Accepted linux-signed-amd64 6.1.76+1 (source) into proposed-updates

[Debian FTP Masters <ftpmaster@ftp-master.debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Feb 2024 09:05:49 +0100
Source: linux-signed-amd64
Architecture: source
Version: 6.1.76+1
Distribution: bookworm-proposed-updates
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 linux-signed-amd64 (6.1.76+1) bookworm; urgency=medium
 .
   * Sign kernel from linux 6.1.76-1
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.70
     - bpf: Fix prog_array_map_poke_run map poke update
     - HID: i2c-hid: acpi: Unify ACPI ID tables format
     - HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[]
     - drm/amd/display: fix hw rotated modes when PSR-SU is enabled
     - [armhf] OMAP2+: Fix null pointer dereference and memory leak in
       omap_soc_device_init
     - reset: Fix crash when freeing non-existent optional resets
     - [s390x] vx: fix save/restore of fpu kernel context
     - wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
     - wifi: mac80211: check if the existing link config remains unchanged
     - wifi: mac80211: mesh: check element parsing succeeded
     - wifi: mac80211: mesh_plink: fix matches_local logic
     - Revert "net/mlx5e: fix double free of encap_header in update funcs"
     - Revert "net/mlx5e: fix double free of encap_header"
     - net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
     - net/mlx5: Introduce and use opcode getter in command interface
     - net/mlx5: Prevent high-rate FW commands from populating all slots
     - net/mlx5: Re-organize mlx5_cmd struct
     - net/mlx5e: Fix a race in command alloc flow
     - net/mlx5e: fix a potential double-free in fs_udp_create_groups
     - net/mlx5: Fix fw tracer first block check
     - net/mlx5e: Correct snprintf truncation handling for fw_version buffer
     - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used
       by representors
     - [arm64] net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and
       above
     - net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
     - net: sched: ife: fix potential use-after-free
     - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
     - net/rose: fix races in rose_kill_by_device()
     - Bluetooth: Fix deadlock in vhci_send_frame
     - Bluetooth: hci_event: shut up a false-positive warning
     - net: mana: select PAGE_POOL
     - net: check vlan filter feature in vlan_vids_add_by_dev() and
       vlan_vids_del_by_dev()
     - afs: Fix the dynamic root's d_delete to always delete unused dentries
     - afs: Fix dynamic root lookup DNS check
     - net: check dev->gso_max_size in gso_features_check()
     - keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
     - afs: Fix overwriting of result of DNS query
     - afs: Fix use-after-free due to get/remove race in volume tree
     - [arm64,armhf] ASoC: hdmi-codec: fix missing report for jack initial status
     - [arm64] ASoC: fsl_sai: Fix channel swap issue on i.MX8MP
     - [armhf] i2c: aspeed: Handle the coalesced stop conditions with the start
       conditions.
     - gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
     - nvme-pci: fix sleeping function called from interrupt context
     - [x86] drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
     - [x86] drm/i915: Relocate intel_atomic_setup_scalers()
     - [x86] drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
     - [x86] drm/i915/dpt: Only do the POT stride remap when using DPT
     - [x86] drm/i915/mtl: Add MTL for remapping CCS FBs
     - [x86] drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller
       than the original
     - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
     - interconnect: qcom: sm8250: Enable sync_state
     - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
     - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time
       table
     - [armhf] iio: adc: ti_am335x_adc: Fix return value check of
       tiadc_request_dma()
     - iio: triggered-buffer: prevent possible freeing of wrong buffer
     - ALSA: usb-audio: Increase delay in MOTU M quirk
     - usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3
     - wifi: cfg80211: Add my certificate
     - wifi: cfg80211: fix certs build to not depend on file order
     - USB: serial: ftdi_sio: update Actisense PIDs constant names
     - USB: serial: option: add Quectel EG912Y module support
     - USB: serial: option: add Foxconn T99W265 with new baseline
     - USB: serial: option: add Quectel RM500Q R13 firmware support
     - ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA
     - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
     - Bluetooth: L2CAP: Send reject on command corrupted request
     - Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
     - Bluetooth: Add more enc key size check
     - net: usb: ax88179_178a: avoid failed operations when device is
       disconnected
     - [x86] Input: soc_button_array - add mapping for airplane mode button
     - net: 9p: avoid freeing uninit memory in p9pdu_vreadf
     - net: rfkill: gpio: set GPIO direction
     - dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
     - smb: client: fix OOB in cifsd when receiving compounded resps
     - smb: client: fix potential OOB in cifs_dump_detail()
     - smb: client: fix OOB in SMB2_query_info_init()
     - smb: client: fix OOB in smbCalcSize() (CVE-2023-6606)
     - [x86] drm/i915: Reject async flips with bigjoiner
     - 9p: prevent read overrun in protocol dump tracepoint
     - [riscv64] Fix do_notify_resume / do_work_pending prototype
     - loop: do not enforce max_loop hard limit by (new) default
     - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client
     - Revert "drm/amd/display: Do not set DRR on pipe commit"
     - btrfs: zoned: no longer count fresh BG region as zone unusable
     - ubifs: fix possible dereference after free
     - ublk: move ublk_cancel_dev() out of ub->mutex
     - scsi: core: Always send batch on reset or error handling command
     - tracing / synthetic: Disable events after testing in
       synth_event_gen_test_init()
     - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
     - pinctrl: starfive: jh7100: ignore disabled device tree nodes
     - [armhf] bus: ti-sysc: Flush posted write only after srst_udelay
     - lib/vsprintf: Fix %pfwf when current node refcount == 0
     - [x86] thunderbolt: Fix memory leak in margining_port_remove()
     - [arm64] KVM: arm64: vgic: Simplify kvm_vgic_destroy()
     - [arm64] KVM: arm64: vgic: Add a non-locking primitive for
       kvm_vgic_vcpu_destroy()
     - [arm64] KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
     - [x86] alternatives: Sync core before enabling interrupts
     - fuse: share lookup state between submount and its parent
     - wifi: cfg80211: fix CQM for non-range use
     - wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)
     - loop: deprecate autoloading callback loop_probe()
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.71
     - ksmbd: replace one-element arrays with flexible-array members
     - ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption
       for this share
     - ksmbd: use F_SETLK when unlocking a file
     - ksmbd: Fix resource leak in smb2_lock()
     - ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs
     - ksmbd: Implements sess->rpc_handle_list as xarray
     - ksmbd: fix typo, syncronous->synchronous
     - ksmbd: Remove duplicated codes
     - ksmbd: update Kconfig to note Kerberos support and fix indentation
     - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
     - ksmbd: Fix parameter name and comment mismatch
     - ksmbd: remove unused is_char_allowed function
     - ksmbd: delete asynchronous work from list (CVE-2023-1193)
     - ksmbd: set NegotiateContextCount once instead of every inc
     - ksmbd: avoid duplicate negotiate ctx offset increments
     - ksmbd: remove unused compression negotiate ctx packing
     - fs: introduce lock_rename_child() helper
     - ksmbd: fix racy issue from using ->d_parent and ->d_name
     - ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename()
     - ksmbd: fix uninitialized pointer read in smb2_create_link()
     - ksmbd: call putname after using the last component
     - ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
     - ksmbd: add mnt_want_write to ksmbd vfs functions
     - ksmbd: remove unused ksmbd_tree_conn_share function
     - ksmbd: use kzalloc() instead of __GFP_ZERO
     - ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked()
     - ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void
     - ksmbd: use kvzalloc instead of kvmalloc
     - ksmbd: Replace the ternary conditional operator with min()
     - ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
     - ksmbd: Replace one-element array with flexible-array member
     - ksmbd: Fix unsigned expression compared with zero
     - ksmbd: check if a mount point is crossed during path lookup
     - ksmbd: switch to use kmemdup_nul() helper
     - ksmbd: add support for read compound
     - ksmbd: fix wrong interim response on compound
     - ksmbd: fix `force create mode' and `force directory mode'
     - ksmbd: Fix one kernel-doc comment
     - ksmbd: add missing calling smb2_set_err_rsp() on error
     - ksmbd: remove experimental warning
     - ksmbd: remove unneeded mark_inode_dirty in set_info_sec()
     - ksmbd: fix passing freed memory 'aux_payload_buf'
     - ksmbd: return invalid parameter error response if smb2 request is invalid
     - ksmbd: check iov vector index in ksmbd_conn_write()
     - ksmbd: fix race condition with fp
     - ksmbd: fix race condition from parallel smb2 logoff requests
     - ksmbd: fix race condition from parallel smb2 lock requests
     - ksmbd: fix race condition between tree conn lookup and disconnect
     - ksmbd: fix wrong error response status by using set_smb2_rsp_status()
     - ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()
     - ksmbd: fix potential double free on smb2_read_pipe() error path
     - ksmbd: Remove unused field in ksmbd_user struct
     - ksmbd: reorganize ksmbd_iov_pin_rsp()
     - ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
     - ksmbd: fix recursive locking in vfs helpers
     - ksmbd: fix missing RDMA-capable flag for IPoIB device in
       ksmbd_rdma_capable_netdev()
     - ksmbd: add support for surrogate pair conversion
     - ksmbd: no need to wait for binded connection termination at logoff
     - ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
     - ksmbd: prevent memory leak on error return
     - ksmbd: fix possible deadlock in smb2_open
     - ksmbd: separately allocate ci per dentry
     - ksmbd: move oplock handling after unlock parent dir
     - ksmbd: release interim response after sending status pending response
     - ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
     - ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
     - ksmbd: set epoch in create context v2 lease
     - ksmbd: set v2 lease capability
     - ksmbd: downgrade RWH lease caching state to RH for directory
     - ksmbd: send v2 lease break notification for directory
     - ksmbd: lazy v2 lease break on smb2_write()
     - ksmbd: avoid duplicate opinfo_put() call on error of
       smb21_lease_break_ack()
     - ksmbd: fix wrong allocation size update in smb2_open()
     - spi: Introduce spi_get_device_match_data() helper
     - iio: imu: adis16475: add spi_device_id table
     - nfsd: separate nfsd_last_thread() from nfsd_put()
     - nfsd: call nfsd_last_thread() before final nfsd_put()
     - linux/export: Ensure natural alignment of kcrctab array
     - spi: Reintroduce spi_set_cs_timing()
     - spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod
     - block: renumber QUEUE_FLAG_HW_WC
     - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() (CVE-2024-22705)
     - mm/filemap: avoid buffered read/write race to read inconsistent data
     - mm: migrate high-order folios in swap cache correctly
     - mm/memory-failure: cast index to loff_t before shifting it
     - mm/memory-failure: check the mapcount of the precise page
     - ring-buffer: Fix wake ups when buffer_percent is set to 100
     - tracing: Fix blocked reader of snapshot buffer
     - ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
     - ring-buffer: Fix slowpath of interrupted event
     - NFSD: fix possible oops when nfsd/pool_stats is closed.
     - spi: Constify spi parameters of chip select APIs
     - device property: Allow const parameter to dev_fwnode()
     - kallsyms: Make module_kallsyms_on_each_symbol generally available
     - tracing/kprobes: Fix symbol counting logic by looking at modules as well
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.72
     - keys, dns: Fix missing size check of V1 server-list header
     - block: Don't invalidate pagecache for invalid falloc modes
     - ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series
     - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook
     - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
     - mptcp: prevent tcp diag from closing listener subflows
     - Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
     - [x86] drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV,
       G200SE
     - cifs: cifs_chan_is_iface_active should be called with chan_lock held
     - cifs: do not depend on release_iface for maintaining iface_list
     - [x86] KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL
     - wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ (Closes: #1058887)
     - [arm64] drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in
       AUX xfer
     - netfilter: use skb_ip_totlen and iph_totlen
     - netfilter: nf_tables: set transport offset from mac header for
       netdev/egress
     - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to
       llcp_local
     - [x86] drm/i915/dp: Fix passing the correct DPCD_REV for
       drm_dp_set_phy_test_pattern
     - ice: Fix link_down_on_close message
     - ice: Shut down VSI with "link-down-on-close" enabled
     - i40e: Fix filter input checks to prevent config with invalid values
     - igc: Report VLAN EtherType matching back to user
     - igc: Check VLAN TCI mask
     - igc: Check VLAN EtherType mask
     - net: sched: em_text: fix possible memory leak in em_text_destroy()
     - r8169: Fix PCI error on system resume
     - can: raw: add support for SO_MARK
     - net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
     - net: annotate data-races around sk->sk_tsflags
     - net: annotate data-races around sk->sk_bind_phc
     - net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
     - [armhf] sun9i: smp: Fix array-index-out-of-bounds read in
       sunxi_mc_smp_init
     - sfc: fix a double-free bug in efx_probe_filters
     - [arm64] net: bcmgenet: Fix FCS generation for fragmented skbuffs
     - netfilter: nft_immediate: drop chain reference counter on error
     - net: Save and restore msg_namelen in sock_sendmsg
     - i40e: fix use-after-free in i40e_aqc_add_filters()
     - [arm64] ASoC: meson: g12a-toacodec: Validate written enum values
     - [arm64] ASoC: meson: g12a-tohdmitx: Validate written enum values
     - [arm64] ASoC: meson: g12a-toacodec: Fix event generation
     - [arm64] ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
     - i40e: Restore VF MSI-X state during PCI reset
     - igc: Fix hicredit calculation
     - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
     - net/smc: fix invalid link access in dumping SMC-R connections
     - asix: Add check for usbnet_get_endpoints
     - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
     - net: Implement missing SO_TIMESTAMPING_NEW cmsg support
     - cpu/SMT: Create topology_smt_thread_allowed()
     - cpu/SMT: Make SMT control more robust against enumeration failures
     - srcu: Fix callbacks acceleration mishandling
     - [x86] bpf, x64: Fix tailcall infinite loop
     - [x86] bpf, x86: Simplify the parsing logic of structure parameters
     - [x86] bpf, x86: save/restore regs with BPF_DW size
     - net: Declare MSG_SPLICE_PAGES internal sendmsg() flag
     - udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES
     - splice, net: Add a splice_eof op to file-ops and socket-ops
     - ipv4, ipv6: Use splice_eof() to flush
     - udp: introduce udp->udp_flags
     - udp: move udp->no_check6_tx to udp->udp_flags
     - udp: move udp->no_check6_rx to udp->udp_flags
     - udp: move udp->gro_enabled to udp->udp_flags
     - udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags
     - udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO
     - udp: annotate data-races around udp->encap_type
     - wifi: iwlwifi: yoyo: swap cdb and jacket bits values
     - [arm64] dts: qcom: sdm845: align RPMh regulator nodes with bindings
     - [arm64] dts: qcom: sdm845: Fix PSCI power domain names
     - bpf: decouple prune and jump points
     - bpf: remove unnecessary prune and jump points
     - bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()
     - bpf: clean up visit_insn()'s instruction processing
     - bpf: Support new 32bit offset jmp instruction
     - bpf: handle ldimm64 properly in check_cfg()
     - bpf: fix precision backtracking instruction iteration
     - blk-mq: make sure active queue usage is held for bio_integrity_prep()
     - net/mlx5: Increase size of irq name buffer
     - [s390x] mm: add missing arch_set_page_dat() call to vmem_crst_alloc()
     - [s390x] cpumf: support user space events for counting
     - f2fs: clean up i_compress_flag and i_compress_level usage
     - f2fs: convert to use bitmap API
     - f2fs: assign default compression level
     - f2fs: set the default compress_level on ioctl
     - ext4: convert move_extent_per_page() to use folios
     - khugepage: replace try_to_release_page() with filemap_release_folio()
     - memory-failure: convert truncate_error_page() to use folio
     - mm: merge folio_has_private()/filemap_release_folio() call pairs
     - mm, netfs, fscache: stop read optimisation when folio removed from
       pagecache
     - filemap: add a per-mapping stable writes flag
     - block: update the stable_writes flag in bdev_add
     - smb: client: fix missing mode bits for SMB symlinks
     - net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
     - dpaa2-eth: recycle the RX buffer only after all processing done
     - ethtool: don't propagate EOPNOTSUPP from dumps
     - bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
     - [arm64] firmware: arm_scmi: Fix frequency truncation by promoting
       multiplier type
     - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7
     - genirq/affinity: Remove the 'firstvec' parameter from
       irq_build_affinity_masks
     - genirq/affinity: Pass affinity managed mask array to
       irq_build_affinity_masks
     - genirq/affinity: Don't pass irq_affinity_desc array to
       irq_build_affinity_masks
     - genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly
     - genirq/affinity: Move group_cpus_evenly() into lib/
     - lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly
     - mm/memory_hotplug: add missing mem_hotplug_lock
     - mm/memory_hotplug: fix error handling in add_memory_resource()
     - net: sched: call tcf_ct_params_free to free params in tcf_ct_init
     - netfilter: flowtable: allow unidirectional rules
     - netfilter: flowtable: cache info of last offload
     - net/sched: act_ct: offload UDP NEW connections
     - net/sched: act_ct: Fix promotion of offloaded unreplied tuple
     - netfilter: flowtable: GC pushes back packets to classic path
     - net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table
     - btrfs: fix qgroup_free_reserved_data int overflow
     - btrfs: mark the len field in struct btrfs_ordered_sum as unsigned
     - ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg()
     - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines
       and ASM108x/VT630x PCIe cards
     - [x86] kprobes: fix incorrect return address calculation in
       kprobe_emulate_call_indirect
     - mm: fix unmap_mapping_range high bits shift bug
     - drm/amdgpu: skip gpu_info fw loading on navi12
     - drm/amd/display: add nv12 bounding box
     - mmc: rpmb: fixes pause retune on all RPMB partitions.
     - mmc: core: Cancel delayed work before releasing host
     - genirq/affinity: Only build SMP-only helper functions on SMP kernels
     - f2fs: compress: fix to assign compress_level for lz4 correctly
     - net/sched: act_ct: additional checks for outdated flows
     - net/sched: act_ct: Always fill offloading tuple iifidx
     - bpf: Fix a verifier bug due to incorrect branch offset comparison with
       cpu=v4
     - bpf: syzkaller found null ptr deref in unix_bpf proto add
     - smb3: Replace smb2pdu 1-element arrays with flex-arrays
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.73
     - Revert "nfsd: call nfsd_last_thread() before final nfsd_put()"
     - Revert "nfsd: separate nfsd_last_thread() from nfsd_put()"
     - ipv6: remove max_size check inline with ipv4 (CVE-2023-52340)
     - cifs: fix flushing folio regression for 6.1 backport (Closes: #1060005)
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.74
     - f2fs: explicitly null-terminate the xattr list
     - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
     - mptcp: fix uninit-value in mptcp_incoming_options
     - wifi: cfg80211: lock wiphy mutex for rfkill poll
     - wifi: avoid offset calculation on NULL pointer
     - wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap
     - debugfs: fix automount d_fsdata usage
     - ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format
     - nvme-core: fix a memory leak in nvme_ns_info_from_identify()
     - drm/amd/display: update dcn315 lpddr pstate latency
     - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
     - blk-mq: don't count completed flush data request as inflight in case of
       quiesce
     - nvme-core: check for too small lba shift
     - [x86] ASoC: Intel: Skylake: Fix mem leak in few functions
     - [x86] ASoC: Intel: Skylake: mem leak in skl register function
     - ASoC: rt5650: add mutex to avoid the jack detection failure
     - [x86] ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not
       available
     - nouveau/tu102: flush all pdbs on vmm flush
     - [x86] ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13
     - [x86] ASoC: hdac_hda: Conditionally register dais for HDMI and Analog
     - net/tg3: fix race condition in tg3_reset_task()
     - ASoC: da7219: Support low DC impedance headset
     - ASoC: ops: add correct range check for limiting volume
     - nvme: introduce helper function to get ctrl state
     - nvme: prevent potential spectre v1 gadget
     - [arm64] dts: rockchip: Fix PCI node addresses on rk3399-gru
     - drm/amdgpu: Add NULL checks for function pointers
     - [armhf] drm/exynos: fix a potential error pointer dereference
     - [armhf] drm/exynos: fix a wrong error checking
     - [x86] hwmon: (corsair-psu) Fix probe when built-in
     - [arm64] clk: rockchip: rk3568: Add PLL rate for 292.5MHz
     - [armhf] clk: rockchip: rk3128: Fix HCLK_OTG gate register
     - jbd2: correct the printing of write_flags in jbd2_write_superblock()
     - jbd2: increase the journal IO's priority
     - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
     - neighbour: Don't let neigh_forced_gc() disable preemption for long
     - [x86] platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
     - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
     - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
     - tracing: Add size check when printing trace_marker output
     - tracing: Fix uaf issue when open the hist or hist_debug file
     - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in
       NMI
     - Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1
     - [arm64] reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
     - Input: atkbd - skip ATKBD_CMD_GETID in translated mode
     - Input: i8042 - add nomux quirk for Acer P459-G2-M
     - [s390x] scm: fix virtual vs physical address confusion
     - wifi: iwlwifi: pcie: avoid a NULL pointer dereference
     - Input: xpad - add Razer Wolverine V2 support
     - HID: nintendo: fix initializer element is not constant error
     - [x86] platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some
       ThinkPad systems
     - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
     - [x86] ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk
     - ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models
     - dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM
     - HID: nintendo: Prevent divide-by-zero on code
     - smb: client: fix potential OOB in smb2_dump_detail() (CVE-2023-6610)
     - [arm64,armhf] i2c: rk3x: fix potential spinlock recursion on poll
     - drm/amd/display: get dprefclk ss info from integration info table
     - ida: Fix crash in ida_free when the bitmap is empty (CVE-2023-6915)
     - virtio_blk: fix snprintf truncation compiler warning
     - net: qrtr: ns: Return 0 if server port is not present
     - [armhf] sun9i: smp: fix return code check of of_property_match_string
     - drm/crtc: fix uninitialized variable use
     - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx
     - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
     - [x86] ASoC: SOF: Intel: hda-codec: Delay the codec device registration
     - btf, scripts: Exclude Rust CUs with pahole
     - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to
       pahole flags for v1.25
     - ksmbd: don't allow O_TRUNC open on read-only share
     - ksmbd: free ppace array on error in parse_dacl
     - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
     - [arm*] binder: use EPOLLERR from eventpoll.h
     - [arm*] binder: fix use-after-free in shinker's callback
     - [arm*] binder: fix trivial typo of binder_free_buf_locked()
     - [arm*] binder: fix comment on binder_alloc_new_buf() return value
     - uio: Fix use-after-free in uio_open
     - parport: parport_serial: Add Brainboxes BAR details
     - parport: parport_serial: Add Brainboxes device IDs and geometry
     - PCI: Add ACS quirk for more Zhaoxin Root Ports
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.75
     - [x86] lib: Fix overflow when counting digits
     - [x86] mce/inject: Clear test status value
     - [arm64] EDAC/thunderx: Fix possible out-of-bounds string access
     - [powerpc*] remove checks for binutils older than 2.25
     - [powerpc*] add crtsavres.o to always-y instead of extra-y
     - [powerpc*] 44x: select I2C for CURRITUCK
     - [powerpc*] pseries/memhp: Fix access beyond end of drmem array
     - [powerpc*] powernv: Add a null pointer check to scom_debug_init_one()
     - [powerpc*] powernv: Add a null pointer check in opal_event_init()
     - [powerpc*] powernv: Add a null pointer check in opal_powercap_init()
     - [powerpc*] imc-pmu: Add a null pointer check in update_events_in_group()
     - ACPI: video: check for error while searching for backlight device parent
     - ACPI: LPIT: Avoid u32 multiplication overflow
     - KEYS: encrypted: Add check for strsep
     - [x86] platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux()
     - [x86] platform/x86/intel/vsec: Support private data
     - [x86] platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free()
     - [x86] platform/x86/intel/vsec: Fix xa_alloc memory leak
     - of: Add of_property_present() helper
     - cpufreq: Use of_property_present() for testing DT property presence
     - cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
     - calipso: fix memory leak in netlbl_calipso_add_pass()
     - efivarfs: force RO when remounting if SetVariable is not supported
     - efivarfs: Free s_fs_info on unmount
     - ACPI: LPSS: Fix the fractional clock divider flags
     - ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the
       error
     - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
     - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
     - crypto: virtio - Handle dataq logic with tasklet
     - [x86] crypto: ccp - fix memleak in ccp_init_dm_workarea
     - crypto: af_alg - Disallow multiple in-flight AIO requests
     - [arm64] crypto: safexcel - Add error handling for dma_map_sg() calls
     - crypto: hisilicon/qm - save capability registers in qm init process
     - crypto: hisilicon/zip - add zip comp high perf mode configuration
     - crypto: hisilicon/qm - add a function to set qm algs
     - crypto: hisilicon/hpre - save capability registers in probe process
     - crypto: hisilicon/sec2 - save capability registers in probe process
     - crypto: hisilicon/zip - save capability registers in probe process
     - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
     - erofs: fix memory leak on short-lived bounced pages
     - fs: indicate request originates from old mount API
     - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
     - crypto: virtio - Wait for tasklet to complete on device remove
     - crypto: scomp - fix req->dst buffer overflow
     - csky: fix arch_jump_label_transform_static override
     - blocklayoutdriver: Fix reference leak of pnfs_device_node
     - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
     - SUNRPC: fix _xprt_switch_find_current_entry logic
     - pNFS: Fix the pnfs block driver's calculation of layoutget size
     - wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async()
     - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
     - bpf, lpm: Fix check prefixlen before walking trie
     - bpf: Add crosstask check to __bpf_get_stack
     - wifi: ath11k: Defer on rproc_get failure
     - wifi: libertas: stop selecting wext
     - [armhf] net/ncsi: Fix netlink major/minor version numbers
     - [arm64] firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
     - [arm64] firmware: meson_sm: populate platform devices from sm device tree
       data
     - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
     - md: synchronize flush io with array reconfiguration
     - bpf: enforce precision of R0 on callback return
     - rcu-tasks: Provide rcu_trace_implies_rcu_gp()
     - bpf: add percpu stats for bpf_map elements insertions/deletions
     - bpf: Add map and need_defer parameters to .map_fd_put_ptr()
     - bpf: Defer the free of inner map when necessary
     - bpf: fix check for attempt to corrupt spilled pointer
     - scsi: fnic: Return error if vmalloc() failed
     - [arm64] dts: qcom: qrb5165-rb5: correct LED panic indicator
     - [arm64] dts: qcom: sdm845-db845c: correct LED panic indicator
     - bpf: Fix verification of indirect var-off stack access
     - dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with
       generic names
     - wifi: mt76: mt7921: fix country count limitation for CLC
     - block: Set memalloc_noio to false on device_add_disk() error path
     - [arm64] scsi: hisi_sas: Replace with standard error code return value
     - [arm64] scsi: hisi_sas: Rollback some operations if FLR failed
     - [arm64] scsi: hisi_sas: Correct the number of global debugfs registers
     - [armhf] dts: stm32: don't mix SCMI and non-SCMI board compatibles
     - ipmr: support IP_PKTINFO on cache report IGMP msg
     - virtio/vsock: fix logic which reduces credit update messages
     - dma-mapping: clear dev->dma_mem to NULL after freeing it
     - [arm64] dts: qcom: sm8150-hdk: fix SS USB regulators
     - block: add check of 'minors' and 'first_minor' in device_add_disk()
     - wifi: rtlwifi: add calculate_bit_shift()
     - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
     - wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
     - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
     - wifi: iwlwifi: mvm: send TX path flush in rfkill
     - netfilter: nf_tables: mark newset as dead on transaction abort
     - Bluetooth: Fix bogus check for re-auth no supported with non-ssp
     - Bluetooth: btmtkuart: fix recv_buf() return value
     - block: make BLK_DEF_MAX_SECTORS unsigned
     - null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
     - bpf: sockmap, fix proto update hook to avoid dup calls
     - sctp: support MSG_ERRQUEUE flag in recvmsg()
     - sctp: fix busy polling
     - net/sched: act_ct: fix skb leak and crash on ooo frags
     - mlxbf_gige: Fix intermittent no ip issue
     - mlxbf_gige: Enable the GigE port in mlxbf_gige_open
     - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
     - [armhf] Revert "drm/omapdrm: Annotate dma-fence critical section in commit
       path"
     - [arm64,armhf] drm/panfrost: Really power off GPU cores in
       panfrost_gpu_power_off()
     - RDMA/usnic: Silence uninitialized symbol smatch warnings
     - [arm64] RDMA/hns: Fix inappropriate err code for unsupported operations
     - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
     - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
     - drm/tilcdc: Fix irq free on unload
     - media: pvrusb2: fix use after free on context disconnection
     - media: mtk-jpegdec: export jpeg decoder functions
     - media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the
       crash of multi-core JPEG devices
     - media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls
     - media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls
     - drm/bridge: Fix typo in post_disable() description
     - f2fs: fix to avoid dirent corruption
     - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
     - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
     - drm/radeon: check return value of radeon_ring_lock()
     - [arm64] drm/msm/mdp4: flush vblank event on disable
     - [arm64] drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
     - drm/drv: propagate errors from drm_modeset_register_all()
     - [x86] ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch
     - [arm64,armhf] drm/panfrost: Ignore core_mask for poweroff and disable
       PWRTRANS irq
     - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
     - drm/radeon/dpm: fix a memleak in sumo_parse_power_table
     - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
     - drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
     - drm/bridge: tc358767: Fix return value on error case
     - media: cx231xx: fix a memleak in cx231xx_init_isoc
     - [arm64] RDMA/hns: Fix memory leak in free_mr_init()
     - drm/panel: st7701: Fix AVCL calculation
     - f2fs: fix to wait on block writeback for post_read case
     - f2fs: fix to check compress file in f2fs_move_file_range()
     - f2fs: fix to update iostat correctly in f2fs_filemap_fault()
     - media: dvbdev: drop refcount on error path in dvb_device_open()
     - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling
       path of m88ds3103_probe()
     - [arm64] drm/msm/dpu: Set input_sel bit for INTF
     - [arm64] drm/msm/dpu: Drop enable and frame_count parameters from
       dpu_hw_setup_misr()
     - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
     - drm/amd/pm: fix a double-free in si_dpm_init
     - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
     - gpu/drm/radeon: fix two memleaks in radeon_vm_init
     - drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table
     - f2fs: fix to check return value of f2fs_recover_xattr_data
     - dt-bindings: clock: Update the videocc resets for sm8150
     - [arm64] drivers: clk: zynqmp: calculate closest mux rate
     - [arm64] drivers: clk: zynqmp: update divider round rate logic
     - watchdog: set cdev owner before adding
     - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
     - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
     - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
     - [arm64] clk: si5341: fix an error code problem in
       si5341_output_clk_set_rate
     - accel/habanalabs: fix information leak in sec_attest_info()
       (CVE-2023-50431)
     - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
     - ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
     - ALSA: scarlett2: Add missing error check to scarlett2_config_save()
     - ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
     - ALSA: scarlett2: Allow passing any output to line_out_remap()
     - ALSA: scarlett2: Add missing error checks to *_ctl_get()
     - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
     - IB/iser: Prevent invalidating wrong MR
     - drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
     - ksmbd: validate the zero field of packet header
     - of: Fix double free in of_parse_phandle_with_args_map
     - keys, dns: Fix size check of V1 server-list header
     - [arm*] binder: fix async space check for 0-sized buffers
     - [arm*] binder: fix unused alloc->free_async_space
     - [mipel*] smp: Call rcutree_report_cpu_starting() earlier
     - Input: atkbd - use ab83 as id when skipping the getid command
     - xen-netback: don't produce zero-size SKB frags (CVE-2023-46838)
     - [arm*] binder: fix race between mmput() and do_exit()
     - [arm64,armhf] clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc
       warnings
     - [powerpc*] 64s: Increase default stack size to 32KB
     - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
     - [armhf] usb: phy: mxs: remove CONFIG_USB_OTG condition for
       mxs_phy_is_otg_host()
     - [arm64,armhf] usb: dwc: ep0: Update request status in
       dwc3_ep0_stall_restart
     - [arm64,armhf] Revert "usb: dwc3: Soft reset phy on probe for host"
     - [arm64,armhf] Revert "usb: dwc3: don't reset device side if dwc3 was
       configured as host-only"
     - [arm64,armhf] usb: chipidea: wait controller resume finished for wakeup
       irq
     - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
     - usb: typec: class: fix typec_altmode_put_partner to put plugs
     - usb: mon: Fix atomicity violation in mon_bin_vma_fault
     - serial: core: fix sanitizing check for RTS settings
     - serial: core: make sure RS485 cannot be enabled when it is not supported
     - [arm64,armhf] serial: 8250_bcm2835aux: Restore clock error handling
     - serial: core, imx: do not set RS485 enabled if it is not supported
     - [arm64,armhf] serial: imx: Ensure that imx_uart_rs485_config() is called
       with enabled clock
     - serial: 8250_exar: Set missing rs485_supported flag
     - [armhf] serial: omap: do not override settings for RS485 support
     - drm/vmwgfx: Fix possible invalid drm gem put calls
     - drm/vmwgfx: Keep a gem reference to user bos in surfaces (CVE-2023-5633)
     - ALSA: oxygen: Fix right channel of capture volume mixer
     - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
     - ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP
       ZBook
     - ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5
     - ksmbd: validate mech token in session setup
     - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
     - ksmbd: only v2 leases handle the directory
     - io_uring/rw: ensure io->bytes_done is always initialized
     - fbdev: flush deferred work in fb_deferred_io_fsync()
     - fbdev: flush deferred IO before closing
     - scsi: ufs: core: Simplify power management during async scan
     - scsi: target: core: add missing file_{start,end}_write()
     - scsi: mpi3mr: Refresh sdev queue depth after controller reset
     - scsi: mpi3mr: Block PEL Enable Command on Controller Reset and
       Unrecoverable State
     - drm/amd: Enable PCIe PME from D3
     - block: add check that partition length needs to be aligned with block size
     - block: Fix iterating over an empty bio with bio_for_each_folio_all
     - netfilter: nf_tables: check if catch-all set element is active in next
       generation (CVE-2024-1085)
     - pwm: Fix out-of-bounds access in of_pwm_single_xlate()
     - md/raid1: Use blk_opf_t for read and write operations
     - rootfs: Fix support for rootfstype= when root= is given
     - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
     - bpf: Fix re-attachment branch in bpf_tracing_prog_attach
     - [arm64] iommu/arm-smmu-qcom: Add missing GMU entry to match table
     - iommu/dma: Trace bounce buffer usage when mapping buffers
     - wifi: mt76: fix broken precal loading from MTD for mt7915
     - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
     - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
     - wifi: mwifiex: configure BSSID consistently when starting AP
     - Revert "net: rtnetlink: Enslave device before bringing it up"
     - cxl/port: Fix decoder initialization when nr_targets > interleave_ways
     - PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg()
     - [x86] kvm: Do not try to disable kvmclock if it was not enabled
     - [arm64] KVM: arm64: vgic-v4: Restore pending state on host userspace write
     - [arm64] KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
     - iio: adc: ad7091r: Pass iio_dev to event handler
     - HID: wacom: Correct behavior when processing some confidence == false
       touches
     - mfd: syscon: Fix null pointer dereference in of_syscon_register()
     - [x86] mfd: intel-lpss: Fix the fractional clock divider flags
     - [mipsel] Fix incorrect max_low_pfn adjustment
     - [arm64] power: supply: cw2015: correct time_to_empty units in sysfs
     - [arm64] serial: 8250: omap: Don't skip resource freeing if
       pm_runtime_resume_and_get() failed
     - libapi: Add missing linux/types.h header to get the __u64 type on io.h
     - base/node.c: initialize the accessor list before registering
     - acpi: property: Let args be NULL in __acpi_node_get_property_reference
     - software node: Let args be NULL in software_node_get_reference_args
     - serial: imx: fix tx statemachine deadlock
     - iio: adc: ad9467: fix reset gpio handling
     - iio: adc: ad9467: don't ignore error codes
     - iio: adc: ad9467: fix scale setting
     - perf header: Fix one memory leakage in perf_event__fprintf_event_update()
     - perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event()
     - perf genelf: Set ELF program header addresses properly
     - tty: change tty_write_lock()'s ndelay parameter to bool
     - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
     - tty: don't check for signal_pending() in send_break()
     - tty: use 'if' in send_break() instead of 'goto'
     - usb: cdc-acm: return correct error code on unsupported break
     - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
     - nvmet-tcp: fix a crash in nvmet_req_complete()
     - perf env: Avoid recursively taking env->bpf_progs.lock
     - cxl/region: fix x9 interleave typo
     - apparmor: avoid crash when parsed profile name is empty
     - [arm64,armhf] serial: imx: Correct clock error message in function probe()
     - nvmet: re-fix tracing strncpy() warning
     - nvme: trace: avoid memcpy overflow warning
     - nvmet-tcp: Fix the H2C expected PDU len calculation
     - [s390x] pci: fix max size calculation in zpci_memcpy_toio()
     - [arm64] net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
     - net: phy: micrel: populate .soft_reset for KSZ9131
     - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
     - mptcp: strict validation before using mp_opt->hmac
     - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
     - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
     - mptcp: refine opt_mp_capable determination
     - block: ensure we hold a queue reference when using queue limits
     - udp: annotate data-races around up->pending
     - net: stmmac: ethtool: Fixed calltrace caused by unbalanced
       disable_irq_wake calls
     - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
     - mptcp: relax check on MPC passive fallback
     - netfilter: nf_tables: reject invalid set policy
     - netfilter: nft_limit: do not ignore unsupported flags
     - netfilter: nfnetlink_log: use proper helper for fetching physinif
     - netfilter: nf_queue: remove excess nf_bridge variable
     - netfilter: propagate net to nf_bridge_get_physindev
     - netfilter: bridge: replace physindev with physinif in nf_bridge_info
     - netfilter: nf_tables: do not allow mismatch field size and set key length
     - netfilter: nf_tables: skip dead set elements in netlink dump
     - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length
       description
     - ipvs: avoid stat macros calls from preemptible context
     - kdb: Fix a potential buffer overflow in kdb_local()
     - ethtool: netlink: Add missing ethnl_ops_begin/complete
     - loop: fix the the direct I/O support check when used on top of block
       devices
     - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
     - [armhf] i2c: s3c24xx: fix read transfers in polling mode
     - [armhf] i2c: s3c24xx: fix transferring more than one message in polling
       mode
     - block: Remove special-casing of compound pages
     - Revert "KEYS: encrypted: Add check for strsep"
     - [arm64] dts: armada-3720-turris-mox: set irq type for RTC
     - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.76
     - [arm64,armhf] usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
       separate API
     - [arm64,armhf] usb: dwc3: gadget: Queue PM runtime idle on disconnect event
     - [arm64,armhf] usb: dwc3: gadget: Handle EP0 request dequeuing properly
     - [x86] Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested
       VMCB"
     - iio: adc: ad7091r: Set alert bit in config register
     - iio: adc: ad7091r: Allow users to configure device events
     - ext4: allow for the last group to be marked as trimmed
     - OPP: Pass rounded rate to _set_opp()
     - btrfs: sysfs: validate scrub_speed_max value
     - crypto: api - Disallow identical driver names
     - PM: hibernate: Enforce ordering during image compression/decompression
     - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
     - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode
     - [s390x] vfio-ap: unpin pages on gisc registration failure
     - PM / devfreq: Fix buffer overflow in trans_stat_show
     - media: imx355: Enable runtime PM before registering async sub-device
     - rpmsg: virtio: Free driver_override when rpmsg_remove()
     - media: ov9734: Enable runtime PM before registering async sub-device
     - [s390x] vfio-ap: always filter entire AP matrix
     - [s390x] vfio-ap: loop over the shadow APCB when filtering guest's AP
       configuration
     - [s390x] vfio-ap: let on_scan_complete() callback filter matrix and update
       guest's APCB
     - [mips*] Fix max_mapnr being uninitialized on early stages
     - bus: mhi: host: Add alignment check for event ring read pointer
     - bus: mhi: host: Drop chan lock before queuing buffers
     - bus: mhi: host: Add spinlock to protect WP access when queueing TREs
     - async: Split async_schedule_node_domain()
     - async: Introduce async_schedule_dev_nocall()
     - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
     - dmaengine: fix NULL pointer in channel unregistration function
     - scsi: ufs: core: Remove the ufshcd_hba_exit() call from
       ufshcd_async_scan()
     - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types
     - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types
     - [arm64] dts: qcom: sm8150: fix USB wakeup interrupt types
     - [arm64] dts: qcom: sc7280: fix usb_1 wakeup interrupt types
     - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
     - [arm64] dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts
     - lsm: new security_file_ioctl_compat() hook
     - docs: kernel_abi.py: fix command injection
     - scripts/get_abi: fix source path leak
     - media: videobuf2-dma-sg: fix vmap callback
     - mmc: core: Use mrq.sbc in close-ended ffu
     - mmc: mmc_spi: remove custom DMA mapped buffers
     - media: mtk-jpeg: Fix use after free bug due to error path handling in
       mtk_jpeg_dec_device_run
     - [arm64] Rename ARM64_WORKAROUND_2966298
     - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too
     - rtc: Adjust failure return code for cmos_set_alarm()
     - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time()
     - rtc: Add support for configuring the UIP timeout for RTC reads
     - rtc: Extend timeout for waiting for UIP to clear to 1s
     - nouveau/vmm: don't set addr on the fail path to avoid warning
     - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
     - mm/rmap: fix misplaced parenthesis of a likely()
     - mm/sparsemem: fix race in accessing memory_section->usage
     - rename(): fix the locking of subdirectories
     - serial: sc16is7xx: improve regmap debugfs by using one regmap per port
     - serial: sc16is7xx: remove wasteful static buffer in
       sc16is7xx_regmap_name()
     - serial: sc16is7xx: remove global regmap from struct sc16is7xx_port
     - serial: sc16is7xx: remove unused line structure member
     - serial: sc16is7xx: change EFR lock to operate on each channels
     - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
     - serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe
       error
     - serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq()
     - serial: sc16is7xx: improve do/while loop in sc16is7xx_irq()
     - mm: page_alloc: unreserve highatomic page blocks before oom
     - ksmbd: set v2 lease version on lease upgrade
     - ksmbd: fix potential circular locking issue in smb2_set_ea()
     - ksmbd: don't increment epoch if current state and request state are same
     - ksmbd: send lease break notification on FILE_RENAME_INFORMATION
     - ksmbd: Add missing set_freezable() for freezable kthread
     - Revert "drm/amd: Enable PCIe PME from D3"
     - drm/amd/display: pbn_div need be updated for hotplug event
     - wifi: mac80211: fix potential sta-link leak
     - net/smc: fix illegal rmb_desc access in SMC-D connection dump
     - tcp: make sure init the accept_queue's spinlocks once
     - bnxt_en: Wait for FLR to complete during probe
     - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
     - llc: make llc_ui_sendmsg() more robust against bonding changes
     - llc: Drop support for ETH_P_TR_802_2.
     - udp: fix busy polling
     - net: fix removing a namespace with conflicting altnames
     - tun: fix missing dropped counter in tun_xdp_act
     - tun: add missing rx stats accounting in tun_xdp_act
     - net: micrel: Fix PTP frame parsing for lan8814
     - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
     - netfs, fscache: Prevent Oops in fscache_put_cache()
     - tracing: Ensure visibility when inserting an element into tracing_map
     - afs: Hide silly-rename files from userspace
     - tcp: Add memory barrier to tcp_push()
     - netlink: fix potential sleeping issue in mqueue_flush_file
     - ipv6: init the accept_queue's spinlocks in inet6_create
     - net/mlx5: DR, Use the right GVMI number for drop action
     - net/mlx5: DR, Can't go to uplink vport on RX rule
     - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO
     - net/mlx5e: Allow software parsing when IPsec crypto is enabled
     - net/mlx5e: fix a double-free in arfs_create_groups
     - net/mlx5e: fix a potential double-free in fs_any_create_groups
     - rcu: Defer RCU kthreads wakeup when CPU is dying
     - netfilter: nft_limit: reject configurations that cause integer overflow
     - btrfs: fix infinite directory reads
     - btrfs: set last dir index to the current last index when opening dir
     - btrfs: refresh dir last index during a rewinddir(3) call
     - btrfs: fix race between reading a directory and adding entries to it
     - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
     - netfilter: nf_tables: validate NFPROTO_* family
     - net: stmmac: Wait a bit for the reset to take effect
     - net: mvpp2: clear BM pool before initialization
     - fjes: fix memleaks in fjes_hw_setup
     - net: fec: fix the unhandled context fault from smmu
     - nbd: always initialize struct msghdr completely
     - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume
       being deleted
     - btrfs: ref-verify: free ref cache before clearing mount opt
     - btrfs: tree-checker: fix inline ref size in error messages
     - btrfs: don't warn if discard range is not aligned to sector
     - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
     - btrfs: don't abort filesystem when attempting to snapshot deleted
       subvolume
     - rbd: don't move requests to the running list on errors
     - exec: Fix error handling in begin_new_exec()
     - wifi: iwlwifi: fix a memory corruption
     - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes
     - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress
       basechain
     - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-1086)
     - [x86] platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe
     - ksmbd: fix global oob in ksmbd_nl_policy
     - [arm64] firmware: arm_scmi: Check mailbox/SMT channel for consistency
     - xfs: read only mounts with fsopen mount API are busted
     - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
     - cpufreq: intel_pstate: Refine computation of P-state for given frequency
     - drm: Don't unref the same fb many times by mistake due to deadlock
       handling
     - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
     - drm/tidss: Fix atomic_flush check
     - drm/amd/display: Disable PSR-SU on Parade 0803 TCON again
     - [x86] platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
     - drm/bridge: nxp-ptn3460: simplify some error checking
     - drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A
     - drm/amdgpu/pm: Fix the power source flag error
     - erofs: get rid of the remaining kmap_atomic()
     - erofs: fix lz4 inplace decompression
     - media: ov13b10: Support device probe in non-zero ACPI D state
     - media: ov13b10: Enable runtime PM before registering async sub-device
     - bus: mhi: ep: Do not allocate event ring element on stack
     - PM: core: Remove unnecessary (void *) conversions
     - PM: sleep: Fix possible deadlocks in core system-wide PM code
     - [x86] thermal: intel: hfi: Refactor enabling code into helper functions
     - [x86] thermal: intel: hfi: Disable an HFI instance when all its CPUs go
       offline
     - [x86] thermal: intel: hfi: Add syscore callbacks for system-wide PM
     - fs/pipe: move check to pipe_has_watch_queue()
     - pipe: wakeup wr_wait after setting max_usage
     - dlm: use kernel_connect() and kernel_bind()
     - serial: core: Provide port lock wrappers
     - serial: sc16is7xx: Use port lock wrappers
     - serial: sc16is7xx: fix unconditional activation of THRI interrupt
     - btrfs: zoned: factor out prepare_allocation_zoned()
     - btrfs: zoned: optimize hint byte for zoned allocator
     - drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing
     - Revert "powerpc/64s: Increase default stack size to 32KB"
     - drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer
     - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
     - drm/bridge: sii902x: Use devm_regulator_bulk_get_enable()
     - drm/bridge: sii902x: Fix probing race issue
     - drm/bridge: sii902x: Fix audio codec unregistration
     - drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable()
     - drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error
       case
     - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane
     - [armhf] drm/exynos: gsc: minor fix for loop iteration in
       gsc_runtime_resume
     - gpio: eic-sprd: Clear interrupt after set the interrupt type
     - block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
     - drm/bridge: anx7625: Ensure bridge is suspended in disable()
     - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
     - spi: fix finalize message on error return
     - [mips*] lantiq: register smp_ops on non-smp platforms
     - cxl/region：Fix overflow issue in alloc_hpa()
     - [mips*] Call lose_fpu(0) before initializing fcr31 in
       mips_set_personality_nan
     - tick/sched: Preserve number of idle sleeps across CPU hotplug events
     - [x86] x86/entry/ia32: Ensure s32 is sign extended to s64
     - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
     - net/mlx5e: Handle hardware IPsec limits events
 .
   [ Salvatore Bonaccorso ]
   * Refresh "net: mana: Add support for auxiliary device"
   * Bump ABI to 18
Checksums-Sha1:
 70606cb164dd1ca4c41fc3bfb1af77862694b885 8482 linux-signed-amd64_6.1.76+1.dsc
 bf272481277bf9ce3b01f39ac7751e2cc13cd30c 3115464 linux-signed-amd64_6.1.76+1.tar.xz
Checksums-Sha256:
 c4c2a465e19475845d66326a12669d47b15de9b58400e143e24387ee0683659f 8482 linux-signed-amd64_6.1.76+1.dsc
 82bc29af9905d686afd1182c1289ec6651a664a2b26ae2115aeb8101e5949893 3115464 linux-signed-amd64_6.1.76+1.tar.xz
Files:
 a6ece35fedfb22d037982c57bb3a6fed 8482 kernel optional linux-signed-amd64_6.1.76+1.dsc
 b8fb7d5218b21fed2108f59e2fc84b38 3115464 kernel optional linux-signed-amd64_6.1.76+1.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmW8S/IACgkQi0FRiLdO
NzZBBg/+JUtlfYXyUX3hg/sRz2DZRwBraNTFui5zyvRqzf0Ko2/GUnYKMDr/jk9d
8JEzJwKfxpi+FchR1+29FkAADg+o5JvWyZBxArFedNu9jwpNwQ9tQ/V5HkH3WBNR
xYXJD6akNnVQZUEvWy/7DLzMcEz6dndmSWGRkamlzed8sozNrxOsQdcJVszNbw//
x0nzCyxPteTamTmlMRPqH5vG0/to6tnht7jTOuRo5YFACbLkQ+zEvnCrZFQ3R2J5
aM4PnONwo4WcpZxVXUQRiiTeX+yqesayekORbVwDa3VHsp0+sy7FgSuo/21m4k94
7YN03nJ1oQPZLh6QoXVYNftHx7WRUFK2FCLK+bnn3784cln4e8/TK+7+Ui8IjXnq
M3Gp1gH5/Rdv3WwauegZvEVu1W82iYbyoXby6NKqHcvPsF2640ZGQNPFDAPr7+un
fBplJN/ecapPF0OryEadrHXm1noky/1Cp5Ui7oBk7sC3O64xW3SJ3Uzw7UmSwHPR
KUBmNdxbL4WF7FvysbWwAXbVPc2zF7BoW8qypifBqhDOoeXgbexUO0TKIBnDZK2B
BIl09WpIHf0pObU0y4cavMrr7SSolP1acnqc/aJMEUxFPsvlB/i5H3k9AO4TsLV+
+0DrEpRAbKTFI73wCwXcVI5nhy64Hf0pSSXsanpI59M3xfx9s9c=
=xPPV
-----END PGP SIGNATURE-----