Accepted linux 6.1.55-1 (source) into proposed-updates

[Debian FTP Masters <ftpmaster@ftp-master.debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 Sep 2023 06:15:31 +0200
Source: linux
Architecture: source
Version: 6.1.55-1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1035378 1037142 1041007 1051613 1052063 1053120
Changes:
 linux (6.1.55-1) bookworm; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.53
     - Revert "bridge: Add extack warning when enabling STP in netns."
     - Partially revert "drm/amd/display: Fix possible underflow for displays
       with large vblank"
     - scsi: ufs: Try harder to change the power mode
     - Revert "Revert drm/amd/display: Enable Freesync Video Mode by default"
     - ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform
     - [powerpc*] boot: Disable power10 features after BOOTAFLAGS assignment
     - media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field
     - 9p: virtio: fix unlikely null pointer deref in handle_rerror
     - 9p: virtio: make sure 'offs' is initialized in zc_request
     - ksmbd: fix out of bounds in smb3_decrypt_req()
     - ksmbd: validate session id and tree id in compound request
     - ksmbd: no response from compound read
     - ksmbd: fix out of bounds in init_smb2_rsp_hdr()
     - ASoC: da7219: Flush pending AAD IRQ when suspending
     - ASoC: da7219: Check for failure reading AAD IRQ events
     - [x86] ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect
     - ethernet: atheros: fix return value check in atl1c_tso_csum()
     - [s390x] dasd: use correct number of retries for ERP requests
     - [s390x] dasd: fix hanging device after request requeue
     - fs/nls: make load_nls() take a const parameter
     - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0
     - ASoc: codecs: ES8316: Fix DMIC config
     - ASoC: rt711: fix for JD event handling in ClockStop Mode0
     - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0
     - ASoC: atmel: Fix the 8K sample parameter in I2SC master
     - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset
     - [x86] platform/x86: intel: hid: Always call BTNL ACPI method
     - [x86] platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks
     - [x86] platform/x86: think-lmi: Use kfree_sensitive instead of kfree
     - [x86] platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops
     - [x86] platform/x86: huawei-wmi: Silence ambient light sensor
     - drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr
       Clock
     - drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family
     - drm/amd/display: Exit idle optimizations before attempt to access PHY
     - ovl: Always reevaluate the file signature for IMA
     - ALSA: usb-audio: Update for native DSD support quirks
     - security: keys: perform capable check only on privileged operations
     - kprobes: Prohibit probing on CFI preamble symbol
     - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
     - Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning
       on GCC 12"
     - net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit
       boundaries
     - net: annotate data-races around sk->sk_{rcv|snd}timeo
     - net: usb: qmi_wwan: add Quectel EM05GV2
     - wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1()
     - [powerpc*] powermac: Use early_* IO variants in via_calibrate_decr()
     - [x86] platform/x86/amd/pmf: Fix unsigned comparison with less than zero
     - scsi: lpfc: Remove reftag check in DIF paths
     - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
     - [arm64] net: hns3: restore user pause configure when disable autoneg
     - drm/amdgpu: Match against exact bootloader status
     - wifi: cfg80211: remove links only on AP
     - wifi: mac80211: Use active_links instead of valid_links in Tx
     - netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
     - bnx2x: fix page fault following EEH recovery
     - cifs: fix sockaddr comparison in iface_cmp
     - cifs: fix max_credits implementation
     - sctp: handle invalid error codes without calling BUG()
     - scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
     - scsi: storvsc: Always set no_report_opcodes
     - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path
     - ALSA: seq: oss: Fix racy open/close of MIDI devices
     - net: sfp: handle 100G/25G active optical cables in sfp_parse_support
     - tracing: Introduce pipe_cpumask to avoid race on trace_pipes
     - of: property: Simplify of_link_to_phandle()
     - [x86] cpufreq: intel_pstate: set stale CPU frequency to minimum
     - crypto: rsa-pkcs1pad - Use helper to set reqsize
     - [x86] KVM: x86/mmu: Use kstrtobool() instead of strtobool()
     - [x86] KVM: x86/mmu: Add "never" option to allow sticky disabling of
       nx_huge_pages
     - net: Avoid address overwrite in kernel_connect
     - drm/amd/display: ensure async flips are only accepted for fast updates
     - udf: Check consistency of Space Bitmap Descriptor
     - udf: Handle error when adding extent to a file
     - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
     - Revert "net: macsec: preserve ingress frame ordering"
     - reiserfs: Check the return value from __getblk()
     - eventfd: prevent underflow for eventfd semaphores
     - fs: Fix error checking for d_hash_and_lookup()
     - iomap: Remove large folio handling in iomap_invalidate_folio()
     - tmpfs: verify {g,u}id mount options correctly
     - vfs, security: Fix automount superblock LSM init problem, preventing NFS
       sb sharing
     - [armel,armhf] ptrace: Restore syscall restart tracing
     - [armel,armhf] ptrace: Restore syscall skipping for tracers
     - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
     - [arm64] ptrace: Clean up error handling path in sve_set_common()
     - sched/psi: Select KERNFS as needed
     - [x86] decompressor: Don't rely on upper 32 bits of GPRs being preserved
     - [arm64] sme: Don't use streaming mode to probe the maximum SME VL
     - [arm64] fpsimd: Only provide the length to cpufeature for xCR registers
     - sched/rt: Fix sysctl_sched_rr_timeslice intial value
     - perf/imx_ddr: don't enable counter0 if none of 4 counters are used
     - [s390x] pkey: fix/harmonize internal keyblob headers
     - [s390x] pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL
     - [s390x] pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes
     - [s390x] paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
     - [x86] ACPI: x86: s2idle: Post-increment variables when getting constraints
     - [x86] ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table
     - thermal/of: Fix potential uninitialized value access
     - cpufreq: amd-pstate-ut: Remove module parameter access
     - cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver
     - [x86] efistub: Fix PCI ROM preservation in mixed mode
     - [x86] cpufreq: powernow-k8: Use related_cpus instead of cpus in
       driver.exit()
     - bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie
     - bpftool: Define a local bpf_perf_link to fix accessing its fields
     - bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c
     - bpftool: Use a local bpf_perf_event_value to fix accessing its fields
     - bpf: Clear the probe_addr for uprobe
     - bpf: Fix an error in verifying a field in a union
     - tcp: tcp_enter_quickack_mode() should be static
     - regmap: rbtree: Use alloc_flags for memory allocations
     - wifi: rtw89: debug: Fix error handling in
       rtw89_debug_priv_btc_manual_set()
     - wifi: mt76: mt7921: fix non-PSC channel scan fail
     - udp: re-score reuseport groups when connected sockets are present
     - bpf: reject unhashed sockets in bpf_sk_assign
     - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
     - [arm64,armhf] spi: tegra20-sflash: fix to check return value of
       platform_get_irq() in tegra_sflash_probe()
     - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
       in case of OOM
     - wifi: mt76: mt7915: fix power-limits while chan_switch
     - wifi: mwifiex: Fix OOB and integer underflow when rx packets
     - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
     - crypto: api - Use work queue in crypto_destroy_instance
     - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
     - Bluetooth: Fix potential use-after-free when clear keys
     - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor
     - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
     - net: tcp: fix unexcepted socket die when snd_wnd is 0
     - net-memcg: Fix scope of sockmem pressure indicators
     - ice: ice_aq_check_events: fix off-by-one check when filling buffer
     - [arm64,armhf] crypto: caam - fix unchecked return value error
     - [arm64,armhf] hwrng: iproc-rng200 - Implement suspend and resume calls
     - lwt: Fix return values of BPF xmit ops
     - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
     - fs: ocfs2: namei: check return value of ocfs2_add_entry()
     - net: annotate data-races around sk->sk_lingertime
     - wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
     - wifi: mwifiex: Fix missed return in oob checks failed path
     - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
     - wifi: ath9k: protect WMI command response buffer replacement with a lock
     - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute
     - mac80211: make ieee80211_tx_info padding explicit
     - wifi: mwifiex: avoid possible NULL skb pointer dereference
     - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
     - [arm64] mm: use ptep_clear() instead of pte_clear() in clear_flush()
     - wifi: ath9k: use IS_ERR() with debugfs_create_dir()
     - ice: avoid executing commands on other ports when driving sync
     - net: arcnet: Do not call kfree_skb() under local_irq_disable()
     - mlxsw: i2c: Fix chunk size setting in output mailbox buffer
     - mlxsw: i2c: Limit single transaction buffer size
     - mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter
     - sfc: Check firmware supports Ethernet PTP filter
     - net/sched: sch_hfsc: Ensure inner classes have fsc curve (CVE-2023-4623)
     - netrom: Deny concurrent connect().
     - quota: factor out dquot_write_dquot()
     - quota: rename dquot_active() to inode_quota_active()
     - quota: add new helper dquot_active()
     - quota: fix dqput() to follow the guarantees dquot_srcu should provide
     - drm/amd/display: Do not set drr on pipe commit
     - [arm64] dts: qcom: sm6350: Fix ZAP region
     - [arm64] dts: qcom: sm8250: correct dynamic power coefficients
     - [arm64] dts: qcom: msm8916-l8150: correct light sensor VDDIO supply
     - [arm64] dts: qcom: sm8250-edo: Add gpio line names for TLMM
     - [arm64] dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs
     - [arm64] dts: qcom: sm8250-edo: Rectify gpio-keys
     - [arm64] dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO
     - [arm64] dts: qcom: sc8280xp: Add missing SCM interconnect
     - [arm64] dts: qcom: msm8996: Add missing interrupt to the USB2 controller
     - [arm64] dts: qcom: sdm845-tama: Set serial indices and stdout-path
     - [arm64] dts: qcom: sm8350: Fix CPU idle state residency times
     - [arm64] dts: qcom: sm8350: Add missing LMH interrupts to cpufreq
     - [arm64] dts: qcom: sm8350: Use proper CPU compatibles
     - [arm64] dts: qcom: pm8350: fix thermal zone name
     - [arm64] dts: qcom: pm8350b: fix thermal zone name
     - [arm64] dts: qcom: pmr735b: fix thermal zone name
     - [arm64] dts: qcom: pmk8350: fix ADC-TM compatible string
     - [arm64] dts: qcom: sm8250: Mark PCIe hosts as DMA coherent
     - [armhf] dts: stm32: Rename mdio0 to mdio
     - [armhf] dts: stm32: YAML validation fails for Argon Boards
     - [armhf] dts: stm32: adopt generic iio bindings for adc channels on
       emstamp-argon
     - [armhf] dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon
     - [armhf] dts: stm32: YAML validation fails for Odyssey Boards
     - [armhf] dts: stm32: Add missing detach mailbox for Odyssey SoM
     - [armhf] dts: stm32: Update to generic ADC channel binding on DHSOM systems
     - [armhf] dts: stm32: Add missing detach mailbox for DHCOM SoM
     - [arm64] firmware: ti_sci: Use system_state to determine polling
     - drm/amdgpu: avoid integer overflow warning in
       amdgpu_device_resize_fb_bar()
     - [arm64] tegra: Fix HSUART for Jetson AGX Orin
     - [arm64] dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again
     - [arm64] dts: qcom: pm6150l: Add missing short interrupt
     - [arm64] dts: qcom: pm660l: Add missing short interrupt
     - [arm64] dts: qcom: pmi8994: Add missing OVP interrupt
     - [arm64] tegra: Fix HSUART for Smaug
     - [arm64,armhf] drm/etnaviv: fix dumping of active MMU context
     - block: cleanup queue_wc_store
     - block: don't allow enabling a cache on devices that don't support it
     - [x86] mm: Fix PAT bit missing from page protection modify mask
     - [arm64] drm: adv7511: Fix low refresh rate register for ADV7533/5
     - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
     - md: Factor out is_md_suspended helper
     - md: Change active_io to percpu
     - md: restore 'noio_flag' for the last mddev_resume()
     - md/raid10: factor out dereference_rdev_and_rrdev()
     - md/raid10: use dereference_rdev_and_rrdev() to get devices
     - md/md-bitmap: remove unnecessary local variable in backlog_store()
     - md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
     - [arm64] drm/msm: Update dev core dump to not print backwards
     - [arm64,armhf] drm/tegra: dpaux: Fix incorrect return value of
       platform_get_irq
     - [arm64] dts: qcom: sm8150: Fix the I2C7 interrupt
     - [armhf] drm/armada: Fix off-by-one error in armada_overlay_get_property()
     - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
     - drm/panel: simple: Add missing connector type and pixel format for AUO
       T215HVN01
     - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
     - [arm64] drm/msm/mdp5: Don't leak some plane state
     - [arm64] firmware: meson_sm: fix to avoid potential NULL pointer
       dereference
     - [arm64] drm/msm/dpu: fix the irq index in
       dpu_encoder_phys_wb_wait_for_commit_done
     - smackfs: Prevent underflow in smk_set_cipso()
     - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
     - [arm64] drm/msm/a2xx: Call adreno_gpu_init() earlier
     - audit: fix possible soft lockup in __audit_inode_child()
     - block/mq-deadline: use correct way to throttling write requests
     - io_uring: fix drain stalls by invalid SQE
     - [armhf] bus: ti-sysc: Fix cast to enum warning
     - md/raid5-cache: fix a deadlock in r5l_exit_log()
     - md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()
     - firmware: cs_dsp: Fix new control name check
     - md: add error_handlers for raid0 and linear
     - md/raid0: Factor out helper for mapping and submitting a bio
     - md/raid0: Fix performance regression for large sequential writes
     - md: raid0: account for split bio in iostat accounting
     - of: overlay: Call of_changeset_init() early
     - ALSA: ac97: Fix possible error value of *rac97
     - ipmi:ssif: Add check for kstrdup
     - ipmi:ssif: Fix a memory leak when scanning for an adapter
     - PCI/DOE: Fix destroy_work_on_stack() race
     - [arm64,armhf] clk: sunxi-ng: Modify mismatched function name
     - [amd64] EDAC/igen6: Fix the issue of no error events
     - ext4: correct grp validation in ext4_mb_good_group
     - ext4: avoid potential data overflow in next_linear_group
     - kvm/vfio: Prepare for accepting vfio device fd
     - kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add()
     - PCI: microchip: Correct the DED and SEC interrupt bit offsets
     - PCI: Mark NVIDIA T4 GPUs to avoid bus reset
     - [armhf] pinctrl: mcp23s08: check return value of devm_kasprintf()
     - PCI: Allow drivers to request exclusive config regions
     - PCI: Add locking to RMW PCI Express Capability Register accessors
     - PCI: pciehp: Use RMW accessors for changing LNKCTL
     - PCI/ASPM: Use RMW accessors for changing LNKCTL
     - [powerpc*] radix: Move some functions into #ifdef
       CONFIG_KVM_BOOK3S_HV_POSSIBLE
     - vfio/type1: fix cap_migration information leak
     - [amd64,arm64] nvdimm: Fix memleak of pmu attr_groups in
       unregister_nvdimm_pmu()
     - [arm64,arm64] nvdimm: Fix dereference after free in register_nvdimm_pmu()
     - [powerpc*] fadump: reset dump area size if fadump memory reserve fails
     - [powerpc*] perf: Convert fsl_emb notifier to state machine callbacks
     - drm/amdgpu: Use RMW accessors for changing LNKCTL
     - drm/radeon: Use RMW accessors for changing LNKCTL
     - net/mlx5: Use RMW accessors for changing LNKCTL
     - wifi: ath11k: Use RMW accessors for changing LNKCTL
     - wifi: ath10k: Use RMW accessors for changing LNKCTL
     - NFSv4.2: Rework scratch handling for READ_PLUS
     - NFSv4.2: Fix READ_PLUS smatch warnings
     - NFSv4.2: Fix up READ_PLUS alignment
     - NFSv4.2: Fix READ_PLUS size calculations
     - [powerpc*] Don't include lppaca.h in paca.h
     - [powerpc*] pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
     - nfs/blocklayout: Use the passed in gfp flags
     - [powerpc*] pseries: Fix hcall tracepoints with JUMP_LABEL=n
     - [powerpc*] mpc5xxx: Add missing fwnode_handle_put()
     - [powerpc*] iommu: Fix notifiers being shared by PCI and VIO buses
     - ext4: fix unttached inode after power cut with orphan file feature enabled
     - jfs: validate max amount of blocks before allocation.
     - fs: lockd: avoid possible wrong NULL parameter
     - NFSD: da_addr_body field missing in some GETDEVICEINFO replies
     - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
     - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
     - pNFS: Fix assignment of xprtdata.cred
     - cgroup/cpuset: Inherit parent's load balance state in v2
     - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah()
     - media: ov5640: fix low resolution image abnormal issue
     - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
     - media: i2c: tvp5150: check return value of devm_kasprintf()
     - media: v4l2-core: Fix a potential resource leak in
       v4l2_fwnode_parse_link()
     - [amd64] iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on
       pasid unbind
     - [arm64,armhf] iommu: rockchip: Fix directory table address encoding
     - drivers: usb: smsusb: fix error handling code in smsusb_init_device
     - media: dib7000p: Fix potential division by zero
     - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
     - media: cx24120: Add retval check for cx24120_message_send()
     - RDMA/siw: Fabricate a GID on tun and loopback devices
     - [arm64] scsi: hisi_sas: Fix warnings detected by sparse
     - [arm64] scsi: hisi_sas: Fix normally completed I/O analysed as failed
     - dt-bindings: extcon: maxim,max77843: restrict connector properties
     - media: rkvdec: increase max supported height for H.264
     - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
     - scsi: RDMA/srp: Fix residual handling
     - scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
     - scsi: iscsi: Add length check for nlattr payload
     - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
     - scsi: be2iscsi: Add length check when parsing nlattrs
     - scsi: qla4xxx: Add length check when parsing nlattrs
     - serial: sprd: Assign sprd_port after initialized to avoid wrong access
     - serial: sprd: Fix DMA buffer leak issue
     - [x86] APM: drop the duplicate APM_MINOR_DEV macro
     - RDMA/rxe: Split rxe_run_task() into two subroutines
     - RDMA/rxe: Fix incomplete state save in rxe_requester
     - scsi: qedf: Do not touch __user pointer in
       qedf_dbg_stop_io_on_error_cmd_read() directly
     - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
       directly
     - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
       directly
     - RDMA/irdma: Replace one-element array with flexible-array member
     - [arm64] coresight: tmc: Explicit type conversions to prevent integer
       overflow
     - interconnect: qcom: qcm2290: Enable sync state
     - dma-buf/sync_file: Fix docs syntax
     - driver core: test_async: fix an error code
     - driver core: Call dma_cleanup() on the test_remove path
     - kernfs: add stub helper for kernfs_generic_poll()
     - extcon: cht_wc: add POWER_SUPPLY dependency
     - iommu/sprd: Add missing force_aperture
     - [arm64] RDMA/hns: Fix port active speed
     - [arm64] RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
     - [arm64] RDMA/hns: Fix inaccurate error label name in init instance
     - [arm64] RDMA/hns: Fix CQ and QP cache affinity
     - IB/uverbs: Fix an potential error pointer dereference
     - fsi: aspeed: Reset master errors after CFAM reset
     - [amd64] iommu/vt-d: Fix to flush cache of PASID directory table
     - [x86] platform/x86: dell-sysman: Fix reference leak
     - media: cec: core: add adap_nb_transmit_canceled() callback
     - media: cec: core: add adap_unconfigured() callback
     - media: go7007: Remove redundant if statement
     - media: venus: hfi_venus: Only consider sys_idle_indicator on V1
     - docs: ABI: fix spelling/grammar in SBEFIFO timeout interface
     - USB: gadget: core: Add missing kerneldoc for vbus_work
     - USB: gadget: f_mass_storage: Fix unused variable warning
     - drivers: base: Free devm resources when unregistering a device
     - HID: input: Support devices sending Eraser without Invert
     - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
     - media: ov5640: Fix initial RESETB state and annotate timings
     - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
     - media: ov2680: Remove auto-gain and auto-exposure controls
     - media: ov2680: Fix ov2680_bayer_order()
     - media: ov2680: Fix vflip / hflip set functions
     - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s
     - media: ov2680: Don't take the lock for try_fmt calls
     - media: ov2680: Add ov2680_fill_format() helper function
     - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not
       working
     - media: ov2680: Fix regulators being left enabled on ov2680_power_on()
       errors
     - media: i2c: rdacm21: Fix uninitialized value
     - f2fs: fix to avoid mmap vs set_compress_option case
     - f2fs: judge whether discard_unit is section only when have
       CONFIG_BLK_DEV_ZONED
     - f2fs: Only lfs mode is allowed with zoned block device feature
     - Revert "f2fs: fix to do sanity check on extent cache correctly"
     - cgroup:namespace: Remove unused cgroup_namespaces_init()
     - [arm64] coresight: trbe: Fix TRBE potential sleep in atomic context
     - RDMA/irdma: Prevent zero-length STAG registration (CVE-2023-25775)
     - scsi: core: Use 32-bit hostnum in scsi_host_lookup()
     - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
     - [arm64,armhf] serial: tegra: handle clk prepare error in
       tegra_uart_hw_init()
     - [arm64,armhf] amba: bus: fix refcount leak
     - Revert "IB/isert: Fix incorrect release of isert connection"
     - RDMA/siw: Balance the reference of cep->kref in the error path
     - RDMA/siw: Correct wrong debug message
     - RDMA/efa: Fix wrong resources deallocation order
     - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
     - HID: uclogic: Correct devm device reference for hidinput input_dev name
     - HID: multitouch: Correct devm device reference for hidinput input_dev name
     - [x86] platform/x86/amd/pmf: Fix a missing cleanup path
     - tick/rcu: Fix false positive "softirq work is pending" messages
     - [x86] speculation: Mark all Skylake CPUs as vulnerable to GDS
     - tracing: Remove extra space at the end of hwlat_detector/mode
     - tracing: Fix race issue between cpu buffer write and swap
     - mtd: rawnand: brcmnand: Fix mtd oobsize
     - dmaengine: idxd: Modify the dependence of attribute pasid_enabled
     - [arm64,armhf] phy/rockchip: inno-hdmi: use correct vco_div_5 macro on
       rk3328
     - [arm64,armhf] phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
       recalc_rate
     - [arm64,armhf] phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
       reg write
     - rpmsg: glink: Add check for kstrdup
     - leds: pwm: Fix error code in led_pwm_create_fwnode()
     - leds: multicolor: Use rounded division when calculating color components
     - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false
     - leds: trigger: tty: Do not use LED_ON/OFF constants, use
       led_blink_set_oneshot instead
     - mtd: spi-nor: Check bus width while setting QE bit
     - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
     - dmaengine: ste_dma40: Add missing IRQ check in d40_probe
     - Drivers: hv: vmbus: Don't dereference ACPI root object handle
     - cpufreq: Fix the race condition while updating the transition_task of
       policy
     - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
     - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (CVE-2023-42752)
     - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
       ip_set_hash_netportnet.c (CVE-2023-42753)
     - netfilter: nft_exthdr: Fix non-linear header modification
     - netfilter: xt_u32: validate user space input
     - netfilter: xt_sctp: validate the flag_info count
     - skbuff: skb_segment, Call zero copy functions before using skbuff frags
     - igb: set max size RX buffer when store bad packet is enabled
     - PM / devfreq: Fix leak in devfreq_dev_release()
     - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
     - rcu: dump vmalloc memory info safely
     - printk: ringbuffer: Fix truncating buffer size min_t cast
     - scsi: core: Fix the scsi_set_resid() documentation
     - mm/vmalloc: add a safer version of find_vm_area() for debug
     - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
     - media: i2c: ccs: Check rules is non-NULL
     - media: i2c: Add a camera sensor top level menu
     - PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address
     - ipmi_si: fix a memleak in try_smi_init()
     - [armhf] OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
     - XArray: Do not return sibling entries from xa_load() (Closes: #1053120)
     - io_uring: break iopolling on signal
     - backlight/gpio_backlight: Compare against struct fb_info.device
     - backlight/bd6107: Compare against struct fb_info.device
     - backlight/lv5207lp: Compare against struct fb_info.device
     - drm/amd/display: register edp_backlight_control() for DCN301
     - i3c: master: svc: fix probe failure when no i3c device exist
     - [arm64] csum: Fix OoB access in IP checksum code for negative lengths
     - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs.
     - media: dvb: symbol fixup for dvb_attach() (Closes: #1051613)
     - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
       interrupts
     - Revert "scsi: qla2xxx: Fix buffer overrun"
     - scsi: mpt3sas: Perform additional retries if doorbell read returns 0
     - PCI: Free released resource after coalescing
     - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
     - PCI/PM: Only read PCI_PM_CTRL register when available
     - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
     - block: don't add or resize partition on the disk with GENHD_FL_NO_PART
     - procfs: block chmod on /proc/thread-self/comm
     - drm/amd/display: Add smu write msg id fail retry process
     - bpf: Fix issue in verifying allow_ptr_leaks
     - dlm: fix plock lookup when using multiple lockspaces
     - dccp: Fix out of bounds access in DCCP error handler
     - [x86] sev: Make enc_dec_hypercall() accept a size instead of npages
     - r8169: fix ASPM-related issues on a number of systems with NIC version
       from RTL8168h
     - X.509: if signature is unsupported skip validation
     - net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
     - fsverity: skip PKCS#7 parser when keyring is empty
     - [x86] MCE: Always save CS register on AMD Zen IF Poison errors
     - platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER
     - [arm64] mmc: renesas_sdhi: register irqs before registering controller
     - pstore/ram: Check start of empty przs during init
     - [arm64] sdei: abort running SDEI handlers during crash
     - [s390x] dcssblk: fix kernel crash with list_add corruption
     - [s390x] ipl: add missing secure/has_secure file to ipl type 'unknown'
     - [s390x] dasd: fix string length handling
     - [armhf] crypto: stm32 - fix loop iterating through scatterlist for DMA
     - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
     - of: property: fw_devlink: Add a devlink for panel followers
     - usb: typec: tcpm: set initial svdm version based on pd revision
     - usb: typec: bus: verify partner exists in typec_altmode_attention
     - USB: core: Unite old scheme and new scheme descriptor reads
     - USB: core: Change usb_get_device_descriptor() API
     - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
     - USB: core: Fix oversight in SuperSpeed initialization
     - [x86] sgx: Break up long non-preemptible delays in sgx_vepc_release()
     - [x86] perf/x86/uncore: Correct the number of CHAs on EMR
     - tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
     - Revert "drm/amd/display: Do not set drr on pipe commit"
     - md: Free resources in __md_stop
     - NFSv4.2: Fix a potential double free with READ_PLUS
     - NFSv4.2: Rework scratch handling for READ_PLUS (again)
     - md: fix regression for null-ptr-deference in __md_stop()
     - clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro
     - treewide: Fix probing of devices in DT overlays
     - clk: Avoid invalid function names in CLK_OF_DECLARE()
     - udf: initialize newblock to 0
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.54
     - net/ipv6: SKB symmetric hash should incorporate transport ports
     - mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
     - Multi-gen LRU: fix per-zone reclaim
     - io_uring: always lock in io_apoll_task_func
     - io_uring: revert "io_uring fix multishot accept ordering"
     - io_uring/net: don't overflow multishot accept
     - io_uring: break out of iowq iopoll on teardown
     - io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
     - io_uring: Don't set affinity on a dying sqpoll thread
     - drm/virtio: Conditionally allocate virtio_gpu_fence
     - scsi: qla2xxx: Adjust IOCB resource on qpair create
     - scsi: qla2xxx: Limit TMF to 8 per function
     - scsi: qla2xxx: Fix deletion race condition
     - scsi: qla2xxx: fix inconsistent TMF timeout
     - scsi: qla2xxx: Fix command flush during TMF
     - scsi: qla2xxx: Fix erroneous link up failure
     - scsi: qla2xxx: Turn off noisy message log
     - scsi: qla2xxx: Fix session hang in gnl
     - scsi: qla2xxx: Fix TMF leak through
     - scsi: qla2xxx: Remove unsupported ql2xenabledif option
     - scsi: qla2xxx: Flush mailbox commands on chip reset
     - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
     - scsi: qla2xxx: Error code did not return to upper layer
     - scsi: qla2xxx: Fix firmware resource tracking
     - null_blk: fix poll request timeout handling
     - drm/ast: Fix DRAM init on AST2200
     - send channel sequence number in SMB3 requests after reconnects
     - memcg: drop kmem.limit_in_bytes
     - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
     - cifs: update desired access while requesting for directory lease
     - [x86] pinctrl: cherryview: fix address_space_handler() argument
     - dt-bindings: clock: xlnx,versal-clk: drop select:false
     - [arm64,armhf] clk: imx: pll14xx: dynamically configure PLL for
       393216000/361267200Hz
     - [arm64,armhf] clk: imx: pll14xx: align pdiv with reference manual
     - NFS: Fix a potential data corruption
     - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
     - bus: mhi: host: Skip MHI reset if device is in RDDM
     - net: add SKB_HEAD_ALIGN() helper
     - net: remove osize variable in __alloc_skb()
     - net: factorize code in kmalloc_reserve()
     - net: deal with integer overflows in kmalloc_reserve() (CVE-2023-42752)
     - tpm_crb: Fix an error handling path in crb_acpi_add()
     - gfs2: Switch to wait_event in gfs2_logd
     - gfs2: low-memory forced flush fixes
     - kconfig: fix possible buffer overflow
     - Input: iqs7222 - configure power mode before triggering ATI
     - perf trace: Use zfree() to reduce chances of use after free
     - perf trace: Really free the evsel->priv area
     - backlight: gpio_backlight: Drop output GPIO direction check for initial
       power state
     - Input: tca6416-keypad - always expect proper IRQ number in i2c client
     - Input: tca6416-keypad - fix interrupt enable disbalance
     - perf annotate bpf: Don't enclose non-debug code with an assert()
     - [x86] virt: Drop unnecessary check on extended CPUID level in
       cpu_has_svm()
     - perf vendor events: Update the JSON/events descriptions for power10
       platform
     - perf vendor events: Drop some of the JSON/events for power10 platform
     - perf vendor events: Drop STORES_PER_INST metric event for power10 platform
     - perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
     - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
     - pwm: lpc32xx: Remove handling of PWM channels
     - [x86] drm/i915: mark requests for GuC virtual engines to avoid
       use-after-free
     - blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
     - blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
     - cifs: use fs_context for automounts
     - smb: propagate error code of extract_sharename()
     - net/sched: fq_pie: avoid stalls in fq_pie_timer()
     - sctp: annotate data-races around sk->sk_wmem_queued
     - ipv4: annotate data-races around fi->fib_dead
     - net: read sk->sk_family once in sk_mc_loop()
     - net: fib: avoid warn splat in flow dissector
     - xsk: Fix xsk_diag use-after-free error during socket cleanup
     - [x86] drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct
       page"
     - [x86] drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
     - [x86] drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
     - net: use sk_forward_alloc_get() in sk_get_meminfo()
     - net: annotate data-races around sk->sk_forward_alloc
     - mptcp: annotate data-races around msk->rmem_fwd_alloc
     - ipv4: ignore dst hint for multipath routes
     - ipv6: ignore dst hint for multipath routes
     - igb: disable virtualization features on 82580
     - gve: fix frag_list chaining
     - veth: Fixing transmit return status for dropped packets
     - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
     - net: phy: micrel: Correct bit assignments for phy_device flags
     - bpf, sockmap: Fix skb refcnt race after locking changes
     - af_unix: Fix data-races around user->unix_inflight.
     - af_unix: Fix data-race around unix_tot_inflight.
     - af_unix: Fix data-races around sk->sk_shutdown.
     - af_unix: Fix data race around sk->sk_err.
     - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (CVE-2023-4921)
     - kcm: Destroy mutex in kcm_exit_net()
     - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
     - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
     - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
     - [s390x] zcrypt: don't leak memory if dev_set_name() fails
     - idr: fix param name in idr_alloc_cyclic() doc
     - ip_tunnels: use DEV_STATS_INC()
     - bpf: Remove prog->active check for bpf_lsm and bpf_iter
     - bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in
       kern_sys_bpf().
     - bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
     - netfilter: nftables: exthdr: fix 4-byte stack OOB write
     - netfilter: nfnetlink_osf: avoid OOB read
     - [arm64] net: hns3: fix tx timeout issue
     - [arm64] net: hns3: fix byte order conversion issue in
       hclge_dbg_fd_tcam_read()
     - [arm64] net: hns3: fix debugfs concurrency issue between kfree buffer and
       read
     - [arm64] net: hns3: fix invalid mutex between tc qdisc and dcb ets command
       issue
     - [arm64] net: hns3: fix the port information display when sfp is absent
     - [arm64] net: hns3: remove GSO partial feature bit
     - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
     - Multi-gen LRU: avoid race in inc_min_seq()
     - net/mlx5: Free IRQ rmap and notifier on kernel shutdown
     - clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
     - jbd2: fix checkpoint cleanup performance regression
     - jbd2: check 'jh->b_transaction' before removing it from checkpoint
     - jbd2: correct the end of the journal recovery scan range
     - ext4: add correct group descriptors and reserved GDT blocks to system zone
     - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
     - f2fs: flush inode if atomic file is aborted
     - f2fs: avoid false alarm of circular locking
     - hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
     - ata: ahci: Add Elkhart Lake AHCI controller
     - ata: pata_falcon: fix IO base selection for Q40
     - ata: sata_gemini: Add missing MODULE_DESCRIPTION
     - ata: pata_ftide010: Add missing MODULE_DESCRIPTION
     - fuse: nlookup missing decrement in fuse_direntplus_link
     - btrfs: zoned: do not zone finish data relocation block group
     - btrfs: fix start transaction qgroup rsv double free
     - btrfs: free qgroup rsv on io failure
     - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
     - btrfs: set page extent mapped after read_folio in relocate_one_page
     - btrfs: zoned: re-enable metadata over-commit for zoned mode
     - btrfs: use the correct superblock to compare fsid in btrfs_validate_super
     - [arm64] drm/mxsfb: Disable overlay plane in
       mxsfb_plane_overlay_atomic_disable()
     - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
     - drm/amd/display: prevent potential division by zero errors
     - [x86] KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical
       ID entry
     - [x86] KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
     - [x86] KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost
       migration
     - [x86] KVM: nSVM: Check instead of asserting on nested TSC scaling support
     - [x86] KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
     - [x86] KVM: SVM: Set target pCPU during IRTE update if target vCPU is
       running
     - [x86] KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
     - perf hists browser: Fix hierarchy mode header
     - perf test shell stat_bpf_counters: Fix test on Intel
     - perf tools: Handle old data in PERF_RECORD_ATTR
     - perf hists browser: Fix the number of entries for 'e' key
     - drm/amd/display: always switch off ODM before committing more streams
     - drm/amd/display: Remove wait while locked
     - drm/amdgpu: register a dirty framebuffer callback for fbcon
       (Closes: #1037142)
     - net: ipv4: fix one memleak in __inet_del_ifa()
     - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in
       smcr_port_add
     - net: stmmac: fix handling of zero coalescing tx-usecs
     - net: ethernet: mvpp2_main: fix possible OOB write in
       mvpp2_ethtool_get_rxnfc()
     - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
       mtk_hwlro_get_fdir_all()
     - hsr: Fix uninit-value access in fill_frame_info()
     - net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast
       address
     - net:ethernet:adi:adin1110: Fix forwarding offload
     - r8152: check budget for r8152_poll()
     - kcm: Fix memory leak in error path of kcm_sendmsg()
     - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
     - net: macb: Enable PTP unicast
     - net: macb: fix sleep inside spinlock
     - ipv6: fix ip6_sock_set_addr_preferences() typo
     - ipv6: Remove in6addr_any alternatives.
     - tcp: Factorise sk_family-independent comparison in
       inet_bind2_bucket_match(_addr_any).
     - tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
     - tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
     - ixgbe: fix timestamp configuration code
     - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
     - drm/amd/display: Fix a bug when searching for insert_above_mpcc
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.55
     - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
     - btrfs: output extra debug info if we failed to find an inline backref
     - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
     - kernel/fork: beware of __put_task_struct() calling context
     - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to
       _idle()
     - [x86] ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
     - [arm64] perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
     - [amr64] perf/imx_ddr: speed up overflow frequency of cycle
     - hw_breakpoint: fix single-stepping when using bpf_overflow_handler
     - [x86] ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
     - devlink: remove reload failed checks in params get/set callbacks
     - crypto: lrw,xts - Replace strlcpy with strscpy
     - ice: Don't tx before switchdev is fully configured
     - wifi: ath9k: fix fortify warnings
     - wifi: ath9k: fix printk specifier
     - wifi: mwifiex: fix fortify warning
     - mt76: mt7921: don't assume adequate headroom for SDIO headers
     - wifi: wil6210: fix fortify warnings
     - [armhf] can: sun4i_can: Add acceptance register quirk
     - [armhf] can: sun4i_can: Add support for the Allwinner D1
     - net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
     - net/ipv4: return the real errno instead of -EINVAL
     - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
     - Bluetooth: Fix hci_suspend_sync crash
     - netlink: convert nlk->flags to atomic flags
     - tpm_tis: Resend command to recover from data transfer errors
     - [arm64,armhf] mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
     - alx: fix OOB-read compiler warning
     - wifi: mac80211: check S1G action frame size
     - netfilter: ebtables: fix fortify warnings in size_entry_mwt()
     - wifi: cfg80211: reject auth/assoc to AP with our address
     - wifi: cfg80211: ocb: don't leave if not joined
     - wifi: mac80211: check for station first in client probe
     - wifi: mac80211_hwsim: drop short frames
     - drm/bridge: tc358762: Instruct DSI host to generate HSE packets
     - drm/edid: Add quirk for OSVR HDK 2.0
     - [arm64] dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm6350: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm8150-kumano: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm8250-edo: correct ramoops pmsg-size
     - drm/amd/display: Fix underflow issue on 175hz timing
     - [x86] ASoC: SOF: topology: simplify code to prevent static analysis
       warnings
     - [x86] ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
     - [x86] ALSA: hda: intel-dsp-cfg: add LunarLake support
     - drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
     - drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
     - drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
     - [armhf] drm/exynos: fix a possible null-pointer dereference due to data
       race in exynos_drm_crtc_atomic_disable()
     - [armhf] bus: ti-sysc: Configure uart quirks for k3 SoC
     - md: raid1: fix potential OOB in raid1_remove_disk()
     - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
     - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
     - [arm64,armhf] PCI: dwc: Provide deinit callback for i.MX
     - [armel,armhf] 9317/1: kexec: Make smp stop calls asynchronous
     - [powerpc*] pseries: fix possible memory leak in ibmebus_bus_init()
     - PCI: vmd: Disable bridge window for domain reset
     - PCI: fu740: Set the number of MSI vectors
     - media: mdp3: Fix resource leaks in of_find_device_by_node
     - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
     - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
     - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
     - media: anysee: fix null-ptr-deref in anysee_master_xfer
     - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
     - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
     - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is
       detected
     - media: tuners: qt1010: replace BUG_ON with a regular error
     - media: pci: cx23885: replace BUG with error return
     - usb: cdns3: Put the cdns set active part outside the spin lock
     - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
     - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
     - serial: cpm_uart: Avoid suspicious locking
     - misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
     - usb: ehci: add workaround for chipidea PORTSC.PEC bug
     - usb: chipidea: add workaround for chipidea PEC bug
     - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler
       warning
     - kobject: Add sanity check for kset->kobj.ktype in kset_register()
     - [armhf] interconnect: Fix locking for runpm vs reclaim
     - printk: Keep non-panic-CPUs out of console lock
     - printk: Consolidate console deferred printing
     - dma-buf: Add unlocked variant of attachment-mapping functions
     - misc: fastrpc: Prepare to dynamic dma-buf locking specification
     - misc: fastrpc: Fix incorrect DMA mapping unmap request
     - btrfs: add a helper to read the superblock metadata_uuid
     - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
     - block: factor out a bvec_set_page helper
     - nvmet: use bvec_set_page to initialize bvecs
     - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
     - drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
     - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
     - [x86] ibt: Suppress spurious ENDBR
     - scsi: target: core: Fix target_cmd_counter leak
     - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
     - panic: Reenable preemption in WARN slowpath
     - [x86] boot/compressed: Reserve more memory for page tables
     - [x86] purgatory: Remove LTO flags
     - md/raid1: fix error: ISO C90 forbids mixed declarations
     - Revert "SUNRPC: Fail faster on bad verifier"
     - attr: block mode changes of symlinks
     - ovl: fix failed copyup of fileattr on a symlink
     - ovl: fix incorrect fdput() on aio completion
     - io_uring/net: fix iter retargeting for selected buf
     - nvme: avoid bogus CRTO values
     - md: Put the right device in md_seq_next
     - Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
     - dm: don't attempt to queue IO under RCU protection
     - btrfs: fix lockdep splat and potential deadlock after failure running
       delayed items
     - btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
     - btrfs: release path before inode lookup during the ino lookup ioctl
     - btrfs: check for BTRFS_FS_ERROR in pending ordered assert
     - tracing: Have tracing_max_latency inc the trace array ref count
     - tracing: Have event inject files inc the trace array ref count
     - tracing: Increase trace array ref count on enable and filter files
     - tracing: Have current_trace inc the trace array ref count
     - tracing: Have option files inc the trace array ref count
     - selinux: fix handling of empty opts in selinux_fs_context_submount()
     - nfsd: fix change_info in NFSv4 RENAME replies
     - tracefs: Add missing lockdown check to tracefs_create_dir()
     - [armhf] i2c: aspeed: Reset the i2c controller when timeout occurs
     - ata: libata: disallow dev-initiated LPM transitions to unsupported states
     - ata: libahci: clear pending interrupt status
     - scsi: megaraid_sas: Fix deadlock on firmware crashdump
     - scsi: pm8001: Setup IRQs on resume
     - ext4: fix rec_len verify error
     - drm/amd/display: fix the white screen issue when >= 64GB DRAM
     - Revert "memcg: drop kmem.limit_in_bytes"
     - drm/amdgpu: fix amdgpu_cs_p1_user_fence
     - net/sched: Retire rsvp classifier (CVE-2023-42755)
     - [arm64,armhf] interconnect: Teach lockdep about icc_bw_lock order
 .
   [ Bastian Blank ]
   * Backport changes in Microsoft Azure Network Adapter up to 6.6.
     (closes: #1035378)
 .
   [ Salvatore Bonaccorso ]
   * [armel/marvell] Disable features to shrink kernel image (fixes FTBFS):
     - tcp: Disable MPTCP
     - tracing: Disable FUNCTION_TRACER
   * Bump ABI to 13
   * [rt] Update to 6.1.54-rt15
   * Drop now unknown config options for IPv4 and IPv6 Resource Reservation
     Protocol (RSVP, RSVP6)
   * [rt] Refresh "printk: Bring back the RT bits."
   * [rt] Refresh "printk: avoid preempt_disable() for PREEMPT_RT"
   * [rt] Drop "kernel/fork: beware of __put_task_struct() calling context"
     (applied upstream)
   * netfilter: nf_tables: don't skip expired elements during walk
     (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction API to avoid race with control plane
     (CVE-2023-4244)
   * netfilter: nf_tables: adapt set backend to use GC transaction API
     (CVE-2023-4244)
   * netfilter: nft_set_hash: mark set element as dead when deleting from packet
     path (CVE-2023-4244)
   * netfilter: nf_tables: remove busy mark and gc batch API (CVE-2023-4244)
   * netfilter: nf_tables: don't fail inserts if duplicate has expired
   * netfilter: nf_tables: fix GC transaction races with netns and netlink event
     exit path (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction race with netns dismantle
     (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction race with abort path
   * netfilter: nf_tables: use correct lock to protect gc_list
   * netfilter: nf_tables: defer gc run if previous batch is still pending
   * netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
   * netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
   * netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
   * netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation
     fails
   * netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
   * netfilter: nf_tables: fix memleak when more than 255 elements expired
   * netfilter: nf_tables: disallow element removal on anonymous sets
   * netfilter: conntrack: fix extension size table
   * netfilter, bpf: Adjust timeouts of non-confirmed CTs in
     bpf_ct_insert_entry()
   * netfilter: nf_tables: disable toggling dormant table state more than once
   * netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
     (CVE-2023-42756)
   * misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
     probe (Closes: #1052063)
   * ipv4: fix null-deref in ipv4_link_failure
 .
   [ Vincent Blut ]
   * drivers/char/hw_random: Change HW_RANDOM from module to built-in
     (Closes: #1041007)
   * drivers/char/tpm: Do not explicitly set HW_RANDOM_TPM
   * [arm64, cloud, x86] drivers/char/tpm: Do not explicitly enable TCG_TPM
   * [arm*,ppc64*,sparc64,s390x] drivers/char/hw_random: Prevent some HW Random
     Number Generator drivers from being built-in
Checksums-Sha1:
 be6387b04b6682bd3904c201b30f096fdacc7dad 290924 linux_6.1.55-1.dsc
 c3767a7b40c0dc3da40f8885fb9045825310495c 137442320 linux_6.1.55.orig.tar.xz
 9a555b2e13f1783b6af858aef6f72e801425a948 1576156 linux_6.1.55-1.debian.tar.xz
 9dd66ff74a306619174a6d88ecc80a3834f4681a 6865 linux_6.1.55-1_source.buildinfo
Checksums-Sha256:
 8760260a25cc7b736da66f077d7c7f54bd69d47c831e56a140c6ebc90ef1de36 290924 linux_6.1.55-1.dsc
 ee357e99de203942c839202449e023d131d516af32734e06501d4814eda1ce47 137442320 linux_6.1.55.orig.tar.xz
 b9b6cd90ec51d67547c3f73b8a92b44ed7ab96cc9986aafdea2803e645ce717b 1576156 linux_6.1.55-1.debian.tar.xz
 74a91cddde6a7759fc24368ea9b507978f9c28c1733f64d9c7072d93c791871e 6865 linux_6.1.55-1_source.buildinfo
Files:
 a031aa21ba50124042000634451c59b5 290924 kernel optional linux_6.1.55-1.dsc
 8b056d1d4b52646798f9f51548f54da7 137442320 kernel optional linux_6.1.55.orig.tar.xz
 fe9e041e081e69251a7a92a5e146925e 1576156 kernel optional linux_6.1.55-1.debian.tar.xz
 06a08348a3db4f213fa947aafb85f66e 6865 kernel optional linux_6.1.55-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=PQxI
-----END PGP SIGNATURE-----