: dac: ds4424: reject -128 RAW value
  - btrfs: abort transaction on failure to update root in the received subvol ioctl
  - smb: client: fix iface port assignment in parse_server_interfaces
  - smb: client: fix in-place encryption corruption in SMB2_write()
  - lib/bootconfig: check bounds before writing in __xbc_open_brace()
  - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
  - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
  - s390/dasd: Copy detected format information to secondary device
  - s390/dasd: Move quiesce state with pprc swap
  - xfs: fix undersized l_iclog_roundoff values
  - cifs: make default value of retrans as zero
  - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
  - drm/i915: Fix potential overflow of shmem scatterlist length
  - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
  - drm/amd: Set num IP blocks to 0 if discovery fails
  - drm/amdgpu: Fix use-after-free race in VM acquire
  - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
  - net: ncsi: fix skb leak in error paths
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info
  - smb: server: fix use-after-free in smb2_open()
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read
  - parisc: Check kernel mapping earlier at bootup
  - parisc: Fix initial page table creation for boot
  - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  - parisc: Increase initial mapping to 64 MB with KALLSYMS
  - batman-adv: Avoid double-rtnl_lock ELP metric worker
  - tracing: Fix syscall events activation by ensuring refcount hits zero
  - ice: fix retry for AQ command 0x06EE
  - net: mana: Ring doorbell at 4 CQ wraparounds
  - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
  - ixgbevf: fix link setup issue
  - ice: reintroduce retry mechanism for indirect AQ
  - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
  - device property: Allow secondary lookup in fwnode_get_next_child_node()
  - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
  - drm/bridge: samsung-dsim: Fix memory leak in error path
  - Revert "tcpm: allow looking for role_sw device in the main node"
  - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
  - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
  - libceph: admit message frames only in CEPH_CON_S_OPEN state
  - libceph: Use u32 for non-negative values in ceph_monmap_decode()
  - libceph: reject preamble if control segment is empty
  - tipc: fix divide-by-zero in tipc_sk_filter_connect()
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
  - mmc: core: Avoid bitfield RMW for claim/retune flags
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement
  - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
  - mm/tracing: rss_stat: ensure curr is false from kthread context
  - usb: image: mdc800: kill download URB on timeout
  - usb: mdc800: handle signal and read racing
  - usb: renesas_usbhs: fix use-after-free in ISR during device removal
  - usb: roles: get usb role switch from parent only for usb-b-connector
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails
  - usb: misc: uss720: properly clean up reference in uss720_probe()
  - usb: dwc3: pci: add support for the Intel Nova Lake -H
  - usb: yurex: fix race in probe
  - usb: xhci: Fix memory leak in xhci_disable_slot()
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
  - USB: add QUIRK_NO_BOS for video capture several devices
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
  - net: usb: lan78xx: skip LTM configuration for LAN7850
  - net: usb: lan78xx: fix TX byte statistics for small packets
  - net: usb: lan78xx: fix silent drop of packets with checksum errors
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
  - cgroup: fix race between task migration and iteration
  - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
  - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
  - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status
  - octeontx2-af: devlink health: use retained error fmsg API
  - octeontx2-af: devlink: fix NIX RAS reporter recovery condition
  - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
  - ASoC: detect empty DMI strings
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
  - i40e: fix src IP mask checks and memcpy argument names in cloud filter
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
  - amd-xgbe: fix link status handling in xgbe_rx_adaptation
  - mctp: route: hold key->lock in mctp_flow_prepare_output()
  - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
  - mctp: i2c: fix skb memory leak in receive path
  - serial: caif: hold tty->link reference in ldisc_open and ser_release
  - net: sfp: improve Huawei MA5671a fixup
  - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
  - net: sfp: improve Nokia GPON sfp fixup
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal
  - net/mlx5: IFC updates for disabled host PF
  - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
  - drm/msm/dsi: fix pclk rate calculation for bonded dsi
  - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations
  - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets
  - xprtrdma: Decrement re_receiving on the early exit paths
  - smb/server: Fix another refcount leak in smb2_open()
  - powerpc: 83xx: km83xx: Fix keymile vendor prefix
  - remoteproc: mediatek: Unprepare SCP clock during system suspend
  - remoteproc: sysmon: Correct subsys_name_len type in QMI request
  - powerpc/uaccess: Fix inline assembly for clang build on PPC32
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
  - scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
  - ASoC: cs42l43: Report insert for exotic peripherals
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
  - scsi: ses: Fix devices attaching to different hosts
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255
  - wifi: mac80211: set default WMM parameters on all links
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues
  - ACPI: PM: Save NVS memory on Lenovo G70-35
  - net: tcp: accept old ack during closing
  - tracing: Add NULL pointer check to trigger_data_free()
  - selftest/arm64: Fix sve2p1_sigill() to hwcap test
  - i40e: use xdp.frame_sz as XDP RxQ info frag_size
  - i40e: fix registering XDP RxQ info
  - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
  - net: stmmac: Fix error handling in VLAN add and delete paths
  - nfc: rawsock: cancel tx_work before socket teardown
  - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
  - nfc: nci: free skb on nci_transceive early error paths
  - net: nfc: nci: Fix zero-length proprietary notifications
  - drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  - amd-xgbe: fix sleep while atomic on suspend/resume
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info()
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op()
  - xen/acpi-processor: fix _CST detection using undersized evaluation buffer
  - net/rds: Fix circular locking dependency in rds_tcp_tune
  - indirect_call_wrapper: do not reevaluate function pointer
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
  - wifi: wlcore: Fix a locking bug
  - octeon_ep: avoid compiler and IQ/OQ reordering
  - octeon_ep: Relocate counter updates before NAPI
  - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value
  - kunit: tool: copy caller args in run_kernel to prevent mutation
  - rust: kunit: fix warning when !CONFIG_PRINTK
  - can: mcp251x: fix deadlock in error path of mcp251x_open
  - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
  - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
  - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating
  - hwmon: (it87) Check the it87_lock() return value
  - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
  - pinctrl: equilibrium: fix warning trace on load
  - pinctrl: equilibrium: rename irq_chip function callbacks
  - hwmon: (aht10) Fix initialization commands for AHT20
  - hwmon: (aht10) Add support for dht20
  - ARM: clean up the memset64() C wrapper
  - selftests: mptcp: join: check removing signal+subflow endp
  - selftests: mptcp: more stable simult_flows tests
  - smb: client: fix broken multichannel with krb5+signing
  - smb: client: fix cifs_pick_channel when channels are equally loaded
  - drbd: fix null-pointer dereference on local read error
  - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
  - net/sched: ets: fix divide by zero in the offload path
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
  - wifi: radiotap: reject radiotap with unknown bits
  - ALSA: usb-audio: Use correct version for UAC3 header validation
  - platform/x86: dell-wmi: Add audio/mic mute key codes
  - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
  - can: usb: f81604: handle bulk write errors properly
  - can: usb: f81604: handle short interrupt urb messages properly
  - can: usb: f81604: correctly anchor the urb in the read bulk callback
  - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - eventpoll: Fix integer overflow in ep_loop_check_proc()
  - drm/amdgpu: keep vga memory on MacBooks with switchable graphics
  - drm/amd: Drop special case for yellow carp without discovery
  - net: arcnet: com20020-pci: fix support for 2.5Mbit cards
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
  - usb: cdns3: remove redundant if branch
  - clk: tegra: tegra124-emc: fix device leak on set_rate()
  - arm64: dts: rockchip: Fix rk356x PCIe range mappings
  - mfd: omap-usb-host: Fix OF populate on driver rebind
  - mfd: omap-usb-host: Convert to platform remove callback returning void
  - mfd: qcom-pm8xxx: Fix OF populate on driver rebind
  - mfd: qcom-pm8xxx: Convert to platform remove callback returning void
  - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - mailbox: Allow controller specific mapping using fwnode
  - mailbox: Use guard/scoped_guard for con_mutex
  - mailbox: Use dev_err when there is error
  - mailbox: remove unused header files
  - mailbox: sort headers alphabetically
  - mailbox: don't protect of_parse_phandle_with_args with con_mutex
  - mailbox: Use of_property_match_string() instead of open-coding
  - ext4: get rid of ppath in ext4_ext_create_new_leaf()
  - ext4: get rid of ppath in ext4_find_extent()
  - bus: omap-ocp2scp: fix OF populate on driver rebind
  - bus: omap-ocp2scp: Convert to platform remove callback returning void
  - drm/tegra: dsi: fix device leak on probe
  - media: tegra-video: Fix memory leak in __tegra_channel_try_format()
  - media: tegra-video: Use accessors for pad config 'try_*' fields
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - PCI: Use resource_set_range() that correctly sets ->end
  - resource: Add resource set range and size helpers
  - PCI: Use resource names in PCI log messages
  - PCI: Update BAR # and window messages
  - memory: mtk-smi: fix device leak on larb probe
  - memory: mtk-smi: fix device leaks on common probe
  - memory: mtk-smi: Convert to platform remove callback returning void
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value
  - btrfs: fix compat mask in error messages in btrfs_check_features()
  - btrfs: fix warning in scrub_verify_one_metadata()
  - btrfs: fix objectid value in error message in check_extent_data_ref()
  - btrfs: fix incorrect key offset in error message in check_dev_extent_item()
  - btrfs: add support for inserting raid stripe extents
  - btrfs: read raid stripe tree from disk
  - btrfs: add raid stripe tree definitions
  - btrfs: move btrfs_extref_hash into inode-item.h
  - btrfs: remove btrfs_crc32c wrapper
  - btrfs: move btrfs_crc32c_final into free-space-cache.c
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put()
  - ALSA: pci: hda: use snd_kcontrol_chip()
  - ALSA: usb-audio: Use inclusive terms
  - ALSA: usb-audio: Cap the packet size pre-calculations
  - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
  - rseq: Clarify rseq registration rseq_size bound check comment
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices
  - scsi: pm8001: Fix use-after-free in pm8001_queue_command()
  - scsi: lpfc: Properly set WC for DPP mapping
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
  - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer"
  - arm64: Fix sampling the "stable" virtual counter in preemptible section
  - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  - NTB: ntb_transport: Fix too small buffer for debugfs_name
  - net: nfc: nci: Fix parameter validation for packet data
  - arm64: Force the use of CNTVCT_EL0 in __delay()
  - x86/kexec: Copy ACPI root pointer address from config table
  - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
  - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  - fbcon: Remove struct fbcon_display.inverse
  - fbdev: ffb: fix corrupted video output on Sun FFB1
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - atm: fore200e: fix use-after-free in tasklets during device removal
  - net: intel: fix PCI device ID conflict between i40e and ipw2200
  - io_uring/filetable: clamp alloc_hint to the configured alloc range
  - tracing: Fix to set write permission to per-cpu buffer_size_kb
  - octeontx2-af: CGX: fix bitmap leaks
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
  - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
  - LoongArch: Prefer top-down allocation after arch_mem_init()
  - MIPS: rb532: Fix MMIO UART resource registration
  - staging: rtl8723bs: fix null dereference in find_network
  - parisc: kernel: replace kfree() with put_device() in create_tree_node()
  - PCI: Fix pci_slot_trylock() error handling
  - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  - tipc: fix RCU dereference race in tipc_aead_users_dec()
  - mtd: rawnand: pl353: Fix software ECC support
  - usb: dwc2: fix resume failure if dr_mode is host
  - scsi: ufs: core: Flush exception handling work when RPM level is zero
  - perf/arm-cmn: Reject unsupported hardware configurations
  - remoteproc: imx_rproc: Fix invalid loaded resource table detection
  - btrfs: continue trimming remaining devices on failure
  - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
  - ocfs2: fix reflink preserve cleanup issue
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - mm/highmem: fix __kmap_to_page() build error
  - iio: gyro: itg3200: Fix unchecked return value in read_raw
  - dm mpath: make pg_init_delay_msecs settable
  - bus: fsl-mc: fix an error handling in fsl_mc_device_add()
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
  - nvmem: Drop OF node reference on nvmem_add_one_cell() failure
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
  - xfs: fix remote xattr valuelblk check
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - xfs: delete attr leaf freemap entries when empty
  - mfd: core: Add locking around 'mfd_of_node_list'
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - media: verisilicon: AV1: Fix tile info buffer size
  - xfs: mark data structures corrupt on EIO and ENODATA
  - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
  - drm: of: drm_of_panel_bridge_remove(): fix device_node leak
  - media: venus: vdec: restrict EOS addr quirk to IRIS2 only
  - media: venus: vdec: fix error state assignment for zero bytesused
  - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
  - dm-unstripe: fix mapping bug when there are multiple targets in a table
  - dm-integrity: fix recalculation in bitmap mode
  - s390/pci: Handle futile config accesses of disabled devices directly
  - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
  - media: i2c: ov01a10: Fix digital gain range
  - clk: clk-apple-nco: Add "apple,t8103-nco" compatible
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - soc: ti: k3-socinfo: Fix regmap leak on probe failure
  - dm-integrity: fix a typo in the code for write/discard race
  - media: i2c: ov5647: use our own mutex for the ctrl lock
  - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
  - media: i2c: ov5647: Sensor should report RAW color space
  - media: i2c: ov5647: Correct minimum VBLANK value
  - media: i2c: ov5647: Correct pixel array offset
  - media: i2c: ov5647: Initialize subdev before controls
  - media: ccs: Avoid possible division by zero
  - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
  - media: i2c: ov01a10: Fix test-pattern disabling
  - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
  - media: i2c: ov01a10: Fix analogue gain range
  - media: i2c: ov01a10: Fix reported pixel-rate value
  - media: i2c: ov01a10: Fix the horizontal flip control
  - media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
  - media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
  - media: cx25821: Add missing unmap in snd_cx25821_hw_params()
  - media: cx23885: Add missing unmap in snd_cx23885_hw_params()
  - media: cx88: Add missing unmap in snd_cx88_hw_params()
  - media: radio-keene: fix memory leak in error path
  - media: verisilicon: AV1: Set IDR flag for intra_only frame type
  - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  - HID: prodikeys: Check presence of pm->input_ep82
  - HID: magicmouse: Do not crash on missing msc->input
  - HID: hid-pl: handle probe errors
  - arm64: Disable branch profiling for all arm64 code
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
  - ARM: omap2: Fix reference count leaks in omap_control_init()
  - media: verisilicon: AV1: Fix tx mode bit setting
  - media: verisilicon: AV1: Fix enable cdef computation
  - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
  - media: mtk-mdp: Fix error handling in probe function
  - media: mediatek: encoder: Fix uninitialized scalar variable issue
  - dm-verity: correctly handle dm_bufio_client_create() failure
  - fpga: dfl: use subsys_initcall to allow built-in drivers to be added
  - ASoC: SOF: ipc4-control: Keep the payload size up to date
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update
  - clk: renesas: rzg2l: Select correct div round macro
  - clk: renesas: rzg2l: Fix intin variable size
  - rpmsg: core: fix race in driver_override_show() and use core helper
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write
  - net/mlx5: Fix missing devlink lock in SRIOV enable error path
  - net/mlx5: DR, Fix circular locking dependency in dump
  - RDMA/umem: Fix double dma_buf_unpin in failure path
  - RDMA/efa: Fix typo in efa_alloc_mr()
  - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration
  - tipc: fix duplicate publication key in tipc_service_insert_publ()
  - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one
  - net: ethernet: xscale: Check for PTP support properly
  - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
  - net: usb: lan78xx: scan all MDIO addresses on LAN7801
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - ipmi: ipmb: initialise event handler read bytes
  - xfrm: skip templates check for packet offload tunnel mode
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  - rtc: zynqmp: correct frequency value
  - drm/amd/display: Remove conditional for shaper 3DLUT power-on
  - btrfs: replace BUG() with error handling in __btrfs_balance()
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing
  - drm/radeon: Add HAINAN clock adjustment
  - drm/amdgpu: Add HAINAN clock adjustment
  - ALSA: usb-audio: Update the number of packets properly at receiving
  - drm/amdgpu: Adjust usleep_range in fence wait
  - drm/amd/display: Avoid updating surface with the same surface under MPO
  - ARM: 9467/1: mm: Don't use %pK through printk
  - include: uapi: netfilter_bridge.h: Cover for musl libc
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure
  - ceph: supply snapshot context in ceph_uninline_data()
  - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
  - fs/ntfs3: drop preallocated clusters for sparse and compressed files
  - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
  - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
  - fs: ntfs3: check return value of indx_find to avoid infinite loop
  - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
  - iio: magnetometer: Remove IRQF_ONESHOT
  - iio: Use IRQF_NO_THREAD
  - Revert "mfd: da9052-spi: Change read-mask to write-mask"
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  - phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  - watchdog: imx7ulp_wdt: handle the nowayout option
  - binder: don't use %pK through printk
  - fix it87_wdt early reboot by reporting running timer
  - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
  - staging: rtl8723bs: fix memory leak on failure path
  - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
  - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
  - dmaengine: sun6i: Choose appropriate burst length under maxburst
  - fpga: of-fpga-region: Fail if any bridge is missing
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
  - serial: 8250_dw: handle clock enable errors in runtime_resume
  - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
  - m68k: nommu: fix memmove() with differently aligned src and dest for 68000
  - clk: microchip: core: correct return value on *_get_parent()
  - mailbox: sprd: clear delivery flag before handling TX done
  - remoteproc: mediatek: Break lock dependency to `prepare_lock`
  - mailbox: sprd: mask interrupts that are not handled
  - mailbox: imx: Skip the suspend flag for i.MX7ULP
  - mailbox: pcc: Remove spurious IRQF_ONESHOT usage
  - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized
  - tracing: Fix false sharing in hwlat get_sample()
  - vhost: fix caching attributes of MMIO regions by setting them explicitly
  - scsi: buslogic: Reduce stack usage
  - ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  - RDMA/rtrs-clt: For conn rejection use actual err number
  - myri10ge: avoid uninitialized variable use
  - PCI: Mark Nvidia GB10 to avoid bus reset
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
  - PCI: Enable ACS after configuring IOMMU for OF platforms
  - PCI: Fix pci_slot_lock () device locking
  - net/rds: Clear reconnect pending bit
  - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
  - net: usb: sr9700: remove code to drive nonexistent multicast filter
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
  - wifi: rtw89: pci: restore LDO setting after device resume
  - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  - ipv4: fib: Annotate access to struct fib_alias.fa_state.
  - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
  - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
  - gro: change the BUG_ON() in gro_pull_from_frag0()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - wifi: iwlwifi: mvm: check the validity of noa_len
  - net: usb: r8152: fix transmit queue timeout
  - openrisc: define arch-specific version of nop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler
  - ext4: mark group extend fast-commit ineligible
  - ext4: mark group add fast-commit ineligible
  - ipv6: exthdrs: annotate data-race over multiple sysctl
  - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
  - wifi: ath12k: fix preferred hardware mode calculation
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode
  - iommu/amd: move wait_on_sem() out of spinlock
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
  - dm: remove fake timeout to avoid leak request
  - dm: replace -EEXIST with -EBUSY
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero
  - jfs: nlink overflow in jfs_rename
  - jfs: Add missing set_freezable() for freezable kthread
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
  - modpost: Amend ppc64 save/restfpr symnames for -Os build
  - ASoC: es8328: Add error unwind in resume
  - hwmon: (f71882fg) Add F81968 support
  - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe()
  - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
  - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
  - gpio: aspeed-sgpio: Change the macro to support deferred probe
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  - HID: multitouch: add eGalaxTouch EXC3188 support
  - media: rkisp1: Fix filter mode register configuration
  - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
  - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
  - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
  - virt: vbox: uapi: Mark inner unions in packed structs as packed
  - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
  - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
  - media: v4l2-async: Fix error handling on steps after finding a match
  - media: cx25821: Fix a resource leak in cx25821_dev_setup()
  - media: solo6x10: Check for out of bounds chip_id
  - media: adv7180: fix frame interval in progressive mode
  - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
  - spi: spi-mem: Limit octal DTR constraints to octal DTR situations
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
  - drm/amdgpu: avoid a warning in timedout job handler
  - drm/amdgpu: add support for HDP IP version 6.1.1
  - media: mediatek: vcodec: Don't try to decode 422/444 VP9
  - media: omap3isp: set initial format
  - media: omap3isp: isppreview: always clamp in preview_try_format()
  - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  - drm/v3d: Set DMA segment size to avoid debug warnings
  - spi: stm32: fix Overrun issue at < 8bpw
  - media: dvb-core: dmxdevfilter must always flush bufs
  - spi-geni-qcom: use xfer->bits_per_word for can_dma()
  - spi-geni-qcom: initialize mode related registers to 0
  - drm/display/dp_mst: Add protection against 0 vcpi
  - parisc: Prevent interrupts during reboot
  - arm64: tegra: smaug: Add usb-role-switch support
  - char: tpm: cr50: Remove IRQF_ONESHOT
  - mailbox: bcm-ferxrm-mailbox: Use default primary handler
  - PCI/MSI: Unmap MSI-X region on error
  - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
  - clocksource/drivers/sh_tmu: Always leave device running after probe
  - bpf: verifier improvement in 32bit shift sign extension pattern
  - sparc: don't reference obsolete termio struct for TC* constants
  - sparc: Synchronize user stack on fork and clone
  - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
  - xenbus: Use .freeze/.thaw to handle xenbus devices
  - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
  - s390/perf: Disable register readout on sampling events
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms
  - md-cluster: fix NULL pointer dereference in process_metadata_update
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  - EFI/CPER: don't go past the ARM processor CPER record buffer
  - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
  - rnbd-srv: Zero the rsp buffer before using it
  - perf/arm-cmn: Support CMN-600AE
  - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
  - tools/power cpupower: Reset errno before strtoull()
  - smb: client: add proper locking around ses->iface_last_update
  - btrfs: handle user interrupt properly in btrfs_trim_fs()
  - minix: Add required sanity checking to minix_check_superblock()
  - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
  - hfsplus: pretend special inodes as regular files
  - audit: add missing syscalls to read class
  - fs/buffer: add alert in try_to_free_buffers() for folios without buffers
  - hfsplus: fix volume corruption issue for generic/498
  - libperf build: Always place libperf includes first
  - libperf: Don't remove -g when EXTRA_CFLAGS are used
  - libsubcmd: Fix null intersection case in exclude_cmds()
  - perf callchain: Fix srcline printing with inlines
  - perf unwind-libdw: Fix invalid reference counts
  - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - ata: libata-scsi: refactor ata_scsi_translate()
  - ata: pata_ftide010: Fix some DMA timings
  - ext4: use optimized mballoc scanning regardless of inode format
  - ext4: don't cache extent during splitting extent
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats
  - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
  - x86/hyperv: Fix error pointer dereference
  - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
  - efi: Fix reservation of unaccepted memory table
  - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
  - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
  - spi: wpcm-fiu: Simplify with dev_err_probe()
  - spi: wpcm-fiu: Fix uninitialized res
  - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
  - drm/amdkfd: fix debug watchpoints for logical devices
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init
  - drm/i915/acpi: free _DSM package when no connectors
  - drm/amdgpu: Fix memory leak in amdgpu_ras_init()
  - apparmor: fix invalid deref of rawdata when export_binary is unset
  - apparmor: provide separate audit messages for file and policy checks
  - apparmor: use passed in gfp flags in aa_alloc_null()
  - apparmor: fix rlimit for posix cpu timers
  - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
  - apparmor: fix NULL sock in aa_sock_file_perm
  - net/mlx5: Fix multiport device check over light SFs
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - octeontx2-af: Fix default entries mcam entry action
  - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more)
  - cache: enforce cache groups
  - ping: annotate data-races in ping_lookup()
  - bpftool: Fix truncated netlink dumps
  - ipv6: fix a race in ip6_sock_set_v6only()
  - net: remove WARN_ON_ONCE when accessing forward path array
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
  - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled
  - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts
  - net/rds: rds_sendmsg should not discard payload_len
  - net: usb: catc: enable basic endpoint checking
  - net: sparx5/lan969x: fix PTP clock max_adj value
  - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
  - net: mscc: ocelot: split xmit into FDMA and register injection paths
  - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
  - net: sparx5/lan969x: fix DWRR cost max to match hardware register width
  - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
  - selftests/memfd: delete unused declarations
  - kbuild: Add objtool to top-level clean target
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - fs/ntfs3: prevent infinite loops caused by the next valid being the same
  - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
  - dmaengine: fsl-edma-main: Convert to platform remove callback returning void
  - backlight: qcom-wled: Change PM8950 WLED configurations
  - backlight: qcom-wled: Support ovp values for PMI8994
  - leds: qcom-lpg: Check the return value of regmap_bulk_write()
  - pinctrl: single: fix refcount leak in pcs_add_gpio_func()
  - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
  - iio: sca3000: Fix a resource leak in sca3000_probe()
  - ovl: Fix uninit-value in ovl_fill_real
  - pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
  - usb: bdc: fix sleep during atomic
  - drivers: iio: mpu3050: use dev_err_probe for regulator request
  - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support
  - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order
  - mfd: simple-mfd-i2c: Add SpacemiT P1 support
  - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
  - mfd: simple-mfd-i2c: Add MAX77705 support
  - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
  - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
  - coresight: etm3x: Fix cpulocked warning on cpuhp
  - watchdog: starfive-wdt: Fix PM reference leak in probe error path
  - iio: pressure: mprls0025pa: fix scan_type struct
  - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  - serial: SH_SCI: improve "DMA support" prompt
  - serial: imx: change SERIAL_IMX_CONSOLE to bool
  - staging: greybus: lights: avoid NULL deref
  - dma: dma-axi-dmac: fix SW cyclic transfers
  - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
  - clk: mediatek: Fix error handling in runtime PM setup
  - clk: qcom: gfx3d: add parent to parent request map
  - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
  - clk: Move clk_{save,restore}_context() to COMMON_CLK section
  - clk: qcom: gcc-ipq5018: flag sleep clock as critical
  - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
  - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
  - clk: qcom: rcg2: compute 2d using duty fraction directly
  - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings()
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
  - tracing: Properly process error handling in event_hist_trigger_parse()
  - fs/nfs: Fix readdir slow-start regression
  - nvdimm: virtio_pmem: serialize flush requests
  - scsi: csiostor: Fix dereference of null pointer rn
  - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
  - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
  - mtd: spinand: Fix kernel doc
  - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
  - cxl: Fix premature commit_end increment on decoder commit failure
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
  - svcrdma: Reduce the number of rdma_rw contexts per-QP
  - svcrdma: Increase the per-transport rw_ctx count
  - svcrdma: Clean up comment in svc_rdma_accept()
  - svcrdma: Remove queue-shortening warnings
  - RDMA/core: Fix a couple of obvious typos in comments
  - RDMA/rxe: Fix race condition in QP timer handlers
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
  - crypto: ccp - Add an S4 restore flow
  - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus()
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - RDMA/rtrs-srv: fix SG mapping
  - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
  - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
  - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
  - power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
  - power: supply: rt9455: Fix use-after-free in power_supply_changed()
  - power: supply: goldfish: Fix use-after-free in power_supply_changed()
  - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
  - power: supply: bq25980: Fix use-after-free in power_supply_changed()
  - power: supply: bq256xx: Fix use-after-free in power_supply_changed()
  - power: supply: act8945a: Fix use-after-free in power_supply_changed()
  - power: supply: ab8500: Fix use-after-free in power_supply_changed()
  - IB/cache: update gid cache on client reregister event
  - RDMA/rtrs: server: remove dead code
  - octeontx2-pf: Unregister devlink on probe failure
  - ionic: Rate limit unknown xcvr type messages
  - serial: caif: fix use-after-free in caif_serial ldisc_close()
  - net: Add skb_dstref_steal and skb_dstref_restore
  - net: sunhme: Fix sbus regression
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
  - smb: client: correct value for smbd_max_fragmented_recv_size
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
  - netfilter: nft_counter: fix reset of counters on 32bit archs
  - netfilter: nft_set_hash: fix get operation on big endian
  - nfc: hci: shdlc: Stop timers and work before freeing context
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - bonding: only set speed/duplex to unknown, if getting speed failed
  - octeontx2-af: Fix PF driver crash with kexec kernel booting
  - mptcp: fix receive space timestamp initialization
  - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
  - ipc: don't audit capability check in ipc_permissions()
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits
  - PCI: Add defines for bridge window indexing
  - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  - PCI: Log bridge info when first enumerating bridge
  - PCI: Log bridge windows conditionally
  - PCI: Supply bridge device, not secondary bus, to read window details
  - PCI: Move pci_read_bridge_windows() below individual window accessors
  - PCI: Initialize RCB from pci_configure_device()
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
  - tcp: tcp_tx_timestamp() must look at the rtx queue
  - nfsd: never defer requests during idmap lookup
  - iommu/vt-d: Flush cache for PASID table before using it
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
  - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()
  - module: add helper function for reading module_buildid()
  - netfilter: nft_compat: add more restrictions on netlink attributes
  - netfilter: nf_conncount: increase the connection clean up limit to 64
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
  - netfilter: nf_tables: reset table validation state on abort
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave
  - mctp i2c: initialise event handler read bytes
  - net: mctp-i2c: fix duplicate reception of old data
  - PCI/portdrv: Fix potential resource leak
  - PCI: Do not attempt to set ExtTag for VFs
  - Documentation: tracing: Add PCI tracepoint documentation
  - Documentation: trace: Refactor toctree
  - docs: fix WARNING document not included in any toctree
  - Documentation: tracing: Add ring-buffer mapping
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
  - PCI/PM: Avoid redundant delays on D3hot->D3cold
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
  - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
  - spi: tools: Add include folder to .gitignore
  - platform/chrome: cros_ec_lightbar: Fix response size initialization
  - media: uvcvideo: Fix allocation for small frame sizes
  - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev
  - drm/msm/a2xx: fix pixel shader start on A225
  - media: ccs: Accommodate C-PHY into the calculation
  - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x
  - HID: playstation: Add missing check for input_ff_create_memless
  - regulator: core: move supply check earlier in set_machine_constraints()
  - drm/msm/disp/dpu: add merge3d support for sc7280
  - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
  - smack: /smack/doi: accept previously used values
  - smack: /smack/doi must be > 0
  - workqueue: Process rescuer work items one-by-one using a cursor
  - workqueue: Only assign rescuer work when really needed
  - workqueue: Factor out assign_rescuer_work()
  - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
  - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
  - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
  - arm64: dts: amlogic: g12: assign the MMC A signal clock
  - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
  - arm64: dts: amlogic: gx: assign the MMC signal clocks
  - arm64: dts: amlogic: axg: assign the MMC signal clocks
  - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
  - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
  - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
  - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
  - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
  - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
  - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
  - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
  - arm64: dts: qcom: sdm630: fix gpu_speed_bin size
  - clk: qcom: Return correct error code in qcom_cc_probe_by_index()
  - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
  - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
  - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
  - soc: qcom: smem: handle ENOMEM error during probe
  - mfd: wm8350-core: Use IRQF_ONESHOT
  - EDAC/altera: Remove IRQF_ONESHOT
  - scsi: efct: Use IRQF_ONESHOT and default primary handler
  - hrtimer: Fix trace oddity
  - crypto: octeontx - fix dma_free_coherent() size
  - crypto: cavium - fix dma_free_coherent() size
  - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
  - libbpf: Fix OOB read in btf_dump_get_bitfield_value
  - selftests/bpf: veristat: fix printing order in output_stats()
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
  - perf: arm_spe: Properly set hw.state on failures
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start()
  - Partial revert "x86/xen: fix balloon target initialization for PVH dom0"
  - x86/xen: make some functions static
  - ublk: Validate SQE128 flag before accessing the cmd
  - iomap: fix submission side handling of completion side errors
  - md/raid10: fix any_working flag handling in raid10_sync_request
  - cpuidle: governors: menu: Always check timers with tick stopped
  - cpuidle: menu: Cleanup after loadavg removal
  - io_uring/sync: validate passed in offset
  - xen/virtio: Don't use grant-dma-ops when running as Dom0
  - btrfs: fix block_group_tree dirty_list corruption
  - btrfs: qgroup: return correct error when deleting qgroup relation item
  - tpm: st33zp24: Fix missing cleanup on get_burstcount() error
  - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
  - i3c: dw: Initialize spinlock to avoid upsetting lockdep
  - gfs2: Retries missing in gfs2_{rename,exchange}
  - i3c: master: Update hot-join flag only on success
  - fs: add <linux/init_task.h> for 'init_fs'
  - audit: move the compat_xxx_class[] extern declarations to audit_arch.h
  - rcu: Fix rcu_read_unlock() deadloop due to softirq
  - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler()
  - rcu: Refactor expedited handling check in rcu_read_unlock_special()
  - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu()
  - rcu: s/boost_kthread_mutex/kthread_mutex
  - hfsplus: return error when node already exists in hfs_bnode_create
  - auxdisplay: arm-charlcd: fix release_mem_region() size
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - bpf: Avoid soft lockup in bpf_uprobe_unregister
  - usb: cdns3: fix role switching during resume
  - urma: add v2p function in kernel for dfx such as urma_admin
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
  - urma: increase topo max node limit to 1024
  - ub: ub_fwctl: the function of querying the historical status of ports has been unrestricted.
  - riscv: kvm: fix vector context allocation leak
  - ub:hisi-ubus: modify return value of hi_feature_get() in abnormal branch
  - urma: fix jetty_grp count boundary check and pass opt_mask to check_jetty_check_dev_cap
  - APEI/GHES: ARM processor Error: don't go past allocated memory
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
  - iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - ub: udma: change default value of set dev name
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - ntfs3: fix circular locking dependency in run_unpack_ex
  - openvswitch: vport: fix self-deadlock on release of tunnel ports
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - net/mlx5: Fix deadlock between devlink lock and esw->wq
  - iommu/ummu: Fix potential soft lockup in ummu_core_alloc_separate_tdev
  - iommu/ummu: Fix incorrect xarray index in map_pages error path
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
  - sched: Fix kabi breakage in struct sched_entity
  - sched/eevdf: Propagate min_slice up the cgroup hierarchy
  - sched/fair: Re-organize dequeue_task_fair()
  - sched/eevdf: Use sched_attr::sched_runtime to set request/slice suggestion
  - sched/cputime: Fix time overflow in cputime_adjust()
  - urma: fix main_ue_eid flush ioctl argument
  - net: usb: pegasus: enable basic endpoint checking
  - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
  - libceph: prevent potential out-of-bounds reads in process_message_header()
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations
  - urma: refactor connect_bonding from ubcore to ubagg
  - mm/vmalloc: take vmap_purge_lock in shrinker
  - rnpgbe: update rnpgbe driver to version 1.0.10
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - openeuler_defconfig: disable CONFIG_USERSWAP by default
  - mm/userswap: remove boot param
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu() in RX path
  - net: hibmcge: disable Relaxed Ordering to fix RX packet corruption
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - soc cache: Fix unsafe shift left
  - net: caif: clear client service pointer on teardown
  - net: ioam6: fix OOB and missing lock
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
  - urma: change wk1 to wk2 to send data and add responsibility
  - x86/kexec: add a sanity check on previous kernel's ima kexec buffer
  - ima: verify the previous kernel's IMA buffer lies in addressable RAM
  - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
  - usb: gadget: f_ncm: Fix net_device lifecycle with device_move
  - cleanup: Provide retain_and_null_ptr()
  - usb: gadget: ncm: Fix indentations in documentation of NCM section
  - usb: gadget: ncm: Fix endianness of wMaxSegmentSize variable in ecm_desc
  - usb: gadget: ncm: Add support to update wMaxSegmentSize via configfs
  - ceph: only d_add() negative dentries when they are unhashed
  - xen-netback: reject zero-queue configuration from guest
  - net: qrtr: ns: Fix use-after-free in driver remove()
  - md/raid5: fix soft lockup in retry_aligned_read()
  - urma: fix main_ue_eid query table configuration path
  - urma: topology supports parallel planes
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - ipmi:ssif: NULL thread on error
  - ipmi:ssif: Clean up kthread on errors
  - eventfs: Hold eventfs_mutex and SRCU when remount walks events
  - APEI/GHES: ensure that won't go past CPER allocated record
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
  - ﻿ub: ubase: Correct the statistics on ELR reset failures
  - ﻿ub: ubase&unic: Improve driver code readability
  - ﻿ub: ubase: Discard ctrlq request with non-zero ret value
  - ﻿ub: ubase: Add abort handling for non-timeout ELR failures
  - ﻿net: unic: Log rectification for the wildfire project
  - ﻿ub: ubase/unic/cdma: Clear adev_status when probe succeeds
  - ﻿net: unic: Filter out IPv6 link-local address in bond IP notification
  - kvm: arm64: Fix NULL pointer dereference in kvm_destroy_cvm() with timer early inject
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
  - sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL next
  - sched_ext: fix flag check for deferred callbacks
  - sched_ext: defer queue_balance_callback() until after ops.dispatch
  - thermal: core: Fix thermal zone governor cleanup issues
  - sched_ext: Keep bypass on between enable failure and scx_disable_workfn()
  - urma: fix device change namespace calltrace
  - net: unic: Fix the issue of system suspend when the fe
  - ub: ubase: Resolved the issue of printing logs in spin
  - erofs: fix inline data read failure for ztailpacking pclusters
  - ub:ubus: optimize error print for ubus and hisi_ubus
  - urma: fix the scenario-specific message processing interface
  - ub:ubfi: add numa node get from firmware mode
  - bpf: Fix variable length stack write over spilled pointers
  - bpf: Do not allow deleting local storage in NMI
  - bpf: Convert bpf_selem_unlink to failable
  - bpf: Convert bpf_selem_link_map to failable
  - bpf: Convert bpf_selem_unlink_map to failable
  - bpf: Select bpf_local_storage_map_bucket based on bpf_local_storage
  - ub: udma: optimize log format.
  - mfs: update mfs doc for adding sysfs part
  - vfio:ubus: add vfio ub cfg0 and cfg1 basic attr perm
  - mount: hold namespace_sem across copy in create_new_namespace()
  - mount: add OPEN_TREE_NAMESPACE
  - gfs2: Fix slab-use-after-free in qd_put
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - update rnpgbevf driver to version 1.0.1.
  - ub:ubus: Optimize error log and add mutex lock for ub memory ras
  - ub:ubus: add mutex lock for port local ras
  - gfs2: fix memory leaks in gfs2_fill_super error path
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
  - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
  - erofs: fix the out-of-bounds nameoff handling for trailing dirents
  - mm: fix some minor per-VMA lock issues in userfaultfd
  - userfaultfd: use per-vma locks in userfaultfd operations
  - mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK
  - userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx
  - userfaultfd: fix operator precedence bug in UFFDIO_COPY mode check
  - ub: cdma: inline cdma_id_find_ctp into cdma_delete_ctp
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - mfs: handle close event in user-space side
  - mfs: post close event to user-space side
  - mfs: add file operation event filtering
  - sched: Fix bpf_sched_set_task_prefer_nid() build error
  - bnxt_en: Update VNIC resource calculation for VFs
  - bnxt_en: Do not call sleeping hwmon_notify_event() from NAPI
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN
  - Revert "bnxt_en: Support QOS and TPID settings for the SRIOV VLAN"
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN
  - bnxt_en: Event handler for Thermal event
  - bnxt_en: Use non-standard attribute to expose shutdown temperature
  - bnxt_en: Expose threshold temperatures through hwmon
  - bnxt_en: Modify the driver to use hwmon_device_register_with_info
  - bnxt_en: Move hwmon functions into a dedicated file
  - bnxt_en: Enhance hwmon temperature reporting
  - eth: bnxt: fix backward compatibility with older devices
  - bnxt_en: Fix 2 stray ethtool -S counters
  - urma: move capability of querying physical devices from ubcore to ubagg
  - mfs: add sysfs interface to configure event
  - netfilter: ctnetlink: ensure safe access to master conntrack
  - net: consume xmit errors of GSO frames
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
  - drivers/ub/sentry: use fixed short interval for ACK wait loop polling
  - ub: ubase: Ctrlq code optimization
  - net: unic: Added logging related to the Jetty context
  - ub: ubase: Adjust the macro definition for querying chip
  - ub:ubus: add error return when send config message
  - sched/idle: Fall back to idle after failed soft quota repick
  - sched/idle: Update SCX idle mask only when picking idle
  - urma: Introduce EID patricia trie for primary EID lookup
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
  - KVM: arm64: reuse vgic_write_guest_lock to suppress spurious WARN_ON when no vCPU is running
  - KVM: arm64: add CVM VM check when initializing union to avoid corrupting KABI isolation
  - drm: Account property blob allocations to memcg
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - iommu/ummu: Adapt disable DVM
  - tracing: Avoid NULL return from hist_field_name() on truncation
  - tracing: Fix fully-qualified variable reference printing in histograms
  - tracing: Rebuild full_name on each hist_field_name() call
  - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
  - ub/ubmem-vmmu: optimize prints
  - ub/ubmempfd: update note and optimize format
  - ub/ubdevshm: Fix spelling errors and optimize prints
  - arm64/ACPI: fix build error when CONFIG_ACPI_APEI_GHES is disabled
  - RDMA/hns: Fix hung task when drain qp failed.
  - RDMA/hns: Support drain SQ and RQ
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning
  - ub:ubfi: fix the resource maintenance issue in the ubfi ummu node parsing
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - libceph: define and enforce CEPH_MAX_KEY_LEN
  - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop
  - update rnpgbevf driver to version 1.0.1.
  - sched: Remove redundant rcu_read_lock() in build_soft_domain()
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn()
  - urma: fix RNR ERR under CTP mode in IPoURMA
  - net: yt6801: fix link info for yt6801
  - sched/idle: Fix soft quota fair repick state handling
  - urma: zero-initialize cg_obj to prevent uninitialized memory access
  - ub:ubus: bugfix for QEMU'addr 8byte check
  - tracing/probe: reject non-closed empty immediate strings
  - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
  - tracing: branch: Fix inverted check on stat tracer registration
  - x86/microcode: Add Zhaoxin cpu microcode update driver
  - ub:ubus: bugfix for UE probe without MUE'lock
  - ub:ubus: Fixing the bug of concurrent hotplug and device reset
  - ub: cdma: move cleanup helper to event and remove unused include
  - RDMA/hns: Notify ULP of remaining soft-WCs during reset
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - pstore/ram: fix resource leak when ioremap() fails
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
  - tools/dma: Add dma_map_sg support
  - dma-mapping: benchmark: add support for dma_map_sg
  - dma-mapping: benchmark: modify the framework to adapt to more map modes
  - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs
  - mm: introduce CMA-based folio allocation
  - ub: cdma: fix multiple code quality and potential bug issues
  - driver core: enforce device_lock for driver_match_device()
  - urma: fix resource leaks in uburma and ubcore error paths
  - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode.
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
  - config: Enable NETKIT
  - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55
  - add __GENKSYMS__ in uapi bpf.h and if_link.h
  - ACPI: processor: idle: Reset cpuidle on C-state list changes
  - cpuidle: Extract and export no-lock variants of cpuidle_unregister_device()
  - cpuidle: Simplify cpuidle_register_device() with guard()
  - ACPI: processor: idle: Fix NULL pointer dereference in hotplug path
  - ACPI: processor: idle: Reset power_setup_done flag on initialization failure
  - ACPI: processor: idle: Remove redundant static variable and rename cstate check function
  - ACPI: processor: idle: Move max_cstate update out of the loop
  - ACPI: processor: idle: Remove redundant cstate check in acpi_processor_power_init
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe()
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void
  - ACPI: processor: idle: Add debug log for states with invalid entry methods
  - ACPI: processor: idle: Replace strlcat() with better alternative
  - ACPI: processor: idle: Add missing bounds check in flatten_lpi_states()
  - ACPI: processor: Do not expose global variable acpi_idle_driver
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start()
  - ACPI: processor: idle: Redefine two functions as void
  - ACPI: processor: idle: Rearrange declarations in header file
  - ACPI: processor: Remove unused empty stubs of some functions
  - ACPI: processor: idle: Optimize ACPI idle driver registration
  - ACPI: processor: idle: Drop redundant C-state count checks
  - ACPI: processor: idle: Relocate state flags initialization
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt
  - sched/fair: fix !CONFIG_SMP build errors
  - net/oenetcls: validate module params and reject zero table sizes
  - LoongArch: KVM: Move unconditional delay into timer clear scenery
  - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software
  - LoongArch: KVM: Move AVEC interrupt injection into switch loop
  - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
  - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
  - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
  - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
  - LoongArch: KVM: Compile switch.S directly into the kernel
  - LoongArch: KVM: Add DMSINTC inject msi to vCPU
  - LoongArch: KVM: Add DMSINTC device support
  - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function
  - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch
  - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch
  - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests()
  - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel()
  - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust
  - LoongArch: KVM: Fix typo issue in kvm_vm_init_features()
  - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side
  - LoongArch: KVM: Add paravirt preempt feature in hypervisor side
  - LoongArch: KVM: Set default return value in KVM IO bus ops
  - LoongArch: KVM: Add FPU/LBT delay load support
  - LoongArch: KVM: Move LBT capability check in exception handler
  - LoongArch: KVM: Move LASX capability check in exception handler
  - LoongArch: KVM: Move LSX capability check in exception handler
  - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch
  - LoongArch: KVM: Check VM msgint feature during interrupt handling
  - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag()
  - LoongArch: KVM: Move feature detection in kvm_vm_init_features()
  - LoongArch: KVM: Add more CPUCFG mask bits
  - LoongArch: Complete CPUCFG registers definition
  - crypto: virtio - Replace package id with numa node id
  - ACPICA: iASL: Add definitions for the IOVT table
  - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
  - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
  - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
  - LoongArch: Add and use some macros for AVEC
  - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu
  - LoongArch: KVM: Add AVEC basic support
  - LoongArch: KVM: Get VM PMU capability from HW GCFG register
  - LoongArch: KVM: Register perf callbacks for guest
  - LoongArch: KVM: Implement arch-specific functions for guest perf
  - LoongArch: KVM: Remove PGD saving during VM context switch
  - LoongArch: KVM: Rework pch_pic_update_batch_irqs()
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_write()
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_read()
  - LoongArch: KVM: Add IRR and ISR register read emulation
  - LoongArch: KVM: Set version information at initial stage
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access()
  - LoongArch: KVM: Add address alignment check in pch_pic register access
  - LoongArch: KVM: Add stat information with kernel irqchip
  - LoongArch: KVM: sync pch_pic to upstream
  - LoongArch: KVM: Access mailbox directly in mail_send()
  - LoongArch: KVM: Add implementation with IOCSR_IPI_SET
  - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data()
  - LoongArch: KVM: sync kvm_ipi to upstream
  - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions
  - LoongArch: KVM: Use 64-bit register definition for EIOINTC
  - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access()
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access()
  - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq()
  - LoongArch: KVM: Use generic function loongarch_eiointc_write()
  - LoongArch: KVM: Use generic function loongarch_eiointc_read()
  - LoongArch: KVM: Use standard bitops API with eiointc
  - LoongArch: KVM: Remove never called default case statement
  - LoongArch: KVM: Remove unused parameter len
  - LoongArch: KVM: Remove unnecessary local variable
  - LoongArch: KVM: Disable updating of "num_cpu" and "feature"
  - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space
  - LoongArch: KVM: Check interrupt route from physical CPU
  - LoongArch: KVM: Fix interrupt route update with EIOINTC
  - LoongArch: KVM: Add address alignment check for IOCSR emulation
  - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu
  - sched/fair: Do not send IPI if WFI timeout is 0
  - ub: udma: alloc jfc_id avoid the ccu/starts type.
  - ub: udma: optimize the remove process.
  - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index
  - LoongArch: KVM: sync eiointc to upstream
  - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use
  - LoongArch: KVM: Fix VM migration failure with PTW enabled
  - LoongArch: KVM: Do not flush tlb if HW PTW supported
  - LoongArch: KVM: Skip PMU checking on vCPU context switch
  - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation
  - LoongArch: KVM: Add sign extension with kernel MMIO read emulation
  - irqchip/loongson-eiointc: Add multiple interrupt pin routing support
  - irqchip/loongson-eiointc: Add virt extension support
  - irqchip/loongson-eiointc: Route interrupt parsed from bios table
  - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU
  - LoongArch: config: enable paravirt feature
  - x86/sev: Fix potential sign extension in amd_enc_status_change_finish()
  - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - bpf: Fix tcx/netkit detach permissions when prog fd isn't given
  - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach
  - rtnetlink: add needed_{head,tail}room attributes
  - bpftool: Fix cgroup command to only show cgroup bpf programs
  - netkit: Allow for configuring needed_{head,tail}room
  - selftests/bpf: Extend netkit tests to validate skb meta data
  - tools: Sync if_link.h uapi tooling header
  - netkit: Simplify netkit mode over to use NLA_POLICY_MAX
  - netkit: Add option for scrubbing skb meta data
  - netkit: Disable netpoll support
  - bpftool: Query only cgroup-related attach types
  - selftests/bpf: Add netkit test for pkt_type
  - selftests/bpf: Add netkit tests for mac address
  - netkit: Fix pkt_type override upon netkit pass verdict
  - netkit: Fix setting mac address in l2 mode
  - bpf, docs: Fix bpf_redirect_peer header doc
  - bpf: Add missing BPF_LINK_TYPE invocations
  - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link
  - selftests/bpf: Add netkit to tc_redirect selftest
  - bpf, netkit: Add indirect call wrapper for fetching peer dev
  - netkit: Add tstats per-CPU traffic counters
  - netkit: Remove explicit active/peer ptr initialization
  - selftests/bpf: Add selftests for netkit
  - bpftool: Extend net dump with netkit progs
  - bpftool: Implement link show support for netkit
  - libbpf: Add link-based API for netkit
  - tools: Sync if_link uapi header
  - netkit, bpf: Add bpf programmable net device
  - arm64: kernel: fix Clang integrated assembler errors in entry.S
  - xSched: fix NULL pointer dereference in cfs_rq during class switch
  - xSched/dmem: memory allocation size must larger than 0
  - xSched: prevent HBM allocation for non-AI tasks
  - xSched: fix incorrect error returns in vstream allocation
  - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility
  - PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - urma: add rate limit for modify error logs
  - mfs: fix inode resource leak when cache object fd is zero
  - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
  - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK
  - bpf: Fix OOB in pcpu_init_value
  - bpf: Fix stale offload->prog pointer after constant blinding
  - bpf: fix end-of-list detection in cgroup_storage_get_next_key()
  - bpf: Fix RCU stall in bpf_fd_array_map_clear()
  - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
  - bpf: Fix use-after-free in offloaded map/prog info fill
  - bpf, arm64: Fix off-by-one in check_imm signed range check
  - bpf: Fix NULL deref in map_kptr_match_type for scalar regs
  - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
  - net: unic: Add statistics on abnormal cqe
  - ub:ubase:anti-attack feature adaptation
  - ub: ubase: Add execution statistics for the software
  - ub: ubase: Add retry when ctrlq e2e msg send fail during
  - update rnpgbevf driver to version 1.0.1.
  - rme: add debugfs nodes for rme firmware log control
  - rme: reorder hisi_ext_cmd enum values by numeric order
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init()
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu()
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters
  - Revert "cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus"
  - PM / devfreq: use _visible attribute to replace create/remove_sysfs_files()
  - cpufreq: Replace magic number
  - cpufreq: Update sscanf() to kstrtouint()
  - update to sysfs_emit() for safer buffer handling
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - x86/resctrl: Fix memory bandwidth counter width for Hygon
  - x86/resctrl: Add missing resctrl initialization for Hygon
  - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
  - x86/cpu/hygon: Clean up out-of-tree resctrl code
  - md/bitmap: fix GPF in write_page caused by resize race
  - libbpf: Fix -Wdiscarded-qualifiers under C23
  - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread
  - ub: cdma: specify log and add hardware version
  - ub: cdma: reconstruct the event reporting module
  - gve: Fix stats report corruption on queue count change
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations
  - iommu/amd: Fix alias device DTE setting
  - iommu/amd: Fix error path in amd_iommu_probe_device()
  - iommu/amd: Remove unused PPR_* macros
  - iommu/amd: Fix header file
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags
  - mm: delete the unused put_pages_list()
  - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
  - iommu/amd: Handle error path in amd_iommu_probe_device()
  - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros
  - iommu/amd: Invalidate cache before removing device from domain list
  - iommu/amd: Introduce per device DTE update function
  - configs/hardening: Fix disabling UBSAN configurations
  - iommu/amd: use page allocation function provided by iommu-pages.h
  - iommu/dma: use iommu_put_pages_list() to releae freelist
  - iommu/amd: Fix possible irq lock inversion dependency issue
  - iommu/amd: Fix sleeping in atomic context
  - iommu/amd: Introduce per-device domain ID to fix potential TLB aliasing issue
  - iommu/amd: Refactor GCR3 table helper functions
  - iommu/amd: Refactor protection_domain helper functions
  - iommu/amd: Refactor attaching / detaching device functions
  - iommu/amd: Refactor helper function for setting / clearing GCR3
  - iommu/amd: Rearrange GCR3 table setup code
  - iommu/amd: Add support for device based TLB invalidation
  - iommu/amd: Introduce per-device GCR3 table
  - iommu/amd: Introduce struct protection_domain.pd_mode
  - iommu/amd: Introduce get_amd_iommu_from_dev()
  - iommu/amd/pgtbl_v2: Invalidate updated page ranges only
  - iommu/amd: Make domain_flush_pages as global function
  - iommu/amd: Consolidate amd_iommu_domain_flush_complete() call
  - iommu/amd: Refactor device iotlb invalidation code
  - iommu/amd: Refactor IOMMU tlb invalidation code
  - iommu/amd: Add support to invalidate multiple guest pages
  - iommu/amd: Remove redundant passing of PDE bit
  - iommu/amd: Remove redundant domain flush from attach_device()
  - hardening: x86: drop reference to removed config AMD_IOMMU_V2
  - iommu/amd: Miscellaneous clean up when free domain
  - iommu/amd: Consolidate logic to allocate protection domain
  - hardening: Provide Kconfig fragments for basic options
  - iommu/amd: Enable support for up to 2K interrupts per function
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE()
  - iommu/amd: Introduce helper function get_dte256()
  - iommu/amd: Introduce helper function to update 256-bit DTE
  - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros
  - iommu/amd: Introduce iommu_dev_data.max_pasids
  - iommu/amd: Rename amd_iommu_v2_supported() as amd_iommu_pasid_supported()
  - iommu/amd: Pass struct iommu_dev_data to set_dte_entry()
  - iommu/amd: Remove unused EXPORT_SYMBOLS
  - iommu/amd: Remove amd_iommu_device_info()
  - iommu/amd: Introduce iommu_dev_data.flags to track device capabilities
  - iommu/amd: Introduce iommu_dev_data.ppr
  - iommu/amd: Rename ats related variables
  - iommu/amd: Modify logic for checking GT and PPR features
  - iommu/amd: Replace slab cache allocator with page allocator
  - iommu/vt-d: add wrapper functions for page allocations
  - iommu/amd: Introduce generic function to set multibit feature value
  - iommu/amd: Move PPR-related functions into ppr.c
  - iommu/amd: Remove PPR support
  - iommu/amd: Remove iommu_v2 module
  - iommu/amd: Consolidate feature detection and reporting logic
  - iommu/amd: Introduce helper functions for managing GCR3 table
  - iommu/amd: Consolidate timeout pre-define to amd_iommu_type.h
  - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  - e1000/e1000e: Fix leak in DMA error cleanup
  - arch/x86/mm: reserve memblock for CSV3 guest
  - KVM: arm64: Fix timer_early_inject conflict with CVM
  - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE
  - obmm: relax contig_mem_pool restriction for 64KB pages
  - iommu/ummu: Support pplb.
  - ext4: move ext4_percpu_param_init() before ext4_mb_init()
  - io_uring/kbuf: check if target buffer list is still legacy on recycle
  - espintcp: Fix race condition in espintcp_close()
  - io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel
  - net: ipv6: fix dst ref loop on input in rpl lwt
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
  - net: ipv6: fix dst ref loop on input in seg6 lwt
  - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
  - serial: 8250: Fix TX deadlock when using DMA
  - sched_ext: Sync openeuler_defconfig for sched_ext
  - alloc_fdtable(): change calling conventions.
  - fs: consistently deref the files table with rcu_dereference_raw()
  - iommu/ummu: Introduce struct ummu_device_event
  - iommu/ummu: Use non mirror mem.
  - iommu/ummu: Optimized ubmem register compatibility
  - arm64: entry: Fix missing sync_sei in irq_ventry
  - net/oenetcls: Limit rxqs against combined_channels
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - iommu/ummu: Support free_bit.
  - iommu/ummu: Optimized stage2 bypass support
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - sched_ext: Update comments replacing breather with aborting mechanism
  - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before
  - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task
  - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new
  - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer
  - tools/sched_ext: update scx_show_state.py for scx_aborting change
  - scx_central: Defer timer start to central dispatch to fix init error
  - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking
  - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask
  - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
  - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
  - selftests/sched_ext: Add missing error check for exit__load()
  - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags
  - sched_ext: Fix starvation of scx_enable() under fair-class saturation
  - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work
  - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs()
  - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq()
  - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue()
  - sched_ext: Fix bypass depth leak on scx_enable() failure
  - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks
  - sched_ext: Exit dispatch and move operations immediately when aborting
  - sched_ext: Simplify breather mechanism with scx_aborting flag
  - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode
  - sched_ext: Refactor do_enqueue_task() local and global DSQ paths
  - sched_ext: Fix SCX_KICK_WAIT to work reliably
  - tools/sched_ext: Provide a compatible helper for scx_bpf_events()
  - tools/sched_ext: Sync with scx repo
  - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers
  - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch
  - sched_ext: Fix unsafe locking in the scx_dump_state()
  - sched_ext: Don't kick CPUs running higher classes
  - sched_ext: Always use SMP versions in kernel/sched/ext.c
  - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU
  - sched_ext: Drop kfuncs marked for removal in 6.15
  - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
  - sched/ext: Prevent update_locked_rq() calls with NULL rq
  - sched_ext: Fix rq lock state in hotplug ops
  - sched_ext: Remove duplicate BTF_ID_FLAGS definitions
  - rhashtable: Fix rhashtable_try_insert test
  - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c
  - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group()
  - sched_ext: Make scx_group_set_weight() always update tg->scx.weight
  - sched/ext: Fix invalid task state transitions on class switch
  - sched/fair: Fix sched_can_stop_tick() for fair tasks
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator
  - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set()
  - sched_ext: Make scx_locked_rq() inline
  - sched_ext: Track currently locked rq
  - sched_ext: Move built-in idle CPU selection policy to a separate file
  - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP
  - selftests/sched_ext: Fix exit selftest hang on UP
  - sched_ext: Use kvzalloc for large exit_dump allocation
  - sched_ext: create_dsq: Return -EEXIST on duplicate request
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock
  - tools include UAPI: Sync linux/sched.h copy with the kernel sources
  - sched/doc: Update documentation after renames and synchronize Chinese version
  - sched/fair: Remove stale FREQUENCY_UTIL comment
  - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr()
  - file: add take_fd() cleanup helper
  - sched/ext: Remove sched_fork() hack
  - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance()
  - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx
  - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h.
  - sched_ext: selftests: Fix grammar in tests description
  - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq()
  - sched_ext: Fix migration disabled handling in targeted dispatches
  - sched_ext: Implement auto local dispatching of migration disabled tasks
  - sched_ext: Fix incorrect time delta calculation in time_delta()
  - sched_ext: Fix lock imbalance in dispatch_to_local_dsq()
  - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems
  - tools/sched_ext: Add helper to check task migration state
  - sched_ext: Fix incorrect autogroup migration detection
  - sched_ext: selftests/dsp_local_on: Fix sporadic failures
  - selftests/sched_ext: Fix enum resolution
  - sched_ext: Include task weight in the error state dump
  - sched_ext: Fixes typos in comments
  - sched_ext: fix kernel-doc warnings
  - sched_ext: Use time helpers in BPF schedulers
  - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now()
  - sched_ext: Add time helpers for BPF schedulers
  - sched_ext: Add scx_bpf_now() for BPF scheduler
  - sched_ext: Implement scx_bpf_now()
  - sched_ext: Relocate scx_enabled() related code
  - sched_ext: Add option -l in selftest runner to list all available tests
  - sched_ext: Include remaining task time slice in error state dump
  - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON
  - sched_ext: idle: small CPU iteration refactoring
  - sched_ext: idle: introduce check_builtin_idle_enabled() helper
  - sched_ext: idle: clarify comments
  - sched_ext: idle: use assign_cpu() to update the idle cpumask
  - cpumask: introduce assign_cpu() macro
  - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology()
  - sched_ext: Use sizeof_field for key_len in dsq_hash_params
  - tools/sched_ext: Receive updates from SCX repo
  - sched_ext: Use the NUMA scheduling domain for NUMA optimizations
  - sched_ext: keep running prev when prev->scx.slice != 0
  - sched_ext: idle: Refresh idle masks during idle-to-idle transitions
  - sched_ext: switch class when preempted by higher priority scheduler
  - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()
  - sched_ext: Fix dsq_local_on selftest
  - sched_ext: initialize kit->cursor.flags
  - sched_ext: Fix invalid irq restore in scx_ops_bypass()
  - MAINTAINERS: add me as reviewer for sched_ext
  - MAINTAINERS: add self as reviewer for sched_ext
  - scx: Fix maximal BPF selftest prog
  - sched_ext: fix application of sizeof to pointer
  - selftests/sched_ext: fix build after renames in sched_ext API
  - sched_ext: Add __weak to fix the build errors
  - sched_ext: Replace scx_next_task_picked() with switch_class() in comment
  - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*()
  - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local()
  - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]()
  - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context
  - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
  - sched_ext: Clarify sched_ext_ops table for userland scheduler
  - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup
  - watchdog/softlockup: Report the most frequent interrupts
  - watchdog/softlockup: Low-overhead detection of interrupt storm
  - genirq: Provide a snapshot mechanism for interrupt statistics
  - genirq: Fix kabi for kstat_irqs in struct irq_desc
  - genirq: Convert kstat_irqs to a struct
  - genirq: Deduplicate interrupt descriptor initialization
  - sched_ext: Avoid live-locking bypass mode switching
  - sched_ext: Fix incorrect use of bitwise AND
  - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap
  - sched_ext: Introduce NUMA awareness to the default idle selection policy
  - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags
  - sched_ext: Rename CFI stubs to names that are recognized by BPF
  - sched_ext: Introduce LLC awareness to the default idle selection policy
  - sched_ext: Clarify ops.select_cpu() for single-CPU tasks
  - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection
  - sched_ext: Use btf_ids to resolve task_struct
  - sched/ext: Use tg_cgroup() to elieminate duplicate code
  - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED
  - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq()
  - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST
  - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx()
  - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type
  - sched_ext: Add a missing newline at the end of an error message
  - sched_ext: Fix enq_last_no_enq_fails selftest
  - sched_ext: Make cast_mask() inline
  - scx: Fix raciness in scx_ops_bypass()
  - scx: Fix exit selftest to use custom DSQ
  - sched_ext: Fix function pointer type mismatches in BPF selftests
  - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ
  - sched: Pass correct scheduling policy to __setscheduler_class
  - sched: Add __setscheduler_class() for sched_ext
  - sched_ext: Remove unnecessary cpu_relax()
  - sched_ext: Don't hold scx_tasks_lock for too long
  - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers
  - sched_ext: bypass mode shouldn't depend on ops.select_cpu()
  - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl()
  - sched_ext: Start schedulers with consistent p->scx.slice values
  - Revert "sched_ext: Use shorter slice while bypassing"
  - sched_ext: use correct function name in pick_task_scx() warning message
  - selftests: sched_ext: Add sched_ext as proper selftest target
  - sched_ext: Documentation: Update instructions for running example schedulers
  - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED
  - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called
  - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value
  - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init()
  - sched_ext: Improve error reporting during loading
  - sched_ext: Add __weak markers to BPF helper function decalarations
  - sched_ext: Remove redundant p->nr_cpus_allowed checker
  - sched_ext: Decouple locks in scx_ops_enable()
  - sched_ext: Decouple locks in scx_ops_disable_workfn()
  - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online()
  - sched_ext: Enable scx_ops_init_task() separately
  - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable()
  - sched_ext: Initialize in bypass mode
  - sched_ext: Remove SCX_OPS_PREPPING
  - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable()
  - sched_ext: Use shorter slice while bypassing
  - sched_ext: Split the global DSQ per NUMA node
  - sched_ext: Relocate find_user_dsq()
  - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new()
  - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL
  - tools/sched_ext: Receive misc updates from SCX repo
  - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle
  - sched_ext: Build fix for !CONFIG_SMP
  - sched_ext: Provide a sysfs enable_seq counter
  - sched_ext: Fix build when !CONFIG_STACKTRACE
  - sched_ext: Don't trigger ops.quiescent/runnable() on migrations
  - sched_ext: Synchronize bypass state changes with rq lock
  - scx_qmap: Implement highpri boosting
  - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq()
  - sched_ext: Compact struct bpf_iter_scx_dsq_kern
  - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq()
  - sched_ext: Move consume_local_task() upward
  - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq()
  - sched_ext: Reorder args for consume_local/remote_task()
  - sched_ext: Restructure dispatch_to_local_dsq()
  - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling
  - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON
  - sched_ext: Refactor consume_remote_task()
  - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate
  - sched_ext: Add missing static to scx_dump_data
  - sched_ext: Add missing static to scx_has_op[]
  - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx()
  - sched: Add dummy version of sched_group_set_idle()
  - sched: Fix kabi for int idle in struct task_group
  - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT
  - sched_ext: Add a cgroup scheduler which uses flattened hierarchy
  - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group
  - sched_ext: Add cgroup support
  - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT
  - sched: Make cpu_shares_read_u64() use tg_weight()
  - sched: Expose css_tg()
  - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable
  - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable
  - sched_ext: Remove sched_class->switch_class()
  - sched_ext: Remove switch_class_scx()
  - sched_ext: Relocate functions in kernel/sched/ext.c
  - sched_ext: Unify regular and core-sched pick task paths
  - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP
  - sched_ext: Don't call put_prev_task_scx() before picking the next task
  - sched: Fix kabi for put_prev_task in struct sched_class
  - sched: Add put_prev_task(.next)
  - sched: Combine the last put_prev_task() and the first set_next_task()
  - sched: Fix kabi pick_task in struct sched_class
  - sched: Rework pick_next_task()
  - sched: Split up put_prev_task_balance()
  - sched: Fixup set_next_task() implementations
  - sched/fair: Unify pick_{,next_}_task_fair()
  - sched/fair: Cleanup pick_task_fair()'s curr
  - sched/fair: Cleanup pick_task_fair() vs throttle
  - sched/fair: Remove unused 'curr' argument from pick_next_entity()
  - sched: Use set_next_task(.first) where required
  - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched()
  - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq()
  - sched_ext: Add missing cfi stub for ops.tick
  - scx_central: Fix smatch checker warning
  - sched_ext: Don't use double locking to migrate tasks across CPUs
  - sched_ext: define missing cfi stubs for sched_ext
  - sched_ext: Improve logging around enable/disable
  - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE
  - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals()
  - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64
  - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu()
  - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked()
  - sched_ext: Fix kabi for balance in struct sched_class
  - sched_ext: Simplify UP support by enabling sched_class->balance() in UP
  - sched_ext: Use update_curr_common() in update_curr_scx()
  - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance()
  - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick()
  - sched_ext: Allow p->scx.disallow only while loading
  - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT]
  - scx/selftests: Verify we can call create_dsq from prog_run
  - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL
  - sched_ext: Fixes incorrect type in bpf_scx_init()
  - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues
  - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches
  - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP
  - sched_ext: Unpin and repin rq lock from balance_scx()
  - sched: Move struct balance_callback definition upward
  - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated
  - sched_ext: Reimplement scx_bpf_reenqueue_local()
  - sched_ext/scx_qmap: Add an example usage of DSQ iterator
  - sched_ext: Implement DSQ iterator
  - sched_ext: Take out ->priq and ->flags from scx_dsq_node
  - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h
  - sched, sched_ext: Open code for_balance_class_range()
  - sched_ext: Minor cleanups in kernel/sched/ext.h
  - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect
  - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task()
  - sched, sched_ext: Simplify dl_prio() case handling in sched_fork()
  - sched/ext: Add BPF function to fetch rq
  - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all
  - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning
  - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency
  - sched_ext: fix typo in set_weight() description
  - sched_ext: Fix spelling mistake: "intead" -> "instead"
  - sched_ext: Drop tools_clean target from the top-level Makefile
  - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed
  - sched_ext: Add cpuperf support
  - cpufreq_schedutil: Refactor sugov_cpu_is_busy()
  - sched_ext: Fix kabi for switch_class in struct sched_class
  - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class()
  - sched_ext: Add selftests
  - sched_ext: Documentation: scheduler: Document extensible scheduler class
  - sched_ext: Add vtime-ordered priority queue to dispatch_q's
  - sched_ext: Implement core-sched support
  - sched_ext: Bypass BPF scheduler while PM events are in progress
  - sched_ext: Implement sched_ext_ops.cpu_online/offline()
  - sched_ext: Implement sched_ext_ops.cpu_acquire/release()
  - sched_ext: Implement SCX_KICK_WAIT
  - sched_ext: Track tasks that are subjects of the in-flight SCX operation
  - sched_ext: Implement tickless support
  - sched_ext: Add task state tracking operations
  - sched_ext: Make watchdog handle ops.dispatch() looping stall
  - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU
  - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support
  - tools/sched_ext: Add scx_show_state.py
  - sched_ext: Print debug dump after an error exit
  - sched_ext: Print sched_ext info when dumping stack
  - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT
  - sched_ext: Implement runnable task stall watchdog
  - sched_ext: Add sysrq-S which disables the BPF scheduler
  - sched_ext: Add scx_simple and scx_example_qmap example schedulers
  - sched_ext: Allow dequeue_task_scx to fail
  - sched_ext: Fix kabi for scx in struct task_struct
  - sched_ext: Implement BPF extensible scheduler class
  - sched: Fix kabi for dequeue_task in struct sched_class
  - sched: Allow sched_class::dequeue_task() to fail
  - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity
  - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class
  - sched/fair: Rename check_preempt_curr() to wakeup_preempt()
  - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair()
  - sched_ext: Add boilerplate for extensible scheduler class
  - sched: Add normal_policy()
  - sched: Factor out update_other_load_avgs() from __update_blocked_others()
  - sched: Factor out cgroup weight conversion functions
  - sched: Fix kabi for switching_to in struct sched_class
  - sched: Add sched_class->switching_to() and expose check_class_changing/changed()
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
  - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c
  - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c
  - sched/cpufreq: Rework schedutil governor performance estimation
  - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched/core: Remove ifdeffery for saved_state
  - sched: Misc cleanups
  - Revert "sched/core: Remove ifdeffery for saved_state"
  - Revert "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched: Simplify sched_move_task()
  - sched: Simplify sched_rr_get_interval()
  - sched: Simplify yield_to()
  - sched: Simplify sched_{set,get}affinity()
  - sched: Simplify syscalls
  - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting"
  - sched: Simplify set_user_nice()
  - cleanup: Make no_free_ptr() __must_check
  - sched: Fix kabi for reweight_task in struct sched_class
  - sched: Add sched_class->reweight_task()
  - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork()
  - sched: Restructure sched_class order sanity checks in sched_init()
  - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse"
  - Revert "sched: Add qos_sched_enabled() helper for future expansion"
  - Revert "sched/fair: Move dynamic affinity helper functions to sched.h"
  - Revert "sched/fair: Add SMT QoS sched core code"
  - Revert "arm64: Add arch code for SMT QoS"
  - Revert "config: Enable SMT_QOS"
  - ub: cdma: add software TLB invalidation for KSVA memory
  - usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - ub: udma: code optimization
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - ub: udma: resolve legacy issues of shared page tables.
  - ub: udma: support dtu function.
  - ub: udma: support jetty_opt.
  - ub: udma: support ucp & udp.
  - ub: udma: support sharing JFC.
  - ub: udma: supports write with atomic.
  - ub: udma: Supports Safe Mode.
  - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute
  - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events
  - x86,fs/resctrl: Update documentation for telemetry events
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Move RMID initialization to first mount
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG
  - x86/resctrl: Add energy/perf choices to rdt boot option
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp()
  - fs/resctrl: Refactor mkdir_mondata_subdir()
  - x86/resctrl: Read telemetry events
  - x86/resctrl: Find and enable usable telemetry events
  - x86,fs/resctrl: Add architectural event pointer
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs
  - x86/resctrl: Discover hardware telemetry events
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring
  - x86,fs/resctrl: Add an architectural hook called for first mount
  - x86,fs/resctrl: Support binary fixed point event counters
  - x86,fs/resctrl: Handle events that can be read from any CPU
  - fs/resctrl: Make event details accessible to functions when reading events
  - x86,fs/resctrl: Rename some L3 specific functions
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count()
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr
  - x86/resctrl: Clean up domain_remove_cpu_ctrl()
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types
  - x86/resctrl: Move L3 initialization into new helper function
  - x86,fs/resctrl: Improve domain type checking
  - fs/resctrl: Consider sparse masks when initializing new group's allocation
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled
  - MAINTAINERS: resctrl: Add myself as reviewer
  - x86/resctrl: Configure mbm_event mode if supported
  - fs/resctrl: Introduce the interface to switch between monitor modes
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled
  - fs/resctrl: Introduce the interface to modify assignments in a group
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir
  - fs/resctrl: Provide interface to update the event configurations
  - fs/resctrl: Add event configuration directory under info/L3_MON/
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read()
  - x86/resctrl: Refactor resctrl_arch_rmid_read()
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode
  - fs/resctrl: Pass struct rdtgroup instead of individual members
  - fs/resctrl: Add the functionality to unassign MBM events
  - fs/resctrl: Add the functionality to assign MBM events
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC
  - fs/resctrl: Introduce event configuration field in struct mon_evt
  - x86/resctrl: Add data structures and definitions for ABMC assignment
  - fs/resctrl: Introduce interface to display number of free MBM counters
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain
  - fs/resctrl: Add resctrl file to display number of assignable counters
  - fs/resctrl: Introduce the interface to display monitoring modes
  - x86/resctrl: Add support to enable/disable AMD ABMC feature
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource
  - x86/resctrl: Add ABMC feature in the command line options
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC)
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - ub: ub_fwctl: add querying the peak bandwidth.
  - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process
  - dm: clear cloned request bio pointer when last clone bio completes
  - ub:ubus: Bugfix control software restart features
  - bpf-rvi: Fix possible AA deadlock pidns_list_lock
  - ub: ubase: Provide interface for obtaining ub feature
  - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket
  - ub: ubase&unic: ubase & unic use non mirror mem
  - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only
  - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool
  - cifs: some missing initializations on replay
  - arm64: uaccess: add CONFIG control for copy_from_user_opt
  - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms
  - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11
  - LoongArch: KVM: fix vm start fail
  - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure
  - ub: ubase: Resolve the issue of insufficient ctrlq sequences
  - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs
  - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response
  - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time
  - ub: ubase: Solve the mailbox processing times out in abnormal scenarios
  - net: unic: Fixed the issue of memory overwriting in unic traffic flow
  - ub: ubase&unic: encoding alarm rectification
  - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure
  - net: unic: Supports querying of the Ethernet port's NL-layer register
  - ub: ubase: Fix the problem of frequent log printing
  - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices
  - ub: ubase: Delete residual DTU window of the UDMA during reset
  - ub: ubase: Add DTU capability bit printing
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  -  Linkdata: fix build failure due to missing IPsec configs in defconfig
  - ub:ubus: Add control software restart features
  - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL.
  - ub: ub_fwctl: query port link status add construct first link data
  - vsock driver add translate cid and gpa interface
  - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors"
  - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default
  - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS
  - arm64: Add runtime switch to control ESB for SEI synchronization
  - arm64/entry: Add support to synchronize SEI at the exception boundary
  - nbd: remove queue freeze in nbd_add_socket
  - nbd: remove redundant num_connections boundary checks
  - nbd: replace socks pointer array with xarray
  - nbd: simplify find_fallback() by removing redundant logic
  - Documentation: ext4: Convert includes into toctrees
  - Documentation: ext4: atomic_writes: Demote last three sections
  - block: Don't allow an atomic write be truncated in blkdev_write_iter()
  - nvme: stop using AWUPF
  - ext4: Simplify last in leaf check in ext4_map_query_blocks
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE
  - block: Fix blk_validate_atomic_write_limits() build for arm32
  - block: fix kabi broken in enum req_flag_bits
  - iomap: Lift blocksize restriction on atomic writes
  - ext4: Add atomic block write documentation
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc
  - ext4: Add multi-fsblock atomic write support with bigalloc
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS
  - ext4: Make ext4_meta_trans_blocks() non-static for later use
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write()
  - ext4: Document an edge case for overwrites
  - ext4: Do not fallback to buffered-io for DIO atomic write
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE
  - ext4: Check for atomic writes support in write iter
  - ext4: Add statx support for atomic writes
  - fs: fix kabi broken in struct kstat
  - fs: Add initial atomic write support info to statx
  - fs: iomap: Atomic write support
  - fs: Export generic_atomic_write_valid()
  - nvme: Atomic write support
  - block: Add bdev atomic write limits helpers
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
  - block/fs: Pass an iocb to generic_atomic_write_valid()
  - block: Add fops atomic write support
  - block: Call blkdev_dio_unaligned() from blkdev_direct_IO()
  - block: fix kabi broken in struct queue_limits
  - block: Add core atomic write support
  - fs: Initial atomic write support
  - block: Generalize chunk_sectors support as boundary support
  - block: Pass blk_queue_get_max_sectors() a request pointer
  - iommu/ummu-core: support TID sharing within same mm
  - smb: client: prevent races in ->query_interfaces()
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
  - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs
  - riscv: Sanitize syscall table indexing under speculation
  - ub:ubus: support getting supported features data
  - efi/cper: Print correctable AER information
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: generalize driver_override in struct device
  - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping
  - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe
  - btrfs: reject new transactions if the fs is fully read-only
  - drm/amdgpu: ensure no_hw_access is visible before MMIO
  - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
  - cifs: Fix locking usage for tcon fields
  - dmaengine: idxd: Fix leaking event log memory
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - EFI/CPER: don't dump the entire memory region
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - ub: ubase: Added proxy functions to ubase
  - ub: ubase: support DTU feature
  - ub: ubase: add USC and UCP
  - ub: ubase: Add Ubase S Device ID
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
  - atm: lec: fix use-after-free in sock_def_readable()
  - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - netfilter: nf_conntrack_expect: use expect->helper
  - netfilter: nf_conntrack_expect: honor expectation helper field
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - rnp: update rnp driver to version 1.1.14.
  - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically"
  - mm/numa_remote: remove depends on ARM64_4K_PAGES
  - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES
  - openvswitch: validate MPLS set/set_masked payload length
  - xfrm_user: fix info leak in build_report()
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - dmaengine: idxd: Fix crash when the event log is disabled
  - dmaengine: idxd: Delete unnecessary NULL check
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
  - rnpvf: update rnpvf driver to version 1.1.10.
  - bnxt_en: Update firmware interface to 1.10.2.171
  - KVM: x86: Add support for CPUID leaf 0x8C860000
  - x86/delay: add support for Zhaoxin PAUSEOPT instruction
  - cpufreq: conservative: Reset requested_freq on limits change
  - netfilter: xt_multiport: validate range encoding in checkentry
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  - btrfs: fix double free in create_space_info_sub_group() error path
  - btrfs: fix double free in create_space_info() error path
  - interconnect: debugfs: fix devm_kstrdup and kfree mismatch
  - Revert "ALSA: usb: Increase volume range that triggers a warning"
  - x86/kfence: fix booting on 32bit non-PAE systems
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
  - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
  - btrfs: fix leak of kobject name for sub-group space_info
  - net: phy: fix phy_uses_state_machine()
  - fs/ntfs3: Initialize allocated memory before use
  - nvme: fix PCIe subsystem reset controller state transition
  - nvme-pci: do not directly handle subsys reset fallout
  - nvme-fc: rename free_ctrl callback to match name pattern
  - ASoC: codecs: wsa883x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: Drop unused version readout
  - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
  - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
  - mm: kmsan: fix poisoning of high-order non-compound pages
  - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
  - iio: adc: exynos_adc: fix OF populate on driver rebind
  - ALSA: scarlett2: Fix buffer overflow in config retrieval
  - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
  - iio: core: add separate lockdep class for info_exist_lock
  - iio: core: add missing mutex_destroy in iio_dev_release()
  - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
  - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
  - selftests/bpf: Check for timeout in perf_link test
  - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
  - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - perf/x86/intel: Do not enable BTS for guests
  - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
  - platform/x86: hp-bioscfg: Fix automatic module loading
  - netrom: fix double-free in nr_route_frame()
  - slimbus: core: fix device reference leak on report present
  - slimbus: core: fix runtime PM imbalance on report present
  - octeontx2: Fix otx2_dma_map_page() error return code
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
  - wifi: ath12k: fix dma_free_coherent() pointer
  - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
  - iio: chemical: scd4x: fix reported channel endianness
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - iio: adc: ad9467: fix ad9434 vref mask
  - iio: accel: iis328dq: fix gain values
  - of: platform: Use default match table for /firmware
  - of: fix reference count leak in of_alias_scan()
  - x86: make page fault handling disable interrupts properly
  - vsock/test: fix seqpacket message bounds test
  - net: openvswitch: fix data race in ovs_vport_get_upcall_stats
  - octeontx2-af: Fix error handling
  - net: dsa: fix off-by-one in maximum bridge ID determination
  - selftests: net: amt: wait longer for connection before sending packets
  - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
  - drm/amd/pm: Don't clear SI SMC table when setting power limit
  - usbnet: limit max_mtu based on device's hard_mtu
  - mISDN: annotate data-race around dev->work
  - be2net: fix data race in be_get_new_eqd
  - net: hns3: fix data race in hns3_fetch_stats
  - ALSA: usb: Increase volume range that triggers a warning
  - riscv: clocksource: Fix stimecmp update hazard on RV32
  - kconfig: fix static linking of nconf
  - spi: spi-sprd-adi: Fix double free in probe error path
  - spi: sprd-adi: switch to use spi_alloc_host()
  - spi: sprd: adi: Use devm_register_restart_handler()
  - interconnect: debugfs: initialize src_node and dst_node to empty strings
  - iio: adc: ad7280a: handle spi_setup() errors in probe()
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
  - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
  - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
  - comedi: Fix getting range information for subdevices 16 to 255
  - x86/kfence: avoid writing L1TF-vulnerable PTEs
  - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
  - arm64: dts: rockchip: remove dangerous max-link-speed from helios64
  - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
  - scsi: storvsc: Process unsupported MODE_SENSE_10
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
  - Revert "nfc/nci: Add the inconsistency check between the input data length and count"
  - w1: fix redundant counter decrement in w1_attach_slave_device()
  - w1: therm: Fix off-by-one buffer overflow in alarms_store
  - comedi: dmm32at: serialize use of paged registers
  - serial: 8250_pci: Fix broken RS485 for F81504/508/512
  - octeontx2: cn10k: fix RX flowid TCAM mask handling
  - veth: fix data race in veth_get_ethtool_stats
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO.
  - tools: ynl: Specify --no-line-number in ynl-regen.sh.
  - gue: Fix skb memleak with inner IP protocol 0.
  - amd-xgbe: avoid misleading per-packet error log
  - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
  - selftests: net: fib-onlink-tests: Convert to use namespaces by default
  - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace
  - net: usb: dm9601: remove broken SR9700 support
  - igc: fix race condition in TX timestamp read for register 0
  - ice: Avoid detrimental cleanup for bond during interface stop
  - ice: initialize ring_stats->syncp
  - ata: libata: Print features also for ATAPI devices
  - ata: libata: Call ata_dev_config_lpm() for ATAPI devices
  - ata: libata-core: Introduce ata_dev_config_lpm()
  - ata: libata: Add cpr_log to ata_dev_print_features() early return
  - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
  - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
  - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
  - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
  - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
  - dt-bindings: power: rpmpd: Update part number to X1E80100
  - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains
  - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215
  - dt-bindings: power: qcom,rpmpd: Add SM7150
  - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
  - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
  - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
  - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
  - io_uring: move local task_work in exit cancel loop
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
  - dmaengine: ti: k3-udma: fix device leak on udma lookup
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: idxd: fix device leaks on compat bind and unbind
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure
  - dmaengine: bcm-sba-raid: fix device leak on probe
  - dmaengine: at_hdmac: fix device leak on of_dma_xlate()
  - dmaengine: apple-admac: Add "apple,t8103-admac" compatible
  - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
  - drm/amdkfd: fix a memory leak in device_queue_manager_init()
  - drm/amd: Clean up kfd node on surprise disconnect
  - drm/amd/display: Bump the HDMI clock to 340MHz
  - LoongArch: Fix PMU counter allocation for mixed-type event groups
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
  - bpf: Fix the use of prog->axu->sleepable
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
  - EDAC/i3200: Fix a resource leak in i3200_probe1()
  - EDAC/x38: Fix a resource leak in x38_probe1()
  - hrtimer: Fix softirq base check in update_needs_ipi()
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
  - USB: serial: option: add Telit LE910 MBIM composition
  - USB: OHCI/UHCI: Add soft dependencies on ehci_platform
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
  - usb: dwc3: Check for USB4 IP_NAME
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
  - phy: rockchip: inno-usb2: fix disconnection in gadget mode
  - phy: freescale: imx8m-pcie: assert phy reset during power on
  - phy: rockchip: inno-usb2: fix communication disruption in gadget mode
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
  - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
  - HID: usbhid: paper over wrong bNumDescriptor field
  - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - phy: stm32-usphyc: Fix off by one in probe()
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
  - phy: drop probe registration printks
  - phy: phy-snps-eusb2: refactor constructs names
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
  - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
  - dmaengine: tegra-adma: Fix use-after-free
  - mm, kfence: describe @slab parameter in __kfence_obj_info()
  - textsearch: describe @list member in ts_ops search
  - ASoC: tlv320adcx140: fix word length
  - ASoC: tlv320adcx140: fix null pointer
  - selftests: drv-net: fix RPS mask handling for high CPU numbers
  - btrfs: fix memory leaks in create_space_info() error paths
  - btrfs: introduce btrfs_space_info sub-group
  - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
  - btrfs: factor out init_space_info() from create_space_info()
  - btrfs: store fs_info in space_info
  - net/mlx5e: Restore destroying state bit after profile cleanup
  - vsock/test: add a final full barrier after run all tests
  - net: update netdev_lock_{type,name}
  - net: bridge: annotate data-races around fdb->{updated,used}
  - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry
  - btrfs: send: check for inline extents in range_is_hole_in_parent()
  - can: etas_es58x: allow partial RX URB allocation to succeed
  - ASoC: codecs: wsa884x: fix codec initialisation
  - firmware: imx: scu-irq: Set mu_resource_id before get handle
  - xfrm: clear trailing padding in build_polexpire()
  - numa: add critical_err sysfs interface for remote node recovery
  - mm: mark node as critical_err on remote RAS error
  - nvmet: move async event work off nvmet-wq
  - smb: client: fix OOB reads parsing symlink error response
  - smb: client: fix off-by-8 bounds check in check_wsl_eas()
  - Loongarch: Fixed warning about legacy_boot.h when build kernel
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - bpf: Load vmlinux btf for any struct_ops map
  - gpio: rockchip: mark the GPIO controller as sleeping
  - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS
  - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically
  - net: hns3: set the freed pointer to NULL
  - net: hns3: add support to query/set pfc_prevention_tout for ethtool
  - net: hns3: debugfs support for dumping fd rules
  - net: hns3: support tc flow for vf
  - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow
  - net: hns3: support two more actions for tc flow
  - net: hns3: Improved the unused_tuple parameter setting.
  - net: hns3: adjust add_cls_flower() for support more action
  - net: hns3: Clear the static alarm about 'no previous prototype'
  - net: hns3: Clear the static alarm about discarding the 'const' qualifier
  - kvm: arm64: set default early time for HIP12
  - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default
  - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability
  - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface
  - arm64: paravirt: Implement timer early inject PV guest support
  - kvm: arm64: Implement timer early inject PV hypcall handling
  - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions
  - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default
  - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability
  - KVM: arm64: Implement vtimer active status MMIO handling
  - KVM: arm64: vgic: Add is_uaccess parameter for active state handling
  - irqchip/gic-v3: Report vtimer active status to hypervisor
  - arm64: paravirt: Add pvtimer status support for guest
  - KVM: arm64: Provide VCPU attributes for pvtimer status
  - KVM: arm64: Add vCPU pvtimer_status structure and initialization
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - ksmbd: fix OOB write in QUERY_INFO for compound requests
  - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations
  - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h
  - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write
  - scsi: hisi_sas: Correct printing format issues
  - EDAC/amd64: Add support for Hygon family 18h model 18h
  - EDAC/amd64: Convert Hygon family 18h model checks to switch-case
  - mfs: handle file system umount event
  - mfs: notify user-space programs when it is being unmounted
  - ptt: Adapt the PTT tune event name in the document match to the actual names in the code.
  - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare
  - x86/copy_user_avx2: add sfence before vzeroupper in fixup path
  - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs
  - x86/mce: Handle AMD threshold interrupt storms
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems
  - x86/mce: Add support for physical address valid bit
  - x86/mce: Save and use APEI corrected threshold limit
  - x86/mce/amd: Define threshold restart function for banks
  - x86/mce/amd: Remove redundant reset_block()
  - x86/mce/amd: Support SMCA Corrected Error Interrupt
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems
  - x86/mce: Unify AMD DFR handler with MCA Polling
  - x86/mce: Unify AMD THR handler with MCA Polling
  - x86/mce: Add a clear_bank() helper
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()'
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()'
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers
  - tracing: Add __print_dynamic_array() helper
  - x86/mce: Move machine_check_poll() status checks to helper functions
  - x86/mce: Separate global and per-CPU quirks
  - x86/mce: Convert family/model mixed checks to VFM-based checks
  - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references
  - x86/mce: Cleanup bank processing on init
  - x86/mce: Do 'UNKNOWN' vendor check early
  - x86/mce: Break up __mcheck_cpu_apply_quirks()
  - x86/mce: Make four functions return bool
  - x86/mce: Make several functions return bool
  - x86/mce: Add wrapper for struct mce to export vendor specific info
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error()
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields
  - x86/mce: Rename mce_setup() to mce_prep_record()
  - x86/mce: Remove unused variable and return value in machine_check_poll()
  - x86/mce: Switch to new Intel CPU model defines
  - x86/mce: Dynamically size space for machine check records
  - x86/mce: Remove redundant check from mce_device_create()
  - x86/mce: Cleanup mce_usable_address()
  - x86/mce: Define amd_mce_usable_address()
  - x86/MCE/AMD: Split amd_mce_is_memory_error()
  - x86/cpu: Clear SVM feature if disabled by BIOS
  - x86/mce: Define BSP-only SMCA init
  - x86/mce: Define BSP-only init
  - x86/mce: Set CR4.MCE last during init
  - x86/mce: Remove __mcheck_cpu_init_early()
  - x86/mce/amd: Put list_head in threshold_bank
  - x86/mce/amd: Remove shared threshold bank plumbing
  - x86/mce/amd: Remove smca_banks_map
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device()
  - x86/mce/amd: Rename threshold restart function
  - x86/mce: Ensure user polling settings are honored when restarting timer
  - x86/mce: Add per-bank CMCI storm mitigation
  - x86/mce: Remove old CMCI storm mitigation code
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6
  - x86/cpufeatures: Free up unused feature bits
  - pwm: dwc: Add support for Hygon pwm controller
  - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table.
  - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size.
  - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - net: Allow to use SMP threads for backlog NAPI.
  - net: Remove conditional threaded-NAPI wakeup based on task state.
  - mm/numa_remote: set default distance between remote nodes to 255
  - jfs: add dmapctl integrity check to prevent invalid operations
  - rnpm: update rnpm driver to version 1.0.0.
  - xSched/dmem: introduce xsched_dmem_cleanup()
  - xSched/dmem: introduce xsched_dmem_free()
  - xSched/dmem: introduce xsched_dmem_alloc()
  - xSched/dmem: add support for XPU devices to register/unregister dmem regions
  - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c
  - selftests/bpf: Add file_read_pattern to gitignore
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED
  - libbpf: Fix return zero when elf_begin failed
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
  - selftests/bpf: Use -4095 as the bad address for bits iterator
  - selftests/bpf: Add three test cases for bits_iter
  - bpf: Use __u64 to save the bits in bits iterator
  - bpf: Check the validity of nr_words in bpf_iter_bits_new()
  - bpf: Add bpf_mem_alloc_check_size() helper
  - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
  - selftests/bpf: Check if distilled base inherits source endianness
  - libbpf: Ensure new BTF objects inherit input endianness
  - bpf: Fix a crash when btf_parse_base() returns an error pointer
  - selftests/bpf: test passing iterator to a kfunc
  - bpf: allow passing struct bpf_iter_<type> as kfunc arguments
  - bpf: extract iterator argument type and name validation logic
  - libbpf: Fix license for btf_relocate.c
  - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
  - libbpf: Fix error handling in btf__distill_base()
  - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined
  - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod
  - kbuild,bpf: Add module-specific pahole flags for distilled base BTF
  - libbpf,bpf: Share BTF relocate-related code with kernel
  - libbpf: Split field iter code into its own file kernel
  - bpf: Fix kabi breakage in struct module
  - module, bpf: Store BTF base pointer in struct module
  - libbpf: BTF relocation followup fixing naming, loop logic
  - resolve_btfids: Handle presence of .BTF.base section
  - libbpf: Make btf_parse_elf process .BTF.base transparently
  - selftests/bpf: Extend distilled BTF tests to cover BTF relocation
  - libbpf: Split BTF relocation
  - selftests/bpf: Test distilled base, split BTF generation
  - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF
  - libbpf: Remove callback-based type/string BTF field visitor helpers
  - bpftool: Use BTF field iterator in btfgen
  - libbpf: Make use of BTF field iterator in BTF handling code
  - libbpf: Make use of BTF field iterator in BPF linker code
  - libbpf: Add BTF field iterator
  - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs
  - selftests/bpf: Add selftest for bits iter
  - bpf: Add bits iterator
  - kbuild, bpf: Use test-ge check for v1.25-only pahole
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later
  - bitops: make BYTES_TO_BITS() treewide-available
  - bpf: Check return from set_memory_rox()
  - bpf: Remove arch_unprotect_bpf_trampoline()
  - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem
  - bpf: Fix kabi for bpf_prog_aux and bpf_prog
  - bpf: move sleepable flag from bpf_prog_aux to bpf_prog
  - selftests/bpf: Test struct_ops maps with a large number of struct_ops program.
  - bpf: struct_ops supports more than one page for trampolines.
  - bpf, net: validate struct_ops when updating value.
  - selftests/bpf: Test if shadow types work correctly.
  - bpftool: Add an example for struct_ops map and shadow type.
  - bpftool: Generated shadow variables for struct_ops maps.
  - libbpf: Convert st_ops->data to shadow type.
  - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops.
  - bpf: introduce in_sleepable() helper
  - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators.
  - bpf: Create argument information for nullable arguments.
  - bpf: Move __kfunc_param_match_suffix() to btf.c.
  - bpf: Fix kabi for bpf_ctx_arg_aux
  - bpf: add btf pointer to struct bpf_ctx_arg_aux.
  - bpf, btf: Check btf for register_bpf_struct_ops
  - selftests/bpf: Add tests for RCU lock transfer between subprogs
  - bpf: Transfer RCU lock state between subprog calls
  - selftests/bpf: Add test for static subprog call in lock cs
  - bpf: Allow calling static subprogs while holding a bpf_spin_lock
  - selftests/bpf: Suppress warning message of an unused variable.
  - bpf: Remove an unnecessary check.
  - libbpf: Add btf__new_split() API that was declared but not implemented
  - bpf: treewide: Annotate BPF kfuncs in BTF
  - bpf: btf: Add BTF_KFUNCS_START/END macro pair
  - bpf: btf: Support flags for BTF_SET8 sets
  - bpf: Fix error checks against bpf_get_btf_vmlinux().
  - libbpf: Ensure undefined bpf_attr field stays 0
  - selftests/bpf: test case for register_bpf_struct_ops().
  - bpf: export btf_ctx_access to modules.
  - libbpf: Find correct module BTFs for struct_ops maps and progs.
  - bpf, net: switch to dynamic registration
  - bpf: validate value_type
  - bpf_verifier: Fix kabi for bpf_verifier_env
  - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification.
  - bpf: Fix kabi for bpf_attr
  - bpf: pass attached BTF to the bpf_struct_ops subsystem
  - bpf: lookup struct_ops types from a given module BTF.
  - bpf: pass btf object id in bpf_map_info.
  - bpf: make struct_ops_map support btfs other than btf_vmlinux.
  - bpf: add struct_ops_tab to btf.
  - bpf, net: introduce bpf_struct_ops_desc.
  - bpf: get type information with BTF_ID_LIST
  - bpf: refactory struct_ops type initialization to a function.
  - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops
  - bpf: Introduce "volatile compare" macros
  - s390/bpf: Fix indirect trampoline generation
  - bpf: Fix dtor CFI
  - cfi: Add CFI_NOSEAL()
  - x86/cfi,bpf: Fix bpf_struct_ops CFI
  - x86/cfi,bpf: Fix bpf_callback_t CFI
  - x86/cfi,bpf: Fix BPF JIT call
  - cfi: Flip headers
  - x86, bpf: Use bpf_prog_pack for bpf trampoline
  - bpf: Fix kabi-breakage for bpf_tramp_image
  - bpf: Use arch_bpf_trampoline_size
  - bpf: Add arch_bpf_trampoline_size()
  - bpf, x86: Adjust arch_prepare_bpf_trampoline return value
  - bpf: Add helpers for trampoline image management
  - bpf: Adjust argument names of arch_prepare_bpf_trampoline()
  - bpf: Let bpf_prog_pack_free handle any pointer
  - selftests/bpf: Add lazy global subprog validation tests
  - bpf: Fix kabi-breakage for bpf_func_info_aux
  - bpf: Validate global subprogs lazily
  - bpf: Emit global subprog name in verifier logs
  - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly
  - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg
  - selftests/bpf: Add test for using css_task iter in sleepable progs
  - selftests/bpf: Add tests for css_task iter combining with cgroup iter
  - bpf: Relax allowlist for css_task iter
  - bpf: Add __bpf_hook_{start,end} macros
  - bpf: Add __bpf_kfunc_{start,end}_defs macros
  - bpf: fix compilation error without CGROUPS
  - kbuild: avoid too many execution of scripts/pahole-flags.sh
  - selftests/bpf: Add tests for open-coded task and css iter
  - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c
  - bpf: Let bpf_iter_task_new accept null task ptr
  - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS
  - bpf: Introduce css open-coded iterator kfuncs
  - bpf: Introduce task open coded iterator kfuncs
  - bpf: Introduce css_task open-coded iterator kfuncs
  - cgroup: Prepare for using css_task_iter_*() in BPF
  - selftests/bpf: Add tests for open-coded task_vma iter
  - bpf: Introduce task_vma open-coded iterator kfuncs
  - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c
  - bpf: Don't explicitly emit BTF for struct btf_iter_num
  - selftests/bpf: Test pinning bpf timer to a core
  - bpf: Add ability to pin bpf timer to calling CPU
  - bpf: Charge modmem for struct_ops trampoline
  - mfs: remove anon_file item from struct mfs_cache_object
  - sw64: fix compile error with missing header file
  - sw64: update openeuler_defconfig and remove junzhang_defconfig
  - cpufreq: Add CPU frequency policy change notification support
  - apei/ghes: Add Zhaoxin platform support for ghes_edac
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - x86/cpu: detect extended topology for Zhaoxin CPUs
  - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning
  - ALSA: HDA: Add Centaur HDMI Controller and Codec support
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - efi/cper: Add Zhaoxin mem error decode for KH-50000
  - efi/cper: Add Zhaoxin cache error decode
  - efi/cper: Add Zhaoxin micro-architectural error decode
  - efi/cper: Add Zhaoxin non standard cper error decode
  - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000
  - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode
  - hwmon: zhaoxin-cputemp: Update for KX-8000
  - zhaoxin: Update hardware random number generator driver
  - ALSA: hda: Add support for Zhaoxin SB HDAC controller
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
  - x86/microcode/intel: Enable staging when available
  - x86/microcode/intel: Support mailbox transfer
  - x86/microcode/intel: Implement staging handler
  - x86/microcode/intel: Define staging state struct
  - x86/microcode/intel: Establish staging control logic
  - x86/microcode: Introduce staging step to reduce late-loading time
  - x86/cpu/topology: Make primary thread mask available with SMP=n
  - platform/x86/amd: Fix memory leak in wbrf_record()
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
  - x86/amd_node: Fix AMD root device caching
  - x86/amd_node: Add support for debugfs access to SMN registers
  - x86/amd_node: Add SMN offsets to exclusive region access
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure
  - platform/x86/amd/hsmp: Use name space while exporting module symbols
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c
  - platform/x86/amd/hsmp: Move structure and macros to header file
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer
  - platform/x86/amd/hsmp: Create wrapper function init_acpi()
  - platform/x86/amd/hsmp: Create hsmp/ directory
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
  - platform/x86/amd/hsmp: switch to use device_add_groups()
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
  - platform/x86/amd/hsmp: Add support for ACPI based probing
  - platform/x86/amd/hsmp: Restructure sysfs group creation
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs
  - platform/x86/amd/hsmp: Create static func to handle platdev
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
  - platform/x86/amd/hsmp: Move hsmp_test to probe
  - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature
  - platform/x86/amd/hsmp: Fix iomem handling
  - platform/x86/amd/hsmp: improve the error log
  - platform/x86/amd/hsmp: add support for metrics tbl
  - platform/x86/amd/hsmp: create plat specific struct
  - x86/amd_node: Use defines for SMN register offsets
  - x86/amd_node: Remove dependency on AMD_NB
  - x86/amd_node: Update __amd_smn_rw() error paths
  - x86/amd_nb: Move SMN access code to a new amd_node driver
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id()
  - x86/amd_nb: Enhance SMN access error checking
  - EDAC/amd64: Check return value of amd_smn_read()
  - EDAC/amd64: Remove unused register accesses
  - x86/amd_nb: Simplify function 3 search
  - x86/amd_nb: Use topology info to get AMD node count
  - x86/amd_nb: Simplify root device search
  - x86/amd_nb: Simplify function 4 search
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
  - x86/amd_nb: Add AMD Family MI300 PCI IDs
  - x86: Start moving AMD node functionality out of AMD_NB
  - crypto: ccp - Add support for PCI device 0x17D8
  - KVM: arm64: Add SMCCC interface for pvtimer status
  - KVM: arm64: Export vtimer_is_irqbypass for external use
  - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT
  - crypto: ccp: SM2 ccp encryption support Hygon model 10h
  - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm
  - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs()
  - x86/fpu: Remove export of mxcsr_feature_mask
  - x86/pkeys: Simplify PKRU update in signal frame
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE
  - x86/fpu: Log XSAVE disablement consistently
  - selftests/x86/apx: Add APX test
  - x86/fpu/apx: Enable APX state support
  - x86/fpu/apx: Disallow conflicting MPX presence
  - x86/fpu/apx: Define APX state component
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - x86/cpufeatures: Add X86_FEATURE_APX
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro
  - x86/fpu/xstate: Remove xstate offset check
  - x86/fpu/xstate: Simplify print_xstate_features()
  - selftests/x86/avx: Add AVX tests
  - selftests/x86/xstate: Clarify supported xstates
  - selftests/x86/xstate: Consolidate test invocations into a single entry
  - selftests/x86/xstate: Introduce signal ABI test
  - selftests/x86/xstate: Refactor ptrace ABI test
  - selftests/x86/xstate: Refactor context switching test
  - selftests/x86/xstate: Enumerate and name xstate components
  - selftests/x86/xstate: Refactor XSAVE helpers for general use
  - selftests/x86: Consolidate redundant signal helper functions
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd
  - x86/pkeys: Change caller of update_pkru_in_sigframe()
  - x86/pkeys: Update PKRU to enable all pkeys before XSAVE
  - x86/pkeys: Add helper functions to update PKRU on the sigframe
  - selftests/x86: fix Makefile dependencies to work with clang
  - selftests/x86: remove (or use) unused variables and functions
  - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide()
  - LoongArch: KVM: Add hypercall service support for usermode VMM
  - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig
  - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI
  - cgroup/dmem: avoid pool UAF
  - cgroup/dmem: avoid rcu warning when unregister region
  - cgroup/dmem: fix NULL pointer dereference when setting max
  - cgroup/dmem: Don't open-code css_for_each_descendant_pre
  - cgroup/rdma: Drop bogus PAGE_COUNTER select
  - doc/cgroup: Fix title underline length
  - cgroup/dmem: Fix parameters documentation
  - kernel/cgroup: Remove the unused variable climit
  - cgroup/dmem: Select PAGE_COUNTER
  - kernel/cgroup: Add "dmem" memory accounting cgroup
  - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG
  - mm/page_counter: move calculating protection values to page_counter
  - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
  - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE
  - KVM: x86: Advertise support for AMD's PREFETCHI
  - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps
  - KVM: x86: Explicitly track feature flags that are enabled at runtime
  - KVM: x86: Explicitly track feature flags that require vendor enabling
  - KVM: x86: Rename "SF" macro to "SCATTERED_F"
  - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed
  - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data
  - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Add a macro to init CPUID features that KVM emulates in software
  - KVM: x86: Add a macro to init CPUID features that ignore host kernel support
  - KVM: x86: Harden CPU capabilities processing against out-of-scope features
  - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions
  - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper
  - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features
  - KVM: x86: Add a macro to init CPUID features that are 64-bit only
  - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code
  - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}()
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID
  - KVM: x86: Advertise AMD_IBPB_RET to userspace
  - KVM: SVM: Invert handling of SEV and SEV_ES feature flags
  - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1]
  - KVM: x86: Add SBPB support
  - KVM: x86: Add IBPB_BRTYPE support
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - hwmon/k10temp: Add support for Hygon family 18h model 18h
  - mmc: sdhci-pci: Add support for Hygon SD controller
  - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - sw64: fix compile error with missing arch-specific header file
  - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default
  - smb/server: update some misguided comment of smb2_0_server_cmds proc
  - smb/server: fix return value of smb2_oplock_break()
  - smb/server: fix return value of smb2_ioctl()
  - smb/server: fix return value of smb2_query_dir()
  - smb/server: fix return value of smb2_notify()
  - smb/server: fix return value of smb2_read()
  - drivers/ub/sentry: add oom rate limit
  - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons
  - nvme-fc: release admin tagset if init fails
  - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - spi: dw: Add device HID for Hygon SPI controller
  - ACPI/IORT: Add PMCG platform information for 162001900
  - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
  - regmap: maple: free entry on mas_store_gfp() failure
  - net: usb: pegasus: validate USB endpoints
  - tools headers: Update the x86 headers with the kernel sources
  - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself
  - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
  - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
  - mptcp: fix a race in mptcp_pm_del_add_timer()
  - HID: amd_sfh: Stop sensor before starting
  - pmdomain: imx: Fix reference count leak in imx_gpc_remove
  - pmdomain: imx-gpc: Convert to platform remove callback returning void
  - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
  - uio_hv_generic: Set event for all channels on the device
  - tracing/tools: Fix incorrcet short option in usage text for --threads
  - ALSA: usb-audio: fix uac2 clock source at terminal parser
  - s390/mm: Fix __ptep_rdp() inline assembly
  - kconfig/nconf: Initialize the default locale at startup
  - kconfig/mconf: Initialize the default locale at startup
  - net: tls: Cancel RX async resync request on rcd_delta overflow
  - selftests: net: use BASH for bareudp testing
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations
  - scsi: core: Fix a regression triggered by scsi_host_busy()
  - cifs: fix typo in enable_gcm_256 module parameter
  - bcma: don't register devices disabled in OF
  - LoongArch: Use UAPI types in ptrace UAPI header
  - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
  - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
  - s390/ctcm: Fix double-kfree
  - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
  - net: dsa: hellcreek: fix missing error handling in LED registration
  - drm/tegra: Add call to put_pid()
  - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
  - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
  - xfrm: Prevent locally generated packets from direct output in tunnel mode
  - xfrm: Determine inner GSO type from packet inner protocol
  - drm/amd/display: Move sleep into each retry for retrieve_link_cap()
  - drm/amd/display: Increase DPCD read retries
  - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
  - drm/tegra: dc: Fix reference leak in tegra_dc_couple()
  - mptcp: do not fallback when OoO is present
  - mptcp: avoid unneeded subflow-level drops
  - mptcp: fix premature close in case of fallback
  - mptcp: fix ack generation for fallback msk
  - mptcp: fix race condition in mptcp_schedule_work()
  - LoongArch: Don't panic if no valid cache info for PCI
  - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
  - MIPS: Malta: Fix !EVA SOC-it PCI MMIO
  - Input: pegasus-notetaker - fix potential out-of-bounds access
  - Input: imx_sc_key - fix memory corruption on unload
  - Input: goodix - add support for ACPI ID GDIX1003
  - Input: cros_ec_keyb - fix an invalid memory access
  - net: dsa: microchip: lan937x: Fix RGMII delay tuning
  - smb: client: introduce close_cached_dir_locked()
  - mptcp: Disallow MPTCP subflows from sockmap
  - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
  - shmem: fix tmpfs reconfiguration (remount) when noswap is set
  - mtd: rawnand: cadence: fix DMA device NULL pointer dereference
  - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - crypto: ccp: Support SM4-GCM for hygon ccp
  - crypto: ccp: Support SM4-XTS for hygon ccp
  - tools headers: Update the KVM headers with the kernel sources
  - KVM: SVM: Add Idle HLT intercept support
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept
  - perf vendor events amd: Update Zen 5 data cache fill events
  - perf vendor events amd: Add Zen 5 data fabric metrics
  - perf vendor events amd: Add Zen 5 data fabric events
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
  - perf/amd/ibs: Prevent leaking sensitive data to userspace
  - perf/x86: Check data address for IBS software filter
  - perf/x86: Relax privilege filter restriction on AMD IBS
  - perf/core: Export perf_exclude_event()
  - KVM: x86: Disallow hugepages when memory attributes are mixed
  - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro
  - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure()
  - x86/bugs: Add RSB mitigation document
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
  - x86/bugs: Rename entry_ibpb() to write_ibpb()
  - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel
  - perf/amd/ibs: Update DTLB/PageSize decode logic
  - perf/amd/ibs: Add support for OP Load Latency Filtering
  - perf/amd/ibs: Ceil sample_period to min_period
  - perf/amd/ibs: Add ->check_period() callback
  - perf/amd/ibs: Add PMU specific minimum period
  - perf/amd/ibs: Don't allow freq mode event creation through ->config interface
  - perf/amd/ibs: Remove pointless sample period check
  - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros
  - amd-pstate: Switch to amd-pstate by default on some Server platforms
  - cpufreq: amd-pstate: enable shared memory type CPPC by default
  - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled()
  - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing
  - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
  - tools headers: Sync x86 headers with kernel sources
  - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag
  - perf/x86/intel: Use early_initcall() to hook bts_init()
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use
  - perf/x86/intel: Optimize PEBS extended config
  - perf/x86/intel: Check PEBS dyn_constraints
  - perf/x86/intel: Add a check for dynamic constraints
  - perf/x86/intel: Add counter group support for arch-PEBS
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR
  - perf/x86/intel: Process arch-PEBS records or record fragments
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions
  - perf/x86/intel: Initialize architectural PEBS
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call
  - perf/x86: Fix NULL event access and potential PEBS record loss
  - perf/x86: Remove redundant is_x86_event() prototype
  - perf/core: Check sample_type in perf_sample_save_brstack
  - perf/core: Check sample_type in perf_sample_save_callchain
  - perf/x86/intel/ds: Remove redundant assignments to sample.period
  - perf/x86/intel: Introduce pairs of PEBS static calls
  - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs
  - perf/x86/intel: Decouple BTS initialization from PEBS initialization
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


