# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.47.0.75
changelog:
  - lockdown: Fix kexec lockdown bypass with ima policy
  - fbmem: Check virtual screen sizes in fb_set_var()
  - fbcon: Prevent that screen size is smaller than font size
  - fbcon: Disallow setting font bigger than screen size
  - inotify: show inotify mask flags in proc fdinfo
  - block: prevent lockdep false positive warning about 'bd_mutex'
  - block: fix that part scan is disabled in device_add_disk()
  - block: Fix warning in bd_link_disk_holder()
  - ucounts: add missing data type changes
  - bpf: Don't redirect packets with invalid pkt_len
  - Revert "net: micrel: fix KS8851_MLL Kconfig"
  - block/compat_ioctl: fix range check in BLKGETSIZE
  - staging: ion: Prevent incorrect reference counting behavour
  - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller
  - can: isotp: stop timeout monitoring when no first frame was sent
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - ext4: fix overhead calculation to account for the reserved gdt blocks
  - ext4, doc: fix incorrect h_reserved size
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - ext4: fix fallocate to use file_modified to update permissions consistently
  - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event
  - powerpc/perf: Fix power9 event alternatives
  - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
  - KVM: PPC: Fix TCE handling for VFIO
  - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
  - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - sched/pelt: Fix attach_entity_load_avg() corner case
  - arm_pmu: Validate single/group leader events
  - ARC: entry: fix syscall_trace_exit argument
  - e1000e: Fix possible overflow in LTR decoding
  - ASoC: soc-dapm: fix two incorrect uses of list iterator
  - gpio: Request interrupts after IRQ is initialized
  - openvswitch: fix OOB access in reserve_sfa_size()
  - xtensa: fix a7 clobbering in coprocessor context load/store
  - xtensa: patch_text: Fixup last cpu should be master
  - net: atlantic: invert deep par in pm functions, preventing null derefs
  - dma: at_xdmac: fix a missing check on list iterator
  - ata: pata_marvell: Check the 'bmdma_addr' beforing reading
  - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
  - mm, hugetlb: allow for "high" userspace addresses
  - EDAC/synopsys: Read the error count from the correct register
  - nvme-pci: disable namespace identifiers for Qemu controllers
  - nvme: add a quirk to disable namespace identifiers
  - stat: fix inconsistency between struct stat and struct compat_stat
  - scsi: qedi: Fix failed disconnect handling
  - net: macb: Restart tx only if queue pointer is lagging
  - drm/msm/mdp5: check the return of kzalloc()
  - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
  - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
  - mt76: Fix undefined behavior due to shift overflowing the constant
  - net: atlantic: Avoid out-of-bounds indexing
  - cifs: Check the IOCB_DIRECT flag, not O_DIRECT
  - vxlan: fix error return code in vxlan_fdb_append
  - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes
  - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
  - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
  - reset: tegra-bpmp: Restore Handle errors in BPMP response
  - ARM: vexpress/spc: Avoid negative array index when !SMP
  - arm64: mm: fix p?d_leaf()
  - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad()
  - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
  - dmaengine: idxd: add RO check for wq max_transfer_size write
  - dmaengine: idxd: add RO check for wq max_batch_size write
  - net: stmmac: Use readl_poll_timeout_atomic() in atomic state
  - netlink: reset network and mac headers in netlink_dump()
  - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6
  - ipv6: make ip6_rt_gc_expire an atomic_t
  - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
  - net/sched: cls_u32: fix possible leak in u32_init_knode()
  - ip6_gre: Fix skb_under_panic in __gre6_xmit()
  - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
  - net/packet: fix packet_sock xmit return value checking
  - net/smc: Fix sock leak when release after smc_shutdown()
  - rxrpc: Restore removed timer deletion
  - igc: Fix BUG: scheduling while atomic
  - igc: Fix infinite loop in release_swfw_sync
  - esp: limit skb_page_frag_refill use to a single page
  - spi: spi-mtk-nor: initialize spi controller after resume
  - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources
  - dmaengine: imx-sdma: Fix error checking in sdma_event_remap
  - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use
  - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
  - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNP
  - ALSA: usb-audio: Clear MIDI port active flag after draining
  - gfs2: assign rgrp glock before compute_bitstructs
  - perf tools: Fix segfault accessing sample_id xyarray
  - tracing: Dump stacktrace trigger to the corresponding instance
  - mm: page_alloc: fix building error on -Werror=array-compare
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.48.0.76
changelog:
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  - RDMA/hns: Recover 1bit-ECC error of RAM on chip
  - RDMA/hns: Refactor the abnormal interrupt handler function
  - RDMA/hns: Fix incorrect clearing of interrupt status register
  - RDMA/hns: Fix the wrong type of return value of the interrupt handler
  - RDMA/hns: Remove unused abnormal interrupt of type RAS
  - ext4: Fix race when reusing xattr blocks
  - ext4: Unindent codeblock in ext4_xattr_block_set()
  - ext4: Remove EA inode entry from mbcache on inode eviction
  - mbcache: Add functions to delete entry if unused
  - mbcache: Don't reclaim used entries
  - md/raid6: refactor raid5_read_one_chunk
  - md/raid10: enable io accounting
  - md/raid1: enable io accounting
  - md/raid1: rename print_msg with r1bio_existed
  - md/raid5: avoid redundant bio clone in raid5_read_one_chunk
  - md: add io accounting for raid0 and raid5
  - mmc: rtsx: add 74 Clocks in power on flow
  - PCI: aardvark: Fix reading MSI interrupt number
  - PCI: aardvark: Clear all MSIs at setup
  - dm: interlock pending dm_io and dm_wait_for_bios_completion
  - rcu: Apply callbacks processing time limit only on softirq
  - rcu: Fix callbacks processing time limit retaining cond_resched()
  - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
  - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs
  - KVM: x86: Do not change ICR on write to APIC_SELF_IPI
  - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
  - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu
  - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  - btrfs: always log symlinks in full mode
  - smsc911x: allow using IRQ0
  - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer
  - bnxt_en: Fix unnecessary dropping of RX packets
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
  - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational
  - net: emaclite: Add error handling for of_address_to_resource()
  - net: cpsw: add missing of_node_put() in cpsw_probe_dt()
  - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux()
  - net: dsa: mt7530: add missing of_node_put() in mt7530_setup()
  - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
  - NFSv4: Don't invalidate inode attributes on delegation return
  - RDMA/siw: Fix a condition race issue in MPA request processing
  - selftests/seccomp: Don't call read() on TTY from background pgrp
  - net/mlx5: Avoid double clear or set of sync reset requested
  - net/mlx5e: Fix the calling of update_buffer_lossy() API
  - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release
  - net/mlx5e: Fix trust state reset in reload
  - ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  - hwmon: (adt7470) Fix warning on module removal
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set)
  - can: grcan: only use the NAPI poll budget for RX
  - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs
  - can: grcan: use ofdev->dev when allocating DMA memory
  - can: isotp: remove re-binding of bound socket
  - can: grcan: grcan_close(): fix deadlock
  - s390/dasd: Fix read inconsistency for ESE DASD devices
  - s390/dasd: Fix read for ESE with blksize < 4k
  - s390/dasd: prevent double format of tracks for ESE devices
  - s390/dasd: fix data corruption for ESE devices
  - ASoC: meson: Fix event generation for AUI CODEC mux
  - ASoC: meson: Fix event generation for G12A tohdmi mux
  - ASoC: meson: Fix event generation for AUI ACODEC mux
  - ASoC: wm8958: Fix change notifications for DSP controls
  - ASoC: da7219: Fix change notifications for tone generator frequency
  - genirq: Synchronize interrupt thread startup
  - net: stmmac: disable Split Header (SPH) for Intel platforms
  - firewire: core: extend card->lock in fw_core_handle_bus_reset
  - firewire: remove check of list iterator against head past the loop body
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT
  - iommu/vt-d: Calculate mask for non-aligned flushes
  - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id
  - gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
  - mmc: core: Set HS clock speed before sending HS CMD13
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
  - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
  - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
  - parisc: Merge model and model name into one line in /proc/cpuinfo
  - MIPS: Fix CP0 counter erratum detection for R4k CPUs
  - perf symbol: Remove arch__symbols__fixup_end()
  - tty: n_gsm: fix software flow control handling
  - tty: n_gsm: fix incorrect UA handling
  - tty: n_gsm: fix reset fifo race condition
  - tty: n_gsm: fix wrong command frame length field encoding
  - tty: n_gsm: fix wrong command retry handling
  - tty: n_gsm: fix missing explicit ldisc flush
  - tty: n_gsm: fix wrong DLCI release order
  - tty: n_gsm: fix insufficient txframe size
  - netfilter: nft_socket: only do sk lookups when indev is available
  - tty: n_gsm: fix malformed counter for out of frame data
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
  - tty: n_gsm: fix mux cleanup after unregister tty device
  - tty: n_gsm: fix decoupled mux resource
  - tty: n_gsm: fix restart handling via CLD command
  - perf symbol: Update symbols__fixup_end()
  - perf symbol: Pass is_kallsyms to symbols__fixup_end()
  - x86/cpu: Load microcode during restore_processor_state()
  - thermal: int340x: Fix attr.show callback prototype
  - net: ethernet: stmmac: fix write to sgmii_adapter_base
  - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
  - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time
  - zonefs: Clear inode information flags on inode creation
  - zonefs: Fix management of open zones
  - powerpc/perf: Fix 32bit compile
  - drivers: net: hippi: Fix deadlock in rr_close()
  - cifs: destage any unwritten data to the server before calling copychunk_write
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  - ASoC: wm8731: Disable the regulator when probing fails
  - ASoC: Intel: soc-acpi: correct device endpoints for max98373
  - tcp: fix F-RTO may not work correctly when receiving DSACK
  - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits"
  - ibmvnic: fix miscellaneous checks
  - ixgbe: ensure IPsec VF<->PF compatibility
  - net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
  - bnx2x: fix napi API usage sequence
  - tls: Skip tls_append_frag on zero copy size
  - drm/amd/display: Fix memory leak in dcn21_clock_source_create
  - drm/amdkfd: Fix GWS queue count
  - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
  - net: phy: marvell10g: fix return value on error
  - net: bcmgenet: hide status block before TX timestamping
  - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
  - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
  - tcp: make sure treq->af_specific is initialized
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
  - ip6_gre: Make o_seqno start from 0 in native mode
  - ip_gre: Make o_seqno start from 0 in native mode
  - net/smc: sync err code when tcp connection was refused
  - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
  - pinctrl: pistachio: fix use of irq_of_parse_and_map()
  - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
  - ARM: dts: imx6ull-colibri: fix vqmmc regulator
  - sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  - wireguard: device: check for metadata_dst with skb_valid_dst()
  - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested
  - tcp: md5: incorrect tcp_header_len for incoming connections
  - pinctrl: rockchip: fix RK3308 pinmux bits
  - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook
  - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion
  - net: dsa: Add missing of_node_put() in dsa_port_link_register_of
  - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
  - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout
  - pinctrl: mediatek: moore: Fix build error
  - ipvs: correctly print the memory size of ip_vs_conn_tab
  - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
  - ARM: dts: am3517-evm: Fix misc pinmuxing
  - ARM: dts: Fix mmc order for omap3-gta04
  - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
  - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
  - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
  - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
  - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
  - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
  - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  - phy: samsung: exynos5250-sata: fix missing device put in probe error paths
  - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  - USB: Fix xhci event ring dequeue pointer ERDP update issue
  - mtd: rawnand: fix ecc parameters for mt7622
  - iio:imu:bmi160: disable regulator in error path
  - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
  - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
  - video: fbdev: udlfb: properly check endpoint type
  - iocost: don't reset the inuse weight of under-weighted debtors
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  - riscv: patch_text: Fixup last cpu should be master
  - hex2bin: fix access beyond string end
  - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
  - arch_topology: Do not set llc_sibling if llc_id is invalid
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  - serial: 8250: Also set sticky MCR bits in console restoration
  - serial: imx: fix overrun interrupts in DMA mode
  - usb: phy: generic: Get the vbus supply
  - usb: cdns3: Fix issue for clear halt endpoint
  - usb: dwc3: gadget: Return proper request status
  - usb: dwc3: core: Only handle soft-reset in DCTL
  - usb: dwc3: core: Fix tx/rx threshold settings
  - usb: dwc3: Try usb-role-switch first in dwc3_drd_init
  - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  - usb: gadget: uvc: Fix crash when encoding data for usb request
  - usb: typec: ucsi: Fix role swapping
  - usb: typec: ucsi: Fix reuse of completion structure
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - iio: imu: inv_icm42600: Fix I2C init possible nack
  - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
  - iio: dac: ad5446: Fix read_raw not returning set value
  - iio: dac: ad5592r: Fix the missing return value.
  - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
  - xhci: stop polling roothubs after shutdown
  - xhci: Enable runtime PM on second Alderlake controller
  - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
  - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
  - USB: quirks: add STRING quirk for VCOM device
  - USB: quirks: add a Realtek card reader
  - usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  - lightnvm: disable the subsystem


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.49.0.77
changelog:
  - netfilter: nf_queue: do not allow packet truncation below transport header offset
  - io_uring: use separate list entry for iopoll requests
  - io_uring: add missing item types for various requests
  - io_uring:drop identity before creating a private one
  - io-wq: Switch io_wqe_worker's fs before releasing request
  - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
  - mm: fix missing cache flush for all tail pages of compound page
  - Bluetooth: Fix the creation of hdev->name
  - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
  - nfp: bpf: silence bitwise vs. logical OR warning
  - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types
  - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
  - regulator: consumer: Add missing stubs to regulator/consumer.h
  - MIPS: Use address-of operator on section symbols


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.51.0.79
changelog:
  - crypto: arm64/poly1305 - fix a read out-of-bound
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec
  - net_sched: cls_route: remove from list when handle is 0
  - tty: serial: 8250: 8250_port: Move prototypes to shared location
  - mm/slub: add missing TID updates on slab deactivation
  - signal/seccomp: Dump core when there is only one live thread
  - netfilter: nft_compat: use nfnetlink_unicast()
  - netfilter: use nfnetlink_unicast()
  - dm-mpath: fix UAF in multipath_message()
  - tun: avoid double free in tun_free_netdev
  - efi/libstub: arm64: Fix KASLR and memmap= collision
  - efi/libstub: arm64: support strchr function for EFI stub
  - Revert "mm/page_cache_limit: add pagecache limit proc interface"
  - Revert "mm/page_cache_limit: create kernel thread for page cache limit"
  - Revert "mm/page_cache_limit: calculate reclaim pages for each node"
  - Revert "mm/page_cache_limit: shrink page cache"
  - Revert "mm/page_cache_limit: reconfiguration about page cache limit when memory plug/unplug"
  - Revert "mm/page_cache_limit: do shrink_page_cache when adding page to page cache"
  - Revert "mm/page_cache_limit: add support for droping caches for target node"
  - drivers/perf: hisi: Add Support for CPA PMU
  - drivers/perf: hisi: Associate PMUs in SICL with CPUs online
  - drivers/perf: hisi: Add driver for HiSilicon PCIe PMU
  - SUNRPC: Fix fall-through warnings for Clang
  - usb: gadget: uvc: allow for application to cleanly shutdown
  - usb: gadget: uvc: rename function to be more consistent
  - ping: fix address binding wrt vrf
  - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map
  - net: phy: Fix race condition on link status change
  - SUNRPC: Don't call connect() more than once on a TCP socket
  - SUNRPC: Prevent immediate close+reconnect
  - SUNRPC: Clean up scheduling of autoclose
  - drm/vmwgfx: Initialize drm_mode_fb_cmd2
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
  - net: atlantic: always deep reset on pm op, fixing up my null deref regression
  - i40e: i40e_main: fix a missing check on list iterator
  - drm/nouveau/tegra: Stop using iommu_present()
  - ceph: fix setting of xattrs on async created inodes
  - serial: 8250_mtk: Fix register address for XON/XOFF character
  - serial: 8250_mtk: Fix UART_EFR register address
  - slimbus: qcom: Fix IRQ check in qcom_slim_probe
  - USB: serial: option: add Fibocom MA510 modem
  - USB: serial: option: add Fibocom L610 modem
  - USB: serial: qcserial: add support for Sierra Wireless EM7590
  - USB: serial: pl2303: add device id for HP LM930 Display
  - usb: typec: tcpci_mt6360: Update for BMC PHY setting
  - usb: typec: tcpci: Don't skip cleanup in .remove() on error
  - usb: cdc-wdm: fix reading stuck on device close
  - tty: n_gsm: fix mux activation issues in gsm_config()
  - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
  - firmware_loader: use kernel credentials when reading firmware
  - tcp: resalt the secret every 10 seconds
  - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT
  - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation
  - s390: disable -Warray-bounds
  - ASoC: ops: Validate input values in snd_soc_put_volsw_range()
  - ASoC: max98090: Generate notifications on changes for custom control
  - ASoC: max98090: Reject invalid values in custom control put()
  - hwmon: (f71882fg) Fix negative temperature
  - gfs2: Fix filesystem block deallocation for short writes
  - tls: Fix context leak on tls_device_down
  - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
  - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending
  - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down()
  - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral
  - net/sched: act_pedit: really ensure the skb is writable
  - s390/lcs: fix variable dereferenced before check
  - s390/ctcm: fix potential memory leak
  - s390/ctcm: fix variable dereferenced before check
  - selftests: vm: Makefile: rename TARGETS to VMTARGETS
  - hwmon: (ltq-cputemp) restrict it to SOC_XWAY
  - dim: initialize all struct fields
  - ionic: fix missing pci_release_regions() on error in ionic_probe()
  - nfs: fix broken handling of the softreval mount option
  - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
  - net: sfc: fix memory leak due to ptp channel
  - sfc: Use swap() instead of open coding it
  - netlink: do not reset transport header in netlink_recvmsg()
  - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()
  - ipv4: drop dst in multicast routing path
  - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters
  - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0
  - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups
  - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted
  - net: Fix features skip in for_each_netdev_feature()
  - mac80211: Reset MBSSID parameters upon connection
  - hwmon: (tmp401) Add OF device ID table
  - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing
  - batman-adv: Don't skb_split skbuffs with frag_list
  - !68 scsi: mpt3sas: Transition IOC to Ready state during shutdown
  - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown
  - !48 Fix kabi header file being repeatedly referenced by the same file
  - scsi: mpt3sas: Transition IOC to Ready state during shutdown
  - Fix kabi header file being repeatedly referenced by the same file


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.52.0.80
changelog:
  - module: check for exit sections in layout_sections() instead of module_init_section()
  - afs: Fix afs_getattr() to refetch file status if callback break occurred
  - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()
  - module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD
  - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group
  - Input: ili210x - fix reset timing
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs
  - net: atlantic: verify hw_head_ lies within TX buffer ring
  - net: atlantic: add check for MAX_SKB_FRAGS
  - net: atlantic: reduce scope of is_rsc_complete
  - net: atlantic: fix "frag[0] not initialized"
  - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
  - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
  - nl80211: fix locking in nl80211_set_tx_bitrate_mask()
  - selftests: add ping test with ping_group_range tuned
  - nl80211: validate S1G channel width
  - mac80211: fix rx reordering with non explicit / psmp ack policy
  - scsi: qla2xxx: Fix missed DMA unmap for aborted commands
  - perf bench numa: Address compiler error on s390
  - gpio: mvebu/pwm: Refuse requests with inverted polarity
  - gpio: gpio-vf610: do not touch other bits when set the target bit
  - riscv: dts: sifive: fu540-c000: align dma node name with dtschema
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  - igb: skip phy status check where unavailable
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  - net: af_key: add check for pfkey_broadcast in function pfkey_process
  - net/mlx5e: Properly block LRO when XDP is enabled
  - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
  - net/qla3xxx: Fix a test in ql_reset_work()
  - clk: at91: generated: consider range when calculating best rate
  - ice: fix possible under reporting of ethtool Tx and Rx statistics
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: systemport: Fix an error handling path in bcm_sysport_probe()
  - net/sched: act_pedit: sanitize shift argument before usage
  - net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm
  - net: macb: Increment rx bd head after allocating skb and buffer
  - net: ipa: record proper RX transaction count
  - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group
  - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl
  - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi
  - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
  - drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
  - libceph: fix potential use-after-free on linger ping and resends
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE
  - arm64: paravirt: Use RCU read locks to guard stolen_time
  - KVM: x86/mmu: Update number of zapped pages even if page list is stable
  - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
  - Fix double fget() in vhost_net_set_backend()
  - selinux: fix bad cleanup on error in hashtab_duplicate()
  - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise
  - ALSA: wavefront: Proper check of get_user() error
  - ALSA: usb-audio: Restore Rane SL-1 quirk
  - nilfs2: fix lockdep warnings during disk space reclamation
  - nilfs2: fix lockdep warnings in page operations for btree nodes
  - platform/chrome: cros_ec_debugfs: detach log reader wq from devm
  - drbd: remove usage of list iterator variable after loop
  - MIPS: lantiq: check the return value of kzalloc()
  - fs: fix an infinite loop in iomap_fiemap
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - nvme-multipath: fix hang when disk goes live over reconnect
  - tools/virtio: compile with -pthread
  - vhost_vdpa: don't setup irq offloading when irq_num < 0
  - s390/pci: improve zpci_dev reference counting
  - ALSA: hda/realtek: Enable headset mic on Lenovo P360
  - crypto: x86/chacha20 - Avoid spurious jumps to other functions
  - crypto: stm32 - fix reference leak in stm32_crc_remove
  - rtc: sun6i: Fix time overflow handling
  - gfs2: Disable page faults during lockless buffered reads
  - nvme-pci: add quirks for Samsung X5 SSDs
  - Input: stmfts - fix reference leak in stmfts_input_open
  - Input: add bounds checking to input_set_capability()
  - um: Cleanup syscall_handler_t definition/cast, fix warning
  - rtc: pcf2127: fix bug when reading alarm registers
  - rtc: fix use-after-free on device removal
  - igc: Update I226_K device ID
  - igc: Remove phy->type checking
  - igc: Remove _I_PHY_ID checking
  - io_uring: always grab file table for deferred statx
  - usb: gadget: fix race when gadget driver register via ioctl


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.53.0.81
changelog:
  - net: fix sk_wmem_schedule() and sk_rmem_schedule() errors
  - KVM: arm64: Use generic KVM xfer to guest work function
  - entry: KVM: Allow use of generic KVM entry w/o full generic support
  - KVM: arm64: Record number of signal exits as a vCPU stat
  - VFS: Rolling Back the fmode macro definition and structure members
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback
  - Revert "NFS: Use of mapping_set_error() results in spurious errors"
  - random: Fix kabi change of get_random_bytes()
  - random: Fix kabi change due to enum cpuhp_state
  - ALSA: ctxfi: Add SB046x PCI ID
  - random: check for signals after page of pool writes
  - random: wire up fops->splice_{read,write}_iter()
  - random: convert to using fops->write_iter()
  - random: convert to using fops->read_iter()
  - random: unify batched entropy implementations
  - random: move randomize_page() into mm where it belongs
  - random: move initialization functions out of hot pages
  - random: make consistent use of buf and len
  - random: use proper return types on get_random_{int,long}_wait()
  - random: remove extern from functions in header
  - random: use static branch for crng_ready()
  - random: credit architectural init the exact amount
  - random: handle latent entropy and command line from random_init()
  - random: use proper jiffies comparison macro
  - random: remove ratelimiting for in-kernel unseeded randomness
  - random: move initialization out of reseeding hot path
  - random: avoid initializing twice in credit race
  - random: use symbolic constants for crng_init states
  - siphash: use one source of truth for siphash permutations
  - random: help compiler out with fast_mix() by using simpler arguments
  - random: do not use input pool from hard IRQs
  - random: order timer entropy functions below interrupt functions
  - random: do not pretend to handle premature next security model
  - random: use first 128 bits of input as fast init
  - random: do not use batches when !crng_ready()
  - random: insist on random_get_entropy() existing in order to simplify
  - xtensa: use fallback for random_get_entropy() instead of zero
  - sparc: use fallback for random_get_entropy() instead of zero
  - um: use fallback for random_get_entropy() instead of zero
  - x86/tsc: Use fallback for random_get_entropy() instead of zero
  - nios2: use fallback for random_get_entropy() instead of zero
  - arm: use fallback for random_get_entropy() instead of zero
  - mips: use fallback for random_get_entropy() instead of just c0 random
  - riscv: use fallback for random_get_entropy() instead of zero
  - m68k: use fallback for random_get_entropy() instead of zero
  - timekeeping: Add raw clock fallback for random_get_entropy()
  - powerpc: define get_cycles macro for arch-override
  - alpha: define get_cycles macro for arch-override
  - parisc: define get_cycles macro for arch-override
  - s390: define get_cycles macro for arch-override
  - ia64: define get_cycles macro for arch-override
  - init: call time_init() before rand_initialize()
  - random: fix sysctl documentation nits
  - random: document crng_fast_key_erasure() destination possibility
  - random: make random_get_entropy() return an unsigned long
  - random: allow partial reads if later user copies fail
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random
  - random: check for signal_pending() outside of need_resched() check
  - random: do not allow user to keep crng key around on stack
  - random: do not split fast init input in add_hwgenerator_randomness()
  - random: mix build-time latent entropy into pool at init
  - random: re-add removed comment about get_random_{u32,u64} reseeding
  - random: treat bootloader trust toggle the same way as cpu trust toggle
  - random: skip fast_init if hwrng provides large chunk of entropy
  - random: check for signal and try earlier when generating entropy
  - random: reseed more often immediately after booting
  - random: make consistent usage of crng_ready()
  - random: use SipHash as interrupt entropy accumulator
  - random: replace custom notifier chain with standard one
  - random: don't let 644 read-only sysctls be written to
  - random: give sysctl_random_min_urandom_seed a more sensible value
  - random: do crng pre-init loading in worker rather than irq
  - random: unify cycles_t and jiffies usage and types
  - random: cleanup UUID handling
  - random: only wake up writers after zap if threshold was passed
  - random: round-robin registers as ulong, not u32
  - random: clear fast pool, crng, and batches in cpuhp bring up
  - random: pull add_hwgenerator_randomness() declaration into random.h
  - random: check for crng_init == 0 in add_device_randomness()
  - random: unify early init crng load accounting
  - random: do not take pool spinlock at boot
  - random: defer fast pool mixing to worker
  - random: rewrite header introductory comment
  - random: group sysctl functions
  - random: group userspace read/write functions
  - random: group entropy collection functions
  - random: group entropy extraction functions
  - random: group crng functions
  - random: group initialization wait functions
  - random: remove whitespace and reorder includes
  - random: remove useless header comment
  - random: introduce drain_entropy() helper to declutter crng_reseed()
  - random: deobfuscate irq u32/u64 contributions
  - random: add proper SPDX header
  - random: remove unused tracepoints
  - random: remove ifdef'd out interrupt bench
  - random: tie batched entropy generation to base_crng generation
  - random: fix locking for crng_init in crng_reseed()
  - random: zero buffer after reading entropy from userspace
  - random: remove outdated INT_MAX >> 6 check in urandom_read()
  - random: make more consistent use of integer types
  - random: use hash function for crng_slow_load()
  - random: use simpler fast key erasure flow on per-cpu keys
  - random: absorb fast pool into input pool after fast load
  - random: do not xor RDRAND when writing into /dev/random
  - random: ensure early RDSEED goes through mixer on init
  - random: inline leaves of rand_initialize()
  - random: get rid of secondary crngs
  - random: use RDSEED instead of RDRAND in entropy extraction
  - random: fix locking in crng_fast_load()
  - random: remove batched entropy locking
  - random: remove use_input_pool parameter from crng_reseed()
  - random: make credit_entropy_bits() always safe
  - random: always wake up entropy writers after extraction
  - random: use linear min-entropy accumulation crediting
  - random: simplify entropy debiting
  - random: use computational hash for entropy extraction
  - random: only call crng_finalize_init() for primary_crng
  - random: access primary_pool directly rather than through pointer
  - random: continually use hwgenerator randomness
  - random: simplify arithmetic function flow in account()
  - random: selectively clang-format where it makes sense
  - random: access input_pool_data directly rather than through pointer
  - random: cleanup fractional entropy shift constants
  - random: prepend remaining pool constants with POOL_
  - random: de-duplicate INPUT_POOL constants
  - random: remove unused OUTPUT_POOL constants
  - random: rather than entropy_store abstraction, use global
  - random: remove unused extract_entropy() reserved argument
  - random: remove incomplete last_data logic
  - random: cleanup integer types
  - random: cleanup poolinfo abstraction
  - random: fix typo in comments
  - random: don't reset crng_init_cnt on urandom_read()
  - random: avoid superfluous call to RDRAND in CRNG extraction
  - random: early initialization of ChaCha constants
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
  - random: harmonize "crng init done" messages
  - random: mix bootloader randomness into pool
  - random: do not re-init if crng_reseed completes before primary init
  - random: do not sign extend bytes for rotation when mixing
  - random: use BLAKE2s instead of SHA1 in extraction
  - random: remove unused irq_flags argument from add_interrupt_randomness()
  - random: document add_hwgenerator_randomness() with other input functions
  - lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI
  - lib/crypto: sha1: re-roll loops to reduce code size
  - lib/crypto: blake2s: move hmac construction into wireguard
  - lib/crypto: blake2s: include as built-in
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
  - crypto: blake2s - adjust include guard naming
  - crypto: blake2s - add comment for blake2s_state fields
  - crypto: blake2s - optimize blake2s initialization
  - crypto: blake2s - share the "shash" API boilerplate code
  - crypto: blake2s - move update and final logic to internal/blake2s.h
  - crypto: blake2s - remove unneeded includes
  - crypto: x86/blake2s - define shash_alg structs using macros
  - crypto: blake2s - define shash_alg structs using macros
  - crypto: lib/blake2s - Move selftest prototype into header file
  - MAINTAINERS: add git tree for random.c
  - MAINTAINERS: co-maintain random.c
  - random: remove dead code left over from blocking pool
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness
  - ACPI: sysfs: Fix BERT error region memory mapping
  - ACPI: sysfs: Make sparse happy about address space in use
  - media: vim2m: initialize the media device earlier
  - media: vim2m: Register video device after setting up internals
  - KVM: x86: Properly handle APF vs disabled LAPIC situation
  - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
  - Revert "alinux: random: speed up the initialization of module"
  - !71 xfs: backport 2 patches from upstream
  - xfs: fix inode reservation space for removing transaction
  - xfs: fix comment for start time value of inode with bigtime enabled


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.54.0.82
changelog:
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs
  - bpf: Don't use tnum_range on array range checking for poke descriptors
  - configfs: fix a race in configfs_lookup()
  - configfs: fold configfs_attach_attr into configfs_lookup
  - configfs: simplify the configfs_dirent_is_ready
  - configfs: return -ENAMETOOLONG earlier in configfs_lookup
  - af_key: Do not call xfrm_probe_algs in parallel
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
  - tty: drop tty_schedule_flip()
  - tty: the rest, stop using tty_schedule_flip()
  - tty: drivers/tty/, stop using tty_schedule_flip()
  - pipe: fix kabi for poll_usage in struct pipe_inode_info
  - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
  - bpf: Fix potential array overflow in bpf_trampoline_get_progs()
  - NFSD: Fix possible sleep during nfsd4_release_lockowner()
  - NFS: Memory allocation failures are not server fatal errors
  - docs: submitting-patches: Fix crossref to 'The canonical patch format'
  - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
  - tpm: Fix buffer access in tpm2_get_tpm_pt()
  - HID: multitouch: add quirks to enable Lenovo X12 trackpoint
  - HID: multitouch: Add support for Google Whiskers Touchpad
  - raid5: introduce MD_BROKEN
  - dm verity: set DM_TARGET_IMMUTABLE feature flag
  - dm stats: add cond_resched when looping over entries
  - dm crypt: make printing of the key constant-time
  - dm integrity: fix error code in dm_integrity_ctr()
  - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries
  - Bluetooth: hci_qca: Use del_timer_sync() before freeing
  - zsmalloc: fix races between asynchronous zspage free and page migration
  - crypto: ecrdsa - Fix incorrect use of vli_cmp
  - crypto: caam - fix i.MX6SX entropy delay value
  - x86, kvm: use correct GFP flags for preemption disabled
  - x86/kvm: Alloc dummy async #PF token outside of raw spinlock
  - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator
  - netfilter: conntrack: re-fetch conntrack after insertion
  - crypto: drbg - make reseeding from get_random_bytes() synchronous
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
  - crypto: drbg - prepare for more fine-grained tracking of seeding state
  - lib/crypto: add prompts back to crypto libraries
  - exfat: check if cluster num is valid
  - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
  - xfs: detect overflows in bmbt records
  - net: ipa: compute proper aggregation limit
  - assoc_array: Fix BUG_ON during garbage collect
  - cfg80211: set custom regdomain after wiphy registration
  - pipe: Fix missing lock in pipe_resize_ring()
  - pipe: make poll_usage boolean and annotate its access
  - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers
  - i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
  - net: ftgmac100: Disable hardware checksum on AST2600
  - nfc: pn533: Fix buggy cleanup order
  - net: af_key: check encryption module availability consistency
  - percpu_ref_init(): clean ->percpu_count_ref on failure
  - pinctrl: sunxi: fix f1c100s uart2 function


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.55.0.83
changelog:
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
  - netfilter: nf_tables: do not allow SET_ID to refer to another table


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.56.0.84
changelog:
  - netfilter: nf_tables: disallow binding to already bound chain
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message
  - arm64: openeuler_defconfig: enable ACPI_HMAT and HOT_MEMREMOVE
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero
  - block: fix the problem of io_ticks becoming smaller
  - KVM: x86: do not report a vCPU as preempted outside instruction boundaries
  - !107 video: fbdev: pxa3xx-gcu: Fix integer overflow in  pxa3xx_gcu_write
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write


