diff --git a/SOURCE b/SOURCE
index d3ed6c8..1385a71 100644
--- a/SOURCE
+++ b/SOURCE
@@ -1 +1 @@
-6.6.0-1.0.0
+6.6.0-2.0.0
diff --git a/kernel.spec b/kernel.spec
index b52cbfd..add2e0f 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -23,9 +23,9 @@
 
 %global upstream_version    6.6
 %global upstream_sublevel   0
-%global devel_release       1
+%global devel_release       2
 %global maintenance_release .0.0
-%global pkg_release         .1
+%global pkg_release         .2
 
 %define with_debuginfo 1
 # Do not recompute the build-id of vmlinux in find-debuginfo.sh
@@ -932,6 +932,973 @@ fi
 %endif
 
 %changelog
+* Tue Dec 26 2023 Zheng Zengkai <zhengzengkai@huawei.com> - 6.6.0-2.0.0.2
+- !3435  iommu/arm-smmu-v3: Add suspend and resume support
+- !3315  Backport 6.6.5 LTS Patches
+- !3314  Backport 6.6.4 LTS Patches
+- !3286 block: Add config option to not allow writing to mounted devices
+- !3430  Add support for hisi HBM devices
+- !3431  memcg reclaim and cgroup kill
+- iommu/arm-smmu-v3: Add suspend and resume support
+- config: enable CONFIG_MEMCG_V1_RECLAIM and CONFIG_CGROUP_V1_KILL
+- memcg: introduce per-memcg reclaim interface
+- memcg: export high_async_ratio to userland
+- memcg: enable memcg async reclaim
+- memcg: Export memory.events{local} from cgroupv2 to cgroupv1
+- memcg: Export memcg.{min/low/high} from cgroupv2 to cgroupv1
+- cgroup: Export cgroup.kill from cgroupv2 to cgroupv1
+- soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods
+- soc: hbmcache: Add support for online and offline the hbm cache
+- soc: hisilicon: hisi_hbmdev: Provide extra memory topology information
+- ACPI: memhotplug: export the state of each hotplug device
+- soc: hisilicon: hisi_hbmdev: Add power domain control methods
+- ACPI: OSL: Export the symbol of acpi_hotplug_schedule
+- !3391  nbd_genl_status: null check for nla_nest_start
+- !3352  support userswap feature
+- !3383  Support Qos Scheduler
+- nbd_genl_status: null check for nla_nest_start
+- sched: Enable qos scheduler config
+- sched: Introduce handle priority reversion mechanism
+- sched: Support kill boost for offline task
+- sched: Throttle qos cfs_rq when current cpu is running online task
+- sched: Introduce qos scheduler for co-location
+- !3306  improve gettimeofday() performance in user space
+- !3331  kabi: add kabi helper macros and tools
+- mm/userswap: openeuler_defconfig: enable userswap
+- mm/userswap: provide cpu info in userfault msg
+- mm/userswap: introduce UFFDIO_COPY_MODE_DIRECT_MAP
+- mm/userswap: support userswap via userfaultfd
+- mm/userswap: introduce MREMAP_USWAP_SET_PTE
+- mm/userswap: add enable_userswap boot option
+- mm/userswap: add VM_USWAP and SWP_USERSWAP_ENTRY
+- !3326  config: Open CONFIG_AARCH32_EL0 and keep CONFIG_ARM64_ILP32 closed
+- kabi: add kABI reference checking tool
+- kabi: add a tool to generate the kabi reference relationship
+- kabi: add script tools to check kabi symbol
+- kabi: deduplication friendly structs
+- kabi: Generalize naming of kabi helper macros
+- openeuler_defconfig: Enable CONFIG_KABI_RESERVE for x86 and arm64
+- KABI: Add CONFIG_KABI_RESERVE to control KABI padding reserve
+- kabi: enables more stringent kabi checks
+- kabi: add KABI_SIZE_ALIGN_CHECKS for more stringent kabi checks
+- kabi: add kabi helper macros
+- !3298  ARM: Add unwinding annotations to __loop.*delay functions
+- config: Open CONFIG_AARCH32_EL0 and keep CONFIG_ARM64_ILP32 closed
+- !3300  Add sharepool support v3
+- vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart
+- x86/xen: fix percpu vcpu_info allocation
+- vfio/pds: Fix possible sleep while in atomic context
+- vfio/pds: Fix mutex lock->magic != lock warning
+- drm/amd/display: Fix MPCC 1DLUT programming
+- drm/amd/display: Simplify brightness initialization
+- drm/amd/display: Reduce default backlight min from 5 nits to 1 nits
+- drm/amd/display: refactor ILR to make it work
+- iommu: Fix printk arg in of_iommu_get_resv_regions()
+- drm/amd/pm: fix a memleak in aldebaran_tables_init
+- cpufreq/amd-pstate: Only print supported EPP values for performance governor
+- cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update
+- drm/panel: nt36523: fix return value check in nt36523_probe()
+- drm/panel: starry-2081101qfh032011-53g: Fine tune the panel power sequence
+- drm/i915/gsc: Mark internal GSC engine with reserved uabi class
+- iommu/vt-d: Make context clearing consistent with context mapping
+- iommu/vt-d: Disable PCI ATS in legacy passthrough mode
+- iommu/vt-d: Omit devTLB invalidation requests when TES=0
+- cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
+- drm/amd/display: Remove power sequencing check
+- drm/amd/display: Refactor edp power control
+- s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir
+- powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device
+- net: ravb: Keep reverse order of operations in ravb_remove()
+- net: ravb: Stop DMA in case of failures on ravb_open()
+- net: ravb: Start TX queues after HW initialization succeeded
+- net: ravb: Make write access to CXR35 first before accessing other EMAC registers
+- net: ravb: Use pm_runtime_resume_and_get()
+- net: ravb: Check return value of reset_control_deassert()
+- ice: Fix VF Reset paths when interface in a failed over aggregate
+- bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
+- ethtool: don't propagate EOPNOTSUPP from dumps
+- ravb: Fix races between ravb_tx_timeout_work() and net related ops
+- r8169: prevent potential deadlock in rtl8169_close
+- efi/unaccepted: Fix off-by-one when checking for overlapping ranges
+- neighbour: Fix __randomize_layout crash in struct neighbour
+- octeontx2-pf: Restore TC ingress police rules when interface is up
+- octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64
+- net: stmmac: xgmac: Disable FPE MMC interrupts
+- octeontx2-af: Fix possible buffer overflow
+- selftests/net: mptcp: fix uninitialized variable warnings
+- selftests/net: unix: fix unused variable compiler warning
+- selftests/net: fix a char signedness issue
+- selftests/net: ipsec: fix constant out of range
+- uapi: propagate __struct_group() attributes to the container union
+- bpf: Add missed allocation hint for bpf_mem_cache_alloc_flags()
+- dpaa2-eth: recycle the RX buffer only after all processing done
+- dpaa2-eth: increase the needed headroom to account for alignment
+- net: dsa: mv88e6xxx: fix marvell 6350 probe crash
+- net: dsa: mv88e6xxx: fix marvell 6350 switch probing
+- wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush
+- wifi: iwlwifi: mvm: fix an error code in iwl_mvm_mld_add_sta()
+- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
+- net: rswitch: Fix missing dev_kfree_skb_any() in error path
+- net: rswitch: Fix return value in rswitch_start_xmit()
+- net: rswitch: Fix type of ret in rswitch_start_xmit()
+- netdevsim: Don't accept device bound programs
+- media: v4l2-subdev: Fix a 64bit bug
+- pinctrl: stm32: fix array read out of bound
+- pinctrl: stm32: Add check for devm_kcalloc
+- wifi: cfg80211: fix CQM for non-range use
+- io_uring/kbuf: recycle freed mapped buffer ring entries
+- io_uring/kbuf: defer release of mapped buffer rings
+- io_uring: enable io_mem_alloc/free to be used in other parts
+- btrfs: fix 64bit compat send ioctl arguments not initializing version member
+- btrfs: free the allocated memory if btrfs_alloc_page_array() fails
+- btrfs: make error messages more clear when getting a chunk map
+- btrfs: send: ensure send_fd is writable
+- btrfs: fix off-by-one when checking chunk map includes logical address
+- btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
+- btrfs: add dmesg output for first mount and last unmount of a filesystem
+- parisc: Mark altinstructions read-only and 32-bit aligned
+- parisc: Ensure 32-bit alignment on parisc unwind section
+- parisc: Mark jump_table naturally aligned
+- parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes
+- parisc: Mark lock_aligned variables 16-byte aligned on SMP
+- parisc: Use natural CPU alignment for bug_table
+- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
+- parisc: Mark ex_table entries 32-bit aligned in assembly.h
+- powerpc: Don't clobber f0/vs0 during fp|altivec register save
+- KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers
+- iommu/vt-d: Add MTL to quirk list to skip TE disabling
+- ext2: Fix ki_pos update for DIO buffered-io fallback case
+- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
+- iommu: Avoid more races around device probe
+- io_uring: don't guard IORING_OFF_PBUF_RING with SETUP_NO_MMAP
+- dma-buf: fix check in dma_resv_add_fence
+- cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch()
+- powercap: DTPM: Fix unneeded conversions to micro-Watts
+- nouveau: find the smallest page allocation to cover a buffer alloc.
+- io_uring: free io_buffer_list entries via RCU
+- iommu/vt-d: Fix incorrect cache invalidation for mm notification
+- io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
+- ACPI: video: Use acpi_video_device for cooling-dev driver data
+- r8169: fix deadlock on RTL8125 in jumbo mtu mode
+- nvme: check for valid nvme_identify_ns() before using it
+- dm verity: don't perform FEC for failed readahead IO
+- dm verity: initialize fec io before freeing it
+- drm/amd/display: force toggle rate wa for first link training for a retimer
+- drm/amd/display: fix ABM disablement
+- drm/amd/display: Update min Z8 residency time to 2100 for DCN314
+- drm/amd/display: Use DRAM speed from validation for dummy p-state
+- drm/amd/display: Remove min_dst_y_next_start check for Z8
+- drm/amd/display: Include udelay when waiting for INBOX0 ACK
+- drm/amdgpu: Update EEPROM I2C address for smu v13_0_0
+- drm/amdgpu: fix memory overflow in the IB test
+- drm/amdgpu: Force order between a read and write to the same address
+- drm/amdgpu: correct the amdgpu runtime dereference usage count
+- drm/amd: Enable PCIe PME from D3
+- scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode
+- scsi: sd: Fix system start for ATA devices
+- scsi: Change SCSI device boolean fields to single bit flags
+- dm-verity: align struct dm_verity_fec_io properly
+- net: libwx: fix memory leak on msix entry
+- ALSA: hda/realtek: Add supported ALC257 for ChromeOS
+- ALSA: hda/realtek: Headset Mic VREF to 100%
+- ALSA: hda: Disable power-save on KONTRON SinglePC
+- drm/i915: Also check for VGA converter in eDP probe
+- mmc: block: Be sure to wait while busy in CQE error recovery
+- mmc: block: Do not lose cache flush during CQE error recovery
+- mmc: block: Retry commands in CQE error recovery
+- mmc: cqhci: Fix task clearing in CQE error recovery
+- mmc: cqhci: Warn of halt or task clear failure
+- mmc: cqhci: Increase recovery halt timeout
+- mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
+- mmc: sdhci-pci-gli: Disable LPM during initialization
+- firewire: core: fix possible memory leak in create_units()
+- pinctrl: avoid reload of p state in list iteration
+- ksmbd: fix possible deadlock in smb2_open
+- smb: client: report correct st_size for SMB and NFS symlinks
+- smb: client: fix missing mode bits for SMB symlinks
+- cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved
+- cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved
+- leds: class: Don't expose color sysfs entry
+- USB: dwc3: qcom: fix wakeup after probe deferral
+- USB: dwc3: qcom: fix software node leak on probe errors
+- usb: dwc3: set the dma max_seg_size
+- usb: dwc3: Fix default mode initialization
+- USB: dwc2: write HCINT with INTMASK applied
+- usb: typec: tcpm: Skip hard reset when in error recovery
+- usb: typec: tcpm: Fix sink caps op current check
+- USB: serial: option: don't claim interface 4 for ZTE MF290
+- USB: serial: option: fix FM101R-GL defines
+- USB: serial: option: add Fibocom L7xx modules
+- usb: cdnsp: Fix deadlock issue during using NCM gadget
+- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
+- USB: xhci-plat: fix legacy PHY double init
+- bcache: fixup lock c->root error
+- bcache: fixup init dirty data errors
+- bcache: prevent potential division by zero error
+- bcache: check return value from btree_node_alloc_replacement()
+- veth: Use tstats per-CPU traffic counters
+- dm-delay: fix a race between delay_presuspend and delay_bio
+- ALSA: hda/realtek: Add quirks for ASUS 2024 Zenbooks
+- ALSA: hda: ASUS UM5302LA: Added quirks for cs35L41/10431A83 on i2c bus
+- cifs: fix leak of iface for primary channel
+- cifs: account for primary channel in the interface list
+- cifs: distribute channels across interfaces based on speed
+- Revert "phy: realtek: usb: Add driver for the Realtek SoC USB 2.0 PHY"
+- Revert "phy: realtek: usb: Add driver for the Realtek SoC USB 3.0 PHY"
+- Revert "usb: phy: add usb phy notify port status API"
+- hv_netvsc: Mark VF as slave before exposing it to user-mode
+- hv_netvsc: Fix race of register_netdevice_notifier and VF register
+- hv_netvsc: fix race of netvsc and VF register_netdevice
+- platform/x86: ideapad-laptop: Set max_brightness before using it
+- platform/x86/amd/pmc: adjust getting DRAM size behavior
+- USB: serial: option: add Luat Air72*U series products
+- usb: misc: onboard-hub: add support for Microchip USB5744
+- dt-bindings: usb: microchip,usb5744: Add second supply
+- platform/x86: hp-bioscfg: Fix error handling in hp_add_other_attributes()
+- platform/x86: hp-bioscfg: move mutex_lock() down in hp_add_other_attributes()
+- platform/x86: hp-bioscfg: Simplify return check in hp_add_other_attributes()
+- s390/dasd: protect device queue against concurrent access
+- io_uring/fs: consider link->flags when getting path for LINKAT
+- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race
+- md: fix bi_status reporting in md_end_clone_io
+- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce()
+- io_uring: fix off-by one bvec index
+- tls: fix NULL deref on tls_sw_splice_eof() with empty record
+- swiotlb-xen: provide the "max_mapping_size" method
+- ACPI: PM: Add acpi_device_fix_up_power_children() function
+- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
+- ACPI: processor_idle: use raw_safe_halt() in acpi_idle_play_dead()
+- ACPI: video: Use acpi_device_fix_up_power_children()
+- thunderbolt: Set lane bonding bit only for downstream port
+- drm/ast: Disconnect BMC if physical connector is connected
+- drm/msm/dpu: Add missing safe_lut_tbl in sc8280xp catalog
+- kselftest/arm64: Fix output formatting for za-fork
+- prctl: Disable prctl(PR_SET_MDWE) on parisc
+- mm: add a NO_INHERIT flag to the PR_SET_MDWE prctl
+- lockdep: Fix block chain corruption
+- USB: dwc3: qcom: fix ACPI platform device leak
+- USB: dwc3: qcom: fix resource leaks on probe deferral
+- nvmet: nul-terminate the NQNs passed in the connect command
+- nvme: blank out authentication fabrics options if not configured
+- afs: Fix file locking on R/O volumes to operate in local mode
+- afs: Return ENOENT if no cell DNS record can be found
+- net: ipa: fix one GSI register field width
+- net: axienet: Fix check for partial TX checksum
+- vsock/test: fix SEQPACKET message bounds test
+- i40e: Fix adding unsupported cloud filters
+- amd-xgbe: propagate the correct speed and duplex status
+- amd-xgbe: handle the corner-case during tx completion
+- amd-xgbe: handle corner-case during sfp hotplug
+- net: veth: fix ethtool stats reporting
+- octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF
+- arm/xen: fix xen_vcpu_info allocation alignment
+- arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y
+- s390/ipl: add missing IPL_TYPE_ECKD_DUMP case to ipl_init()
+- net/smc: avoid data corruption caused by decline
+- net: usb: ax88179_178a: fix failed operations during ax88179_reset
+- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP
+- ipv4: Correct/silence an endian warning in __ip_do_redirect
+- HID: fix HID device resource race between HID core and debugging support
+- accel/ivpu/37xx: Fix hangs related to MMIO reset
+- accel/ivpu: Do not initialize parameters on power up
+- bpf: Fix dev's rx stats for bpf_redirect_peer traffic
+- net: Move {l,t,d}stats allocation to core and convert veth & vrf
+- net, vrf: Move dstats structure to core
+- PM: tools: Fix sleepgraph syntax error
+- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full
+- libfs: getdents() should return 0 after reaching EOD
+- block: update the stable_writes flag in bdev_add
+- filemap: add a per-mapping stable writes flag
+- drm/i915: do not clean GT table on error path
+- ata: pata_isapnp: Add missing error check for devm_ioport_map()
+- octeontx2-pf: Fix memory leak during interface down
+- wireguard: use DEV_STATS_INC()
+- net: wangxun: fix kernel panic due to null pointer
+- drm/panel: simple: Fix Innolux G101ICE-L01 timings
+- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
+- fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
+- drm/panel: auo,b101uan08.3: Fine tune the panel power sequence
+- blk-cgroup: avoid to warn !rcu_read_lock_held() in blkg_lookup()
+- afs: Make error on cell lookup failure consistent with OpenAFS
+- afs: Fix afs_server_list to be cleaned up with RCU
+- rxrpc: Defer the response to a PING ACK until we've parsed it
+- rxrpc: Fix RTT determination to use any ACK as a source
+- s390/ism: ism driver implies smc protocol
+- drm/msm/dsi: use the correct VREG_CTRL_1 value for 4nm cphy
+- sched/fair: Fix the decision for load balance
+- sched/eevdf: Fix vruntime adjustment on reweight
+- hv/hv_kvp_daemon: Some small fixes for handling NM keyfiles
+- irqchip/gic-v3-its: Flush ITS tables correctly in non-coherent GIC designs
+- NFSD: Fix checksum mismatches in the duplicate reply cache
+- NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update()
+- !3310  kasan: fix the compilation error for memcpy_mcs()
+- kasan: fix the compilation error for memcpy_mcs()
+- arm64: arch_timer: disable CONFIG_ARM_ARCH_TIMER_WORKAROUND_IN_USERSPACE
+- vdso: do cntvct workaround in the VDSO
+- arm64: arch_timer: Disable CNTVCT_EL0 trap if workaround is enabled
+- mm/sharepool: Protect the va reserved for sharepool
+- mm/sharepool: support fork() and exit() to handle the mm
+- mm/sharepool: Add proc interfaces to show sp info
+- mm/sharepool: Implement mg_sp_config_dvpp_range()
+- mm/sharepool: Implement mg_sp_id_of_current()
+- mm/sharepool: Implement mg_sp_group_id_by_pid()
+- mm/sharepool: Implement mg_sp_group_add_task()
+- mm/sharepool: Implement mg_sp_make_share_k2u()
+- mm/sharepool: Implement mg_sp_alloc()
+- mm/sharepool: Implement mg_sp_free()
+- mm/sharepool: Implement mg_sp_walk_page_range()
+- mm/sharepool: Implement mg_sp_unshare_kva
+- mm/sharepool: Implement mg_sp_make_share_u2k()
+- mm/sharepool: Reserve the va space for share_pool
+- mm/sharepool: Add sp_area management code
+- mm/sharepool: Add base framework for share_pool
+- mm: Extend mmap assocated functions to accept mm_struct
+- mm/vmalloc: Extend vmalloc usage about hugepage
+- mm/hugetlb: Introduce hugetlb_insert_hugepage_pte[_by_pa]
+- ARM: Add unwinding annotations to __loop.*delay functions
+- !3285  arm64: errata: add option to disable cache readunique prefetch on HIP08
+- !3280  arm64: add machine check safe support
+- !3036  Added SM3 as module signing algorithm
+- ext4: Block writes to journal device
+- xfs: Block writes to log device
+- fs: Block writes to mounted block devices
+- btrfs: Do not restrict writes to btrfs devices
+- block: Add config option to not allow writing to mounted devices
+- arm64: errata: enable HISILICON_ERRATUM_HIP08_RU_PREFETCH
+- arm64: errata: add option to disable cache readunique prefetch on HIP08
+- arm64: add machine check safe sysctl interface
+- arm64: introduce copy_mc_to_kernel() implementation
+- arm64: support copy_mc_[user]_highpage()
+- mm/hwpoison: return -EFAULT when copy fail in copy_mc_[user]_highpage()
+- arm64: add uaccess to machine check safe
+- arm64: add support for machine check error safe
+- uaccess: add generic fallback version of copy_mc_to_user()
+- !3275  arm64: kernel: disable CNP on LINXICORE9100
+- !3099  block: Make blkdev_get_by_*() return
+- arm64: kernel: disable CNP on LINXICORE9100
+- !3111  openeuler_defconfig: enable some mm new
+- !3211  Add SDEI Watchdog Support
+- !3041  Random boot-time optimization
+- !3026  Backport ARM64-ILP32 patches
+- !3156  xfs: fix intent item leak during reovery
+- !3137  LoongArch: add old BPI compatibility
+- !3218  ipvlan: Introduce l2e mode
+- !3209  exec: Remove redundant check in do_open_execat/uselib
+- ipvlan: Introduce local xmit queue for l2e mode
+- ipvlan: Introduce l2e mode
+- arm64: kexec: only clear EOI for SDEI in NMI context
+- stop_machine: mask sdei before running the callback
+- openeuler_defconfig: Enable SDEI Watchdog
+- kprobes/arm64: Blacklist sdei watchdog callback functions
+- init: only move down lockup_detector_init() when sdei_watchdog is enabled
+- sdei_watchdog: avoid possible false hardlockup
+- sdei_watchdog: set secure timer period base on 'watchdog_thresh'
+- sdei_watchdog: clear EOI of the secure timer before kdump
+- watchdog: add nmi_watchdog support for arm64 based on SDEI
+- lockup_detector: init lockup detector after all the init_calls
+- firmware: arm_sdei: make 'sdei_api_event_disable/enable' public
+- firmware: arm_sdei: add interrupt binding api
+- exec: Remove redundant check in do_open_execat/uselib
+- xfs: abort intent items when recovery intents fail
+- xfs: factor out xfs_defer_pending_abort
+- !3141 Backport 6.6.3 LTS Patches
+- drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox
+- drm/amd/display: Clear dpcd_sink_ext_caps if not set
+- drm/amd/display: Enable fast plane updates on DCN3.2 and above
+- drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()
+- drm/amd/display: Fix DSC not Enabled on Direct MST Sink
+- drm/amd/display: Guard against invalid RPTR/WPTR being set
+- drm/amdgpu: Fix possible null pointer dereference
+- drm/amdgpu: lower CS errors to debug severity
+- drm/amdgpu: fix error handling in amdgpu_bo_list_get()
+- drm/amdgpu: fix error handling in amdgpu_vm_init
+- drm/amdgpu: don't use ATRM for external devices
+- drm/amdgpu: add a retry for IP discovery init
+- drm/amdgpu: fix GRBM read timeout when do mes_self_test
+- drm/amdgpu: don't use pci_is_thunderbolt_attached()
+- drm/amdgpu/smu13: drop compute workload workaround
+- drm/amd/pm: Fix error of MACO flag setting code
+- drm/i915: Flush WC GGTT only on required platforms
+- drm/i915: Fix potential spectre vulnerability
+- drm/i915: Bump GLK CDCLK frequency when driving multiple pipes
+- drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL
+- drm/amd/display: Add Null check for DPP resource
+- x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block
+- drm: bridge: it66121: ->get_edid callback must not return err pointers
+- drm/amd/pm: Handle non-terminated overdrive commands.
+- ext4: fix racy may inline data check in dio write
+- ext4: properly sync file size update after O_SYNC direct IO
+- ext4: add missed brelse in update_backups
+- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks
+- ext4: correct the start block of counting reserved clusters
+- ext4: correct return value of ext4_convert_meta_bg
+- ext4: mark buffer new if it is unwritten to avoid stale data exposure
+- ext4: correct offset of gdb backup in non meta_bg group to update_backups
+- ext4: apply umask if ACL support is disabled
+- ext4: make sure allocate pending entry not fail
+- ext4: no need to generate from free list in mballoc
+- ext4: fix race between writepages and remount
+- Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E"
+- Revert "HID: logitech-dj: Add support for a new lightspeed receiver iteration"
+- media: qcom: camss: Fix csid-gen2 for test pattern generator
+- media: qcom: camss: Fix invalid clock enable bit disjunction
+- media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3
+- media: qcom: camss: Fix missing vfe_lite clocks check
+- media: qcom: camss: Fix VFE-480 vfe_disable_output()
+- media: qcom: camss: Fix VFE-17x vfe_disable_output()
+- media: qcom: camss: Fix vfe_get() error jump
+- media: qcom: camss: Fix pm_domain_on sequence in probe
+- mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER
+- r8169: add handling DASH when DASH is disabled
+- r8169: fix network lost after resume on DASH systems
+- selftests: mptcp: fix fastclose with csum failure
+- mptcp: fix setsockopt(IP_TOS) subflow locking
+- mptcp: add validity check for sending RM_ADDR
+- mptcp: deal with large GSO size
+- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors
+- mm: fix for negative counter: nr_file_hugepages
+- mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2
+- riscv: kprobes: allow writing to x0
+- riscv: correct pt_level name via pgtable_l5/4_enabled
+- riscv: mm: Update the comment of CONFIG_PAGE_OFFSET
+- riscv: put interrupt entries into .irqentry.text
+- riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause
+- swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC
+- swiotlb: do not free decrypted pages if dynamic
+- tracing: fprobe-event: Fix to check tracepoint event and return
+- LoongArch: Mark __percpu functions as always inline
+- NFSD: Update nfsd_cache_append() to use xdr_stream
+- nfsd: fix file memleak on client_opens_release
+- dm-verity: don't use blocking calls from tasklets
+- dm-bufio: fix no-sleep mode
+- drm/mediatek/dp: fix memory leak on ->get_edid callback error path
+- drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection
+- media: ccs: Correctly initialise try compose rectangle
+- media: venus: hfi: add checks to handle capabilities from firmware
+- media: venus: hfi: fix the check to handle session buffer requirement
+- media: venus: hfi_parser: Add check to keep the number of codecs within range
+- media: sharp: fix sharp encoding
+- media: lirc: drop trailing space from scancode transmit
+- f2fs: split initial and dynamic conditions for extent_cache
+- f2fs: avoid format-overflow warning
+- f2fs: set the default compress_level on ioctl
+- f2fs: do not return EFSCORRUPTED, but try to run online repair
+- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
+- gfs2: don't withdraw if init_threads() got interrupted
+- net: phylink: initialize carrier state at creation
+- net: dsa: lan9303: consequently nested-lock physical MDIO
+- net: ethtool: Fix documentation of ethtool_sprintf()
+- s390/ap: fix AP bus crash on early config change callback invocation
+- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte
+- sbsa_gwdt: Calculate timeout with 64-bit math
+- lsm: fix default return value for inode_getsecctx
+- lsm: fix default return value for vm_enough_memory
+- Revert "i2c: pxa: move to generic GPIO recovery"
+- Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
+- ALSA: hda/realtek: Add quirks for HP Laptops
+- ALSA: hda/realtek: Enable Mute LED on HP 255 G10
+- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
+- ALSA: hda/realtek - Add Dell ALC295 to pin fall back table
+- ALSA: hda/realtek: Enable Mute LED on HP 255 G8
+- ALSA: info: Fix potential deadlock at disconnection
+- btrfs: zoned: wait for data BG to be finished on direct IO allocation
+- xfs: recovery should not clear di_flushiter unconditionally
+- cifs: Fix encryption of cleared, but unset rq_iter data buffers
+- cifs: do not pass cifs_sb when trying to add channels
+- cifs: do not reset chan_max if multichannel is not supported at mount
+- cifs: force interface update before a fresh session setup
+- cifs: reconnect helper should set reconnect for the right channel
+- smb: client: fix mount when dns_resolver key is not available
+- smb: client: fix potential deadlock when releasing mids
+- smb: client: fix use-after-free in smb2_query_info_compound()
+- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
+- smb3: fix caching of ctime on setxattr
+- smb3: allow dumping session and tcon id to improve stats analysis and debugging
+- smb3: fix touch -h of symlink
+- smb3: fix creating FIFOs when mounting with "sfu" mount option
+- xhci: Enable RPM on controllers that support low-power states
+- parisc: fix mmap_base calculation when stack grows upwards
+- parisc/power: Fix power soft-off when running on qemu
+- parisc/pgtable: Do not drop upper 5 address bits of physical address
+- parisc: Prevent booting 64-bit kernels on PA1.x machines
+- selftests/resctrl: Extend signal handler coverage to unmount on receiving signal
+- selftests/resctrl: Make benchmark command const and build it with pointers
+- selftests/resctrl: Simplify span lifetime
+- selftests/resctrl: Remove bw_report and bm_type from main()
+- rcutorture: Fix stuttering races and other issues
+- torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter
+- drm/amd/display: enable dsc_clk even if dsc_pg disabled
+- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
+- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables
+- apparmor: Fix regression in mount mediation
+- apparmor: pass cred through to audit info.
+- apparmor: rename audit_data->label to audit_data->subj_label
+- apparmor: combine common_audit_data and apparmor_audit_data
+- apparmor: Fix kernel-doc warnings in apparmor/policy.c
+- apparmor: Fix kernel-doc warnings in apparmor/resource.c
+- apparmor: Fix kernel-doc warnings in apparmor/lib.c
+- apparmor: Fix kernel-doc warnings in apparmor/audit.c
+- cxl/port: Fix delete_endpoint() vs parent unregistration race
+- cxl/region: Fix x1 root-decoder granularity calculations
+- i3c: master: svc: fix random hot join failure since timeout error
+- i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen
+- i3c: master: svc: fix check wrong status register in irq handler
+- i3c: master: svc: fix ibi may not return mandatory data byte
+- i3c: master: svc: fix wrong data return when IBI happen during start frame
+- i3c: master: svc: fix race condition in ibi work thread
+- i3c: master: cdns: Fix reading status register
+- cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails
+- mtd: cfi_cmdset_0001: Byte swap OTP info
+- mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long
+- mm/memory_hotplug: use pfn math in place of direct struct page manipulation
+- mm/hugetlb: use nth_page() in place of direct struct page manipulation
+- mm/cma: use nth_page() in place of direct struct page manipulation
+- s390/cmma: fix detection of DAT pages
+- s390/mm: add missing arch_set_page_dat() call to gmap allocations
+- s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc()
+- dmaengine: stm32-mdma: correct desc prep when channel running
+- mcb: fix error handling for different scenarios when parsing
+- driver core: Release all resources during unbind before updating device links
+- tracing: Have the user copy of synthetic event address use correct context
+- selftests/clone3: Fix broken test under !CONFIG_TIME_NS
+- i2c: core: Run atomic i2c xfer when !preemptible
+- mips: use nth_page() in place of direct struct page manipulation
+- fs: use nth_page() in place of direct struct page manipulation
+- scripts/gdb/vmalloc: disable on no-MMU
+- kernel/reboot: emergency_restart: Set correct system_state
+- quota: explicitly forbid quota files from being encrypted
+- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev
+- ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix
+- hid: lenovo: Resend all settings on reset_resume for compact keyboards
+- selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests
+- selftests/resctrl: Fix feature checks
+- selftests/resctrl: Refactor feature check to use resource and feature name
+- selftests/resctrl: Move _GNU_SOURCE define into Makefile
+- selftests/resctrl: Remove duplicate feature check from CMT test
+- selftests/resctrl: Fix uninitialized .sa_flags
+- ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag
+- ASoC: soc-dai: add flag to mute and unmute stream during trigger
+- netfilter: nf_tables: split async and sync catchall in two functions
+- netfilter: nf_tables: remove catchall element in GC sync path
+- ima: detect changes to the backing overlay file
+- ima: annotate iint mutex to avoid lockdep false positive warnings
+- mfd: qcom-spmi-pmic: Fix revid implementation
+- mfd: qcom-spmi-pmic: Fix reference leaks in revid helper
+- leds: trigger: netdev: Move size check in set_device_name
+- arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size
+- arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM
+- ACPI: FPDT: properly handle invalid FPDT subtables
+- firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit
+- arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM
+- arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM
+- thermal: intel: powerclamp: fix mismatch in get function for max_idle
+- btrfs: don't arbitrarily slow down delalloc if we're committing
+- rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects
+- PM: hibernate: Clean up sync_read handling in snapshot_write_next()
+- PM: hibernate: Use __get_safe_page() rather than touching the list
+- dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names
+- arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM
+- rcu/tree: Defer setting of jiffies during stall reset
+- svcrdma: Drop connection after an RDMA Read error
+- wifi: wilc1000: use vmm_table as array in wilc struct
+- PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card
+- PCI: exynos: Don't discard .remove() callback
+- PCI: kirin: Don't discard .remove() callback
+- PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common()
+- PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers
+- mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A
+- mmc: sdhci_am654: fix start loop index for TAP value parsing
+- mmc: vub300: fix an error code
+- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
+- ksmbd: handle malformed smb1 message
+- ksmbd: fix recursive locking in vfs helpers
+- clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks
+- clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks
+- integrity: powerpc: Do not select CA_MACHINE_KEYRING
+- clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider
+- clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data
+- powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug()
+- cpufreq: stats: Fix buffer overflow detection in trans_stats()
+- parisc/power: Add power soft-off when running on qemu
+- parisc/pdc: Add width field to struct pdc_model
+- parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table
+- pmdomain: imx: Make imx pgc power domain also set the fwnode
+- arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n
+- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
+- pmdomain: amlogic: Fix mask for the second NNA mem PD domain
+- PCI: keystone: Don't discard .probe() callback
+- PCI: keystone: Don't discard .remove() callback
+- KEYS: trusted: Rollback init_trusted() consistently
+- KEYS: trusted: tee: Refactor register SHM usage
+- pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable
+- sched/core: Fix RQCF_ACT_SKIP leak
+- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
+- mmc: meson-gx: Remove setting of CMD_CFG_ERROR
+- wifi: ath12k: fix dfs-radar and temperature event locking
+- wifi: ath12k: fix htt mlo-offset event locking
+- wifi: ath11k: fix gtk offload status event locking
+- wifi: ath11k: fix htt pktlog locking
+- wifi: ath11k: fix dfs radar event locking
+- wifi: ath11k: fix temperature event locking
+- regmap: Ensure range selector registers are updated after cache sync
+- ACPI: resource: Do IRQ override on TongFang GMxXGxx
+- parisc: Add nop instructions after TLB inserts
+- mm/damon/sysfs: check error from damon_sysfs_update_target()
+- mm/damon/core.c: avoid unintentional filtering out of schemes
+- mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure
+- mm/damon/sysfs-schemes: handle tried region directory allocation failure
+- mm/damon/core: avoid divide-by-zero during monitoring results update
+- mm/damon: implement a function for max nr_accesses safe calculation
+- mm/damon/ops-common: avoid divide-by-zero during region hotness calculation
+- mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation
+- dm crypt: account large pages in cc->n_allocated_pages
+- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
+- iommufd: Fix missing update of domains_itree after splitting iopt_area
+- watchdog: move softlockup_panic back to early_param
+- mm/damon/sysfs: update monitoring target regions for online input commit
+- mm/damon/sysfs: remove requested targets when online-commit inputs
+- PCI/sysfs: Protect driver's D3cold preference from user space
+- hvc/xen: fix event channel handling for secondary consoles
+- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver
+- hvc/xen: fix console unplug
+- acpi/processor: sanitize _OSC/_PDC capabilities for Xen dom0
+- tty: serial: meson: fix hard LOCKUP on crtscts mode
+- tty/sysrq: replace smp_processor_id() with get_cpu()
+- proc: sysctl: prevent aliased sysctls from getting passed to init
+- audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
+- audit: don't take task_lock() in audit_exe_compare() code path
+- sched: psi: fix unprivileged polling against cgroups
+- mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER
+- KVM: x86: Fix lapic timer interrupt lost after loading a snapshot.
+- KVM: x86: Clear bit12 of ICR after APIC-write VM-exit
+- KVM: x86: Ignore MSR_AMD64_TW_CFG access
+- KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space
+- x86/cpu/hygon: Fix the CPU topology evaluation for real
+- x86/apic/msi: Fix misconfigured non-maskable MSI quirk
+- x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4
+- crypto: x86/sha - load modules based on CPU features
+- x86/shstk: Delay signal entry SSP write until after user accesses
+- scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR
+- scsi: qla2xxx: Fix system crash due to bad pointer access
+- scsi: ufs: qcom: Update PHY settings only when scaling to higher gears
+- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers
+- scsi: mpt3sas: Fix loop logic
+- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
+- bpf: Fix check_stack_write_fixed_off() to correctly spill imm
+- spi: Fix null dereference on suspend
+- randstruct: Fix gcc-plugin performance mode to stay in group
+- powerpc/perf: Fix disabling BHRB and instruction sampling
+- perf intel-pt: Fix async branch flags
+- media: venus: hfi: add checks to perform sanity on queue pointers
+- drivers: perf: Check find_first_bit() return value
+- perf: arm_cspmu: Reject events meant for other PMUs
+- i915/perf: Fix NULL deref bugs with drm_dbg() calls
+- perf/core: Fix cpuctx refcounting
+- cifs: fix check of rc in function generate_smb3signingkey
+- cifs: spnego: add ';' in HOST_KEY_LEN
+- scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1
+- tools/power/turbostat: Enable the C-state Pre-wake printing
+- tools/power/turbostat: Fix a knl bug
+- macvlan: Don't propagate promisc change to lower dev in passthru
+- net: sched: do not offload flows with a helper in act_ct
+- net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors
+- net/mlx5e: Check return value of snprintf writing to fw_version buffer
+- net/mlx5e: Reduce the size of icosq_str
+- net/mlx5: Increase size of irq name buffer
+- net/mlx5e: Update doorbell for port timestamping CQ before the software counter
+- net/mlx5e: Track xmit submission to PTP WQ after populating metadata map
+- net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe
+- net/mlx5e: Don't modify the peer sent-to-vport rules for IPSec offload
+- net/mlx5e: Fix pedit endianness
+- net/mlx5e: fix double free of encap_header in update funcs
+- net/mlx5e: fix double free of encap_header
+- net/mlx5: Decouple PHC .adjtime and .adjphase implementations
+- net/mlx5: Free used cpus mask when an IRQ is released
+- Revert "net/mlx5: DR, Supporting inline WQE when possible"
+- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
+- gve: Fixes for napi_poll when budget is 0
+- pds_core: fix up some format-truncation complaints
+- pds_core: use correct index to mask irq
+- net: stmmac: avoid rx queue overrun
+- net: stmmac: fix rx budget limit check
+- netfilter: nf_tables: bogus ENOENT when destroying element which does not exist
+- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
+- netfilter: nf_conntrack_bridge: initialize err to 0
+- af_unix: fix use-after-free in unix_stream_read_actor()
+- net: ethernet: cortina: Fix MTU max setting
+- net: ethernet: cortina: Handle large frames
+- net: ethernet: cortina: Fix max RX frame define
+- bonding: stop the device in bond_setup_by_slave()
+- ptp: annotate data-race around q->head and q->tail
+- blk-mq: make sure active queue usage is held for bio_integrity_prep()
+- xen/events: fix delayed eoi list handling
+- ppp: limit MRU to 64K
+- net: mvneta: fix calls to page_pool_get_stats
+- tipc: Fix kernel-infoleak due to uninitialized TLV value
+- net: hns3: fix VF wrong speed and duplex issue
+- net: hns3: fix VF reset fail issue
+- net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()
+- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
+- net: hns3: fix incorrect capability bit display for copper port
+- net: hns3: add barrier in vf mailbox reply process
+- net: hns3: fix add VLAN fail issue
+- xen/events: avoid using info_for_irq() in xen_send_IPI_one()
+- net: ti: icssg-prueth: Fix error cleanup on failing pruss_request_mem_region
+- net: ti: icssg-prueth: Add missing icss_iep_put to error path
+- tty: Fix uninit-value access in ppp_sync_receive()
+- ipvlan: add ipvlan_route_v6_outbound() helper
+- net: set SOCK_RCU_FREE before inserting socket into hashtable
+- bpf: fix control-flow graph checking in privileged mode
+- bpf: fix precision backtracking instruction iteration
+- bpf: handle ldimm64 properly in check_cfg()
+- gcc-plugins: randstruct: Only warn about true flexible arrays
+- vhost-vdpa: fix use after free in vhost_vdpa_probe()
+- vdpa_sim_blk: allocate the buffer zeroed
+- riscv: split cache ops out of dma-noncoherent.c
+- drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init
+- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
+- riscv: provide riscv-specific is_trap_insn()
+- RISC-V: hwprobe: Fix vDSO SIGSEGV
+- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
+- NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO
+- SUNRPC: Add an IS_ERR() check back to where it was
+- NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking
+- drm/i915/mtl: avoid stringop-overflow warning
+- mtd: rawnand: meson: check return value of devm_kasprintf()
+- mtd: rawnand: intel: check return value of devm_kasprintf()
+- SUNRPC: ECONNRESET might require a rebind
+- dt-bindings: serial: fix regex pattern for matching serial node children
+- samples/bpf: syscall_tp_user: Fix array out-of-bound access
+- samples/bpf: syscall_tp_user: Rename num_progs into nr_tests
+- sched/core: Optimize in_task() and in_interrupt() a bit
+- wifi: iwlwifi: Use FW rate for non-data frames
+- mtd: rawnand: tegra: add missing check for platform_get_irq()
+- pwm: Fix double shift bug
+- drm/amdgpu: fix software pci_unplug on some chips
+- ALSA: hda/realtek: Add quirk for ASUS UX7602ZM
+- drm/qxl: prevent memory leak
+- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
+- i2c: dev: copy userspace array safely
+- riscv: VMAP_STACK overflow detection thread-safe
+- kgdb: Flush console before entering kgdb on panic
+- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
+- drm/amd/display: Avoid NULL dereference of timing generator
+- media: imon: fix access to invalid resource for the second interface
+- media: ccs: Fix driver quirk struct documentation
+- media: cobalt: Use FIELD_GET() to extract Link Width
+- gfs2: fix an oops in gfs2_permission
+- gfs2: ignore negated quota changes
+- media: ipu-bridge: increase sensor_name size
+- media: vivid: avoid integer overflow
+- media: gspca: cpia1: shift-out-of-bounds in set_flicker
+- i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
+- virtio-blk: fix implicit overflow on virtio_max_dma_size
+- i2c: sun6i-p2wi: Prevent potential division by zero
+- i2c: fix memleak in i2c_new_client_device()
+- i2c: i801: Add support for Intel Birch Stream SoC
+- i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler
+- 9p: v9fs_listxattr: fix %s null argument warning
+- 9p/trans_fd: Annotate data-racy writes to file::f_flags
+- usb: gadget: f_ncm: Always set current gadget in ncm_bind()
+- usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present
+- f2fs: fix error handling of __get_node_page
+- f2fs: fix error path of __f2fs_build_free_nids
+- soundwire: dmi-quirks: update HP Omen match
+- usb: ucsi: glink: use the connector orientation GPIO to provide switch events
+- usb: dwc3: core: configure TX/RX threshold for DWC3_IP
+- phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs
+- phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields
+- dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides
+- tty: vcc: Add check for kstrdup() in vcc_probe()
+- thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager
+- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
+- mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs
+- exfat: support handle zero-size directory
+- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
+- crypto: hisilicon/qm - prevent soft lockup in receive loop
+- ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk
+- PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk
+- misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller
+- PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling
+- PCI: dwc: Add dw_pcie_link_set_max_link_width()
+- PCI: Disable ATS for specific Intel IPU E2000 devices
+- PCI: Extract ATS disabling to a helper function
+- PCI: Use FIELD_GET() to extract Link Width
+- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
+- PCI: Do error check on own line to split long "if" conditions
+- atm: iphase: Do PCI error checks on own line
+- PCI: mvebu: Use FIELD_PREP() with Link Width
+- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields
+- gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound
+- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
+- ARM: 9320/1: fix stack depot IRQ stack filter
+- HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround
+- jfs: fix array-index-out-of-bounds in diAlloc
+- jfs: fix array-index-out-of-bounds in dbFindLeaf
+- fs/jfs: Add validity check for db_maxag and db_agpref
+- fs/jfs: Add check for negative db_l2nbperpage
+- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool
+- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
+- RDMA/hfi1: Use FIELD_GET() to extract Link Width
+- ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware
+- crypto: pcrypt - Fix hungtask for PADATA_RESET
+- ASoC: cs35l56: Use PCI SSID as the firmware UID
+- ASoC: Intel: sof_sdw: Copy PCI SSID to struct snd_soc_card
+- ASoC: SOF: Pass PCI SSID to machine driver
+- ASoC: soc-card: Add storage for PCI SSID
+- ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl
+- selftests/efivarfs: create-read: fix a resource leak
+- arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size
+- arm64: dts: rockchip: Add NanoPC T6 PCIe e-key support
+- soc: qcom: pmic: Fix resource leaks in a device_for_each_child_node() loop
+- drm/amd: check num of link levels when update pcie param
+- drm/amd/display: fix num_ways overflow error
+- drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported
+- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
+- drm/amdkfd: Fix shift out-of-bounds issue
+- drm/panel: st7703: Pick different reset sequence
+- drm/amdgpu/vkms: fix a possible null pointer dereference
+- drm/radeon: fix a possible null pointer dereference
+- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
+- drm/panel: fix a possible null pointer dereference
+- drm/amdgpu: Fix potential null pointer derefernce
+- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
+- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
+- drm/msm/dp: skip validity check for DP CTS EDID checksum
+- drm: vmwgfx_surface.c: copy user-array safely
+- drm_lease.c: copy user-array safely
+- kernel: watch_queue: copy user-array safely
+- kernel: kexec: copy user-array safely
+- string.h: add array-wrappers for (v)memdup_user()
+- drm/amd/display: use full update for clip size increase of large plane source
+- drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments
+- drm/amdgpu: update retry times for psp vmbx wait
+- drm/amdkfd: Fix a race condition of vram buffer unref in svm code
+- drm/amdgpu: not to save bo in the case of RAS err_event_athub
+- md: don't rely on 'mddev->pers' to be set in mddev_suspend()
+- drm/edid: Fixup h/vsync_end instead of h/vtotal
+- drm/amd/display: add seamless pipe topology transition check
+- drm/amd/display: Don't lock phantom pipe on disabling
+- drm/amd/display: Blank phantom OTG before enabling
+- drm/komeda: drop all currently held locks if deadlock happens
+- drm/amdkfd: ratelimited SQ interrupt messages
+- drm/gma500: Fix call trace when psb_gem_mm_init() fails
+- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
+- of: address: Fix address translation when address-size is greater than 2
+- platform/chrome: kunit: initialize lock for fake ec_dev
+- gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010
+- tsnep: Fix tsnep_request_irq() format-overflow warning
+- ACPI: EC: Add quirk for HP 250 G7 Notebook PC
+- Bluetooth: Fix double free in hci_conn_cleanup
+- Bluetooth: btusb: Add date->evt_skb is NULL check
+- wifi: iwlwifi: mvm: fix size check for fw_link_id
+- bpf: Ensure proper register state printing for cond jumps
+- vsock: read from socket's error queue
+- net: sfp: add quirk for FS's 2.5G copper SFP
+- wifi: ath10k: Don't touch the CE interrupt registers after power up
+- wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register()
+- net: annotate data-races around sk->sk_dst_pending_confirm
+- net: annotate data-races around sk->sk_tx_queue_mapping
+- wifi: mt76: fix clang-specific fortify warnings
+- wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023)
+- net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI
+- ACPI: APEI: Fix AER info corruption when error status data has multiple sections
+- wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()
+- wifi: ath10k: fix clang-specific fortify warning
+- wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
+- wifi: ath9k: fix clang-specific fortify warnings
+- bpf: Detect IP == ksym.end as part of BPF program
+- atl1c: Work around the DMA RX overflow issue
+- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
+- wifi: mac80211_hwsim: fix clang-specific fortify warning
+- wifi: ath12k: Ignore fragments from uninitialized peer in dp
+- wifi: plfxlc: fix clang-specific fortify warning
+- x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size
+- workqueue: Provide one lock class key per work_on_cpu() callsite
+- cpu/hotplug: Don't offline the last non-isolated CPU
+- smp,csd: Throw an error if a CSD lock is stuck for too long
+- srcu: Only accelerate on enqueue time
+- clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
+- clocksource/drivers/timer-imx-gpt: Fix potential memory leak
+- selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config
+- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems
+- perf/core: Bail out early if the request AUX area is out of bound
+- x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN
+- lib/generic-radix-tree.c: Don't overflow in peek()
+- btrfs: abort transaction on generation mismatch when marking eb as dirty
+- locking/ww_mutex/test: Fix potential workqueue corruption
+- LoongArch: use arch specific phys_to_dma
+- LoongArch: Fixed EIOINTC structure members
+- LoongArch: Fix virtual machine startup error
+- LoongArch: Old BPI compatibility
+- LoongArch: add kernel setvirtmap for runtime
+- arm64: openeuler_defconfig: update for new feature
+- x86: openeuler_defconfig: update from new feature
+- erofs: fix NULL dereference of dif->bdev_handle in fscache mode
+- block: Remove blkdev_get_by_*() functions
+- bcache: Fixup error handling in register_cache()
+- xfs: Convert to bdev_open_by_path()
+- reiserfs: Convert to bdev_open_by_dev/path()
+- ocfs2: Convert to use bdev_open_by_dev()
+- nfs/blocklayout: Convert to use bdev_open_by_dev/path()
+- jfs: Convert to bdev_open_by_dev()
+- f2fs: Convert to bdev_open_by_dev/path()
+- ext4: Convert to bdev_open_by_dev()
+- erofs: Convert to use bdev_open_by_path()
+- btrfs: Convert to bdev_open_by_path()
+- fs: Convert to bdev_open_by_dev()
+- mm/swap: Convert to use bdev_open_by_dev()
+- PM: hibernate: Drop unused snapshot_test argument
+- PM: hibernate: Convert to bdev_open_by_dev()
+- scsi: target: Convert to bdev_open_by_path()
+- s390/dasd: Convert to bdev_open_by_path()
+- nvmet: Convert to bdev_open_by_path()
+- mtd: block2mtd: Convert to bdev_open_by_dev/path()
+- md: Convert to bdev_open_by_dev()
+- dm: Convert to bdev_open_by_dev()
+- bcache: Convert to bdev_open_by_path()
+- zram: Convert to use bdev_open_by_dev()
+- xen/blkback: Convert to bdev_open_by_dev()
+- rnbd-srv: Convert to use bdev_open_by_path()
+- pktcdvd: Convert to bdev_open_by_dev()
+- drdb: Convert to use bdev_open_by_path()
+- block: Use bdev_open_by_dev() in disk_scan_partitions() and blkdev_bszset()
+- block: Use bdev_open_by_dev() in blkdev_open()
+- block: Provide bdev_open_* functions
+- alinux: random: speed up the initialization of module
+- keys: Allow automatic module signature with SM3
+- arm64: fix image size inflation with CONFIG_COMPAT_TASK_SIZE
+- arm64: set 32-bit compatible TASK_SIZE_MAX to fix U32 libc_write_01 error
+- arm64: replace is_compat_task() with is_ilp32_compat_task() in TASK_SIZE_MAX
+- arm64: fix address limit problem with TASK_SIZE_MAX
+- ilp32: fix compile problem when ARM64_ILP32 and UBSAN are both enabled
+- arm64: fix abi change caused by ILP32
+- arm64: fix AUDIT_ARCH_AARCH64ILP32 bug on audit subsystem
+- ilp32: skip ARM erratum 1418040 for ilp32 application
+- ilp32: avoid clearing upper 32 bits of syscall return value for ilp32
+- arm64: secomp: fix the secure computing mode 1 syscall check for ilp32
+- arm64:ilp32: add ARM64_ILP32 to Kconfig
+- arm64:ilp32: add vdso-ilp32 and use for signal return
+- arm64: ptrace: handle ptrace_request differently for aarch32 and ilp32
+- arm64: ilp32: introduce ilp32-specific sigframe and ucontext
+- arm64: signal32: move ilp32 and aarch32 common code to separated file
+- arm64: signal: share lp64 signal structures and routines to ilp32
+- arm64: ilp32: introduce syscall table for ILP32
+- arm64: ilp32: share aarch32 syscall handlers
+- arm64: ilp32: introduce binfmt_ilp32.c
+- arm64: change compat_elf_hwcap and compat_elf_hwcap2 prefix to a32
+- arm64: introduce binfmt_elf32.c
+- arm64: introduce AUDIT_ARCH_AARCH64ILP32 for ilp32
+- arm64: ilp32: add is_ilp32_compat_{task,thread} and TIF_32BIT_AARCH64
+- arm64: introduce is_a32_compat_{task,thread} for AArch32 compat
+- arm64: uapi: set __BITS_PER_LONG correctly for ILP32 and LP64
+- arm64: rename functions that reference compat term
+- arm64: rename COMPAT to AARCH32_EL0
+- arm64: ilp32: add documentation on the ILP32 ABI for ARM64
+- thread: move thread bits accessors to separated file
+- ptrace: Add compat PTRACE_{G,S}ETSIGMASK handlers
+- arm64: signal: Make parse_user_sigframe() independent of rt_sigframe layout
+
 * Tue Dec 5 2023 Zheng Zengkai <zhengzengkai@huawei.com> - 6.6.0-1.0.0.1
 - !3058  tcp/dccp: Add another way to allocate local ports in connect()
 - !3064  mm: PCP high auto-tuning