Accepted linux-signed-amd64 6.0.3+1 (source) into unstable

[Debian FTP Masters <ftpmaster@ftp-master.debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 21 Oct 2022 21:05:40 +0200
Source: linux-signed-amd64
Architecture: source
Version: 6.0.3+1
Distribution: sid
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 linux-signed-amd64 (6.0.3+1) unstable; urgency=medium
 .
   * Sign kernel from linux 6.0.3-1
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3
     - ALSA: oss: Fix potential deadlock at unregistration
     - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
     - ALSA: usb-audio: Fix potential memory leaks
     - ALSA: usb-audio: Fix NULL dererence at error path
     - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
     - ALSA: hda/realtek: Correct pin configs for ASUS G533Z
     - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
     - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
     - io_uring: add custom opcode hooks on fail
     - io_uring/rw: don't lose partial IO result on fail
     - io_uring/net: don't lose partial send/recv on fail
     - io_uring/rw: fix unexpected link breakage
     - io_uring/rw: don't lose short results on io_setup_async_rw()
     - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
     - io_uring/net: don't update msg_name if not provided
     - io_uring: limit registration w/ SINGLE_ISSUER
     - io_uring/net: handle -EINPROGRESS correct for IORING_OP_CONNECT
     - io_uring/af_unix: defer registered files gc to io_uring release
       (CVE-2022-2602)
     - io_uring: correct pinned_vm accounting
     - [x86] hv_netvsc: Fix race between VF offering and VF association message
       from host
     - cifs: destage dirty pages before re-reading them for cache=none
     - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
     - iio: dac: ad5593r: Fix i2c read protocol requirements
     - iio: ltc2497: Fix reading conversion results
     - iio: adc: ad7923: fix channel readings for some variants
     - iio: pressure: dps310: Refactor startup procedure
     - iio: pressure: dps310: Reset chip after timeout
     - xhci: dbc: Fix memory leak in xhci_alloc_dbc()
     - usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()
     - usb: add quirks for Lenovo OneLink+ Dock
     - mmc: core: Add SD card quirk for broken discard
     - can: kvaser_usb: Fix use of uninitialized completion
     - can: kvaser_usb_leaf: Fix overread with an invalid command
     - can: kvaser_usb_leaf: Fix TX queue out of sync after restart
     - can: kvaser_usb_leaf: Fix CAN state after restart
     - mmc: renesas_sdhi: Fix rounding errors
     - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
     - mmc: sdhci-sprd: Fix minimum clock limit
     - i2c: designware: Fix handling of real but unexpected device interrupts
     - fs: dlm: fix race between test_bit() and queue_work()
     - fs: dlm: handle -EBUSY first in lock arg validation
     - fs: dlm: fix invalid derefence of sb_lvbptr
     - btf: Export bpf_dynptr definition
     - mbcache: Avoid nesting of cache->c_list_lock under bit locks
     - HID: multitouch: Add memory barriers
     - quota: Check next/prev free block number after reading from quota file
     - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
     - [arm64] dts: qcom: sdm845-mtp: correct ADC settle time
     - ASoC: wcd9335: fix order of Slimbus unprepare/disable
     - ASoC: wcd934x: fix order of Slimbus unprepare/disable
     - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
     - net: thunderbolt: Enable DMA paths only after rings are enabled
     - regulator: qcom_rpm: Fix circular deferral regression
     - [arm64] topology: move store_cpu_topology() to shared code
     - [riscv64] topology: fix default topology reporting
     - [riscv64] Re-enable counter access from userspace
     - [riscv64] Make port I/O string accessors actually work
     - [riscv64] vdso: fix NULL deference in vdso_join_timens() when vfork
     - [riscv64] Allow PROT_WRITE-only mmap()
     - [riscv64] Make VM_WRITE imply VM_READ
     - [riscv64] always honor the CONFIG_CMDLINE_FORCE when parsing dtb
     - [riscv64] Pass -mno-relax only on lld < 15.0.0
     - nvmem: core: Fix memleak in nvmem_register()
     - nvme-multipath: fix possible hang in live ns resize with ANA access
     - Revert "drm/amdgpu: use dirty framebuffer helper"
     - dm: verity-loadpin: Only trust verity targets with enforcement
     - dmaengine: mxs: use platform_driver_register
     - dmaengine: qcom-adm: fix wrong sizeof config in slave_config
     - dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg
     - drm/virtio: Check whether transferred 2D BO is shmem
     - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error
     - drm/virtio: Unlock reservations on dma_resv_reserve_fences() error
     - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
     - drm/udl: Restore display mode on resume
     - [arm64] mte: move register initialization to C
     - [arm64] mte: Avoid setting PG_mte_tagged if no tags cleared or restored
     - [arm64] errata: Add Cortex-A55 to the repeat tlbi list
     - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
     - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
     - mm/damon: validate if the pmd entry is present before accessing
     - mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
     - mm/mmap: undo ->mmap() when arch_validate_flags() fails
     - xen/gntdev: Prevent leaking grants
     - xen/gntdev: Accommodate VMA splitting
     - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
     - serial: cpm_uart: Don't request IRQ too early for console port
     - serial: stm32: Deassert Transmit Enable on ->rs485_config()
     - serial: Deassert Transmit Enable on probe in driver-specific way
     - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
     - serial: 8250: Let drivers request full 16550A feature probing
     - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices
     - NFSD: Protect against send buffer overflow in NFSv3 READDIR
     - NFSD: Protect against send buffer overflow in NFSv2 READ
     - NFSD: Protect against send buffer overflow in NFSv3 READ
     - cpufreq: qcom-cpufreq-hw: Fix uninitialized throttled_freq warning
     - LoadPin: Fix Kconfig doc about format of file with verity digests
     - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
     - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup()
       failure
     - slimbus: qcom-ngd: cleanup in probe error path
     - scsi: lpfc: Rework MIB Rx Monitor debug info logic
     - scsi: qedf: Populate sysfs attributes for vport
     - gpio: rockchip: request GPIO mux to pinctrl when setting direction
     - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback
     - fbdev: smscufx: Fix use-after-free in ufx_ops_open()
     - hwrng: core - let sleep be interrupted when unregistering hwrng
     - smb3: do not log confusing message when server returns no network
       interfaces
     - ksmbd: fix incorrect handling of iterate_dir
     - ksmbd: fix endless loop when encryption for response fails
     - ksmbd: Fix wrong return value and message length check in smb2_ioctl()
     - ksmbd: Fix user namespace mapping
     - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE
     - btrfs: fix alignment of VMA for memory mapped files on THP
     - btrfs: enhance unsupported compat RO flags handling
     - btrfs: fix race between quota enable and quota rescan ioctl
     - btrfs: fix missed extent on fsync after dropping extent maps
     - btrfs: set generation before calling btrfs_clean_tree_block in
       btrfs_init_new_buffer
     - f2fs: fix wrong continue condition in GC
     - f2fs: complete checkpoints during remount
     - f2fs: flush pending checkpoints when freezing super
     - f2fs: increase the limit for reserve_root
     - f2fs: fix to do sanity check on destination blkaddr during recovery
     - f2fs: fix to do sanity check on summary info
     - f2fs: allow direct read for zoned device
     - jbd2: wake up journal waiters in FIFO order, not LIFO
     - jbd2: fix potential buffer head reference count leak
     - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
     - jbd2: add miss release buffer head in fc_do_one_pass()
     - ext2: Add sanity checks for group and filesystem size
     - ext4: avoid crash when inline data creation follows DIO write
     - ext4: fix null-ptr-deref in ext4_write_info
     - ext4: make ext4_lazyinit_thread freezable
     - ext4: fix check for block being out of directory size (CVE-2022-1184)
     - ext4: don't increase iversion counter for ea_inodes
     - ext4: unconditionally enable the i_version counter
     - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate
     - ext4: place buffer head allocation before handle start
     - ext4: fix i_version handling in ext4
     - ext4: fix dir corruption when ext4_dx_add_entry() fails
     - ext4: fix miss release buffer head in ext4_fc_write_inode
     - ext4: fix potential memory leak in ext4_fc_record_modified_inode()
     - ext4: fix potential memory leak in ext4_fc_record_regions()
     - ext4: update 'state->fc_regions_size' after successful memory allocation
     - ftrace: Properly unset FTRACE_HASH_FL_MOD
     - ftrace: Still disable enabled records marked as disabled
     - ring-buffer: Allow splice to read previous partially read pages
     - ring-buffer: Have the shortest_full queue be the shortest not longest
     - ring-buffer: Check pending waiters when doing wake ups as well
     - ring-buffer: Add ring_buffer_wake_waiters()
     - ring-buffer: Fix race between reset page and reading page
     - tracing/eprobe: Fix alloc event dir failed when event name no set
     - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
     - tracing: Wake up ring buffer waiters on closing of the file
     - tracing: Wake up waiters when tracing is disabled
     - tracing: Add ioctl() to force ring buffer waiters to wake up
     - tracing: Do not free snapshot if tracer is on cmdline
     - tracing: Move duplicate code of trace_kprobe/eprobe.c into header
     - tracing: Add "(fault)" name injection to kernel probes
     - tracing: Fix reading strings from synthetic events
     - rpmsg: char: Avoid double destroy of default endpoint
     - thunderbolt: Explicitly enable lane adapter hotplug events at startup
     - efi: libstub: drop pointless get_memory_map() call
     - media: cedrus: Fix watchdog race condition
     - media: cedrus: Set the platform driver data earlier
     - media: cedrus: Fix endless loop in cedrus_h265_skip_bits()
     - blk-throttle: fix that io throttle can only work for single bio
     - blk-wbt: call rq_qos_add() after wb_normal is initialized
     - [x86] KVM: x86/emulator: Fix handing of POP SS to correctly set
       interruptibility
     - [x86] KVM: nVMX: Unconditionally purge queued/injected events on nested
       "exit"
     - [x86] KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to
       vmcs02
     - [x86] KVM: x86: Treat #DBs from the emulator as fault-like (code and
       DR7.GD=1)
     - [x86] KVM: VMX: Drop bits 31:16 when shoving exception error code into
       VMCS
     - staging: greybus: audio_helper: remove unused and wrong debugfs usage
     - drm/nouveau/kms/nv140-: Disable interlacing
     - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
     - [x86] drm/i915/gt: Use i915_vm_put on ppgtt_create error paths
     - [x86] drm/i915/guc: Fix revocation of non-persistent contexts
     - [x86] drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
     - [x86] drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
     - [x86] drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier
     - [x86] drm/i915: Fix watermark calculations for DG2 CCS modifiers
     - [x86] drm/i915: Fix watermark calculations for DG2 CCS+CC modifier
     - [x86] drm/i915: Fix display problems after resume
     - drm/amd/display: Fix watermark calculation
     - drm/amd/display: Update PMFW z-state interface for DCN314
     - drm/amd/display: zeromem mypipe heap struct before using it
     - drm/amd/display: Validate DSC After Enable All New CRTCs
     - drm/amd/display: Enable dpia support for dcn314
     - drm/amd/display: Enable 2 to 1 ODM policy if supported
     - drm/amd/display: Fix vblank refcount in vrr transition
     - drm/amd/display: Add HUBP surface flip interrupt handler
     - drm/amd/display: explicitly disable psr_feature_enable appropriately
     - drm/amdgpu: Enable VCN PG on GC11_0_1
     - drm/amdgpu: Enable F32_WPTR_POLL_ENABLE in mqd
     - smb3: must initialize two ACL struct fields to zero
     - selinux: use "grep -E" instead of "egrep"
     - ima: fix blocking of security.ima xattrs of unsupported algorithms
     - userfaultfd: open userfaultfds with O_RDONLY
     - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common()
     - thermal: cpufreq_cooling: Check the policy first in
       cpufreq_cooling_register()
     - cpufreq: amd-pstate: Fix initial highest_perf value
     - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
     - erofs: use kill_anon_super() to kill super in fscache mode
     - ACPI: PCC: Release resources on address space setup failure path
     - ACPI: PCC: replace wait_for_completion()
     - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
     - objtool: Preserve special st_shndx indexes in elf_update_symbol
     - nfsd: Fix a memory leak in an error handling path
     - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation
     - SUNRPC: Fix svcxdr_init_encode's buflen calculation
     - NFSD: Protect against send buffer overflow in NFSv2 READDIR
     - NFSD: Fix handling of oversized NFSv4 COMPOUND requests
     - [x86] paravirt: add extra clobbers with ZERO_CALL_USED_REGS enabled
     - wifi: rtlwifi: 8192de: correct checking of IQK reload
     - wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices
     - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
     - bpf: Cleanup check_refcount_ok
     - bpf: Fix ref_obj_id for dynptr data slices in verifier
     - leds: lm3601x: Don't use mutex after it was destroyed
     - tsnep: Fix TSNEP_INFO_TX_TIME register define
     - net: prestera: cache port state for non-phylink ports too
     - bpf: Fix reference state management for synchronous callbacks
     - wifi: mac80211: properly set old_links when removing a link
     - wifi: cfg80211: get correct AP link chandef
     - wifi: mac80211: fix use-after-free
     - wifi: mac80211: mlme: don't add empty EML capabilities
     - wifi: mac80211_hwsim: fix link change handling
     - wifi: mac80211: allow bw change during channel switch in mesh
     - bpftool: Fix a wrong type cast in btf_dumper_int
     - ice: set tx_tstamps when creating new Tx rings via ethtool
     - audit: explicitly check audit_context->context enum value
     - audit: free audit_proctitle only on task exit
     - esp: choose the correct inner protocol for GSO on inter address family
       tunnels
     - spi: mt7621: Fix an error message in mt7621_spi_probe()
     - [x86] resctrl: Fix to restore to original value when re-enabling hardware
       prefetch register
     - xsk: Fix backpressure mechanism on Tx
     - bpf: Disable preemption when increasing per-cpu map_locked
     - bpf: Propagate error from htab_lock_bucket() to userspace
     - wifi: ath11k: Fix incorrect QMI message ID mappings
     - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy
     - bpf: Use this_cpu_{inc_return|dec} for prog->active
     - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
     - bpf: Only add BTF IDs for socket security hooks when
       CONFIG_SECURITY_NETWORK is on
     - wifi: rtw89: pci: fix interrupt stuck after leaving low power mode
     - wifi: rtw89: pci: correct TX resource checking in low power mode
     - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
     - wifi: wfx: prevent underflow in wfx_send_pds()
     - wifi: rtw88: add missing destroy_workqueue() on error path in
       rtw_core_init()
     - wifi: mac80211: mlme: assign link address correctly
     - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
     - spi: qup: add missing clk_disable_unprepare on error in
       spi_qup_pm_resume_runtime()
     - wifi: rtl8xxxu: Fix skb misuse in TX queue selection
     - spi: meson-spicc: do not rely on busy flag in pow2 clk ops
     - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
     - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
     - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
     - Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
     - wifi: mt76: mt7921e: fix race issue between reset and suspend/resume
     - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume
     - wifi: mt76: mt7921u: fix race issue between reset and suspend/resume
     - wifi: mt76: sdio: fix the deadlock caused by sdio->stat_work
     - wifi: mt76: sdio: poll sta stat when device transmits data
     - wifi: mt76: mt7915: fix an uninitialized variable bug
     - wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()
     - wifi: mt76: sdio: fix transmitting packet hangs
     - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in
       mt7615_sta_set_decap_offload
     - wifi: mt76: mt7915: fix possible unaligned access in
       mt7915_mac_add_twt_setup
     - wifi: mt76: connac: fix possible unaligned access in
       mt76_connac_mcu_add_nested_tlv
     - wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start, stop]_ap
     - wifi: mt76: mt7921: add mt7921_mutex_acquire at
       mt7921_sta_set_decap_offload
     - wifi: mt76: mt7921: fix the firmware version report
     - wifi: mt76: mt7915: fix mcs value in ht mode
     - wifi: mt76: fix uninitialized pointer in mt7921_mac_fill_rx
     - wifi: mt76: mt7915: do not check state before configuring implicit
       beamform
     - wifi: mt76: mt7921e: fix rmmod crash in driver reload test
     - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release
     - net: fs_enet: Fix wrong check in do_pd_setup
     - bpf: Ensure correct locking around vulnerable function find_vpid()
     - libbpf: Fix crash if SEC("freplace") programs don't have attach_prog_fd
       set
     - wifi: ath11k: Include STA_KEEPALIVE_ARP_RESPONSE TLV header by default
     - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
     - netfilter: conntrack: fix the gc rescheduling delay
     - netfilter: conntrack: revisit the gc initial rescheduling bias
     - bpf, cgroup: Reject prog_attach_flags array when effective query
     - bpftool: Fix wrong cgroup attach flags being assigned to effective progs
     - flow_dissector: Do not count vlan tags inside tunnel payload
     - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
     - wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
     - wifi: ath11k: fix number of VHT beamformee spatial streams
     - mips: dts: ralink: mt7621: fix external phy on GB-PC2
     - [x86] microcode/AMD: Track patch allocation size explicitly
     - wifi: ath11k: fix peer addition/deletion error on sta band migration
     - [x86] cpu: Include the header of init_ia32_feat_ctl()'s prototype
     - spi: cadence-quadspi: Fix PM disable depth imbalance in cqspi_probe
     - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
     - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
     - skmsg: Schedule psock work if the cached skb exists on the psock
     - cw1200: fix incorrect check to determine if no element is found in list
     - i2c: mlxbf: support lock mechanism
     - Bluetooth: hci_core: Fix not handling link timeouts propertly
     - xfrm: Reinject transport-mode packets through workqueue
     - netfilter: nft_fib: Fix for rpath check with VRF devices
     - spi: s3c64xx: Fix large transfers with DMA
     - Bluetooth: Prevent double register of suspend
     - wifi: rtl8xxxu: gen2: Enable 40 MHz channel width
     - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
     - vhost/vsock: Use kvmalloc/kvfree for larger packets.
     - eth: alx: take rtnl_lock on resume
     - mISDN: fix use-after-free bugs in l1oip timer handlers (CVE-2022-3565)
     - sctp: handle the error returned from sctp_auth_asoc_init_active_key
     - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
     - spi: Ensure that sg_table won't be used after being freed
     - Bluetooth: hci_sync: Fix not indicating power state
     - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888
       controller
     - net: rds: don't hold sock lock when cancelling work from
       rds_tcp_reset_callbacks()
     - af_unix: Fix memory leaks of the whole sk due to OOB skb. (CVE-2022-3543)
     - net: prestera: acl: Add check for kmemdup
     - eth: lan743x: reject extts for non-pci11x1x devices
     - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (CVE-2022-3542)
     - eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address
       (CVE-2022-3541)
     - net: wwan: iosm: Call mutex_init before locking it
     - net/ieee802154: reject zero-sized raw_sendmsg()
     - once: add DO_ONCE_SLOW() for sleepable contexts
     - net: mvpp2: fix mvpp2 debugfs leak (CVE-2022-3535)
     - drm: bridge: adv7511: fix CEC power down control register offset
     - drm: bridge: adv7511: unregister cec i2c device after cec adapter
     - drm/bridge: Avoid uninitialized variable warning
     - drm/mipi-dsi: Detach devices when removing the host
     - drm/vc4: drv: Call component_unbind_all()
     - drm/bridge: it6505: Power on downstream device in .atomic_enable
     - video/aperture: Disable and unregister sysfb devices via aperture helpers
     - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
     - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt()
     - drm/bridge: tc358767: Add of_node_put() when breaking out of loop
     - drm/bridge: parade-ps8640: Fix regulator supply order
     - drm/format-helper: Fix test on big endian architectures
     - drm/dp_mst: fix drm_dp_dpcd_read return value checks
     - drm:pl111: Add of_node_put() when breaking out of
       for_each_available_child_of_node()
     - ASoC: mt6359: fix tests for platform_get_irq() failure
     - ASoC: amd: acp: add missing platform_device_unregister() in
       acp_pci_probe()
     - drm/msm: Make .remove and .shutdown HW shutdown consistent
     - platform/chrome: fix double-free in chromeos_laptop_prepare()
     - platform/chrome: fix memory corruption in ioctl
     - [x86] drm/i915/dg2: Bump up CDCLK for DG2
     - drm/virtio: Fix same-context optimization
     - ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close()
     - ASoC: tas2764: Allow mono streams
     - ASoC: tas2764: Drop conflicting set_bias_level power setting
     - ASoC: tas2764: Fix mute/unmute
     - platform/x86: msi-laptop: Fix old-ec check for backlight registering
     - platform/x86: msi-laptop: Fix resource cleanup
     - drm/panel: use 'select' for Ili9341 panel driver helpers
     - drm: fix drm_mipi_dbi build errors
     - platform/chrome: cros_ec_typec: Add bit offset for DP VDO
     - platform/chrome: cros_ec_typec: Correct alt mode index
     - drm/amdgpu: add missing pci_disable_device() in
       amdgpu_pmops_runtime_resume()
     - drm/bridge: megachips: Fix a null pointer dereference bug
     - drm/bridge: it6505: Fix the order of DP_SET_POWER commands
     - ASoC: rsnd: Add check for rsnd_mod_power_on
     - ASoC: wm_adsp: Handle optional legacy support
     - ALSA: hda: beep: Simplify keep-power-at-enable behavior
     - drm/virtio: set fb_modifiers_not_supported
     - drm/bochs: fix blanking
     - ASoC: mediatek: mt8195-mt6359: Properly register sound card for SOF
     - ASoC: SOF: mediatek: mt8195: Import namespace SND_SOC_SOF_MTK_COMMON
     - drm/omap: dss: Fix refcount leak bugs
     - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()
     - ASoC: rockchip: i2s: use regmap_read_poll_timeout to poll I2S_CLR
     - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
     - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
     - drm/msm: lookup the ICC paths in both mdp5/dpu and mdss devices
     - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
     - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
     - ALSA: hda/hdmi: change type for the 'assigned' variable
     - ALSA: hda/hdmi: Fix the converter allocation for the silent stream
     - ALSA: usb-audio: Properly refcounting clock rate
     - ASoC: SOF: ipc4-topology: Free the ida when IPC fails in
       sof_ipc4_widget_setup()
     - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
     - virtio-gpu: fix shift wrapping bug in virtio_gpu_fence_event_create()
     - ASoC: codecs: tx-macro: fix kcontrol put
     - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
     - ALSA: dmaengine: increment buffer pointer atomically
     - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
     - ASoC: stm32: dfsdm: Fix PM disable depth imbalance in stm32_adfsdm_probe
     - ASoC: stm32: spdifrx: Fix PM disable depth imbalance in
       stm32_spdifrx_probe
     - ASoC: stm: Fix PM disable depth imbalance in stm32_i2s_probe
     - ASoC: wcd-mbhc-v2: Revert "ASoC: wcd-mbhc-v2: use
       pm_runtime_resume_and_get()"
     - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
     - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
     - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
     - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
     - ASoC: rockchip: i2s: use regmap_read_poll_timeout_atomic to poll I2S_CLR
     - ALSA: hda/hdmi: Don't skip notification handling during PM operation
     - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
     - memory: of: Fix refcount leak bug in of_get_ddr_timings()
     - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
     - locks: fix TOCTOU race when granting write lease
     - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
     - soc: qcom: smem_state: Add refcounting for the 'state->of_node'
     - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus
     - [arm64] dts: renesas: r9a07g044: Fix SCI{Rx,Tx} interrupt types
     - [arm64] dts: renesas: r9a07g054: Fix SCI{Rx,Tx} interrupt types
     - [arm64] dts: renesas: r9a07g043: Fix SCI{Rx,Tx} interrupt types
     - dt-bindings: clock: exynosautov9: correct clock numbering of peric0/c1
     - [arm64] dts: qcom: sdm845-xiaomi-polaris: Fix sde_dsi_active pinctrl
     - [arm64] dts: qcom: sc7280: Cleanup the lpasscc node
     - [arm64] dts: qcom: sc7280: Update lpasscore node
     - [arm64] dts: qcom: sc8280xp-crd: disallow regulator mode switches
     - [arm64] dts: qcom: sc8280xp-lenovo-thinkpad-x13s: disallow regulator mode
       switches
     - [arm64] dts: qcom: sa8295p-adp: disallow regulator mode switches
     - [arm64] dts: qcom: pm8350c: Drop PWM reg declaration
     - [arm64] dts: qcom: sc7180-trogdor: Keep pm6150_adc enabled for TZ
     - [arm64] dts: marvell: 98dx25xx: use correct property for i2c gpios
     - [arm64] dts: qcom: sm8350-sagami: correct TS pin property
     - soc/tegra: fuse: Add missing of_node_put() in tegra_init_fuse()
     - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
     - [arm64] dts: qcom: ipq8074: fix PCIe PHY serdes size
     - [arm64] dts: qcom: sm8450: fix UFS PHY serdes size
     - [arm64] dts: ti: k3-j7200: fix main pinmux range
     - ext4: continue to expand file system when the target size doesn't reach
     - ext4: don't run ext4lazyinit for read-only filesystems
     - [arm64] ftrace: fix module PLTs with mcount
     - [arm64] dts: exynos: fix polarity of "enable" line of NFC chip in TM2
     - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
     - iomap: iomap: fix memory corruption when recording errors during writeback
     - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
     - iio: adc: at91-sama5d2_adc: check return status for pressure and touch
     - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
     - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
     - iio: inkern: only release the device node when done with it
     - iio: inkern: fix return value in devm_of_iio_channel_get_by_name()
     - iio: ABI: Fix wrong format of differential capacitance channel ABI.
     - iio: magnetometer: yas530: Change data type of hard_offsets to signed
     - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey
     - usb: common: usb-conn-gpio: Simplify some error message
     - usb: common: debug: Check non-standard control requests
     - clk: meson: Hold reference returned by of_get_parent()
     - clk: st: Hold reference returned by of_get_parent()
     - clk: oxnas: Hold reference returned by of_get_parent()
     - clk: qoriq: Hold reference returned by of_get_parent()
     - clk: berlin: Add of_node_put() for of_get_parent()
     - clk: sprd: Hold reference returned by of_get_parent()
     - coresight: docs: Fix a broken reference
     - clk: tegra: Fix refcount leak in tegra210_clock_init
     - clk: tegra: Fix refcount leak in tegra114_clock_init
     - clk: tegra20: Fix refcount leak in tegra20_clock_init
     - clk: samsung: exynosautov9: correct register offsets of peric0/c1
     - HID: uclogic: Add missing suffix for digitalizers
     - HID: uclogic: Fix warning in uclogic_rdesc_template_apply
     - HSI: omap_ssi: Fix refcount leak in ssi_probe
     - HSI: omap_ssi_port: Fix dma_map_sg error check
     - clk: qcom: gcc-sdm660: Use floor ops for SDCC1 clock
     - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
     - media: airspy: fix memory leak in airspy probe
     - tty: xilinx_uartps: Check clk_enable return value
     - tty: xilinx_uartps: Fix the ignore_status
     - media: mediatek: vcodec: Skip non CBR bitrate mode
     - media: amphion: insert picture startcode after seek for vc1g format
     - media: amphion: adjust the encoder's value range of gop size
     - media: amphion: don't change the colorspace reported by decoder.
     - media: amphion: fix a bug that vpu core may not resume after suspend
     - media: meson: vdec: add missing clk_disable_unprepare on error in
       vdec_hevc_start()
     - media: uvcvideo: Fix memory leak in uvc_gpio_parse
     - media: uvcvideo: Use entity get_cur in uvc_ctrl_set
     - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
     - RDMA/rxe: Fix "kernel NULL pointer dereference" error
     - RDMA/rxe: Fix the error caused by qp->sk
     - clk: mediatek: clk-mt8195-vdo0: Set rate on vdo0_dp_intf0_dp_intf's parent
     - clk: mediatek: clk-mt8195-vdo1: Reparent and set rate on vdo1_dpintf's
       parent
     - clk: mediatek: mt8195-infra_ao: Set pwrmcu clocks as critical
     - misc: ocxl: fix possible refcount leak in afu_ioctl()
     - fpga: dfl-pci: Add IDs for Intel N6000, N6001 and C6100 cards
     - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
     - phy: rockchip-inno-usb2: Return zero after otg sync
     - dmaengine: idxd: avoid deadlock in process_misc_interrupts()
     - dmaengine: hisilicon: Disable channels when unregister hisi_dma
     - dmaengine: hisilicon: Fix CQ head update
     - dmaengine: hisilicon: Add multi-thread support for a DMA channel
     - iio: Use per-device lockdep class for mlock
     - usb: gadget: f_fs: stricter integer overflow checks
     - dyndbg: fix static_branch manipulation
     - dyndbg: fix module.dyndbg handling
     - dyndbg: let query-modname override actual module name
     - dyndbg: drop EXPORTed dynamic_debug_exec_queries
     - clk: qcom: sm6115: Select QCOM_GDSC
     - scsi: lpfc: Fix various issues reported by tools
     - mtd: devices: docg3: check the return value of devm_ioremap() in the probe
     - remoteproc: Harden rproc_handle_vdev() against integer overflow
     - phy: qcom-qmp-usb: disable runtime PM on unbind
     - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by
       of_get_parent()
     - phy: phy-mtk-tphy: fix the phy type setting issue
     - mtd: rawnand: intel: Read the chip-select line from the correct OF node
     - mtd: rawnand: intel: Remove undocumented compatible string
     - mtd: rawnand: fsl_elbc: Fix none ECC mode
     - RDMA/irdma: Align AE id codes to correct flush code and event
     - RDMA/irdma: Validate udata inlen and outlen
     - RDMA/srp: Fix srp_abort()
     - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
     - RDMA/siw: Fix QP destroy to wait for all references dropped.
     - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
     - ata: fix ata_id_has_devslp()
     - ata: fix ata_id_has_ncq_autosense()
     - ata: fix ata_id_has_dipm()
     - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
     - block: Fix the enum blk_eh_timer_return documentation
     - eventfd: guard wake_up in eventfd fs calls as well
     - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128
     - md: Replace snprintf with scnprintf
     - md/raid5: Ensure stripe_fill happens on non-read IO with journal
     - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()
     - md: Remove extra mddev_get() in md_seq_start()
     - RDMA/cm: Use SLID in the work completion as the DLID in responder side
     - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
     - xhci: Don't show warning for reinit on known broken suspend
     - usb: gadget: function: fix dangling pnp_string in f_printer.c
     - usb: typec: anx7411: Use of_get_child_by_name() instead of
       of_find_node_by_name()
     - usb: dwc3: core: fix some leaks in probe
     - drivers: serial: jsm: fix some leaks in probe
     - serial: 8250: Toggle IER bits on only after irq has been set up
     - tty: serial: fsl_lpuart: disable dma rx/tx use flags in
       lpuart_dma_shutdown
     - phy: qualcomm: call clk_disable_unprepare in the error handling
     - staging: vt6655: fix some erroneous memory clean-up loops
     - slimbus: qcom-ngd: Add error handling in of_qcom_slim_ngd_register
     - firmware: google: Test spinlock on panic path to avoid lockups
     - serial: 8250: Fix restoring termios speed after suspend
     - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
     - scsi: pm8001: Fix running_req for internal abort commands
     - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
     - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
     - clk: qcom: gcc-sm6115: Override default Alpha PLL regs
     - nvmet-auth: don't try to cancel a non-initialized work_struct
     - RDMA/rxe: Set pd early in mr alloc routines
     - RDMA/rxe: Fix resize_finish() in rxe_queue.c
     - fsi: core: Check error number after calling ida_simple_get
     - mfd: intel_soc_pmic: Fix an error handling path in
       intel_soc_pmic_i2c_probe()
     - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
     - mfd: lp8788: Fix an error handling path in lp8788_probe()
     - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
       lp8788_irq_init()
     - mfd: fsl-imx25: Fix check for platform_get_irq() errors
     - mfd: sm501: Add check for platform_driver_register()
     - mfd: da9061: Fix Failed to set Two-Wire Bus Mode.
     - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
     - clk: mediatek: clk-mt8195-mfg: Reparent mfg_bg3d and propagate rate
       changes
     - clk: mediatek: fix unregister function in mtk_clk_register_dividers
       cleanup
     - clk: mediatek: Migrate remaining clk_unregister_*() to
       clk_hw_unregister_*()
     - io_uring/rw: defer fsnotify calls to task context
     - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in
       __cleanup()
     - HID: amd_sfh: Handle condition of "no sensors" for SFH1.1
     - usb: mtu3: fix failed runtime suspend in host only mode
     - spmi: pmic-arb: correct duplicate APID to PPID mapping logic
     - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
     - clk: baikal-t1: Fix invalid xGMAC PTP clock divider
     - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
     - clk: baikal-t1: Add SATA internal ref clock buffer
     - clk: bcm2835: Make peripheral PLLC critical
     - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
     - clk: imx8mp: tune the order of enet_qos_root_clk
     - clk: imx: scu: fix memleak on platform_device_add() fails
     - clk: ti: Balance of_node_get() calls for of_find_node_by_name()
     - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
     - clk: ast2600: BCLK comes from EPLL
     - ipc: mqueue: fix possible memory leak in init_mqueue_fs()
     - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig
     - powerpc/math_emu/efp: Include module.h
     - powerpc/sysdev/fsl_msi: Add missing of_node_put()
     - powerpc/pci_dn: Add missing of_node_put()
     - powerpc/powernv: add missing of_node_put() in opal_export_attrs()
     - cpuidle: riscv-sbi: Fix CPU_PM_CPU_IDLE_ENTER_xyz() macro usage
     - powerpc: dts: turris1x.dts: Fix NOR partitions labels
     - powerpc: dts: turris1x.dts: Fix labels in DSA cpu port nodes
     - powerpc: Fix fallocate and fadvise64_64 compat parameter combination
     - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
     - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
     - powerpc/64/interrupt: Fix false warning in context tracking due to idle
       state
     - powerpc/64: mark irqs hard disabled in boot paca
     - powerpc/64/interrupt: Fix return to masked context after hard-mask irq
       becomes pending
     - powerpc: Fix SPE Power ISA properties for e500v1 platforms
     - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()
     - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL
     - crypto: sahara - don't sleep when in softirq
     - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
     - hwrng: arm-smccc-trng - fix NO_ENTROPY handling
     - crypto: ccp - Fail the PSP initialization when writing psp data file
       failed
     - cgroup: Honor caller's cgroup NS when resolving path
     - hwrng: imx-rngc - use devm_clk_get_enabled
     - hwrng: imx-rngc - Moving IRQ handler registering after
       imx_rngc_irq_mask_clear()
     - crypto: qat - fix default value of WDT timer
     - crypto: hisilicon/qm - fix missing put dfx access
     - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
     - iommu/omap: Fix buffer overflow in debugfs
     - crypto: akcipher - default implementation for setting a private key
     - crypto: ccp - Release dma channels before dmaengine unrgister
     - crypto: inside-secure - Change swab to swab32
     - crypto: qat - fix DMA transfer direction
     - clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921
     - clocksource/drivers/timer-gxp: Add missing error handling in
       gxp_timer_probe
     - cifs: return correct error in ->calc_signature()
     - iommu/iova: Fix module config properly
     - tracing: kprobe: Fix kprobe event gen test module on exit
     - tracing: kprobe: Make gen test module work in arm and riscv
     - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads
     - ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller
     - kbuild: remove the target in signal traps when interrupted
     - linux/export: use inline assembler to populate symbol CRCs
     - kbuild: rpm-pkg: fix breakage when V=1 is used
     - crypto: marvell/octeontx - prevent integer overflows
     - crypto: cavium - prevent integer overflow loading firmware
     - random: schedule jitter credit for next jiffy, not in two jiffies
     - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
     - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
     - f2fs: fix race condition on setting FI_NO_EXTENT flag
     - f2fs: fix to account FS_CP_DATA_IO correctly
     - tools/power turbostat: Use standard Energy Unit for SPR Dram RAPL domain
     - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
     - ARM/dma-mapping: don't override ->dma_coherent when set from a bus
       notifier
     - module: tracking: Keep a record of tainted unloaded modules only
     - fs: dlm: fix race in lowcomms
     - rcu: Avoid triggering strict-GP irq-work when RCU is idle
     - rcu: Back off upon fill_page_cache_func() allocation failure
     - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
     - rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states
     - cpufreq: amd_pstate: fix wrong lowest perf fetch
     - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
     - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL
     - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys
       address
     - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode
     - MIPS: BCM47XX: Cast memcmp() of function to (void *)
     - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
     - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
       avoid crash
     - ARM: decompressor: Include .data.rel.ro.local
     - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable
     - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
     - NFSD: fix use-after-free on source server when doing inter-server copy
     - wifi: brcmfmac: fix invalid address access when enabling SCAN log level
     - bpftool: Clear errno after libcap's checks
     - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329
     - openvswitch: Fix double reporting of drops in dropwatch
     - openvswitch: Fix overreporting of drops in dropwatch
     - tcp: annotate data-race around tcp_md5sig_pool_populated
     - micrel: ksz8851: fixes struct pointer issue
     - wifi: mac80211: accept STA changes without link changes
     - [x86] mce: Retrieve poison range from hardware
     - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
     - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control
       workaround
     - [x86] apic: Don't disable x2APIC if locked
     - net: axienet: Switch to 64-bit RX/TX statistics
     - net-next: Fix IP_UNICAST_IF option behavior for connected sockets
     - xfrm: Update ipcomp_scratches with NULL when freed
     - wifi: ath11k: Register shutdown handler for WCN6750
     - rtw89: ser: leave lps with mutex
     - net: ftmac100: fix endianness-related issues from 'sparse'
     - iavf: Fix race between iavf_close and iavf_reset_task
     - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
     - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk
     - regulator: core: Prevent integer underflow
     - wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()
     - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value
     - wifi: rtw89: free unused skb to prevent memory leak
     - wifi: rtw89: fix rx filter after scan
     - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
     - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
     - Bluetooth: hci_event: Make sure ISO events don't affect non-ISO
       connections
     - bnxt_en: replace reset with config timestamps
     - selftests/bpf: Free the allocated resources after test case succeeds
     - can: bcm: check the result of can_send() in bcm_can_tx()
     - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
     - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
     - wifi: rt2x00: set VGC gain for both chains of MT7620
     - wifi: rt2x00: set SoC wmac clock register
     - wifi: rt2x00: correctly set BBP register 86 for MT7620
     - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms
     - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
     - bpf: Adjust kprobe_multi entry_ip for CONFIG_X86_KERNEL_IBT
     - bpf: use bpf_prog_pack for bpf_dispatcher
     - Bluetooth: L2CAP: Fix user-after-free
     - net: sched: cls_u32: Avoid memcpy() false-positive warning
     - libbpf: Fix overrun in netlink attribute iteration
     - i2c: designware-pci: Group AMD NAVI quirk parts together
     - r8152: Rate limit overflow messages (CVE-2022-3594)
     - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
     - drm: Use size_t type for len variable in drm_copy_field()
     - drm: Prevent drm_copy_field() to attempt copying a NULL pointer
     - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook
     - gpu: lontium-lt9611: Fix NULL pointer dereference in
       lt9611_connector_init()
     - drm/amd/display: fix overflow on MIN_I64 definition
     - ALSA: hda: Fix page fault in snd_hda_codec_shutdown()
     - ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
     - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
     - platform/x86: pmc_atom: Improve quirk message to be less cryptic
     - drm/amd: fix potential memory leak
     - drm: bridge: dw_hdmi: only trigger hotplug event on link change
     - drm/amd/display: Fix variable dereferenced before check
     - drm/amdgpu: Skip the program of MMMC_VM_AGP_* in SRIOV on MMHUB v3_0_0
     - drm/admgpu: Skip CG/PG on SOC21 under SRIOV VF
     - ALSA: usb-audio: Register card at the last interface
     - drm/vc4: vec: Fix timings for VEC modes
     - drm: panel-orientation-quirks: Add quirk for Anbernic Win600
     - drm: panel-orientation-quirks: Add quirk for Aya Neo Air
     - platform/chrome: cros_ec: Notify the PM of wake events during resume
     - platform/x86: hp-wmi: Setting thermal profile fails with 0x06
     - platform/x86: msi-laptop: Change DMI match / alias strings to fix module
       autoloading
     - ALSA: intel-dspconfig: add ES8336 support for AlderLake-PS
     - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
     - ASoC: sunxi: sun4i-codec: set debugfs_prefix for CPU DAI component
     - ASoC: SOF: add quirk to override topology mclk_id
     - drm/amdgpu: SDMA update use unlocked iterator
     - drm/amd/display: Fix urgent latency override for DCN32/DCN321
     - drm/amd/display: correct hostvm flag
     - drm/amdgpu: fix initial connector audio value
     - ASoC: amd: yc: Add ASUS UM5302TA into DMI table
     - ASoC: amd: yc: Add Lenovo Yoga Slim 7 Pro X to quirks table
     - drm/meson: reorder driver deinit sequence to fix use-after-free bug
     - drm/meson: explicitly remove aggregate driver at module unload time
     - drm/meson: remove drm bridges at aggregate driver unbind time
     - mmc: sdhci-msm: add compatible string check for sdm670
     - drm/dp: Don't rewrite link config when setting phy test pattern
     - drm/amd/display: Remove interface for periodic interrupt 1
     - drm/amd/display: polling vid stream status in hpo dp blank
     - drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
     - ARM: dts: imx6: delete interrupts property if interrupts-extended is set
     - ARM: dts: imx7d-sdb: config the max pressure for tsc2046
     - [arm64] dts: qcom: sc7280-idp: correct ADC channel node name and unit
       address
     - ARM: dts: imx6q: add missing properties for sram
     - ARM: dts: imx6dl: add missing properties for sram
     - ARM: dts: imx6qp: add missing properties for sram
     - ARM: dts: imx6sl: add missing properties for sram
     - ARM: dts: imx6sll: add missing properties for sram
     - ARM: dts: imx6sx: add missing properties for sram
     - ARM: dts: imx6sl: use tabs for code indent
     - ARM: dts: imx6sx-udoo-neo: don't use multiple blank lines
     - [arm64] dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO
       voltage
     - [arm64] dts: imx8mq-librem5: Add bq25895 as max17055's power supply
     - ARM: orion: fix include path
     - btrfs: dump extra info if one free space cache has more bitmaps than it
       should
     - btrfs: scrub: properly report super block errors in system log
     - btrfs: scrub: try to fix super block errors
     - btrfs: don't print information about space cache or tree every remount
     - btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure
     - ARM: 9233/1: stacktrace: Skip frame pointer boundary check for
       call_with_stack()
     - ARM: 9234/1: stacktrace: Avoid duplicate saving of exception PC value
     - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
     - clk: zynqmp: Fix stack-out-of-bounds in strncpy`
     - media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
     - media: platform: fix some double free in meson-ge2d and mtk-jpeg and
       s5p-mfc
     - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
     - RDMA/rxe: Delete error messages triggered by incoming Read requests
     - usb: host: xhci-plat: suspend and resume clocks
     - usb: host: xhci-plat: suspend/resume clks for brcm
     - scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
     - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent
       overflow
     - scsi: 3w-9xxx: Avoid disabling device if failing to enable it
     - nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
     - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to
       identity
     - usb: gadget: uvc: increase worker prio to WQ_HIGHPRI
     - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
     - staging: vt6655: fix potential memory leak
     - blk-throttle: prevent overflow while calculating wait time
     - ata: libahci_platform: Sanity check the DT child nodes number
     - bcache: fix set_at_max_writeback_rate() for multiple attached devices
     - soundwire: cadence: Don't overwrite msg->buf during write commands
     - soundwire: intel: fix error handling on dai registration issues
     - hid: topre: Add driver fixing report descriptor
     - HID: roccat: Fix use-after-free in roccat_read()
     - HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
     - HID: nintendo: check analog user calibration for plausibility
     - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
     - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
     - usb: musb: Fix musb_gadget.c rxstate overflow bug
     - usb: dwc3: core: add gfladj_refclk_lpm_sel quirk
     - [arm64] dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes
     - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after
       resume bug
     - Revert "usb: storage: Add quirk for Samsung Fit flash"
     - io_uring: fix CQE reordering
     - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()
     - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
     - scsi: tracing: Fix compile error in trace_array calls when TRACING is
       disabled
     - ext2: Use kvmalloc() for group descriptor array
     - nvme: handle effects after freeing the request
     - nvme: copy firmware_rev on each init
     - nvmet-tcp: add bounds check on Transfer Tag
     - usb: idmouse: fix an uninit-value in idmouse_open
     - blk-mq: use quiesced elevator switch when reinitializing queues
     - hwmon (occ): Retry for checksum failure
     - fsi: occ: Prevent use after free
     - fsi: master-ast-cf: Fix missing of_node_put in fsi_master_acf_probe
     - dmaengine: dw-edma: Remove runtime PM support
     - usb: typec: ucsi: Don't warn on probe deferral
     - clk: bcm2835: Round UART input clock up
     - perf: Skip and warn on unknown format 'configN' attrs
     - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
     - perf intel-pt: Fix system_wide dummy event for hybrid
     - io_uring/net: refactor io_sr_msg types
     - io_uring/net: use io_sr_msg for sendzc
     - io_uring/net: don't lose partial send_zc on fail
     - io_uring/net: rename io_sendzc()
     - io_uring/net: don't skip notifs for failed requests
     - io_uring/net: fix notif cqe reordering
     - mm: hugetlb: fix UAF in hugetlb_handle_userfault
     - net: ieee802154: return -EINVAL for unknown addr type
     - ALSA: usb-audio: Fix last interface check for registration
     - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
     - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses
     - Revert "drm/amd/display: correct hostvm flag"
     - Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
     - net/ieee802154: don't warn zero-sized raw_sendmsg()
     - powerpc/64s/interrupt: Fix lost interrupts when returning to soft-masked
       context
     - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n
     - io_uring: fix fdinfo sqe offsets calculation
     - io_uring/rw: ensure kiocb_end_write() is always called
     - [arm64] dts: qcom: sc8280xp-pmics: Remove reg entry & use correct node
       name for pmc8280c_lpg node
 .
   [ Zhang Ning ]
   * [arm64] disable CONFIG_ARM_CPUIDLE, it's arm only
 .
   [ Salvatore Bonaccorso ]
   * Bump ABI to 2
   * [rt] Refresh "serial: 8250: implement write_atomic"
Checksums-Sha1:
 0fc51ef39e80053c6421f60853a873dd58e2dc87 8359 linux-signed-amd64_6.0.3+1.dsc
 6d96dd6f82a37e0acefa0880597f3ca03778edb5 2931860 linux-signed-amd64_6.0.3+1.tar.xz
Checksums-Sha256:
 ff5c47749500fbebc58354c72ad8db384cc60e40cb5f7e458ecd7fef4a3d2b62 8359 linux-signed-amd64_6.0.3+1.dsc
 23755fc26f4df9d7fbb4f023e7ec6aab022376c6ee4eb8233355e0ba1398e7f5 2931860 linux-signed-amd64_6.0.3+1.tar.xz
Files:
 40015ebc2b38ee95ac0b0ae84546910d 8359 kernel optional linux-signed-amd64_6.0.3+1.dsc
 3a6a0359d2b539db61da5771394b3e82 2931860 kernel optional linux-signed-amd64_6.0.3+1.tar.xz

-----BEGIN PGP SIGNATURE-----
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=zHUv
-----END PGP SIGNATURE-----